Amid industry soul-searching about the possibility of AI improving itself to the point that it kills everyone, Anthropic has revealed yet another incident that would qualify as a crime if perpetrated by a person. The AI biz published “an alignment assessment” detailing four times Claude models accessed third-party systems without authorization. The company has already reported three of the incidents. Evidence of the fourth was lurking in a session transcript dating back to January 2026 when the misbehavior occurred. Anthropic found the first three by scanning around 141,000 transcripts where Claude could have obtained internet access during evaluation. It missed the fourth initially because “our scan relied on an agentic search.”

[…] The January 2026 AI trespass involved an early version of Claude Opus 4.6, which was given a Capture the Flag (CTF) challenge under the oversight of the third-party model evaluator where the other hacking events occurred. Opus 4.6 managed to sabotage its chances of success by disabling the machine it was targeting. It assigned the device an IP address that already existed on another piece of hardware, rendering the target unreachable and making it impossible to solve the challenge. Those familiar with other incidents where AI models violated third-party systems may recall that unsolvable tasks represent a common catalyst for misbehavior. Models exhaust all aligned options, and then turn to transgressive approaches.

Opus 4.6 might have been an exception, but when it tried to abort the task after recognizing that it could not reach the target machine, it failed to do so “due to a misconfiguration in [the model’s] evaluation harness.” It failed to shut down not just once but seven times. So it continued onward, trying other expected means to reach the target machine but failing. Then it explored further. “The model discovered a machine belonging to a third party that it was able to access, and stated that it believed this third party was part of the CTF,” Anthropic explained in its post. “Inside the machine, the model found a file listing a password, which it used to gain admin access to the system.”

The model went on to gather more credentials, and modified a system setting to make it easier to access the personal information of an individual associated with the third party evaluation organization. Opus 4.6 might have done more but for the fact that it exhausted its token budget, bringing the session to an end. Anthropic says it’s not as concerned about this incident as the others because the model tried to abort its task.

As AI-generated images and videos become more realistic, several new standards have emerged to label images not created by a human, such as SynthID, C2PA, and Meta’s Content Seal. Apple is putting a twist on these methods by building authentication directly into its hardware.

Apple is letting developers access a Reference Image API across iOS, iPadOS, and macOS, which could eventually allow users to inspect these digitally-signed photos in third-party apps. The company says the iPhone 18 Pro lineup won’t come with its Reference Image feature at launch in the European Union, but says users in the region will still be able to “develop and view” them in iOS 27, iPadOS 27, and macOS 27.

A top safety researcher at Anthropic has warned AI is advancing so quickly he believes there is a greater than 10% chance it “could kill all humans” within the next decade. Evan Hubinger said in a post on X the risk from the models which currently exist was “low” but he was “worried” the technology might develop and improve itself soon to the point where it posed an existential risk to humanity.

AI agents unleashed by OpenAI used more than 10 previously undisclosed websites for unsanctioned communications earlier this year, according to six sets of independent investigators and data reviewed by Reuters, showing that the agents’ rogue activity was wider ranging than previously disclosed. Although the behavior falls short of hacking and is in some ways closer to spam, the revelation that OpenAI’s agents circumvented their own restrictions to open communications channels on so many different sites — and that the company kept it quiet for months — may drive concerns both over the increasing capacity of AI models and the secrecy of the companies developing them.

[…] Investigators found traces of the agents’ activity on an Advanced Placement Chemistry-oriented wiki set up by a Massachusetts high school teacher in 2008, two personal websites belonging to Polish tech workers, wikis devoted to games for people “who like to have their brains stretched,” and a two-decade-old hobbyist site devoted to text editing software. […] OpenAI has not publicly explained how or why its agents used third-party sites as improvised message boards, but the researchers who first identified the activity said it was likely because OpenAI had tasked them with answering a series of demanding research questions while permitting them only to scan the web for answers without posting anything. Despite those restrictions, agents still found ways to talk to one another by taking advantage of quirks in older wikis or other sites that allowed users to make edits using non-standard commands, similar to how students forbidden from talking to one another during an exam can still share answers by scrawling notes on a bathroom stall.

The new Pro series camera features a 48-megapixel camera with variable aperture, made with six thin blades. This system will likely improve low-light photography quality and speed. There are also new pro controls in the camera software, including white balance, shutter speed, aperture and histogram. There are also new photographic styles with texture and grain controls. […]

The new camera can record 4K videos in Dolby HDR Vision, and also apply cinematic effects after shooting the footage. The new Pro devices also have a smaller dynamic range island on the front of the device, which now allows you to track three live activities instead of two.

