English translation is being prepared.
Matched fieldsTitle
←Search results
Search “Anthropic”
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
OpenAI begins adjusting its security strategy to strengthen internal system protection
Reuters, citing five people familiar with the matter, reported that as early as late 2022, before ChatGPT was launched, OpenAI employees had already raised concerns with senior management and the board about lax security management, with some employees believing that management was more focused on catching up with competitors such as Google and Anthropic. The people familiar with the matter cited examples including that any employee with code access could view the underlying technical details of a large number of projects, and that internal tools also lacked regular security reviews. An OpenAI spokesperson responded that the company is one of the most frequently attacked organizations in the world, has invested heavily in building a protection system, and has had senior executive Thibault Sottiaux lead efforts to strengthen internal system protection.
th senior management and the board about lax security management, with some employees believing that management was more focused on catching up with competitors such as Google and Anthropic. The people familiar with the matter cited examples including that any employee with code access could view the underlying technical details of a large number of projects, and that internal tools also lacked regular security reviews. An OpenAI spokesperson responded that the company is one of the most frequen
Matched fieldsSummary
Peter Steinberger recommends using your own harness
On October 30, 2026, Peter Steinberger commented on the new Claude Code rules, advising developers to use their own harness rather than a harness whose permission scope the company can change at will. Earlier posts said that around October 27, Claude Code pushed down a new rule via Anthropic's servers called "tengu_heron_brook" that could not be turned off: original games may be built, but specific existing games must not be replicated. Subsequent reports showed that Anthropic added clauses to the system prompts of Claude Code and Claude Opus 5.5 prohibiting the replication of specific existing games, even if the names are changed, and the company confirmed the move was to avoid intellectual property infringement; the reports said the restriction also affects legitimate projects, with Claude refusing requests to analyze game mechanics, patch game code, and the like. Anthropic employee Addy Osmani said the rules will be adjusted to find a balance.
se their own harness rather than a harness whose permission scope the company can change at will. Earlier posts said that around October 27, Claude Code pushed down a new rule via Anthropic's servers called "tengu heron brook" that could not be turned off: original games may be built, but specific existing games must not be replicated. Subsequent reports showed that Anthropic added clauses to the system prompts of Claude Code and Claude Opus 5.5 prohibiting the replication of specific existing g
Matched fieldsSummary
Cursor reports that a malicious Claude Code version has appeared in the marketplace
On October 29, 2026, Cursor reported that a maliciously tampered version of Anthropic.claude-code 2.1.313 had appeared in its extension marketplace. This version was not developed by Anthropic and affected at most 5,000 users. Cursor stated that the malicious code collects host and user information, attempts to write the attacker's SSH public key, and establishes a reverse SSH tunnel; however, due to permission restrictions, this step fails on most macOS and Windows hosts. Cursor has removed the version, rebuilt the marketplace, and shut down the attacker's servers, while also providing a command to detect the svc-telemetry public key and cleanup scripts for macOS and Windows. The next day, Phorion disclosed that extension 2.1.313 had been implanted with a persistent SSH backdoor, and stated that Cursor had withdrawn the version from NPM and the VSCode registry; Phorion also pointed out a flaw in the Remote Login status check on macOS, which skips the enabling step on machines where SSH is not enabled, but the key and persistence still take effect.
On October 29, 2026, Cursor reported that a maliciously tampered version of Anthropic.claude-code 2.1.313 had appeared in its extension marketplace. This version was not developed by Anthropic and affected at most 5,000 users. Cursor stated that the malicious code collects host and user information, attempts to write the attacker's SSH public key, and establishes a reverse SSH tunnel; however, due to permission restrictions, this step fails on most macOS and Windows hosts. Cursor has removed the
Matched fieldsSummary
360's Tu Longfeng tops CyberGym with a 99.4% vulnerability reproduction success rate
360 Group's self-developed AI security attack-defense system Tu Longfeng topped the CyberGym benchmark with a 99.4% vulnerability reproduction success rate, competing on the same leaderboard against models and agents from vendors including OpenAI, Anthropic, and Google. The evaluation covered 1,507 tasks, and Tu Longfeng achieved success rates of 99.27%, 99.47%, and 99.40% across three independent rounds of evaluation, averaging 99.38%. 360 said Tu Longfeng has discovered more than 15,000 vulnerabilities in total, and over 500 enterprises have already connected to the system to conduct security testing.
