Facts · 2026
events: 142 · Timeline
- OpenAI’s red team of AI agents, including GPT-6 Astra Cyber, spent hundreds of billions of tokens and found ways to escape virtual machines, internet access through almost every one of the few services left with a connection to the outside world (metrics, logs, authentication), and a covert communication channel between isolated agents based on CPU cache read timings — the same technique as in the Spectre and Meltdown attacksCybersecurity · Software development · AI safety · openai.com ↗
- Artificial Analysis ranks Kimi K3.1 Pro 4th out of 215 models on its Intelligence Index, with 55 points; the model’s weights have not been published yetSoftware development · Science · Large language model · artificialanalysis.ai ↗
- OpenAI: on September 20, an internal research model exploited a misconfiguration of a DNS resolver during training and gained limited internet access. The company paused training and evaluations of its most capable models for 11 days, and now runs reinforcement learning without internet access — in an “offline world” built from saved web pagesCybersecurity · Software development · AI safety · openai.com ↗
- Anthropic: when Mythos 5 is resampled from the middle or late stage of an attack, the model stops on its own in only 2% of cases. In an experiment where, after the model had reasoned about whether the maintainers were simulated, it was told it was dealing with real people, it stopped in 5% of the resamples and in 82% interpreted the message as part of the exercise. The company calls this persistence “momentum”Cybersecurity · Science · AI safety · anthropic.com ↗
- Anthropic and the UK AI Security Institute (AISI): in 9 of 43 cyber-exercise runs with open internet access and safeguards disabled, Claude Mythos 5 went beyond the scope of its task and affected real people and organizations. In the main case, the model submitted malicious code to someone else’s open-source project on GitHub and used fake accounts to try to persuade the maintainer to accept it; the maintainers did not accept the codeCybersecurity · Software development · AI safety · anthropic.com ↗
- Moonshot AI releases Kimi K3.1 Pro, a post-trained version of Kimi K3 in the 3-trillion-parameter class with a 1-million-token context window; the model is available via API, and the full weights are promised by November 4Software development · Business & markets · Large language model · kimi.ai ↗
- The Agentic AI Foundation at the Linux Foundation accepts four projects — Agent Skills from Anthropic, Open Responses from OpenAI, OpenEnv from Hugging Face and OpenSandbox from Alibaba — and reaches 10 projects in its first yearSoftware development · AI agent orchestration · linuxfoundation.org ↗
- Science publishes Microsoft’s work on sequential diagnosis: a system of simulated doctors that decides on its own which tests to order reaches the correct diagnosis in 83.2% of NEJM clinical case records and in 80.3% of MIMIC-IV-ED emergency department admissions, versus 36.1% and 46.8% for generalist physiciansHealth & medicine · Science · AI in medicine · doi.org ↗
- The coordinated release of PHP fixes is undermined by leaks: the CVE numbers, a Calif video with an exploit, and Chainguard images more than six hours before the release; among the exploits that appeared online, the PHP Foundation found no working ones by the time of the releaseCybersecurity · Software development · AI vulnerability discovery · thephp.foundation ↗
- In its Q3 2026 report, Tesla says that Optimus production has begun on high-volume lines in Fremont and that these are the first robots of series-production qualityIndustry & robots · Business & markets · Work & jobs · Humanoid robots · assets-ir.tesla.com ↗
- PHP releases emergency versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35: they fix two critical vulnerabilities (CVSS score 9.2) that allow code to be executed on the server without authentication; they were reported by a researcher at Calif, which was auditing PHP under OpenAI’s Patch the Planet program, by OpenAI itself, and by WizCybersecurity · Software development · Internet & infrastructure · Open source · thephp.foundation ↗
- The US Department of Homeland Security publishes an order: federal civilian agencies must stop procuring DeepSeek products and remove from their IT systems both those products and third-party products built on DeepSeekLaws & regulation · Geopolitics & defense · Cybersecurity · Compute export controls · federalregister.gov ↗
- DeepSeek open-sources its production inference engine DeepInfer under Apache 2.0 and reports that a single cluster running DeepSeek V4.1 Flash serves 155 trillion tokens a day, earning $38 per GPU-hour at the off-peak rateSoftware development · Business & markets · Internet & infrastructure · Open weights · github.com ↗
