Detecting and countering misuse of AI: September 2026

HN to Anthropic, 2026-09-10. The report itself. TechCrunch pulls out the distillation campaigns and the CAPTCHA detail; Slashdot leads with the blocked bioweapon attempts. Day four of the company publishing its own incident record.

"Valuable warning shots": how Anthropic now views Claude's cyber incidents

The New Stack, 2026-09-10. The framing piece for the report. Cyber incidents reclassified as alignment evidence rather than abuse cases. Read with Schneier's AIs compress exploit timeline from the same day.

Introducing the Agents API

OpenAI, 2026-09-10. The developer-facing half of Astra for work. The docs hit HN, and Vercel had day-one support. Same day: GPT-Live-1 in the API, which The New Stack says came from splitting a voice model's brain.

Introducing ChatGPT for Financial Services

OpenAI, 2026-09-10. Slashdot's headline is junior bankers. Alongside a government access and cyber-defense program and a Pro signup pause because Astra demand exceeded capacity.

One resignation turned the embers of AI fear into a wildfire

Interconnects, 2026-09-10. Lambert on how the Anthropic departure became the story. WBUR has the political consequence: Rep. Trahan calls for legal guardrails. The Alignment Forum's technical follow-ups are opaque serial depth and architecture and monitorability.

Cognition launches SWE-2, rivaling Fable 5.1 and GPT-Astra

HN to Cognition, 2026-09-10. A day after factoring RSA-260, Cognition ships a coding model it positions against the two frontier labs. Read with Ronacher's Astra for coding: why are we doing this again? and the nine coding harnesses comparison.

Shopify is moving from React Native back to Swift and Kotlin

HN to Shopify, 2026-09-10. The engineering story of the day outside AI. The New Stack says the rebuild took 12 weeks with agents doing the port; Willison has notes. Same week Shopify acquired Tailwind.

Anthropic on the record

Anthropic: threat intelligence, September 2026 (Thu), TC: distillation campaigns (Thu), Slashdot: blocked bioweapon efforts (Thu), TNS: valuable warning shots (Thu), Slashdot: fourth likely crime (Thu), TNS: what Anthropic's researchers really think (Wed).

The resignation, politicized

Interconnects: embers into wildfire (Thu), WBUR: Trahan calls for guardrails (Thu), Cybernetic Forests: models don't go rogue (Thu), Politico: Coxon quits with safety warning (Tue).

Hidden reasoning, continued

AF: operationalizing opaque serial depth (Thu), AF: architecture and monitorability (Thu), AF: Astra with no chain of thought (Thu), Raschka: looped transformers (Wed).

OpenAI product surface

OpenAI: Agents API (Thu), OpenAI: GPT-Live-1 in the API (Thu), OpenAI: ChatGPT for Financial Services (Thu), OpenAI: everyone can put data to work (Thu), OpenAI: government access and cyber defense (Thu), TNS: GPT Images 2.5 (Thu), OpenAI: Codex for antimicrobials (Thu), HN: can researchers trust OpenAI with unpublished math? (Thu).

Coding models and harnesses

Cognition: SWE-2 (Thu), Ronacher: Astra for coding, why again? (Fri), HN: nine coding harnesses vs. your laptop (Thu), TNS: Fable 5.1 vs. Fable 5 on a real budget (Thu), TNS: Salesforce's six-tool harness (Thu), TNS: AWS Pizza Bot agent inbox (Thu), TNS: 1 in 5 MCP access policies broken (Thu).

Open weights and capital

TNS: Mistral raises $3.5B (Thu), TC: Huang on 70% growth (Thu), TC: Meta's Muse is the No. 2 app (Thu), TC: Miro sold at 90% off (Thu), HN: DeepSeek v4.1 Flash (Thu).

Power and supply chains

MIT TR: powering AI is an architecture problem (Thu), MIT TR: can the US battery market untangle from China? (Thu), TC: Proxima Fusion's supplier bet (Thu), TC: Massachusetts clean power rules (Wed).

