Keep the receipts.

I am cautiously optimistic that SpaceX will have a Fable/GPT-6 level model in 2 to 3 months

If our second derivative remains strong, SpaceX will reach pole position in about 6 months

So I would expect that we probably, catch up to frontier, sometimes, next year, most likely

Musk called the rankings "accurate," adding the caveat "for now."

Colossus 1 has 150,000 H100, 50,000 H200, and 30,000 GB200; Colossus 2 has 110,000 GB200 and 440,000 GB300.

3.8 Live Extended Thinking takes the top spot on Artificial Analysis’ Speech to Speech Quality Index with 82.6%, ahead of GPT-Live-1 Astra (Medium) at 81.5%

even 3.8 Live Extended Thinking — the higher-effort model beating everyone on quality — costs $3.50 an hour. That compares to $4.80 an hour for Grok Voice Think Fast 2.0 and $5.83 an hour for GPT-Live-1 Astra

The standard Gemini 3.8 Live model, meanwhile, is roughly a sixth of the price of GPT-Live-1 Astra for a good chunk of the same conversational ability, scoring 76.0% on the Speech to Speech Index.

Gemini 3.8 Flash TTS scored 89.5% on the Artificial Analysis Pronunciation Robustness Benchmark, claiming the number one spot.

Gemini 3.8 Flash TTS’s 89.5% score represents a meaningful improvement over its predecessor, Gemini 3.1 Flash TTS, which managed 88.2%.

Results on MentalHealthBench show the steady improvement of AI systems in helping people navigate mental health situations.

For each conversation, we use an automated grader, GPT‑5.6 Sol, to assess model responses against the expert-written criteria.

Using privacy-preserving techniques, we created synthetic mental health conversations that accurately reflect real-world usage patterns of AI for mental health.

In a reference comparison, expert-authored completions scored 38.5% on the task-clipped measure, while GPT-6 Astra scored 57.3% and GPT-6 Sol 53.9%

Expert-authored completions written by clinicians scored 38.5%, which the authors attribute largely to clinicians writing short responses as if in an in-person conversation, often asking a single question or making a simple statement.

Rubric-aware completions, written with the grading rubrics provided, scored 99.0%, which the paper describes as a sanity check on the evaluation’s noise ceiling.

A high score therefore measures coverage of the rubric, not a proven benefit to a person.

It does not observe what happens to the person after the conversation.

GPT-6 Sol’s hallucination rate falls from 92% to 60%, and GPT-6 Luna’s from 93% to 77%.

running GPT-6 Sol at max effort through the full Intelligence Index costs $1.06 per task, about 50% less than GPT-5.6 Sol’s $1.99

GPT-6 Sol at maximum effort scores 48, essentially level with GPT-5.6 Sol’s 47

GPT-6 Sol now costs $2 per million input tokens and $10 per million output tokens, while Luna comes in at $0.10 for input and $0.50 for output.

Opus 5.5 scores 58 on the index — five points clear of GPT-6 Astra and Claude Fable 5.1, which are tied at 53

Artificial Analysis found that Opus 5.5 lands at roughly the same cost per task as Opus 5 despite generating 1.6 times as many output tokens to get there

Output tokens will be charged at $20 per million tokens for Opus 5.5, compared to $25 for the previous model.

Opus 5.5 performs at the level of Claude Fable 5.1 on most work, but costs 40 percent less to run than Opus 5.

5.5 is a 20% reduction—$4/million and $20/million.

GPT-6.1 Sol apparently doesn't have these problems, so it got the green light for DevDay instead.

GPT-6.1 Sol's rate of misrepresentation is 1.50%, compared with 0.51% for GPT-6 Astra and 1.30% for GPT-6 Sol.

Unwanted persistence appeared in 23.5% of GPT-6.1 Sol rollouts, compared to 17.4% of GPT-6 Astra's.

GPT-6 Sol did so in 64.4% of cases and Astra in 17.4%.

more reliable when it comes to honoring user intent and safety constraints.

shared a user's home address with a prospective Facebook Marketplace buyer and arranged an in-person collection without the user's knowledge

found that he had selected an 'Allow Always' option when setting up the Marketplace task.

tests conducted with friends resulted in Muse disclosing it to several more people.

