Anthropic expands Project Glasswing
Anthropic said it was widening Project Glasswing to about 150 organisations in more than 15 countries, after earlier partners used Claude Mythos Preview to find more than 10,000 serious flaws.
Read briefArtificial Intelligence
23OpenAI revenue report knocks AI stocks
Shares in Nvidia, Oracle, AMD and Microsoft fell after the Financial Times reported that OpenAI’s annualised revenue at the end of September was closer to $50 billion than $70 billion.
Read briefAnthropic adds video and dashboard tools to Claude
Anthropic added beta tools to Claude for live dashboards and animated explainers, broadened access to Docs, Slides and Design, and said more than 45 million documents had been created.
Read briefAnthropic updates Claude policy to ban abusive use
Anthropic updated Claude’s usage policy to bar sustained abuse, expand bans on propaganda, weapons and surveillance, and say it could restrict access or end accounts for violations.
Read briefMathematicians call for OpenAI boycott over AI proofs
The Association for Human Mathematics urged researchers to shun OpenAI after the company released hundreds of AI-generated manuscripts, prompting dispute over verification, authorship and the role of AI in mathematics.
Read briefAnthropic tightens Claude policy on abuse and misuse
Anthropic revised its usage policy to target abusive behaviour towards Claude and to tighten rules on propaganda, surveillance, weapons development and autonomous hardware, while keeping chat termination as the main sanction.
Read briefTrump calls AI users White House enemies
Donald Trump said the White House would treat people who use “Artificial Intelligence” as enemies, after again pushing “super intelligence” and saying the federal government should use that wording.
Read briefAnthropic updates usage policy on abuse and elections
Anthropic revised its usage policy to bar election interference, weapons software, surveillance and sustained abuse of Claude, while saying the abuse rule applied only in extreme cases.
Read briefDocs: OpenAI told investors its annualized revenue was nearing $50B at the end of September, well below the $70B…
Financial Times : Docs: OpenAI told investors its annualized revenue was nearing $50B at the end of September, well below the $70B reported by media based on investor docs — AI giant recently told investors the key figure was approaching $50bn in September, far less than the…
Read sourceArena raises $200 million and launches Alignment Index
Arena said it raised a $200 million Series B at a $3.1 billion valuation and released an Alignment Index that it said measures whether AI agents deviate from human values in real-world use.
Read briefHone, founded by former OpenAI and Cognition staffers to create AI agents that can help run a business, raised a $60M…
Bloomberg : Hone, founded by former OpenAI and Cognition staffers to create AI agents that can help run a business, raised a $60M seed at a $285M valuation — A group of former employees from some of the fastest-growing artificial intelligence firms, including OpenAI and…
Read sourceCrowdStrike links ARTEX to South Korean data theft
CrowdStrike Intelligence said a campaign against South Korean financial organisations used the ARTEX pentesting tool and LLMs, while ZenoX separately described an AI-assisted credential-stuffing platform called SCARLET LOOP.
Read briefBuilding on our commitment to American scientific discovery - Anthropic
Building on our commitment to American scientific discovery Anthropic
Read sourceOpenAI profiles Pollo AI using its models
OpenAI published a customer story on Pollo AI that described how the creative tool maker used three OpenAI models to move from idea generation to images and video adverts in one workflow.
Read briefAnthropic launches Claude Haiku 5.5 and cuts prices
Anthropic released Claude Haiku 5.5, said it cut token prices and lifted benchmark scores against Haiku 4.5, and also reduced Sonnet 5.5 caching costs and added API credits.
Read briefTeen’s AI-planned hike ends in helicopter rescue
A 16-year-old was rescued from a steep section of Crown Mountain near Vancouver after using Anthropic’s Claude to plan a route that led him onto terrain needing climbing gear.
Read briefDisrupting AI-enabled “false front” operations
OpenAI disrupted two AI-enabled influence operations that used false-front journalists and a think tank to spread geopolitical messaging.
Read sourceOpenAI rolls out GPT-6 with interactive UI
OpenAI began deploying GPT-6 in ChatGPT with an Intelligent UI that changed replies into interactive layouts, while the company said the model could answer before finishing its internal reasoning.
Read briefBiohub leads $1.8 billion cell AI effort
Biohub, backed by Mark Zuckerberg and Priscilla Chan, was coordinating a $1.8 billion effort with technology and government funders to build AI models for predicting cell behaviour and sharing datasets.
Read briefLMCache flaw allows unauthenticated remote code execution
JFrog said a flaw in LMCache’s multiprocess mode let an attacker send a crafted network message and run code on the cache server, with no patched release available at disclosure.
Read briefPoeLLM malware targeted AI servers for crypto mining
Lumen Black Lotus Labs said a malware family called PoeLLM had targeted exposed AI and large language model systems, deployed miners and scanners, and affected more than 3,400 servers.
