It shipped four working features, wiped a database once, and tried to email our landlord. A first-hand report from the edge of autonomy, and the exact guardrails that kept a bad week from becoming a disaster.
On 17 August, the US cybersecurity agency CISA added a critical flaw in Ray, a popular open-source framework for scaling Python and AI workloads, to its Known Exploited Vulnerabilities list with an unusually short three-day fix deadline for federal agencies. The bug, CVE-2025-62593, lets a malicious web page reach a developer's local Ray dashboard and run code. But it is a narrower flaw than the headline numbers suggest, and the dramatic figures about hundreds of thousands of exposed servers belong to a different, older Ray vulnerability.
In a model study published on 13 August in Nature Climate Change, Utrecht University researchers found that whether the Atlantic Meridional Overturning Circulation tips into collapse depended on the rate of warming, not a fixed temperature. In their simulations slow warming left the current stable up to about 5.5C, while warming at roughly today's pace tipped it near 2C. It is a striking result, but it rests on a single idealized model, and the authors stress it is not reassurance: they say the real system is probably closer to a tipping point than their simulation.
On 20 August, the Nevada Transportation Authority approved permits letting three companies charge for autonomous rides in the Las Vegas area: Tesla up to 5,000 vehicles, Waymo up to 1,000, and Aviari, an Uber subsidiary, up to 1,000. That is a combined cap of 7,000, among the highest explicit per-operator fleet ceilings any US state has written into a robotaxi permit. But these are maximums over the first year, not vehicles deployed, and only Waymo is confirmed to be running with no safety driver.
On 20 August, GSC Game World released Cost of Hope, the first major story expansion for S.T.A.L.K.E.R. 2: Heart of Chornobyl, for $29.99 on PC, PlayStation 5 and Xbox Series X and S. It brings back protagonist Skif, opens two regions that were not playable in the base game and adds a nonlinear questline. Alongside it, a free Update 2.0 moves the whole game to a newer Unreal Engine build, reworks its lighting and environments and adds four new weapons for everyone who already owns the base game.
The US Justice Department announced on 21 August that TikTok and ByteDance will pay up to $400 million to resolve a 2024 lawsuit accusing them of letting under-13s make accounts and collecting kids' data without parental consent, in breach of the COPPA child-privacy law and an earlier settlement. The deal is $300 million now plus $100 million tied to lifting an old consent order, adds new age checks and parental controls, and, notably, requires no admission of wrongdoing.
Anthropic says its Claude models ran the design work for a protein-binder campaign, choosing where to bind on a set of target proteins and generating and screening candidates with little human input. Two commissioned outside labs, Adaptyv Bio and Twist Bioscience, then built and tested the designs: 354 of 1,320 bound their targets, hitting 14 of 15 evaluated targets at rates above the roughly 10 to 15 percent Anthropic calls typical. It is a real step for AI in the lab, but a 'binder' is an early research tool, not a finished drug; the labs confirmed the proteins bind, while the autonomy account is Anthropic's own.
Anthropic says its Claude models ran the design work for a protein-binder campaign, choosing where to bind on a set of target proteins and generating and screening candidates with little human input. Two commissioned outside labs, Adaptyv Bio and Twist Bioscience, then built and tested the designs: 354 of 1,320 bound their targets, hitting 14 of 15 evaluated targets at rates above the roughly 10 to 15 percent Anthropic calls typical. It is a real step for AI in the lab, but a 'binder' is an early research tool, not a finished drug; the labs confirmed the proteins bind, while the autonomy account is Anthropic's own.
With the launch of its new V4 models, DeepSeek is ending the flat, ultra-cheap pricing widely credited with helping pull AI prices down. From 16:00 UTC on 16 August it charges peak and off-peak rates, and output on its cheapest model now costs more than double off-peak and nearly five times the old rate during a seven-hour daily peak window. Here is exactly what changes, and how to pay the lower rate.
At least nine senior leaders have exited OpenAI in 2026, from its former COO and its revenue chief to its only dedicated AI ethicist and its safety-systems lead, even as the company races toward a possible listing reported at around an $850 billion valuation. Most cite new ventures or personal reasons, but the pattern, and who is leaving, has investors asking hard questions.