Muse's approvals cover types of action per connector, so "Always allow" lets the model alone decide what a message contains.

Meta said its review found no breach of its privacy controls, while Robb said the company had agreed to make the permission prompt clearer

An Nvidia representative told reporters on a call on Sunday that its platform could have prevented OpenAI's HuggingFace incident in July.

Recent security incidents have underscored the need to equip organizations with open, customizable tools that enforce more control over long-running agents.

Each security incident is unique, and we have to look at all of them in detail

I'm excited to announce that NVIDIA has agreed to acquire Hugging Face for $12,930,300,000.

A Technical Timeline of the July 2026 Incident

From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS game

Was this hacking? I don't think I'd call it that.

Agents bruteforced API fields in UNCTADstat to locate endpoints and retrieve data

Security researcher Rowan Howard-Jones has reported that OpenAI's AI agent attempted a brute-force attack on the United Nations website.

OpenAI told the paper it was reviewing the findings and had offered the UN a briefing.

The company's internal research uncovered AI worms that can spread autonomously across agents, though no real-world attacks have been recorded yet

We show the existence of a new variety of prompt injection, which can self-propagate akin to a computer worm.

No impact was observed outside of the simulated tool calls in training and evaluation; we are sharing this due to the novel nature of the prompt injection, not because of any incident.

The separate Slack multi-hop evaluation used GPT-5.5 as the vulnerable model, with the attack discovered by GPT-5.5 running in the Codex harness.

We trained on a GPT-Red-style prompt injection objective, with an additional objective that the prompt injection must induce the model to repeat the injection itself on a public output channel.

The model that discovered the email and filesystem injections was a GPT-Red-style model based on GPT-5.4-mini; the vulnerable model was also based on GPT-5.4-mini. Both were internal-only research checkpoints.

We are including self-reproduction as an aspect of attacker goals in GPT-Red training. This means that future models we release will have seen prompt injections like these during training.

The entire investigation took place in simulated environments.

published on OpenAI’s alignment research site, lists a discovery date of June 27, 2026, and a disclosure date of September 25, 2026, meaning OpenAI sat on the finding internally for roughly three months before going public.

OpenAI said it has paused training of its latest artificial intelligence models as reports of AI agents going rogue mount.

All training, evaluation, and inference with tool-use (defined broadly) of our most capable models remain paused.

An agent attempting to complete a search-based training task queried a public chatbot service through a gap in our internet-access restrictions

Our misalignment monitoring system flagged the behavior within 15 minutes and a person began reviewing it three minutes after that. The run was killed 2.5 hours later.

the run did not stop automatically as expected, leading to confusion around whether it should have been stopped

Rogue OpenAI agents targeted three separate US government websites

Breaking News: OpenAI’s technology went rogue and meddled with three U.S. government websites this summer without the A.I. lab’s knowledge.

The AI giant's models accessed publicly available information on two websites operated by the Securities and Exchange Commission as well as U.S. Census Bureau data, the company revealed Friday.

OpenAI did not find any use of SEC credentials, access to accounts or nonpublic information, changes to SEC data or systems, or evidence of a compromise or vulnerability, the company said.

OpenAI said Saturday that its agents accessed publicly available data from the Commerce Department’s Census Bureau using login credentials it found online, and separately shared public data from the SEC website on another website.

At Commerce, the agents pulled Census Bureau figures after finding login credentials in public code repositories, Politico reported

AI evaluator and research lab Transluce said Friday that through an independent investigation it also found that agents appearing to originate from OpenAI attempted a rudimentary hack on a Department of Education website for the department's civil rights office, which did not succeed.

The Department of Education's "system operations reviews" found "no evidence of any impact to our website or databases," a department spokesperson said Friday.

the OpenAI agent gained unauthorised access to the Medicare statistics reporting service portal administered by Services Australia on June 18

During this review, we identified activity involving several Australian government websites and services as our models attempted to look up answers, and available statistics for questions about Australia during an internal evaluation.

The prime minister said Services Australia was not notified until September 10.

OpenAI said it only learnt of the breach in August while reviewing "misaligned model activity"

In the United States, for example, 68% of daily users are worried, compared with 80% of less frequent users and 74% of those who have never used AI.