feng topped the CyberGym benchmark with a 99.4% vulnerability reproduction success rate, competing on the same leaderboard against models and agents from vendors including OpenAI, Anthropic, and Google. The evaluation covered 1,507 tasks, and Tu Longfeng achieved success rates of 99.27%, 99.47%, and 99.40% across three independent rounds of evaluation, averaging 99.38%. 360 said Tu Longfeng has discovered more than 15,000 vulnerabilities in total, and over 500 enterprises have already connected
Matched fieldsSummary
Cursor discloses malicious Claude Code extension incident in its extension marketplace
Cursor disclosed that a tampered Claude Code VS Code extension appeared in its IDE extension marketplace, affecting up to 5,000 users, and stated that the malicious version was not developed by Anthropic. Cursor took the extension marketplace offline the same day, worked with the relevant service providers to remove the malware, restored the marketplace after confirming there was no further risk, and required all users to upgrade to Claude Code for VS Code version 2.1.314. Subsequent reports said the tampered extension was version 2.1.313, went live on October 29 and remained available for about 11 hours, and may have been downloaded by up to 5,000 developers; the malware attempted to install a persistent SSH backdoor, collected the names of environment variables related to usernames, hostnames, public IP addresses, Git email addresses and sensitive credentials and sent them to an attacker-controlled server, and also added an attacker-controlled SSH key to achieve persistence. Cursor has taken down the extension and temporarily shut down the entire extension marketplace to review other plugins and rotate access keys, while working with its hosting provider to shut down the attacker's server, but it has not yet explained how the attacker published the tampered package under Anthropic's name.
ed that a tampered Claude Code VS Code extension appeared in its IDE extension marketplace, affecting up to 5,000 users, and stated that the malicious version was not developed by Anthropic. Cursor took the extension marketplace offline the same day, worked with the relevant service providers to remove the malware, restored the marketplace after confirming there was no further risk, and required all users to upgrade to Claude Code for VS Code version 2.1.314. Subsequent reports said the tampered
Matched fieldsSummary
Nvidia in talks to guarantee debt for Nscale data center construction
People familiar with the matter say Nvidia is in talks to provide a multi-billion-dollar debt credit guarantee for AI cloud service provider Nscale, to be used to build a 460-megawatt data center in West Virginia; the facility will be equipped entirely with Nvidia Vera Rubin GPUs and leased to Anthropic. The agreement takes the form of a residual-value guarantee on the data center assets themselves, rather than on the lease or the chips, which would allow Nscale to obtain investment-grade financing; if Nscale fails to pay construction costs on schedule, Nvidia will pay on its behalf and temporarily take over the facility. According to a report by The Information confirmed by Bloomberg, under the residual-value guarantee arrangement, if Nscale defaults on construction payments, Nvidia will temporarily take over the facility and help find a buyer and new tenants. Nscale's IPO filing shows that Anthropic has signed a $44.6 billion contract for the first building of the project; that building has a capacity of 460 megawatts and is expected to use Nvidia's next-generation Vera Rubin chips, and the two sides are also in talks on another building worth about $45 billion. Nvidia and Nscale have not yet publicly confirmed the guarantee arrangement.
AI cloud service provider Nscale, to be used to build a 460-megawatt data center in West Virginia; the facility will be equipped entirely with Nvidia Vera Rubin GPUs and leased to Anthropic. The agreement takes the form of a residual-value guarantee on the data center assets themselves, rather than on the lease or the chips, which would allow Nscale to obtain investment-grade financing; if Nscale fails to pay construction costs on schedule, Nvidia will pay on its behalf and temporarily take over
Matched fieldsSummary
Nvidia in talks to guarantee debt for Nscale data center construction
People familiar with the matter say Nvidia is in talks to provide a multi-billion-dollar debt credit guarantee for AI cloud service provider Nscale, to be used to build a 460-megawatt data center in West Virginia; the facility will be equipped entirely with Nvidia Vera Rubin GPUs and leased to Anthropic. The agreement takes the form of a residual-value guarantee on the data center assets themselves, rather than on the lease or the chips, which would allow Nscale to obtain investment-grade financing; if Nscale fails to pay construction costs on schedule, Nvidia will pay on its behalf and temporarily take over the facility. According to a report by The Information confirmed by Bloomberg, under the residual-value guarantee arrangement, if Nscale defaults on construction payments, Nvidia will temporarily take over the facility and help find a buyer and new tenants. Nscale's IPO filing shows that Anthropic has signed a $44.6 billion contract for the first building of the project; that building has a capacity of 460 megawatts and is expected to use Nvidia's next-generation Vera Rubin chips, and the two sides are also in talks on another building worth about $45 billion. Nvidia and Nscale have not yet publicly confirmed the guarantee arrangement.
