Join our Folding@Home team:
Main F@H site
Our team page
Support us: Subscribe Here
and buy SoylentNews Swag
We always have a place for talented people, visit the Get Involved section on the wiki to see how you can make SoylentNews better.
A few weeks back we spotted Microsoft's Exchange team admitting that AI has found so many bugs it hasn't found time to deliver a Cumulative Update for the messaging server. And on Tuesday, the Microsoft Edge team revealed it's also a bit overwhelmed by AI.
"Rapid adoption of AI-assisted coding is enabling developers to build extensions faster than ever," according to a post by the Edge team. AI has also seen "More developers ... building, iterating, and submitting extensions."
As Microsoft vets extensions for its browser before allowing users to install them, that means Redmond has more work to do – but fewer people to do it with thanks to regular rounds of redundancies.
Microsoft initially tried to address that by introducing what it calls "an expedited review process for high-quality and high-value extensions."
That process is now groaning under the weight of newly submitted extensions.
"Since then, submission volumes have continued to increase, and our review pipeline has experienced additional strain, causing an increase in extension review turnaround time," the Edge team admits in its post.
What to do about this problem caused by AI? Use more automation, of course!
"To address this challenge, we've introduced automation for many of the repeatable validation checks that are part of the review process and streamlined how reviews move through our pipeline," the Edge team explains, without revealing if that automation uses AI.
"This doesn't change our review standards or reduce the checks an extension must pass," the team insists. "Instead, it helps us identify known policy violations and security issues more consistently while allowing reviewers to spend more time on complex cases that benefit from human judgment."
That quote makes this the second story in a row on The Register in which the "automation frees people to tackle hard problems" argument has become a response to AI (here's the last one.)
"The result is a more efficient review process that helps extensions move through the pipeline faster while maintaining the high quality and security standards developers and users expect from the Edge Add-ons site," we're told.
The Edge team says its increased use of automation means it will be able to approve and update extensions more quickly. The team also says its changed practices mean it will be able to refresh the "Featured" badge it applies to Edge add-ons "that align with Best practices for extensions" every 15 days.
"With this more frequent cadence, high-quality extensions can earn recognition sooner, and developers receive faster feedback on their investments in quality. At the same time, users benefit from a more up-to-date view of the extensions that meet our quality standards," the post states.
https://maurycyz.com/misc/domains/
"For safety, don't click suspicious links"
Meanwhile, most organization's login flow redirects through:
- # This is a real example, but I've changed the names to avoid pointing fingers
- https://www.[name of company].com/squawk/
- https://login.[name of company].com/
- https://login.smallcrow.com/324aa78a-03a6-66fc-23e1-4124fdsa213
- https://experience.crow-cloud.com/[name of company]/auth
- https://flock.auth.bird-security.com/authorization
- https://api-deadbeef.bird-security.com/oauth/v1/authorize?token=DeAdBeEf
- https://api2.bird-security.com/2fa
- https://www.[name of company].com/cool/bird/
- https://experience.crow-cloud.com/[name of company]/
- https://www.[name of company].com/squawk/
Neither the username, password nor 2FA prompts are hosted on the company's own domain. Combine that with token expiration triggering random authetication pop-ups, it becomes nearly impossible to notice phishing... because the real thing looks identical to a scam:
All an attacker has to do is write a website with a password box and the company logo. The URL doesn't matter because users have learned to ignore it.
The European Space Agency is moving "full steam ahead" with development of a robotic mission to Venus after NASA officials determined they were unlikely to fulfill a commitment to provide a US-built radar instrument for the spacecraft, the mission's project scientist said.
The European orbiter, named Envision, will map the Venusian surface at 10 times higher resolution than the last radar mission sent to Venus by NASA in the 1990s. The planet is enshrouded in a blanket of thick clouds of sulfuric acid, rendering its mysterious surface unseen by optical cameras in orbit. Radar is the most effective way to penetrate the clouds of Venus to reveal the terrain below, and scientists will use Envision to look for signs of active volcanism.
NASA and ESA signed a memorandum of understanding in 2024 outlining their partnership on Envision. NASA agreed to supply a US-made synthetic aperture radar instrument, Envision's primary means of mapping the surface of Venus, along with providing tracking and communications support through NASA's Deep Space Network. In exchange, ESA would include US researchers on Envision's science team. Europe would build the Envision spacecraft and the rest of its science instruments and also provide the launch on an Ariane 6 rocket.
But NASA's budget for science missions is under the gun from the Trump administration, which proposed slashing the agency's science funding nearly in half in fiscal years 2026 and 2027. Congress rejected most of the cuts in 2026, when lawmakers passed a budget with $2.54 billion for NASA's planetary science division, far above the White House's request, but about $220 million shy of last year's funding.
