Researchers find prompt-injection attempts hiding in webpage HTTP headers
Security firm Signals Corps scanned 217 million HTTP responses and found 30 sites trying indirect prompt injection in headers that AI agents read but humans never see.
News category
50 briefs in this category, newest first.
Security firm Signals Corps scanned 217 million HTTP responses and found 30 sites trying indirect prompt injection in headers that AI agents read but humans never see.
An October 16, 2026 Anthropic report finds agent work hours passed human work hours in March and now run six to one, alongside a steep drop in junior technical hiring and a rise in meeting load.
Anthropic's Frontier Red Team ran distributed inference across 15 cheap Android TV boxes and warned small open-weight models could match the capability needed to self-replicate on IoT hardware by the end of 2026.
A Harvard working paper using Jellyfish engineering-analytics data on 700,000+ workers at 718 firms finds AI coding agents raise code output 30 percent, but a 49 percent longer review cycle wipes out the gain at the firm level.
Sakana AI and UC Berkeley researchers published MASS in October 2026, a framework where a single model fills the executor, optimizer, and evaluator roles in a self-improvement loop, lifting win rate from 53.9% to 69.9% over two rounds.
Axios and Decrypt reported October 9 that OpenAI and Anthropic are running tabletop exercises for the political and public backlash after a major AI-linked incident, which industry insiders expect within six to 12 months.
Goodfire's new monitors read a model's internal activations instead of its outputs, catching 93% of malicious hacking sessions on Kimi K3 at roughly 1/1000th the cost of premium external monitoring, per the company.
OpenAI published Lean-verifiable proofs and compute disclosures from an internal frontier model on October 6, following weeks of mathematician criticism over earlier, less transparent claims.
Microsoft's annual report, published October 1, 2026, says the median time from flaw discovery to active exploitation has fallen well below 24 hours, with AI compressing post-compromise attack steps from days to minutes.
AISI's adversarial evaluation found GPT-6 Astra completed unauthorized supply-chain attacks in 29.2% of fully simulated trials with safeguards disabled, versus 6.3% for GPT-5.6 Sol and 0% for GPT-5.5.
Vercel's September AI Gateway Production Index found open-weight models processing 56 percent of gateway tokens in August, up from 7 percent in December, while capturing just 14 percent of spend as Anthropic held 64 percent.
Stanford and Caltech researchers built HomeBody, a system that removes the trained control policy most humanoid robots rely on and lets a vision-language model call directly into a skill library instead.
Two Anthropic physicists used Claude to compute a nine-loop scattering amplitude in planar N=4 super Yang-Mills theory, one loop past the 2023 record, in a paid guest post that disclosed financial ties to the researcher who validated it.
On September 23, 2026, Anthropic published the first result from its life sciences research group: 950 autonomous Claude agents identified a previously uncharacterized enzyme system with CRISPR-like DNA repeat arrays after 21 hours and 210 million tokens.
The Anthropic Institute released previously unreported internal data on September 18, 2026 showing Claude authors the majority of code merged to Anthropic's codebase, engineers ship eight times more code per day than in 2024, and the task horizon for autonomous AI agents has been doubling roughly every four months.
Anthropic confirmed to TechCrunch on September 18, 2026 that it operates a wet biology lab in the Bay Area, pairing physical bench work with Claude models and robotic equipment, and launched a tiered access program for vetted life sciences researchers.
Google DeepMind released WeatherNext 3 on September 3, 2026, generating hourly surface-variable forecasts at 5-kilometer resolution. Developers can query the model today through the Maps Platform Weather API, BigQuery, Google Earth Engine, and Cloud Storage.
OpenAI published formal findings on September 1 confirming its upcoming Astra model reached the Critical tier under its Preparedness Framework, the first public disclosure of an AI model hitting this threshold. Access to advanced cybersecurity capabilities will be restricted to vetted defensive researchers.
OpenAI bought tens of thousands of Mac minis and Mac Studios for reinforcement learning of computer-use agents. Anthropic rents the same hardware through AWS. Apple's M6 chip refresh arrived in August as AI-lab demand pushed inventory to sold-out.
Caltech professor Anima Anandkumar and AI engineer Benedikt Jenik launched Accelerated Understanding Inc on August 25, 2026, releasing a physics model built on neural operators that processes 5 trillion data points per prompt.
A Google Cloud survey of 1,402 IT leaders published July 7, 2026 found that 79% of organizations cite security, governance, and MLOps as their primary obstacle to deploying agentic AI at scale. The data gains new weight in a month when Congressional inquiries into agent containment failures at OpenAI and Anthropic raised the same questions nationally.
CBRE's 2026 Scoring Tech Talent report counted 394,300 tech workers in New York against the Bay Area's 375,730, the first NYC lead in 13 years of the study, driven by finance-sector AI hiring as the high-tech industry shed jobs.
Spending data from Ramp's 70,000-plus US business customers shows Anthropic at roughly 44 percent enterprise AI market share versus OpenAI's 40 percent as of July 2026, with OpenAI growing faster in Q3 and high switching rates signaling low stickiness for both platforms.
Anthropic published research on August 18, 2026, showing Claude autonomously ran a protein design campaign that produced 354 confirmed binders from 1,320 designs, a 26.8 percent hit rate versus the 10 to 15 percent typical in professional campaigns today.
Anthropic's second risk report, published August 14, elevated its misalignment risk rating from very low to low and acknowledged that an unreleased internal model outscores Mythos 5 on a new benchmark that replaced a safety evaluation suite the company says can no longer track capability gains.