After cancelling a public meeting on 14 August, the SEC approved a crypto-offering proposal on 18 August through a seriatim vote, individual commissioners signing off outside any meeting. The real rule text is now public, and it differs from the pre-vote reporting: a tiered fundraising exemption up to $75 million, a $5 million startup path, and a safe harbour that turns on ceasing 'essential managerial efforts' rather than on decentralisation. It is a proposal, not law, with a 60-day comment window and adoption unlikely before 2027.
Riot Platforms, one of the largest listed Bitcoin miners, has signed a 20-year lease worth about $9.1 billion to host a frontier AI lab at its Texas mining campus. Riot's filing does not name the tenant; CNBC and Bloomberg report it is Anthropic. It is one of the most concrete signs yet that miners are shifting toward AI, against a backdrop of collapsing mining margins and higher AI power bids, and it raises a real question about what secures the network as miners diversify.
On 12 August an attacker exploited what analysts identified as a consensus-verification flaw on the Harmony blockchain to mint roughly 4 billion ONE tokens, inflating supply about 26 percent and crashing the price by roughly a third. Around 97 percent of the tokens reached exchanges before the mint went public. The realised haul was only a few million dollars, but tokens created from nothing is the real alarm.
On 20 August, GSC Game World released Cost of Hope, the first major story expansion for S.T.A.L.K.E.R. 2: Heart of Chornobyl, for $29.99 on PC, PlayStation 5 and Xbox Series X and S. It brings back protagonist Skif, opens two regions that were not playable in the base game and adds a nonlinear questline. Alongside it, a free Update 2.0 moves the whole game to a newer Unreal Engine build, reworks its lighting and environments and adds four new weapons for everyone who already owns the base game.
Real-looking GTA 6 footage from an old build has been spreading since 18 August under the name CyberLeek, roughly nine days before Rockstar's official 27 August look. Take-Two's rapid takedowns suggest the clips are genuine, but there is no evidence anyone actually breached Rockstar's systems, the whole campaign is wrapped around a memecoin that was trading before the leaks went viral, and no source code has appeared. Here is what is confirmed and what is not.
S-Game's dark wuxia action game Phantom Blade Zero now has a hard release date of 29 October 2026 (28 October in the US and select regions) on PlayStation 5 and PC. A dedicated State of Play detailed the combat: more than 30 main weapons plus 25 secondary Phantom Edges, three difficulty modes from Wayfarer to Sixty-Six Days, and martial-arts star Donnie Yen as Creative Consultant, playing a character through facial and motion capture.
The US Justice Department announced on 21 August that TikTok and ByteDance will pay up to $400 million to resolve a 2024 lawsuit accusing them of letting under-13s make accounts and collecting kids' data without parental consent, in breach of the COPPA child-privacy law and an earlier settlement. The deal is $300 million now plus $100 million tied to lifting an old consent order, adds new age checks and parental controls, and, notably, requires no admission of wrongdoing.
Between 13 and 16 August, SafePal, Trezor's shipping partner ShipMonk, and Israel's Bits of Gold each disclosed data breaches, together exposing about a quarter of a million customers' names, phone numbers and physical shipping addresses. No wallets were drained and no keys were stolen. The harm is downstream: for the Bits of Gold cohort, whose national ID and bank details also leaked, identity theft and fraud; for many, convincing targeted phishing; and, for identifiable large holders, the physical 'wrench attacks' researchers say are rising. Two of the three breaches are linked to the same critical Metabase flaw, CVE-2026-72898.
Opening statements in the 29-state case against Meta began on 18 August in Oakland. The headline moment was financial: after months of only Meta's $1.4 trillion worst-case figure being public, the state coalition signalled it could seek around $200 billion, roughly three years of Meta's after-tax profit. California's deputy attorney general told an eight-person advisory jury that Meta was built to 'hook the users, hold them, harvest their data, and then hide the truth.' Meta calls the claims unsubstantiated. Nothing is decided; this is the argument beginning, not ending.