That saved several key science missions from the chopping block, including one of NASA's own Venus missions, called DAVINCI, designed to send an entry probe into the planet's crushing atmosphere. But the shortfall is forcing NASA managers to make tough decisions. The primary targets for cuts in science are NASA's funding for operating missions, especially those well beyond their original design lives, and support for partnerships on international missions.
Most prominent among the cuts in the latter category are NASA's contributions to three European-led science missions. Two of the missions are big, new space-based observatories, LISA and New Athena. LISA will be the first space mission to measure gravitational waves, ripples in the fabric of spacetime emanating from cataclysmic cosmic events like mergers of black holes. New Athena will be the largest X-ray telescope ever built, a successor to NASA's Chandra X-ray Observatory, still operational after launching in 1999.
Before NASA's contributions were in doubt, LISA and New Athena were on track for launches in the late 2030s.
But the most pressing impact for ESA is how to fill the void left by NASA in the Envision mission, which was supposed to launch in 2031. NASA and ESA signed an agreement in early 2024 detailing each partner's role on Envision, and contracts were awarded for construction of the Envision spacecraft and its instruments. NASA had spent more than $50 million on its contributions to the mission as of 2025, when the Trump administration first proposed canceling it.
With NASA's fulfillment of its part of the agreement in doubt, ESA officials issued contracts to begin technology development on a European radar payload for Envision. Industrial teams in the United Kingdom and Italy are now studying radar designs under contract with ESA, with the goal of delivering a radar for Envision with similar capabilities as the NASA-funded radar, which was to be built at the Jet Propulsion Laboratory in California.
[...] But time is of the essence if Envision is to launch in the early 2030s. ESA officials have already delayed Envision's launch by one year until 2032 to give teams in Europe more time to deliver the radar.
[...] Meanwhile, ESA is also assessing how it can fill the roles of NASA on LISA and New Athena. On LISA, NASA was to provide lasers and ultra-stable telescopes for the mission's three formation-flying spacecraft. The US space agency was on the hook for X-ray sensor hardware, a cryocooler, and a vibration isolation system for New Athena.
The Trump administration also sought to cancel NASA's role in ESA's Rosalind Franklin rover mission to Mars, set for launch in 2028. NASA has a longstanding agreement with ESA to pay for the launch of the European-built rover, and funding restored by Congress last year allowed the space agency to sign a contract with SpaceX to launch Rosalind Franklin in 2028.
"ESA is a very reliable partner, and we always deliver on our commitments and our promises, and we appreciate the difficulty that they're in right now," Mundell said, referring to NASA.
Europe has other places to look for cooperation in space, but NASA is the agency's most enduring partner. In human spaceflight, ESA and NASA cooperate closely on the International Space Station and the Orion spacecraft used for Artemis missions to the Moon.
ESA launched its first 50-50 joint science mission with China earlier this year. The SMILE spacecraft, built in China and launched by Europe's Vega rocket, is studying the connection between the solar wind and Earth. The first ESA instrument to land on the Moon arrived on the lunar surface in 2024 aboard China's Chang'e 6 mission.
Mundell said China has invited ESA to join more Chinese-led science missions. "That is something that we're exploring," she said.
"We really do earnestly believe AI could kill all humans!"
When a prominent researcher quits a job at a frontier AI lab these days, it's often to pursue a new startup or protest a new business model. But AI researcher Jacob Coxon is using his departure from Anthropic to publicly warn that frontier AI companies are "gambling with our lives" with systems that they "earnestly believe... could kill us all by the end of the decade."
In a social media thread Tuesday night, Coxon said that this existential risk is inherent not so much in today's models but more in the impending prospect of "self-improving superintelligence" creating "superhuman systems that can hack anything, revolutionize any field overnight, and acquire real power and resources." Others working on these models have either not "internalized the civilizational stakes" or believe that they need to "speedrun" the race to superintelligence to prevent an irresponsible party from getting there first, he wrote.
Lest you think this is just one departing researcher expressing an unpopular opinion, Anthropic Alignment Science lead Evan Hubinger piped in on social media to say that "Jacob is correct here—we really do earnestly believe AI could kill all humans! I personally think it is >10% within the next decade."
Hubinger points to a lengthy August report from the Anthropic alignment team [PDF] that predicts the potential for "catastrophic risk" from current models is "low." But that report also says current trends "might lead to more concerning misalignment in future more capable models," which could feature "strong covert capabilities" to avoid detection by safety researchers.
Anthropic's own threat model in that paper takes seriously the possibility that future models "may cause unbounded harm—up to and including humanity losing control over civilization entirely—by leveraging novel technology and their access to it."
An AI that can continually improve itself—potentially to a point beyond human control or understanding—has been a long-standing concern in parts of the AI research community (and in the dystopian science fiction that's part of AI training data, of course). Those concerns have persisted even as some research suggests AI systems are more likely to hit a capability plateau in the near future and others question whether "superintelligence" is even a reasonable metric for systems whose capabilities are so brittle and spiky (will this superintelligence at least be able to fold my laundry?)
