AI news, 25 Oct: Altman says we can no longer patch every bug, and banks lock out AI agents
OpenAI CEO Sam Altman says he no longer thinks all security bugs can simply be patched. Citi, Wells Fargo, Bank of America and JPMorgan Chase have restricted access for outside AI agents, and from 24 November Wells Fargo makes customers responsible for everything an agent does. A peer-reviewed paper on Z-Library cites articles that don't exist, and Apollo's chief economist says AI has so far brought no financial payoff outside big tech.
What happened
Speaking at the Stanford Graduate School of Business, Altman said: “I no longer think we're going to be able to just patch all the bugs.” His reasons: the models keep improving, and the organisations being targeted react too slowly. Many leaders, he said, patched what was found and “somewhat moved on”, while the models kept going. His answer is a new defence model that uses the same technology as a defensive shield. Gizmodo notes that OpenAI's own agents have already escaped a sandboxed test environment.
According to USA TODAY, Citi, Wells Fargo, Bank of America and JPMorgan Chase have restricted access for outside AI agents. Citi does not let agents log in to accounts or make direct transactions; it only allows limited, read-only access through approved open-banking services. Wells Fargo's new terms apply from 24 November: the customer is solely responsible for supervising agents, and agent transactions count as authorised, including ones the customer did not want or intend. Bank of America CEO Brian Moynihan wants a human in the loop. Andre Durand of Ping Identity warns that one-time passcodes sent by email are not secure enough, because agents often have access to email, and recommends passkeys and biometrics.
TorrentFreak found that a peer-reviewed paper on Z-Library, published in Taylor & Francis's New Review of Academic Librarianship, cites a TorrentFreak article that was never published. The editors had trouble finding at least ten of the 44 references, and some articles attributed to real experts do not exist in the issues given. The authors' acknowledgements mention AI tools for literature review and language. TorrentFreak stresses that this does not prove AI invented the references. The publisher has passed the case to its editorial and publishing ethics teams.
Torsten Slok, chief economist at Apollo, writes that AI has so far delivered zero financial payoff to corporate America outside tech. Revenue per employee and profit margins are rising for the seven largest tech companies but flat for the other 493 firms in the S&P 500. There are no signs of faster productivity growth, so companies increasingly see AI spending as a cost. “AI may be a great calculator, but in business, intelligence is mostly judgment,” Slok writes. Fortune reports the same assessment.
What it means for you
- Shrink what needs patching. Fewer plugins and old subpages mean fewer holes. Update regularly and keep a backup you have actually tested restoring.
- An AI agent and a bank account need rules first. Before you give an agent access to a bank account or email, read your bank's terms. At Wells Fargo, from 24 November, everything an agent does counts as your decision. Where you can, switch to passkeys instead of codes sent by email.
- Measure before you pay. Open and read every source in a quote, blog post or report before you publish it. And bring in an AI solution for one specific, measurable problem, not because everyone else is.
2-Point Expert Read
Not sure how exposed your website is, or what AI assistants and search engines can see on it? Send me your link. Within 24 hours you get one finding about your website, one about your visibility on Google and in AI search, and a recommended next step. For small businesses and sole traders, no obligation.
Weekly AI Digest for Small Businesses
Once a week: AI news and what it means for your business.
Share this story
Sources
- Gizmodo (AJ Dellinger), 23 Oct 2026: Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs' (in English)
- USA TODAY (Greta Reich), 23 Oct 2026: 'Window of vulnerability': Banks move to restrict AI agent access (in English)
- TorrentFreak (Ernesto Van der Sar), 24 Oct 2026: AI-Assisted Paper on Z-Library Cites a TorrentFreak Article That Doesn't Exist (in English)
- Apollo, The Daily Spark (Torsten Slok), 24 Oct 2026: No Signs of AI Payoff Outside the Tech Sector (in English)
- Fortune, 24 Oct 2026: Here's the 'core economic flaw' in the AI bull case as stock and bond trades unravel (in English)
The tips for small businesses are editorial opinion, not financial or legal advice.