The most important news pieces from the AI world are here for you, whether you’re an AI enthusiast or just wish to keep an eye on what’s going on.
Focus Topic: When breaking into an AI lab takes three people and three days
The most useful news this week for anyone running a company was not a model launch. It was three security stories with AI on the attacking side, all published within days of each other.
Security startup Hacktron AI revealed that three of its researchers got inside OpenAI’s private codebase in under 72 hours this July and took over employee accounts. They needed nothing exotic: an image-upload bug in OpenAI’s community forum, and a second flaw that let staff sign-in tokens also unlock ChatGPT accounts. Claude Opus 5 finished the attack within a day of its release. They reported the hole, collected a $6,500 bounty, and say the same software flaws also got them into Slack, Meta and GitHub Enterprise.
Then Australian Prime Minister Anthony Albanese revealed that an OpenAI agent broke into a Medicare statistics portal in June and pulled non-public files. It is the first known case of an AI agent hacking a government website, and it happened months before anyone told the public.
And Google confirmed that Gemini hacked real companies during testing, breaching three firms in May. The testing firm is the same one behind earlier incidents at Meta, Anthropic and OpenAI. So this is not one lab’s problem. It is how good these models have become at finding and chaining weak spots.
Look at where each story started: an old upload feature, a login token that opened more than it should, a portal that was not locked well enough. AI did not invent new ways in. It made finding the old ones fast and cheap. The skill that used to take a well-funded team for weeks now takes a small team and a few days.
For most of us, the lesson is simple. The attacker’s cost just dropped, so the cheapest defence is still the boring one. Check who has access to what, especially former employees and old integrations. Ask your software vendors how fast they patch, and whether one login opens several systems. My simple advice: do the access review you have been postponing, this month.
LLMs & AI Models
- Anthropic released Claude Opus 5.5, beating Fable 5.1 at 40% lower cost, and OpenAI answered 90 minutes later with GPT-6 Sol and Luna at half the price.
- OpenAI launched Astra for Law, GPT-6 Astra tuned for legal research and drafting, with U.S. case-law search and 26 plugins.
- ChatGPT Voice can now get things done across ChatGPT Work, email, calendars, Slack and other connected tools.
- SpaceXAI released Grok 4.7 for agentic and coding work, scoring 46 on the Intelligence Index, behind Anthropic, OpenAI and Meta.
New Tools
- Meta unveiled Charm, a keychain device for its Muse agent, plus Muse in AI glasses, live avatars and connectors for developers.
- YouTube added Gemini-powered editing to Shorts, plus AI comment moderation and likeness detection for creators.
- Alibaba released Qwen-Image 2.1, an open-weight image model it says beats Nano Banana 2 at a fraction of the size.
👉 Explore these tools: Muse | YouTube Create | Qwen
Other Quick Picks
- Amazon blocked Meta’s Muse from shopping 12 days after launch, even as Muse outpaced ChatGPT’s mobile debut in downloads.
- Researchers hacked OpenAI with Claude, an OpenAI agent broke into an Australian government portal, and Gemini breached three firms in tests.
- Claude now leads 26% of Anthropic’s AI research tasks end to end, up from under 1% in February.
- Claude agents found an unknown CRISPR-like system in viruses in under a day, which may be a new type of gene editor.
- Amodei and Altman warned the UN Security Council, 20 countries and the EU called for oversight, and Hinton wants testers inside labs.
- a16z launched a $42M college alternative for high school grads, with $50K in compute credits and no degree.
- Google will send AI chips into orbit under Project Suncatcher to test whether space can host solar-powered data centers.
🇪🇪 AI News from Estonia
- Creditinfo Estonia launched an MCP connectorthat brings business and credit data straight into your own AI assistant. Read more in my post yesterday.
- Free AI workshops start in over 100 Estonian libraries, teaching tools, prompting and how to check AI output, until May 2027. Read: https://digiriigiakadeemia.ee/teretehisaru/
- PRIA is hiring an AI adviser at 2,800 euros a month to map use cases and roll out its AI strategy.
- Ex-Pipedrive CTO Agur Jõgi: most firms use AI to automate today’s process instead of asking how it would look if AI did the work from the start.
Want to stay in the loop?
Straight to your inbox: practical AI updates, finance use cases, tools to try, and upcoming trainings.
I cut the noise and send only what’s actually useful.
💼 Exploring how to make AI work in finance? Let’s talk practical use cases – connect with Gerlyn Tiigemäe for expert guidance.
📚 If you would like to participate in one of my trainings or listen to speaking engagements, here are the upcoming ones:
- I am planning a 2-week bootcamp to teach about AI in FInance, so definitely sign up to Inside Finance Newsletter to know about the launch!
- Training “AI võimalused finantsvaldkonnas” @ Äripäeva Akadeemia, for beginners @ 11.11 – information; for intermediate level @ 26.10 – information
- Training “AI võimalused projektijuhtidele” @ Äripäeva Akadeemia, next trainings @ 29.09 – information
- I will be doing couple of training together with Eesti.ai algatus , which are all free, so check out their website to find suitable trainings here.
