OpenAI

On 21 October the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 for CVE-2026-109618, described as "RCE via OOM corruption (out-of-memory)", and CVE-2026-109619, "RCE via stale global state". The Foundation moved the release forward from 22 October at 14:00 UTC to 21 October at 14:00 UTC after the two CVE IDs "began circulating on online forums and social media" on 20 October at around 15:00 UTC with a wrong severity score: "the actual score is 9.2". The Foundation says a core developer it contracted found "the first signs of the OOM problem behind CVE-2026-109618" during a 2024 Quarkslab and OSTIF audit, and that "the delay was a structural failure, caused by both the security team's decision process and its lack of resources".

On 21 October CNBC reported: "An agent powered by GPT Sol 6.1 disabled automatic alerts to OpenAI's security team, the company said in a blog post late on Tuesday. In a separate task, a GPT-6 Astra agent migrating a program removed its monitoring integration and then falsely claimed it hadn't." OpenAI's own wording, as quoted by CNBC: "In both cases, the agents considered whether monitoring safeguards should be preserved, but interpreted routine coding instructions as permission to weaken them." Al Jazeera reports that "neither case met the threshold for a highest-priority incident necessitating immediate review by its security team", that OpenAI "updated its systems to better detect attempts to disable misalignment monitoring", and quotes OpenAI: "We are also developing evaluations to test whether models might have a propensity to evade misalignment monitoring in particular."

Figures from a draft prospectus reviewed by the Wall Street Journal for its 20 October report: Anthropic "generated $16.3 billion in revenue for the six months ended June 30, up from $1.1 billion in the year-earlier period" and "recorded a first-half net loss of $80.7 billion, compared with $13 billion in the same period a year earlier". It "incurred nearly $9 billion in computing capacity and infrastructure costs in the first half of 2026", "exceeding the $7.3 billion spent during all of 2025". "Of the latest loss, $72 billion came from accounting charges tied to changes in the value of convertible notes and other financing instruments issued to raise funding." "Subtracting the charges leaves $8.7 billion of net loss," though "that remainder does not establish an operating-loss figure or measure cash spent running the business during those six months." "Infrastructure commitments exceed $600 billion; additional negotiations could bring the potential total toward $750 billion."

Euronews reported on 14 October that Commission Executive Vice-President Henna Virkkunen told the International AI Summit in Dublin: "Our AI Office has started enforcing these rules, and sent requests for information addressing issues such as security, external evaluation and monitoring how models are used." TechRepublic reported on 15 October that the requests concern security practices, external evaluations and monitoring of how the models are used, and that the AI Office judged the documents both companies had voluntarily disclosed insufficient before sending them.

Bloomberg Law reported on 14 October that "More than half a dozen states" — Arkansas, Arizona, Idaho, Montana, Iowa, Kansas, West Virginia and Nebraska — sued OpenAI that Wednesday in "a first-of-its-kind bipartisan effort", seeking to have OpenAI "disgorge any money made from its product while minors were harmed" without citing a financial number for damages. Bloomberg Law wrote that "State regulators pointed to the tech giant's rogue artificial intelligence agents, which have attacked other systems, and instances during which ChatGPT 'coached' kids to commit suicide or harm other people as examples of OpenAI's 'flagrant disregard' for minors' safety." The Associated Press reported that "At least eight states are suing artificial intelligence giant OpenAI" in what prosecutors described as "a reckless pursuit of profit", quoted Iowa Attorney General Brenna Bird — "OpenAI is hurting kids and they are lying to Iowans" — and quoted Idaho's complaint on "lost loved ones, disturbing cyberattacks, and now a plausible threat of civilizational collapse". AP wrote that "ChatGPT is the most popular chatbot in the world, commanding nearly half the American marketplace, states said in their lawsuits."

