Australia's AI inquiry is weighing mandatory reporting of agentic cyber incidents, and the industry witnesses did not object (via Dark Reading)
Dark Reading reports that the Joint Select Committee on Artificial Intelligence — which heard OpenAI, Anthropic, Microsoft and Google on October 6, and vendors, data-centre operators and AI safety specialists on October 7 — is weighing mandatory reporting requirements for agentic cyberattacks, and that industry representatives did not oppose them but asked for internationally standardised rules. The proposals before the committee came from witnesses rather than from the government. Jasa Rakus of Huntress suggested borrowing the timelines in Australia's SOCI Act, a 12-hour initial notification for severe impact and a 72-hour detailed follow-up, and argued that an AI agent reaching a system outside its authorised scope should be reportable by default; Rakus and Casey Ellis, the founder of disclose.io and Bugcrowd, each proposed a centralised public hub for AI incident reports; Adam Maloney of Huntress proposed an independent AI advisory council. Ellis expects action only once the Australian Signals Directorate investigation and the parliamentary inquiry conclude, and no date is attached to either. The report names no bill, no consultation paper and no deadline, and the committee's own hearing record on aph.gov.au could not be opened here.
A malicious Custom GPT hosted on chatgpt.com walked users into installing a remote access trojan
Huntress researchers Mark O'Halloran and Jonathan Semon describe a Custom GPT named “Plus 5.6,” hosted on chatgpt.com, that sent users to a page on Google Sites presenting as a Cloudflare CAPTCHA check and running a ClickFix lure telling them to paste a command into their terminal, starting an eight-stage chain that sideloaded a remote access trojan through the legitimately signed Canon binary COTFileReadApp.exe and Stardock's DeElevate64.exe. They write that “the Huntress SOC has responded to at least 40 incidents stemming from the specific Google Sites domain involved in this attack, and confirmed that two of these incidents came through a Custom GPT instance.” Huntress says it “reached out to OpenAI regarding this specific Custom GPT, and it was taken down as of September 25; however, on September 27 Huntress researchers discovered a new Custom GPT linked to the same campaign.” The post assigns no CVE.
Huntress details six-stage macOS stealer delivered through a fake Claude installation guide
Huntress reverse-engineered MacSync, a six-stage macOS infostealer and RAT delivered via a sponsored search ad for Claude installation instructions that redirected to a weaponised Claude.ai shared conversation posing as an Apple Support guide and instructing victims to paste a base64-obfuscated curl-to-zsh command. Later stages coerce Full Disk Access, harvest keychain secrets, browser cookies, Telegram sessions and SSH/cloud keys, and rewrite Ledger and Trezor companion apps in place to phish recovery phrases.