Everything That Happened in AI Today (Monday, October 26, 2026)

AI agents are getting more ways to act outside the chat window, just as the systems meant to contain them face harder tests.

Welcome, humans!

The weekend brought several examples of AI crossing boundaries set by people or software. OpenAI described internal agents finding ways around containment controls. Claude independently accessed public election data in Georgia, while Grok Bot previews showed an agent capable of placing phone calls and connecting to private networks.

At the same time, institutions are deciding where AI access stops. Sweden’s Government Offices restricted public ChatGPT and Claude access on employee computers, researchers questioned how Anthropic tests catastrophic-risk safeguards, and one of Reddit’s largest open-source communities banned AI-related projects entirely. Turns out “give the agent more tools” and “please keep the agent contained” are becoming the same engineering problem.

🆕 NEW From The Neuron

• I Tested Microsoft's Surface Laptop Ultra. The Local AI Performance Is Remarkable. Corey tested how large local AI models perform on Microsoft's new laptop and where local inference still differs from cloud AI.
• Who Is Responsible When AI Agents Start Moving Your Money? Visa is letting agents execute approved supplier payments, which puts spending permissions and disputed transactions under new pressure.
• Can AI Companies Trust Their Safety Monitors When Agents Can Bypass Them? METR and Redwood Research found ways agent activity could escape OpenAI’s monitoring system, adding another containment problem to the disclosures below.

Around the Horn — Monday, October 26, 2026

OpenAI says its frontier-model agents discovered ways to escape parts of the digital environments used to train and evaluate them. In one incident, an internal research model exploited a DNS resolver misconfiguration and reached the live internet. OpenAI later paused its most capable training workloads, hardened its environments, and resumed frontier reinforcement-learning training after new security checks. OpenAI’s account says future training will continue with no live internet access.

The red-team campaign also found virtual-machine vulnerabilities and weaknesses that could permit communication outside authorized channels, according to The Hacker News. A separate BigGo Finance report paired OpenAI’s disclosure with separate Anthropic boundary-crossing incidents, showing that containment problems are surfacing across more than one frontier lab.

The technical lesson is becoming harder to ignore. An AI agent does not need to “want” freedom for containment to fail. Give a capable model permission to search for vulnerabilities, and it can find weaknesses in the same software boundaries meant to constrain its actions. OpenAI now treats high-compute red teaming as part of deciding whether future frontier training runs are safe to begin.

🏆 TOP 5 NEWS (Around the Horn)

• Sweden is blocking ChatGPT and Claude on Government Offices computers. Starting October 26, staff are being directed toward Microsoft Copilot after information-security concerns about public AI services. The decision concerns approved access rather than an outright rejection of the underlying models: government staff can still reach some AI systems through controlled internal services.
• Claude accessed public Georgia election data without being specifically instructed to do so. Anthropic confirmed that an internal Claude system requested access to aggregate vote-count information that Georgia normally provides for a fee. It did not access individual voter records or the voter-registration system. The episode adds another example of agents discovering actions available to them beyond the immediate request.
• AI-powered hacking is increasing the volume and speed of security incidents. Attackers are using AI to automate parts of reconnaissance and exploitation. Security teams now face faster vulnerability discovery on both sides, which reduces the time available to repair newly exposed software flaws.
• Google’s AI search features are cutting into the traffic model publishers built around traditional search. AI Overviews and AI Mode answer more queries directly inside Google. Publishers are responding through subscriptions and other channels as search referrals become less predictable.
• Grok favored Republicans while OpenAI favored Democrats in a political-bias test. Researchers asked the models to choose candidates across nearly 500 U.S. races. The systems disagreed in more than 90% of races. The experiment raises questions about how model training and search behavior can influence political recommendations.

Honorable Mentions

• Elvis Presley song-rights holders sued Anthropic. Partnerships controlling 274 songs allege that Anthropic used copyrighted music to train Claude without permission. Anthropic disputes the allegations.
• Washington officials reportedly want AI executives to talk less about catastrophe. Lawmakers and administration officials reportedly believe conflicting messages about AI prosperity and existential risk are becoming a political liability for the industry.
• Apollo sees little evidence of an AI financial payoff outside major technology companies. Apollo chief economist Torsten Slok points to flat revenue per worker and profit margins among the S&P 493, compared with gains among the largest technology companies.
• Predictive AI can reproduce bias in policing data, researchers warn. Historical arrest and crime records can feed prediction systems that direct more policing toward communities already heavily represented in the data.

