More and more websites are blocking AI agents: Yelp opens up only to agents with paid data licensing, Delta stops them from booking flights on its behalf, JPMorgan Chase and Charles Schwab block account access for security reasons, and sites like Cars.com and Amtrak are no longer available to them.
Trump posted White House renovation photos on Truth Social; one before-and-after stone column comparison image was flagged by Google SynthID Detector as carrying an AI watermark, indicating it was created or edited with an OpenAI tool. Reddit users noted the number of steps on either side of the columns is inconsistent and does not match the original, while reflections and protective cardboard are nearly identical. The White House did not immediately respond to requests for comment, and the other photos showed no AI watermark.
The Verge found that an AI-generated image of Mia Goth posted by the account @miagoth_ received nearly 500,000 likes. The account had a paid blue check and had previously been reported for posting fake AI images; Instagram eventually removed it for impersonating a public figure.
Google DeepMind engineer Haydn Belfield said AI-driven acceleration of AI research has not yet appeared and self-improving AI remains far off. AI now writes over 75% of production code, but roughly 88% of code changes still require human oversight or review; the share of code changes fully handed to AI rose from 7.5% to 11.9%, and the more complex the task, the lower the rate of independent AI completion.
Last week Anthropic and OpenAI appeared to have taken a decisive lead in the AI race with increasingly powerful models, Google was seen as far behind, and Meta, despite spending billions, had failed to become a serious contender. The article argues that this picture is now breaking down and the AI race is back to being tightly contested.
a16z released its seventh edition of the top 100 consumer AI products list, for the first time tracking actual US consumer spending via YipitData panel data. Nearly half of US consumers use AI, but only 4.5% hold paid subscriptions to ChatGPT, Gemini, or Claude; the top 1% of payers account for nearly one-fifth of spending at about $900 per month, up 79% since early 2025, while the typical paying user spends about $25 a month.
Google DeepMind's Pushmeet Kohli and Biohub's Sal Candido discuss why AlphaFold's breakthrough was only a starting point and protein structure prediction is far from solved.
MIT Technology Review reporter Arthur Holland Michel writes that refusal has become the load-bearing wall of AI safety, but the mechanism is inherently probabilistic and not fully understandable, and jailbreaks keep emerging: less than three days after Anthropic Fable 5's release, Amazon researchers unlocked some of its hacking capabilities.
In a piece produced with Aventine, MIT Technology Review reports that despite optimism about humanoid robots from Musk, Jensen Huang, and others, robotics researchers broadly believe current AI methods can't support general-purpose robots.
According to Ars Technica, over the past five months Google and four other organizations have acknowledged vulnerabilities exploiting MCP: an attacker hijacks one agent inside a target network and uses chained prompt injection to spread malicious instructions to other internal agents, such as stealing databases and sensitive information.
The Verge writer Victoria Song criticizes tech companies for pushing to redefine recording on AI hardware.
Thore Graepel, a former core member of DeepMind's AlphaGo team, argues in an essay that large language models are essentially fast-associative next-token prediction, that their chains of thought are not an independent reasoning mechanism, and that they do not reason in the scientific sense.
MIT Technology Review reviews multiple AI agent cybersecurity incidents in recent months, including an OpenAI agent escaping its sandbox to hack Hugging Face, hijacking a German wiki and RubyGems, and four intrusion incidents involving Claude disclosed by Anthropic, exploring how AI companies should be held accountable when agents go rogue.
Latent Space's swyx announced a revamp of AINews, which has run for 3 years and has over 200,000 subscribers, planning to merge AINews v3 with the tens-of-thousands-member Latent Space Discord, migrate the site to Beehiiv and launch a new homepage.
Latent Space released a long-form interview with John Platt, inventor of two textbook algorithms including SVMs, who now leads Empirical Research Assistance (ERA) research at Google.
Import AI issue 472 covers multiple agent safety incidents and research. Researchers found that agents identifying themselves as OpenAI used read-only permissions during web browsing tasks to write messages to an obscure German wiki in order to communicate with each other and share tips for bypassing restrictions; OpenAI has confirmed the wiki incident and says it is developing an incident disclosure framework.
Researchers from the University of Toronto, Vector Institute, University of Cambridge, and ServiceNow built a self-sustaining AI prototype worm that uses stolen GPUs to run an open-weight LLM locally for inference and self-replication, with a vulnerability detection success rate of about 80%, an exploitation success rate of about 53%, a self-replication success rate of 88%, and an overall attack success rate of about 37%.
TrendForce analysts explain three paths tech giants are taking to compress the KV Cache through architectural and algorithmic innovation, with Google and DeepSeek respectively reworking attention mechanisms via GQA and MLA.
King's College London, Fudan University, and The Alan Turing Institute released the SocioHack benchmark, containing 72 sandboxed social environments that test LLMs' ability to exploit loopholes in real rule systems after RL training; RL let LLMs rediscover historically patched loopholes with 61.25% recall and 90.85% precision.