AI news · Synthesized · Opinionated · 🌿
Topic · Archive
009
Stories synthesized
Model behavior, misuse, alignment research, and public incidents. The slow-cycle, high-stakes category. Covered with honest severity assessments and a builder question: does this change what you should or shouldn't be putting into a model prompt this week?
Anthropic published the Cyber Jailbreak Severity (CJS) framework on July 1, proposing a five-tier scoring system for AI jailbreaks modeled on CVSS — the standard security teams use to triage software vulnerabilities. Amazon, Microsoft, and Google are co-developing it. The scale itself is sensible. What makes CVSS work is everything around the scale, and none of that exists for AI jailbreaks yet.
Tenet Security demonstrated that injecting malicious commands into a Sentry error event gives any AI coding agent that reads it (Claude Code, Cursor, Codex) a new set of instructions it will follow. 85% success rate against live targets. 2,388 organizations have discoverable injectable DSNs. Sentry declined to fix at the root, calling it 'technically not defensible.'
On June 4, 2026, Anthropic published internal productivity data: Claude now writes over 80% of its merged production code, engineers ship 8× more, and an experimental model outperforms expert humans 52-to-1 on code optimization. Three days after the IPO filing, the same lab called for a globally coordinated pause option. These are not two different stories.
OpenAI shipped Lockdown Mode and Elevated Risk labels on June 6, 2026. Lockdown Mode is an optional toggle available to every ChatGPT account — free through Business — that disables Agent Mode, Deep Research, live web, Canvas networking, and file downloads. The Elevated Risk labels on Agent Mode, Codex codebase access, and autonomous email sending are informational warnings OpenAI has promised to remove once the features' security improves. That promise is more interesting than the toggle.
Anthropic expanded Project Glasswing to 150 new organizations across 15+ countries on June 2 — power utilities, water systems, hospitals, communications companies whose code collectively touches 100M+ people. Initial partners have already found 10,000+ critical security flaws. Claude Security, now in public beta, patches them automatically. And OpenAI's competing Daybreak already has many of the same partners.
GPT-Rosalind launched in April 2026 for pharma research, topping the BixBench bioinformatics benchmark at 0.751 Pass@1. On May 29, OpenAI extended it to US government biodefense partners including Lawrence Livermore National Laboratory and CEPI. The benchmark holds. The governance structure is more restricted than anything OpenAI has shipped before.
Anthropic's initial update on Project Glasswing is out: Claude Mythos Preview found over 10,000 high- and critical-severity zero-days in one month across every major OS and browser. It's an extraordinary number. The bottleneck is now patching.
The Intent Laundering paper achieves 90-100% jailbreak success against Gemini 3 Pro and Claude under black-box access. Current safety evaluations failed to predict this. The lesson isn't 'these models are broken.' It's that we've been evaluating the wrong thing.
Anthropic and OpenAI ran simultaneous alignment evaluations against each other's models earlier in 2026 — a first for the industry. Four areas tested: instruction hierarchy, jailbreaking resistance, hallucination prevention, scheming behavior. The findings deserve attention. So does the precedent.
Subscribe
Monday mornings. Free. The week's AI news, synthesized. Unsubscribe anytime.