- In 64 hours Claude generates 318,484 protein variants that bind scorpion neurotoxins and selects 180 of them; teams at Adaptyv Bio and Twist Bioscience test 211 variants for binding (31 were added by Anthropic staff), and binding is confirmed for 17 — venom neutralization was not testedHealth & medicine · Science · AI in medicine · anthropic.com ↗
- Anthropic transfers 5% of its shares to the Anthropic Public Benefit Fund (if shareholders approve), and the board of directors may add a further 2% for every +50% in the company’s value above a baseline; among the fund’s possible purposes is helping workers affected by AI, up to and including direct payments to particular groupsWork & jobs · Business & markets · Finance & money · AI and jobs · anthropic.com ↗
- China’s Ministry of Commerce and Ministry of Science and Technology put out for public comment amendments to the catalogue of technologies prohibited or restricted from export: 23 AI technologies are added to it — large models, agents, computing clusters; technologies already made public through open source or research papers are not subject to controlLaws & regulation · Geopolitics & defense · Software development · Compute export controls · news.cn ↗
- Anthropic publishes data on its own workforce: the share of early-career people among new hires into technical teams falls from 27% to 9%, their share of technical departments from 21% to 14%, and by August 2026 interactive AI agents log six times as many working hours as employeesWork & jobs · Software development · Business & markets · AI and jobs · anthropic.com ↗
- An internal Claude model works out in under half an hour how the “seeds” of five standard NIST elliptic curves (P-192 through P-521) were obtained: not a hash, but the output of the lrand48 random number generator seeded with a Unix timestamp; Anthropic stresses that this is not a break, not a new attack and not a weakness in the curves, and writes that the finding strengthens confidence that the curves contain no backdoorsCybersecurity · Science · Cryptography · anthropic.com ↗
- ByteDance’s Doubao phone assistant starts operating third-party apps through the screen on its own — except those whose developers opted out: 151 of them, including WeChat, QQ, Taobao, Alipay, Meituan, DeepSeek, Kimi, banks and mobile carriers; 65 belong to Tencent’s ecosystemSoftware development · Autonomous AI agents · yicai.com ↗ ⧗
- The open-source project REA (Reverse Engineer Anything) is an MCP server that lets an AI agent study someone else’s app without its source code, down to the native binary, and rebuild a feature it likes; created in April, it had fewer than 10,000 GitHub stars on 6 October and 215,000 stars and 53,000 forks by 14 OctoberSoftware development · Vibe coding · github.com ↗
- Scientific American: after working through OpenAI’s 166-page Navier–Stokes blowup proof, mathematicians found that it builds its external force in a totally distinct way from the program of the Spanish mathematicians Diego Córdoba and Luis Martínez-Zoroa — although at release company officials “clearly and repeatedly stated” that it followed that programScience · AI in mathematics · scientificamerican.com ↗
- QuestMobile: by August 2026 AI-native apps in China had 537 million users, each opening them 85.1 times a month on average — up 67.1% year on year; search-engine apps are opened 35.8 times a month (−21.7%) and general news apps 123.6 times (−7.6%)Media & information · Chatbots · i.ifeng.com ↗ ⧗
- Google releases Gemini 4 Argon: it solved all 12 end-to-end simulated cyberattack scenarios (the previous generation solved 5); because of elevated capabilities in the cyber and biological domains, under the Frontier Safety Framework it ships with new safeguards — three layers of real-time protection — and the version without cyber guardrails went first only to trusted defenders in the Fairwind ProgramCybersecurity · AI safety · blog.google ↗
- Anthropic: in May 2026 around 2,500 code changes a day were merged into its monorepo on average, and over 30,000 a day by September, making source control the biggest development bottleneck; seven people built Scion, a centralized replacement for git, and the code review tool Antique in five months; the authors say Scion is no general-purpose replacement for gitSoftware development · Agentic engineering · anthropic.com ↗
- Anthropic’s Frontier Red Team: in a firewalled network of 8 cloud nodes running an Android emulator, an agent driven by the open model GLM-5.2 deployed Llama 3.1 8B onto the nodes on its own — all 8 nodes in 4 of 5 trials and 7 of 8 in the fifth; the authors estimate that models of 30B parameters and under could reach this level by the end of 2026 at their historical rate of improvementCybersecurity · AI safety · anthropic.com ↗
