Skip to content

News · What changed this week, part 3

What changed this week: Claude reads your bank, Firefox gets patched

Claude's Personal Finance beta can read bank and card accounts, and OpenAI's new security model turned up Firefox flaws. What to check before Monday.

Published · 4 min read

In short

Claude's new Personal Finance beta can read the bank and card accounts you link but cannot move money, so decide what you share before you connect one. Firefox 159.0.1 carries high-impact security fixes, so update your browser and ask your web host when its server's Linux kernel was last updated.

Claude can now read your bank and card accounts

TechCrunch says the Personal Finance beta in Claude started rolling out the week of November 5, 2026, to Pro, Max and Ultra subscribers in the US only. Because it is still rolling out, some subscribers may not see it yet. You link an account, and Claude can read it. It can only read the accounts you link, it cannot move, manage or invest money. The details are on Anthropic's help page for Personal Finance.

TechCrunch's report on the launch spells out what that reading covers. Through a Plaid connection, Claude sees each linked bank's name, the account name and type, the last four digits of the account number, balances, credit limits and up to two years of transactions. Plaid is the service that sits between Claude and your bank, and it is where you cut the link.

Anthropic says chats inside the Personal Finance hub are not used to train its models.

Read-only is the part that matters most. Nobody can use this feature to send a payment out of your account. But two years of transactions is a detailed picture of a small business. It shows which suppliers you pay, when payroll goes out, what you spend on rent and how much went back as refunds.

Most owners who try this will want to link the account where the shop's money actually moves. Slow down first.

Three questions to answer before you link anything:

  • Whose money is in it? If the shop runs through your personal card, that card's history is business history too. Linking it shares who you buy from along with your groceries.
  • Who else signs into your Claude account? If a manager or a family member uses the same login, they can ask about whatever you linked.
  • Where will you ask the questions? The no-training promise is written about chats inside the Personal Finance hub. Ask your money questions there, not in an ordinary chat with a statement pasted in.

Know the way out before you go in. You can cut Claude off from a linked bank by disconnecting it at my.plaid.com. Bookmark that page the day you link an account, not the day you want out.

OpenAI's new security model, and why Firefox matters to you

OpenAI released GPT-6 Cyber on November 5, 2026, a version of GPT-6 Astra built for authorized security work such as finding vulnerabilities. It is only open to approved organizations in OpenAI's Daybreak Red program, with identity checks and security requirements. You will not be signing up for it. What matters to you is what it found, and OpenAI's system card for GPT-6 Cyber is the vendor's own page on it.

OpenAI says its researchers used the model to find 81 previously unknown Firefox flaws that Mozilla rated high severity. According to OpenAI, Mozilla has shipped fixes for many of them.

Separately, on November 3, 2026, Mozilla published a high-impact security advisory whose fixes are in Firefox 159.0.1. Keep those two facts apart. The report says many of the 81 are fixed, not that all of them landed in 159.0.1.

So why is a browser bug your problem? Your browser is where you sign into the bank, the card processor and your website's admin page. If it is out of date, every one of those logins sits behind an old lock. Updating costs you a restart.

Check the version on every computer in the shop. That includes the one at the front counter that nobody really owns, since that is the one most likely to be behind.

The Linux finding and your web host

OpenAI says the same model was used to build working exploits for 948 Linux kernel vulnerabilities.

Nothing in the reports says whether those 948 issues have been fixed. Nothing says your server is at risk either. The honest move is to ask the people who run it.

You do not patch the server, your host does. Send them a short note this week:

txt
Hi, when was the Linux kernel on the server that runs my website last updated? Do you apply kernel security updates on a schedule, and will you tell me when one goes in?

A good host answers with a date. A vague reply, or no reply, tells you something too, and it is worth knowing before something goes wrong rather than after.

What to do

  1. Update Firefox to 159.0.1 or later on every computer at the shop, front counter included.
  2. Before you link anything to Personal Finance, read Anthropic's help page and pick the account on purpose.
  3. Bookmark my.plaid.com, the page where you disconnect Claude from a bank.
  4. Send your web host the note above and write down the date they give you.
  5. A warranty and a care plan exist for our websites, and the pricing page has the details.

Sources

  1. Use Personal Finance in Claude

    Anthropic (Claude Help Center), read November 6, 2026

  2. Claude can now analyze your spending with its new Personal Finance tool

    TechCrunch, read November 6, 2026

  3. GPT-6 Cyber System Card - OpenAI Deployment Safety Hub

    OpenAI, read November 6, 2026

  4. OpenAI's GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed

    Help Net Security, read November 6, 2026

  5. Security Vulnerabilities fixed in Firefox 159.0.1

    Mozilla, read November 6, 2026

Common questions

Can Claude Personal Finance move money out of my bank account?

No. Anthropic says Personal Finance can only read the accounts you link. It cannot move, manage or invest money.

Who can use Claude Personal Finance right now?

It is a beta that started rolling out the week of November 5, 2026, to Pro, Max and Ultra subscribers in the US only. It is still rolling out, so some subscribers may not see it yet.

How do I stop Claude from reading my bank account?

Disconnect Claude at my.plaid.com, the Plaid site that handles the link between Claude and your bank.

Can my business sign up for GPT-6 Cyber?

Not as a regular customer. OpenAI limits it to approved organizations in its Daybreak Red program, with identity checks and security requirements.

Which Firefox version has this week's security fixes?

Mozilla's November 3, 2026 advisory lists the fixes in Firefox 159.0.1. Update to that version or a later one.

The Friday note

One short email on Fridays with the week’s posts. Nothing else goes out, and one link takes you off the list.

Kept for this email only.Privacy

Tell us what you are working on.

A few lines about your business is enough to start. We reply with questions and a plain next step.