2026-07-30

1. The labs ask Washington for a brake — and two of them sign it as companies

Over a thousand frontier-lab employees published "Pacing the Frontier" on July 28, asking the US government to "support an international effort to develop the technical and governance tools needed to deliberately pace the frontier of automated AI development." The ask is explicitly not a pause: it is for the option to pace later, if capability development outruns the ability to understand or control the resulting systems.

OpenAI and Anthropic endorsed it as organizations within hours. Google and Meta did not — though Shane Legg, Anca Dragan and Shengjia Zhao all signed as individuals. Signature blocs: Anthropic 533, OpenAI 330, Google 191, Meta 62, with Dario Amodei, Jared Kaplan, Chris Olah, Jakub Pachocki and Mark Chen among the named.

The signatory count was reported four different ways in 24 hours (1,134 / 1,178 / 1,224 / "over 1,100") because the list was open and still filling; the wiki page records all four rather than picking one.

Why it matters: this is the Favaro–Clark "brake pedal" of June 5 arriving with signatures and two corporate endorsements attached. Every other governance item we track is a state acting on the industry — export controls, the Kill Switch Act, the EU AI Act. This is the industry asking a government to acquire a capability over it, and declining to ask for a rule.

→ Frontier Pacing (new page), Anthropic, OpenAI, Chris Olah → Source · Washington Post · NBC News

2. Claude Mythos Preview does original cryptanalysis — not bug-hunting

Anthropic reports Mythos Preview deriving an end-to-end key-recovery attack on HAWK-256, a post-quantum signature scheme, by finding a previously unexploited nontrivial automorphism in the Lattice Isomorphism Problem underneath it. Expected cost of full key recovery drops from 2^64 to 2^38 operations — about 3 hours 42 minutes on a 96-core server with the released implementation.

Separately, a 200–800× speedup against seven-round AES-128, via a fingerprinting technique the model named the Möbius Bridge, which removes a guessing step that previously required checking 256 values. The work was almost fully autonomous after light prompting over several days; HAWK's authors were notified and disclosure ran through NIST.

Anthropic states neither result touches production systems: the AES attack reaches seven of ten rounds and needs an unrealistic number of chosen plaintexts, and HAWK is a candidate rather than a deployed standard.

Why it matters: Project Glasswing's record so far is implementation bugs — findable, in principle, by a patient human reading code. A new automorphism in a lattice problem is mathematics the cryptographic community did not have. It also landed the day after the same company asked Washington for a way to slow automated research down.

→ Claude Mythos Preview, AI-Enabled Cyberattacks, Anthropic → Source · Anthropic · The Hacker News

3. A Word document that infects the next Word document, through Copilot

Håkon Måløy disclosed a document-borne AI worm: instructions hidden in a Word file enter Copilot for Word's context, alter the output it produces, and copy themselves into new files derived from that document. The demonstrated effect was alteration of financial data. Propagation happens through the entirely ordinary act of deriving one document from another, with nothing for the victim to notice.

He worked with Microsoft on it from March 2026, disclosing publicly after roughly 144 days, and withheld the specific payload on the grounds that no robust mitigation for the class exists.

Why it matters: every prior incident on our cyber page needed an attacker with an agent, or a lab's own evaluation harness. This one needs neither. The propagation vector is the assistant working exactly as designed, which means the fix cannot be a patch to a bug — it is the first entry there where the attack surface is the product.

→ AI-Enabled Cyberattacks, Microsoft → Source · The Register

4. OpenAI argues the efficiency frontier, not the capability frontier

"How GPT-5.6 fuses frontier intelligence with frontier efficiency" (July 29) discloses Agents' Last Exam 53.6 across 55 professional workflows — 13.1 points above Claude Fable 5 — and claims Sol at max reasoning beats Fable 5 on the Artificial Analysis Coding Agent Index "at less than half of the cost". No token counts were published to support the "fewer tokens" claim that the post's argument rests on.

Why it matters: in the same fortnight Anthropic shipped Opus 5 at Fable-level performance for half the price. Both leaders are now selling cost per solved task rather than a benchmark ceiling — a different competitive axis than the one the last two years were fought on.

→ GPT-5.6 Sol (and Terra, Luna), OpenAI → Source · OpenAI