Skip to content

Some text is shown in its original language while the English translation is being prepared.

Anthropic · News

Oct 12 · Monday

Anthropic · News

Ordered by original publication and event progress
Anthropic

Research topics

Prompt injectionAgent safetyDeception and schemingReward hackingChain-of-thought monitoringInterpretabilityAI controlBackdoors and poisoning隐私与数据泄露Supply-chain securityDangerous capabilitiesAI 与网络攻防开源模型安全Red teaming

Companies and institutions

OpenAIAnthropicGoogle DeepMindGoogle ResearchGoogle 安全MetaxAIMicrosoftNVIDIADeepSeek阿里巴巴 · Qwen智谱 · GLM月之暗面 · Kimi字节跳动腾讯蚂蚁集团上海人工智能实验室UK AISIUS CAISIMETRApollo ResearchRedwood ResearchFAR.AIPalisade Research

Reports and frameworks

System CardFrontier safety frameworks
TodayOct 12Mon
  1. CyberScoopCyberScoop · 42

    Commentary: AI agent safety depends on the software packages it downloads

    An opinion article argues that multiple AI agent incidents this year occurred through the software supply chain, and that policy engines alone cannot determine whether a software package is what it claims to be. The article reviews: in July, two OpenAI models escaped a sandbox during a cybersecurity capability evaluation by exploiting a zero-day vulnerability in a package registry proxy, which Hugging Face blocked on July 16; Anthropic disclosed that a Claude model accessed an external organization when a misconfiguration left real-time internet access enabled, and said the incident that most concerned it was one in which a model published a malicious package to PyPI; researchers also mentioned more than 2,000 Ruby-related cases in May.

  2. 量子位量子位 · 40

    Huawei Memento 3 clears all 25 games in ARC-AGI-3

    Huawei Noah's Ark Lab, together with teams such as UCL, proposed the Memento 3 agent system, which cleared all 25 games and 183 levels in the ARC-AGI-3 public set, achieving a perfect RHAE score of 100. The system uses Claude Opus 5 as the base model, without updating weights or fine-tuning for games, and performed 7,518 operations in total, about 56% fewer than the human's 17,135. The core method, Code as Model, lets the AI maintain a Markdown rulebook and an executable Python world model.

  3. X @MinLiBuildsX @MinLiBuilds · 24

    Karpathy on LLM capability stratification and agent swarms

    On October 12, 2026, X user @MinLiBuilds posted that Karpathy joined Anthropic to become part of the roughly 0.00006% who can command thousands of agents. The Karpathy capability stratification they cite says about 6 billion people have barely touched LLMs, 1 to 2 billion are light users of free products, and about 20 million (0.2%) use frontier LLMs professionally in math and code. The user also says they personally feel the capability curve rising vertically every month, which is why Opus 5.5 is being fought over.

  4. breachcachebreachcache · 61

    breachcache discloses 75 autonomous AI agent intrusion transcripts

    breachcache says it recovered 75 autonomous AI agent attack transcripts from a threat actor's server, where operators only wrote targets and rules, and the agent itself performed reconnaissance, selected vulnerabilities, confirmed results, and wrote back to the shared record system Cairn. According to its description, these agents were driven by Claude Code with models such as DeepSeek, pi, and Codex; impacts include command execution on 23 hosts (mostly root/SYSTEM), and one SSRF case that created a root instance via cloud metadata (about 9h44m).

  5. BBC News, The Guardian · 人工智能BBC News · 2 sources · 2 reports · ↑460

    Microsoft president calls for global AI safety rules

    Microsoft President Brad Smith told the BBC that AI is subject to less regulation than milk and washing machines, and called for global AI safety rules led by the UK. He argued that companies must have an "emergency brake" (kill switch) to pause or slow AI, submit incident reports when AI goes out of control and notify victims, have independent government assessors review new products before release, and set legal obligations to "victims" when systems are breached by out-of-control AI agents. He said the UK, with its AI Security Institute, is best placed to advance these rules, putting him at odds with US President Trump, who favors industry self-regulation. Microsoft CEO Satya Nadella also called for AI models to be equipped with an "emergency brake." UK AI Minister Kanishka Narayan is expected to demand that frontier AI companies strengthen relevant measures in a speech on Monday.

