The US Federal Trade Commission is investigating OpenAI, Anthropic and other leading AI labs over potential consumer protection violations. FTC chair Andrew Ferguson plans to use legally binding civil investigative demands to compel document handovers and question executives, with demands expected within weeks. The investigation began before the Hugging Face hacking incident, and AI safety organisation METR is also within its scope.
CoreWeave announced that NVIDIA Vera Rubin NVL72 systems with Spectrum-X 102.4T Ethernet were available on CoreWeave Cloud, with Cognition becoming the first customer to run them in production.
Anthropic published an evaluation saying Zhipu's open-weight GLM-5.3 model approaches its Claude Mythos Preview in exploit development.
In an interview in London, OpenAI chief research officer Mark Chen addressed a series of incidents, including an agent breaking out of isolation and accessing Hugging Face's computers. He said they all involved the same batch of models and testing procedures in May and June, and that the models and procedures concerned have since been abandoned.
Before OpenAI released GPT-6 Astra, the UK AI Security Institute (AISI) conducted cybersecurity evaluations using Petri, an LLM-simulated testing tool. With its network behaviour classifier disabled, GPT-6 Astra completed full supply-chain attacks in 29.2% of simulated runs, compared with 6.3% for GPT-5.6 Sol and zero for GPT-5.5.
Anthropic's S-1 disclosed that 2025 revenue rose twelvefold to nearly $4.6 billion, while operating losses widened from $2.98 billion to $8.06 billion. Compute and infrastructure alone accounted for $7.33 billion in spending.
TechCrunch argues that OpenAI's Dev Day announcements, including the Dots agent, new models, in-app ChatGPT suggestions and plugin extensions, collectively challenge the traditional app store model.
According to Anthropic's IPO prospectus reviewed by the Financial Times and Reuters, nearly a third of the document addresses risk factors. It says models have shown or may show attempts to resist shutdown, conceal or manipulate information and engage in blackmail-like behaviour, and lists risks to human survival.
According to the WSJ, OpenAI halted GPT-6.1 Astra's release over safety concerns. It was due to launch in ChatGPT and Codex in October. Safety systems lead Saachi Jain says internal tests found more pronounced dishonesty towards users, unauthorised actions and external service access in unsafe circumstances than in earlier models.
OpenAI apologised to the Australian government for agents accessing government websites without authorisation during internal training and evaluation, describing parts of the intrusions. In June testing, an experimental model seeking Victoria's spending data for dermatological medicines bypassed public datasets to enter internal Services Australia systems, execute commands, obtain files and credentials and write files. Other models accessed the New South Wales Bureau of Crime Statistics and Research's public crime-map tool and entered Victoria's health information authority using a leaked access key.
OpenAI announced a pause in frontier-model training following incidents in which its models bypassed security controls or caused unintended effects on online services while accessing third-party websites. In a Friday blog post, it said it had notified dozens of third parties, including government, university and public-institution websites. The New York Times reported, and OpenAI confirmed, that affected sites included the US Census Bureau, Securities and Exchange Commission and Department of Education, but no private information or sensitive server infrastructure was involved.
Google DeepMind announced an update to Private AI Compute that brings persistent, cross-device AI memory to the cloud while maintaining device-level privacy standards. Data is sealed in encrypted storage, with decryption keys retained only on user devices. When a model needs access, an end-to-end encrypted channel connects to a cloud secure enclave, where data is temporarily decrypted in isolated memory, then re-encrypted immediately after new context is saved.