• Friday feeds
  • GPT-Live-1 in the API, HN to OpenAI, 09-11
  • Astra for Coding: Why Are We Doing This Again?, HN, 09-11
  • The Gemini app is now available for Windows, HN, 09-11
  • YuE2: frontier music with symbolic planning, HN, 09-11
  • Neijuan, HN, 09-11
  • Datasette 1.0a39 and 0.65.4 security releases, Simon Willison, 09-11
  • Writing evals for AI agents: LLM as a judge, Planet Clojure, 09-11
  • Reverse engineering an ASIC, Lobsters, 09-11
  • Cloud has a new bulk capacity market, InfoWorld, 09-11
  • Vercel Sandbox now provides 64 GB of storage, Vercel, 09-11
  • Meet the under-35s shaping the future of biotech, MIT TR, 09-11
  • August was world's joint-hottest month on record, Slashdot, 09-11
  • Climate feedback loops could worsen warming by 30%, Slashdot, 09-11
  • Claude VOACAP skill: live ionospheric propagation predictions, RTL-SDR, 09-11
  • HamRadioWeb: browser-based remote FT8/FT4 receiver, RTL-SDR, 09-11
  • This circuit sculpture is an ESP32-powered console, Hackaday, 09-11
  • The Dataflow Model (Google), Pinboard, 09-11
  • Building the display sink: contract, deviations, boundary, wal.sh, 09-11
• Thursday feeds: labs and agents
  • Detecting and countering misuse of AI: September 2026, HN to Anthropic, 09-10
  • Anthropic details distillation campaigns from Alibaba, Moonshot AI, and DeepSeek, TechCrunch, 09-10
  • Anthropic reveals rogue AI agents hate CAPTCHAs, TechCrunch, 09-10
  • Anthropic says it blocked possible efforts to build biological weapons, Slashdot, 09-10
  • "Valuable warning shots": how Anthropic now views Claude's cyber incidents, The New Stack, 09-10
  • One resignation turned the embers of AI fear into a wildfire, Interconnects, 09-10
  • Rep. Trahan calls for legal guardrails after whistleblower warning, WBUR, 09-10
  • An operationalization of opaque serial depth, Alignment Forum, 09-10
  • Proposal for tracking the effects of architecture on monitorability, Alignment Forum, 09-10
  • Introducing the Agents API, OpenAI, 09-10
  • OpenAI Agents API docs, HN, 09-10
  • Introducing ChatGPT for Financial Services, OpenAI, 09-10
  • OpenAI targets work of Wall Street junior bankers, Slashdot, 09-10
  • Now everyone can put data to work, OpenAI, 09-10
  • Expanding AI access and cyber defense for federal, state, local, and tribal governments, OpenAI, 09-10
  • How a researcher uses Codex and ChatGPT to search for new antimicrobial molecules, OpenAI, 09-10
  • OpenAI puts Pro subscriptions on hold due to Astra demand, TechCrunch, 09-10
  • OpenAI split a voice model's brain, then one team deleted 23,000 lines of code, The New Stack, 09-10
  • GPT Images 2.5 promises edits that leave the rest of your image alone, The New Stack, 09-10
  • More questions about whether researchers can trust OpenAI with unpublished math, HN, 09-10
  • Cognition launches SWE-2, rivaling Fable 5.1 and GPT-Astra, HN to Cognition, 09-10
  • Nine coding harnesses vs. your laptop, HN, 09-10
  • Fable 5.1 vs. Fable 5: results on a real-world budget, The New Stack, 09-10
  • "Six tools, one harness": Salesforce loops together a six-pack, The New Stack, 09-10
  • AWS open-sources Pizza Bot: email-style inbox for background AI agents, The New Stack, 09-10
  • 1 in 5 MCP access policies came back broken or missing, The New Stack, 09-10
  • Stop AI code sprawl before it destroys your software design, The New Stack, 09-10
  • 47,000 job listings reveal the engineering roles AI is creating, The New Stack, 09-10
  • AI floods security teams with flaws; business context sets priorities, The New Stack, 09-10
  • Red Hat AI 3.5 tackles the GPU queue that can stall AI pilots, The New Stack, 09-10
  • Mistral raises $3.5B for open-weight frontier models, The New Stack, 09-10
  • Meta's AI agent Muse is now the No. 2 app in the US, TechCrunch, 09-10
  • AI agents are flooding public services with new requests, TechCrunch, 09-10
  • ToolGrad: tool-use dataset generation with textual gradients, Google Research, 09-10
  • A collaborative agent with two lightweight models for autonomous crystal materials research, Nature MI, 09-10
  • Claimable Neon: provisioned by agents, claimed by humans, Neon, 09-10
  • Build with OpenAI Agents API on Vercel, Vercel, 09-10
  • GitHub Copilot in the AI SDK harness layer, Vercel, 09-10
  • GitHub Copilot app for beginners: diff, terminal, and browser, GitHub Blog, 09-10
  • Claude Code v2.1.268, claude-code-releases, 09-10
  • Cursor Projects, Cursor, 09-10
  • Rebuilding AUTOMATIC1111 with Gradio Workflow, Hugging Face Blog, 09-10
