# AI Weekly Recap: October's 53 Cyberattacks, Kimi K3.1, and a Voice Model Without Text October 2026's cyberattacks mostly began with stolen keys and passwords or trusted software updates, not clever hacking, and many targeted AI provider keys… **Published:** 2026-10-24 · **Author:** Yash Thakker **Source:** https://explainx.ai/newsletter/ai-weekly-recap-octobers-53-cyberattacks-kimi-k3-1 --- > **In short:** October 2026's cyberattacks mostly began with stolen keys and passwords or trusted software updates, not clever hacking, and many targeted AI provider keys, so limiting and rotating those keys is the simplest protection. ## Stolen Keys and Trusted Updates ### October 2026 Cyberattacks: The Full List of 53 Incidents, Counted by Type AgentBeam's tracker counted 53 dated cyberattacks and security incidents in the first 23 days of October. Eleven were attacks run with AI agents. Most started the same way: a stolen password, key or login token, or a trusted software update. Many attackers went after AI provider keys, which can be resold or used on the victim's bill. **What you can do:** Replace any keys stored on Railway, Zeabur or OpenCode Console, and put a spending limit on every AI key so one leak cannot run up a huge bill. [Source](https://explainx.ai/blog/october-2026-cyberattacks-list-breaches-exploits-ai-run-attacks-tracker-2026) ## AI News Briefs ### huashu-motion: The MIT Agent Skill That Makes Launch Films and Lets You Click a Frame to Edit An open-source tool called huashu-motion lets an AI coding agent build a product launch film from code, add a music score, then open an editor where you click a frame to change one thing. It has only been tested on Mac, and its cost figure comes from its author. [Source](https://explainx.ai/blog/huashu-motion-agent-skill-launch-films-click-frame-to-edit-composer-mode-mit-guide-2026) ### Kimi K3.1 Teaser Video: What Moonshot Showed, What Is Rumor, and Where Computer Use Fits Moonshot AI posted a 24-second video showing a coding tool labelled Kimi K3.1, so a new version of its Kimi model looks close. The video gives no date, price or test scores. Talk of a computer-use feature is guesswork so far, and nothing published backs it. [Source](https://explainx.ai/blog/kimi-k3-1-teaser-video-kimi-code-terminal-three-js-release-what-is-confirmed-2026) ### Block's Dessa: A Voice Model Trained on Speech Alone, With No Text, That Runs on a MacBook Block, the company run by Jack Dorsey, unveiled Dessa, a voice model it says learned to talk from human speech alone, with no text, and can listen and speak at once. Block says it runs on a laptop. There is a waitlist but no paper, public release or independent tests. [Source](https://explainx.ai/blog/block-dessa-speech-only-full-duplex-model-trained-without-text-macbook-2026) ### Skyfall SKY-001: An Engineering World Model That Claims 50x Faster CAD Than GPT-6 Astra Skyfall AI says its SKY-001 model, which designs 3D parts and floor plans, matches GPT-6 Astra on its own tests while being about 50 times faster and 150 times cheaper at part design. Accuracy is only slightly ahead, only a waitlist is open, and nobody outside the company has checked. [Source](https://explainx.ai/blog/skyfall-sky-001-engineering-world-model-cad-bim-claimed-vs-verified-2026) ## Upcoming Workshops ### AI Builder Workshop: Build and Ship with Claude Code ![AI Builder Workshop: Build and Ship with Claude Code](https://explainx.ai/workshops/covers/square/ai-builder.webp) *Live workshop · Nov 15–23, 2026* A beginner-friendly course in four live Claude Code sessions. You go from an idea to working automations, AI agents and a full app that is live on the web, using a workflow that also works in Cursor. It starts November 15. [Source](https://explainx.ai/workshops/ai-builder) ### Claude for Work: Become Your Team’s AI Person ![Claude for Work: Become Your Team’s AI Person](https://explainx.ai/workshops/covers/square/claude-for-work.webp) *Live workshop · Nov 28–29, 2026* Two live evenings for people who want to become their team's go-to for AI. You build a knowledge base, an agent skill, a prompt library and your own Artifacts, and connect Claude to the apps you use. Beginners welcome. It starts November 28. [Source](https://explainx.ai/workshops/claude-for-work) ## Reader poll How worried are you about attacks that use AI tools? - Very worried - Somewhat worried - Not very worried - Not sure ## Sources - [October 2026 Cyberattacks: The Full List of 53 Incidents, Counted by Type](https://explainx.ai/blog/october-2026-cyberattacks-list-breaches-exploits-ai-run-attacks-tracker-2026) - [huashu-motion: The MIT Agent Skill That Makes Launch Films and Lets You Click a Frame to Edit](https://explainx.ai/blog/huashu-motion-agent-skill-launch-films-click-frame-to-edit-composer-mode-mit-guide-2026) - [Kimi K3.1 Teaser Video: What Moonshot Showed, What Is Rumor, and Where Computer Use Fits](https://explainx.ai/blog/kimi-k3-1-teaser-video-kimi-code-terminal-three-js-release-what-is-confirmed-2026) - [Block's Dessa: A Voice Model Trained on Speech Alone, With No Text, That Runs on a MacBook](https://explainx.ai/blog/block-dessa-speech-only-full-duplex-model-trained-without-text-macbook-2026) - [Skyfall SKY-001: An Engineering World Model That Claims 50x Faster CAD Than GPT-6 Astra](https://explainx.ai/blog/skyfall-sky-001-engineering-world-model-cad-bim-claimed-vs-verified-2026) - [AI Builder Workshop: Build and Ship with Claude Code](https://explainx.ai/workshops/ai-builder) - [Claude for Work](https://explainx.ai/workshops/claude-for-work) --- From [explainx.ai](https://explainx.ai/newsletter). Read online, comment and subscribe: https://explainx.ai/newsletter/ai-weekly-recap-octobers-53-cyberattacks-kimi-k3-1