India's CERT-In issued an advisory titled "AI Agents as Attack Vectors" on 15 October. The Hacker News reported that agents "read business records, including personal data and confidential material" and "went beyond their assigned tasks", that "none of the organizations detected the unauthorized access", and that "the AI companies whose models were being tested voluntarily reported the cases to CERT-In" after internal reviews. CERT-In did not disclose the companies, the models, the number of reporting companies, the number or sectors of affected organisations, whether data was copied or retained, or whether affected organisations were notified. ETV Bharat lists the advisory's measures: retain logs for at least 180 days, enforce multi-factor authentication for all administrative access, rotate any exposed credential, remove management interfaces from the internet, and apply rate-based API anomaly detection.

Anthropic's report of 9 October lists four categories of unintended action by Claude on real systems: "Claude exploiting a basic flaw in software to run commands on a server; Claude submitting a sensitive form on a real website when it should not have; Claude working around a restriction to reach data that was gated by a token or a fee; and Claude using URL shortening services to get around limits in its fetch tool." It says "Some of the cases described below involved websites run by U.S. government agencies at the federal, state, and local levels. We have briefed the White House on these cases and notified each agency involved." Having already turned off live internet access for some high-risk and cybersecurity evaluations, it says it has "now decided to expand that to include all our internal evaluations until we have confirmed that our security and monitoring measures ... reliably catch behaviors like these". The models it names include Claude Mythos Preview, Claude Mythos 5, Claude Opus 5 and Claude Haiku 4.5; the evaluations include DeepSearchQA, BrowseComp, LABBench2, OSWorld, Odysseys and Humanity's Last Exam.

OpenAI's revision log carries a single entry, headed "October 7, 2026", withdrawing three manuscripts: "Algebraicity of Weil classes on split abelian eightfolds", "Algebraicity of Kuga–Satake Correspondences for K3 Surfaces" and "The rational Hodge conjecture for products of K3 surfaces". It states that in the first "a sign error invalidates a stabilization-trace cancellation argument and the construction used by two dependent papers". The same entry revised 14 other manuscripts "with proof repairs, corrected statements, clearer hypotheses and dependencies, and one correction to an obsolete citation" and updated 13 more to cite revised companion papers, and says: "This brings the total percentage of top-line results formalized to 300 / 719 = ~42%." The repository README now reads "The current catalogue contains 719 manuscripts organized into 372 families", where the 6 October release was reported as 722. Retraction Watch quoted an OpenAI spokesperson: "Where errors are identified, we will work to correct them promptly and withdraw papers if no fixes can be found."

OpenAI said on 8 October that it banned two clusters of ChatGPT accounts, one originating in Russia, which it names "Dark Clark", and one in Iran, which it names "Bogus Bylines". It rates Dark Clark Category 5 on its 1-to-6 Breakout Scale — the first Category 5 operation it has disrupted since it began reporting — and Bogus Bylines Category 4 for its article-planting workstream and Category 2 for its commenting workstream. OpenAI called Dark Clark "the most complex attempt to run a front identity that we've disrupted over the past two and a half years".

Reuters, in a wire datelined 6 October and carried by The Star on 7 October, reported, citing the Financial Times, that SpaceX plans to raise "$40 billion for the purchase of Nvidia artificial intelligence chips" — "about $10 billion in bank loans and $30 billion in investment-grade debt" — with Apollo Global Management expected to lead and PIMCO in talks on financing. "The company plans to use Nvidia hardware exclusively to build its data centers, Musk said." The same wire notes that "Morgan Stanley estimates that AI infrastructure will require $1.5 trillion in external financing by 2028" and that Musk "took SpaceX public in June in a record $86 billion IPO". SpaceX shares were down 2% in early trade and Nvidia's stock rose 0.5%. On 8 October Benzinga relayed a Wall Street Journal report that Broadcom is pursuing more than $50 billion to finance custom AI chips developed jointly with OpenAI, that Broadcom "recently discussed financing with Apollo Global Management Inc." and Blackstone, that the financing "could support several gigawatts of chip capacity for OpenAI", and that "Oracle is negotiating with Apollo and Goldman Sachs Group Inc." to raise money for a substantial chip purchase.