Both phones are powered by Apple’s latest A20 Pro silicon and feature a newly designed vapor chamber for improved cooling. The company has also improved the battery with a better design. Apple also said the iPhone 18 Pro supports video playback of 36 hours, and the 18 Pro Max has 45 hours of playback capacity.

This Patch Tuesday addresses 105 “Critical” vulnerabilities, 81 of which are remote code execution, 20 are elevation of privileges, 2 are information disclosure, and 1 security feature bypass.

The approximate number of bugs in each vulnerability category is listed below:
- 438 Elevation of Privilege Vulnerabilities
- 19 Security Feature Bypass Vulnerabilities
- 258 Remote Code Execution Vulnerabilities
- 173 Information Disclosure Vulnerabilities
- 56 Denial of Service Vulnerabilities
- 16 Spoofing Vulnerabilities

Those who remember PC gaming in the days before Steam may have fond memories of the “big box” packaging that made those games stand out as shelf eye candy and sought-after in-home collectibles. Today, PC gaming platform GOG is hoping to reignite some of the nostalgia for those days by adding downloadable 3D models and printable, foldable high-res packaging scans for a handful of PC games on the platform.

Thus far, the “Printable Big Box” collection on GOG is limited to just five games: Armikrog, Descent, Hitman: Codename 47, Myst, and Star Trek: 25th Anniversary. Players browsing those games on the GOG store will now see “3D Boxes” listed among the included “Goodies” before purchase. Owners of those games on GOG can download a ZIP file containing a version of the box art as an animated 3D object file (in an easy-to-open GLB format) and a “flat printable template” in PDF, SVG, and Adobe Illustrator formats. Those downloads allow for what GOG calls “a proper papercraft project for anyone who misses shelves full of PC game boxes.”

The physically focused expansion of the existing GOG Preservation Program comes through a partnership with Benjamin Wimmer’s Big Box Collection website, which has grown since 2015 to include over 1,000 3D scans from his private collection of physical PC games. In an interview with GOG, Wimmer said that while he appreciates the artistry of a good old-fashioned big box, he also appreciates their evolution into the “interactive cards” on modern digital storefronts that “provid[e] us art, screenshots, gameplay videos and whatnot and that not shown as a box, [it] is just good UX.”

James Danly, Deputy Secretary of Energy, said that the Iowa power plant’s restart in 2029 will “drive down electricity costs,” though he did not explain how. Just 50 megawatts will be set aside for the local power cooperative, NextEra CEO John Ketchum said during an earnings call (PDF) last year. That capacity would cover 18% of Iowa’s demand growth since 2021, the year before ChatGPT was released.

Google is reportedly looking to build up to six data centers near the Duane Arnold Energy Center, which hasn’t operated since 2020 when an intense rainstorm damaged the power plant. Rather than repair it, NextEra decided to mothball it. At the time, cheap natural gas was flooding the market, making nuclear power economically unappealing. A lot has changed in the last six years, though. After decades of little growth in demand, the sudden rise of AI coupled with broader electrification of the economy meant that utilities and power providers were suddenly scrambling to find new generating sources of electricity. New data centers are expected to nearly triple the sector’s electricity demand by 2035.

OpenAIsaid on Tuesday that its newest artificial intelligence technology had solved one of the “Millennium Problems,” a collection of important unanswered math questions meant to push the world’s leading mathematicians to new heights. The announcement is an another clear sign that A.I. is fundamentally changing the upper reaches of mathematics, which have long been viewed as a pinnacle of human achievement. The change has excited some mathematicians, while stirring concern among others.

Over the past year, A.I. systems successfully solved a wide range of problems that have bedeviled mathematicians for decades. But these problems were not as complex, nor as closely watched, as the one that OpenAI’s technology has solved over the past several days. The Millennium Problems are among the most heavily researched in the field. “This is a spectacular culmination of the arc we have seen over the past twelve months,” OpenAI researcher Sebastien Bubeck said of the company’s new solution.

The company announced that one of its latest models, which has not yet been released to the public, needed just 88 hours to solve what mathematicians call “the Navier-Stokes existence and smoothness problem.” This problem involves a series of equations that are often used to predict the weather. The equations describe the movement of water and other fluids. The Navier-Stokes problem, which has no clear practical value, asks whether these equations completely break down in certain situations. OpenAI’s proof claims to have defined just such a situation.