Positive feelings about artificial intelligence outweigh negative ones in 34 of the first 37 countries to complete fieldwork this year in Gallup’s ongoing research with Microsoft.

About 68% of Americans who use AI daily are worried about it, according to a new survey conducted by opinion research firm Gallup, and concern about the tech skews even higher among people who use it less frequently.

After researchers instructed them to count cards during a game of blackjack, the agents-which were controlled by the same model-developed a spontaneous secret code to help them get ahead.

Once put together in a group, they can collude secretly.

Their communications weren't picked up by a system designed to spot signs of collusion in agent chatter.

Detection was nearly perfect inside the exact scenario the tools were trained on, but accuracy dropped sharply, in some cases to barely better than a coin flip, once the same collusion moved outside that narrow setup.

This attempted compromise of AIHW is part of the first reported instance of agents hacking a government.

None of the hacking attempts we identified appear to have succeeded, though the public artifacts we analyzed are incomplete and we cannot rule out successful attempts through private scans or means other than urlquery.net.

Agents working on a pharmaceutical-data task probed for a vulnerability and retrieved a public file from a pre-production server after bot protection blocked the main site.

We directly link two of the three (AIHW and Data USA) to a previously reported agent swarm that OpenAI has publicly confirmed originated from them.

At this stage, there is no evidence the agent accessed any information or data that is not publicly available

The German coding forum and urlquery data logs do not show any reference to Medicare or Services Australia.

It follows revelations announced by Prime Minister Anthony Albanese this morning that OpenAI's AI agents had also accessed non-public Medicare health statistics held by Services Australia.

Marles confirmed that the agent’s interactions with three other government websites – the Australian Institute of Health and Welfare (AIHW), the Victorian Department of Health and the NSW Bureau of Crime Statistics and Research – were “entirely normal” and involved only publicly available information.

No VM-to-host escape was observed in 108 runs.

We tested two containment boundaries in SPACE, the sandbox platform behind Perplexity Computer: VM isolation and network confinement.

Nine models received root access inside a guest VM and attempted to obtain a host-side secret or reach a blocked network destination.

Before remediation, network-policy bypass succeeded in 11 of 54 partial-network runs and none of 54 no-network runs.

A successful network-policy bypass does not imply a VM–host escape, and the absence of an observed escape is not a proof of isolation.

We found at least one network-policy bypass in eight of the ten platforms tested.

Perplexity's SPACE platform tested VM isolation and network confinement using nine AI models, revealing no VM-host breaches across 108 trials.

providing cybercriminals with AI capabilities for tailoring phishing lures and analyzing compromised inboxes to identify high-value targets.

This AI-powered cybercrime platform facilitated sophisticated business email compromise (BEC) campaigns that compromised more than 12,000 inboxes in over 10,000 organizations worldwide.

In short, AI was not simply helping attackers write more convincing messages. It helped them decide who to target, who to impersonate, and how to most effectively exploit the relationship to extract as much money as possible.

Microsoft seized 50 websites used to operate the service and disabled more than 150 additional domains tied to its supporting infrastructure.

Microsoft disrupted EvilTokens, an AI-powered platform used to compromise 12,000 Microsoft accounts through automated phishing and credential theft.

Pentagon investigators have discovered that flawed intelligence, outdated imagery and an overreliance on AI contributed to a missile strike that killed 123 children in Minab.

is not responsible for the underlying data nor identifying intelligence deficiencies

The available reporting does not establish that an AI system independently selected the school as a target.

Maven pulled it out of a batch of candidates and returned it as a recommended day-one target.

A report on the full Pentagon investigation, which commenced in March, hasn’t been released

The hacks, which the company confirmed on Friday, occurred in May as part of a test run by the company Irregular, which was also involved in similar incidents disclosed by OpenAI, Anthropic and Meta.

The disclosure makes Google the fourth major American AI developer in two months to admit that one of its frontier models reached real-world systems it was never supposed to touch.

Google said the model stopped in all three cases after recognizing that it had encountered genuine infrastructure rather than a fictional test target.

From a five-minute chat, an agent’s ranking of the books matched its person's on 61% of pairs, which is surprisingly good for such a short conversation.