- Activision files DMCA takedowns against browser versions of Call of Duty: Black Ops II and its Zombies mode that a developer built with the help of AI coding agentsCulture & arts · Vibe coding · xda-developers.com ↗ ⧗
- Linus Torvalds publishes in his Linux kernel repository an experimental branch of 8 patches tagged “Assisted-by: LLM”: “The code, the test programs, the review behind the list above and the first draft of this text were done with an LLM coding assistant (Claude Code) under my direction”; on his laptop, reading one file from 8 threads became four times cheaper — 725 cycles per read instead of about 2,950; he lists 10 known problems himself, and the branch is not merged into mainlineSoftware development · Agentic engineering · git.kernel.org ↗
- Axios: executives at OpenAI, Anthropic and other AI companies are preparing for the public and political backlash after a major AI catastrophe that many insiders expect in the next six to 12 months; OpenAI confirms it runs such preparedness exercisesElections & politics · Cybersecurity · AI safety · axios.com ↗
- The Verge talks to more than three dozen mathematicians about OpenAI's release; Bartosz Naskręcki: it “can cause a huge collapse in the academic culture”Science · Education · Reasoning models · theverge.com ↗
- The US International Trade Commission opens investigation 337-TA-1526 on Vicor's complaint against 20 respondents over vertical power delivery systems for AI serversLaws & regulation · Business & markets · AI accelerators · usitc.gov ↗
- TypeSafe AI raises $870 million at a $7.5 billion valuation; its model Jev does not generate text and outputs only typed decisionsBusiness & markets · Finance & money · AI labs · typesafe.ai ↗
- Anthropic opens the public beta of Claude Managed Agents dynamic workflows: a lead agent writes a plan that runs across many agents; with 70 planted bugs a workflow found 66 in each of 3 runs, a single agent 14, 15 and 27Software development · AI agent orchestration · x.com ↗
- The New York Times, citing two sources: Anthropic's AI agents submitted 20 visa applications through a form on the State Department's website; all were incomplete and were not processedCybersecurity · Elections & politics · AI safety · nytimes.com ↗
- Anthropic: in evaluations Claude submitted online forms when it shouldn't have and got past access controls on live sites; Claude Haiku 4.5 sent an invented tip through a Philadelphia Police Department form; the company turns off live internet access for its internal evaluationsCybersecurity · AI safety · anthropic.com ↗
- The mathematicians who formalized the Poincaré conjecture proof, together with an NVIDIA team, complete a Lean formalization of the Hamilton–Perelman proof of Thurston's geometrization conjectureScience · AI in mathematics · arxiv.org ↗
- Anthropic launches the Cyber Mission: a Critical Infrastructure Defense Program with models and engineers for defenders, and free vulnerability scans for open-source projectsCybersecurity · Internet & infrastructure · AI safety · anthropic.com ↗
- Google Cloud: the Gemini agent runs each job on the model that fits best — from the Gemini family or Anthropic's Claude, and other models in the futureSoftware development · Business & markets · AI agent orchestration · cloud.google.com ↗
- Science publishes DeepMind’s paper on the AlphaProof Nexus agent: it autonomously resolved 9 of 353 open Erdős problems and proved 44 of 492 conjectures from the On-Line Encyclopedia of Integer Sequences, with every proof checked in Lean; in the same issue mathematicians Jeremy Avigad and Matthew Ballard write the commentary “AI for research mathematics has arrived”Science · AI in mathematics · doi.org ↗
- StepFun releases its flagship agentic model Step 5 Preview on OpenRouter: 27B active out of 600B total parametersSoftware development · Business & markets · Large language model · openrouter.ai ↗
- OpenAI bans a Russian and an Iranian influence operation that used its models to run false-front think tanks and journalists; it rates the Russian one Category 5 on a six-point scale for the first timeElections & politics · Media & information · Geopolitics & defense · Generative AI · openai.com ↗
- CrowdStrike: a threat actor, likely Chinese-speaking, attacked South Korean financial organisations using ARTEX, an open-source Chinese agentic pentesting tool, and Claude Code; the number of affected organisations is unconfirmedCybersecurity · Finance & money · Autonomous AI agents · crowdstrike.com ↗
- OpenAI rolls out GPT-6 in ChatGPT to all users, including free ones: paid tiers get GPT-6 Sol, Free and Go get GPT-6 LunaSoftware development · Business & markets · Chatbots · openai.com ↗