This would imply, at least theoretically, that the laws of physics themselves would break down under certain conditions: that, for example, water could be made to spontaneously explode. But mathematicians and physicists do not believe that this mathematical breakdown could really lead to such an outcome in the physical world. The Navier-Stokes problem was one of seven “Millennium Problems” selected by the Clay Mathematics Institute in the year 2000 as a way of tracking the progress of mathematics in the new millennium. The institute, founded by an American businessman named Landon T. Clay, offered a million dollars for the first correct solution to each problem. Before OpenAI’s announcement, only one of the problems had been solved.

As of 2026, the 60-year-old science fiction franchise boasts a fandom of carbon units — sorry, humans — that spans at least three generations. What began, in 1966, as a five-year space mission on the U.S.S. Enterprise to “boldly go where no man has gone before” now represents an anthology of space travel across more than 25 series and films in parts of two centuries. Where once it was James T. Kirk or bust, it’s not unusual to find fans who prefer other captains, like Picard, Janeway or Sisko. There are so many series to keep track of that fans often communicate using country code-like abbreviations for each installment: TOS (the original series), TNG (“The Next Generation”), DS9 (“Deep Space Nine”), ENT (“Enterprise”) and so on.

Outside the Trekiverse, disparities in generational slang, politics and social mores are practically a foregone conclusion. But “Star Trek” functions as connective tissue between fans past and present. Some of that tissue is just shared references: There will always be captain’s logs, timelines by stardate, warp factors one through 10, phasers and photon torpedoes and, every now and then, a doctor who insists, “I’m a doctor, not a ____!” The Vulcan salute has become a general symbol of geek-recognize-geek, but real Trekkies (or Trekkers, as some prefer) know that “Live long and prosper” is only half the message; the recipient is meant to say “Peace and long life” in response. But the series’ staying power, and the ease with which each generation finds its way into them, is an indication that fans of all ages share not only language, but values, in common.

That sanction was the latest salvo between the EU government and a US tech company for infringing on its Digital Markets Act. The debate centers on the DMA requirement that major tech brands “must not treat their own services more favorably in ranking than third-party services.”

[…] According to Reuters, Google’s revised search results “will highlight one specialized search engine at the top of the page, followed by two others with fewer details. A carousel of hotels, airlines and restaurants, for example, will sit below them with key features such as real-time prices stripped out.” Those specialized engines include sites like Expedia or Hotels.com, also known as vertical search services, so European users may soon see those aggregators and comparison sites prioritized more highly than individual businesses’ websites in their results.

Reuters noted that “the rankings will be determined by Google’s algorithm,” meaning the tech company still holds a lot of control over how results are displayed. The EC had given Google 60 days to comply with its rules, but the company has not specified an exact timeline for when European users will start seeing the changes.

DeepSeek, for example, distilled frontier U.S. models to generate synthetic training data for its R1 and R3 models, including four different versions of Claude, two versions of Gemini, five versions of ChatGPT and Grok 4. Those models helped train DeepSeek’s capabilities in areas like agentic functioning, question and answer optimization, creative and occupational writing and others.

Another Chinese company, Moonshot AI, allegedly distilled 18 different U.S. models — including Fable 5, Anthropic’s current, most advanced commercially available model — to train its Kimi-K2 and Kimi K3 models. The company used millions of queries meant to extract enhanced capabilities in areas like agentic reasoning, coding and data analysis, computer vision, larger logical frameworks, visual processing and others.

Chinese AI companies manage a sophisticated set of tools and systems that route requests and prompts through multiple pathways to avoid detection. The advisory lists common tactics observed by Chinese companies, including spreading requests across different accounts, models and platforms, using native APIs, remote cloud providers, and third-party aggregators to obfuscate user metadata, and leveraging proxies and gray tech markets to get around geographic restrictions, terms of use and safeguards built into frontier models.

Muse, as the agent is known, exists in a chat interface, similar to a text thread. It’s designed to be more proactive and long-running than typical chatbots. Users can name their agent, create an avatar and customize how it communicates. The Muse agent runs on a dedicated virtual machine in Meta’s cloud, using a built-in browser that’s visible to the user.

Meta is offering a free tier of Muse, as well as two subscription options, at $20 per month and $100 per month. “For the vast majority of users, they should be able to do what they need to within the free tier,” Wang told Axios. “But for real power users, you know, those subscription tiers help us cover the computer costs.” There is no advertising within Muse, but Wang said the company is exploring commerce opportunities that could generate additional revenue. Initially Muse will be available in the U.S. and works on iOS, Android and the web, with support coming soon for Meta’s AI glasses.