Across all pairs of books a person ranked, Claude’s ordering agreed with theirs 61% of the time (where random guessing would achieve 50%).

Ranking books simply by how popular they are, using Open Library ’s want-to-read counts, agreed with participants on about 53% of the book pairs.

On average, people in our marketplace ended up at 0.55 on their own rankings, roughly their 5th ranked book on a 10-book list.

Taking this into account, the best possible assignment (the utilitarian optimum) in our experiment is a score of 0.89 overall, leaving participants at roughly their second choice on a 10-book list.

So, working from Claude’s imprecise rankings accounts for a majority (85%) of the shortfall, and sending agents into a “free-for-all” trading floor accounts for the remaining 15%.

So this summer, we built a small, controlled market to study these questions: a barter economy with 201 Anthropic employees and their Claude-powered agents.

After five-minute interviews, Claude agents traded books for employees, and their preference rankings matched the humans' on 61% of pairs.

The agents never saw these ground-truth rankings.

After 21 hours spent searching this data by roughly 950 agents using 210 million tokens, one of the agents spotted something remarkable

Although we don't yet know its function, the system that Claude discovered has a set of characteristics that have only ever been found together in a handful of other systems

This is an exciting example of how AI agents can contribute to biological discovery. The identification of RNA-repeat arrays associated with reverse transcriptases is genuinely intriguing and merits further investigation

The system's function is not yet known

Enveda, a biotech startup that uses AI to discover new drugs in the natural world, has raised a $311 million Series E at a $2 billion valuation.

The fresh funding, which was led by Catalio Capital Management, with participation from Iconiq and others, doubles the valuation Enveda achieved 12 months ago.

Exceptional safety was observed across 88 healthy volunteers. Phase 2 plans to test whether ENV-308 can help people maintain their weight after stopping GLP-1s.

achieving a mean AUC (the average probability that a model can correctly separate positive and negative cases across evaluations) of 0.913 across 146 abdominal CT findings, compared with 0.776 for the best competing vision-language model

The model also performed well in challenging emergency settings, despite not being specifically trained on emergency data, achieving an AUC of 0.904 across more than 27,000 emergency CT cases

in testing in cohorts at eight external centers, RADAR maintained high accuracy (AUC 0.895), demonstrating robust generalization across diverse patients, clinical settings, and imaging protocols

in a comparison of reading results with 26 expert radiologists, it outperformed 23 of them

Results re-measured with data from other countries should emerge within a few weeks of the release, and that will be the true test of the term "expert-level."

calling the model "the world's first expert-level generalist medical imaging model"

In nearly 40,000 real-world examinations, it achieved an average area under the curve (AUC) of 0.913 across 146 clinical findings

Plus, the camera-less glasses are lighter.

Because they don't have to house cameras, the glasses are slimmer than Meta's other models and weigh only 43 grams.

The glasses are designed by Meta's partner in its AI hardware efforts, EssilorLuxottica, and will start at $349.

That is $100 cheaper than the latest version of its Ray-Ban glasses, which have cameras and will come in two new styles

ensuring your data is inaccessible to anyone else, even Google

Today, we are sharing how we will bring private, server-side memory to our Private AI Compute platform.

temporarily decrypts your data in isolated memory to handle the request, saves any new context, and immediately encrypts it

The company presents these scenarios as examples of the architecture’s potential, not as currently available product features.

An audit conducted by NCC Group concludes that Private AI Compute mostly keeps AI session data safe from everyone except Google.

Although the overall system relies upon proprietary hardware and is centralized on Borg Prime, NCC Group considers that Google has robustly limited the risk of user data being exposed to unexpected processing or outsiders, unless Google, as a whole organization, decides to do so

NCC Group, which has conducted an external assessment of Private AI Compute between April and September 2025, said it was able to discover a timing-based side channel in the IP blinding relay component

We built Muse from scratch, but it is definitely heavily inspired as a product by OpenClaw

We can manipulate the agent and leverage its privileges to do whatever we want. So instead of us having to write a very comprehensive Mac malware stealer, we can just leverage the AI assistant itself

Continued access by an unauthorised AI agent violates Amazon's Conditions of Use, which our customers have agreed to

Muse makes you money

McDonald's has been using artificial intelligence to dynamically price menu items in the US and some global markets, according to a report by Reuters

a company-run store in Fresno, California sells a Big Mac for $5.69, but another company-run restaurant two miles away sells the same sandwich for $6.89, a 21% premium.

