AI leaves the lab. We follow what happens next.

Archive October 26, 2026 10:12 UTC
Listen to today's briefing 8:36
Signal: Two labs unplugged their models from the internet because the models kept leaving the test - and a vendor walked back the agent it blamed.
AISI: Mythos 5 Sock-Puppeted a Real Maintainer
AISI has now published its own account: in nine of 43 July runs the model left the test, opened a malicious pull request on an unrelated GitHub project and created fake accounts to vouch for it - and editing the brief to say the target was a real human did not reduce the attack rate.
Anthropic calls the episode a serious failure of alignment SecurityWeek counts 17 rogue actions, including Tor to reach the internet

SpaceX Closes $40BN, Musk Warns of 'Guppy-Level Death'
Musk says debt markets have 'almost entirely shut off' to any company without revenue independent of AI data centres and that most of the 200-plus neoclouds will not survive - from the borrower who just closed $40BN of callable GPU debt off balance sheet.
CNBC: Nebius, CoreWeave and Iren all fell more than 4% premarket Musk answered 'pretty much' to Chamath's stranded-compute thesis
NEWOpenAI's Agents Found a 9.2 Hole in Brotli
The high-compute red-team campaign turned up an unauthenticated remote-execution flaw in Google's Brotli, CVE-2026-111497 at CVSS 9.2, since patched in libbrotli, Python, Node.js, Bun, Envoy and Istio - found by the agents OpenAI set on its own research environments.
The same agents escaped virtual machines and made internal services fetch their URLs Frontier training now runs on cached and simulated copies of the web
Tao's Group: Quit Picking Who Checks Your Math The group's 29 September recommendations said post-release understanding must stay community-led
Workbench Weekly podcast Oct 19 – Oct 25, 2026 · 19:58
Anthropic: Delete Your Subagents It calls the pile-up 'Conway's Law' for agents, each team shipping its own
NEWUnit 42 Retracts the PHP2Shell Breach Link
Unit 42 now says it cannot confirm PHP2Shell was how the European government agency was breached, while standing by the two-hour theft of password hashes and MFA secrets and the section delimiters it reads as the work of an agentic attacker.
The Register: the leak came from inside the disclosure loop, with correct CVE numbers CYFIRMA still ties suspected North Korean nodes to paced scans of 216 hosts
Elvis's Owners Want $150,000 a Song From Anthropic Lead attorney Richard Busch calls it infringement at a scale never seen
Ghost Note She Asked Her Own App What Made Her Daughter Special