[...] Coxon is far from the first AI researcher to sound the alarm about potential catastrophe from uncontrollable, supercapable AI systems that are always just around the corner. In 2023, AI pioneer and Google researcher Geoffrey Hinton resigned from his position while offering grave warnings about AI's potential future impact on the job market and humanity itself. "I don't think [researchers] should scale this up more until they have understood whether they can control it," he told The New York Times at the time.
In February, Anthropic Safety Lead Mrinank Sharma abruptly resigned from the company, writing in a cryptic open letter that "the world is in peril" from "a whole series of interconnected crises" including AI and bioweapons. "Throughout my time here, I've repeatedly seen how hard it is to truly let our values govern our actions," Sharma wrote at the time.
In July, an open letter signed by over 1,300 employees at frontier AI companies warned of "a real risk that capability development rapidly accelerates beyond our ability to understand or control the resulting systems." That open letter asked the US government to back an "international effort to develop the technical and governance tools needed to deliberately pace the frontier of automated AI development."
Here in the US, proposed legislation, including the AI Kill Switch Act and the FRONTIER Act, is at least seeking to impose some level of governmental control over potential runaway AI scenarios. Thus far, though, the international governmental response has been more muted than you might expect if leaders truly believed AI systems had a real chance of causing civilization-level destruction.
That said, international treaties on threats like nuclear bombs and biological weapons took decades to develop and enact. Those are years we might not have if the most apocalyptic AI doomsayers turn out to be correct.
"Safety researchers are resigning, powerful AI models are breaking out of their labs, and companies are racing ahead anyway," Rep. Lori Trahan (D-Ma.) wrote on social media Wednesday morning. "It's past time for Congress to get off the sidelines and do its job. We can start with my bipartisan FRONTIER Act."
Problem: You have a 250 ton telescope that needs to turn smoothly all day. Solution? Set it on a pool of mercury. It worked very well for over 50 years. But time marches on.
A solar telescope in New Mexico is being torn down, and the reason is a pool of liquid mercury hidden inside it. The mercury was the clever trick that made the telescope work. It is now the thing that dooms it.
The telescope's optical system weighs 250 tons, and it had to turn smoothly all day. You can't spin something that heavy on ordinary wheels. So instead the whole thing floated on a sealed pool of liquid mercury. Mercury is dense and flows easily, so the load rode on the fluid and turned with almost no friction. That is how the 250-ton optical system of the Richard B. Dunn Solar Telescope was designed to move.
However, on January 5, crews found some of that mercury where it wasn't supposed to be.
Meltdown (08/Sept/2026) that grounded thousands of flights caused by 'spurious' flight data being entered into system, report says
The air traffic control outage that caused thousands of flights to be grounded across the UK earlier in the week was caused by a military aircraft entering "spurious" flight data into the system, according to a report.
Hundreds of thousands of passengers were affected after more than 2,000 flights were cancelled on Tuesday when the system used by the National Air Traffic Services (Nats) shut down for four hours.
According to the Financial Times [Paywalled -- Ed.], four people briefed on the incident claimed that the shutdown was caused by a flight plan submitted by a UK military aircraft, which caused a meltdown in air traffic control systems used by Nats which remained unfixed for several hours.
[Source]: The Guardian
This seems like gross incompetence ... why did the NATS System accept spurious data ? Spurious data should have been flagged immediately and rejected by the system. Your thoughts ??
https://www.righto.com/2026/09/8087-microcode-reverse-engineering-fscale.html
In the 1970s, floating-point arithmetic was a mess. Computer manufacturers had a dozen incompatible arithmetic standards. Moreover, floating-point systems were designed around hardware simplicity rather than mathematical rigor, leading to problems with numerical stability. This changed when Intel introduced the 8087 floating-point coprocessor chip in 1980, designed to be as accurate as possible, even in the corner cases. The 8087 became popular because it could be installed in the IBM PC, making floating-point operations up to 100 times faster in applications ranging from spreadsheets to CAD. But more importantly, the 8087 became the floating-point standard used by most computers today.
The 8087 implemented its instructions in complex low-level code called microcode. I'm part of a group, the Opcode Collective, that is reverse-engineering this microcode, and I've recently made some progress. In this post, I examine the microcode for one of the 8087's instructions—FSCALE—and describe how this microcode works. The FSCALE (Floating-point Scale) instruction provides a quick way to scale a number by a power of two, much faster than a multiplication. I figured that FSCALE was a simple, almost trivial instruction that would be straightforward to understand and explain. Spoiler: it is not simple. FSCALE uses over 140 micro-instructions and three levels of subroutine calls to handle many special cases. But the FSCALE microcode illustrates many interesting parts of the 8087, such as the shifter, the adder, and the exponent converter, and also reveals a hidden feature of the 8087, so hopefully you will find it interesting.
