Instant Checkout Lets ChatGPT Swipe Your Card

Grab a cart, Tech Insiders.

AI just turned ChatGPT into a checkout lane, while tireless AI coders, brand-new AI rules, and fresh AI security flaws scramble to keep pace with the trolley.

Cruise the aisles with us before the bots mark everything "sold."

Here's what you need to know today:

ChatGPT Adds 'Buy' Button to Your Chats

Putting the cart before the convo (and you thought impulse buys were bad before).

OpenAI's new Instant Checkout feature lets all US users (Free, Plus, and Pro) purchase single items from Etsy sellers—and soon, over a million Shopify merchants—without leaving ChatGPT.

Powered by the open-source Agentic Commerce Protocol codeveloped with Stripe, the bot now fetches products, shows a "Buy" button, and securely relays payment details the moment you confirm the purchase.

Results remain "organic," and while not paid placement, Instant Checkout is one of several factors, like price and availability, that ChatGPT weighs when choosing between merchants selling the same item. Merchants still keep control of fulfillment and customer relationships, though they do pay OpenAI a small, undisclosed fee on each sale (don't worry, shoppers, it's not added to your price tag).

Multi-item carts and global rollouts are on deck, with brands like Glossier, SKIMS, and Spanx already lined up.

For developers, ACP promises plug-and-play hooks to add their stores; Stripe shops need only a single line of code.

Why it matters: AI chat could upend shopping. If it becomes the first and last stop, search ads and marketplaces face a real threat. But OpenAI isn't shopping alone; Google, Microsoft, and Perplexity are all building their own AI shopping carts, turning this into an all-out agentic arms race for your wallet. For consumers, it's one less browser tab. For small sellers, it's a new on-ramp to 700 million weekly ChatGPT users.

Your wallet may never get a coffee break again.

Share this newsletter!

Pulse Check

Would you trust ChatGPT to complete a purchase for you?

Results from Yesterday's Pulse Check

Should Apple ship Veritas as a public chatbot?

Insider Intel

Claude Sonnet 4.5 Codes for 30 Hours Straight

Think about that intern who never sleeps (and never asks for pizza). Well, now, this tireless colleague is available to everyone on Claude.ai, not just enterprise teams.

Anthropic's Claude Sonnet 4.5 leapfrogs its predecessors with 30-plus-hour autonomous coding sessions, a blistering 77.2% on the SWE-bench Verified coding test that leaves both GPT-5 Codex and Google's Gemini 2.5 Pro in the dust, and market-leading skills for actually using a browser, topping the OSWorld benchmark—a test of an AI's ability to handle real-world computer tasks—at 61.4%.

For the non-coders in the room, that translates to a smarter colleague for everything from deep research to creating polished documents and slides directly in the chat.

At $3 per million input tokens and $15 per million output tokens, it stays price-matched with Sonnet 4 while delivering long-context memory tools, a Visual Studio Code (VS Code) extension, and new checkpointing to roll back mistakes.

Early testers report 44% faster vulnerability triage and 18% better project planning. The model also touts tighter safety guardrails (less sycophancy, fewer prompt-injection flubs) and is already live in Microsoft Copilot Studio, Amazon Bedrock, and GitHub Copilot.

So yes, Claude can refactor your legacy app overnight. Just remember to say thank you or risk the rise of passive-aggressive AI comments.

Flash Bytes

Master AI in 16 Hours – The In-Demand Skill for 2025 (Limited Time Offer)

On October 4–5, join the online 2-Day LIVE AI Sprint by Outskill—a hands-on bootcamp designed to make you an AI-powered professional in just 16 hours.

Usually $895, but as a pre-Halloween sale 🎃, you can get in for completely FREE! And you will also unlock $5,100+ in AI bonuses.

In just 16 hours and 5 sessions, you will:

Security Alerts

Notepad++ Plugin Hijack Opens a Persistent Backdoor

A newly discovered DLL-hijacking flaw (CVE-2025-56383) allows an attacker who already has access to your system to swap a Notepad++ plugin file, such as NppExport.dll, with a malicious twin, triggering code execution every time the editor launches.

In short, it's not how they get in, but how they can overstay their welcome.

Proof-of-concept code is already public, but an official patch is nowhere in sight, leaving basically any Notepad++ version vulnerable. Until a fix lands, lock down plugin directories and restrict write access.

Pro tip: Treat text editors like toothbrushes—never let strangers replace the head.

Gemini 'Trifecta' Bugs Leak Private Data

Tenable found three now-patched flaws across Google's Gemini suite.

First, there's a log-poisoning bug targeting developers via Cloud Assist—an AI that summarizes technical logs. The other two hit everyday users: search-history injections and a browsing-tool flaw that smuggled saved info to attacker servers.

The demo showed stealthy prompts exfiltrating location data via hidden HTTP calls.

Google disabled link rendering in its Cloud Assist log summaries and hardened models, but the episode demonstrates that AI assistants can be both a target and a weapon.

When your chatbot starts oversharing, it's time for a timeout.

Industry Shakeups

California OKs First Frontier AI Transparency Law

Governor Gavin Newsom has just signed SB 53, a law that pointedly shelves last year's "kill switch" demands in favor of swapping mandatory safety testing for mandatory disclosures.

The new law requires frontier-model developers with revenues exceeding half a billion dollars to publish safety frameworks, report critical incidents to the California Office of Emergency Services (Cal OES), and protect whistleblowers.

The bill also sets up a "CalCompute" consortium to plan a public cluster for ethical AI research.

Critics say it lacks the kill-switch teeth of its predecessor, SB 1047, which died last year after a furious lobbying campaign.

This time, the tech world's reaction is more mixed: AI darling Anthropic gave its blessing, while others offered grudging support, making it clear they'd prefer a single federal law to a patchwork of state rules.

Supporters, meanwhile, call it a necessary "trust-but-verify" step while Washington dithers.

With 32 of the world's 50 top AI firms in-state, the Golden State just became ground zero for disclosure standards… and a likely template (or cautionary tale) for federal rules.

Either way, expect every lobbyist's GPS to reroute to Sacramento.

Meet Our Author

Justin Meyers

Writer at TechnologyAdvice

Justin Meyers is an investigative writer and editor who draws on over a decade of meticulous hands-on research to deliver the full, trustworthy story behind consumer and enterprise tech, including cybersecurity.

Curious about where AI is really headed?

The Neuron cuts through the noise to bring you smart, hype-free takes on the latest AI trends, tools, and breakthroughs. Join 500,000+ professionals from top companies like Microsoft, Apple, Salesforce and more.

Advertise in Daily Tech Insider!

Daily Tech Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 215, Nashville, TN 37211, USA.