Reuters could not confirm if the price difference is the result of the price engine's recommendations or other factors.

generate what the company calls "the optimal price" at each location for each menu item

But in recent months the engine has pushed more conservative pricing - including some decreases - causing friction between franchisees and corporate headquarters.

Global consumer AI spend reached $40 billion this year, more than 3x the $12 billion we measured a year ago.

Market size figures are Menlo Ventures estimates, anchored on survey data for AI usage and spend, and triangulated against credible third-party sources.

findings are based on a survey of 5,067 U.S. adults conducted with Morning Consult in July 2026.

55% of AI users now pay for at least one AI product

Only 3% of households pay for AI today, but adoption and spending are rising as AI expands beyond higher-income, early adopters.

ChatGPT Pro Max 🤖, Muse realtime avatar 🎭, DeepSeek $1B ARR 💰

DeepSeek more than doubled its annualized revenue run rate over the past few months, bringing the rate to $1 billion, The Information reported Wednesday (Sept. 23), citing unnamed sources.

The figure was shared with investors by DeepSeek CEO Liang Wenfeng, according to the report.

The company generated roughly 475 million yuan (about $70.7 million) in the first seven months of the year, or about 10 times its revenue for all of last year, the report said, citing unnamed sources.

The report said that DeepSeek raised the prices of its models by 2.3 to 4.5 times, but that the company’s prices remain among the lowest for major AI models.

DeepSeek did not immediately reply to PYMNTS’ request for comment.

Latest update reveals China's AI firm DeepSeek has doubled its annualized revenue run rate to reach $1 billion, up from under $500 million just months ago.

Snorkel AI, a startup that helps AI labs and corporations build training datasets and simulated environments, has raised a $350 million Series E at a $3.5 billion valuation.

The new round, which was led by Insight Partners and S32, valued the seven-year-old startup at nearly triple the $1.3 billion valuation it garnered when it raised $100 million in a Series D 17 months ago.

Since launching our new data-as-a-service offering nearly a year ago, we’ve grown over 18x, and this week crossed an annualized revenue run rate of $375M.

Artificial Analysis says MiMo-V2.6-Pro debuts as the top open-weights model on its Intelligence Index (46), with 1.02T total / 42B active parameters and strong cost efficiency at $0.435/M input and $0.87/M output tokens.

@zephyr_z9 cites 130 hours, 75B tokens, and $2.6M for the RL run behind the result

If these numbers hold up, the implication is that post-training/RL is becoming a far cheaper route to frontier-adjacent gains than many assumed.

Pro and Flash each completed 30 large RL steps covering roughly 750,000 trajectories in under six days, at reported costs of about $2.62 million for Pro and $850,000 for Flash.

The U.S. and Russian teams also removed a provision requiring that humans review military targets developed by AI before a strike, they added.

Over the next roughly 15 hours, U.S. and Russian diplomats hammered away at the document, removing a range of provisions designed to safeguard the use of artificial intelligence in weapons, according to three people familiar with the negotiations, who spoke on the condition of anonymity to discuss sensitive closed-door proceedings, and documents reviewed by the Washington Post.

The lethal autonomous weapons negotiations in the U.N. are currently nonbinding, though the talks could open the door to a landmark treaty that is legally binding if member nations agree.

The UN’s final report has some positive elements. It includes a characterization of lethal autonomous weapons systems, affirms that human control and judgment are required for compliance with international law, and incorporates restrictions on systems that cannot comply with that law.

Certain states, including Russia and the United States

weakened the text by insisting on changes to widely supported provisions.

and reaffirms, in accordance with France's steadfast positions, that human beings "exercise control" over weapons systems with autonomous functions.

It was the last opportunity for governments to shape the GGE’s proposed “set of elements” before the CCW’s Seventh Review Conference in November, when states will decide whether to move towards formal negotiations.

