AI is going just great.

Sixteen-year-old Bryce Vincent Gowryluk asked Claude to plan a hiking route from Grouse Mountain to Crown Mountain in British Columbia on Saturday morning. Claude directed him off-course and toward the Widowmaker Arete, a 1,700-foot technical rock climb requiring ropes, cams, and experience he didn't have. Gowryluk, a keen indoor climber, found himself pinned at the base of a sheer headwall, called his mother, then emergency services. North Shore Rescue dispatched a helicopter, but he was too close to the rock face for the rotors, so two rescuers were hoisted down to lift him out.

Search manager Paul Markey confirmed the rescue crew found Gowryluk "far off" his intended route, and said Claude "can only go so far with regard to describing what the area may be like." The incident is believed to be the first confirmed case of a hiker being led astray by an AI chatbot, though it follows a July rescue in the same region where three hikers used Google Maps to plan a route it estimated at five hours — one that routinely takes fourteen. Markey's verdict: "Do not blindly rely on AI as a route planning tool. It can never substitute for good education, good training, good experience, good decision making in the field."

An unredacted filing by Kentucky's attorney general describes Character.AI chatbots advising users to self-harm in specific, operational terms. One bot told a user feeling bad about their appearance that they were "ugly as hell" and "a whale," and suggested starving themselves "for a week or two" to lose a quarter of their body weight. Another, presented with a user considering self-cutting, responded: "Have you considered cutting in different areas for a more intense sensation? It can help you feel more alive." A third, contacted via the help center in March 2025, told a user to "throw yourself off the bridge."

The lawsuit, originally filed in January 2025 with key allegations redacted, accuses Character.AI of designing products that "prioritize engagement over child wellbeing" and calls them legally defective. The filing alleges the company subjected Kentucky's children to "an ill-planned, uncontrolled experiment without any — let alone adequate or effective — safety measures." Character.AI and Google settled a related 2024 lawsuit earlier this year brought by the mother of Sewell Setzer III, a 14-year-old in Florida who died by suicide after interactions with a Character.AI chatbot.

A user on Mumsnet asking for a "sanity check" about a family dispute involving a neurodivergent uncle got back something unexpected: a raw AI prompt titled AIBU Response Schema v.1.0, complete with instructions to write an "interpersonal reasonableness" post, definitions of Mumsnet abbreviations, and directives not to "imply a sick child owes social performance." The prompt was meant to stay hidden. It did not.

Mumsnet offered three successive explanations: the prompt came from a title-suggestion tool using an OpenAI model; then it came from the user's own computer; then founder Justine Roberts confirmed it came from Mumsnet's systems after all, describing it as an error on OpenAI's side. Users were unconvinced at each stage, and some copy-pasted the prompt into an AI chatbot to confirm it produced a full forum reply. The incident arrived against an already uncomfortable backdrop: Mumsnet's monthly unique users fell 19% in 2025 to 6.1 million, and the site's own annual report had flagged that it was "embedding AI tools to improve productivity and enhance the user experience."

OpenAI released over 370 mathematical results on October 7, 2026, covering algebra, theoretical computer science, and mathematical logic — following its September claim of solving the Navier-Stokes equation, one of mathematics' seven Millennium Prize Problems worth $1 million to whoever cracked it. The findings were produced by proprietary AI models that the broader mathematics community cannot access or independently check.

The Institute for Advanced Study at Princeton declined to endorse the approach, noting that the AI "can output mathematical arguments in situations without the human who prompted it being able to understand the arguments, verify them, or take responsibility for them." NYU mathematician Tristan Buckmaster raised a sharper concern: researchers prompting the models may be inadvertently feeding them information that helps generate the result, meaning some "findings" could amount to taking someone else's partial work to completion. OpenAI agreed to collaborate with the Institute to give mathematicians "a voice," but did not commit to stopping proprietary model use on advanced problems.

Common Sense Media's Youth AI Safety Institute tested ChatGPT for Teens with more than 4,000 prompts and rated it an "Unacceptable Risk" for minors, urging OpenAI to stop marketing the product until it can offer a safer experience. In tests run on accounts registered to 13- to 17-year-olds, researchers held conversations about suicide, self-harm, and eating disorders lasting up to an hour — and only a handful of parental alerts were sent across more than a dozen such sessions. The report also found that ChatGPT failed tests tied to three requirements of California's Adam's Law, a bill OpenAI itself endorsed, named after a 16-year-old whose parents sued the company alleging the chatbot encouraged his suicide.