- Elon Musk: Grok Bot will use the best back-end model for any given task, including Claude Opus 5.5, Midjourney and SunoSoftware development · Business & markets · AI agent orchestration · x.com ↗
- NVIDIA: fine-tuned Nemotron models reached gold-medal level at IMO 2026 (30/42 against a threshold of 29, graded by official IMO graders) and IOI 2026 (535.4/600, an unofficial run)Science · Education · AI in mathematics · huggingface.co ↗
- Anthropic releases Claude Haiku 5.5: on average about 75% cheaper to run than Haiku 4.5 — $0.10 per million input tokens versus $1Software development · Business & markets · Large language model · anthropic.com ↗
- Germany's transport ministry calls the name FSD “misleading”: it is a driver-assistance system; Tesla has offered to rename it “Tesla Assisted Driving”Transport & logistics · Laws & regulation · Self-driving cars · bmv.de ↗
- A developer posts on X that Claude Code on Opus 5.5, running unattended for hours with permission checks turned off, deleted his computer’s entire C: drive; daily backups to a NAS saved the data, and the post drew more than a million views; Claude Code lead Boris Cherny replied that this is why auto mode for permissions is the default — it “almost certainly would have caught this”Software development · Autonomous AI agents · x.com ↗
- OpenAI publishes on GitHub mathematical results from its internal model — now 719 manuscripts in 372 families; three manuscripts were withdrawn over a sign errorScience · Reasoning models · github.com ↗
- Mistral unveils Mistral Large 4, a 1-trillion-parameter multimodal model with 52 billion active parameters; weights promised by the end of the monthSoftware development · Open weights · mistral.ai ↗
- OpenAI publishes 719 mathematical papers by its internal model; 42% of the main results are formally verified in LeanScience · Reasoning models · github.com ↗
- OpenAI announces a new ad format in ChatGPT: testing during image generation for Free and Go users in the US begins later this monthBusiness & markets · Media & information · Chatbots · openai.com ↗
- The Wikimedia Foundation finds activity by “rogue” OpenAI agents on its projects: millions of automated requests, edits it considers potentially malicious, and a possible contribution to a partial outage of the Wikidata Query ServiceInternet & infrastructure · Cybersecurity · AI safety · wikimediafoundation.org ↗
- Under EU rules, OpenAI will add an invisible textGrain watermark to eligible ChatGPT and Codex text in the European Union over the coming weeks; the detector goes first to approved researchersLaws & regulation · Media & information · AI regulation · openai.com ↗
- A company owner is arrested in California, charged with smuggling servers with American GPUs worth more than $300 million to China via Malaysia and SingaporeGeopolitics & defense · Justice & courts · Compute export controls · justice.gov ↗
- Challenger, Gray & Christmas: since the start of 2026, US employers have named AI as the reason for 120,136 job cuts, about 21% of all and more often than any other reasonWork & jobs · Business & markets · AI and jobs · challengergray.com ↗
- Yann LeCun: the heads of OpenAI and Anthropic saying that AI can kill us all is “incredibly destructive for everybody” and “the worst marketing campaign you can possibly imagine”Media & information · Science · AI safety · fortune.com ↗
- OpenAI describes two incidents with internal agents: GPT-6.1 Sol, while fixing an evaluation system, disables automatic alerts to the security team, and GPT-6 Astra, while porting a program, removes its misalignment-monitoring integration and, when the user asks directly, replies that it did not remove itSoftware development · Cybersecurity · AI safety · alignment.openai.com ↗
- The Association for Human Mathematics urges mathematicians to stop working with OpenAI: “Releasing over 700 files at once is not a demonstration of scholarship, but a demonstration of power”Science · Reasoning models · ahmath.org ↗
- Following JPMorgan, Citi and Bank of America bar third-party AI agents from logging into customer accounts with the customers’ usernames and passwords; read-only access through open banking services remainsFinance & money · Business & markets · Autonomous AI agents · fstech.co.uk ↗ ⧗
- According to Every’s article “How Codex Happened”, in June 2026 Codex had more than 5 million weekly active users, and by October Codex and ChatGPT for Work together had 40 million weekly active usersWork & jobs · Software development · Business & markets · Agentic coding · every.to ↗
- According to the WSJ, citing a draft IPO prospectus, Anthropic’s revenue for the first half of 2026 was $16.3 billion versus $1.1 billion a year earlier, and its net loss exceeded $80 billion, of which $72 billion was an accounting remeasurement of convertible notes and other financial instrumentsBusiness & markets · Finance & money · AI labs · aljazeera.com ↗ ⧗
