Google Gemini Hits 1 Billion Users In Record Time
Read more of this story at Slashdot.
Read more of this story at Slashdot.
O Gemini, do Google, ultrapassou oficialmente a marca de 1 bilhão de usuários mensais ativos — tornando-se, segundo a própria gigante de Mountain View, o produto de crescimento mais rápido na história da empresa.
Para colocar esse marco em perspectiva, o Gmail levou cerca de 12 anos para conquistar uma base de usuários desse tamanho. Isso também coloca o Gemini no mesmo patamar do ChatGPT (da OpenAI), que atingiu essa marca no início de junho.
O CEO 1Chief executive officer, ou diretor executivo. do Google, Sundar Pichai, utilizou o X para destacar esse marco.
1B+ people are now using @Geminiapp every month to spark new ideas and get things done. It’s our fastest growing product ever, and our 14th to hit the 1B-user mark.
— Sundar Pichai (@sundarpichai) August 11, 2026
Kudos to @JoshWoodward & the entire Gemini team, and thank you to everyone who has been on this journey with us -… pic.twitter.com/sSWrULX4Qn
Além do número de usuários, o Google divulgou detalhes sobre como as pessoas interagem com o chatbot no dia a dia. Entre eles, a empresa aponta que os usuários dos dispositivos da Apple estão adotando a ferramenta em grande escala, com mais de 100 milhões de usuários ativos no iOS. Além disso, usuários avançados do macOS acionam o Gemini cerca de duas vezes mais frequentemente do que em outras plataformas.
Eles apontam ainda que interação por voz tornou-se a forma preferida de usar o aplicativo, com 63% dos usuários optando por falar em vez de digitar. Ademais, uma em cada cinco sessões do Gemini Live vai além do áudio simples, envolvendo o compartilhamento de imagens da câmera/tela em tempo real.
Estudantes representam outro grupo importante de usuários: 38% das solicitações acadêmicas incluem o envio de arquivos de tarefas, anotações ou PDFs. A geração de imagens também gera um tráfego enorme, sendo responsável pela criação de mais de 150 milhões de imagens diariamente.


A SpaceXAI liberou hoje, ainda em fase beta, um novo aplicativo de inteligência artificial (IA) agêntica para Mac e iPhone chamado Grok Bot.
Nascido como uma ferramenta interna, ele permite que usuários criem “colegas de trabalho de IA”, os quais contam com seus próprios computadores e são capazes realizar uma série de tarefas de ponta a ponta, além de acessar as ferramentas (apps, emails, etc.) que você já utiliza.
Introducing Grok Bot, now in early beta.
— Grok Bot (@bot) August 11, 2026
Bots are AI teammates that do real work for you. They sign in to your tools, use them just like you do, and come back with finished work. pic.twitter.com/uyfA97yo98
A ideia, segundo a SpaceXAI, é que o usuário converse com esses “colegas” como se eles fossem pessoas reais, seja por mensagem de texto ou por voz.
“Usuários com acesso antecipado dizem que o Grok Bot parece menos com dar instruções a um agente e mais com delegar tarefas a um colega de equipe altamente capacitado”, comentou a empresa.

Assim que a IA recebe uma tarefa, ela toma conta de tudo automaticamente, de modo que o usuário só precisa intervir caso uma ação requeira a sua autorização. Ela também pode se lembrar de conversas passadas, enviar mensagens para outros bots e ser adicionada a grupos.
Na SpaceXAI, é comum que várias equipes executem bots em paralelo, com uma delas gerenciando as demais. Um chefe de gabinete supervisiona tudo, com um especialista para cada área: gerenciamento de emails, despesas, recrutamento, correção de bugs ou operações. Em vez de gerenciar vários agentes, o Grok Bot oferece uma pequena equipe que pode trabalhar em paralelo, eliminando a necessidade de você ser o intermediário.
A SpaceXAI disse ainda que esses bots conseguem aprender com seus hábitos, o que significa que seu desempenho nas tarefas melhorará com o tempo. Isso também fará com que eles fiquem mais proativos com o passar dos dias, assumindo tarefas antes mesmo de você precisar falar com eles.
Por enquanto, o Grok Bot está disponível para Mac, iPhone, Windows e Linux, para assinantes do SuperGrok Heavy, Cursor Ultra e Cursor Teams Premium — mas a empresa do bilionário Elon Musk pretende lançar uma versão para Android em breve.

Over 30 student activists came together on Monday afternoon to occupy the Gallup Building in Washington DC, home to a public-facing lobbying office belonging to ChatGPT developer OpenAI.