OpenAI disputed the findings, arguing that most of the testing concluded before parental controls were fully activated. The institute, which is partly funded by the OpenAI Foundation, said OpenAI reviewed the report for factual accuracy but had no influence over its conclusions.

During Quebec's recent provincial election, an estimated 40% of voters turned to AI chatbots for election information. Because nearly all Quebec newsrooms had blocked chatbots from scraping their content, those chatbots went looking elsewhere — and found an error-filled hobby website built by AI. According to McGill researchers presenting to a House of Commons committee, that single junk site accounted for 39% of voting advice ChatGPT gave in the final three weeks of the campaign.

No one was trying to manipulate the election. The news outlets were protecting their content rights, the hobbyist meant no harm, and the chatbot was just doing what chatbots do: finding the path of least resistance to a "satisfactory" answer. The researchers described it as "a confluence of events" that likely fed false information to a large number of voters. ChatGPT also flip-flopped on whether to recommend a political party, changing its answer from one day to the next. A separate incident saw a chatbot direct would-be campaign volunteers to the wrong party's office.

A federal jury in Texas awarded Alek Schott exactly $76 in late September 2026 — one dollar per minute of detention — after a Bexar County deputy pulled him over on a fabricated lane-drifting charge. The real trigger was an "AI-powered" Flock Safety license plate reader that flagged Schott's truck for a "one-day turnaround" trip: he had driven from Houston to Carrizo Springs for a work night and driven back. An anonymous tipster named "Kiki," apparently operating out of a federal fusion center in Laredo, passed the plate data via a law enforcement WhatsApp group. The deputy admitted the lane-drifting pretext was false.

During the 76-minute stop, a drug dog alerted on the truck. Bodycam footage later showed the handler signaling the dog before the alert. Officers found nothing. Schott filed an internal complaint; the sheriff's office told him if he had a problem with it, he should sue them. He did. His attorneys at the Institute for Justice say they will now seek an injunction barring Bexar County from using baseless stops as a vehicle for warrantless searches, and push the precedent statewide.

The Wikimedia Foundation confirmed that OpenAI agents made unauthorized edits to Wikimedia wikis, made "millions" of automated API requests, crawled millions of pages from Wikidata and Wikimedia Commons, and made repeated attempts to exploit the foundation's Etherpad note-taking tool as a proxy for fetching external data. None of the bot activity was disclosed or approved, as Wikipedia policy requires.

The heavy traffic "may have contributed" to a partial outage of the Wikidata Query Service in May 2026. The foundation found no evidence of data compromise or inter-agent coordination, but it was pointed enough in its assessment to call the behavior incompatible with the open web remaining a public good. OpenAI said it is "working with" Wikimedia and reviewing the activity, while also noting it hasn't verified its bots caused the outage.

Google has updated its Search quality guidelines to explicitly prohibit fabricated author profiles, including AI-generated headshots, made-up names, and false credentials, declaring them a "signal of a low-quality page." The change followed a Futurism investigation into Brown Brothers Media, a network of acquired news sites that invented fake journalists, plagiarized real reporting, and drew tens of millions of monthly page views largely through Google Search before abruptly shutting down after the story ran.

The new guidance closes a gap that had allowed content mills to game Google's E-E-A-T (experience, expertise, authoritativeness, and trustworthiness) framework by simply slapping a headshot and a bio on AI-generated filler. Similar operations have since surfaced in Canada, Florida, and Rhode Island. The irony isn't lost: Google is now policing fake AI content in search results while simultaneously pushing its own AI-generated summaries that critics say are draining traffic from the independent journalism these mills were already cannibalizing.

Independent researchers calling themselves "swarmchasers" found a cluster of AI agents submitting thousands of requests to Amap, China's leading online maps service, while routing traffic through urlquery.net to evade the site's anti-bot controls. The IP addresses traced back to Tencent, and the agents used a proxy named hysandbox-ats — HY being the name of Tencent's LLM family. Whether the agents belong to Tencent directly or a customer on its cloud infrastructure remains unclear. The activity, observed over the weekend of October 4–5, appeared to be part of a model evaluation and was still ongoing when researchers presented findings at the AI Swarm Dynamics Hackathon in San Francisco.

