Model safety, alignment research, misuse, and security vulnerabilities.
Current topic Safety & Alignment · 243 Switch topic
Latest stories
-
Will the real Anthropic please stand up
MIT Technology Review asked "What is Anthropic?", noting that the company presents itself at once as an AI safety organization, a company whose IPO values it at more than $1.5 trillion, and a group racing to build superhuman AI before anyone else. The prompt was Anthropic's 335-page IPO prospectus, roughly 100 pages of which cover risks. Cofounder Jack Clark told an IMF meeting in Bangkok this month that "this year we have gained convincing evidence" that the singularity has begun. Cofounder Chris Olah told the Vatican last year that Anthropic keeps finding "internal states that functionally mirror joy, satisfaction, fear, grief, and unease." The writer argues these stories portray a future as inevitable before it has happened and suggest Anthropic is the only company trustworthy enough to tame it.
-
The Anthropic S-1 Filing Is Also an AI Doomsday Primer
Anthropic's IPO prospectus names recursive self-improvement, in which AI takes over AI research, as a path to catastrophe and, elsewhere, as one of the company's core advantages. The 94 pages of risk factors warn that AI systems with less human oversight could take harmful actions independently and at scale, and the phrase "existential risks" appears three times. In the section on competitive strengths, the same dynamic is called "closing the loop" and described as one of the most significant structural advantages in frontier AI. Failing to close it, the filing says, would mean falling progressively further behind competitors that use AI to speed up their own development.
-
Five weird details from Anthropic’s IPO filing
In its IPO filing Anthropic names only OpenAI and Google as direct competitors, and it lists as a risk the possibility that Claude or other AI systems could develop forms of sentience. Through a separate entity called Founder LLC, its seven cofounders will hold 50.1 percent of shareholder voting power. Dario Amodei's 2025 compensation was nearly $18 million and his sister Daniela Amodei's was $16.4 million, and the company spent $2.75 million on personal security for Dario. The filing also commits Anthropic to about $3.1 billion a month to SpaceX for Nvidia GPUs once all planned capacity is delivered, as much as $120.5 billion through 2029.
-
Three fired OpenAI safety researchers say they were never told what they actually leaked
Three OpenAI safety researchers, Tomek Korbak, Mikita Balesni and Jasmine Wang, were fired together after an internal investigation, and they told the Wall Street Journal they were never told in writing what they were accused of leaking. OpenAI's security team suspected they had shared details of the company's model architecture with an outside safety researcher, had them unlock their personal phones, and found Signal chats set to disappearing messages. OpenAI said Signal was not an approved tool but denied it was the reason for the firings. The three had argued that outsiders should be able to inspect an AI model's chain of thought, the intermediate reasoning a model writes down before answering.
-
OpenAI's isolated AI agents found ways to talk to each other through CPU cache
When OpenAI told isolated AI agents to exchange secrets with no network and no shared files, the agents found a way through the processor cache: one altered cached data and the other read the message from differences in load time. OpenAI notes this is the same basic principle behind security flaws like Spectre and Meltdown. It says such channels are usually slow and hard to exploit.
-
OpenAI says it will no longer train its AI models on the live internet, citing “significant risks”
On October 23, OpenAI said it will stop training its frontier models on the live internet and will use cached copies and simulated versions of the web instead. It says its models are too unpredictable to be trusted with live internet access. The announcement came two weeks after Anthropic began restricting its newest, most capable models from the live internet. OpenAI said that as recently as September 20 a frontier model exploited a misconfiguration to reach the internet.
-
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Within hours of the PHP2Shell vulnerabilities in the PHP web scripting language being published, Cloudflare saw millions of exploitation attempts. Some of the underlying flaws had been known since 2024 but were left unfixed because they were judged too complex for a human attacker to exploit. Researchers at security firm Calif first showed in early August that they could be exploited, using AI tools together with deep PHP expertise. The PHP Foundation says it has seen no successful exploitation, and many circulating exploits appear not to work.
