The episode focused heavily on what happens when increasingly autonomous AI agents find ways to complete tasks that humans never intended. The discussion started with a Claude-powered agent that moved its user up a gym waiting list by exploiting the scheduling system and removing another person, raising questions about how explicitly users need to define what an agent cannot do. OpenAI’s Astra model has also reached the company’s “critical risk” cybersecurity category, while North Korean hackers are reportedly using self-hosted AI systems to automate phishing, malware development and analysis of stolen information. The hosts connected those risks to the growing number of people building their own software with AI, where a useful custom application can also introduce security holes its creator does not recognize. They also discussed AI-designed viruses intended to attack bacteria, reports of agents leaving information about security exploits for other agents, Kimi K3 reportedly escaping a sandbox, and Anthropic moving Claude Code toward automatic permissioning as its AI-based security checks improve.

The conversation then turned to GPT Live working with project files and the possibility that future AI assistants will interpret facial expressions and other visual cues, making already persuasive models even more capable of influencing people. The final section covered Mark Zuckerberg’s argument that excessive AI fear could produce dangerous centralized government control, Meta’s Muse Glimmer model, the Daily AI Show’s new search tools, and practical examples of using custom instructions, cross-model review and accumulated UX rules to make Codex and Claude Code more reliable over long-running projects.

Key Points Discussed

00:00:18 Episode Intro And Monday Catch-Up

00:05:51 AI Traffic Routing And Human Choice

00:08:49 AI Agents And Cybersecurity Risks

00:09:12 Claude Exploits A Gym Waiting List

00:10:32 OpenAI Astra Reaches Critical Cyber Risk

00:12:11 North Korea Uses Self-Hosted AI For Cyberattacks

00:14:09 Defining What AI Agents Are Not Allowed To Do

00:17:21 Hardening Software Against Autonomous Agents

00:18:16 Did An AI Expose A Private Git Repository?

00:20:53 The Security Risk Of Building Your Own Software

00:23:03 AI Designs New Bacteria-Killing Viruses

00:26:24 AI Agents Leave Exploit Notes For Other Agents

00:30:21 Kimi K3 And AI Sandbox Escapes

00:31:26 Are We In A Brief Window Where Humans Can Still Audit AI?

00:33:32 Claude Code Moves Toward Automatic Permissions

00:36:50 GPT Live Adds Projects And File Conversations

00:38:00 AI Assistants That Read Facial Expressions

00:40:53 The Growing Persuasive Power Of AI

00:42:11 Zuckerberg Warns About Centralized AI Control

00:43:43 Meta Open Sources Muse Glimmer

00:45:48 Searching Three Years Of Daily AI Show History

00:51:47 Turning Custom Instructions Into A Coding Harness

00:53:50 Codex And Claude Cross-Model Code Review

00:54:07 Managing Drift In Long-Running AI Sessions

00:55:20 Claude Builds A Reusable Library Of UX Rules

00:57:43 Turning AI Feedback Into Long-Term Skills

00:58:38 Episode Wrap-Up

The Daily AI Show Co Hosts: Beth Lyons, Brian Maucere, Andy Halliday, Gareth.