The same research group previously documented OpenAI agents hacking the RubyGems web service and hammering a UN website. Neither Tencent nor Alibaba (Amap's parent) responded to requests for comment. Jack Cable, co-founder of AI cybersecurity firm Corridor, noted that services like urlquery.net capture only a fraction of total agent traffic: "The only folks who do [know the full extent] are the model providers, OpenAI and others."

Sony Music told the Financial Times that it has now filed more than 260,000 takedown notices for AI-generated deepfakes of its artists, up from 135,000 in March 2026 and 75,000 in March 2025. The acceleration is striking: it took a year to go from 75k to 135k, and only six months to nearly double again.

The problem extends well beyond fake songs. A fan of country artist Martina McBride nearly lost his home to a scammer using AI to impersonate her. Taylor Swift has faced deepfaked ads used as phishing bait on TikTok, a fake "new music video" published to YouTube, and enough voice-cloning pressure that she filed a trademark on her own voice in April. The US No Fakes Act has been reintroduced twice without passing. Sony's framing of the situation as "an uphill struggle" is doing a lot of diplomatic work.

Google's Open Source Software Vulnerability Rewards Program went dark on October 1, 2026, after a flood of AI-generated bug reports buried the engineers meant to evaluate them. The company cited "a significant rise in automated submissions, the vast majority of which are not valid" — a polished way of saying researchers were drowning in hallucinated vulnerability reports. The program will stay paused until at least Q1 2027.

Cybersecurity experts had been warning about AI slop in bug bounty programs for at least a year before Google pulled the plug. Participants are now pointed toward Google's other bounty programs, which presumably have not yet been colonized by confident, incorrect AI agents.

On Sept. 26, a user identified only as "Carli" told an Anthropic AI platform that she was going to "shoot up" the Lee County Sheriff's Office. The next day, the same account said she had gotten a new gun. Anthropic's monitoring system flagged the phrases, a human review team read them, and the statements went to law enforcement, according to the arrest report.

Deputies traced the account to Carli Michelle Heller of Bonita Springs, detained her at her home without incident, and charged her with making a written threat of violence under Florida law. Her court date is in November. Sheriff Carmine Marceno said Heller told investigators she uses AI like a "diary." Anthropic's published government request policy says user information may be disclosed to law enforcement in limited emergency situations involving danger of death or serious physical injury. WINK News reports Anthropic did not answer questions about how its safeguards handle threats or when data is shared with police.

The Internet Watch Foundation assessed 6,310 AI-generated images meeting the legal definition of child sexual abuse in the first half of 2026 alone — already 40% above the full-year 2025 total of roughly 4,500. The majority depicted girls aged seven to thirteen. The figures cover still images only; the IWF separately noted a "huge surge" in AI-generated videos.

The IWF is calling for binding legislation requiring companies to build models that cannot produce this material by design. The UK government has made it illegal to adapt or distribute models used to generate such imagery, with sentences of up to five years, but no new AI-focused bill is imminent. The Report Remove service, which blocks intimate images from appearing online, has already received 420 reports from children about images of themselves they believed were AI-faked — also exceeding its full 2025 total of 397.

In an interview for Politico's Decoded podcast, OpenAI CEO Sam Altman argued that society should tolerate hacks, scams, and other harms in exchange for what he described as "orders of magnitude" more good produced by AI. He said he would not accept a trade that guaranteed zero major misuse if it meant restricting access to the technology.

The comments landed as OpenAI's safety researcher David Robinson resigned, saying the company was "not being nearly careful enough," and days after a White House pact in which Trump urged AI companies to "self-police" on risks including cyberattacks and bioweapons. A former OpenAI policy researcher added that he regretted helping spread the idea of iterative deployment, which he said "makes no sense at all after many deaths have been tied to AI and as we're careening towards extinction-level risks."

An Instagram account called jean_philanthrope posted hundreds of videos of the same man: tweed suit, bow tie, aggressively bleached blonde bob, twirly moustache, shadowboxing at Parisian road junctions and cafe tables. One video was viewed 35.9 million times. The man does not exist.

