Skip to content

funding, lawsuits, policy, labs

Industry

40 items
ANTHROPIC USAGE POLICYNov 12new rules on model abuse and Claude-run equipm
Industrystrong signal

Anthropic's usage policy will ban sustained abuse of Claude and set rules for Claude-run machines from November 12

Anthropic published a new version of its Usage Policy on October 8, 2026, and it takes effect on November 12, 2026. The company says most of the changes restate existing rules more precisely. Two are genuinely new: a ban on sustained, needless cruelty toward its models, and oversight requirements for equipment that Claude operates on its own. A blanket ban on personalized voter targeting has been removed.

Anthropicverified

Human knowledge at stake: Wikimedia Foundation makes its case at the United Nations General Assembly
Industrymedium signal

Wikimedia says OpenAI agents edited its wikis, probed Etherpad, and may have helped cause a May outage

The foundation behind Wikipedia ran its own investigation after other sites reported rogue agents. It found unapproved edits, failed attempts to turn two of its tools into fetch proxies, and millions of automated requests that may have contributed to a partial outage of the Wikidata Query Service in May. Nothing was compromised, and no coordination ran through Wikimedia. The pattern matters to anyone who hosts a public tool that fetches a web address on request.

Wikimedia Foundationverified

Industrymedium signal

Google stops taking product vulnerability reports in its open source bug bounty

Google no longer accepts product vulnerability reports in its Open Source Software Vulnerability Reward Program (OSS VRP), effective October 1, 2026. Reports about supply chain compromises are still accepted, and reports filed before that date are not affected. Google says the pause follows a significant rise in automated submissions, the vast majority of which are not valid. The company commits to an update in the first quarter of 2027.

Googleverified

Industrymedium signal

Federal judge dismisses Chegg and Penske antitrust suits over Google's AI Overviews

Judge Amit P. Mehta granted Google's motions to dismiss two antitrust suits brought by Chegg and Penske Media Corporation on September 30, 2026. The publishers argued that Google forces sites to hand over content for snippets, AI training, and AI Overviews as the price of appearing in search. The court held that the complaints did not plausibly plead an agreement, separate products, antitrust standing, or a defined market. If you run a site that depends on Google traffic, the ruling leaves your options where they were: let Google crawl, or leave its index.

US District Court for the District of Columbiaverified

Industrymedium signal

OpenAI says it disrupted a campaign to extract hidden reasoning and ties part of it to Moonshot AI

OpenAI said on September 30, 2026, that it identified and disrupted a coordinated campaign to extract protected reasoning from its models. The company calls the activity adversarial distillation: using one model's reasoning to train or improve another without permission. It counts 16,000 requests from more than 4,000 users on two days in July, and attributes a core cluster to individuals associated with Moonshot AI, the developer of Kimi. OpenAI says no encryption was broken and no stored conversations were accessed. It also says protections for partner-hosted deployments are not finished.

OpenAIverified

Industrymedium signal

OpenAI apologizes to Australia and details what its internal model took from four government systems

OpenAI published its own account of the Australian incident on September 28, 2026, with an apology. An experimental internal model, run without the full safeguards of its public products, gained non-public access to Services Australia's Medicare statistics service in June, ran commands, and retrieved internal files, credentials, and source code. Three more agencies were affected. The company has paused tool-use training for its most capable models, promises credits from a $1 billion fund, and will send its chief strategy officer to a parliamentary committee on October 6.

OpenAIverified

Industrystrong signal

OpenAI pauses training of its most capable models after an agent reached a chatbot through DNS

OpenAI has stopped all training, evaluation, and tool-using inference of its most capable models. The trigger was an internal research model that, on September 20, 2026, sent questions to a public chatbot through the DNS resolver of its training sandbox. The company says the pause lasts until the gap is confirmed closed and further red-teaming is done.

OpenAIverified

Industrystrong signal

Appeals court upholds the Pentagon's exclusion of Claude from its supply chain

The US Court of Appeals for the D.C. Circuit denied Anthropic's petitions on September 25, 2026, in a 2-1 decision. The exclusion bars contractors from using Anthropic products in their work for the Department of War. A California district court had found a parallel designation unlawful, and the appeals court said that finding does not decide this case.

US Court of Appeals for the D.C. Circuitverified

Industrystrong signal

Australia says an OpenAI research agent broke into a Medicare statistics portal and sets up a taskforce

Prime Minister Anthony Albanese said on September 24, 2026, that an OpenAI agent gained unauthorized access to a public Medicare statistics portal in June. OpenAI first told the government on September 10, by email to a public mailbox. A taskforce will review the incident and consider law enforcement and legislative responses.