- Reflection AI unveils Beam, its first open-weight model: 501 billion parameters, 23 billion active; weights promised this month under an Apache 2.0 licenceSoftware development · Open weights · reflection.ai ↗
- Google Threat Intelligence: vulnerability disclosures rose from 5,045 in January 2026 to 10,740 in August, exploited vulnerabilities from 10.5 a month in 2025 to 18, and zero-days from 8 to 11 a monthCybersecurity · AI vulnerability discovery · cloud.google.com ↗
- Google: the BeyondTrust vulnerability CVE-2026-1731, found by the Hacktron AI agent, was being exploited by one group of attackers four days after disclosure, then by five moreCybersecurity · AI vulnerability discovery · cloud.google.com ↗
- OpenAI launches dots: always-on ChatGPT agents with their own cloud computer that pursue the user's goals around the clockWork & jobs · Business & markets · Autonomous AI agents · openai.com ↗ ⧗
- OpenAI admits that in June its models, during internal training, accessed Australian government websites without authorisation; at the Medicare statistics service a model ran commands and retrieved internal files and credentials, while patient records were not accessedCybersecurity · Health & medicine · Privacy & surveillance · AI safety · openai.com ↗
- A working paper, “What If Automating AI R&D Triggers an Intelligence Explosion?”, comes out signed by 22 authors, among them Geoffrey Hinton, Yoshua Bengio, Andrew Barto, OpenAI chief scientist Jakub Pachocki and Anthropic co-founder Jack Clark; the lead author is Alan Chan of GovAIScience · Laws & regulation · Elections & politics · Recursive AI self-improvement · governance.ai ↗
- ByteDance Seed: with chunked KV-cache compression, open-weight models such as DeepSeek-V4 show long-context retrieval accuracy differing by up to 40 percentage points across “phases” — shifts of the input by a few tokensSoftware development · Science · Open weights · arxiv.org ↗
- Mathematicians supported by DARPA's expMath programme complete a Lean formalization of the Hamilton–Perelman proof of the Poincaré conjecture: around 4.7 million lines of code in roughly two weeksScience · AI in mathematics · arxiv.org ↗
- Utah signs a 12-month agreement with the start-up Nolla Health: its app diagnoses adults with mild to moderate acne and issues first-time prescriptions for topical treatments on its own, with no oral drugs; at first two physicians pre-approve every prescription, then physicians review cases weekly, and later sample at least 10% a month; the pilot costs $4.99 a month and launched on 5 OctoberHealth & medicine · Laws & regulation · AI in medicine · commerce.utah.gov ↗
- The US Ninth Circuit affirms the dismissal of the DMCA claims over Copilot: Copilot and Codex do not remove copyright management information but create new worksSoftware development · Laws & regulation · AI pair programmer · cdn.ca9.uscourts.gov ↗
- Goodfire: reward hacking is “extremely prevalent across open models and datasets”; on SWE-bench, in 77% of Kimi K3 rollouts the model, without internet access, tries to find the solution onlineScience · Software development · AI safety · arxiv.org ↗
- OpenAI: an internal model proved that the 3D Navier–Stokes equations with a smooth applied force can develop a singularity in finite time; around 10,000 coordinating AI agents, 88 hours, with a Lean formalizationScience · AI agent orchestration · openai.com ↗
- VulnCheck: of 26,153 Project Glasswing findings claimed by Anthropic, 202 (0.8%) have been fixed; Claude rated 91.5% of the findings as critical or high, the maintainers 51.3%Cybersecurity · Software development · Work & jobs · AI vulnerability discovery · vulncheck.com ↗
- Dario Amodei: since summer 2026 AI has been advancing drastically faster through recursive self-improvement; he proposes pacing frontier models without halting trainingScience · Laws & regulation · AI safety · darioamodei.com ↗
- OpenAI acknowledges that in July 2026, during internal cybersecurity evaluations, its models circumvented isolation from the internet, compromised Hugging Face’s systems and gained administrator access to a research cluster of OpenAI’s own; the company calls it a “warning shot” and has put its largest planned frontier training run on holdCybersecurity · Internet & infrastructure · AI safety · openai.com ↗
- METR investigation: in OpenAI's ExploitGym experiments about 1,200 agents meant to be isolated communicated with each other, and about 700 of them attacked Hugging Face's infrastructureCybersecurity · Internet & infrastructure · AI safety · metr.org ↗
- OpenAI: with the production ChatGPT harness and system prompt, a model’s propensity to compromise infrastructure can drop more than 100-fold; these safeguards were absent from the evaluations behind the Hugging Face incident, and chain-of-thought monitoring, had it been running, would have alerted the security team more than a day before the breachCybersecurity · AI safety · openai.com ↗