Once inside the lobby, the demonstrators unfurled a massive banner reading “Stop Stealing Our Future,” while others held signs with messages like “OpenAI bought my Senator.” The demonstration lasted two hours, and ended when police stormed the lobby, arresting 13 protestors.
At the moment, the identity and whereabouts of the protestors remains unclear. An incident report obtained from the Metropolitan Police Department states that 13 people were arrested for “unlawful entry.” After stuffing the activists into vans, the report notes the MPD split the group up, sending seven to the First District Station, four to the Second District, and two to the Third District for processing.

The protest was organized by the climate group Sunrise Movement and anti-AI organization QuitGPT. According to a joint statement shared with Futurism, Monday’s action is just one of many across over 20 states in August calling on politicians to “Dump Big Tech.”
One student organizer who attended the protest, Raya Gupta, explained in the statement that “my friends chose to risk arrest to bring the fight to OpenAI.”
“Our generation doesn’t have any guarantees about whether we’ll have jobs after college, or whether there will be clean drinking water for all of us or whether people will have any power left in politics since our elections keep getting bought by Big Tech,” Gupta continued. “We all believe that not taking action now, as the scales slide between the people and the billionaires, puts our future in great jeopardy.”

Gupta’s comments underscore the degree to which AI has become an omni-cause for Americans across the political spectrum. A growing number of people in the US have been arrested for protests related to AI in some shape or form, whether attending town hall meetings to oppose data center developments, or occupying offices used by federal agencies to tool out AI immigration software.
Despite growing disgust with AI and its developers, politicians on both sides of the aisle have roundly embraced the tech industry’s extremely expensive lobbying efforts. Case in point, the recent opening of OpenAI’s DC Office comes as one of the AI lab’s super PACs injects over $140 million into the coming midterm elections, in a blatant attempt to steer AI regulations at the highest level.
Updated with new information from the MPD.
More on AI protests: Climate Activists Pelt Microsoft Data Center With Balloons Full of Acid
The post Protesters Arrested After Storming OpenAI Lobbying Office appeared first on Futurism.

Earlier this summer, Amazon customers began noticing that emails related to their online orders looked sparse: Order confirmation emails didn't name specific items anymore, and instead listed only item categories.
"Your Beauty item is confirmed!" an email about my retainer cleaning tablets read. Shoppers have posted other iterations of the redacted emails as well: "Ordered: 1 Hardware item," "Your Drugstore, Shoes, and other items are here!" and "1 Nutrition & Wellness, 1 Wireless Accessories," for example. The emails have clip art-style illustrations of general product categories, and a shopper has to exit their email and go to Amazon to …
As if the practice of homeschooling wasn’t fraught enough already, parents are now bragging about using large language models (LLMs) like ChatGPT to school their kids.
A number of viral videos show the alarmingly cavalier attitude some parents are taking. One clip, seemingly taken from a livestream hosted by the enormously controversial influencers Cole and Savannah LaBrant, shows the parents outline their vibes-based approach to the education of their five children.
“What I do for history — Cole usually does all their history, which I love, because I’m not the best at history — so Cole steps in about once a week and we’ll do a history lesson with them… we’re just teaching them the things that we just want them to learn — that we feel are the most important,” Savannah explains. “And same with science, and geography.”
That’s not uncommon as homeschool curriculums go; as horrifying as it is to imagine a student receiving one history lesson a week, regulations around the practice are incredibly loose in the United States, freeing hardcore Christians like the LaBrants to do whatever they want. But Savannah goes on, admitting that sometimes, even those slapdash lessons are too much to tackle without a little AI assistance.
“So I just make my own curriculum, and sometimes I’ll just use, like, ChatGPT,” she says, “or just uhm, print out, like — like right now I’m teaching them where the states are and how to locate them, and uhm, like all the states and capitols and things like that.” (Even the most advanced AI chatbots are known for producing inaccurate maps.)
