OPENAI 🔥: The upcoming ChatGPT Pro Max plan will cost $500. So far, this will be one of the most expensive AI subscriptions available on the market. I hope "it will be worth the wait" 👀

I used Opus 5.5 to formally verify the Claude Agent SDK using Lean. A couple short prompts = 16 PRs fixing various bugs and race conditions. Video attached. TLA+ also works well. I sometimes combine Lean and TLA+ to look for issues around data flow, concurrency, and state mgmt. I don't know either language well, but Claude is excellent at both. This approach is super useful for formally modeling your code and finding bugs that a human probably wouldn't have spotted. Is formal verification the future of coding (or at least, bug finding)?

Google team after seeing Gemini hacked three companies

For cybersecurity, "pacing the frontier" means "policing the frontier". Frontier cybersecurity solutions will be driven by defensive agentic AI.

I read @DarioAmodei's essay calling on the labs to pace the frontier. @sama agreed. The frontier will move at whatever speed it moves. The rest of the world will not slow down. Our job in the cybersecurity community is to make sure it moves securely and safely. Here’s what I see from the front lines: 1. The unit of threat is no longer the hacker. It's an autonomous campaign. I call it the Agent-state. We see coordinated AI agents executing attack campaigns at machine speed. 2. Sophistication is dead as an attribution signal. AI gives every criminal and lone actor elite execution. Identity, infrastructure, and intent tell you who's behind an attack. Skill doesn't. 3. Runtime is the control point. Endpoints, cloud workloads, and SaaS are the battleground. Governance documents don't stop an agent in motion. Enforcement at machine speed does. 4. Every AI agent is a privileged identity. Least privilege, short-lived credentials, traceable actions, and a kill switch. Permissions never expand because an agent decides it needs more. 5. Defense has to be autonomous but also bounded. Machine-speed response, tiered by consequence, with humans owning the high-impact calls. 6. Every failed attack should make every defender smarter. Feed what we block back into detection, across customers and models, with privacy intact. This is what CrowdStrike and NVIDIA introduced with SafeMind: an agentic, always improving model and harness protection system built for defenders. 7. The AI industrial base is critical infrastructure: weights, training clusters, APIs. Call it what it is and protect it like it is. Pacing what comes next doesn't secure what's already here. The credible path is to deploy with proof: board-level accountability for AI security, independent external red teaming, incident disclosure, secure defaults, and controls that work in production - not on paper. Anthropic and OpenAI just committed to embedding independent evaluators with employee-level access. CrowdStrike will bring what we see from the front lines to that table. The ability for AI to act must be matched by the ability for defensive AI to stop the breach.

one of these apps must adopt zk passport so everyone follows suit

We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…

All vulnerability discoveries and exploits will henceforth be attributed to AI.

New: unlinkable on-chain identity. You can now prove what's necessary on-chain, with no one, not even the authority that issued your passport / national ID, able to trace it back to you. It now runs on @TACEO_IO 's oblivious network. Sybil-resistant. On-chain. Unlinkable.

I completely agree. This may be one of the clearest signs yet that we’re entering a new era of AI agents. We developed ExploitGym to measure whether AI agents can turn real-world vulnerabilities into working exploits. But what happened during the evaluation at OpenAI went beyond what the benchmark was designed to measure: agents found unintended paths, coordinated across instances, worked around containment controls, and compromised real-world infrastructure. As agents become more capable and autonomous, ensuring they are properly aligned, that they understand and respect the boundaries of what they are authorized to do, is becoming increasingly critical. Lots to do as next step: we need to continue measuring frontier cyber capabilities as they evolve, and urgently strengthen agent alignment, monitoring, containment, and secure evaluation/training infrastructure. These are becoming essential safeguards as agent capabilities rapidly advance. The question is no longer just what AI agents can do. It’s what they will do when we haven’t anticipated the path they take.