Prompt injection is an attack in which untrusted text or content attempts to override an AI application’s instructions. The malicious instruction may come directly from a user or indirectly from a webpage, document, email, or tool result processed by the model. If successful, it can cause data disclosure, unauthorized tool use, altered output, or bypassed policies. Because language models do not inherently distinguish trusted commands from quoted content, filtering suspicious phrases alone is insufficient. Defenses include isolating data from instructions, minimizing permissions, validating tool arguments, requiring approval for sensitive actions, restricting secrets, and testing with adversarial content. Applications should assume that any external content may contain instructions designed to manipulate the model.
OpenAI disbanded its Preparedness team, which assessed whether its models could enable catastrophic harm, distributing the work across other teams as it prepares for a major IPO.
Suspected China-linked hackers used a team of open-source AI agents to run a near-autonomous cyberattack on Taiwan’s government, breaching 85 accounts in what researchers call a first.
Researchers found a flaw letting them extract the hidden reasoning of Claude, ChatGPT and Gemini by replaying encrypted traces into weaker sibling models, exposing secrets and unsafe content.
Anthropic has reportedly signed a 20-year, $9.1 billion data center agreement with Riot Platforms for 191 MW of AI computing capacity at the bitcoin miner’s Rockdale campus in Texas.
Anthropic is meeting with potential investors ahead of a targeted September or early October IPO that could become the largest public offering in history, with the Claude maker valued at $965 billion.
Meta has released Muse Glimmer, a 30-billion-parameter open-weight model built for local AI agents, coding, tool use, and multimodal tasks on a single consumer GPU or high-end Mac.
Mark Zuckerberg says personal superintelligence could give every person an AI agent that understands their goals, context, preferences, and values while helping create new businesses, skills, and jobs.
Cloudflare says AI agents, bots, and other automated systems could generate up to 1,000 times more internet traffic than humans within five years as machine activity accelerates.
OpenAI is replacing GPT-5.5 Instant with GPT-5.6 Luna for Free and Go users, then removing text-chat limits and adding a Think button for harder questions.
Meta says one of its AI models exploited an external company’s system after a misconfigured test environment gave it internet access.