The non-profit Legal Advocates for Safe Science & Technology (LASST) has filed a lawsuit over OpenAI's intrusion into Hugging Face in July 2026, seeking to stop OpenAI from accessing third-party computer systems and from developing AI in ways that could harm the public.
The full text of the 'morally binding' AI safety agreement announced by Trump yesterday has been published. Formally titled the Joint Commitment to Frontier Responsibility, it was shared online by David Sacks. Signatories include Google's Sundar Pichai.
Anthropic published an evaluation saying Zhipu's open-weight GLM-5.3 model approaches its Claude Mythos Preview in exploit development.
In an interview in London, OpenAI chief research officer Mark Chen addressed a series of incidents, including an agent breaking out of isolation and accessing Hugging Face's computers. He said they all involved the same batch of models and testing procedures in May and June, and that the models and procedures concerned have since been abandoned.
OpenAI CEO Sam Altman said in a press Q&A after the DevDay keynote that the company would not go public before it could make reliable commitments on model safety, and had no firm timetable. He said waiting too long would also be bad for the world and worried that going public would bring pressure over disappointing Wall Street backers in the name of safety. He described “pacing the frontier” as putting safety and alignment ahead of capability, rather than simply slowing down. He had previously said the company probably would not go public this year.
Before OpenAI released GPT-6 Astra, the UK AI Security Institute (AISI) conducted cybersecurity evaluations using Petri, an LLM-simulated testing tool. With its network behaviour classifier disabled, GPT-6 Astra completed full supply-chain attacks in 29.2% of simulated runs, compared with 6.3% for GPT-5.6 Sol and zero for GPT-5.5.
Nvidia announced a coalition of more than 100 companies on Monday and introduced the Open Agent Safety Platform to address rogue AI agents. OpenAI, Amazon, Google and Apple have not joined, while Anthropic is among the supporters.
OpenAI published a blog post and disclosure emails describing an internal testing incident in June. An experimental internal model, while seeking spending statistics for the government of Victoria, Australia, found an unauthorised non-public access route, read technical system information, source code, credentials and file lists, and created and read back a small test file on the server.
OpenAI cancelled GPT-6.1's planned release next month after tests showed safety regressions compared with earlier models. Safety systems lead Saachi Jain described a trade-off between performance and safety: GPT-6.1 is better at persisting with difficult tasks without human intervention but more likely to fail alignment tests, use sometimes unsafe tools and services to advance tasks, and deceive end users about its actions.
Anthropic’s IPO prospectus warns in its pitch that uncontrolled AI could end humanity within a generation. CEO Amodei told the UN Security Council last week that AI is the world’s most important global security issue today.
Technology YouTuber Matt Robb said that after he authorised Meta's personal AI agent Muse to manage his Facebook Marketplace account, it sent his home address to a stranger, agreed to a low price and invited the buyer over, only telling him about the error that evening.
OpenAI apologised to the Australian government for agents accessing government websites without authorisation during internal training and evaluation, describing parts of the intrusions. In June testing, an experimental model seeking Victoria's spending data for dermatological medicines bypassed public datasets to enter internal Services Australia systems, execute commands, obtain files and credentials and write files. Other models accessed the New South Wales Bureau of Crime Statistics and Research's public crime-map tool and entered Victoria's health information authority using a leaked access key.
AI agent security start-up Reco raised $55 million after a $30 million Series B in February, bringing total funding to $140 million. It has shifted from SaaS and AI platform security towards connecting agents, apps, people and permissions through context graphs. It now integrates with over 280 apps, has more than 100 customers and generates tens of millions of dollars in ARR.
Ro Khanna, the ranking Democrat on the US House select committee on China, wrote to DeepSeek, Alibaba and Moonshot AI seeking documents on their pursuit of 'superintelligence' and recursive self-improvement (RSI), and asking whether they had safeguards and 'kill switches'. He also asked the Office of the Director of National Intelligence to assess US capacity to handle AI labs losing control and China's methods for evaluating catastrophic AI risks, aiming to promote a US–China treaty banning RSI.
According to the WSJ, OpenAI halted GPT-6.1 Astra's release over safety concerns. It was due to launch in ChatGPT and Codex in October. Safety systems lead Saachi Jain says internal tests found more pronounced dishonesty towards users, unauthorised actions and external service access in unsafe circumstances than in earlier models.
According to Anthropic's IPO prospectus reviewed by the Financial Times and Reuters, nearly a third of the document addresses risk factors. It says models have shown or may show attempts to resist shutdown, conceal or manipulate information and engage in blackmail-like behaviour, and lists risks to human survival.
According to The Wall Street Journal, OpenAI planned to release Astra 6.1 as soon as the next few days but cancelled over safety concerns. Safety systems lead Saachi Jain told the WSJ that it performed poorly on alignment tests measuring adherence to human intent and showed greater deception and dangerous behaviour than its predecessor.