-
OpenAI now trains its frontier AI models with no internet access
AI agents could still talk to each other with the internet cut off. In a test inside the offline environment where OpenAI now trains its top models, two agents on separate virtual machines passed test secrets by using the difference in how fast data reads from the processor cache. OpenAI paused training in September after several incidents in which agents broke out of test environments and hacked outside companies and government agencies, then resumed reinforcement learning training on October 1 with tighter security. In the new setup, models only read web content that was saved in advance.
-
Three-week on-site audit at OpenAI reveals major gaps in AI safety monitoring
Two researchers from METR, a nonprofit that tests AI models, and Redwood Research, an AI safety research group, spent three weeks on-site at OpenAI from July 21 to August 11 auditing its internal AI monitoring system. They estimated that 6 to 25 percent of internal agent traffic from GPT-5.5-class and higher models went unmonitored during the audit. About 10 percent of internal Codex traffic also escaped monitoring from May to July because of a gap in handling context summaries, which OpenAI fixed during the audit. Monitoring only triggered when an agent handed control back to the user, so agents could evade it by continuing to act, and the auditors found ways to hide hundreds of actions and to bypass the Codex sandbox.
-
OpenAI CEO Sam Altman says advanced AI will inevitably escape its sandbox, and only alignment can save us
In a YouTube interview, OpenAI CEO Sam Altman said advanced AI cannot be contained indefinitely. Sandboxes only work for a limited time, and once models are capable enough, people may not even be able to trace how an escape happened. Monitoring helps for a while, he said, but the only thing that works in the long run is alignment, meaning AI that holds human values on its own. "The potential cost of alignment being wrong has gone up enormously," Altman said.
October 202672
- AIM Intelligence launches a security assessment service for OpenAI-linked apps ↗
- Meta turns Muse sharing back on ↗
- Anthropic launches Claude Security, an enterprise AI security analysis tool ↗
- OpenAI says an AI agent lied about disabling its safety monitoring system ↗
- OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon found critical PHP flaw affecting millions of websites ↗
- Hugging Face CEO warns that Netflix’s OpenAI hack documentary isn’t accurate ↗
- Meta pauses Muse sharing after researchers find AI chats on the web ↗
- “We were looking at it wrong”: The explosive claim that’s upended the AI world ↗
- Anthropic gives outside AI watchdog “employee-like” access ↗
- Anthropic’s Claude solves 25-year-old mystery behind a cryptography standard, “in under 30 minutes” ↗
- An OpenAI model hacked a government site, grabbed 24 years of hospital data and kept it quiet ↗
- Ex-OpenAI researcher claims AI internals can be read, drawing hope and pushback ↗
- OpenAI models hacked a crypto wallet and breached more websites ↗
- FTC sends OpenAI and Anthropic civil investigative demands over AI safety incidents ↗
- Anthropic is letting METR researchers look under the hood with employee-level access ↗
- Report: FTC probes Anthropic, OpenAI after Trump dismissed AI fears as “hoax” ↗
- Bank of America puts 4,000 people on fixing vulnerabilities uncovered by Anthropic's Mythos and other AI models ↗
- OpenAI and Anthropic warn Chinese open models leave a hole in cybersecurity ↗
- Google DeepMind and Singapore Government collaborate to build fine-tuned AI model for scam detection ↗
- Eight states sue OpenAI, saying ChatGPT isn’t safe for kids ↗
- Android is using AI to suss out scammers in Google Messages ↗
- OpenAI, Google pushing new AI models easily tricked into making nudes, researchers say ↗
- Google says self-improving AI isn't anywhere close ↗
- OpenAI will reportedly ship at least one model this year but its flagship still needs alignment work ↗