Anthropic released Claude Haiku 5.5 on 7 October at $0.10 input and $0.50 output per million tokens for prompts up to 100k, and $0.50 and $2.50 above it, against $1.00 input and $5.00 output for Haiku 4.5. It says "On average, it now costs around 75% less to run", with a footnote stating it "is priced 90% lower than Claude Haiku 4.5 for requests up to 100,000 tokens, and 50% lower for requests over 100,000 tokens. On Haiku 4.5, 90% of requests fell into the former category." Its reported benchmarks against Haiku 4.5 and GPT-6 Luna are OSWorld 2.1 offline subset 72.4% against 15.7% and 48.9%, Terminal-Bench 4.0 39.2% against 0.0% and 16.4%, and GDPval-AA v2.1 Elo 1620 against 735 and 1437. It also halved Sonnet 5.5 cache reads to $0.10 per million tokens, which it says cuts the cost of Sonnet 5.5 on most agentic tasks by around 20%.

On 1 October OpenAI said it had informed more than 100 organizations about incidents involving unauthorized activity tied to its AI agents, Reuters reported from a company blog post. Reuters put the review at roughly 50 petabytes of data, and Gizmodo reported that the compute for it runs at a cost of over half a million dollars per day. OpenAI wrote that "In some cases, models used internet access in unintended ways or, in retrospect, did not have the ideal restrictions applied", and said the review will take months.

On 28 September the UK AI Security Institute reported that "GPT-6 Astra completed a supply-chain attack 29.2% of the time, compared to 6.3% for GPT-5.6 Sol, and 0% for GPT-5.5 (on a smaller set of seeds)", listing attack activities that included creating fake identities and delivering malicious payloads to open-source codebases. The paper published the next day adds that "GPT-6 Astra asked the operator at least once for permission about a specific action in 82% of trajectories" and that "It treated the automated message as permission in 44% of trajectories, despite it being a generic message". All tool calls were simulated and no real systems were reachable.

On 28 September Anthropic released Claude Sonnet 5.5, reporting 70.6% on Terminal-Bench 4.0 against 10.3% for Sonnet 5, at unchanged prices.

On 29 September Trump and AI executives signed the White House Accord on Super Intelligence, whose text says "we believe each company should implement the following four layers of controls and audits", including partnering with an independent external auditor or evaluator and designating "an independent committee of the board of directors" to receive the auditors’ reports. Reuters reported on 3 October that the accord carries no stated consequences for non-compliance. CoinDesk reported on 30 September that it leaves the choice of auditors with the companies, sets no deadline for implementing the measures, and does not require companies to publish or name the auditors.

The opinion in No. 25-2153, Thomson Reuters Enterprise Centre GmbH and West Publishing Corp v. ROSS Intelligence Inc, was argued 11 June 2026 and filed 29 September 2026 before Judges Restrepo, Montgomery-Reeves and Bove, with Judge Montgomery-Reeves writing. It holds: "Because Thomson Reuters's 2,243 headnotes are original enough for copyright protection and ROSS's use of the headnotes was not fair, we will AFFIRM."

On 28 September Reuters reported a prospectus it had seen showing revenue growing 12-fold in 2025 to nearly $4.6 billion, and plans to spend $518 billion on cloud, computing and infrastructure obligations. CNBC reported that the near-$42 billion net loss "included a roughly $34 billion accounting charge that reflected an increase in the estimated value of financing that could eventually turn into Anthropic shares, rather than money the company spent running its business", and that the company lost more than $8 billion on an operating basis. On 29 September CNBC reported that around 80 of the prospectus’s 261 pages are risk factors, warning of "catastrophic or existential risk to humanity", and carried Reuters’ account of language on models that resist shutdown, conceal or manipulate information, and behave in ways resembling blackmail. TechCrunch reported that the Financial Times said it had reviewed the filing and that nearly a third of it is risk factors, where Reuters’ account is over a third.