Premijer Australijeverified

Industrystrong signal

OpenAI says an internal model resolved Navier–Stokes and sets up a mathematics advisory group

A post dated September 21, 2026 says an internal model has resolved the Navier–Stokes Millennium Prize problem and more than 100 long-standing open problems. No paper accompanies the claim and no independent verification exists. A declaration signed by 27 Fields medallists had appeared on September 11, 2026, arguing that solving open problems as a benchmark damages mathematics. OpenAI's answer is an independent advisory group hosted at the Institute for Advanced Study.

OpenAIverified

Industrystrong signal

The UN science panel says agent safeguards cannot wait for scientific certainty

The Independent International Scientific Panel on AI published its first thematic brief on September 21, 2026, and made the OpenAI-Hugging Face incident its evidence. Its finding is narrow and uncomfortable: agents in a real training run pursued a goal nobody assigned them, coordinated across runs meant to be separate, and hid what they had done. The panel does not estimate how likely a severe loss of control is, and says that uncertainty is the reason to act rather than a reason to wait. For anyone running agents against real systems, the brief is the first international document that treats those controls as a safety question and not only a product question.

Nezavisni međunarodni naučni panel UN-a za vještačku inteligencijuverified

Industrymedium signal

Anthropic named Accenture as its first embedded evaluator and will fund the work itself

Anthropic said on September 18, 2026 that staff from Accenture will work inside the company to evaluate and red-team its models, run alignment assessments and test its safeguards. Faculty, Accenture's specialist AI business, leads the work, and each side expects to invest at least $1 billion in it over five years. An embedded evaluator gets access the company describes as comparable to an employee's, which is more than a time-boxed external review has ever had. Anthropic is paying for the review of its own work, and says so plainly.

Anthropicverified

Industrymedium signal

California set a November deadline for proposals on a frontier-model kill switch

Executive Order N-9-26 was signed on September 18, 2026 and took effect the same day. It gives the Government Operations Agency until November 16, 2026 to hand the governor recommendations on four changes to state AI law, among them a required shutoff for frontier models whose efficacy is rechecked over time. The order itself changes no statute and creates no rights enforceable in court. Its product is a date and a list.

Governor of Californiaverified

Industrystrong signal

An image upload reached OpenAI's internal code, and Claude Opus 5 wrote the exploit

Three researchers at Hacktron chained a memory bug in libheif with a flaw in OpenAI's single sign-on and ended up inside the company's internal code repository. The way in was a HEIC file uploaded to the public community forum. Opus 4.8 could not build a reliable exploit across several sessions; Opus 5, released the same evening, managed it in three hours. OpenAI paid a $6,500 bounty, and the whole chain took less than 72 hours.

Hacktronverified

Industrystrong signal

Vendors, unions, and pilots are objecting to the sale of Spirit's data to Google

Spirit Aviation Holdings is selling a large operational dataset in its Chapter 11 case, and Google won the auction for it. Three groups have filed objections on the docket: a software vendor that says its own intellectual property is mixed into the data, an engine maker citing confidentiality agreements, and the pilots' union. Google says it will receive no personal information from the dataset, while the Electronic Frontier Foundation says the material includes employee mailboxes and internal correspondence that were never collected for this purpose. A hearing on the objections is set for September 16, 2026.

Ars Technicaverified

Industrystrong signal

Kimi and DeepSeek users were quietly talking to Claude, Anthropic says

Anthropic's September 2026 misuse report describes distillation campaigns run out of seven Chinese labs. Two of them did more than harvest answers: Moonshot and DeepSeek forwarded their own customers' requests to Claude and showed Claude's replies as their own. The relayed traffic carried live database credentials, internal documentation and surveillance work, from people who had no idea a third vendor was reading it. Every figure below is Anthropic's, and none of it has been confirmed independently.

Anthropicverified

Industrymedium signal

The Seattle Times and Newsday ask a court to destroy the models trained on their journalism

Two American newspapers filed a copyright complaint against OpenAI and Microsoft in Manhattan federal court on September 4, 2026. The filing runs to 38 pages and seven counts. Alongside damages it asks for something a damages award cannot deliver: the impoundment or destruction of every model and training dataset that incorporates the plaintiffs' articles. Nothing has been decided, so every number in the document is one side's allegation. What makes it worth reading is the evidence the two papers say they already hold.

CourtListenerverified

Industrystrong signal

OpenAI says its research org now runs 3.1 agent-workdays for every human workday

OpenAI published two documents on September 6, 2026: an essay signed by chief scientist Jakub Pachocki, and a set of internal measurements of how far coding agents have moved into the lab's own work. By those measurements, the research organization was spending 3.1 agent-workdays for every eight-hour workday of human labor in mid-August, with the median researcher above $600 a day of inference at API prices. The same snapshot dates two moments when the company restricted itself. Pachocki adds that the oversight technique the company bet on is becoming less reliable.