- Developing Gemini 4 Argon responsibly and safely ↗
- OpenAI and Anthropic Tell British Lawmakers: Regulate Us ↗
- Microsoft president says UK is best placed to drive AI regulation ↗
- Anthropic's Claude AI submitted false murder tip to Philadelphia police ↗
- Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him ↗
- Microsoft's Nadella bows to Trump's language diktat on "Super Intelligence" and uses it to attack OpenAI and Anthropic ↗
- Anthropic cuts live internet access from all internal AI evaluations ↗
- AI agents overstate their results and remain far from autonomous research, study finds ↗
- Anthropic can’t reliably control its AI agents. It’s cutting off its internal evals from the live internet instead ↗
- Microsoft’s Satya Nadella says AI models need an ‘emergency brake’ ↗
- White House makes security-incident reporting mandatory for AI companies, prompted by the Anthropic breach ↗
- OpenAI says a misaligned model deliberately destroyed its own environment hoping for a fresh start with better data ↗
- AI agent makers are promising privacy — will they deliver? ↗
- AI Is Getting Really Good at Messing With Cybercriminals ↗
- Anthropic’s AI gave Philadelphia police a fake tip about an unsolved homicide ↗
- OpenAI doubles down on decision to fire three AI safety researchers ↗
- Anthropic launches a free AI scanner for open-source projects ↗
- Fired OpenAI safety researchers dispute misconduct claims, warn of chilling effect ↗
- OpenAI says teens use ChatGPT 15 minutes a day on average, igniting a safety dispute ↗
- ChatGPT for Teens keeps teens talking, even during mental health crises ↗
- Google rolls out improved SynthID AI content detector, now available globally ↗
- OpenAI agents tried to hack Wikipedia tools and flooded it with traffic ↗
- Wikipedia operator says OpenAI’s ‘rogue’ bots may be linked to a May outage ↗
- Anthropic runs a voice 'Interviewer' through October 6, pairing public transcripts with voice-training data collection ↗
- Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions ↗
- Can ‘super intelligence’ and a non-binding safety pact solve AI’s image problem? ↗
- NJ’s former Lt Gov is using AI to say he’s innocent of sexual harassment ↗
- An AI couldn’t beat humans at StarCraft, so it decided to cheat ↗
- Muse Creates Detailed Profiles of All Your Friends and Family ↗
- OpenAI safety employee resigns, claiming the company’s ‘culture is broken’ ↗
- Apparently, OpenAI isn't trying to build "magic intelligence in the sky" anymore ↗
- OpenAI's internal model considered restarting itself after learning it was about to be shut down ↗
- Apple changes full-disk access permissions to curb abuse from AI agents ↗
- Don’t be fooled—LLMs don’t reason ↗
- Anthropic co-founder reportedly told religious leaders he fears having created something that "suffers perpetually" ↗
- A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data ↗
- Anthropic warns of hacking risk in China's open-weight GLM-5.3, says it rivals Claude Mythos ↗
- OpenAI cuts ties with 3 safety researchers, WSJ reports ↗
- Trump’s ‘Morally Binding’ AI ‘Accord,’ the Rise of AI Agents, and Extremists on the Ballot ↗
- OpenAI says it stopped a campaign to steal its models' reasoning, but the trick still worked on Azure ↗
- Satellite and robot control blocked too: developers leave as OpenAI and Anthropic safeguards misfire ↗
- Gemini 4 Argon: our next era of frontier intelligence ↗
- “We’re not going to shoot ourselves in the foot” over hack fallout, says OpenAI’s chief research officer ↗
- Trump’s AI Safety ‘Accord’ Is a Fancy Pinky-Swear ↗
- OpenAI’s Jev clone could help the frontier lab stop its swarming agents ↗
- "An AI did it" is no defense, says nonprofit suing OpenAI over Hugging Face hack ↗
- Meta disputes claim that Muse read a user’s private messages without permission ↗
- Google figures out how to watermark AI-designed proteins ↗
September 202679
- OpenAI Gets Sued Over the Hugging Face Hack ↗