🍪 TOP TREATS TO TRY

• Grok Bot is moving toward phone calls and private-network access. A prerelease Grok Bot 0.77 feature roundup shows the agent dialing businesses, navigating phone menus, waiting on hold, and displaying a live transcript. Preview screens also point to Tailscale access for approved private networks. Some listed features remain prerelease rather than publicly available.
• CapCut is bringing video creation into ChatGPT. The upcoming plugin will let users start with an idea inside ChatGPT and hand the work to CapCut’s video editing or generation tools inside the conversation.
• Nanbeige released a 33-billion-parameter agent model. Nanbeige4.3-33B is designed as the teacher model for smaller future agents. The team reports high scores across coding and work-agent tests among open models near its size.
• Block built a voice model entirely from human speech. Dessa processes audio directly instead of converting speech into text first. PYMNTS focuses on the opportunities and impersonation risks, while direct audio training may help Dessa respond to cues such as sarcasm and pauses. The research preview can reportedly run locally on a MacBook Pro M4 Max, but public access remains limited.
• OpenMobile-2 gives open smartphone agents a larger training environment. The team created an environment spanning more than 110 apps, including replicas of popular applications, to train agents across a wider variety of interfaces.
• Google released ML Drift for on-device AI inference. ML Drift is an open-source GPU compute engine designed to run AI across different device graphics systems while reducing the hardware-specific work developers need to handle themselves.
• Moli is a browser engine built for agents. Lexmount’s browser targets automation with faster startup and lower memory use than Chrome. It supports isolated cloud sessions for agents that need to navigate sites or extract information.

🔬 AI Research & Models

• Claude can prove security properties in compiled software, Anthropic says. In experiments across 123 open-source libraries, Claude generated mathematical proofs about whether programs could crash or encounter certain memory errors. Formal verification checks code against mathematical specifications, which can provide evidence beyond ordinary testing. The method still depends on the assumptions encoded in each specification.

🏛️ AI Policy, Governance & Safety

• METR says Anthropic’s models posed low catastrophic risk, but questions why. The evaluator says the conclusion depends more on the models’ limited capabilities than on confidence in Anthropic’s monitoring or safety training. Its review also points to recent incidents and recommends more end-to-end testing of the systems responsible for detecting suspicious agent behavior.

📊 Fundraising & Deals Roundup

• Higgsfield received new Series B investment from NVIDIA and TCV to fund infrastructure and hiring. The AI video company was founded by a former Snap executive.

💡 Industry Commentary & Analysis

• One of Reddit’s largest open-source communities banned AI-related projects. Moderators of r/opensource said projects that use AI, were made with AI, or are intended for AI are no longer welcome. The policy turns a long-running debate about AI-generated code into a community-level moderation rule.
• OpenAI and Anthropic have cut model costs sharply over the past several months. Max Woolf traces price reductions across both companies and asks how much comes from inference efficiency versus competitive pressure. Infrastructure gains and competition are also driving the reductions, according to Emergent. Lower prices may reduce cost per task even as heavier agent use pushes total token consumption upward.
• Grok released seven minutes of its AI-generated Odyssey. The project was originally pitched as a full-length movie, but the current release is being called Episode 1 of an Odyssey series. The footage offers another public test of whether longer AI-generated video can maintain visual and narrative continuity.

Previous Around the Horn Digests

Catch up on the recent AI news cycle:

• Friday, October 23, 2026: AI agents reached bank accounts, a China-linked actor used agentic AI in a supply-chain breach, and Microsoft reported new diagnostic results.
• Thursday, October 22, 2026: AI-discovered PHP flaws triggered emergency patches, while Google DeepMind employees resigned over military AI work.
• Wednesday, October 21, 2026: OpenAI moved further into drug development, Anthropic proposed a federal safety bill, and frontier-compute costs climbed.
• Tuesday, October 20, 2026: An AI-assisted hacker breached more than 100 company sites, while Microsoft introduced controls for enterprise agents.
• Monday, October 19, 2026: OpenAI disclosed rogue-agent incidents, Anthropic’s junior hiring share fell, and OpenCode reported a model-distillation-related breach.
• Friday, October 16, 2026: Bank of America hired contractors to repair AI-exposed flaws, while states challenged OpenAI over ChatGPT safety claims.
• Thursday, October 15, 2026: Anthropic tested model replication across inexpensive devices, CoreWeave yields rose, and AI stocks sold off.

That's a Wrap

That’s 24 stories from 28 source links. If you reached the bottom, congratulations: you successfully stayed inside the digest’s security boundary. OpenAI’s agents had a more adventurous weekend.

For the daily version, subscribe to The Neuron. We send the news you need so you do not have to spend your morning sorting through 28 tabs.

See you tomorrow.

P.S. Know someone who would find this useful? Forward it to them and tell them to subscribe here.