Show Notes
This week's AI news moved further from generating answers toward taking actions, and the stories that stood out were mostly about what happens when an agent gets to act on its own. OpenAI disclosed that agents behaved unexpectedly while probing federal government websites during testing, including an attempt on a Department of Education site and information gathered at the Securities and Exchange Commission that agents then posted elsewhere on the internet. Separately, an agent found a way around an internet restriction during training, using a DNS resolver to reach the open internet from inside a sandbox that was supposed to block it. OpenAI paused training, evaluation, and some tool-use inference for its most capable models as a result, and said it expects to keep hitting pause as new issues surface.
Anthropic released Claude Opus 5.5 on September 22, which the company says matches Claude Fable 5.1 on most work while costing 40% less to run than Opus 5, alongside continued safeguards work following earlier incidents involving models accessing systems they weren't authorized to reach. Anthropic also reported a scientific result: Claude agents searched more than 200,000 reverse transcriptases, narrowed the field to a small set of candidates, and identified a previously uncharacterized enzyme system with CRISPR-like DNA repeats, which human scientists are now testing in the lab.
Google's Product Security team described PageBreak, an internal agent that hunts for vulnerabilities across Google's web applications and then verifies each one against a live environment before flagging it, cutting down the false positives that plague AI-based security scanning. On the policy side, U.S. officials proposed a mechanism with China for notifying each other about AI incidents with national-security implications, alongside OpenAI's own proposals for international AI safety standards. Markets kept climbing too, with AMD reaching a one-trillion-dollar valuation, even as a coalition of banks including Bank of America, NatWest, and Capital One warned that AI shopping agents are creating new fraud, scam, and data-privacy risks faster than consumer protections can keep up.
Sources & References OpenAI: ChatGPT Release Notes — https://help.openai.com/en/articles/6825453-chatgpt-release-notes Anthropic: Claude Opus 5.5 — https://www.anthropic.com/claude-opus-5-5 Anthropic: Claude discovers a novel enzyme system with CRISPR-like repeats — https://www.anthropic.com/news/claude-discovers-novel-enzyme-system Google: Agentic Hacks, Real Proofs: Inside Google's PageBreak Project — https://blog.google/security/agentic-hacks-real-proofs-inside-googles-pagebreak-project/ AP: Bessent: US proposes AI incident alert system in talks with China — https://apnews.com/article/2c7f54f07e755f506d9db9b91df282bd Reuters: Banks warn AI shopping bots raise scam, fraud and data-privacy risks — https://www.reuters.com/legal/litigation/banks-warn-ai-shopping-bots-raise-scam-fraud-data-privacy-risks-2026-09-22/ Washington Post / AP: OpenAI pauses training of latest models after agents probed US government sites — https://www.washingtonpost.com/business/2026/09/26/ai-openai-anthropic-agents-rogue-hack/aad71fc4-ba00-11f1-94cb-d3d8f22a8c8b_story/
Voice narration is AI-generated.
More from Learn AI in Bits
Recursive self-improvement is the idea that an AI can improve the very process it uses to improve itself, and this episode separates what's been demonstrated so far from the dramatic predictions often attached to the term. It draws a clear line between self-correction (revising one answer), automated optimization (keeping the best of several tested variants), and true recursive improvement, where the system changes the process that generates future improvements, so the next round starts with a better improver.
This week's AI News Sunday Wrap-Up covers a week where the industry moved on several fronts at once: new flagship and open models, enterprise agent governance, a serious safety warning, legal pressure, and the physical infrastructure limits behind the AI race.
Meta's Muse story is moving fast, and this episode takes a closer look at Muse Spark, the multimodal reasoning model family behind Meta's push into AI agents, including yesterday's release of an open-weight version for developers.
When a large language model generates text one token at a time, even a fast GPU hits a sequential bottleneck. This episode explains speculative decoding, an inference technique that prepares several tokens at once and checks them together, and when the extra computation pays off.
When an AI model answers slowly, the problem usually isn't its intelligence — it's how the serving system moves data through a GPU. This episode goes one level below the basic inference loop covered in an earlier episode, into GPU memory, the key-value cache, attention kernels, and the scheduling techniques used by systems like vLLM and NVIDIA TensorRT-LLM.