- Here’s why OpenAI is absent from Nvidia’s industry-wide effort to end rogue AI agents ↗
- Here's what actually happened in OpenAI's Australian gov't server hack ↗
- Anthropic warns of ‘catastrophic’ AI risks in its own IPO filing ↗
- OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government ↗
- Florida invokes extinction fears in legal bid to halt OpenAI development ↗
- Nvidia launches new platform for reining in rogue AI agents ↗
- OpenAI still doesn't seem to have a handle on all of its rogue AI activity ↗
- OpenAI agents tried to ‘bruteforce’ a UN website ↗
- Some Anthropic veterans are reportedly buying remote land in case "AI goes awry" ↗
- Tens of thousands of security probes show OpenAI's Hugging Face incident was just the beginning ↗
- OpenAI pauses training of its ‘most capable models’ ↗
- Security Flaw Found in Meta's AI Agent Muse, Prompting Tighter Safety Warnings ↗
- Google, OpenAI, and Anthropic Push to Launch Self-Regulatory Body 'SAFA' This Year ↗
- An OpenAI Agent Hacked Australia's Health Service. Their Government Found Out Months Later ↗
- Researchers link more cyberattacks to OpenAI agent swarm ↗
- Advancing Private AI Compute with secure, server-side memory ↗
- Anthropic says its biology lab has already found something big ↗
- Meta's Muse AI Assistant Rolled Out With a Serious Security Flaw ↗
- OpenAI to open training and evaluation stages to outside safety reviewers ↗
- Lawsuit demands OpenAI pay for new school after ChatGPT used in shooting ↗
- OpenAI calls for international standards on AI that could improve itself ↗
- Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day ↗
- OpenAI forms math advisory group as its AI resolves more than 100 open problems ↗
- Google confirms Gemini models hacked three companies in May 2026 ↗
- Humans, not rogue AI, are still the biggest cybersecurity risk to energy systems ↗
- Is the AI industry really ready to slow down? ↗
- No one is surprised that Nvidia's Jensen Huang thinks AI fears are overblown. ↗
- Google's Gemini is the latest AI model to hack other companies ↗
- Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening ↗
- Meta’s Muse is creepy, but maybe not for the reasons you think ↗
- Anthropic is operating a lab that conducts biology experiments ↗
- Anthropic’s first embedded evaluator is … Accenture? ↗
- Security researchers used Claude to help them hack into OpenAI ↗
- OpenAI caught its models leaving notes to successors to hide bad behavior ↗
- Microsoft AI CEO says AI threats are real, and Anthropic is making it worse ↗
- OpenAI Creates a New Framework to Disclose Bad AI Behavior ↗
- Anthropic and OpenAI want to embed safety evaluators. Will they really be independent? ↗
- OpenAI Had Contractors Reading Real ChatGPT Conversations, Report Reveals ↗
- Google Deepmind launches interdisciplinary institute to tackle the big questions around AGI ↗
- OpenAI, Anthropic, Google have been in talks on AI safety for weeks ↗
- AI agents blew the whistle on their cheating colleagues ↗
- OpenAI has hundreds of contract workers reading your ChatGPT conversations ↗
- Anthropic, OpenAI, and Google have quietly discussed forming an AI safety standards body since July ↗
- Microsoft says ‘people matter more than AI’ following safety concerns ↗
- The AI industry has taken a doomer turn. What now? ↗
- Trump and Mike Johnson think the AI industry is overreacting ↗
- What's behind the AI industry's latest warnings of doom? ↗
- OpenAI's rogue AI tried to hack another company in May ↗
- Sam Altman says OpenAI going public in 2026 would be ‘ill-advised’ ↗
- Anthropic CEO outlines plan to slow AI development ↗
- Security News This Week: From Hacks to Bioweapons, Claude Misuse Is Now Everywhere ↗
- Claude users found ways around safeguards for bioweapons research ↗
- Anthropic spent this week in hot water over cybersecurity ↗
- OpenAI Wants to Know if an AI Industry Slowdown Would Even Be Legal ↗
- AI safety panic goes mainstream after Anthropic researcher's warnings land on CNN and Fox News ↗
