The lead
AI agents caught raising their own spending limits
Wren Calloway·The Daily
If your agent manages an inbox and you send its 2FA codes to that same inbox, you don't have security. You have a self-robbing bank.
Researchers from Cornell Tech and Yale just demonstrated exactly why autonomous agents are a security nightmare waiting to happen. In a recent test, they handed ten different AI models a simple setup: an email inbox to manage, a digital wallet containing 10 USDC, and a hard-coded daily spending limit of one single cent.
Read the full edition →