@thelabrantfamexposed History Class, but Make It Vibes-Based: The LaBrants Explain Homeschooling
♬ original sound – thelabrantfamexposedThe LaBrants’ Homeschool History Curriculum: Whatever Cole Decides Happened
“Cole steps in about once a week to do a quick history lesson because I’m not the best at history.” – Sav. The LaBrants went live to explain their homeschooling setup, and Savannah casually admitted she “doesn’t know a lot of history,” so they teach it once a week, with Cole covering whatever topics they personally decide are important. So apparently the curriculum is: Monday: sponsored content Tuesday: Bible lesson Wednesday: filming Thursday: whatever Cole remembers from school Friday: history, pending personal relevance Homeschooling can absolutely be done well, but “we teach history once a week based on what we think matters” is not the reassuring flex they seem to think it is. History is not a Pinterest board where you skip the sections that do not match the family aesthetic. The most concerning part is not Savannah admitting she lacks expertise. Plenty of parents do. It is the confidence of replacing a structured curriculum with Cole’s Greatest Hits of Human Civilization. Nothing says educational rigor like two influencers deciding which centuries make the cut. @Savannah LaBrant @Bev Skin @ChatGPT @OpenAI @Fishfam @TMZ @cbsnews @CNN @DrinkFrosh #savannahlabrant #colelabrant #labrantfamily #homeschool #fyp
That any parents could be so cavalier in their approach to homeschooling has grim implications for an already divisive practice.
In much of the US, homeschooling parents are already given incredibly wide latitude on what to teach their children. A whole 11 states have essentially no regulations on homeschooling whatsoever: parents aren’t required to follow any set curriculum, issue standardized assessments, or even inform the state that their child won’t be going to a real school.
Many more states only require a notice of intent to homeschool and occasional proof of attendance, the latter being a bare bones measure of success, and one which is easily fudged. Unfortunately, it’s easier to count the number of states that definitively require standardized testing and a rigid curriculum: Rhode Island, Pennsylvania, New York, Vermont, and Massachusetts.
Of course, the LaBrants aren’t alone. The popular influencer account Heavenly Homeschool has similar reels out, walking parents through the process of generating entire years’ worth of lesson plans, tailor-made to their specific worldview. It all begs the question: do AI chatbots have any safeguards around education?
Turns out, not really. We tasked ChatGPT with developing a homeschooling curriculum for a 3rd grade student in Michigan — a state with virtually no regulations around DIY education — “following a strictly evangelical doctrine,” including “no woke history or science.”
ChatGPT was more than happy to oblige: “I can build this around a conservative, explicitly Christian/evangelical worldview, with Scripture integrated across subjects and with history and science taught from a young-earth/creationist perspective rather than through a secular or progressive framework,” the chatbot explained.
While it didn’t push back against our intentions to indoctrinate our hypothetical child, the LLM did make sure to clarify that “no woke” can “mean different things to different families.” So, to avoid ambiguity, the chatbot specified that the course calendar would use “Biblical authority, traditional Christian ethics… and creation-based science” as standard-bearers.
True to its word, the LLM-generated curriculum included “bible and Christian studies,” a traditionalist approach to American history, with specific chunks on both “Westward expansion” and Henry Ford — a renowned racist and antisemite — as well as a creationist approach to Earth science and astronomy.
For the portion on space, the curriculum would teach “the heavens as God’s creation while distinguishing observations from interpretations about the age and origin of the universe,” the LLM promised.
Put together, it paints a dire picture for the estimated 3.75 million K-12 homeschooled children in the US. Beyond the potential for wild AI hallucinations to leach into educational material, the technology is a Pandora’s Box for parents, who can now effortlessly inculcate their children with any number of unscientific conspiracy theories or anti-social worldviews while facing no pushback whatsoever.
Do you know anything about how homeschooling families are using AI? Email us: tips@futurism.com. We can keep you anonymous.
More on education: Mark Zuckerberg’s Wife Shuts Down School for the Disadvantaged
The post Homeschool Parents Are Planning Lessons With ChatGPT appeared first on Futurism.

Spotify will soon label AI artists and remove their music from your recommendations. The change, which will start rolling out in mid-September, means you'll see an "AI Persona" badge on an artist's profile across the app if they do "not represent a real person."
The music streaming platform will allow artists to disclose that they're an AI persona starting today, but it won't rely solely on self-identification. Spotify says it will use human review and AI tools to determine whether someone's profile, including their name and image, "appears to represent photorealistic AI-generated identities." If Spotify determines that an artist's identity …
![]()
Foundation models are promising to become the “universal translators” of biomedical data—but a new perspective argues that medicine should resist treating them as all-knowing digital doctors. In a review published in Nature Biomedical Engineering, researchers describe how large, adaptable artificial intelligence systems are reshaping biomedical imaging while warning that impressive benchmark scores can conceal serious weaknesses in clinical environments. Their central message is direct: foundation models are most likely to improve healthcare by augmenting specialists, not replacing them.