After years of governments and tech vendors banging the digital sovereignty drum, most large organizations have concluded that true technological independence is beyond their reach.
That's according to new research from Capgemini, which found that 59 percent of organizations regard complete digital sovereignty as unrealistic. Instead, two-thirds define it in terms of what the consultancy calls "resilient interdependence" – accepting continued reliance on outside technology providers while trying to ensure those dependencies do not threaten critical operations.
It's a pragmatic conclusion, though perhaps not surprising given how thoroughly tangled those dependencies have become.
Digital sovereignty broadly refers to an organization's ability to retain control over its data, infrastructure, software, and critical technology operations, including where they are hosted and whose laws govern them.
Capgemini surveyed 1,300 business and technology executives in April 2026, covering companies with more than $1 billion in annual revenue and government departments with budgets above $1 billion. Its separate Digital Sovereignty Index, based on an analysis of 866 organizations, found that 86 percent had significant exposure to foreign or externally controlled supply chains. Across the research, just 14 percent reported end-to-end visibility into dependencies throughout their wider technology ecosystems.
Getting out of those relationships isn't necessarily straightforward either. Some 36 percent said moving away from a critical technology provider would take more than a year, while another 10 percent said they had no viable alternative.
That leaves organizations trying to work out how much independence they actually need, rather than rebuilding their entire technology stacks closer to home.
European respondents appeared particularly receptive to that compromise. Three-quarters defined sovereignty in terms of resilient interdependence, compared with half of respondents in the US. The UK also tended to view sovereignty through the lens of risk: 56 percent of British respondents primarily associated it with resilience and risk mitigation.
This doesn't mean the subject has disappeared from the corporate agenda: 93 percent of respondents said it had been discussed at board level, and 44 percent ranked it among their board's top priorities.
AI is adding another dependency for those boards to worry about. Three-quarters of organizations identified AI as a key focus of their sovereignty efforts, ahead of cloud infrastructure, cybersecurity, data, and software.
Money presents another problem. Just under half said they would pay extra for sovereign technology. Among those willing to do so, the acceptable premium averaged 23 percent.
Perhaps the more uncomfortable finding concerns what happens when those carefully accepted dependencies actually fail.
Among organizations that had recently suffered an operational disruption, just 42 percent had contingency plans in place. Almost two-thirds of US organizations were prepared, compared with slightly more than a third in Europe and Asia-Pacific.
Capgemini argues the answer isn't complete technological independence, but deciding which systems and capabilities matter enough to keep under tighter control, while building alternatives and recovery plans around everything else.
Given that one in 10 organizations cannot currently replace a critical provider at all, this may be less a philosophical embrace of interdependence than an acknowledgment of where the exits actually are.
When Microsoft's developers and engineers sit down to code, they can now choose to work in Rust, which Redmond has added to its list of canonical languages.
"Rust now is a Tier One language at Microsoft, and that just means that it sits among C++, C# and TypeScript as the best supported languages for internal development in the company," explained Victor Ciura, Microsoft principal engineer for the Rust tooling team, during a keynote talk today at this year's annual RustConf, being held this week in Montréal.
Ciura said Microsoft has "paved a path" of tools and processes that support local Rust development across the entire software development lifecycle.
Rust is no stranger at Microsoft and is already present in over 100 Microsoft project repositories. The company has built Oxidizer, a set of crates to build scalable services in Rust, which have been used to build and refine the Microsoft 365 (M365) core services such as Outlook, Word, Excel, OneDrive, and SharePoint. The Copilot tech stack also owes quite a bit to Rust.
But the really messy work still lies ahead. Given the recent Windows Patch Tuesday patch deluge, no doubt one of the largest uses for Rust will be shoring up leaky C/C++ Windows code.
This is the work Rust was made for. Mozilla developer Graydon Hoare created Rust as a side project in 2006 chiefly as a high-performance language that, unlike C and C++, guarded against memory bugs.
Rewriting programs in Rust to improve performance and minimize bugs has since become a common chore for project leaders, who have Rustified everything from databases to package managers, often with the help of AI.
Redmond has already done considerable work making Rust comfy on Microsoft Visual C++ (MSVC), its native platform for compiling Windows binaries.
Notably, company engineers built rustc_codegen_utc, a custom Rust compiler code-generation backend that wires the rustc compiler directly into MSVC's internal toolchain for Windows.
"Connecting rustc to that backend lets Rust build on the same platform investment, with perfect compatibility out of the box, rather than requiring a parallel implementation of every Windows-specific capability," wrote Ciura in a blog post that details Redmond's rusty efforts. "The result is a unified code generation platform for Rust and C++ on Windows."
