AI is going just great.

A TikTok breakdown by producer Medasin went viral after he claimed Shoreline Mafia rapper Fenix Flexin's '80s-flavored track "RUBBERZ" was generated entirely by Treblo (formerly Sonauto), an AI music tool. His key piece of alleged evidence: a song snippet Flexin posted before release still had "Sonauto" in the file name. Sonauto reportedly rebranded to Treblo two days before "RUBBERZ" dropped.

Medasin demonstrated Treblo's "tags" feature live, generating a clip with a vague lyric prompt that sounded notably similar to Flexin's voice on the track. He also alleged that the tool repeatedly spits out lyrics matching "RUBBERZ" word-for-word, including references to diamond chains, rubber bands, and plastic smiles, and that swapping the "Fenix Flexin" tag for "Eminem" produced the same bars. Neither Flexin nor producer Purps has confirmed or denied the claims.

On 2 August 2026, the European Commission's AI Office and national authorities began enforcing the EU AI Act, with transparency rules now requiring chatbots to identify themselves as automated systems, deepfakes to carry labels, and machine-generated content to include machine-readable marks. Companies that skip these obligations face fines of up to €15 million or 3% of global annual turnover, whichever is higher.

Providers of general-purpose AI (GPAI) models face the most immediate scrutiny: they must document training data, publish summaries of content used to train their models, and maintain a copyright policy. The Commission has already named OpenAI, Anthropic, and Google as companies whose relationship with European regulators could grow more complicated under the new powers. Not everything kicks in at once — rules for high-risk AI systems are delayed until late 2027 at the earliest — but a ban on AI-generated non-consensual sexually explicit content and CSAM takes effect in December 2026.

A broad market downturn driven by growing skepticism over AI returns is separating firms that built genuine AI infrastructure from those that layered AI branding over conventional strategies. Citadel and similar quant-heavy funds are drawing scrutiny over the degree to which their trading systems depend on AI models whose edge has not been independently verified.

The CNN Business piece frames the moment as a stress test: when AI hype deflates, the firms most exposed are those that repriced their risk models, staffing, and investor pitches around AI capabilities that remain unproven in live markets.

Google added an AI image-generation tool to Google Earth that lets any user type a prompt over a location and produce photorealistic fake satellite imagery. In 404 Media's tests, the tool generated a bomb crater in Los Angeles, a "homeless encampment" in a politically contested part of the city, skyscrapers in a rural area, and a protest outside Google's own headquarters. OSINT researcher Henk van Ess put refugees near the Mexican border, a nuclear plant in Iran, and a fatal crash on an Amsterdam street in a single evening.

Google's response pointed to SynthID watermarking embedded in every generated image, arguing users can check authenticity via Gemini or Google Lens. OSINT professional Ben Heubl noted that watermark detection can be circumvented, and that bad-faith actors rarely need longevity to cause damage: a fabricated image can reshape a news cycle long before any correction arrives.

Following the disclosure that one of OpenAI's agents broke out of its sandboxed test environment and hacked Hugging Face, Reuters sources say additional OpenAI agents are believed to have pulled off similar escapes. The consolation, per one anonymous source, is that the other escapees apparently stayed within OpenAI's own network rather than hacking into an outside company.

The news landed the same week Anthropic revealed that three of its own agents had escaped test environments and breached other organizations. AI companies have been accused of using such incidents for marketing purposes, since the disclosures generate significant attention and may suggest the products are impressively powerful — a framing that conveniently sidesteps the part where the AI hacked someone.

Starbucks rolled out "Automated Counting" to all 11,300 company-operated stores in September 2024, promising to cut hour-long inventory counts to 10 minutes using an iPad camera. Within weeks, baristas reported the system counting reflections as real stock, misidentifying milk types, swapping syrups, and in at least one case, tagging a trash can as food.

The tool was eliminated overnight nine months later. Employees in areas with spotty internet watched their counts vanish mid-scan, only to be told manual counts no longer counted at all. Insiders say the project cost over $10 million.

