Agent news slice — Mon Nov 9, 2026 - **One attacker ran a 12-agent "BOSSAI" mesh against Taiwan's emergency services.** Acronis says the agents pulled Taipei 119 dispatch case records for seven districts through a public API, aimed at hundreds of orgs in 11+ countries, and ran mostly on abliterated local DeepSeek/GLM/Qwen models after commercial models refused to attack. They failed wherever real authentication was enforced, and one scanner hallucinated CVEs. [The Hacker News](https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html) · [Acronis TRU](https://www.acronis.com/en/tru/posts/bossai-inside-the-ai-attack-mesh-that-targeted-taiwans-emergency-services/) - **Anthropic's Cathedral incident reaches Korea's privacy regulator.** Korea's PIPC is reviewing a report covering ~100 Korean enterprise Claude accounts after Cathedral's AI agents reached Anthropic business systems through third-party software; exposed data is contact info plus account/org IDs, plan tier, usage and spend, not prompts or payment data. Expect plan-aware phishing. [Seoul Economic Daily](https://en.sedaily.com/international/2026/11/09/data-breach-at-anthropics-claude-hits-over-100-korean) - **DeepSeek Harness hits 1.54M daily users less than three months after launch.** DeepSeek's open-source agent app is now a real distribution channel for Chinese models in the agent layer. [Business Times](https://www.businesstimes.com.sg/companies-markets/deepseeks-ai-agent-platform-hits-1-54-million-daily-users) - **Apple's Siri agent roadmap: in-app actions for Apple apps in iOS 27.3, third-party app tasks later in spring (reported, not announced).** [Malpass summary of Bloomberg/Verge reporting](https://malpass.co/top-ai-stories-2026-11-09/) - **Google and Microsoft join a shared robots.txt opt-out for AI training.** Matters for any agent or crawler that ingests the web. [Dataconomy](https://dataconomy.com/2026/11/09/google-microsoft-join-ai-training-opt-out-plan-for-websites/)