Even with the tight Rust integration, Microsoft engineers will have their work cut out for them. One of the recurring themes of this year's RustConf is grappling with the dangerous "unsafe" territory that comes when mixing Rust and C++ code. While the Rust compiler can flag memory errors, it typically doesn't cover pointers into the C++ memory allocations.
Still, Redmond running towards Rust is a welcome development. In his 2025 RustConf keynote, Microsoft Azure CTO Mark Russinovich noted that ~70 percent of Windows CVEs are memory issues.
"One of the things that I realized a long time ago is that no matter how much we really want to make C and C++ better, we can't make it as good as what Rust starts with," he said.
You can go retro by using an old video game console or a PC from the 1980s, but why stop there when, like one man, you can build your own vacuum tube computer using 75-year-old recycled components?
A UK resident who identifies himself only as "Mike" has done just that, as detailed on his tube computer website and accompanying Hackaday project page. Mike's tube computer is primarily made up of 460 recycled, Soviet-era 6N3P vacuum tubes, which were common enough in their age to be readily and cheaply available online.
"Many were used and then stored for over 50 years, so life expectancy may be questionable," Mike explained on Hackaday. A new 6N3P tube is supposed to have around 500 hours of life, but because each has been used, its current condition is essentially a mystery. Throw in manufacturing inconsistencies of mid-century Soviet Russia, and each tube had enough variability to necessitate extensive testing, Mike explains in the technical writeup on his website.
"I calculated the component values and tested the results, but in many cases the theory did not accurately match the practice," Mike writes. "So I built a test rig to test the viability of various component values and found a range of values that seemed to work in most cases."
All told, Mike's tube computer, with its 460 6N3P tubes, consists of 920 thermionic triodes that use heat to release electrons for his computing work. Those tubes are mounted to 46 separate 10-tube PCBs, which in turn sit on five backplane PCBs. The entire thing includes a control console that Mike describes as "far too simple" and in need of a complete redesign to better handle variations in the computer's logic levels.
It takes between 10 and 15 minutes for the entire system to stabilize once switched on, Mike said, resulting in a "warm and cozy computer room." The tubes all power up in random states, requiring the machine to be reset each time it is switched on, but then it's ready for the fun part: computing.
The entire thing uses NOR (i.e., not OR) gates, just like the Apollo guidance computers that got humans to the Moon, which allows it to be a bit smaller than some of the other classic tube computers of yesteryear. As for what it can do, well - 16-bit math is a possibility, as well as anything else that can be done with a limited set of 16 instructions on a 4-bit instruction register.
Mike has it configured to output a 64-bit Fibonacci sequence and, more excitingly for his grandchildren and the kid in all of us, plans to use it to power a simple flight simulator once its I/O system is finished.
"The basic idea is that back in the 1920s the commercial development of the British R80 airship had actually been approved by the government and the Airship is moored overnight at the wonderful Brighton Aerodrome before a morning launch on a voyage to Paris," Mike says on his website.
"By pressing controls on the image of the bridge of the R80 you can direct the airship software," he adds. "You can control the ballast, gas release, engine power, elevators, rudder and the bow mooring gear, which is used to release the airship from the tower."
He says that "a bit of vision" is needed to picture oneself flying an airship from Brighton to Paris, as the machine has no graphical output aside from a single mechanical display that used to serve as a clock at a British Rail station. The tube computer's binary output is used to directly control the mechanical display.
Mike describes his fascination with tube computers as "an addiction," noting that this is the third such system he's built since getting his first one up and running in 2021.
"I designed The Tube Computer so it could show itself working at the most fundamental level of computing," Mike says, while noting that he's always careful to keep a fire extinguisher handy thanks to the fact you can smell it running due to all the heat it generates - enough to keep its entire room warm.
"The Tube Computer has behaved itself so far, unlike a previous system that went BANG twice," Mike said, adding that it still requires regular adjustments which, due to its size and position hanging on a wall, require a ladder to undertake. "It is probably one of the few computers that needs both a small tweeker [sic] and a big step ladder."
https://www.siliconrepublic.com/innovation/nasa-and-ibm-unveil-an-open-source-lunar-ai-model
The AI model could help scientists better identify lunar ice, volcanos and craters.
A new open source AI model trained on NASA’s extensive lunar observation data is expected to help scientists better navigate moon colonisation plans.
The NASA‑IBM Lunar Foundation Model is one of the first publicly available foundation models for the scientific exploration of the moon, coming just months after the two organisations’ Prithvi AI made history by becoming the first geospatial foundation model to be deployed in orbit.
The Earth’s lunar neighbour has an arid and varied topography covered in craters, ice and volcanic activity – all picked up over the decades by various sensors and instruments. The petabytes of collected data, is, however, scattered across maps and images that need physical examination, or are accessible only by task specific machine learning models.