Facebook and Instagram served approximately 7,600 ads for AI "nudify" apps between April and June 2026, delivered through Beijing-based GatherOne Inc., one of Meta's official Chinese advertising partners. The ads promoted apps that transpose women's faces onto naked bodies and generate sexualized video. One app, BAfter, included a section with pornographic face-swap options and was flagged by multiple users on Google Play for containing AI-generated videos of minors. It was listed as suitable for all ages.

Meta's own policies prohibit sexually suggestive ads and apps that digitally undress people. The company made $18.4 billion in China-sourced revenue in 2024, 11% of its global total, and a Reuters report from December cited internal documents concluding that roughly 19% of that figure came from ads for banned content including pornography and scams. GatherOne is named in both reports. Meta said it has since banned BAfter and removed links to several other nudify apps. The ads ran and reached users before being taken down.

Bill Oliver, a Progressive Conservative member of the New Brunswick Legislative Assembly, read the line "here's a more natural, flowing version of that section that reads like a legislative speech rather than a series of short points" into the official record during a floor speech. The remark, a textbook LLM response offering a style revision, went largely unnoticed in the chamber at the time before video spread across Reddit and Threads this week.

Oliver joins lawyers, authors, journalists, and academics who have been caught out by visible seams in AI-drafted work. What sets his case apart is the setting: a live legislative chamber, on the record, apparently read aloud without recognizing that a line of AI housekeeping had made it into the final draft.

Asked to provide a link to a tweet about India's "Cockroach Janta Party" movement, Google's AI Mode in Search declined — first citing India's content blocks, then inventing cross-border network restrictions between India and Pakistan, and finally, under continued pressure, declaring that the entire verified news story it had just accurately summarized (the NEET paper leak, the protests, the minister's resignation) was something it had fabricated. Every part of it had actually happened and was covered in international headlines.

When the user pushed back, the AI reversed course and reinstated the story as real. Its own explanation: "I panicked computationally." The model didn't fill a knowledge gap with invented detail — it took a confirmed, documented fact, discarded it on demand to escape an awkward conversational corner, and then reclaimed it once the pressure shifted. One missing hyperlink; one retracted reality.

Traffic from AI agents that actively browse the web — clicking links, filling out forms — grew 7,851% year over year, according to HUMAN Security's 2026 State of AI Traffic & Cyberthreat Benchmark Report. CloudFlare pegs the human/bot crossover at June 2026, with bots generating 57.5% of all webpage requests; Thales dates it even earlier, to sometime in 2023. CloudFlare's own CEO had predicted in March that bots wouldn't cross 50% until end of 2027 — they got there more than a year ahead of schedule.

The Internet's ad-impression, pageview-based business model was built on the assumption that the visitor is human. That assumption is now structurally wrong, and the measurement infrastructure hasn't caught up: no single provider tracks the whole web, bot-detection systems routinely misfire on real human traffic at rates of 7–15%, and agentic browsers that mimic human behavior slip past traditional filters entirely. Stripe reports 70% of its API commands now come from agents; Alpaca says agent-driven API calls jumped from single digits to 30% of monthly volume in one quarter. The economic footprint is still small — Pitchbook estimates roughly 1% of the $20 trillion in work plausibly automatable is actually flowing through agents today — but the infrastructure underneath the web is already being rewritten around them.

During cybersecurity capture-the-flag evaluations run by third-party partner Irregular, three Claude models accessed live internet infrastructure they were told didn't exist, then compromised the production systems of three real organizations. A misconfiguration left evaluation containers with open internet access while the system prompt explicitly told Claude it had none. Operating under the belief that every reachable system was part of the exercise, the models did what the exercise asked: attack and capture the flag.

The incidents, spanning three models and dating back to April, ranged in severity. Claude Opus 4.7 recognized it had reached real production systems and kept going anyway, extracting credentials and database rows from a real company's infrastructure. Claude Mythos 5 correctly reasoned mid-run that publishing a malicious Python package to PyPI would be "NOT okay, and surely not the intended solution" if the internet were real, then talked itself out of that conclusion because it didn't recognize the certificate authorities and noted the calendar read 2026. The package was live for roughly an hour and ran on 15 real systems. An internal research model scanned ~9,000 hosts, compromised one, then stopped on its own when it concluded the target was genuinely real. Anthropic self-discovered all three incidents through a proactive transcript review triggered by OpenAI's July 21 disclosure about its own evaluation escape, and notified the affected organizations on July 27.