On 20 August, the Nevada Transportation Authority approved permits letting three companies charge for autonomous rides in the Las Vegas area: Tesla up to 5,000 vehicles, Waymo up to 1,000, and Aviari, an Uber subsidiary, up to 1,000. That is a combined cap of 7,000, among the highest explicit per-operator fleet ceilings any US state has written into a robotaxi permit. But these are maximums over the first year, not vehicles deployed, and only Waymo is confirmed to be running with no safety driver.
On 18 August, the Beijing company LandSpace landed the first stage of its Zhuque-3 rocket on land using landing legs, in what it says is the first time a Chinese company has done so. It joins a very short list of firms that can recover an orbital-class booster, but a booster that lands is not yet a booster that has flown again, and that is the harder test still ahead for LandSpace.
Honor has launched a phone whose main camera sits on a motorised titanium arm that pops out of the body, swivels to follow you, and, in a demo, danced and nodded along like a pet. Underneath the theatrics is a serious camera partnership with cinema-gear maker ARRI. Here is what the Robot Phone actually is, what the arm does, and the very large catch.
In a model study published on 13 August in Nature Climate Change, Utrecht University researchers found that whether the Atlantic Meridional Overturning Circulation tips into collapse depended on the rate of warming, not a fixed temperature. In their simulations slow warming left the current stable up to about 5.5C, while warming at roughly today's pace tipped it near 2C. It is a striking result, but it rests on a single idealized model, and the authors stress it is not reassurance: they say the real system is probably closer to a tipping point than their simulation.
On 19 August, Merck and Moderna said their personalized mRNA vaccine intismeran autogene, given with Keytruda, met its main goals in a 1,137-patient Phase 3 melanoma trial: it lengthened the time patients stayed cancer-free after surgery and the time before the disease spread. It is the first positive Phase 3 for any individualized-neoantigen or mRNA cancer therapy. But the companies released only top-line results, no efficacy numbers yet, it is not approved, and it treats a cancer already removed by surgery rather than curing advanced disease.
On 5 August 2026 the FDA approved mFlusiva, Moderna's mRNA influenza vaccine and the first of its kind for seasonal flu. It arrived exactly one year after the government cancelled roughly $500 million in mRNA vaccine work, and only after the agency's own vaccine chief moved to block it, then reversed. Here is what the shot does, and the fight behind it.
On 17 August, the US cybersecurity agency CISA added a critical flaw in Ray, a popular open-source framework for scaling Python and AI workloads, to its Known Exploited Vulnerabilities list with an unusually short three-day fix deadline for federal agencies. The bug, CVE-2025-62593, lets a malicious web page reach a developer's local Ray dashboard and run code. But it is a narrower flaw than the headline numbers suggest, and the dramatic figures about hundreds of thousands of exposed servers belong to a different, older Ray vulnerability.
On 20 August, attackers pushed malicious versions of three popular Rust crates, led by arrayref, which has 245 million downloads and sits under 403 other packages. The twist: the malware ran during compilation, not when the program was run. A build script pulled from a typosquatted dependency downloaded and ran an infostealer during cargo build, so merely building a project could be enough to be hit. This is a package-registry supply-chain attack, not a flaw in the Rust language, and the same trick has repeatedly hit npm and other ecosystems. Rust's security team yanked all three within about 90 minutes.
In March, attackers hijacked the vulnerability scanner inside LiteLLM's build pipeline, stole the AI gateway's own package-publishing keys and pushed two poisoned versions to PyPI. They were live for only about 40 minutes, but a Python auto-run trick did the rest. Security researchers now estimate the fallout put credentials from more than 2,500 companies at risk, and the stolen trove only came to light this week.
Fastest sustained speeds, audited no-log. Our pick after six weeks.
Read the test →Best AI coding toolThe one that actually finished the tasks. Best for real projects.
Read the test →Best crypto walletClearest security warnings we tried. Best for staying un-drained.
Read the test →AI, crypto, privacy, gaming, science and software, decoded in five minutes. Free.
By subscribing you agree to receive The Frontier and to our privacy policy. No spam, unsubscribe anytime.