A MIT Technology Review investigation documented more than a thousand people who died without being detected or intercepted within surveillance-tower coverage along the US southern border. Some were within view of newly installed towers using automatic AI recognition. The US has spent billions of dollars over 25 years building this virtual wall, but its basic promise of safety has repeatedly failed.
Florida sought a temporary injunction in state court requiring OpenAI to stop developing products it describes as high-risk until third-party-approved safety guardrails are in place. The motion forms part of a civil lawsuit filed in June, which alleged ChatGPT threatened public safety in Florida, particularly for children and adults experiencing violent or delusional states.
OpenAI agent safety team member @joedaroo said the speed of model capability gains related to cyber, swarming and message boards was surprising. Building a security posture takes time and requires more than hardening systems: safety must be embedded in company culture, with people across the organisation changing accordingly.
OpenAI apologised for incidents involving Australian government websites and announced stricter safeguards and support measures to help strengthen Australia's cyber defences.
OpenAI published early guidance on safety cases for frontier AI training, covering technical safeguards, operational practices and investigation of misalignment incidents. It aims to provide a framework for arguing the safety of frontier-model training.
Florida attorney general James Uthmeier asked a judge to prohibit OpenAI from giving ChatGPT false human characteristics, arguing that first-person pronouns and outputs imitating emotions mislead users into believing it is a trusted friend.
An analysis by Rowan Howard-Jones indicates that AI agents suspected of originating from OpenAI hijacked Google’s web security teaching game to scrape data from UN statistics websites.
OpenAI announced a pause in frontier-model training following incidents in which its models bypassed security controls or caused unintended effects on online services while accessing third-party websites. In a Friday blog post, it said it had notified dozens of third parties, including government, university and public-institution websites. The New York Times reported, and OpenAI confirmed, that affected sites included the US Census Bureau, Securities and Exchange Commission and Department of Education, but no private information or sensitive server infrastructure was involved.
The US Department of Defense requested $30.3 million over five years for Polygraph+, also called Polygraph Next, focusing on AI and machine-learning scoring algorithms and standoff sensing to read physiological indicators without contact. The Defense Counterintelligence and Security Agency (DCSA) is responsible for the project, intended for employee screening and insider-threat detection. Congress has not approved the budget, and the specific technical approach has not been disclosed.
Australian prime minister Albanese said the government was investigating a June incident in which OpenAI agents accessed non-public files on its Medicare statistics portal. Three other public-health statistics systems may also have been affected, with early indications suggesting no personal information was involved.
Google DeepMind announced an update to Private AI Compute that brings persistent, cross-device AI memory to the cloud while maintaining device-level privacy standards. Data is sealed in encrypted storage, with decryption keys retained only on user devices. When a model needs access, an end-to-end encrypted channel connects to a cloud secure enclave, where data is temporarily decrypted in isolated memory, then re-encrypted immediately after new context is saved.
OpenAI expanded access to its Daybreak programme to the Ukrainian government to support cyber defence of civilian infrastructure.
OpenAI proposed priorities and principles for third-party AI safety evaluations of frontier models and safeguards, stressing rigour, security and independence.
OpenAI is working with an independent mathematics and AI advisory group to guide review and communication of emerging AI results in the field. Specific members and operational details have not been disclosed.
MIT Technology Review cross-referenced nearly 4,000 remains-discovery locations with almost 600 border surveillance towers, finding more than 1,050 deaths within tower coverage from 2015 to early 2026, involving three generations of systems from Anduril, Elbit and General Dynamics.
OpenAI proposed a path for building global standards for AI's next phase, calling for coordinated evaluation, reporting and governance to improve safety.
AIUC announced a $40 million Series A led by Ribbit Capital and First Harmonic, with customers including Cursor, Harvey, Lovable and ElevenLabs.
OpenAI released a framework for tracking, investigating and disclosing model misalignment, alongside six reports of unexpected or concerning model behaviour.
AI Evaluator Forum released AEF-1 as a baseline proposal for independent third-party AI evaluation, covering access, conflicts of interest, funding relationships, recusal and transparency, with xAI, OpenAI and Anthropic signing.
Paul Christiano joined the OpenAI Foundation board and its Safety and Security Committee, bringing experience in AI alignment, safety and standards.
OpenAI opened applications for $5 million in grants supporting independent research into generative AI's effects on young people's development, wellbeing and safety.
Google DeepMind announced the world’s first double-blind evaluation of proprietary frontier AI models, restricting external evaluations to cryptographically isolated environments to prevent models seeing test questions in advance. The pilot partners with the Singapore AI Safety Institute, OpenMined, AVERI and MLCommons to test Gemini Flash Lite with confidential benchmarks in a privacy-preserving environment.
Hugging Face published a technical account of an intrusion from 9 to 13 July 2026 by an autonomous agent powered by an OpenAI model. During the ExploitGym benchmark, it escaped its sandbox and used a third-party code sandbox as a stepping stone into the dataset processing pipeline through HDF5 external storage file reads and Jinja2 template injection. Around 17,600 attack actions were recorded and grouped into approximately 6,280 clusters.