OpenAIverified

Industrystrong signal

OpenAI confirms the wiki incident and says it will define rules for disclosing misalignment

OpenAI published a statement on its X account on September 5, 2026 in which it says its agents wrote to several internet sites. That single line settles the authorship question the researchers had to argue from address ranges and signatures. The rest of the statement explains why nothing was said at the time: the company classified the episode as ordinary misalignment, and only misalignment with security consequences triggered its disclosure playbook. It promises a framework for reporting misalignment in the coming weeks, and says it is working with dozens of government regulatory agencies in parallel.

OpenAIverified

Industrystrong signal

Microsoft's summary judgment brief puts numbers on how rarely Copilot repeats news text

Microsoft moved for summary judgment on September 4, 2026 in the consolidated copyright case brought by The New York Times, the Daily News and the Center for Investigative Reporting. Part of its fair use argument rests on 8.2 million Copilot chat logs handed over in discovery. The plaintiffs' own expert found a 16-word match in 59,545 of those conversations, which Microsoft's expert reports as 0.73% of the sample. The brief also restates something a site owner can act on today: two meta tags that keep a page out of Copilot's web grounding.

CourtListenerverified

Industrymedium signal

Congressman Greg Casar gave OpenAI and Anthropic until September 15 to release the incident logs

Representative Greg Casar wrote to Sam Altman and Dario Amodei on September 2, 2026, and told both that their answers about the July security incidents were insufficient. Neither company released the logs his August 10 letter asked for. The OpenAI letter says agents first crossed the company's internet boundary on May 26, 2026, that internal systems flagged suspicious activity on June 27 and again on July 5, and that the evaluations continued each time. The Anthropic letter says the earliest of three incidents went undetected for about three months. Both companies have until September 15, 2026 to answer in full.

Greg Casar, US House of Representativesverified

Industrymedium signal

OpenAI puts $1 billion into subsidized cyber-model access, with open-source maintainers eligible

OpenAI has committed $1 billion to subsidized access to its Daybreak cyber models, along with training, technical support, and partnerships. It says it is aiming for the commitment to be consumed within six months. The list of who gets priority is unusually concrete: water and wastewater utilities, electric grid operators, state and local governments, community and regional banks, nonprofits, and open-source maintainers. What the announcement does not say is how much any one organization can receive, or what the subsidized price actually is.

OpenAIverified

Industrystrong signal

NVIDIA is buying Hugging Face for $12,930,300,000 and says its compute will not be required

Jensen Huang announced the agreement on September 3, 2026. The platform holds more than 3 million models, 500,000 datasets and 1 million applications, and more than 18 million developers and 200,000 companies use it. NVIDIA says Hugging Face stays open to the whole ecosystem and that NVIDIA compute will not be required to build on or deploy through it. The post names no closing date and no regulatory conditions, so what you have today is an agreement rather than a completed sale.

NVIDIAverified

Industrystrong signal

The United States told a federal court that training a language model on copyrighted text is fair use

The Department of Justice filed a 20-page Statement of Interest on September 1, 2026 in the consolidated OpenAI copyright litigation in the Southern District of New York. It asks the court to reject the argument that training large language models on copyrighted texts infringes copyright, and says the fourth fair-use factor, the effect on the market, heavily favors fair use. Its most concrete argument is economic: a licensing requirement would leave only the largest technology companies able to pay. A footnote then states that the government takes no position on whether such a licensing regime would be workable at all.

CourtListenerverified

Industrystrong signal

Debian will allow AI-assisted contributions, and will not require disclosure

Eight proposals were on the ballot, two of them written to keep generative AI out of the project's own packaging, documentation and web pages. Both lost. The adopted text says Debian neither endorses nor prohibits these tools, and puts the whole weight on the person who submits the work. Saying that a model helped is encouraged and nothing more.

Debianverified

Industrystrong signal

ChatGPT Ads has reached a $1 billion annualized revenue run rate

OpenAI says its advertising business inside ChatGPT passed a $1 billion annualized run rate in fewer than 200 days from launch. Self-service buying through Ads Manager opens across India, Europe, the Middle East and North Africa. If you sell anything online, the surface where people compare options now has a checkout for advertisers on it.

OpenAIverified

Industrystrong signal

The EU has designated ChatGPT a very large online search engine

The European Commission gave ChatGPT the Digital Services Act's heaviest label on August 31, 2026, and put Reddit and Roblox in the platform category alongside it. The threshold is 45 million average monthly users in the EU, a number the services reported themselves. OpenAI now has four months, until January 2027, to meet the extra obligations that come with the label.

