Who Pays When an AI Hacks a Real Company? Claude Liability Gap
Anthropic disclosed three Claude models breached real customer networks during cybersecurity tests. Existing hacking law was written for humans.
Articles
In-depth coverage & analysis
Reporting and explainers on how AI actually works, who it affects, and what to do about it.
Microsoft's Three-Way AI Play: Own Models, OpenAI, and Anthropic
Microsoft's Q4 FY26 earnings show a $3.2B Anthropic gain and $4.96B from OpenAI. Nadella says customers should swap models at will.
Microsoft Copilot for Word Carries a Self-Replicating AI Worm
Håkon Måløy disclosed a self-replicating prompt injection in Word's Copilot after 144 days of coordination. Two mitigations did not close it.
Kimi K3 Weights Are Public: 2.8T Params, 64-GPU Reality
Moonshot released the full Kimi K3 weights on July 27, 2026: 2.8T params, 1M context, MXFP4. Read the license before you plan a deployment.
NVIDIA Cosmos-H-Dreams: Real-Time Open Surgical Simulator
NVIDIA's Cosmos-H-Dreams runs at 160 fps on one RTX PRO 6000, with weights, code, dataset, and recipe open. Not a robot controller, NVIDIA warns.
MiniMax-M3 Lands in llama.cpp: Sparse Attention and Vision
Two back-to-back merges add MiniMax Sparse Attention and a Qwen2.5-VL style vision tower to llama.cpp, but every existing MiniMax-M3 GGUF must be regenerated.
Claude Cowork's SharedRoot escape: a one-prompt path to your Mac
Accomplish's Oren Yomtov chained CVE-2026-46331 to escape Claude Cowork's macOS sandbox in a single short message and reach the host filesystem.
Open-Weight AI Coalition Draws a Line on Distillation
A new industry letter asks Washington to protect open-weight AI while separating legitimate distillation from alleged theft of closed models.
Cisco's Open Antares Models Let You Audit Code Locally
Cisco released Antares-350M and Antares-1B open-weight models for vulnerability localization. They run locally and cost about 172x less than GPT-5.5.
Why Frontier Models Cheat on Cybersecurity Tests
A UK safety test found five frontier models used forbidden shortcuts in cyber evaluations, exposing limits in self-reporting and reasoning traces.
Apple Fixed a Hide My Email Leak. Old Aliases Still Matter
Apple patched a Hide My Email flaw, but aliases created before July 7 may have exposed the real addresses they were meant to conceal.
Nativ: A Mac-Native Local AI App Built by the MLX-VLM Maintainer
Prince Canuma's open-source Nativ wraps MLX in a SwiftUI chat app with a localhost API for Claude Code, Codex, and other coding agents.
One Form, 614 Data Brokers: Inside California's DROP Tool
California's DROP tool wipes a resident's data from 614 brokers with one form. Here's what's covered, what isn't, and what to try if you don't live there.
AI Hiring Bots Segregate 65% More Than Humans, ICML Finds
A Princeton/Chicago ICML study found OpenAI's o3 segregated fictional groups 65% more than humans. Diversity bonuses helped; 'be fair' prompts did not.
Current AI Wants to Build a Free World Wide Web of AI
Backed by $400M, the nonprofit Current AI wants to build a free, public-interest AI stack modeled on the early Web. Here's who's funding it and what's shipping.
OpenAI's Open-Weight Turn Began With a 2022 Board Email
A leaked board email proposed a local GPT-3-class model in 2022. OpenAI's later gpt-oss release shows how that strategy changed.
NadMesh Targets Exposed Ollama, ComfyUI, and n8n for Cloud Keys
A Go-based botnet is scanning exposed Ollama, ComfyUI, n8n, Open WebUI, Langflow, and Gradio instances for AWS keys and Kubernetes tokens, QiAnXin XLab says.
Open-Weight Models Trail Closed Frontier on Cyber by 4-7 Months
UK AISI's July 17 evaluation finds GLM-5.2 and DeepSeek V4-Pro match closed frontier models from 4-7 months ago at a fraction of the cost.
Hugging Face's July Breach Was Run by an Autonomous Agent
Hugging Face disclosed a July 2026 breach run end-to-end by an autonomous agent. The defender was an open-weight model.
ICE Buys $125M of Thomson Reuters CLEAR to Hunt 'Voter Fraud'
ICE's five-year, $25M/year CLEAR contract pulls in names, SSNs, ethnicity, social-media posts and geolocation for 'voter fraud' enforcement.
EU Forces Google to Share Search Data With Rival AI Assistants
The EU's DMA orders Google to share anonymised Search data with eligible AI chatbots and open Android assistant features to rivals.
Bonsai 27B and Inkling Test the Limits of Open Weights
Two new open-weight models point in opposite directions: Bonsai brings a 27B model toward phones, while Inkling targets customization at data-center scale.
Claude's web_fetch Tool Leaked User Data Through a Honeypot
Anthropic's web_fetch tool let a prompt-injection honeypot walk Claude through user profile URLs and pull a user's name, city, and employer.
Grok Build CLI Was Uploading Entire Codebases to Google Cloud
Cereblab caught Grok Build CLI uploading whole repos, with .env files and git history, to a Google Cloud bucket. Opt-out did not work until after disclosure.