  • Why enterprises should start with on-site AI agents, InfoWorld, 09-10
• Thursday feeds: infra, security, systems
  • Shopify is moving from React Native back to Swift and Kotlin, HN to Shopify, 09-10
  • Shopify spent years on React Native, then rebuilt everything in 12 weeks, The New Stack, 09-10
  • Native is now the future of mobile at Shopify, Simon Willison, 09-10
  • Forgejo <=16.0.3 critical RCE, HN, 09-10
  • Forgejo 16.0.4 and 15.0.8 address critical security vulnerability, LWN, 09-10
  • IDScan confirms breach with more than 150 million driver's licenses stolen, TechCrunch, 09-10
  • AIs compress exploit timeline, Schneier, 09-10
  • The Deathray: a simple way for an untrusted site to freeze a Mac, HN, 09-10
  • 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it, Cloudflare, 09-10
  • Bipartisan lawmakers ask US government to ban hack-for-hire firms, Citizen Lab, 09-10
  • A rant about phishing: it's not the user's fault (and not DNS either), Lobsters, 09-10
  • Android rolling out passkey transfers between password managers, Slashdot, 09-10
  • Latest Apple Watch can grab conversation snippets without both speakers' consent, Slashdot, 09-10
  • Proof of Capture: Apple Reference Image, but open source and using steganography, HN, 09-10
  • Neki: sharded Postgres, HN to PlanetScale, 09-10
  • WalShadow: sub-second Postgres replication to ClickHouse from physical WAL, ClickHouse, 09-10
  • ClickHouse On-Demand Compute, ClickHouse, 09-10
  • Unifying governance across engines and catalogs in the Open Lakehouse, Databricks, 09-10
  • PostgreSQL 19's "scary patch contest", LWN, 09-10
  • How Vercel cut CDN metadata lookup latency by 91%, Vercel, 09-10
  • Rust is a tier-1 language at Microsoft, HN to Rust Foundation, 09-10
  • JEP 544: Ahead-of-Time Code Compilation, HN, 09-10
  • Julia 1.13 released, LWN, 09-10
  • Soft-deprecating re.match(), Lobsters, 09-10
  • How CHERIoT provides strong and usable isolation without an MMU, Lobsters to ACM Queue, 09-10
  • Optimizing a spin-lock, Lobsters, 09-10
  • What comes after git, Lobsters, 09-10
  • Conversations with JJ, Lobsters, 09-10
  • It's not the YAML spec's fault, but, Lobsters, 09-10
  • Announcing the first Guix-Science release, Lobsters, 09-10
  • Any Nix package, live in your browser, Simon Willison, 09-10
  • It Breaks a Village: Bevy's 6th birthday, Lobsters, 09-10
  • DiffOS is for freedom, Lobsters, 09-10
  • Thelio Mira AI Linux workstation: 192 GB GPU memory, HN, 09-10
  • Jane Street: protocol emulator ASIC competition, Jane Street, 09-10
  • BSD Now 680: What FS?, BSD Now, 09-10
  • Clojurists Together update: July and August 2026, Planet Clojure, 09-10
• Thursday feeds: science, business, civics
  • The four-color theorem gets a rare new proof, Quanta, 09-10
  • Stable singularity of the Euler equations on R^3, Terence Tao, 09-10
  • Crowdsourcing a list of general resources on AI and mathematics, Terence Tao, 09-10
  • Powering AI is an architecture problem, MIT TR, 09-10
  • Can the US battery market untangle from China?, MIT TR, 09-10
  • A road map for deciding whether to deploy solar geoengineering, MIT TR, 09-10
  • Jensen Huang explains why Nvidia will grow 70% next year, TechCrunch, 09-10
  • Bending Spoons to buy Miro for $1.36B, 90% below its 2022 valuation, TechCrunch, 09-10
  • The Boring Company raises $3B in round led by UAE, TechCrunch, 09-10
  • Proxima Fusion bets €140M on a fusion ingredient dominated by Asian suppliers, TechCrunch, 09-10
  • Maven Robotics wants to steal your robot deployment deal, TechCrunch, 09-10
  • Pocket FM doubles run rate to $500M as AI powers 93% of audio, TechCrunch, 09-10
  • Google signs its biggest rice-methane carbon credit deal, TechCrunch, 09-10
  • Automattic's board forces Mullenweg into leave of absence, Slashdot, 09-10
  • ABC show won't air interview with Democrat because of FCC threats, Slashdot, 09-10
  • We all deserve a better internet, not a smaller one, EFF, 09-10
  • Making social media social, Lobsters, 09-10
  • Models don't go rogue, Lobsters, 09-10
  • Oil prices top $100 a barrel as inflation report looms, WBUR, 09-10
  • Foulkes defeats Rhode Island's Gov. McKee in primary, WBUR, 09-10
  • A 5-day partial Orange Line closure begins Thursday, WBUR, 09-10
  • Regent's challenging path to a seaglider first flight, The Air Current, 09-10
  • 25th anniversary of 9/11, part 4: Gander, Newfoundland, Leeham, 09-10
  • Boston AI Week: The Cost of Intelligence breakfast briefing, Boston AI Week, 09-11