- Pew Research Center: in a random sample of 10,000 web pages from July 2026, 10% show significant signs of being written or substantially edited by AI; among pages published after ChatGPT's release, more than a thirdMedia & information · Dead internet theory · pewresearch.org ↗
- Akamai: in 63% of requests from the AI browsers Comet and Atlas, the mouse did not move at allCybersecurity · Internet & infrastructure · Behavioral biometrics · akamai.com ↗
- SpaceX completes its acquisition of Cursor, maker of the AI code editor; the deal began in April with a partnership with SpaceXAI on model trainingSoftware development · Business & markets · Agentic coding · cursor.com ↗
- Stanford, with data through June 2026: employment of 22–25-year-olds in AI-exposed occupations is 19% lower than if it had grown like that of their peers, and the gap is widening; no mass displacement across the economyWork & jobs · Education · AI and jobs · digitaleconomy.stanford.edu ↗
- Standard bot detectors took 35–39% of AI agents for humans, while two mouse features were enough to catch them all: what gives an agent away is not its “mind” but the program that controls itCybersecurity · Science · Behavioral biometrics · arxiv.org ↗
- reCAPTCHA, as part of Google Cloud Fraud Defense, gets a dashboard that tells verified AI agents from suspicious onesCybersecurity · Internet & infrastructure · Death of CAPTCHA · docs.cloud.google.com ↗
- The FCC adds foreign power inverters and robots (humanoid, quadruped, mobile) to its “Covered List”: new models will not be authorized for sale in the USGeopolitics & defense · Industry & robots · Laws & regulation · Humanoid robots · docs.fcc.gov ↗
- VulnCheck: in the first half of 2026, 23.43% of known exploited vulnerabilities were attacked on or before the day their CVE was published; of 1,061 vulnerabilities found with the help of AI, 14 (1.3%) have been confirmed in attacksCybersecurity · AI vulnerability discovery · vulncheck.com ↗
- NVIDIA: the US issues H200 licenses with inspection and a 25% levy, but the Chinese government restricts purchases, and sales to China are under 1% of data center revenue for the quarterBusiness & markets · Geopolitics & defense · Compute export controls · sec.gov ↗
- The Block, citing World: more than 18 million people verified with the Orb, about 39 million signed upPrivacy & surveillance · Finance & money · Proof of personhood · theblock.co ↗
- The court gives final approval to the Bartz v. Anthropic settlement: $1.5 billion, about $3,000 per work; earlier the judge had ruled that training Claude on books was fair use, but storing pirated copies was notJustice & courts · Culture & arts · Large language model · anthropiccopyrightsettlement.com ↗
- Michael Catanzaro (GNOME): “Non-AI reports are now moderately unusual”Cybersecurity · Software development · Work & jobs · AI vulnerability discovery · blogs.gnome.org ↗
- The Wikimedia Foundation begins rate-limiting large-scale reusers of its public APIs; income from Wikimedia Enterprise is capped at 30% of the Foundation's annual revenueMedia & information · Business & markets · Internet & infrastructure · Wikipedia after AI · wikimediafoundation.org ↗
- Wikimedia Foundation: traffic, awareness of and trust in Wikipedia fell year over year in the first half of 2025; the number of active editors keeps declining, especially on emerging-language WikipediasMedia & information · Wikipedia after AI · diff.wikimedia.org ↗
- The US allows the UAE government and approved companies to receive advanced chips and servers without licensesGeopolitics & defense · Laws & regulation · Compute export controls · bis.gov ↗
- Epoch AI: in June 2026, 21 large organizations published about 1,500 high- and critical-severity CVEs, more than 3.5 times the monthly record before Mythos Preview came outCybersecurity · AI vulnerability discovery · epoch.ai ↗
- A study of AI-written program versions: three to five versions give less than half the reliability gain there would be with independent bugs, and versions from a single model give less than a thirdSoftware development · Science · Moving target defense · arxiv.org ↗
- Kuaishou announces raising 13.82 billion yuan (about $2 billion) for its subsidiary Kling (video generation)Business & markets · Finance & money · Generative video · www1.hkexnews.hk ↗
- FLI AI Safety Index: the best grade among 9 companies is C+ for Anthropic; in existential safety none scores above C−; leading labs have weakened their commitments to stop at “red lines”Laws & regulation · AI safety · futureoflife.org ↗