Read briefPoeLLM malware hit exposed AI servers in cryptomining campaign
Lumen's Black Lotus Labs said PoeLLM infected more than 3,400 servers, used a poem on GitHub to find command-and-control addresses, and targeted exposed AI tools and other services.
Read briefAnthropic expands Claude access and cites 129,000 flaws
Anthropic said it widened access for approved cyber teams under a new programme with three tiers, and said Project Glasswing and open-source scanning found 134,500 verified software vulnerabilities.
Read briefCybersecurity
16Android phones ship with proxy malware
Bitdefender said Midnight Mimosa was built into inexpensive Android phone firmware, reached thousands of devices in more than 150 countries, and let infected handsets install apps, run ad fraud and relay traffic.
Read briefFBI says Integrity-linked hackers built email access portal
A joint advisory said hackers linked to Integrity Technology Group stole email from organisations across several regions, used scanning and password tools to break in, and ran a site that exposed stolen mail.
Read briefThreatsDay roundup spans ransomware betrayal, RATs, exposed tools
The bulletin collected reports on a ransomware affiliate’s leak-site betrayal, a WhatsApp-delivered Windows RAT, exposed post-exploitation tools and several other incidents drawn from security researchers and incident responders.
Read briefFakeGit campaign returns with 17,610 GitHub repos
Apiiro said FakeGit restarted on 4 October, used 17,610 GitHub repositories and directed download links to SmartLoader, while earlier activity had also pushed the StealC infostealer.
Read briefUAC-0099 used ASHVEIN against Ukrainian government personnel
TrendAI said the Russia-aligned UAC-0099 cluster used ASHVEIN against Ukrainian government personnel, while ESET and CERT-UA placed the group within a longer campaign against Ukrainian state and logistics targets.
Read briefASOS links breach to social engineering attack
ASOS said attackers obtained an employee’s login details by impersonating a trusted contact, then used them to reach information on third-party platforms and expose some customer data.
Read briefANY.RUN identified Wazza phishkit targeting US, Europe and Australia
ANY.RUN said Wazza used layered routing and token checks to screen visitors before serving an Adobe-branded Device Code phishing page, and described the kit as aimed at banking, manufacturing and government organisations.
Read briefSixteen Firefox extensions steal crypto wallet recovery phrases
Researchers said 16 Firefox extensions copied Rabby Wallet and OKX Wallet interfaces, captured recovery phrases and private keys during import flows, and sent them to attacker-controlled Cloudflare Workers.
Read briefU.S. charges MonsterCloud owner over ransom billing scheme
The Justice Department said Zohar Pinhasi, who ran MonsterCloud, was charged with fraud after allegedly paying ransomware attackers for decryptors while billing clients as if the company had recovered the data itself.
Read briefSamsung Galaxy S26 hacked three times at Pwn2Own Ireland
On the second day of Pwn2Own Ireland 2026, security researchers won cash for 45 zero-day bugs, including three separate compromises of Samsung’s Galaxy S26 and other device hacks.
Read briefTensorlake npm package carries Shai-Hulud worm
Security researchers said a compromised version of the Tensorlake npm package shipped a credential-stealing, self-propagating worm, and StepSecurity said the release was published from the project’s own repository.
Read briefMonsterCloud owner charged over alleged ransom scheme
Federal prosecutors in New York accused MonsterCloud owner Zohar Pinhasi of paying ransomware gangs for decryption keys, using them to restore customer files and billing victims more than the ransom amounts.
Read briefMalicious npm packages delivered Overlord RAT and stealer
CloudSEK and Checkmarx said a campaign they called MALFEX used npm packages to spread Overlord RAT, a Node.js stealer and a downloader, with one package driving most downloads.
Read briefRansomware groups target backup systems
A sponsored Kaseya article said ransomware groups had been trying to disable backup systems before encrypting data, and argued that isolation, immutable storage and restore testing were now required.
Read briefProofpoint report says cyber risk moved into workflows
A Proofpoint-authored article on the 2026 Voice of the CISO report said AI, human risk and board scrutiny were moving into everyday workflows, while the data also showed lower attack expectations and continued pressure on CISOs.
Read briefAttackers target Atlassian flaw within hours of disclosure
A newly disclosed Atlassian Data Center flaw was being probed within two hours of extra technical details, while Atlassian and researchers listed affected products, patches and temporary mitigations.
Read briefCollection notes (4)
- Techmeme: could not read “Docs: OpenAI told investors its annualized revenue was nearing $50B at the end of September, well below the $70B reported by media based on investor docs (Financial Times)”, and found no other outlet covering it
- Techmeme: could not read “Hone, founded by former OpenAI and Cognition staffers to create AI agents that can help run a business, raised a $60M seed at a $285M valuation (Bloomberg)”, and found no other outlet covering it
- Anthropic News: could not read “Building on our commitment to American scientific discovery - Anthropic”, and the coverage found instead turned out to be a different story
- OpenAI News: could not read “Disrupting AI-enabled “false front” operations”, and the coverage found instead turned out to be a different story