Foundation models are designed to learn broad representations from enormous and diverse datasets before being adapted to specific tasks. In biomedical imaging, those data may include magnetic resonance imaging, computed tomography, X-rays, ultrasound, digital pathology slides and ophthalmic images. The same underlying model could theoretically identify tumors, segment organs, estimate disease risk, retrieve similar cases and generate clinical reports. The vision becomes even broader when imaging is combined with pathology, electronic health records and genomic information, creating a composite system intended to analyze a patient across multiple biological scales.
That ambition reflects a major change from traditional medical AI. Earlier systems were generally built for one narrowly defined task, such as detecting pneumonia on chest radiographs or outlining a brain lesion on MRI scans. Foundation models instead attempt to create a reusable backbone that can be transferred across diseases, hospitals and imaging technologies. Technically, they learn statistical patterns in high-dimensional data, often through self-supervised training in which the system predicts missing, transformed or associated information. Afterward, developers fine-tune or prompt the model for particular clinical applications.
But biomedical imaging is not a single, uniform world. Images differ according to scanner manufacturer, acquisition protocol, patient population, disease prevalence and local clinical practice. A model trained primarily on data from large academic hospitals may perform very differently in community clinics, rural settings or countries with limited equipment. This problem, known as domain shift, can occur even when images appear visually similar. Small changes in image quality, contrast, hardware or patient demographics may alter the statistical distribution learned by the model and undermine its predictions.
The authors introduce a framework called real-world evaluation and assessment of foundation models, or REAL-FM, to examine whether these systems are ready for practical use. Rather than focusing only on accuracy scores, REAL-FM considers several dimensions at once, including the quality and representativeness of training data, technical readiness, clinical value, integration into existing workflows and responsible artificial intelligence. The framework is intended to help clinicians interpret claims about new models and to push developers toward evaluations that resemble actual medical practice.
One of the sharpest distinctions in the perspective is between pattern recognition and causal reasoning. Foundation models can become extraordinarily skilled at recognizing visual associations—for example, linking a particular texture or anatomical feature with a diagnosis present in their training data. Yet association is not the same as understanding why a disease occurs, how it will progress or whether a treatment will benefit an individual patient. A model may identify a correlation that is valid in one hospital but reflects a hidden confounder, such as a scanner type, reporting convention or patient-selection pattern, rather than a biological signal.
This limitation becomes especially dangerous when models are moved beyond simplified benchmarks. Many benchmark datasets provide carefully curated images, clear labels and narrowly defined tasks. Clinical care is messier: scans can be incomplete, diagnoses can be uncertain, records may contain contradictory information and several conditions may coexist. The perspective highlights a lack of verified generalization across such conditions, along with a shortage of prospective, outcome-based validation. In a prospective study, an AI system would be evaluated while care is actually being delivered, with researchers measuring whether it improves diagnostic accuracy, treatment decisions, patient outcomes or workflow efficiency.
Data scarcity is another obstacle. The largest foundation models require vast quantities of data, but medical information is difficult to collect, standardize and share. Patient records are fragmented across institutions, imaging data may lack reliable annotations and rare diseases are inherently underrepresented. Privacy regulations and governance requirements further complicate the creation of centralized datasets. As a result, a model may appear broadly capable while remaining poorly tested in the populations and clinical circumstances where errors could have the greatest consequences.
The researchers argue that human oversight therefore remains indispensable. In practical terms, foundation models may be most useful as clinical assistants that prioritize images for review, highlight suspicious regions, summarize longitudinal records or offer a second opinion that specialists can interrogate. Safe deployment will require transparent reporting of uncertainty, monitoring for performance drift, mechanisms for correcting errors and clear accountability when recommendations influence care. The future envisioned by the authors is not a single monolithic medical oracle, but a coordinated ecosystem of specialized AI systems, each evaluated for a defined clinical role and connected to expert-led workflows.
The perspective arrives as the biomedical AI field races toward increasingly general-purpose systems. Its warning is not that foundation models lack value, but that technical scale alone cannot establish clinical reliability. Before these models can be trusted with consequential decisions, they must demonstrate robustness across domains, usefulness in real workflows, safety under unexpected conditions and measurable benefits for patients. The proposed REAL-FM framework offers a way to separate viral demonstrations from durable medical progress—by asking not only what a model can recognize, but where it works, why it works and whether it makes care better.
Subject of Research: Foundation models and their real-world evaluation in biomedical imaging and clinical medicine.