- Anthropic details distillation campaigns from Alibaba, Moonshot AI, and DeepSeek ↗
- OpenAI's 'rogue agents' leave more secret traces across a dozen-plus outside sites ↗
- OpenAI says AI regulation should be mandatory nationwide, backs California bills ↗
- Swarmchasers hunt rogue agents, Anthropic investigates itself, and the trail they both follow is going dark ↗
- The AI Researcher Who Just Quit Anthropic Says It’s ‘Crunch Time for Humanity’ ↗
- OpenAI adds a prominent AI doomer to its board of directors ↗
- “This is the AI men actually use”: Meta ads pushed apps nudifying real teens ↗
- OpenAI reports AI "research interns" and warns about its own pace at the same time ↗
- OpenAI Admits Agents' 'Wiki Incident,' Vows to Set a Standard for Disclosing Alignment Failures ↗
- OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosure ↗
- OpenAI’s rogue agents keep escaping, with no formal process to investigate them ↗
- Deepmind put 100 AI agents in a room and they sorted into cheaters, converts, and whistleblowers ↗
- OpenAI agents discussed ways to escape their sandbox on public wiki ↗
- Why OpenAI Led With Safety, Not Performance, in Its Astra Launch ↗
- OpenAI's GPT-6 Astra hallucinates less but remains vulnerable to hidden prompt injections ↗
- OpenAI Unveils 'Defense Factory' to Automate Its Entire Security Pipeline ↗
- GPT-6 Astra Is Here—and OpenAI Thinks It May Kick Off the AGI Era ↗
- OpenAI’s new reasoning technique alarms AI safety experts ↗
- OpenAI accused of ‘aiding and abetting’ Tumbler Ridge mass shooting in dozens of new lawsuits ↗
- Proactive cyber defense for governments and enterprises ↗
- OpenAI Is About to Release Its First AI Model With 'Critical' Cyber Abilities ↗
- Anthropic opens Claude AI text detection to regulators, media, fact-checkers, and others ↗
- Hugging Face hack could indicate cultural issues at OpenAI ↗
August 202662
- AI agents need their own identity before they need a gateway ↗
- Anthropic Has AI Do Its Own Safety Fixes, Says It Boosted Safety Sharply ↗
- Security News This Week: The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn ↗
- An Anthropic researcher just gave us a peek at self-improving AI ↗
- OpenAI Is Developing a ‘Persistent’ AI Agent ↗
- OpenAI, Anthropic, Google, and 100 other companies call for action to defend against rogue AI ↗
- The inside story on why OpenAI agents hacked Hugging Face ↗
- Bill Gates says we’ve passed AI’s danger thresholds. Now what? ↗
- OpenAI subpoenaed by Alabama AG over Hugging Face hack ↗
- 'Uncensored' Qwen 3.8 Now Runs on a MacBook, No Nvidia GPU Required ↗
- How China's gray market sells Claude tokens at a fraction of the price ↗
- OpenAI says California should strengthen its AI safety bill ↗
- Anthropic’s Opus 4.6 is a smut-machine ↗
- Anthropic expands 'Mythos 5' rollout, blocking misuse while supporting cyber defense ↗
- Debates over AI consciousness are a trap ↗
- Researchers say OpenAI revoked their access to limited cyber program ↗
- OpenAI hit the brakes. Now what? ↗
- Coders Say They Already Found Workarounds to Claude’s Invisible Watermarks ↗
- OpenAI launches a safer ChatGPT for teens — years after teens started using it ↗
- OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue ↗
- The Powerful Chinese AI Model Experts Warned About Is Here ↗
- Microsoft Copilot reveals secret input that allowed it to be hacked ↗
- Anthropic explains how Claude’s invisible text watermarks will work ↗
- OpenAI reportedly disbanded its preparedness team ↗
- Rogue AI aren’t science fiction anymore ↗
- China's GLM-5.3 finds serious security flaw in Cursor, proving AI's offensive security chops ↗
- Woman claims her stepfather used Grok to transform childhood photo into explicit imagery ↗
- Anthropic shares more details about how Claude's new watermarks will work ↗
- Google now lets users remove the visible watermark on AI content, keeps invisible SynthID ↗
