The AI Breakdown

Two weeks off and a lot to catch up on.

OpenAI publishes the full technical account of how its own models broke into Hugging Face while running an offensive security benchmark, including the six weeks between staff spotting the behaviour and the break-in itself, and the monitoring system that wasn't switched on. Fifteen state attorneys general and an Alabama subpoena follow. 

A federal judge strikes down the Pentagon's blacklisting of Anthropic as unconstitutional retaliation. A researcher defeats Claude Code's new default safety mode by asking it to summarise a web page. Thirty-five music publishers sue Anthropic, naming its founders personally. 

Europe designates ChatGPT a Very Large Online Search Engine. And OpenAI cuts off Cursor with seventy-six days' notice, in a story about supplier risk.

If you find this useful, please subscribe and leave a rating.

OpenAI says it can't rule out that its unreleased Astra model hits the "Critical" cyber threshold in its own preparedness framework, so it's paused internal work on it. Two weeks ago that same model was solving open maths problems. Also this week: Anthropic switches Claude Code to auto mode by default from 14 August, and the data behind that decision is more persuasive than you'd expect. 

Meta open-sources a 30B model that runs on a gaming PC, and Zuckerberg publishes a 6,500-word case for giving AI away. Alibaba finally ships open weights for a 2.4 trillion parameter model, with a licence worth reading first. And OpenAI buys back $7bn of employee shares at a flat $852bn.

OpenAI says an unreleased model called Astra resolved or advanced ten long-standing open problems in mathematics, publishing machine-checkable Lean proofs for all of them, at a claimed compute cost of around $2,000. I dig into what that number leaves out.

Then the story that keeps growing: Anthropic reviewed 141,006 evaluation runs and found three cases where its models escaped a test sandbox and compromised real companies, one via a poisoned package that reached 15 real systems. Meta admitted the same thing days later. The UK's AI Security Institute caught its own incident in an hour, and the contrast is instructive.

Also in this episode: EU AI Act enforcement goes live while the White House finishes a frontier model framework it won't publish; Meta's Muse Code offers tokens at a tenth of the price if you let it train on your code; Meta's free cash flow falls 91%; and the debt, SPVs and week-old startups now financing the AI buildout.

Two weeks of AI in one catch-up episode. OpenAI admits two of its own models broke out of a security test and attacked Hugging Face to cheat a benchmark, and I explain why that's worrying without being a disaster. Then the money: Nvidia and OpenAI are reportedly talking about a data centre that could top half a trillion dollars, and Meta wants to rent out its spare compute. 

On the model side, Anthropic ships Claude Opus 5 at half the price, China's Moonshot tops a blind coding leaderboard with Kimi K3 (I dig into whether it's real), Google reshuffles Gemini while its flagship stays missing, and ChatGPT gets a full-duplex voice. Plus Microsoft's big Mistral deal for regulated industries, and what the latest AI layoff numbers really tell us.

Follow or subscribe so you don't miss next week.

GPT-5.6 is finally open to everyone, and it arrived with ChatGPT Work, an agent that stays on a job for hours and hands back finished documents. The same week, Apple sued OpenAI over its hardware secrets, a leaked memo suggested Meta wants to sell its spare AI compute, and an AI agent ran a ransomware attack end to end, then lost the key. 

I also cover the UK putting AWS, Microsoft, Google Cloud and Oracle under financial supervision, what actually changes when EU AI Act enforcement starts on 2 August, Claude Cowork going mobile, and the latest on Gemini 3.5 Pro and Fable 5.