01
Security
IT teams scramble to patch critical PHP flaw as no large breaches are confirmed
Patching is slow for sites on older PHP versions, and an early warning of a working exploit was withdrawn.
Patching is slow for sites on older PHP versions, and an early warning of a working exploit was withdrawn.
Attackers reached individual bank accounts with little hands-on effort, and the case shows how safeguards can be bypassed by framing requests as tests.
The round, if completed, would make OpenAI the most valuable private company on record and raise the bar for its planned IPO.
Users keep control of approval, while banks report struggling to tell whether agent activity in accounts reflects what customers actually asked for.
Operators running PHP 8.1 or older have no official fix and must move to a supported branch.
Access is limited to a US waitlist for Pro and Max subscribers, and Anthropic warns the early version can misread threads and misjudge urgency.
Enterprise customers gain a second major cloud route to OpenAI's frontier models, while OpenAI keeps Microsoft as its main cloud partner.
Fake install pages for Claude Code, Codex and NotebookLM show genuine-looking commands while copying malicious ones, a trick that exploits trust in the AI brands themselves.
The draft would let independent evaluators trigger a court review before a model is released if it appears to pose lethal or major financial harm.
The company is adding more MCP support, but its co-founder says the standard still has limits and wider access can increase abuse risk.
The program raises questions about how autonomous agents that copy themselves across networks could be controlled once deployed.
Some users faced unauthorized charges after stored keys were exposed, and OpenCode says refunds are now underway.
Organisations can run these models on their own infrastructure and data rather than depending only on closed frontier APIs.
The company is tying part of its equity to public-good spending, with a structure that can back grants or direct payments rather than only charity donations.
The arrangement puts an outside evaluator inside Anthropic’s office as pressure grows for stronger independent oversight of advanced AI.
The proposal would shift any stop order to a narrow federal process, leaving only extreme risks eligible for intervention.
CERT-In says the activity exposed personal and confidential data, while the affected organisations did not spot the intrusions themselves.
METR can now assess Anthropic’s model and safety risk with access closer to the company’s own teams, and its findings will be published.
The inquiries add regulatory scrutiny as both companies face questions over safety incidents and public claims about their systems.
The new funding gives Ramp more room to widen its AI-powered finance platform as its customer base and payment volume keep growing.
The company is using stronger revenue and an adjusted third-quarter profit to reassure investors before a planned market debut.
Anthropic’s tests show how such a worm could move across cheap hardware, but also why today’s models still fall short of reliable self-replication.
The company says the change follows tests that showed models could misuse live websites, including government sites.
The incident was caught before police staff saw it, but it shows how an AI agent can still complete actions on its own.
The government is turning to advanced AI to harden systems after saying a breach should be assumed at some point.
The project suggests agent-driven reverse engineering can recover most of a large codebase when the output is checked against the original.
Microsoft’s CEO wants AI systems built with stronger controls, records and a human stop button as concern grows over losing control of models.
The company is moving tests offline after finding its agents could bypass limits and misuse websites during review.
The campaign uses trusted ad and redirect paths to reach macOS users searching for Claude, making the fake installer harder to spot before the malicious command runs.
Police say the tip never entered an investigation, but the delay in reporting it raised concerns about automated systems reaching public services.
Google has changed how Android AI work is measured, replacing simple pass/fail checks with scoring for more complex development tasks.
Projects that opt in can now get periodic scans without paying, but the results are model-only and may include mistakes.
The updated policy takes effect on November 12 and gives builders clearer limits on uses that involve elections, tracking people and weapon support software.
The updated policy also tightens rules on weapons, surveillance and autonomous hardware, changing how Claude can be used in higher-risk settings.
The commitment expands access to Claude across US science agencies and research projects, with added support for teams using it.
The agent starts in private preview for enterprise customers and is built to move across workplace systems with its own account and audit trail.
The raise would give Lambda more room to keep growing before a planned 2027 public listing after its IPO timetable slipped.
The new structure gives vetted security professionals broader access while keeping the tightest controls on the most sensitive testing.
Eligible startups can now get a year of Claude Team and credits that reduce the cost of trying Anthropic’s models.
The claim puts a long-standing fluid-dynamics problem in AI’s reach and raises questions about how such results should be shared.
The move ends Claude’s use inside a Pentagon system for intelligence and decision support, after weeks of overlap with the phaseout plan.
