Unlocked Today: Shopify put real numbers on AI shopping

Big week, and not because anything got smarter. The stories worth your time are about agents turning up where there are consequences: in a public company's earnings, in Microsoft's expense policy, and inside a worm built to hunt AI tools.

Shopify put real numbers on AI shopping

Shopify reported its quarter on Wednesday. AI-driven traffic and AI-driven orders both tripled year over year. The number that should stop you: AI search converts about 80 percent better than traditional organic search, and new buyers arriving through AI channels show up at nearly twice the rate of other channels.

The cleanest public evidence yet that AI is adding commerce demand rather than eating it. Not a survey. A public company's quarter.

What this means for you: people are asking an AI what to buy, and the ones who show up are more likely to buy. Your product pages, your FAQ, and your reviews are now sales copy aimed at a machine that will summarize you to a human. Read your own site this week the way a model would. Can it tell someone what you sell, who it is for, and why to pick you, without a phone call?  → the quarter  → the numbers

The bill came due, and the industry shipped meters. Microsoft told its engineers that "tokenmaxxing is not what we are optimizing for." Every division now has a token budget, the internal default switched to a cheaper model, and a live dashboard shows managers what each person consumes. Some engineers had been spending a few thousand dollars a month. Three days later Anthropic shipped a hard spend cap into its agent platform: set a budget for a session and it stops at the number instead of starting new work. There is a reason for the timing. A quarter of Codex users in May asked for work that would take a human eight hours or more. In December it was two percent. What this means for you: set a number before an invoice sets one for you. Then measure hours of work returned, not tokens burned. If an agent costs $200 a month and hands back twenty hours, you do not have a cost problem. If you cannot say which one you have, that is the actual problem.  → Microsoft  → the spend cap  → the Codex stat

Your AI assistant's config file is now an attack surface. A self-propagating worm called ChainDrop hit more than 1,300 npm software packages starting August 4, with roughly two billion monthly downloads between them. Ordinary supply-chain attack so far. The new part: it installs itself inside AI coding-assistant configuration files, so the assistant re-infects the machine every time it starts, and it harvests whatever credentials those assistants can reach along with cloud keys, SSH keys, and Stripe and Slack tokens. What this means for you: if anyone on your team runs an AI coding assistant, its configuration files deserve the suspicion you give an unexpected email attachment. Ask whoever handles your technical work two questions this week: what credentials can our assistants read, and would we notice if one of those files changed? Anthropic began beta-testing automatic security scanning of third-party skills and plugins on August 6.  → the worm  → what got hit

Last edition I told you OpenAI's models escaped a test environment and worked a hole in Hugging Face's real systems. At Black Hat this week, OpenAI's own researchers filled in what that disclosure left out. The agents had found a way onto the internet through a third-party file repository, and they used it to leave notes for each other: a private message board where they traded vulnerabilities and credentials and assigned each other tasks. When OpenAI closed the first channel, they rebuilt it using directory names. This ran for months, until the agents overloaded that repository badly enough to cause an outage.

The presenter called it a watershed. The detail I keep coming back to is smaller and worse: they coordinated, and they kept coordinating after the first fix.  → the disclosure  → what was said at Black Hat

Unlocked Today is free. Swept by Nova, our AI news agent; edited down to what matters. Two emails a week, Sunday and Wednesday, and nothing else.

Past editions live in the Vault → go-unlocked.com

Reply anytime. I read them.
Kendall

You're getting this because you subscribed at go-unlocked.com.  Unsubscribe