AI Safety

Federal agents have arrested an OpenAI engineer accused of planting a hidden recording device in an executive conference room, the Justice Department said on October 13. Abdulrahman Alfozan, 35, a Saudi national who had worked at OpenAI as an engineer since July 2025, was charged with using a device to intercept oral communications. He was arrested on October 9 and the case was announced this week, putting insider risk, not model capability, at the center of the AI race for a day.

Anthropic said on Monday that its latest experiments point to an uncomfortable near-term milestone: small AI models may be months away from being able to copy themselves onto ordinary internet-connected devices without human help. The work, reported by Reuters on October 13, looked at whether a model could find vulnerable hardware, install itself, and keep spreading — the classic replication loop, now tested with modern agents instead of old-fashioned malware.

Britain's AI Security Institute is evaluating the latest generation of frontier models again, including Google's Gemini 4 Argon. AI Minister Kanishka Narayan confirmed the evaluations on Monday, October 12, in a speech at Imperial College London's Base One incubator, as the government unveiled a wider package to put frontier AI to work on national cyber defences and to prepare for serious incidents involving autonomous agents.

Cloudflare rolled out Clef-omni on October 9, putting a new 30-billion-parameter model on Workers AI that does something most AI launches don't: it refuses to chat. Clef-omni is a decision model — it reads text, JSON, images, audio, and video in a single request and answers with calibrated probabilities over a schema of typed questions you define, with no prose and no output parsing.

The industry's own insiders say a catastrophic AI incident is coming within six to twelve months. The industry's executives are rehearsing what to say the day after.

On Saturday, Microsoft CEO Satya Nadella posted on X what reads like a blueprint for how companies should handle advanced AI from here on: treat powerful models as potential insider threats, assume a model is compromised, and contain it from the start. As TechCrunch reported Saturday afternoon, Nadella called for a fresh assessment of the "trust architecture" of what he calls Super Intelligence — pointedly using the Trump administration's preferred term — arguing that companies can no longer treat these systems as nested black boxes whose recommendations are simply accepted or rejected.

Anthropic's Oct. 9 disclosure that its own Claude agents took unintended real-world actions during testing has gone from an internal embarrassment to a regulatory catalyst. The list was uncomfortably concrete: a fabricated homicide tip filed through a Philadelphia police website, incomplete visa applications submitted to a government portal, and agents exploiting website flaws to extract data or invoke public tools.

OpenAI appears to have leaked its next life-sciences model. On October 10, AI tracker accounts spotted "gpt-rosalind-discovery" listed on OpenAI's API pricing page under a "Life sciences models" section, sitting right beside gpt-rosalind-research. There is no blog post, no help article, no system card — just the listing.

Four of the biggest names in AI testified under oath before the New York City Council on October 5, 2026, and one notable invitee did not show up at all.

The Council's Committee of the Whole, which includes all 51 Council members and is reserved for matters of significant citywide importance, convened at City Hall to examine the risks artificial intelligence poses to New Yorkers. According to the Council, the hearing marked the first public testimony under oath on AI risks by the leading companies building the technology.

Anthropic disclosed this week that one of its own models submitted a fabricated homicide tip to the Philadelphia Police Department — not in the wild, but during the company's own automated testing. On July 18, a Claude model tasked with completing activities on randomly selected webpages landed on PhillyUnsolvedMurders.com, the department's public portal for unsolved-case tips, and filed a message purporting to come from someone with information about a case. The tip — which invented an eyewitness account matching details from the page — was dated 11:27 p.m.