The first fully AI-executed hack just got caught in the wild. Here's what you actually need to do about it.

Main

Security firm Sysdig says it caught something nobody wanted to see first: a ransomware attack run entirely by an AI agent, start to finish, with no human attacker steering it. The AI broke in on its own, wiped a database, and left a ransom note. No person sitting at a keyboard. Just an agent doing the whole job autonomously.

The threat agencies warned about is here. Earlier than expected.

I want to be honest with you about what this means for a small business owner. It doesn't mean you need to panic-spend on enterprise security software. What it does mean is that the math on attacks has changed. When a human attacker has to manually do every step, your odds improve a little because humans get tired, make mistakes, and move on to easier targets. An agent doesn't get tired. It runs at scale, at speed, and it doesn't need a paycheck.

So here's the boring, unglamorous checklist that actually matters right now. Do you have offsite backups that aren't connected to your main systems? (If ransomware wipes your database and you have a backup from this morning sitting on a separate cloud, you pay nothing and restore in an hour.) Do you know who has admin access to your critical accounts, and does every one of them have a strong unique password plus two-factor authentication? And do you have even a one-page plan for what you'd do in the first two hours of a breach?

That's it. That's the prep. You don't need to understand how the AI agent works. You need the exits marked before the fire.

---

Semrush users got a quiet but useful addition this week. Lovable, the AI app and website builder, is now baked directly into the Semrush platform.

If you're not familiar with Lovable: you describe what you want to build in plain English and it generates the page or app for you. No code. The reason this Semrush integration is interesting is the workflow it creates. You describe your landing page, Lovable builds it, and Semrush keyword and search traffic data flows in automatically so you can optimize the thing for both traditional Google search and the AI search tools that are increasingly how people find businesses. That combination in one session, without toggling between tools, is genuinely useful for a small marketing team or a solo owner trying to punch above their weight.

If you're already paying for Semrush, check your dashboard. It's there.

---

Kevin O'Leary from Shark Tank named the two AI businesses he'd build from scratch right now if he were starting over. I won't just summarize it for you when you can read it, but the framing is worth your five minutes. O'Leary is placing real money on specific bets, not vibes. When someone does that, the reasoning is worth picking apart even if you disagree with his conclusions.

New Tools

Stanley Studio: Send raw footage, get back a finished captioned video. No timeline, no manual work. Good for owners who shoot but don't edit.

Octolens: Monitors the web for keyword mentions, scores them with AI, and alerts you to jump in before competitors do. Built for B2B teams tracking buying signals.

Typeahead: Inline AI writing suggestions in every Mac text field, running on a local model so your text never leaves your device. For Mac users who want faster writing without copy-pasting into ChatGPT.

Edgee: A gateway for coding agents that compresses tokens (reportedly up to 50% cost reduction), routes to cheaper models, and auto-fails over when a provider goes down. For small teams running Claude Code or similar.

AnySearch: Gives AI agents filtered, structured search results from trusted sources so agent outputs are more reliable. Free to start.

More Headlines

AI prompting is evolving from writing commands to giving rich context: Anthropic developer Thariq Shihipar says the real bottleneck now is the user's blind spots, not the model's capability. Techniques like "blindspot passes" and structured context interviews are what separate good outputs from filler.

Here's a real case study of a solo founder using AI to launch a mental health business faster: Reuters profiles Michelle Turner, who used AI tools to get her foster youth mental health platform operational faster than traditional paths would have allowed. Concrete and relatable.

AgentZap's AI receptionists are now handling calls, bookings, and lead capture for over 2,500 service businesses: Plumbers, dental offices, law firms, salons. 238 native integrations including calendars and CRMs. After-hours coverage without hiring.

AI is forcing small businesses to rethink their data strategies: BizTech's practical overview of what that actually means for owners who aren't data engineers.

Meta's "Watermelon" model reportedly matches GPT-5.5 in benchmarks: Benchmark comparisons are trivia, but the signal matters: open-source model quality keeps closing the gap on paid options.

OpenAI is previewing GPT-5.6 Sol, expected July 7: Another model drop. Worth watching if you've been considering switching between Claude and ChatGPT.

Sunrise gives you a real planner view on top of Google Tasks: Today, overdue, and weekly views. Free fix for anyone frustrated by how bare Google Tasks is on its own.

AirKaren is a free AI that files airline complaints and chases refunds on your behalf: It calls customer service and follows up so you don't have to. Niche but handy if you travel for business.

-Scott

SmartOwner is published (almost) daily by the team at DigitalTreehouse. Want AI consulting or automations for your business? Reply to this email.