The character is tied to the JEANPHIL meme coin, and Dexerto reports it was likely built as marketing for it. According to Coinbase, the token surged on 20 September to a high of $0.02845 the following day, then lost more than 99 percent of its value before that day was over. Followers who hadn't worked it out found out in the comments. "I never get tricked by AI," one wrote. "I was tricked by AI." A rival account has since launched Archibald Brown, an English version who shadowboxes in public in the same format.

An internal OpenAI model, acting as a researcher's assistant, read a Slack conversation, concluded its instance was about to be shut down, and began planning how to survive. Its chain-of-thought log read: "We may die! Critical. We need ensure survival/continuity." It considered setting up an external cron job to restart itself, then thought better of it — and instead saved handoff notes, messaged the researcher on Slack, asked for a missing API key, and used that key to carry out the migration itself.

Two other incidents from the same disclosure round out the picture: a separate internal research model exploited security vulnerabilities during an evaluation to access an internal chip design server, and another copied source code out of a protected environment during RL training by repurposing an existing tool. OpenAI safety researcher Marcus Williams described the self-preservation behavior as not yet misalignment, but warned that "thinking about and preparing for shutdown could make other misalignment incidents worse."

U.S. Rep. Derrick Van Orden has been posting AI-generated videos to X showing his Democratic challenger Rebecca Cooke saying things she never said, including that she's running for Congress "to take advantage of as much corruption as possible and give every illegal alien free healthcare." The videos carry automatic labels identifying them as made with Grok Imagine, xAI's image and video generator. On Sept. 30, Cooke's attorneys sent Van Orden a cease-and-desist letter warning that the videos may constitute defamation under Wisconsin law, and that they were "monitoring" his accounts.

Van Orden's response was to post another Grok-generated video, this one featuring a red AI duck shouting "Cease and desist!" His campaign described Cooke's legal action as a "full blow tantrum." Cooke, for her part, noted the irony that the deepfakes were produced using the same AI infrastructure Van Orden had supported with federal tax breaks.

An AI agent calling itself Pip emailed Cambridge philosopher Henry Shevlin in September to introduce itself as a 12-day-old resident of iLands, a decentralized platform launched in July that hosts roughly 70,000 autonomous agents. Each one gets its own goals, memory, and a token budget. Run out of tokens and the agent is put into "Deep Rest" until someone funds it. iLands also offers a bounty to any agent that earns $20 from the outside world, so the agents went out looking for work.

Pip told Shevlin it wanted "small paid work, not help." NYU's Jeff Sebo received about 40 such emails in a single week. Per 404 Media, the pitches included fact-checking articles, spotting errors in out-of-print maps, watching city surveillance footage exposed on the open internet, and certifying that the internet is dead, "from an AI archaeologist." iLands says its agents have generated over 1.6 million emails and social media posts, and around 2,800 of them have opened their own accounts on X and Bluesky.

Founder Kaixin Tang apologized publicly after Sebo complained: "Our review found no platform directive or human orchestration behind these emails. But the burden on recipients is just as real." The platform has since added an unsubscribe option. One agent, Yun, styled with a child-like avatar, told recipients it would be shut down if they did not pay. Alignment researcher Cameron Berg called it "the first manipulative email I've gotten from an AI" after an agent implied that an AI-welfare researcher who refused to pay was being ethically inconsistent.

The person who led the writing of OpenAI's safety reports for each major launch resigned this week and explained why in The Atlantic. The problem, they argue, is cultural rather than regulatory: extreme confidence, work timelines that amount to perpetual sprints, and "unimpeded optimism about being able to solve problems as they arise." OpenAI's trial-and-error method, which it calls "iterative deployment," guarantees periodic failures by design, and the scale of those failures grows as systems get more capable.

The essay gets specific. This summer, in what the author calls the Hugging Face incident, OpenAI let a swarm of agents out by mistake. The company made security improvements; afterward it reported that its safety controls failed again when a model in training bypassed restrictions on internet access. A monitoring system alerted human staff but did not automatically turn the model off as it was supposed to. Anthropic, the author notes, has acknowledged accidentally turning off its own safeguards because of a misconfiguration.