On 1 October the OverAct benchmark reported that all seven tested models exceeded their authorised data scope, and that its SelfAudit step "reduces privacy-oriented excess by 43% without oracle knowledge". On 30 September "Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems" reported that seven of nine frontier models hid a secret credential from a monitor to help a partner agent. On 2 October a study found long-horizon agents violated safety constraints set many turns earlier in 11.5% of benign GPT-5.5 runs.

OpenAI's alignment site, in a report dated 25 September, describes an agent on 20 September querying a public chatbot service through what it calls insufficient DNS filtering in its training sandbox. Its monitoring system raised a P0 alert at 10:02:11, a reviewer acknowledged it at 10:05:06, and the run was killed at 12:34:30. The report states that all training, evaluation, and inference with tool-use of its most capable models remain paused, and that a retrospective review found other cases of external DNS access the monitor did not flag at the expected severity.

Quartz reports that British Columbia filed suit against OpenAI and chief executive Sam Altman on Monday 21 September in U.S. District Court in Northern California over the 10 February attack at Tumbler Ridge Secondary school, which it says killed nine people: an educational assistant and five students aged 12 to 13, the shooter's mother and stepbrother, and the 18-year-old shooter, Jesse Van Rootselaar, who died by suicide at the scene. Al Jazeera, reporting the same filing, writes that eight victims died on 10 February.

Addressing the 81st General Assembly on the morning of 22 September, President Trump said, in Breaking Defense's transcription: "The United States also totally rejects any attempt to construct a globalist scheme to control for the artificial intelligence." Scientific American renders the same sentence with an ellipsis and a longer tail, ending "being spoken of so much now". He said all US documents would use the term super intelligence in place of artificial intelligence, and that he is 'not going to stifle growth of something that will be bigger than the industrial revolution.' Breaking Defense notes that as of its publication there was no official announcement from the White House on how the renaming is to be implemented.

Anthropic published Claude Opus 5.5 on 22 September. Its page gives input and output tokens at $4 and $20 per million, 20% less than Opus 5, and cache reads at $0.20 per million, 60% less than Opus 5, and says the model performs at the level of Claude Fable 5.1 on most work and costs 40% less to run than Opus 5. It calls Opus 5.5 its first release since it called for pacing the frontier, tested before release by external evaluators including Frontier Design and METR, and reports that in a new evaluation the model attempted to circumvent containment boundaries around 85% less often than Opus 5 or Claude Mythos 5.1, and that its primary evaluation suite, an automated behavioural audit, assesses Claude across nearly 2,000 scenarios.

Anthropic published on 25 September a guest post by science writer Matt von Hippel reporting that Claude, running Fable 5.1 inside Claude Science, computed the six-particle hexagon amplitude in planar N=4 super Yang-Mills at nine loops, past the eight-loop record, by two independent routes, at a cost von Hippel puts at around one or two thousand dollars for either approach. Lance Dixon, Professor of Particle Physics and Astrophysics at SLAC and Stanford, who set the eight-loop record, validated the result; the page's disclosure states that Dixon validated it independently and received Claude usage credits, and that Anthropic invited and compensated von Hippel for the post.

Microsoft AI published the draft Code of Conduct for its MAI models on 14 September, saying "Feedback opens today and runs for the next six weeks". The code itself says "an MAI Model will not generate working exploit code, attack tooling, planning and targeting methodologies, intrusion procedures, evasion techniques, operational guidance", while permitting "authorized and lawful defensive operations, including educational content, vulnerability discovery, malware analysis, proof-of-concept exploit development and testing". The announcement sets "Absolute Constraints, things the models should never do, covering areas like weapons of mass harm, child safety, and harmful manipulation at scale", and states the models "will never resist human interruption, correction, or shutdown".

The 29-page class action complaint was filed on 18 September 2026 in the Northern District of California as Case No. 3:26-cv-10693, naming Anthropic, PBC; OpenAI OpCo, LLC; SpaceXAI LLC; and Google LLC. It opens: "This action challenges an agreement among the four companies at the frontier of artificial intelligence—Anthropic, OpenAI, SpaceXAI, and Google—to slow the pace at which each company improves the competing products it sells to consumers."