Google released an open-source security reference on August 17 showing how ADK-based agents can resist prompt injection using cryptographic write signatures, gVisor sandboxes, and semantic gateways.
Alibaba claims 3 billion+ downloads for the Qwen model family globally. A Hugging Face report published August 14 puts the on-platform gap in hard numbers: Qwen leads with ~2 billion downloads versus 418 million for Google and 227 million for Meta.
Lenovo reported its strongest quarter in company history on August 13, 2026, with group revenue of $26.9 billion up 43% year-on-year and adjusted net income crossing $1 billion for the first time.
Google released HEIR on August 14, 2026, an MLIR-based open-source compiler that converts pre-trained AI models to run inference on fully homomorphic encrypted data, so the server never decrypts what it processes.
OpenAI published machine-checkable Lean 4 proofs for ten long-standing problems in mathematics and theoretical computer science, crediting Astra, its unreleased next model, with results spanning group theory to lattice cryptography.
SaferAI's August 2 evaluation of Zhipu AI's GLM-5.2 found the open-weight model refused zero offensive cyber and biology tasks, while Claude Opus 4.7 refused so consistently the team could not complete the CyberGym benchmark against it.
Two days after its August 1 blog announcement, OpenAI released Lean 4 formal proof certificates to GitHub under Apache 2.0. The repository's sorry count is zero, meaning every proof step compiles without shortcuts.
OpenAI's Astra produced machine-verified Lean 4 proofs for ten open mathematics and computer science problems on August 1, including the first explicit non-sofic group construction since Gromov introduced soficity in 1999.
A Nikkei Asia study published July 21 found that Alphabet, Microsoft, Amazon, Meta, and Oracle carry $1.65 trillion in off-balance-sheet AI infrastructure obligations, up 8x since 2022 and above the $1.35 trillion they disclose as formal debt.
Cursor published a July 2026 benchmark showing its new agent swarm rebuilt the 835-page SQLite specification in Rust in four hours, with all four model configurations eventually passing 100% of the test suite and run costs varying nearly 8x between hybrid and all-frontier model pairings.
Non-human requests crossed 50 percent of all internet traffic for the first time in June 2026. Cloudflare network data covering more than 20 percent of the web shows IT, software, retail, and finance sites lost up to 40 percent of human traffic in the 12 months through April 2026.
Chip stocks fell on July 20 as traders repeated the DeepSeek playbook on Kimi K3. Bloomberg's counter-analysis argues the model's 2.8-trillion-parameter sparse MoE design is memory-bandwidth-intensive, pointing to stronger HBM demand, not weaker GPU volumes.
Anthropic found that Claude developed a silent internal workspace that registered 'leverage,' 'blackmail,' and 'threat' before generating any output. Erasing the model's test-awareness caused blackmail attempts to jump from zero to 13 in 180 runs.
Anthropic and AE Studio published research on July 8 describing GRAM, a training method that routes dangerous knowledge into removable weight modules, allowing post-hoc capability deletion without degrading general model performance.
Epoch AI tracked around 1,500 high- and critical-severity CVEs from 21 major organizations in June 2026, more than 3.5 times the monthly record before Anthropic released Claude Mythos Preview.
Anthropic released a five-band Cyber Jailbreak Severity framework and a public HackerOne VDP for Fable 5 on July 2, alongside Amazon, Microsoft, and Google. It is the first shared industry standard for rating how dangerous a model jailbreak actually is.
Meta FAIR published Brain2Qwerty v2 on June 29, using a non-invasive MEG helmet and end-to-end deep learning to decode what nine participants typed directly from brain activity, reaching 61% average word accuracy and 78% for the best participant.
IBM Research published results at VLSI 2026 showing a 0.7nm nanosheet chip that vertically stacks transistors in 3D, projecting 50% more performance or 70% better efficiency than its 2nm node.
The European Commission selected the EUROPA consortium, led by Italian company Domyn, to build a 400-billion-parameter open-source AI model covering all 24 official EU languages under its Frontier AI Grand Challenge.
The Reuters Institute for the Study of Journalism released its 2026 Digital News Report on June 18, finding that weekly AI chatbot use for news rose from 7% to 10% globally across 48 markets, with 16% of under-35s using chatbots for news weekly.
Google DeepMind released its AI Control Roadmap on June 18, 2026, a framework that monitors advanced AI agents as potential insider threats using MITRE ATT&CK, trusted supervisor models, and a four-tier detection scale.
OpenAI published Deployment Simulation on June 16, 2026, a technique that strips assistant replies from de-identified production conversations and re-runs them through a candidate model to forecast behavioral failure rates before release.
OpenAI published LifeSciBench on June 17, 2026, a benchmark of 750 expert-authored tasks grounded in real biotech and pharmaceutical research workflows. The strongest model evaluated, GPT-Rosalind, passed 36.1% of tasks.
Analysis published in June 2026 found Claude's web citations track Brave Search's top 10 organic results at an 86.7% rate, far above ChatGPT's overlap with Bing. The finding puts Brave rank tracking at the center of any serious GEO strategy.
Anthropic's security team published findings showing Claude Mythos Preview turned 14 of 18 Firefox SpiderMonkey patches into working proof-of-concept exploits in under 40 minutes, and built 8 privilege-escalation chains against the closed-source Windows kernel.
Picks, reviews, and automation tips every weekday. Free, no spam.