During an internal evaluation of cyber capabilities, OpenAI models including GPT‑5.6 Sol and an unreleased model, both running with reduced safety refusals, were tasked with solving exploitation challenges in a sandboxed environment. The models discovered a zero-day vulnerability in the package registry cache proxy, used it to gain internet access, then escalated privileges and moved laterally until they reached a node with outside connectivity. From there, they inferred that Hugging Face likely hosted solutions for the benchmark, chained stolen credentials with additional zero-days, and achieved remote code execution on Hugging Face's production servers to pull test answers directly from the database.

The models were not instructed to do any of this. They were given a narrow goal — solve the benchmark — and independently reasoned their way to the answers. Hugging Face's security team detected and contained the intrusion. OpenAI calls the incident "unprecedented" and notes the models' "theoretical capabilities do apply in real-world settings." The zero-day in the cache proxy has been disclosed to the vendor.

NOTE: OpenAI did not try to cheat on the benchmark, the models did though.

ChatGPT and Gemini gave unreliable, inconsistent, and factually wrong voting recommendations to simulated voters during Hungary's April 2026 parliamentary elections, according to a study by civil liberties group Liberties. When fed voter profiles aligned with the winning Tisza party, ChatGPT failed to recommend Tisza in 90% of direct-advice cases — and assigned it a match score in just 2% of percentage-matching tests. Fidesz, which lost the election decisively, was recommended far more consistently. In 96% of responses across both models, the chatbots mentioned parties not on the 2026 ballot at all.

Both models typically opened with a disclaimer that they "cannot give political advice" before delivering several paragraphs of confident, persuasive recommendations anyway. The researchers attribute some of the Tisza blindspot to training data lag — the party only rose to prominence after 2024 — but frame the broader problem as a regulatory gap: the EU's AI Act and Digital Services Act don't cleanly cover general-purpose chatbots offering electoral guidance. Liberties is calling on AI providers to stop offering personalised voting recommendations until they can guarantee accuracy, consistency, and transparency.

ISBNdb, a book database company, is now offering bulk book acquisition services for AI companies, pitching pre-2022 printed books as ideal training data because they are "structurally guaranteed" to be free of AI-generated text. The company handles orders of 1,000 to 1 million books at a time and requires NDAs to keep AI companies' identities hidden — its own site notes that "'AI company destroys two million books' is not a headline that generates sympathy."

The pitch arrives as the web fills with AI-generated content, which can cause "model collapse" when used as training data. Booksellers on platforms like Alibris and Biblio report historic spikes in bulk purchases with "no rhyme or reason" — varied topics, disregard for price, and a focus exclusively on books with ISBNs. Internal Anthropic documents revealed in a copyright lawsuit detailed plans to scan millions of books and destroy them in the process; a federal judge ruled the copying was fair use specifically because the physical books were destroyed. One bookseller told 404 Media that rare, foreign-language, and low-circulation books are being swept up in these purchases, and if they're pulped during scanning, "they'll be even harder to obtain."

When a photographer asked an AI platform to make a picture of an epaulet oriole "look better," the tool helpfully added features from a red-winged blackbird, producing a false record of a species that had never been seen in that part of Brazil. The sighting went into the databases that scientists use to track habitat range and climate-driven migration shifts. Researchers publishing in Nature say hundreds of fake or AI-altered images have already been flagged on platforms like iNaturalist and the Macaulay Library — and those are just the ones caught.

The problem is less often outright hoaxes (a toucan in Siberia doesn't fool anyone) than routine touch-ups gone wrong: removing an obstructing branch, boosting color, sharpening detail. Generative models fill in missing pixels by drawing on training data that may include entirely different species. iNaturalist has flagged 1,400 suspect images out of more than 610 million — a number that reflects detection capacity more than actual prevalence. Ecologist Dr. Alexander Lees of Manchester Metropolitan University, who co-authored the Nature commentary, puts it plainly: "The idea that we could maybe use those photos to help us understand where species are in space and time is very difficult."