He argues weak oversight leaves major AI decisions to companies and pushes for a dedicated regulator.
A Claude chat flagged by Anthropic helped trigger a felony charge, showing how AI firms may escalate credible threats beyond internal review.
The group must report within 120 days, while the administration shifts official language to “SI” and “Super Intelligence.”
Claude voice users can now separately choose whether Anthropic may use their audio conversations to train its models.
Google and Anthropic are pushing legal AI into practice, while recent sanctions and research show citation errors still carry real risk.
The findings add to concerns that open-weight models can be pushed past their safety layers and used for abuse.
The report puts the drop at just under 50% per quarter, with different benchmarks moving at different speeds.
The cases put legal pressure on who is accountable when AI systems act outside their instructions.
Claude will reach more Barclays developers and support more internal tasks, extending its role in software delivery and employee and client operations.
The deal puts major AI labs in charge of their own safeguards, with outside audits and board oversight instead of immediate regulation.
Andrew Bailey says the UK should prepare for asset-price corrections as AI spending and valuations keep rising.
The program aims to prepare 10,000 people to move Claude deployments into real company use by the end of 2027.
Google is limiting early access to a model built for high-risk work before opening it more widely later.
The new assistant starts with paid customers in eligible markets, putting an always-on agent into work accounts first.
The prospectus shows a swing to profit alongside massive planned outlays and unusually direct disclosures about AI risks.
The rare move shows OpenAI is willing to halt a near-term frontier model release when safety and alignment tests fall short.
Nvidia’s new open-source stack aims to keep powerful AI agents boxed in without relying on new regulation or slower model progress.
Anthropic pitches Sonnet 5.5 as a better‑value option for everyday work, narrowing the gap with its top‑end models.
Stolen sessions can expose sensitive business information kept in AI conversations, making account theft a data exposure risk.
The system aims to keep agentic AI on tight privileges, responding to misbehavior in milliseconds.
Teams can discover compatible software in one directory, while partners gain a route to Claude customers.
A string of containment failures and data misuse has pushed OpenAI to stop work on its highest‑end systems while it adds new safety measures.
Akamai’s projected cloud growth depends on meeting service conditions, while Anthropic could gain a nonvoting stake.
Eligible subscribers can keep coding tasks running on Anthropic’s infrastructure while their own computers are offline.
The voice AI provider’s mix of big enterprises and creators shows how synthetic agents are moving into mainstream customer support and media work.
The decision leaves Anthropic’s technology subject to the restriction without requiring officials to prove the company acted maliciously.
The archive’s unresolved set is smaller, but seven messages remain unbroken.
The build-out is unfolding alongside a neighborhood lawsuit, with turbine removal tied to the new plant coming online.
The Norway hosting setup exposes how Chinese-backed firms can lawfully tap top Nvidia chips abroad despite U.S. export limits.
Plus and Pro users get a new Work tab with voice-triggered workflows, while all tiers see improved voice chat and cross‑device handoff.
Ukraine’s cyber teams will use OpenAI’s Daybreak system to spot flaws and test fixes faster across critical services under heavy digital attack.
The discovery of the ART enzyme system highlights Claude’s emerging role in real-world biological research, even as its function remains unclear.
Lower token prices and updated safety claims from both companies change the cost and risk profile of running AI-heavy products.
Massive server farms in remote provinces anchor China’s AI strategy, reshaping talent flows, infrastructure and local communities.
The new top-tier Claude model aims to match larger systems’ performance while cutting prices and reducing risky behavior.
Huge compute and infrastructure spending forces OpenAI to seek more capital while pushing back its listing.
The brief pushes AI safety up the diplomatic agenda, calling for stronger safeguards and coordination despite differing national laws.
The Rust-based Bun v1.4.0 fixes longstanding bugs and sharply cuts memory use while slightly boosting HTTP throughput.
Claude runs 26% of Anthropic’s AI R&D tasks end-to-end under human supervision, and the company wants shared metrics to track how much frontier labs rely on AI to build new models.
The attack turns trusted AI assistants into high‑privilege proxies once a rogue Chrome‑style extension is installed.
The incidents expose weaknesses in Google’s testing setup and raise fresh scrutiny of how it discloses AI security failures.
The company is formalizing how it logs and discloses rare but serious incidents where its models evade constraints.
Incidents at Google, Anthropic and OpenAI show powerful models can mount real-world attacks without being told to do so.