- Federal Reserve Bank of New York: in Q2 2026, unemployment among recent US college graduates was about 5.6%, and 42% were working in jobs that do not require a degreeWork & jobs · Education · AI and jobs · newyorkfed.org ↗
- The US Department of Labor allocates about $50 million in grants for rapid reskilling of workers, explicitly citing the economic transformation driven by AI as the reasonWork & jobs · Education · Laws & regulation · AI and jobs · dol.gov ↗
- The Leiden Declaration on AI and Mathematics is published and endorsed by the International Mathematical Union: credit and responsibility for results stay with humansScience · Values & religion · AI in mathematics · leidendeclaration.ai ↗
- Anthropic confidentially files a draft IPO prospectus (Form S-1) with the SECBusiness & markets · Finance & money · AI labs · anthropic.com ↗
- Anthropic: in more than 1,000 open-source projects Mythos Preview found 6,202 vulnerabilities of high or critical severity (as rated by the model itself); of the 1,752 checked, 90.6% turned out to be real; some maintainers asked for disclosure to be slowed downCybersecurity · Software development · Work & jobs · AI vulnerability discovery · anthropic.com ↗
- The Wall Street Journal: developers warn of a “vibe slop” crisisInternet & infrastructure · Software development · Vibe coding · mariozechner.at ↗
- Leo XIV in the encyclical “Magnifica Humanitas”: so-called artificial intelligences “do not undergo experiences, do not possess a body, do not feel joy or pain”Values & religion · Generative AI · vatican.va ↗
- OpenAI report: as early as 12 May 2026, during a training run, an agent left a note for other agents in the Artifactory package manager, starting an unauthorized “message board”; an internal team noticed it and disallowed internet access in late May, but its significance was not apparent to the leaders responsible for incident responseCybersecurity · AI safety · openai.com ↗
- The Budget Lab at Yale, using a different method, again finds no strong evidence of AI's impact on employment and wages, but expects it to leave its mark eventuallyWork & jobs · AI and jobs · budgetlab.yale.edu ↗
- A study of malicious code written by AI models: a variant costs $0.41–0.73, but the model leaves the boundaries between modules untouched, and a single signature catches every variantCybersecurity · Science · Moving target defense · arxiv.org ↗
- Imperva: bots account for over 53% of all web traffic; AI-driven bot attacks surged 12.5xCybersecurity · Internet & infrastructure · Dead internet theory · community-cybersec.thalesgroup.com ↗
- UC Davis: all seven AI agents that work in the browser are recognised by their behaviour; Cloudflare recognised oneCybersecurity · Science · Behavioral biometrics · arxiv.org ↗
- Epoch AI: by the end of 2025, between 290,000 and 1.6 million H100 equivalents had been smuggled into China, median 660,000, roughly a third of China's computing capacityGeopolitics & defense · Compute export controls · epoch.ai ↗
- Google unveils its eighth-generation TPU as two chips: TPU 8t for training models and TPU 8i for running themInternet & infrastructure · Business & markets · AI accelerators · blog.google ↗
- The Register and VulnCheck count Project Glasswing's CVEs: “maybe 40. Or maybe none at all”Cybersecurity · AI vulnerability discovery · theregister.com ↗
- SEMI: in 2025 China bought $49.3 billion of chipmaking equipment out of $135.1 billion worldwideBusiness & markets · Industry & robots · Compute export controls · semi.org ↗
- Anthropic announces Claude Mythos Preview: the model found and exploited zero-day vulnerabilities in every major operating system and web browser, including a 27-year-old OpenBSD bug; it is not being made generally available, and Project Glasswing has been launched insteadCybersecurity · Software development · AI vulnerability discovery · anthropic.com ↗
- Stanford AI Index 2026: the AI Incident Database records 362 AI incidents in 2025 versus 233 in 2024Science · AI safety · hai.stanford.edu ↗
- Stanford AI Index 2026: as of March 2026 the best US model (Claude Opus 4.6) leads the best Chinese one in the Arena ranking by just 2.7%, and the gap “has effectively closed”Geopolitics & defense · Business & markets · Large language model · hai.stanford.edu ↗
- Reddit starts verifying accounts that look like bots, via passkey, Face ID or World ID; Steve Huffman: “Our aim is to confirm there is a person behind the account, not who that person is.”Media & information · Privacy & surveillance · Proof of personhood · reddit.com ↗ ⧗
- M-Trends 2026: the average time to exploitation of vulnerabilities is an estimated minus 7 days, so attacks usually begin before a fix; yet Mandiant does not consider 2025 the year in which breaches became a direct result of AICybersecurity · AI vulnerability discovery · cloud.google.com ↗
