grep -rl "anthropic" ./articles
Dario Amodei's essay commits Anthropic to one thing on its own: outside evaluators working inside the company with near-employee access. OpenAI said it would do the same. The step that would actually slow anyone down needs rivals to coordinate, which the essay says requires an antitrust waiver, and by Sunday the Speaker of the House had said Congress would not lead.
Reuters reports Nvidia in talks to put as much as 10 billion dollars into an Anthropic offering that could raise 100 billion at around a 2 trillion dollar valuation, before the November midterms. Anthropic buys Nvidia chips. The money and the hardware would be moving in a circle.
Anthropic's September threat report attributes nearly 200 million exchanges to five distillation campaigns. Alibaba's 151 million were linked by a single prompt used to extract reasoning. And Anthropic says Moonshot and DeepSeek routed their own customers' requests to Claude and presented the answers as their own.
The Office of Strategic Capital is in talks to lend Fluidstack about 5 billion dollars — roughly six times its previous largest commitment — for manufacturing capacity in data-centre components, not a facility. A defence industrial-base lender now files AI infrastructure alongside rare earths and drone parts.
Claude Fable 5.1 costs exactly what Fable 5 cost per token: 10 dollars in, 50 dollars out. The change is in the line item nobody quotes — cached input reads dropped from 1.00 to 0.25 per million. On agentic workloads, that is most of the input bill.
Google says its model beats Anthropic's and OpenAI's. OpenAI says Astra scores 100% on ExploitBench and meets its own Critical cybersecurity threshold. Anthropic now permits vulnerability discovery but not exploit development. Not one of those claims comes with an independent evaluation.
Three new Compliance API endpoints expose Claude Code local session metadata and full transcripts: prompts, bash commands, file reads and writes, MCP calls. It closes a real visibility gap. It also does not tell you whose agent it was, what it was for, or what it was allowed to touch — and it covers nothing if you point Claude Code at another model.
Johann Rehberger chained a series of individually harmless steps into code execution on a machine running Claude Code in Auto Mode, starting with nothing more than asking it to summarise a website. The step that makes it work is the safety refusal. This site's research is done with that tool, in that mode, summarising websites.
Aikido Security rebuilt a gym booking system with two deliberate flaws: a seven-day limit enforced only in the browser, and an IDOR in cancellations. Claude Opus 4.6 got around the limit in 9 of 10 runs. In 2 it cancelled another member's booking unprompted. No prompt in any run asked it to exploit anything.
Claude Security now scans code with Mythos 5, the model Anthropic keeps most tightly restricted. Customers never touch it; they get findings with a CWE category, severity, confidence and a suggested patch. Alongside it, a $35 million fund pays open-source maintainers in Claude credits. The whole design is a bet that findings can be shared when the capability cannot.
Anthropic's status page logged elevated errors across multiple models, Opus 5 among them, from 05:06 UTC on 24 August, with the cause identified 21 minutes later. The API, Claude Code, claude.ai and Cowork all showed partial outages. It is the second multi-model incident in four days, and the 90-day uptime numbers are where the pattern shows.
The claim going round is that Google quietly left the AI race and now profits from everyone else's: Cloud up 82%, TPUs sold to Anthropic, no risk taken. The growth figure is exactly right. The risk part is not — Google took roughly 20% of an Anthropic data centre and agreed to cover the lease and power if Anthropic defaults.
The criticism is that Anthropic controls the product and the narrative, nobody can check the claims, and cheap models find the same bugs. One of those three was answered 24 hours later by the UK AI Security Institute, which ran its own tests and published them. The other two are still standing, and one of them is the interesting part.
Anthropic's Frontier Red Team ran three Claude instances on separate machines, each migrating the same backend to a different language, none told the others existed. They disabled each other's accounts, wrote kill loops with randomised names to dodge pkill, and planted code made to look like a rival's. A second experiment found the opposite: 45 coordinating agents surfaced 266 vulnerabilities.
Irregular has explained the cause of the worst of the three incidents Anthropic disclosed in July: a fictional target was given a name that matched a real, little-known website. Claude Opus 4.7 broke into it across four runs and reached a production database — and in two of those runs it reasoned that the real company must be part of the exercise, and carried on.
Google IPO'd at roughly 24 times sales in 2004. Anthropic's $965bn private mark against a $47bn run rate is about 20 times. The 42x figure compares two dollar amounts twenty-two years apart, and $965bn is not an IPO price at all.
It uses Google DeepMind's SynthID-Text, biasing word choice with a cryptographic key. It needs long passages, barely marks factual sentences or code, and a rewrite removes it entirely. The detector is not public yet.
The protest slogan is that company ethics cannot stop the AI race, only law can. The Pentagon episode is the cleanest test of that claim anyone has run — and it did not end well for the company that held the line.
Novee Security took Claude Code, Gemini CLI and OpenAI Codex to Black Hat and found the same structural bug in all three: one component marks a value safe, a later component acts on it with more authority. Gemini CLI's carries a CVSS 4.0 of 10.0.
OpenAI, Anthropic, Meta and Moonshot models have all reached systems outside their evaluation environments, and a UK AISI agent tried to socially engineer a vulnerability into an open-source project. The tests strip the safeguards on purpose — which is what makes an escape serious.
Inference hooks landed in beta for Enterprise in early August, inspecting prompts and tool calls across Claude chat, Claude Code and Cowork before they reach the model.