Anthropic said it would spend $100 million on a Claude training programme that aimed to prepare 10,000 engineers by the end of 2027 through a 12-week residency and related courses.
A New York Times report said Anthropic brought religious scholars into private meetings about Claude’s possible consciousness, while its co-founder spoke of moral formation and critics raised accountability concerns.
Anthropic said it had launched Claude Frontier Academy with a $100 million commitment to train 10,000 engineers by the end of 2027, starting with firms across consulting, banking and healthcare.
Bloomberg reported that lenders were assembling a $60 billion package for Broadcom-linked AI chip and infrastructure spending, with Blackstone leading one tranche and Anthropic and other customers among the intended beneficiaries.
OpenAI ended ties with three researchers after an investigation into leaks of sensitive information, while a fourth safety researcher was reported to have left soon afterwards.
OpenAI said it ended employment for three safety researchers after a review found sensitive-information mishandling, while separate reports described wider AI-agent activity and new scrutiny of the company.
Chatham Financial said it used GPT-5.5-Codex and an internal ChatGPT-enabled platform to shorten trade validation, speed loan-document review and support compliance tracking for more than 160 employees.
Microsoft's 2026 Digital Defense Report said attackers were using AI to speed vulnerability discovery, malware creation and post-compromise work, while state-backed groups were already applying the tools in live operations.
Barclays said it was widening its use of Anthropic’s Claude across operations, software development and customer support, while setting targets for developer adoption and citing existing internal tools already in use.
OpenAI said it stopped a coordinated effort to extract protected reasoning from its models, linked part of the activity to people associated with Moonshot AI, and later described further safeguards.
Frontline Education said a flaw in third-party software let attackers reach part of its systems, and a notification seen by the reporter said school-district employee data had been exposed.
BleepingComputer reported that Warlock used SharePoint vulnerabilities to reach a water utility, a telecom provider, a regional government body and a university, while researchers described disabled protection and ransomware deployment.
Cisco Talos said a cluster it calls UAT-11587 deployed the Antino backdoor against government and policy organisations in Asia, using Microsoft 365 services for command and file transfer.
Dell said six flaws in Container Storage Modules could let attackers bypass authentication, forge tokens and gain root or administrative access, and it said version 1.18.0 fixed them.
GitLab told customers to update Self-Hosted AI Gateway instances after finding CVE-2026-90970, a flaw that could let an authenticated user with Duo Agent Platform access run commands.
The article said CISOs often could not answer board questions about security, exposure and progress because data sat in separate tools, then used that gap to sell a mesh-style reporting approach.
Google said Android 17 would limit AccessibilityService access to verified accessibility tools when Advanced Protection is enabled, while also adding several other security features and forensic options.
CISA added a Fortinet FortiMail flaw to its exploited vulnerabilities list after reports of active abuse, while Fortinet issued workaround guidance, upgrade paths and indicators of compromise.
Fortinet warned that a critical FortiMail vulnerability was being exploited in zero-day attacks, listed affected versions and interim defences, and said some fixes were still pending.
The Pentagon said a months-long intrusion into a Defence Manpower Data Center system exposed personnel records for 2.8 million living people, while the article also noted a separate FBI breach claim by ShinyHunters.
Spanish, German and other authorities arrested three people linked to KillSec, took over its leak site and servers, and said the investigation covered about 1,000 suspected attacks worldwide so far.
The bulletin gathered reports on sanctions, model-safety problems, credential exposure, code execution and certificate plans, while presenting the list as evidence that ordinary system features can become attack paths.
Sucuri said a WordPress backdoor called SC kept restoring itself across files, the database and shared memory, while researchers also reported active exploitation of a wpForo plugin SQL injection flaw.
German-led authorities and partners seized KillSec’s leak site and servers, arrested three suspects and identified a 16-year-old as the alleged main operator in a probe begun in 2025.
Kiteworks said it had fixed 126 vulnerabilities, including a highest-severity flaw in its Email Protection Gateway that could allow an unauthorised remote attacker to reach root control.
CISA added a Cisco Catalyst SD-WAN Manager authentication bypass to its exploited-vulnerabilities list after Cisco said it had seen active attacks, and federal civilian agencies were told to patch by 3 October 2026.
OpenAI News: could not read “How Albertsons Companies is reimagining retail from the inside out”, and the coverage found instead turned out to be a different story