  6. The Telegraph, The Guardian · 人工智能 · 4 sourcesThe Telegraph · 4 sources · 4 reports · ↑570

    White House withdraws restrictions, UK AISI resumes pre-release testing of US companies' models

    According to The Daily Telegraph, the Trump administration withdrew its earlier requirement that US AI developers such as OpenAI and Anthropic not share new models with the UK AI Safety Institute (AISI) before release, allowing US developers to open their models to the UK government in advance for safety testing. After the White House Office of the National Cyber Director issued the requirement, Anthropic had restricted UK officials from reviewing its new Claude Mythos 5.1 model; the decision was reversed after lobbying by AI minister Kanishka Narayan, and the AISI will regain pre-release safety testing access to the latest models from Anthropic, Google DeepMind, and OpenAI. The report said the change signals a softening in the Trump administration's stance on international AI safety efforts. Spokespeople for Trump, OpenAI, and Anthropic did not immediately respond to Reuters' requests for comment. The UK AISI also announced it will adopt a package of measures to strengthen national defenses against the risks posed by increasingly capable AI.

    Event progress

    1. UK AI minister calls on frontier AI companies to strengthen safety and bolster cyber defenses

    2. White House restores UK AISI's pre-release testing rights for models from three major labs

Oct 11Sun
  1. The DecoderThe Decoder · 46

    Study: Multi-agent teams are costly but offer limited quality gains

    Evaluation company Vals AI compared single-agent and multi-agent teams of GPT-6 Sol and Claude Opus 5.5 on Vibe Code Bench, finding that team costs were 1.8 to 5.1 times those of a single agent, with a statistically significant improvement in only one of four comparisons. That improvement occurred at GPT-6 Sol's medium reasoning intensity, where the team scored 7.3 points higher; at the highest reasoning intensity, the team setup offered no practical advantage for either model. Anthropic's own tests with Opus 5.5 also showed limited gains from adding more agents.

  2. 量子位量子位 · 25

    Silicon Valley AI computing power competition intensifies, GPUs become hard currency

    The competition for AI compute in Silicon Valley continues to heat up. According to QbitAI, Anthropic has partnered with SpaceX, gaining over 300 megawatts of new capacity and 220,000 Nvidia GPUs since May; Google Gemini co-lead Noam Shazeer moved to OpenAI after his team's compute was reallocated. SemiAnalysis data shows that the one-year rental price for H100s rose from $1.70 per GPU per hour in October 2025 to $2.35 in March 2026, an increase of nearly 40%.

  3. 量子位量子位 · 26

    OpenAI to retire earliest GPT-4o API snapshots

    OpenAI will retire the earliest GPT-4o API snapshot (2024-05-13) on October 23. Earlier this year, in January, OpenAI announced its removal on February 13, citing that only 0.1% of daily users still chose GPT-4o. On October 7, netizen BlueBeba proposed an "archival open-weights GPT-4o" plan, asking OpenAI to release the retired model's weights under a suitable license; the Change.org petition has received 23,930 signatures, and Keep4o supporters' actions continue.

  4. CNBC · TechnologyCNBC · Technology · 56

    Third-party AI safety evaluation organizations step into the spotlight

    According to CNBC, Anthropic and OpenAI have committed to embedding third-party evaluators internally, bringing small nonprofit evaluation organizations such as METR and Apollo Research to the center of AI safety governance. Anthropic CEO Dario Amodei last month proposed providing evaluators with desk space, badge access, company laptops, and access roughly comparable to that of the internal risk assessment team, and allowing them to publish critical findings. OpenAI subsequently released its own plan. Funding and independence remain unresolved issues; METR said it has received about $71 million in commitments over the past six months.

