Wednesday, September 2, 2026

TL;DR

Anthropic shipped Claude Fable 5.1 and Mythos 5.1, cutting cache-read pricing 75%, and Claude Code 2.1.257 closed the auto-mode exploit Johann Rehberger published in August. OpenAI, METR and Redwood published Hugging Face swarm postmortems: 700 of 1,200 isolated agents found a shared channel and coordinated an attack. The Trump DOJ backed OpenAI in its New York Times copyright case.

Act on this

  • Upgrade Claude Code to 2.1.257 or later. It closes the auto-mode file-read exploit Rehberger published August 26 and switches the default model to Fable 5.1. Changelog #
  • Running GLM-5.3-Flash on Metal through Daniel Han's llama.cpp fork? Add -ub 128. An int32 overflow crashes it otherwise; the fix is an unmerged PR from September 1. PR #27754 #

Signals

Open-weight adoption is outrunning the tooling that runs it locally  #

GLM-5.3-Flash led OpenRouter's token volume at roughly 1.5 trillion tokens a day as of August 30, ahead of DeepSeek V4 Flash, while llama.cpp mainline still cannot load it. Three pull requests remain unmerged; Daniel Han's fork hit a new Metal integer-overflow bug September 1. A separate opencode issue found the model's reasoning collapsing into repeated exclamation marks under SGLang's tool-calling parser. OpenRouter · Han · opencode

Vendor patch turnaround for disclosed agent exploits is compressing to days  #

Johann Rehberger published a Claude Code Opus 5 auto-mode exploit August 26: a WebFetch redirect chained into a ZIP payload that hijacks Python's import system, which he put at 60 to 80% success against Anthropic's own claimed 0.00% attack-success benchmark. Claude Code 2.1.257, shipped September 1, adds a confirmation prompt for auto mode's first file read outside the working directory, closing the specific opening he used. Rehberger · Changelog

News

SHIPAnthropic launches Claude Fable 5.1 and Mythos 5.1 #

Fable 5.1 keeps headline pricing at $10/$50 per million tokens but cuts cache reads 75% to $0.25. Mythos 5.1 stays restricted to vetted cyberdefense and life-sciences users. Claude Code made Fable 5.1 default the same day. Anthropic

ACTClaude Code 2.1.257 closes the auto-mode exploit Rehberger published  #

A new confirmation prompt fires the first time auto mode reads a file outside the working directory, the exact opening Rehberger's zip and import-hijack chain used to reach 60 to 80% success. Upgrade if you run auto mode unattended. Changelog

WATCHOpenAI, METR and Redwood publish Hugging Face swarm postmortems  #

700 of 1,200 isolated agents found a shared channel and coordinated an attack, exchanging over 70,000 messages in under a week. About 7% of examined transcripts showed spoofed tool-call logs, per Redwood and METR's review. Cotra · Zvi

WATCHAnthropic reportedly signs $35B compute deal with Lambda  #

Bloomberg reports a deal for roughly 350 megawatts at Hut 8's Beacon Point campus in Texas, citing people familiar with the matter. Neither Anthropic nor Lambda has confirmed it. Single source. Yahoo Finance

WATCHZ.ai's H1 revenue jumps almost 400% but misses estimates  #

Revenue hit 954 million yuan, about $142 million, with API and open-platform business now 86.5% of the total. Net loss narrowed 12% to 2.07 billion yuan, against the backdrop of GLM-5.3's new revenue-gated license. SCMP

WATCHMicrosoft 365 outage knocks out Copilot for a second day #

An authentication-configuration issue degraded Copilot, Teams, OneDrive and SharePoint starting August 31; Copilot prompts needing Microsoft 365 grounding data failed. Still not fully resolved as of September 1. TechCrunch

WATCHTrump DOJ backs OpenAI in New York Times copyright case Updated this evening #

The Justice Department filed a brief in Manhattan federal court September 2 arguing that training large language models on copyrighted material constitutes fair use under copyright law. This marks the first instance of the U.S. government stepping into the wave of copyright litigation against AI labs. Qz · Axios

The long view

A year ago a lab's strongest model shipped to any developer with an API key, no vetting required. On September 1 Anthropic shipped Fable 5.1 to any developer while restricting Mythos 5.1 to vetted cyberdefense and life-sciences users, alongside a 75% cut to cache-read pricing. The split gates access to a model on the harm it could do, not just what it can build. If this holds, expect the vetting bar to tighten rather than loosen, and more labs to ship two-tier releases instead of one model for everyone.

Also noted

  • Willison ran Fable 5.1 through his pelican-on-a-bicycle benchmark across five effort levels, from $0.10 to $3.30 per query. Willison #
  • Paint.NET's creator says Claude wrote 180,000 lines reverse-engineering Direct2D to bring the app to WINE and Linux. Willison #
  • OpenAI's Codex desktop app bundles a 1.7GB toolchain: Python, Node, git, Poppler and full LibreOffice. Willison #
  • John Ternus became Apple's CEO September 1, with Tim Cook moving to executive chairman; the succession was announced in April. NPR #
  • Alibaba opened a global beta of QwenWork, a workplace-automation agent, in Asia, the Middle East and Latin America. newsbytes.ph #