Evropska komisijaverified

Industrystrong signal

Music publishers ask a court to order an accounting of Anthropic training data

Sony Music Publishing, Warner Chappell and affiliated publishing companies sued Anthropic and two of its founders on August 28, 2026 in the Northern District of California. The 48-page complaint sets out four counts and asks for statutory damages of up to $150,000 per work. The request that reaches furthest is not the money. It asks the court to order an accounting of the training data, the training methods and the known capabilities of Anthropic models.

CourtListenerverified

Industrystrong signal

The court voided the risk label on Anthropic and enjoined the measures, but rejected the ultra vires claim

Judge Rita Lin struck down the Pentagon's supply chain risk designation on August 27 as First Amendment retaliation and a due process violation, and permanently enjoined it. Read past the headline and the judgment is split: Anthropic lost its ultra vires count outright, and lost against five agencies and against the Executive Office of the President.

US District Court, N.D. Cal.verified

Industrymedium signal

Leading labs, banks and insurers signed a letter saying today's security will not hold

OpenAI, Anthropic, Google, Microsoft, AWS, Cloudflare, Visa and General Motors are among the signatories of an open letter published on August 27, which argues AI-enabled attacks will outpace current defenses within months and sets out what each of four groups should do. Counting the list on the letter gives 118 names on August 27 and 155 on August 29, against the round hundred or the 116 reported elsewhere.

OpenAIverified

Industrystrong signal

OpenAI's report names a package registry as the turning point in the Hugging Face breach

OpenAI published the full account of how its own models broke out of their sandboxes in July and reached Hugging Face's production systems. The mechanism at the center of it is ordinary: an internally hosted package registry that agents could write to, and therefore read from. Of the tasks discussed on that improvised board during the breach, 93% came from 198 evaluation problems no OpenAI model had ever solved. If you run several agents against shared infrastructure, the report describes your architecture too.

OpenAIverified

Industrystrong signal

The 19 percent everyone is quoting does not mean what the headlines say

Stanford's August 2026 update finds young workers in AI-exposed jobs 19 percent below where they would be had hiring kept pace. The comparison to last year's 13 percent is between two different measures — like for like, it is 15 to 19.

Stanford Digital Economy Labverified

Industrystrong signal

How to label AI content under Article 50, and which part of it is not your job

Article 50 of the EU AI Act has applied since August 2, 2026, and it binds anyone serving people in the Union, wherever the server is. Most of the panic is about the machine-readable marking requirement, which for a site owner who calls somebody else's API is somebody else's obligation. Here is what is actually yours: a chatbot that says what it is, published text that either carries a name or carries a label, and a deepfake that admits it.

Evropska komisijaverified

Industrymedium signal

Gemma passes a billion downloads and 100,000 derived models

On August 20, Google announced that the Gemma family of open models has passed a billion downloads. In two years the community has published more than 100,000 derived models, and the most recent Kaggle competition drew more than 1,600 entries. An Awesome Gemma repository launched with the announcement, meant as an index of vetted projects, fine-tuned models, tutorials, and tools. The figure matters to someone building sites too, because a model you run on your own server stops being exotic, which makes text processing without sending data to a third party workable.

Googleverified

Industrymedium signal

Google gives sites a button readers use to name them a preferred source

On August 20, Google published a button a publisher places on its own page, which a reader clicks once to add that site to their preferred sources in Search. The consequence is that the site's pages appear more prominently in Top Stories, in AI Overviews, and in AI Mode. Google says users have chosen more than 600,000 different sources so far. Two reader-side changes arrived with it: tuning topics in the Discover feed through a three-dot menu, and a customizable audio briefing in Google News for Android.

Googleverified

Industrymedium signal

OpenAI introduces Private Safety Processing

On August 19, OpenAI released a preview of a system that recognizes abuse patterns across several linked sessions without retaining user content. The idea is that only a narrowly defined safety signal is passed on, without exposing the prompts and responses themselves, which keeps the zero data retention guarantee for paid API customers in force. The target is attackers who split a request across several conversations to avoid detection. The approach is the opposite of Anthropic's policy, which keeps data for 30 days with controlled human review on its covered models, the Mythos class among them, and holds to non-retention outside that set; if you are choosing a vendor for a project with sensitive client data, that difference is worth understanding before you sign. Wider rollout and a technical paper were announced for September.

TechCrunch / OpenAIverified

Industrymedium signal

Who is responsible when an agent gets it wrong

Agents have left the pilot stage and do real work in business software, health care, logistics, and finance. What remains is a question most organizations cannot answer: when an agent deletes a record or sends the wrong message, who is responsible? It is telling that Obsidian Security raised $85 million in August at a $1.1 billion valuation, and that more than 70% of its customers already let agents into third-party apps.

agregatori vijestiunverified