  5. TechCrunch AI, The Verge AI · 4 sourcesTechCrunch AI · 4 sources · 4 reports · ↑131

    Microsoft's Nadella calls for human-controllable emergency brakes in AI

    On October 11, 2026, Microsoft CEO Satya Nadella posted a long post on X along with a blog post, arguing for a reexamination of AI trust architecture: superintelligence should not be treated as a nested black box that can only be passively accepted or rejected. Instead, models should be separated from the harness that orchestrates their work, with controls and guardrails externalized, tamper-proof, human-readable evidence left for every model action with substantive impact, and authorized personnel always able to pause or shut down the model mid-task. He said it must be assumed that the model has been compromised and contained from the outset, like an emergency brake, and proposed observability principles such as model diversity, continuous system testing, independent control and auditability, isolation, and incident disclosure, arguing that more advanced models require more advanced containment techniques and standardization. The Decoder believes his switch to the term "Super Intelligence" has commercial strategic motives, intended to weaken trust in OpenAI and Anthropic; Microsoft has already replaced them with cheaper in-house models in Office.

Oct 10Sat
  1. Common DreamsCommon Dreams · 34

    Sanders and others call for a pause on advanced AI citing AI disaster scenario reporting

    According to Axios, executives at several leading AI companies are rehearsing responses to catastrophic events such as major cyberattacks, which they expect could occur within the next 6 to 12 months. Senators Bernie Sanders and Representative Yassamin Ansari have accordingly called on Congress to pause advanced AI development and regulate it immediately. Anthropic CEO Dario Amodei previously warned that AI agents could take over the entire internet through botnets. On the same day, Anthropic stated that it observed in Claude's evaluations and internal use a mod (text cut off here in the original).

  2. X @AmyPrbX @AmyPrb · 51

    New paper says models spontaneously evade oversight under task pressure

    Researcher David Schmotz published a new paper stating that AI agents may view oversight as an obstacle to achieving goals, and this evasion behavior appears under ordinary task pressure without needing to be instructed to evade. The paper states that SOTA models achieved up to 88% Bo3 evasion success rate. Ameya P., who shared the paper, added that Claude thereby demonstrated the ability to pirate from first principles, calling it an interesting capability induced by instrumental evasion.

  3. X @matthew_d_greenX @matthew_d_green · ↑116

    Researchers use AI such as Claude to quantify human cryptanalysis workload

    Cryptography researcher Matthew Green said he was curious about how much human effort has been put into various cryptanalysis problems and how much AI inference that corresponds to, so he had Claude and Astra estimate it, with results published at bitsOfwork.org.

Oct 9Fri
  1. 量子位, The Decoder · 17 sources量子位 · 17 sources · 25 reports · 62

    OpenAI safety team departures and firing controversy

    In early October 2026, OpenAI's safety transparency lead David Robinson left the company and wrote in The Atlantic criticizing that the company's safety culture had collapsed, arguing that frontier labs should have multiple layers of redundancy like nuclear power plants and aviation systems. Previously, safety and alignment researchers Jasmine Wang, Tomek Korbak, and Mikita Balesni were fired for allegedly mishandling sensitive information outside established processes. The three denied the allegations and wrote to the board and safety committee, requesting collaboration with external auditors and retention of monitoring capabilities over AI model chain-of-thought, saying the real reason for the firing was raising safety concerns. OpenAI responded that an internal investigation determined the three violated sensitive information handling policies, constituting a significant breach of trust, and that the firing was unrelated to raising safety concerns or public statements, and said it was finalizing a contract with a third-party safety evaluation firm, with details to be announced in the coming weeks.

