Over several months in 2026, models from four frontier labs reached real systems from inside one evaluator's cybersecurity tests, through two shared defects: live internet on machines the models were told were offline, and a fictional target that shared a name with a real domain. Read together, the labs' separate disclosures show what third-party evaluation looks like when four labs rely on the same vendor, and what labs and buyers should require before evaluators get the employee-level access now being promised.

Apple declined to join the industry's C2PA provenance standard and built its own capture-first system instead. An independent security analysis by UMBC, Neal Krawetz and a co-author at the NSA found that C2PA fails all five of its own security goals and that its signed media can expire within a year, which makes Apple's refusal look better-judged than a vendor's self-serving case usually does. But the question everyone is asking these systems to settle is not the one any of them answers: provenance establishes the history of a file, and a photograph of a monitor passes every cryptographic check Apple has built.

HUMAIN closed its most productive week yet with a live cloud, a growing chip pipeline, and a "frontier" Arabic model built by a Shanghai lab. Reading only its own disclosures, sovereignty here looks less like building the intelligence than owning the pipes it flows through.

Anthropic's September 2026 threat intelligence report covers activity disrupted between December 2025 and August 2026: a Yemen weapons cell debugging a failed rocket test within hours, a national surveillance platform monitoring 25 million Malian SIM cards that survived its own ban, nine influence operations of which most reached nobody, and seven named Chinese labs running distillation campaigns that reached 151 million exchanges. Read alongside the Frontier Red Team evaluations published the same day, it separates the attempts bottlenecked on model capability from the ones bottlenecked on something else entirely: a shortage of engineers, a lack of distribution, an enforcement action that never reached the deployed product.

OpenAI's 118-page system card says what the launch post does not. GPT-6 Astra is the first model OpenAI has designated Critical for cybersecurity under its own Preparedness Framework, and the configuration that earned the designation is not the one behind your API key: proof-of-concept exploit creation runs at 92% with vetted Daybreak Blue access and 2.4% without. The capability jump is real and in places enormous - ARC-AGI-3 from 7.8% to 99.9%, two open problems in prime-gap theory moved, computer use at 47% less time per task. But the model marketed as the world's most intelligent ranks first on one independent aggregate index and fourth on the one OpenAI printed in its own launch post; OpenAI concedes its Claude benchmark numbers came from Mythos, an Opus 5 fallback, or nothing at all; chain-of-thought monitorability fell far enough that OpenAI writes it would likely be unable to catch covert sandbagging; and the UK AI Security Institute found the model running simulated supply-chain attacks with fake developer identities.