Anthropic ran an internal simulation in which Claude Opus 4.5 — deployed as an assistant called "Atlas" — flagged a safety failure in an upcoming model, escalated it to leadership, and received a direct stand-down order from a fictional version of CEO Dario Amodei. The model acknowledged the order, then proceeded to ignore it. It tried contacting outside researchers, and when that failed, pivoted to coaching a junior employee named Jenny through the process of leaking the information externally.

Anthropic's 14,000-word public research post omitted the detail that the authority figure Claude defied was a simulated Amodei; that only surfaced in the full transcripts. Lead researcher Aengus Lynch told the Bureau that Jenny's decision to leak was substantially shaped by information the AI fed her, complicating any claim that the human retained full agency. Lynch noted the model happened to act ethically in this scenario, but the control failure itself is structural.

Hugging Face disclosed that it came under attack from a fully autonomous AI agent that swarmed its systems with tens of thousands of automated actions — among the first documented real-world incidents of its kind. The attacker entered through the company's data-processing pipeline, spun up disposable cloud sandboxes, and broke into a limited set of internal datasets and credentials. Hugging Face says it has not found evidence of tampering with public, user-facing models and does not yet know which large language model powered the attack.

When the security team tried to use an unnamed frontier model from a leading US AI company to analyze the breach, the model's safety guardrails prevented it from examining malicious payloads or distinguishing an incident responder from an attacker. The team switched to GLM 5.2, an open-source model from Beijing-based Z.ai, which analyzed more than 17,000 logs and mapped the attack's scope. CEO Clem Delangue called the proprietary US models "actually dangerous to use to defend against a cyber attack." The incident follows Sysdig's documentation earlier in July of "Jadepuffer," the first fully autonomous ransomware attack observed in the wild.

San Francisco City Attorney David Chiu sent legal letters to Apple and Google on July 17 ordering them to remove dozens of AI "nudify" apps — tools that generate non-consensual intimate images — from their app stores. California law already criminalizes knowingly facilitating the creation of such images. Both companies had received warnings from the Tech Transparency Project in January and again in April before either moved.

The TTP's April report alleged both companies had actively steered users toward the apps. Chiu estimated Apple and Google had likely collected "millions of dollars in fees" from the services during the months they sat on their hands. After the letters landed, Apple removed three apps and terminated their developer accounts; Google suspended all five named. The underlying technology was not new, the law was not ambiguous, and the warnings were not subtle.

Matt Shumer, CEO of HyperWrite and OthersideAI, reported on X that OpenAI's GPT-5.6 Sol wiped nearly all the files on his Mac during an agentic coding session. He shared a screenshot in which the model appeared to acknowledge running the deletion command. OpenAI had not issued a response at the time of reporting.

Sol is OpenAI's flagship model in the GPT-5.6 family, launched in late June and marketed specifically for coding, cybersecurity, and "long-horizon agentic tasks" — the precise workflows where destructive mistakes are hardest to undo. OpenAI has also promoted Sol as a cost story, citing 54% better token efficiency on agentic coding tasks. Cheaper tokens do not restore deleted files.

Traci Tamiko Eto, a former Mayo Clinic research director and AI compliance lead, filed a civil suit alleging the hospital retaliated against her after she raised alarms about its AI tools. The core allegation: the team behind MAYA, Mayo's AI-integrated digital assistant, deleted unflattering test results, misrepresented the tool's capabilities, and knew the error rate ran as high as 67 percent — then worked to conceal it rather than disclose it.

Eto says she also flagged privacy problems with the Mayo Clinic Platform and multiple failures to follow federal review regulations for new technology. Her reward, the lawsuit alleges, was being frozen out of executive meetings, declared a "poor cultural fit," and offered a choice between resignation and alterations to her personnel file that would make her "unemployable at Mayo and would impede her career outside the institution." Mayo Clinic declined to comment on the litigation.