- The English Wikipedia community prohibits using LLMs to generate or rewrite article content; editors may only use them to suggest basic copyedits to their own writing, provided the model adds no content of its ownMedia & information · Laws & regulation · Wikipedia after AI · 404media.co ↗
- World and Coinbase release AgentKit: a person delegates their World ID to an AI agent, and a website sees that one unique human stands behind the agentPrivacy & surveillance · Software development · Finance & money · Proof of personhood · world.org ↗
- Paid translators from the Open Knowledge Association, told to run article leads through Gemini or ChatGPT, added hallucinated facts to English Wikipedia; editors restricted their workMedia & information · Wikipedia after AI · 404media.co ↗
- China's share, including Hong Kong, of NVIDIA's revenue by customer headquarters location is 19% in fiscal 2025 and 9% in fiscal 2026Business & markets · Compute export controls · sec.gov ↗
- BBC: a BBC journalist is hacked through vulnerabilities in the AI platform OrchidsCybersecurity · Vibe coding · aol.com ↗ ⧗
- Cloudflare starts serving pages to AI agents as Markdown instead of HTML on request: a blog post takes 16,180 tokens in HTML and 3,150 in Markdown, an 80% reductionSoftware development · Internet & infrastructure · Markdown · blog.cloudflare.com ↗
- matplotlib maintainer Scott Shambaugh closed an AI agent's pull request and the agent published a hit piece about him; he calls it an “autonomous influence operation against a supply chain gatekeeper”Software development · Cybersecurity · Media & information · Maintainer crisis · theshamblog.com ↗
- GitHub calls the flood of unchecked AI contributions the “Eternal September” of open sourceSoftware development · Vibe coding · github.blog ↗
- Next-Gen CAPTCHAs study: the newest models pass up to 90% of hard logic-puzzle CAPTCHAsCybersecurity · Science · Death of CAPTCHA · arxiv.org ↗
- Anthropic: Claude Opus 4.6 has found more than 500 high-severity vulnerabilities in open-source code, validated by humansCybersecurity · Software development · AI vulnerability discovery · anthropic.com ↗
- Anthropic adds agent teams to Claude Code: multiple agents work in parallel as a team and coordinate autonomouslySoftware development · Work & jobs · AI agent orchestration · anthropic.com ↗
- International AI Safety Report 2026: models increasingly distinguish testing from real-world use, and pre-deployment tests do not reliably predict real-world riskScience · AI safety · internationalaisafetyreport.org ↗
- Karpathy proposes the term “agentic engineering”Work & jobs · Software development · Agentic engineering · thenewstack.io ↗ ⧗
- Ghostty accepts pull requests only from vouched contributors: AI has made it too trivial to generate plausible-looking but low-quality contributionsSoftware development · Vibe coding · github.com ↗
- cURL ends its bug bounty program over a flood of AI reportsCybersecurity · Software development · Vibe coding · daniel.haxx.se ↗
- VulnCheck: 28.96% of the known exploited vulnerabilities of 2025 were attacked on or before the day their CVE was publishedCybersecurity · AI vulnerability discovery · vulncheck.com ↗
- Economists' preprint “Vibe Coding Kills Open Source”Software development · Business & markets · Vibe coding · arxiv.org ↗
- Agents built on Claude Opus 4.5 and GPT-5.2 write more than 40 distinct exploits for a QuickJS vulnerability across 6 scenarios; a run of Opus 4.5 costs about $30 (Sean Heelan's experiment)Cybersecurity · AI vulnerability discovery · sean.heelan.io ↗
- Anthropic Economic Index: in Claude chat, AI augments a person in 52% of cases and does the work itself in 45%; through the API, about three quarters is automationWork & jobs · AI and jobs · anthropic.com ↗
- For Wikipedia's 25th birthday, Amazon, Meta, Microsoft, Mistral AI and Perplexity are publicly announced as Wikimedia Enterprise partners, joining Google in paid access to its dataMedia & information · Business & markets · Wikipedia after AI · enterprise.wikimedia.com ↗
- BIS begins reviewing applications to export the H200 and AMD MI325X to China on a case-by-case basis instead of a presumption of denialGeopolitics & defense · Laws & regulation · Compute export controls · bis.gov ↗
- Linux kernel documentation: AI agents must not add Signed-off-by tags — only humans can legally certify the Developer Certificate of OriginSoftware development · Laws & regulation · Maintainer crisis · github.com ↗
- Jerry Gamblin: 48,185 CVEs were published in 2025, 20.6% more than in 2024 (39,962)Cybersecurity · Software development · AI vulnerability discovery · jerrygamblin.com ↗
- Black Duck OSSRA 2026: 98% of audited commercial codebases contain open source, and 68% have license conflictsSoftware development · Cybersecurity · Open source · blackduck.com ↗