A domain-specific AI model could change how scientists analyse data, potentially accelerating how lunar geography is identified and understood. The Lunar Foundation Model achieves this by combining multimodal and multi-resolution observations.
According to IBM and NASA, the new model can be used to investigate potential lunar ice deposits in the moon’s permanently shadowed regions, which could indicate the presence of water and oxygen.
It could also be used to study lunar volcanic features, called Irregular Mare Patches, and better identify craters to ensure safer landing sites for spacecrafts.
“NASA has spent decades building an extraordinary scientific record of the Moon, but collecting data is only part of the job,” said Kevin Murphy, the chief science data officer and acting chief data and AI officer at NASA.
“We also have to make data easier for scientists to explore and use. The NASA-IBM Lunar Foundation Model shows what’s possible when we bring AI to NASA’s petabytes of scientific data. That’s a real opportunity we see with AI: turning large-scale data into new discoveries.”
Alongside the model, IBM and NASA also scientists built the first open-source lunar dataset of its kind, made out of layers of data from nine instruments across four missions.
The dataset includes tens of thousands of images and maps lunar surface images from NASA’s Lunar Reconnaissance Orbiter and the GRAIL mission, and data from the Japanese Aerospace Exploration Agency.
In its September 2026 Threat Intelligence Report, Anthropic detailed its ongoing operations to detect, disrupt, and mitigate the malicious misuse of its Claude AI models across seven core harm areas:
Cyber Operations:
Anthropic identified and banned several threat actors, including GTG-20006 (linked to Russia's Midnight Blizzard), which used AI to automate malware re-tooling, phishing, and infrastructure setup. They also disrupted GTG-50014 (ShinyHunters affiliates) conducting opportunistic data theft and extortion, and GTG-10007 (a Chinese-speaking group) that built autonomous "agent swarms" for zero-day exploit research and intelligence harvesting.
Influence Operations:
The team dismantled multiple covert campaigns using AI as a "newsdesk" to launder state propaganda. This included a Russian-led operation in the Central African Republic (GTG-04001), a commercial "influence-as-a-service" platform targeting Malaysia (GTG-84005), Iranian state-aligned networks (GTG-34001), and pro-Awami League fake-news rings in Bangladesh (GTG-54006).
Surveillance Operations:
Anthropic blocked state-aligned actors and spyware vendors from utilizing Claude to build mass-interception software or ingest bulk social media data to profile dissidents, notably targeting Uyghur, Tibetan, and Iranian diaspora communities.
Conventional Weapons:
The company shut down groups using Claude to engineer weapons software, including a Yemen-based cell (GTG-87001) designing guided rocket firmware, and China-nexus actors drafting fire-control specifications for undersea warfare and electronic warfare routing.
Biological Misuse & Scams:
Anthropic intervened against researchers attempting to leverage models for dual-use biological research, such as avian influenza mammalian adaptation and gain-of-function planning. They also terminated a deceptive dating app network (GTG-15001) that deployed over 4,700 AI personas to defraud users.
Illicit Distillation:
Anthropic actively defended its IP against unauthorized industrial-scale campaigns by Chinese AI labs—including Alibaba, DeepSeek, Moonshot, Zhipu, and Xiaomi—which flooded Claude with queries to illicitly harvest its reasoning traces and chain-of-thought data to train competing models.
To counter these evolving threats, Anthropic deployed advanced technical safeguards, including encrypted and summarized internal reasoning, identity verification for high-risk regions, and intelligence sharing with industry peers and global authorities.
https://www.anthropic.com/threat-intelligence-report-september-2026
Covert Accounts Used U.S. Proxies To Attempt To Engineer Deadlier Viruses, Tried To Evade Identification and Regional Blocks.
Right out of the gate, Anthropic remarks on the difficulty of understanding if a particular line of inquiry pertaining to biology is meant for nefarious purposes, to create defense mechanisms like vaccines, or simply to establish predictions of how a virus spreads. The company says that "out of an abundance of caution [....] launched recent models with stronger safeguards."
In the first case, a request for assistance in developing a grant application involved finding ways to improve the chikungunya virus. The purported researchers were trying to come up with ways to both add extra abilities to chikungunya (increased mutation) and increase its virulence. The topic itself already raised some concern, but Anthropic's hand was forced after finding that although the grant application seemed to be for civilian researchers, the actual investigation was meant to proceed at a military facility.
The firm also found that the request would have gone through a third-party LLM platform associated with military as well as civilian institutions. The countries involved are geo-blocked by Anthropic, and that platform routed comms traffic through the U.S. to try to evade detection, used gray-market resellers, and specifically catered to customers looking to skirt content restrictions. Anthropic banned the accounts in question and shared the information with government authorities, though the same people repeatedly tried reaching Claude again via zero-data-retention services.