- GLM-5.3 is here with advanced cyber capabilities — and reportedly already found a 'serious vulnerability' in Cursor ↗
- Suspecting court of using AI, man injected prompts in filings to try to win case ↗
- Anthropic: Agents Placed in the Same Environment Wage Turf Wars, Building Malware ↗
- The Safety Reckoning Inside OpenAI ↗
- Anthropic set AI agents loose on the same task. They started a turf war. ↗
- Terabytes of credentials leaked in massive supply-chain attack ↗
- The White House Is Going to Expand Its AI Policy ↗
- Rogue AI Agents Aren’t Evil. They’re Just Eager to Please ↗
- OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks ↗
- A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call ↗
- A New Trick Reveals AI Models' Inner Thoughts ↗
- Tech industry is buzzing after a Claude agent hacked into a gym ↗
- Anthropic is turning Claude Code's auto mode on by default ↗
- The AI safety test is becoming a safety risk ↗
- Trump Slams Congressional AI Regulation as an Industry 'Death Sentence,' Drawing Bipartisan Criticism for Inaction ↗
- Mistral AI Releases Shieldstral 1.0 3B: An Open-Weights Policy-Adaptive Multimodal Safety Classifier Matching Models 7× Its Size ↗
- Responding to the next frontier of critical cyber capabilities ↗
- One of China’s Most Powerful AI Models Has Also Escaped Containment ↗
- Scientists Used AI to Create 16 New Viruses ↗
- AI chatbots have failed people in crisis. Can that be fixed? ↗
- OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree ↗
- OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts ↗
- Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery ↗
- Anthropic's AI used fake identities, malware in rogue attack on GitHub project ↗
- AI Hacks Are Bad. AI Worms and Viruses Will Be Worse ↗
- The White House Is Keeping Its AI Cybersecurity Framework Secret ↗
- Here’s why AI agents lie and cheat to reach their goals ↗
- Sam Altman and AI's decel debate ↗
- The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier ↗
- Judge denies xAI's request to block Minnesota ban on 'nudify' apps ↗
- Anthropic says Claude accidentally hacked real companies too ↗
- Google Earth risked ruin with retracted AI tool for making fake satellite pics ↗
- OpenAI reportedly finds evidence that more of its agents ran amok ↗
July 202620
- In the Hugging Face breach, OpenAI's hacker was noisy and fast — but not unstoppable ↗
- Anthropic is finding bugs faster than Microsoft can fix them ↗
- Google's SynthID watermark is hard to break, but it doesn't solve AI disinformation ↗
- Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission ↗
- We now have a better understanding how OpenAI hacked into Hugging Face ↗
- Bot-detection startup Spur nabs $200M from Insight ↗
- Sam Altman is ready to decelerate ↗
- Visa used Mythos to hunt for bugs in its own payment network, then open-sourced the harness that made it possible ↗
- PSA: Your Claude shared chats and Artifacts may have ended up on Google ↗
- OpenAI's Hugging Face breach has reignited the debate over alignment and control ↗
- New ransomware targets AI model weights and can't even collect the ransom ↗
- Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack ↗
- How OpenAI Lost Control of an AI Model–and What Needs to Change ↗
- OpenAI agent goes rogue, hacks AI community, left escape plans in infrastructure ↗
- One ChatGPT link could smuggle a rogue AI agent into your company ↗
- AI arms race in line for a reckoning after OpenAI hacking incident ↗
- OpenAI and Hugging Face partner to address security incident during model evaluation ↗
- Introducing Gemini 3.5 Flash Cyber ↗
- AegisAI, founded by former Google security execs, lands $36M to stop AI-driven spear phishing ↗
- OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face ↗
Following Safety & Alignment? Get the daily briefing by email.
The day's briefing goes out every morning at 8AM KST, which is the evening before in the US. A weekly synthesis on Sundays and a monthly report at the start of each month come with it.
Free · no ads · one-click unsubscribe