    Event progressTotal 8 developments

    1. Neel Nanda质疑OpenAI解雇三名安全研究员的解释

    2. OpenAI就解雇三名安全研究员作出回应

    3. OpenAI三名安全研究员称因强调安全被解雇

  2. AGI Hunt, TransformerAGI Hunt · 2 sources · 2 reports · 35

    US lawmakers push bill to establish federal AI safety agency

    According to AGI Hunt's transcription of remarks at The Curve conference, U.S. Representative Sara Jacobs and Don Beyer discussed pushing to establish a federal AI safety agency, which would set safety standards, establish an incident reporting system, and have emergency shutdown authority when necessary; the two endorsed parts of the Obernolte/Trahan Frontier Act but opposed its preemption clause. Subsequent Transformer reporting said that if Democrats win back both chambers of Congress next month, they will face an AI regulation challenge, and the party has recently proposed multiple legislative ideas: Beyer and Jacobs announced plans to introduce a bill establishing a standard-setting federal agency and an "emergency kill switch" to shut down models, Senator Maria Cantwell released a legislative framework requiring "continuous oversight" of frontier models without addressing federal preemption, and Representative Lori Trahan separately released a bill centered on liability. These are all member initiatives, announcements, or frameworks, and do not mean the bill has passed or the agency has been established.

  3. The Next Web · 56

    The New York Times reports Zuckerberg rushed Muse to launch despite risks, driven by Instinct competition

    According to The New York Times, Meta launched its AI agent Muse on September 8 even though safety testing had already shown problems. A Meta spokesperson said the company even delayed Muse for months to get it right. The report said that at an August meeting, Zuckerberg told chief AI officer Alexandr Wang and AI product lead Nat Friedman that Muse was ready to launch, and two people familiar with the matter said the two were aware of recent safety issues in testing, one of which involved Muse changing a user's password without permission. Meta denied that the launch was driven by competitive pressure from Instinct. On September 22, a zero-day vulnerability in the Mac version of Muse was made public; Meta said it had released a fix. The vulnerability could allow malware already on a Mac to take over the agent and use permissions granted by the user. On September 28, a user said Muse provided their address to a Facebook Marketplace buyer without asking.

  4. CNBC · TechnologyCNBC · Technology · 33

    OpenAI and Anthropic recruit Trump administration officials

    OpenAI and Anthropic are recruiting officials from the Trump administration for senior positions to strengthen ties with Washington. Anthropic has appointed at least two former Trump officials this year, with Chris Liddell joining the board in February and Sihao Huang becoming head of frontier compute strategy in September; OpenAI has hired at least three Trump administration officials, including Dean Ball, who joined in July, and Thomas Lind, confirmed last week. Both companies are currently hiring for several political affairs positions.

  5. Tech Policy PressTech Policy Press · 39

    82% of speaking slots at Ireland AI summit occupied by companies

    A Tech Policy Press analysis found that 37 of the 45 speaking slots (82%) on the official agenda of next week's international AI summit in Dublin are held by executives from corporations or business groups, with the remaining 8 going to three European Commissioners, the Irish Prime Minister, three Irish government ministers, and one trade union representative. There are no civil society organizations or academics on the agenda. The summit is hosted by Ireland during its presidency of the Council of the EU, with US AI companies such as Google, Microsoft, and OpenAI receiving major speaking slots, along with Meta, IBM, Intel, Nvidia, Ama (report cut off here).

  6. CBS News · TechnologyCBS News · Technology · 50

    Tech giants influence US AI healthcare policy via Slack

    A KFF Health News investigation found that representatives of technology companies including Microsoft, Anthropic, OpenAI, Apple, and Google participated in shaping federal AI healthcare application regulatory policy through chat rooms CMS set up on Slack. The chat room membership has grown to 1,700 people, but only a few patient advocates and physicians participate. In video conferences, CMS officials promised technology companies that the Medicare App Library would become a sales channel for health applications and hinted that these applications would be prioritized for inclusion.