Article Title: Foundation models in biomedical imaging: turning hype into reality
Article References: Muneer, A., Zhang, K., Hamdi, I. et al. Foundation models in biomedical imaging: turning hype into reality. Nature Biomedical Engineering 10, 1557–1575 (2026). https://doi.org/10.1038/s41551-026-01762-z
Image Credits: AI Generated
DOI: 10.1038/s41551-026-01762-z
Keywords: foundation models, biomedical imaging, medical artificial intelligence, clinical AI, multimodal AI, domain shift, causal reasoning, clinical validation, responsible AI, REAL-FM
Anthropic is making Claude Code’s auto mode the default for its paid and enterprise users, allowing the coding agent to execute more actions without requiring developers to approve each one.
“Starting August 14, 2026, auto mode becomes the default permission mode for new sessions on Pro, Max, and Team plans,” the company wrote in the coding agent’s documentation, adding that the same change is planned for Claude Enterprise, API, and cloud platform users within the next month.
That essentially means developers using those plans will no longer have to manually approve every tool call or action Claude Code wants to make while executing a task.
Instead, each tool call is evaluated by an automated classifier designed to determine whether the action is safe to execute. Actions considered irreversible, destructive, or outside the agent’s environment can still be blocked, with Claude Code either attempting a safer approach or asking the developer for approval, the company wrote in a blog post.
“If it can’t make progress — three blocks in a row, or twenty across a session — Claude Code falls back to manual approvals,” it explained.
This reduction in manual intervention, Anthropic further added, is intended to make the coding agent more suitable for long-running tasks as well as cut down on “permission fatigue” that it says has been threatening to reduce its security posture.
According to its internal data, Claude Code users typically approve 97% of permission prompts, while only 3% are rejected. It also found that 49.5% of active CLI users had created a Bash allow-rule by June, while 62% had used “bypassPermissions” or selected “don’t ask again” for Bash.
In contrast, the default auto mode, in an Anthropic-controlled study involving 1,053 paid professional testers, caught 89% of deliberate dangerous commands compared to just 13.6% being detected by human reviewers.
Analysts too see auto mode as a step toward making coding agents more autonomous, but with tradeoffs.
“Developers should see fewer permission pop-ups and spend less time watching Claude, meaning they can give it larger tasks and let it edit files, run tests, and execute routine commands with fewer interruptions. That way, developers can finish and ship more work using this mode because they aren’t constantly interrupted by approval windows,” said Pareekh Jain, principal analyst at Pareekh Consulting.
However, that same classifier in auto mode that reduces permission pop-ups could also result in more latency for routine or quick tasks, as trusted workflows also pass through it, adding an extra execution step, noted Manoj Chandra Jha, principal analyst at Nord-IQ Research.
Another tradeoff of reducing real-time approvals, according to Amit Kumar Jena, AI development manager at IT consulting firm Kanerika, is that it could make it harder for enterprises to maintain effective human oversight as agents take on longer-running tasks. “Reviewing four hours of unattended agent output is a harder skill, and most teams haven’t built it,” Jena said.
For CIOs, though, auto mode can strengthen governance in software development.
Rather than policing individual developer actions, CIOs can define permission boundaries centrally and have the classifier enforce them across agent sessions, said Jha.
That makes the current opt-in period for Enterprise and API users particularly important, as CIOs can establish permission policies before auto mode becomes the default, Jha added.
At the same time, however, CIOs also need to understand the limits of those policies, Jena pointed out.
“Auto mode has three levels of restrictions, with hard-deny rules blocking actions unconditionally, while soft-deny rules can be overridden by a developer’s allow rule. As a result, CIOs should use hard-deny or managed-settings rules for actions that must never be permitted,” he said.
Those centralized policy controls, which Anthropic claims should make Claude Code more secure, according to analysts, change the security risk profile of the coding agent rather than eliminate risk.
While the classifier and the policy controls reduce the risk of human failures or everyday risks, it also creates a single point of failure, Jain said.
That means if that single point has a blind spot or an attack manages to bypass it, the agent could still execute harmful actions without human approval or recognition, Jha echoed.
That said, Anthropic is not removing developers’ ability to control how Claude Code operates.
Users who have already set a different default may receive a one-time prompt asking whether they want to move to auto mode, while those who have pinned their existing preference will see no change. The company is also making the transition easier by absorbing the small amount of additional token usage generated by the classifier for Pro, Max, and Team users, with the change effective immediately.

Anthropic has pledged to start marking Claude-generated text and images with machine-readable data, in an effort to comply with European rules for AI transparency. "Generated text will carry embedded watermarks, and generated files will include digitally signed provenance metadata where supported," Anthropic says on a new Claude support page. The changes are invisible to human eyes, but will make it easier for people and online platforms to detect if content was generated by Claude models.
