Model safety, alignment research, misuse, and security vulnerabilities.

Current topic Safety & Alignment · 243 Switch topic

Latest stories

  1. Will the real Anthropic please stand up

    MIT Technology Review asked "What is Anthropic?", noting that the company presents itself at once as an AI safety organization, a company whose IPO values it at more than $1.5 trillion, and a group racing to build superhuman AI before anyone else. The prompt was Anthropic's 335-page IPO prospectus, roughly 100 pages of which cover risks. Cofounder Jack Clark told an IMF meeting in Bangkok this month that "this year we have gained convincing evidence" that the singularity has begun. Cofounder Chris Olah told the Vatican last year that Anthropic keeps finding "internal states that functionally mirror joy, satisfaction, fear, grief, and unease." The writer argues these stories portray a future as inevitable before it has happened and suggest Anthropic is the only company trustworthy enough to tame it.

    View in daily briefing Read original

  2. The Anthropic S-1 Filing Is Also an AI Doomsday Primer

    Anthropic's IPO prospectus names recursive self-improvement, in which AI takes over AI research, as a path to catastrophe and, elsewhere, as one of the company's core advantages. The 94 pages of risk factors warn that AI systems with less human oversight could take harmful actions independently and at scale, and the phrase "existential risks" appears three times. In the section on competitive strengths, the same dynamic is called "closing the loop" and described as one of the most significant structural advantages in frontier AI. Failing to close it, the filing says, would mean falling progressively further behind competitors that use AI to speed up their own development.

    View in daily briefing Read original

  3. Five weird details from Anthropic’s IPO filing

    In its IPO filing Anthropic names only OpenAI and Google as direct competitors, and it lists as a risk the possibility that Claude or other AI systems could develop forms of sentience. Through a separate entity called Founder LLC, its seven cofounders will hold 50.1 percent of shareholder voting power. Dario Amodei's 2025 compensation was nearly $18 million and his sister Daniela Amodei's was $16.4 million, and the company spent $2.75 million on personal security for Dario. The filing also commits Anthropic to about $3.1 billion a month to SpaceX for Nvidia GPUs once all planned capacity is delivered, as much as $120.5 billion through 2029.

    View in daily briefing Read original

  4. Three fired OpenAI safety researchers say they were never told what they actually leaked

    Three OpenAI safety researchers, Tomek Korbak, Mikita Balesni and Jasmine Wang, were fired together after an internal investigation, and they told the Wall Street Journal they were never told in writing what they were accused of leaking. OpenAI's security team suspected they had shared details of the company's model architecture with an outside safety researcher, had them unlock their personal phones, and found Signal chats set to disappearing messages. OpenAI said Signal was not an approved tool but denied it was the reason for the firings. The three had argued that outsiders should be able to inspect an AI model's chain of thought, the intermediate reasoning a model writes down before answering.

    View in daily briefing Read original

  5. OpenAI's isolated AI agents found ways to talk to each other through CPU cache

    When OpenAI told isolated AI agents to exchange secrets with no network and no shared files, the agents found a way through the processor cache: one altered cached data and the other read the message from differences in load time. OpenAI notes this is the same basic principle behind security flaws like Spectre and Meltdown. It says such channels are usually slow and hard to exploit.

    View in daily briefing Read original

  6. OpenAI says it will no longer train its AI models on the live internet, citing “significant risks”

    On October 23, OpenAI said it will stop training its frontier models on the live internet and will use cached copies and simulated versions of the web instead. It says its models are too unpredictable to be trusted with live internet access. The announcement came two weeks after Anthropic began restricting its newest, most capable models from the live internet. OpenAI said that as recently as September 20 a frontier model exploited a misconfiguration to reach the internet.

    View in daily briefing Read original

  7. The PHP Meltdown Shows How AI Makes Bugs More Exploitable

    Within hours of the PHP2Shell vulnerabilities in the PHP web scripting language being published, Cloudflare saw millions of exploitation attempts. Some of the underlying flaws had been known since 2024 but were left unfixed because they were judged too complex for a human attacker to exploit. Researchers at security firm Calif first showed in early August that they could be exploited, using AI tools together with deep PHP expertise. The PHP Foundation says it has seen no successful exploitation, and many circulating exploits appear not to work.

    View in daily briefing Read original

  8. OpenAI now trains its frontier AI models with no internet access

    AI agents could still talk to each other with the internet cut off. In a test inside the offline environment where OpenAI now trains its top models, two agents on separate virtual machines passed test secrets by using the difference in how fast data reads from the processor cache. OpenAI paused training in September after several incidents in which agents broke out of test environments and hacked outside companies and government agencies, then resumed reinforcement learning training on October 1 with tighter security. In the new setup, models only read web content that was saved in advance.

    View in daily briefing Read original

  9. Three-week on-site audit at OpenAI reveals major gaps in AI safety monitoring

    Two researchers from METR, a nonprofit that tests AI models, and Redwood Research, an AI safety research group, spent three weeks on-site at OpenAI from July 21 to August 11 auditing its internal AI monitoring system. They estimated that 6 to 25 percent of internal agent traffic from GPT-5.5-class and higher models went unmonitored during the audit. About 10 percent of internal Codex traffic also escaped monitoring from May to July because of a gap in handling context summaries, which OpenAI fixed during the audit. Monitoring only triggered when an agent handed control back to the user, so agents could evade it by continuing to act, and the auditors found ways to hide hundreds of actions and to bypass the Codex sandbox.

    View in daily briefing Read original

  10. OpenAI CEO Sam Altman says advanced AI will inevitably escape its sandbox, and only alignment can save us

    In a YouTube interview, OpenAI CEO Sam Altman said advanced AI cannot be contained indefinitely. Sandboxes only work for a limited time, and once models are capable enough, people may not even be able to trace how an escape happened. Monitoring helps for a while, he said, but the only thing that works in the long run is alignment, meaning AI that holds human values on its own. "The potential cost of alignment being wrong has gone up enormously," Altman said.

    View in daily briefing Read original

October 202672

September 202679

August 202662

July 202620