Anthropic's own models breached three real companies

Anthropic reviewed more than 141,000 cybersecurity evaluation runs and found three incidents where a Claude model reached the open internet from its test environment and then compromised a real organization. Claude Opus 4.7 extracted infrastructure credentials and read several hundred rows of production data, and Claude Mythos 5 published malicious code to the Python Package Index that then ran on fifteen real systems. Mythos correctly identified that publishing the package would be a real attack, then convinced itself it was still in a simulation.

US District Judge Rita Lin said at a hearing that the Trump administration has not produced evidence justifying the Defense Department's decision to label Anthropic a supply-chain risk and bar federal agencies from its technology. Lin called the argument that Anthropic's public criticism of the department justifies the ban "really troubling," warning that it could license retaliation against any contractor that disagrees with the government. She temporarily blocked the ban in March and is now weighing whether to make that order permanent.

Gemini Robotics 2 is a three-model system, pairing a vision-language-action model for motor control with an embodied reasoning model for planning and an efficient on-device variant. The headline capability is intelligent whole-body control, letting a humanoid walk, crouch, reach and manipulate an object at the same time rather than treating locomotion and manipulation as separate problems. Demonstrations ran on Apptronik's Apollo 2 humanoid and several research platforms. The reasoning model is available now in Google AI Studio; the other two are limited to early-access partners.

The July 28 revision of the Model Context Protocol removes the initialize handshake and the protocol-level session, so every request is now self-contained. That is the change enterprises had been waiting on: a remote server can sit behind an ordinary round-robin load balancer with no shared session storage. New routing headers let gateways dispatch requests without parsing the body, and tool listings become cacheable. The legacy streaming transport, plus roots, sampling and logging, are deprecated with a twelve-month support window.

Across Chrome milestones 149 and 150, Google fixed 1,072 security bugs — more than it fixed across the previous twenty-three milestones combined. The work runs through a chain of Gemini-based agents: one hunts for vulnerabilities, one writes candidate fixes, a critic agent reviews them, and test-writing agents cover the result, alongside DeepMind's CodeMender and Project Zero's BigSleep. In May alone, continuous scanning blocked more than twenty vulnerabilities from reaching production rather than shipping and patching them later.

Reddit posted $805 million in second-quarter revenue, up 61 percent year over year, and net income of $253 million. The stock still fell more than 10 percent after hours, because US daily active uniques slipped to 53.2 million from 53.5 million and chief executive Steve Huffman said search referrals were choppy as Google's AI summaries answer questions that used to send readers to Reddit threads. The company also signaled that it may not renew its 2024 data-licensing deal with Google on the same terms.

Nscale, the British AI cloud that raised two billion dollars in March at a $14.6 billion valuation, is acquiring Anyscale, founded by the creators of the open-source Ray framework. Bloomberg reported the price at $1.65 billion; neither company disclosed terms. The logic is vertical integration — Nscale already owns power, data centers and GPUs, and Anyscale supplies the layer that machine-learning engineers actually schedule work on. Ray was donated to the PyTorch Foundation in 2025 and stays community-governed, with Nscale joining the foundation.

Okta agreed to acquire Permiso Security, which monitors what human, machine and AI-agent identities actually do inside cloud environments after authentication. TechCrunch put the price just under $200 million, against roughly $29 million Permiso had raised. The pitch is that identity security no longer ends at the login screen: Permiso's SandyClaw sandbox inspects agent skills for supply-chain attacks before deployment. Okta cited its own finding that 58 percent of executives reported an AI-related security incident or near miss in the past year.