AI is moving into buying and everyday work, and companies now need clear rules, measured returns and safer software to keep up.
The AI Transformation Brief
AI is moving into everyday buying and work faster than companies can prove it pays or keep it safe. Walmart opened its store to AI shopping tools under its own rules. TechCrunch Uber gave all 30,000 employees an AI assistant without a stated cost. TechCrunch IBM's chief executive said big customers are now checking AI returns. 247 Wall St. Attackers took over a widely used AI tool to steal company passwords. Datadog Security Labs The companies that set the terms first will shape the rest.
Walmart launched a new connection that lets approved AI shopping tools search its inventory and buy for customers, while Amazon has begun blocking such tools. TechCrunch Agent Profiles, due next month, give each AI tool its own profile in a customer's account, with approval for every purchase or a spending limit such as $50, $100 or $200. The tools never receive payment card details, and those that break Walmart's terms will be blocked. Walmart
Walmart is writing the rules AI shoppers must follow on its site before anyone else does. Amazon is keeping outside AI tools away from its storefront, while Walmart lets them in and covers their mistakes through normal returns. Walmart Retailers, banks and travel companies should decide this year whether to block, welcome or charge outside AI buyers, and which limits and records each one must agree to.
When an AI tool buys the wrong thing, the store, the tool's maker and the customer each need a clear share of responsibility. Walmart has set its terms, and most companies have not.
Uber is rolling out ChatGPT Work, OpenAI's office-task assistant, to its entire workforce of about 30,000 after a 1,000-person trial in which 80% of users were not engineers. Staff used it to analyze operating data, adapt training materials for different markets and build personal dashboards. Uber did not disclose the cost, and engineering vice president Sumanth Sukumar said the company will track how employees use the tool and "evaluate those outcomes." TechCrunch
Uber is buying access first and measuring results later. Its sharper move came earlier, when it paired 30 AI engineers with teams for two weeks to automate key parts of their jobs. TechCrunch Companies rolling out AI to everyone should set the measures before launch, name the tasks expected to change, and report results within one quarter, with a named owner for each team's numbers.
IBM beat third-quarter forecasts, with revenue of $17.1 billion and software up 8%, yet its shares fell 7% after chief executive Arvind Krishna said large companies are far more aware of "the true ROI of all of their AI spend," with some of it "completely out of control with no real return." He advised customers to "pick a few" projects and spread them across the company instead of running "100 little experiments." 247 Wall St.
The company that sells AI help to large businesses says its customers want proof, and investors heard a warning. Krishna said many companies underestimate the work of fitting AI into existing operations and must redesign how the work is done. The Asia Business Daily Cut your AI projects to the few with measured results, fund the job redesign those need, and stop paying for experiments with no owner or target.
Attackers took over the release process of LiteLLM, open-source software many companies use to connect their apps to several AI providers, and on October 21 published a version that stole cloud logins, developer secrets, saved browser passwords and keys for AI coding tools. It was available for about two hours before removal, and Datadog called it the second compromise of LiteLLM this year. Datadog advises reverting to the last safe version and changing every exposed password and key from a clean machine. Datadog Security Labs
Attackers used stolen login codes from three engineers' accounts to start, approve and then delete evidence of an unauthorized release. Datadog Security Labs Shared AI software is now a direct route into company systems. Use only approved, fixed versions of AI software, require release approval from someone outside the release team, and treat any install of the bad version as a breach: change every password and key it could reach.
Palmer's October 22 post argues that AI has cut the time and skill needed to turn hard-to-use software flaws into working attacks, citing Wiz's estimate that one researcher finished in a week what once took a top team months. "Every company needs an AI Apocalypse Playbook," he writes. Shelly Palmer The LiteLLM breach shows that plan must cover the AI tools themselves.
AI is entering how you buy, sell and work, and each entry point needs rules.
Decide this quarter how your company treats outside AI buyers, which AI projects you will fund, and who measures their results.
Large retailers are writing the terms for AI shoppers, and AI suppliers are selling to whole workforces at once.
Companies that set their own terms early will shape prices, data access and liability for everyone else.
Ask for the full cost of every company-wide AI rollout before signing, tie renewals to measured results, and cut projects with no owner or target, as IBM's customers are starting to do.
Use only approved, fixed versions of open-source AI tools, change keys exposed by the bad LiteLLM release, and set clear permissions and records for any outside AI tool that buys from or acts in your systems.
The shift this edition is that AI is moving into buying and everyday work faster than companies can set its terms, prove its value or secure its tools. The assumption it breaks is that wide access produces results on its own. The decision it forces is what rules outside AI must follow, which projects earn funding, and who checks the software it runs on.
If an AI shopping tool placed 1,000 orders on your site tomorrow, whose rules would it be following?
Make AI accountable. Measure the results. Redesign the business.