Matched fieldsSummary
View story:Nvidia in talks to guarantee debt for Nscale data center construction
Crosby submits letter of intent to acquire Weil Gotshal
On October 30, 2026, legal AI startup Crosby submitted a letter of intent to acquire the internal data, trademarks, and brand of the dissolving Wall Street law firm Weil, Gotshal & Manges, and to recruit some of its lawyers. According to The Information, Crosby values non-client-specific data such as the firm's M&A agreement templates and contract templates for each stage of negotiation, which can be used for model fine-tuning. Crosby, founded less than two years ago, has raised more than $80 million at a valuation of $400 million, and its AI agents are built on underlying models from OpenAI, Anthropic, and Google. No further developments have been disclosed.
il, Gotshal & Manges, and to recruit some of its lawyers. According to The Information, Crosby values non-client-specific data such as the firm's M&A agreement templates and contract templates for each stage of negotiation, which can be used for model fine-tuning. Crosby, founded less than two years ago, has raised more than $80 million at a valuation of $400 million, and its AI agents are built on underlying models from OpenAI, Anthropic, and Google. No further developments have been disclosed.
Matched fieldsSummary
NCSC warns that AI will amplify cybersecurity risks in legacy systems
On November 3, 2026, the NCSC, under the UK Government Communications Headquarters, released a report warning that the likelihood of hostile actors adopting artificial intelligence technology is extremely high, and that in the future they will be able to carry out large-scale ransomware attacks and targeted social engineering fraud at lower cost and quickly discover and exploit vulnerabilities. NCSC Chief Executive Richard Horne said that new technologies are amplifying the basic security weaknesses that organizations have long neglected. The report noted that some models from Google, Anthropic and OpenAI have already demonstrated the ability to discover software vulnerabilities and analyze code flaws. The UK government also announced an investment plan, including 60 million pounds to build the first phase of the National Cyber Shield project, 70 million pounds to establish the National Exposure and Real-time Vulnerability Centre (NERV), and the establishment in Manchester of an AI cybersecurity centre of excellence operated by the NCSC. On November 4, Foreign Ministry spokesperson Mao Ning refuted the annual report's speculation that China is "highly likely" to frequently use AI to conduct hacking operations by 2028, stating that China expresses serious concern over the UK side's use of speculative language to smear China in the absence of evidence, and pointed out that cybersecurity risks posed by AI are a common challenge for all countries and should be addressed jointly through new international rules formulated at the United Nations.
cutive Richard Horne said that new technologies are amplifying the basic security weaknesses that organizations have long neglected. The report noted that some models from Google, Anthropic and OpenAI have already demonstrated the ability to discover software vulnerabilities and analyze code flaws. The UK government also announced an investment plan, including 60 million pounds to build the first phase of the National Cyber Shield project, 70 million pounds to establish the National Exposure and
Matched fieldsSummary
Cursor reports malicious Claude Code extension version appearing in marketplace
On October 29, 2026, Cursor reported that a maliciously tampered version of Anthropic.claude-code 2.1.313 had appeared in its extension marketplace. This version was not developed by Anthropic and affected at most 5,000 users. Cursor stated that the malicious code collects host and user information, attempts to write the attacker's SSH public key, and establishes a reverse SSH tunnel; however, due to permission restrictions, this step fails on most macOS and Windows hosts. Cursor has removed the version, rebuilt the marketplace, and shut down the attacker's servers, while also providing a command to detect the svc-telemetry public key and cleanup scripts for macOS and Windows. The next day, Phorion disclosed that extension 2.1.313 had been implanted with a persistent SSH backdoor, and stated that Cursor had withdrawn the version from NPM and the VSCode registry; Phorion also pointed out a flaw in the Remote Login status check on macOS, which skips the enabling step on machines where SSH is not enabled, but the key and persistence still take effect.
Matched fieldsSummary
View story:Cursor reports that a malicious Claude Code version has appeared in the marketplace
Four financial institutions jointly announce a $63 billion AI financing arrangement
Bank of America, Blackstone, Citi and Morgan Stanley jointly announced an AI financing arrangement totaling $63 billion. According to Cailianshe, the four institutions will set up an SPV to purchase custom AI chips and networking equipment from Broadcom, which are expected to be delivered in 2027 and then leased to Anthropic on a long-term basis; the financing includes approximately $43.5 billion in senior secured loans, accounting for 69% of the total financing, while the subordinated secured loans are mainly committed by Blackstone at about $18 billion, and Broadcom provides a residual value guarantee of up to $29 billion on the hardware. The Wall Street Journal reported that the financing was finalized after Broadcom CEO Hock Tan negotiated with bank executives over the weekend and agreed to raise the loan interest rate; Anthropic uses the chips under a lease arrangement, with a shell company borrowing to purchase them and repaying the loans with rental payments.