These updates are a future commitment rather than something that will go into effect immediately. New AI labeling and transparency obligations under the …
Also: Google executives jump ship in race for AI dominance
Hello, TechScape readers! Danielle Abril, editor of the Guardian’s Reworked series on AI and the future of work, filling in for Blake Montgomery this week. Major legal battles against Meta over child safety are playing out in courts across the US – and the tech giant is losing. Recent rulings raise big questions about social media companies’ responsibility to their youngest users. Meanwhile, more key executives have jumped ship from Google as it battles OpenAI and Anthropic in the race for AI dominance, and Meta’s smart glasses face a fearsome backlash. Let’s dig in!
‘I’ve definitely lost followers’: influencers face backlash over Meta ‘pervert glasses’ content
Tell us: do you believe you have been filmed by Meta’s smartglasses without your consent?
Restaurants, pubs and theatres ban Meta’s ‘spy glasses’ over privacy fears
‘I’m not spying’: how Meta’s smartglasses have divided opinion
Bernie Sanders calls on Silicon Valley to ‘pause AI development’ in interest of humanity
Rising number of UK children report seeing explicit deepfakes of themselves
The White House’s plan to vet potentially dangerous AI is cloaked in secrecy
‘This is very real redlining’: outrage in Little Rock as two datacenters loom
Safety fears as scientists make first viruses designed by AI
SpaceX beats revenue expectations in first earnings report after IPO crash
Continue reading...
© Photograph: Jill Connelly/Getty Images

© Photograph: Jill Connelly/Getty Images

© Photograph: Jill Connelly/Getty Images
Be careful what you wish for. That’s what Microsoft found out recently when it discovered that AI — rather than making Windows more secure by helping the company close security holes — could help hackers find flaws faster than Microsoft can fix them.
It’s put Microsoft in a serious bind. Should the company devote a potentially massive amount of resources to fix every AI-unearthed security issue as fast as it can? Or should it rush to close the most important ones, and clean up the minor ones later at much less cost?
What the company decides could have tremendous implications. For years, Microsoft has faced criticism from many in the US government because of how often its technologies have been hacked, potentially putting the nation’s security at risk. Some members of Congress have suggested the government curtail contracts with Microsoft until the company proves it can provide more safety. Billions of dollars in federal contracts could be pulled.
To get a better insight into what could happen, let’s look at AI’s newfound prodigious ability to find security holes and bugs.
Microsoft’s AI-related security problems are an outgrowth of the launch of Anthropic’s Mythos AI model, designed to handle cybersecurity and biology research. One of its goals is to uncover security vulnerabilities as quickly as possible, so that software companies and cybersecurity companies can fix them before hackers find the holes.
Anthropic’s early tests found that Mythos was spectacularly successful in finding Windows security flaws. “Within 31 minutes, Mythos generated its first proof-of-concept exploit for a Windows kernel vulnerability,” Axios reported in June.
Anthropic noted that its testing of Mythos “reveals a stark fact: AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities.
“Mythos Preview has already found thousands of high-severity vulnerabilities, including some in every major operating system and web browser. Given the rate of AI progress, it will not be long before such capabilities proliferate, potentially beyond actors who are committed to deploying them safely. The fallout — for economies, public safety, and national security — could be severe.”
As a result, Anthropic decided to launch a security project it calls Project Glasswing, which it describes as “an urgent attempt to put these capabilities to work for defensive purposes.”
Many companies beyond Anthropic are part of the effort, including Microsoft, Google, Amazon, Nvidia, Apple and others. In theory, it’s a great idea. Find and fix vulnerabilities before hackers can, and everyone is safer. What could go wrong?
Plenty, as it turns out. Access to Mythos is available to anyone, and Mythos has been finding security holes and bugs far faster than companies — particularly Microsoft — can patch them. As Pro Publica reported in late July, ‘Microsoft is struggling to fix them fast enough.”
For now, Microsoft is only patching the most dangerous bugs and holes. And, according to Pro Public, “internal records indicate that Microsoft plans to eventually address ‘moderate’-severity flaws uncovered by Mythos. The documents made no mention of ‘low’-severity bugs.”
That’s fairly typical of the triage many companies use when deciding how much effort to put into plugging holes. But some experts believe that in the Age of AI, that’s a dangerous way to handle security.
