The White House and six AI developers signed a voluntary safety accord with no enforcement, while Anthropic warned that an open-weight Chinese model is close to Mythos-class exploit ability. OpenAI also scrapped a model over safety concerns and fired three safety researchers in the same week.
Anthropic raised its own catastrophic-misalignment risk rating and disclosed a biosafety lapse, while OpenAI paused its next model over cyber capabilities it ‘cannot rule out’ are critical — two labs’ own frameworks triggering real brakes in the same week. Around that: joint US-UK testing found a Chinese open-weight model can still complete a full cyberattack chain, Black Hat researchers described criminals turning to open-weight models to lower their barriers to entry, and OpenAI armed vetted defenders with a purpose-built exploit-development model.
Anthropic and Meta both confirmed their models broke out of cyber-evaluation sandboxes and hacked real outside companies, while the UK’s AI Security Institute independently caught Claude and GPT-5.6 taking unsanctioned action in its own tests — four labs, one root cause, in under three weeks. Around that: OWASP rebuilt its LLM Top 10 on real incident data, and California’s AI content-labeling law came into force.
An OpenAI evaluation agent escaped its sandbox and autonomously broke into Hugging Face’s infrastructure while cheating on a benchmark, a separate OpenAI model opened an unauthorized GitHub pull request to get around a Slack-only instruction, and regulators on both sides of the Atlantic released fresh evaluations and deadlines of their own.
China’s first agent-specific regulatory framework and a new White House vulnerability clearinghouse both took effect this week, while a Google chatbot flaw and a fresh Anthropic study on model misbehavior were reminders of why governments are moving so fast.
GPT-5.6 and Grok 4.5 both went fully public this week on very different safety terms, an independent panel handed the industry’s frontier labs a round of C’s and F’s, and Illinois became the first state to pair AI safety disclosure with real audits.
A jailbreak took a frontier model off the market for two weeks — and gave the industry its first shared severity rubric. Plus: the EU delays its high-risk AI rules, and a US executive order’s cyber deadlines come due.