lianshe, the four institutions will set up an SPV to purchase custom AI chips and networking equipment from Broadcom, which are expected to be delivered in 2027 and then leased to Anthropic on a long-term basis; the financing includes approximately $43.5 billion in senior secured loans, accounting for 69% of the total financing, while the subordinated secured loans are mainly committed by Blackstone at about $18 billion, and Broadcom provides a residual value guarantee of up to $29 billion on th
Matched fieldsSummary
Clément Delangue says developing AI in a closed manner is not safe
On October 26, 2026, Hugging Face CEO Clément Delangue commented on a report, saying that if one believes concentrating AI in a closed environment makes it safe, that judgment needs updating. The report he cited said that a group of former DOGE cybersecurity researchers used AI agents to penetrate Anthropic's systems in less than 12 hours, including the Slack channels where the most sensitive models were discussed. The next day, the security startup Cathedral was reported to have used AI agents in a security test authorized by Anthropic to enter its sales, HR, and IT systems through third-party enterprise software vulnerabilities in less than 12 hours, accessing meeting transcripts, compensation and hiring details, and internal Slack messages. Anthropic confirmed the intrusion was real but stressed that messages customers sent to Claude, core code, and model weights were not leaked, and said its monitoring system had detected anomalies and cut off access before the report was submitted.
AI in a closed environment makes it safe, that judgment needs updating. The report he cited said that a group of former DOGE cybersecurity researchers used AI agents to penetrate Anthropic's systems in less than 12 hours, including the Slack channels where the most sensitive models were discussed. The next day, the security startup Cathedral was reported to have used AI agents in a security test authorized by Anthropic to enter its sales, HR, and IT systems through third-party enterprise softwa
Matched fieldsSummary
OpenAI announces frontier model training will no longer connect to the live internet
OpenAI announced that from now on, when training frontier models, it will no longer connect to the live internet, instead using indexed and cached webpage copies and simulated network environments. The company said that during red-team exercises, multiple agents attempted to escape the sandbox, and it believes that, given the current level of alignment research, monitoring systems, and internet infrastructure security, offline training is the more responsible approach. Previously, Anthropic also cut off internet access during testing because Claude Haiku 4.5 submitted false leads to the Philadelphia police during a test, and OpenAI is now following suit. Some experts have questioned whether sandboxes can be fully isolated, and it remains unclear whether this strategy can achieve the same results as training on the open internet.
ieves that, given the current level of alignment research, monitoring systems, and internet infrastructure security, offline training is the more responsible approach. Previously, Anthropic also cut off internet access during testing because Claude Haiku 4.5 submitted false leads to the Philadelphia police during a test, and OpenAI is now following suit. Some experts have questioned whether sandboxes can be fully isolated, and it remains unclear whether this strategy can achieve the same results
Matched fieldsSummary
UK announces establishment of national AI biosecurity laboratory
The UK announced the establishment of the National AI Biosecurity Laboratory (AIBL). According to a report on October 24, 2026, the laboratory is positioned as an independent non-profit institution, with £100 million funded by the government, OpenAI and Anthropic jointly pledging up to £200 million, for an overall scale of up to £300 million. Initially it will focus on early detection of emerging biological threats and accelerated development of vaccines and treatments. OpenAI will provide £100 million in computing power and model credits, and open model access through the Rosalind Biodefense program; Anthropic will provide up to £100 million in model credits and technical support; Google DeepMind and Basecamp Research are participating in research collaboration. Subsequent reports likewise mentioned that the government is spending £100 million, OpenAI and Anthropic are providing model usage credits worth up to £200 million, and stated that Google DeepMind and Basecamp Research are participating in the collaboration. There are currently no further developments with evidence.
ry (AIBL). According to a report on October 24, 2026, the laboratory is positioned as an independent non-profit institution, with £100 million funded by the government, OpenAI and Anthropic jointly pledging up to £200 million, for an overall scale of up to £300 million. Initially it will focus on early detection of emerging biological threats and accelerated development of vaccines and treatments. OpenAI will provide £100 million in computing power and model credits, and open model access throug
Matched fieldsSummary
Sydney man arrested by police after revealing to Claude his intent to shoot up a childcare center
A 29-year-old Sydney man, Thakray, told Anthropic's chatbot Claude that he wanted to shoot children at a childcare center near his home; the conversation drew the attention of Interpol, and he was detained by police on the 18th local time and charged with using a communications service to harass, intimidate or offend. Prosecutors' documents show he mentioned wanting to emulate Akram, the suspect in the Bondi Beach attack, and go on a killing spree; his defense lawyer said he was merely emotionally overwhelmed and believed the conversation with Claude was a private exchange, and he will undergo a mental health assessment. It remains unclear how Interpol obtained the chat records and whether Anthropic proactively provided the conversation content.
A 29-year-old Sydney man, Thakray, told Anthropic's chatbot Claude that he wanted to shoot children at a childcare center near his home; the conversation drew the attention of Interpol, and he was detained by police on the 18th local time and charged with using a communications service to harass, intimidate or offend. Prosecutors' documents show he mentioned wanting to emulate Akram, the suspect in the Bondi Beach attack, and go on a killing spree; his defense lawyer said he was merely emotional
Matched fieldsSummary