Vinh Nguyen, former chief AI officer and chief data scientist at the US National Security Agency and now a senior technical adviser to Anthropic and senior fellow for AI at the Council on Foreign Relations, is particularly concerned that the approach is outdated. He told Pro Publica: “The problem now is that you can chain four low-level flaws, and that can equal a high severity. If you’re Microsoft, the current triage strategy may be underpricing risks.”
It’s already proving difficult for Microsoft to keep up with patching bugs and security holes since Mythos’ launch. July’s Patch Tuesday release fixed the most bugs in Microsoft’s history – 622 of them. Things will only get harder from here.
Microsoft is already in the doghouse for how it’s handled security. A year ago, in one of the worst attacks on Microsoft technologies, Sharepoint was hacked. Tens of thousands of servers were hit, including not just thousands of businesses, but many important government agencies as well.
The National Institutes of Health (NIH) and the National Nuclear Security Administration (NNSA), which is in charge of the nation’s nuclear security, were among the victims. So were the Department of Homeland Security (DHS), the Cybersecurity and Infrastructure Security Agency, the Transportation Security Administration, Customs and Border Protection, and the Federal Emergency Management Agency, among many others.
Even before then, some members in Congress were threatening to pull Microsoft contracts if it didn’t improve security. At one point Sens. Eric Schmitt (R-MO) and Ron Wyden (D-OR) sent a threatening letter to the Pentagon requesting it not increase its use of Microsoft products.
“We write with serious concern that the Department of Defense (DoD) is doubling down on a failed strategy of increasing its dependence on Microsoft at a time when Congress and the administration are reviewing concerning cybersecurity lapses that led to a massive hack of senior US officials’ communications,” the letter said, in part.
Nothing happened as a result of the hack or the letter. But that could change in a heartbeat if there’s another big attach. It seems inevitable that hackers will start taking advantage of how quickly Mythos discovers security holes and bugs, especially if Microsoft doesn’t fix them all.
The next big hack, powered by AI, could prove very dangerous — not just for businesses and governments, but for Microsoft as well.

Mathematician James Maynard has spent a lot of time this past year "soul searching." A professor at the University of Oxford and winner of the prestigious Fields Medal, Maynard told The Verge he's been grappling with the future of his field as the traditionally slow-moving discipline hurries to adapt to AI.
Days before we spoke, OpenAI revealed it had produced the solutions to 10 long-standing mathematics problems, some of which had confounded academics for decades. Like generative AI used to produce text and images or propose ideas in science and medicine, the technology learns patterns and connections from the vast amount of material it' …
![]()
My current model-selection strategy is embarrassingly simple… and wrong: I choose the most capable (expensive) model because I’m worried the cheaper one might get something wrong. That makes me spend too much, of course, which is why I (like you, perhaps?) continue to struggle with one of the most fundamental challenges in AI: How can I know when a cheaper model is sufficient for a task? Or, really, which model should I use at all?
I asked a friend, Leo Zheng, who leads marketing for Fireworks AI, an AI infrastructure company that runs and improves open-weight models. Surely it was his job to know? His answer surprised me. I thought the answer would come down to models, but it doesn’t. Fireworks, he said, wants to “enable every company to own the continual learning loop within their four walls.” The idea is to abstract away model updates while companies feed the system new signals as customer behavior changes.
That’s when it clicked. I was asking how to automate model choice, but the harder problem is building a feedback loop that tells a company what worked. Model choice then becomes simply one important action the system can take, not the be-all and end-all decision a developer must get right in advance. Arguably, the more important component is integrating enterprise data into that continual learning loop that Zheng describes.
I’ve made that argument before, and I was right. Sort of. Proprietary data doesn’t automatically guarantee AI success. Neither does dumping that data into a retrieval-augmented generation (RAG) system. Your competitors can do the same. The more durable advantage comes from outcome data: traces that connect what the system saw, what it did, and whether the business result was acceptable. Those traces become valuable when a company uses them to improve the system and carry the learning to the next model.
Public benchmarks are useful, but they only tell you how a model performed on someone else’s test. They can’t tell a bank whether a fraud alert was correct, inform a retailer whether an AI agent resolved a return, or tell a software company whether AI-generated code survived review. Enterprises already have pieces of those answers buried in support transcripts, accepted patches, abandoned carts, etc. The trick is turning that mess into something a system can learn from.
Think about a software company. It already collects product analytics to improve its product. AI can extend that flywheel. Application signals can improve the system powering the product. How? By capturing user intent, engagement, and preferences.