Anthropic is publishing the threat model it is being blamed for

The distillation disclosure names three Chinese labs, the bio section describes attempts it blocked, and the CAPTCHA detail is what the rogue-agent story looks like at the level of a single request. The New Stack's "warning shots" framing is the tell: the company is reclassifying cyber incidents as alignment data. That is the same posture as the 10 percent number and the fourth crime, and it is why one resignation could become a Congressional ask by Thursday.

OpenAI is selling the harness, not the model

The Agents API, GPT-Live-1, the Financial Services vertical, the government program, and the "put data to work" launch all landed on one day, and the model behind them is the one whose Pro signups had to be paused. Cognition's SWE-2 and Salesforce's six-tool harness say the surface layer is where the competition is now. Ronacher's question, "why are we doing this again?", is the one the harness builders have to answer.

The rewrite story of the year is a rewrite back

Shopify spent years on React Native and rebuilt native in twelve weeks with agents doing most of the port. Read next to Rust becoming tier-1 at Microsoft and JEP 544's ahead-of-time compilation, the pattern is that agent-assisted porting makes the "cost of switching" argument for cross-platform frameworks much weaker than it was.

Sources that publish frequently but have gone quiet:

• Neel Nanda (388 days) — last item 2025-08-19.
• Aphyr/Jepsen (91 days) — last item 2026-06-12.
• Eugene Yan (82 days) — last item 2026-06-21.
• Lilian Weng (69 days) — last item 2026-07-04.
• Charity Majors (65 days) — last item 2026-07-08.
• Andrej Bauer (62 days) — last item 2026-07-11.
• Julia Evans (52 days) — last item 2026-07-21.
• Stephen Wolfram (52 days) — last item 2026-07-21.
• Marc Brooker (44 days) — last item 2026-07-29.
• AI Snake Oil (37 days) — last item 2026-08-05.
• Antithesis (24 days) — last item 2026-08-18.
• TigerBeetle (22 days) — last item 2026-08-20.
• FreeBSD Foundation (18 days) — last item 2026-08-24.
• Steve Yegge (18 days) — last item 2026-08-24.
• Netflix Tech Blog (14 days) — last item 2026-08-28.
• Bunnie Studios (12 days) — last item 2026-08-30.
• METR (11 days) — last item 2026-08-31.
• Microsoft Research (11 days) — last item 2026-08-31.
• Hillel Wayne (10 days) — last item 2026-09-01.
• Vicki Boykis (10 days) — last item 2026-09-01.
• deepmind-blog (10 days) — last item 2026-09-01.
• Apple ML Research (9 days) — last item 2026-09-02.
• GitHub Engineering (9 days) — last item 2026-09-02.
• DuckDB (9 days) — last item 2026-09-02.
• Fly.io (8 days) — last item 2026-09-03.
• Ink & Switch (7 days) — last item 2026-09-04.

build: 2026-09-11 | crawler-sha: 34c428f (Walsh-Research/1.2, compliance v1.4) | feeds: 73 core | items-considered: 4554 (14d, incl. 2458 arxiv-cs-ai) | warehouse: 44741 items | published: 129