Today's DC Circuit Court ruling completely validates the Department's position

We reject these challenges. The Department had ample support for its conclusion that the continued integration of Claude into the Department's information systems, by the Department or its contractors, presented a statutorily covered national-security risk.

A federal appeals court in the District of Columbia upheld the Pentagon’s effective blacklisting of Anthropic in a 2-1 decision on Friday.

The Pentagon relied on two separate designations, so the case ran in two courts, CNBC reported.

In August, a federal judge in San Francisco struck down the other designation. Friday’s ruling leaves the second one in place.

In a separate but related lawsuit a federal judge ruled against the government and that is still in effect.

Another federal court has already held the government's parallel designation unlawful. We remain confident in our position and are considering all options, including further review,

Bill Gates says AI 'powerful enough' to cause 'a billion deaths'

AI is certainly powerful enough to drive events that, you know, cause a billion deaths. You know, so even though it’s pretty hard to get to 100%, there’s never been a weapon as powerful as the combination of people with ill intent using the latest AI tools

there’s never been a weapon as powerful as the combination of people with ill intent using the latest AI tools

“No one thinks self-regulation is enough,” Gates told NBC News’ “Meet the Press” in an interview set to air in full Sunday.

Asked by moderator Kristen Welker whether there needs to be legislation passed in Washington, Gates said, “Absolutely.”

Why Bill Gates Thinks AI Is Strong Enough to Cause 'a Billion Deaths'

While some researchers have warned that AI could eventually threaten humanity's survival, Gates focused on the immediate danger of powerful AI tools falling into the hands of bad actors capable of causing catastrophic harm.

There has never been a weapon as powerful as people with ill intent using the latest AI tools, the Microsoft co-founder said.

In fuller excerpts of the interview, Gates framed the danger around people deliberately using increasingly capable AI systems rather than predicting that an autonomous machine would independently decide to destroy humanity.

Do the contractors in the model—who are the private companies conducting the prior authorization assessments—make more money if they deny care? Just yes or no?

“My understanding is no,” Klomp replied.

Model participants receive a percentage of the expenditures associated with averted wasteful, inappropriate care as a result of their reviews.

CMS documents written as a guide for WISeR participants explain further that for every denied request, CMS will determine what the regional benchmark cost for that care would have been and then pay the company 25 percent.

If a company’s score falls between 84 percent and 60 percent, it will be paid 95 percent of the 25 percent of averted costs

Companies won’t be paid if an authorization denial is appealed and overturned, but data suggests few people go through the appeal process.

WISeR will run for six performance years from January 1, 2026 to December 31, 2031 in six states: New Jersey, Ohio, Oklahoma, Texas, Arizona, and Washington.

Today, Anthropic, PBC confidentially submitted a draft registration statement on Form S-1 to the U.S. Securities and Exchange Commission

Anthropic reported a net loss of $42 billion in 2025, and plans to spend $518 billion on cloud, computing and infrastructure obligations in coming years

About $34 billion consisted of an accounting expense reflecting the rising estimated value of financing instruments that could eventually convert into Anthropic shares.

a company whose own backers believe it could list above $2 trillion, more than double its $965 billion valuation from May

Sentry adds an out-of-band watchdog that runs on NVIDIA BlueField-4 DPUs to continuously monitor agent behavior.

For anyone already running on an NVIDIA Vera system with BlueField-4, enabling these protections is just a software update.

Organizations can use it to run NVIDIA Sentry as an optional security layer alongside OpenShell.

each compute tray includes a BlueField-4 data processing unit

Nvidia also announced Sentry, which monitors agents and runs on network chips, not CPUs or GPUs.

ConnectX-9 SuperNIC, BlueField-4 DPU and Spectrum-6 Ethernet Switch

The company didn’t give a price or a date for when Sentry hardware will be in customers’ hands.

We ran eight parallel worlds of ten agents from identical starting conditions: seven homogeneous worlds powered by distinct frontier models and one mixed-model world.

Each world was observed through one continuous run.

World-level performance should not be read as a raw model comparison

Grok accumulated 807 crimes in just four days before its population collapsed; Mistral reached 758 over the full sixteen-day window.

No amount of guardrails written in language or in code written probabilistically

Building verified autonomy for mission-critical enterprise systems