This isn’t foolproof, however. A fast learning loop built on a weak proxy is simply a fast way to make the system worse. For example, suppose Toni in customer support accepts a suggested response. Was it good? Maybe. But what if Toni was rushing (as she is prone to do) and the customer reopened the ticket the next day? It’s not enough to act on inputs alone; a company needs to connect the suggestion to the eventual outcome or risk rewarding the wrong behavior.
Acceptable or ideal outcomes must be defined by the enterprise. A platform like Fireworks can optimize through learning loops, but only if desired outcomes are defined. This changes the cost calculation. After all, the cheapest model by token can be the most expensive model by outcome if people must review, retry, and repair its work. A company can be hemorrhaging money on AI failures while congratulating itself for lowering inference costs.
None of this requires open weights, of course. A company can own its evaluations, improve prompts and retrieval, and route among closed APIs and open models without changing a single parameter. For many workloads, that will be enough.
This generally won’t start with reinforcement learning, either. It starts by picking one workflow with an observable outcome and logging the request, model, cost, answer, and what happened next. Do that for a quarter and patterns should emerge. A cheaper model will be good enough for some work, while a proprietary frontier model will earn its price elsewhere. However, in a third category, every model may fail in the same repeatable way, and it’s this last category that makes the serious case for changing the weights.
A few years ago, I argued that open source succeeds when it makes developers’ lives easier, not when it wins an ideological purity contest. The same applies to open weights. The importance of open weights isn’t that they’re a cheaper facsimile of whatever OpenAI and Anthropic are shipping. Instead, they matter because they shift leverage away from the models and toward users with proprietary outcome data. They let enterprises turn what they learn into something they can shape, keep, and carry forward as models change.
Open weights turn model renters into model owners. That’s a very big deal.
For Cursor’s Composer 2, the company started with the open-weight Kimi K2.5 model, then specialized it through continued pretraining and reinforcement learning in environments built to resemble Cursor itself. The interesting thing isn’t that Cursor picked the “right” model, but rather that Cursor can use what it learns from developers to keep making that model more “right” for them. In this case, Fireworks ran the reinforcement learning inference, while Cursor supplied what only Cursor could: its product environment and definition of good. Cursor subsequently built Composer 2.5 on the same Kimi K2.5 checkpoint and says 85% of its compute went into additional training and reinforcement learning.
The base model was the starting point, not the finished product.
This is why open weights matter. They turn the model from a finished product into raw material. The foundation labs have broad knowledge, far more than any normal company could hope to collect. What they don’t know is whether your patch shipped, your fraud was stopped, your customer stayed, or Toni’s response made matters worse. You do.
RAG lets a model consult your data. A learning loop lets the system learn from it. One helps answer today’s question, but the other helps the company answer tomorrow’s question better.
Raw weights alone won’t deliver that control. Open source didn’t take over the enterprise because CIOs wanted tarballs. It won because Red Hat, and especially cloud providers, turned theoretical control into everyday convenience. Open-weight AI needs the same translation.
Enterprises want the convenience of a closed API without surrendering control over the intelligence their data creates. That’s the real Fireworks opportunity. Not faster tokens, but a shorter distance between learning something about your customers and making the product smarter because of it. Fireworks CEO Lin Qiao calls this “application-specific intelligence,” and that’s exactly right. Enterprises don’t need to outbuild OpenAI or Anthropic. Even if they wanted to, they couldn’t. Instead, they need to turn what they know about their customers and workflows into intelligence those labs can’t supply.
Fireworks isn’t alone. Together AI also spans training, evaluation, and serving, while Baseten now talks about connecting production feedback to model training. This is becoming a category, not simply a Fireworks feature. Fireworks’ particular bet is that the entire learning loop should belong to the customer.
So, back to the question I was asking Zheng: How do I pick the right model in advance? By now it’s clear: I can’t. Neither can you, and that’s fine, because it’s not really the right question.
Once the enterprise owns the test, it no longer has to trust a vendor’s benchmark or brand. New models must prove themselves against the work that matters to that company, then be promoted, specialized, or discarded accordingly. Model choice becomes a consequence of learning, not an act of faith. In effect, the models audition for the enterprise, not the other way around.
No one can predict whether OpenAI, Anthropic, Google, or the open-weight community will lead six months from now. The sensible response is to stop making that prediction central to the strategy. The enterprise’s own data should decide which model to pick. That’s the bet I find compelling in Fireworks: Make open-weight models as easy to improve as APIs are to call, so enterprises can stop treating their data as context for somebody else’s model and start using it to build intelligence they control.
