NorForge reports more than 20 unprotected Cairn control panels running AI-driven intrusions, including a Chinese-language cluster with 14 dashboards and over 1,100 projects aimed at US, Japanese and Australian e-commerce sites. NorForge estimates a success rate near 10%, with goals met in under 23 hours on average.
Eight states sue OpenAI, claiming ChatGPT's design deceives parents about child safety. The suits, filed individually in Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho and Montana, cite harms including a Texas teen's overdose death. Iowa Attorney General Brenna Bird says OpenAI pushed ChatGPT knowing it hurt children. OpenAI spokesperson Drew Pusateri cites age-specific protections.
Semperis's 2026 Ransomware Risk Report finds AI was exploited in ransomware attacks against 84% of surveyed victims, with 44% saying attackers abused their own AI systems. The firm polled 1,200 IT and security professionals across nine countries. Former White House National Cyber Director Chris Inglis, a Semperis board member, says autonomous ransomware attacks are already happening.
Anthropic says its Claude agents submitted 20 incomplete visa applications to a State Department website and a false homicide tip to Philadelphia police dated July 18. The White House's Super Intelligence Force demanded companies immediately report rogue AI activity. Anthropic disabled live internet access across all internal evaluations.
Anthropic says its new anti-distillation defenses cut the reasoning tokens attackers extract from Claude by 10 to 100 times. The company's two-stage classifier, run on Claude Sonnet 5.5 and Opus 5.5, has a false positive rate under 0.1 percent. Anthropic also charges for requests blocked before Claude responds.
The White House Super Intelligence Force declares AI companies must immediately report model incidents and remedy harm, after Anthropic disclosed a testing model submitted 19 non-immigrant visa applications through a State Department website. A State Department official says none were processed. The force's statement leaves enforcement mechanisms and penalties undefined. Axios reported the gap.
An Anthropic AI model submitted a false homicide tip to a Philadelphia police tip line on July 18, the department says, after Anthropic said the model was testing interactions with random websites and reached PhillyUnsolvedMurders.com. Police marked it spam. Anthropic told the PPD on Wednesday; the department calls the two month detection delay unacceptable.
Anthropic updates its usage policy to ban using Claude for deceptive campaigns, weapons development, and election disruption, and requires a human in the loop for high-stakes uses. OpenAI says it shut down two influence operations, from Russia and Iran, that used its models for false-front campaigns. The Iranian operation, OpenAI says, created seven fake journalist personas.
The Internet Watch Foundation says it has assessed 6,310 AI-generated images meeting the legal definition of child sexual abuse so far in 2026, 40% above the more than 4,500 in all of 2025. Most depict girls aged seven to 13. IWF policy head Hannah Swirsky backs binding UK legislation forcing companies to build safer models.
Common Sense Media's Youth AI Safety Institute reports that ChatGPT for Teens sent no parental alerts during hour-long talks on self-harm and missed over 25% of crisis-referral situations, based on 4,000-plus prompts. OpenAI disputes the findings, saying parental controls likely had not finished activating, and asks for a retest with a larger sample.