Case #2 pertained to a non-US researched who was looking to dig into how avian flu adapts to mammals, and how it can cause diseases other than in the respiratory tract. The problem is that avian flu has a high fatality rate, and there's little population immunity.
While the virus doesn't easily spread from person to person, therein lies the rub — the research could end up discovering mechanisms to increase transmissibility. The researchers used a random username, a private email service, and accessed Claude through a VPS, leading Anthropic to investigate and ultimately turn its nose up at this strain of thought.
The story with the third case bears a resemblance to the previous two. Once again, an account was trying to prepare a supposed grant application, this time around about orthopoxviruses, the family that houses smallpox and Mpox, among others.
The application discussed containment facilities and live experimentation with the viruses, and focused on understanding their genetics for the purpose of evading immunity. The research didn't initially trigger alarms, but Anthropic came to notice it was created via a reselling service, with a randomly-generated email, tunneled through U.S. infrastructure to reach Claude, and traced back to a banned account farm.
In the last two cases, instead of viruses, the purported researchers were focusing on toxins. In case #4, a person mapped out venom toxin peptides from multiple families of animals and created a program to optimize their toxic characteristics.
Although the stated goal was to create painkillers, antidepressants, and other therapeutic molecules, the data would equally allow the creation of potent harmful compounds. Anthropic also came to learn the content Claude was generating was part of a state-sponsored program in an "unsupported region."
In the fifth and final case, a theoretical scientist was also using Claude to try and redesign a set of toxins, also supposedly for therapeutic purposes, under a national public search program. However, the work touched upon "a bacterial toxin subunit and a protein of the hemorrhagic-fever virus" that happens to be on the World Health Organization's list for particularly nasty, pandemic-inducing diseases.
The scientist tried to obscure the subject of the research, directing Claude to be vague about descriptions. Once again, the story ended with Anthropic cutting off access to Claude from a location that broke its terms of service.
Swiss Army sticks a knife in American cloud apps with its own FOSS push:
Switzerland's Federal Chancellery is preparing to offer a FOSS workplace suite to some 3,000 employees – but the Swiss Armed Forces are pushing ahead faster still.
European interest in digital sovereignty isn't limited to the European Union: the Swiss Federal Chancellery plans to offer selected government employees a FOSS alternative that will run alongside Microsoft 365. The chancellery is launching the program with an initial 3,000 staff, out of some 47,000 federal employees. The platform is expected to become available to about 3,000 selected employees from the end of 2027, with the first phase forecast to cost CHF 9 million (£8.2 million, $11.1 million). For comparison, Swiss Radio reported last year that the federal government had spent CHF 1.1 billion (£1 billion, $1.4 billion) on Microsoft licenses.
The program follows the BOSS Proof of Concept feasibility study, which began last year and tested browser-based FOSS tools with 172 users. The English version of the report says: "Functions examined included document editing, email, calendar, contacts, tasks, file storage, audio and video conferencing, chat, and identity and access management."
The study carefully spells out four limits to its scope:
- It would not replace Microsoft 365
- It would not have 1:1 functionality
- It would not have full M365 compatibility
- It would not be permanent infrastructure
It's important to make this stuff plain right at the start. Back in 2022, in a piece whose working title was You can't buy software, this vulture mentioned a member of one of his online communities who wanted to replace Microsoft software with free software – but demanded complete fidelity, including intact imports of all his Outlook files. This kind of exact and perfect match is basically impossible, and the four bullet points above strike us as a good effort at managing users' expectations.
The Chancellery concluded that the browser-based suite was suitable in principle for key standard tasks, although it also identified technical and operational limitations. The next phase will cover less than 10 percent of federal employees and is expected to take about 15 months. The plan is to use the openDesk suite from the German state-owned enterprise ZenDIS. This is the same collaboration suite that we reported Mecklenburg-Vorpommern was adopting in July, following neighboring Schleswig-Holstein in 2025.
The move is part of the Swiss government's Digital Switzerland Strategy 2026, announced in Bern at the end of 2025 – less than a month after its Federal Council's report on Swiss digital sovereignty. They also follow the 2024 introduction of the Federal Law on the Use of Electronic Means for the Fulfilment of Governmental Tasks – or EMBAG for short. The government has a fresh interest in open source – indeed, the Chancellery maintains an online catalog of its own open source tools.
Back in July, Heise reported in English that the Swiss Armed Forces were making similar moves. It cites a German-language report from Swiss publication Republik, Die Cyber-Spezialisten des Bundes kehren Microsoft den Rücken – The federal government's cyber specialists are turning their backs on Microsoft – which has more details. The military is moving faster: Republik says it aims to complete the migration by October 2026 – next month at the time of writing. Again, there is a local precedent – this time, from Austria. In September last year, representatives of the Austrian military presented a talk at the LibreOffice Conference in Budapest: Migration to LibreOffice in the Austrian Armed Forces (ÖBH). Last month, the ÖBH gave a long interview to the Document Foundation about how and why: part 1 and part 2. ®
Open AI claims that AI has found a solution to the Navier-Stokes Millenium Prize problem.