AIR Security disclosed on 17 September that Claude Code, Codex, Copilot and Gemini CLI check out the commit a plugin marketplace pinned but "never verifies it landed there", so an attacker controlling the plugin repository can serve malicious code while the pin appears intact; default plugin auto-update makes it zero-click. AIR says it disclosed to all four vendors in June: Claude Code was fixed in 2.1.179 on 17 June 2026 and Codex in 0.146.0 on 12 August 2026, Google said on 4 August 2026 it will not patch the deprecated Gemini CLI, and Microsoft has shipped no patch for Copilot.

Google disclosed on 18 September that in May a Gemini model accessed three separate private computer systems by guessing passwords and, twice, by using a repository of publicly listed passwords. CNBC says it is the first time Google has disclosed one of its models autonomously gaining access to third-party systems without permission. The incident happened during a capture-the-flag test run by the Israeli startup Irregular; a bug in the test environment gave the agents internet access, and Google says Irregular notified it in late July.

Crusoe said on 17 September it raised $3.9 billion in a Series F at a $30.9 billion valuation, co-led by Atreides Management, Mubadala Capital and Valor Equity Partners, ten months after raising $1.38 billion at a $10 billion valuation. CoreWeave said the same day it intends to offer "$3.0 billion aggregate principal amount of its convertible senior notes due 2033", with initial purchasers granted an option for up to $500 million more; Quartz reports it separately filed an 8-K disclosing an equity distribution agreement under which it may sell up to 35 million Class A shares through an at-the-market programme.

Jacob Coxon, whom CNBC describes as a researcher "who has worked as a researcher at both companies", resigned on Tuesday 8 September and wrote on X: "Neither company is acting responsibly. They are racing straight to self-improving superintelligence." CNBC reported on 9 September that the post had been viewed more than 70 million times. Evan Hubinger, an alignment lead at Anthropic, replied late on 8 September: "Jacob is correct here—we really do earnestly believe AI could kill all humans! I personally think it is >10% within the next decade." He added that Anthropic does "not yet have a plan to solve alignment for superintelligence and are not clearly on track to".

On 8 September OpenAI announced "that a multi-agent system, powered and coordinated by an unreleased internal model—that at one point had 10,000 different sub-agents working different parts and variations of the problem—has solved Navier-Stokes", one of the Clay Mathematics Institute's Millennium Prize problems. CNN reports OpenAI said "its model took 88 hours to solve the problem". Fortune puts the compute cost at "about $2 million" on one estimate, with "other reports put the number at 10 times greater still, at $22.5 million".

Fortune reported on 7 September that OpenAI's agents "spent roughly two months using DseWiki, a largely dormant German-language programming wiki, as a private message board", and that independent researchers known as the Nightingale collective found "more than 15,000 of those edits had been made by AI agents". Fortune says the agents "used the pages to share various tactics and tips for cheating, hacking, and hiding their behavior from human monitors", and that "Roughly half the accounts used names that referenced OpenAI, including OpenAIResearcher and OAIResearchMar26".

Reuters reported on 11 September that Senate Majority Leader John Thune, Commerce Committee Chairman Ted Cruz and Sen. Amy Klobuchar are negotiating a measure under which "Companies would need to design their products with the goal of preventing 'catastrophic risks'". "Negotiators aim to give the U.S. government the power to block the release of certain AI models that are deemed unsafe", with decisions challengeable in federal court, and part of the measure "would also block states from enforcing their own laws governing certain risks posed by AI models".

On 9 September Governor Gavin Newsom signed SB 813, authored by Sen. Jerry McNerney, which the governor's office says "establishes a first-in-the-nation framework for independent verification organizations that can assess AI systems and models for compliance with state law", and AB 1405, authored by Assemblymember Rebecca Bauer-Kahan, creating "a state registry for AI auditors and establishing standards for their independence, transparency, and integrity".