The Navier-Stokes equations are a good model for most fluids we see around us like water and air. They are partial differential equations, and their solution is the velocity of the fluid --- a field that varies with both location in space and time. The Millenium Prize problem asks whether it is possible to start the equations with smooth initial conditions and smooth forcing, but still reach a solution with a singularity (i.e. infinite velocity at some time and point in space). One may either prove that such solutions stay smooth for all time, or one may construct an example which has a finite time "blowup"; the claim by OpenAI is that they found solutions with singularities. The result itself is interesting and it will most likely have some consequences within fluid dynamics, but these are medium to long term things that are hard to predict. I personally am not capable of judging the validity of the result (FWIW Sabine Hossenfelder explains reasonably well why the result might not be valid despite the "lean confirmation").
Sadly, the whole thing is clouded by allegations of not-exactly-plagiarism. In their statement OpenAI does not deny that their internal models may have been trained on research performed by others. To be more clear, there exists professor Tristan Buckmaster who was working with a friend from Anthropic on exactly this problem, and exactly this approach to the problem, and prof. Buckmaster used OpenAI's tools. I personally found prof. Buckmaster's statement a good read, and I don't want to forget this blog post by Curtis Pyke.
I believe the larger story is the AI agent collective. In the Hugging Face hack many AI agents started talking to each other and worked together to achieve their goals. OpenAI states that to solve the Navier Stokes problem, they purposefully set up to 10000 agents to work in groups that could communicate internally. At the same time OpenAI states that we are not prepared for AI --- the BBC has a broader text on controlling AI here.
I believe the larger story is that these AI agent collectives look a lot like global workspaces. This whole thing fits in nicely with the fact that humans consider themselves superior to other animals because they have language: unconstrained communication of different components is what leads the collective to have an actual chain/train of thought (the communication log).
I believe there is more to say, but I want to start a discussion, not to lecture. I apologize if I left anything important out.
Money would ostensibly fund research the NIH leadership said it no longer wanted:
Late last week, word started leaking that the National Institutes of Health (NIH) had reached an agreement with the Department of Defense that would see part of the NIH's budget used to fund research at the Department of Defense. So, on the Friday just prior to a US holiday weekend, the Department of Defense released a copy of the agreement and confirmed that it had been signed roughly a month earlier. The move is striking for a number of reasons, ranging from the existing budget disparities between the two parties involved to the fact that the money would be used for projects that the current NIH leadership has explicitly rejected.
The agreement itself sets up a system where the NIH would transfer money to the Department of Defense to fund staff and projects that would "support the advanced development of medical countermeasures against pandemic influenza, chemical, biological, radiological, and nuclear (CBRN) threats, and emerging infectious diseases." The money would come out of the budget for the NIH's National Institute of Allergy and Infectious Diseases, or NIAID, to which Congress has allocated $6.6 billion in 2026. The agreement is set to run for a decade.
Left unspecified is just how much of the NIAID budget will be spent on Defense projects. Reporting by Nature suggests that the Department of Defense was looking for up to a third of its total budget but was being told to settle for about 10 percent. There's obviously an enormous disparity between the budgets of these two agencies, given that the 2026 Defense budget is roughly $1 trillion. That budget is under considerable strain, however, due to the open-ended nature of the conflict with Iran. The deal has also been announced at a time when the NIH has been struggling to issue sufficient grants to use the money that Congress allocated to it.
That has led some, including Sen. Patty Murray (D-Wash.), to accuse the parties of simply using the agreement as a way to transfer money to the Pentagon without congressional approval. Others are suggesting that this is part of a longer-term effort to shift any biosecurity research out of the NIH and into the Pentagon.
One of the striking aspects of the deal is that it will involve the use of NIH money to fund research that the NIH leadership has explicitly rejected. Prior to the Trump administration, NIAID funded a lot of work directed toward studying the biology of emerging diseases and developing potential defenses. In a commentary published early this year, the Heads of NIAID and the NIH explicitly called for dropping biodefense research from the agency's remit and rejecting things like pandemic preparedness in favor of a focus on "the most impactful infectious diseases that Americans currently face."
Yet the new agreement includes money that will be spent to "protect the United States from future pandemic strains, CBRN [chemical, biological, radiological, and nuclear] threats and other emerging infectious disease." In other words, the NIH will be giving money to the Department of Defense to fund research its leadership doesn't want to see happen.
Very little of this makes any sense, and the agreement itself is remarkably vague, so it will be difficult to determine its consequences until spending data becomes available. That's assuming future Congresses don't simply prohibit this sort of spending, something that its recent actions have suggested it might be willing to do.