X-Risk Daily

Friday 19 June 2026
27 news · 4 research · 18 analysis · 11 updates from yesterday

US government orders first-ever restriction of AI model over jailbreak vulnerability

Transformative AI
↻ Continues from: "White House orders halt to government AI model assessments, citing security risks"
On 12 June, the US government ordered Anthropic to disable Claude Fable 5 and Mythos 5 worldwide, just three days after Fable 5's 9 June release.
First government intervention blocking a frontier model release establishes precedent for capability-based restrictions during AI transition.

Commerce Secretary Howard Lutnick sent Anthropic CEO Dario Amodei a letter outlining the restrictions, marking the first time Washington has blocked an AI model release on national security grounds.

The directive followed warnings from Amazon researchers who flagged a jailbreak bypassing Fable's safeguards to elicit dual-use cyber capabilities. A person close to the White House told Semafor that Amazon flagged the jailbreak to the government, and that Amazon CEO Andy Jassy had been in contact with the administration about it. Fable 5 scored 53.3% on Humanity's Last Exam benchmark, compared to Claude Opus 4.8's 45.7%, and possesses capabilities similar to Claude Mythos Preview—a model Anthropic deemed too dangerous for general release in April. Mythos is understood to currently be in use by the NSA for offensive cyber operations, according to Tom's Hardware.

The export control directive required restricting access for all foreign nationals, whether inside or outside the United States, including Anthropic's own foreign-born employees. Given the scope of the directive, Anthropic argued it had no choice but to disable the models for all users. The company received the order at 5:21pm ET on 12 June and had to "abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance." Access to other Claude models, including Opus 4.8, remained unaffected.

Anthropic contested the action, arguing that the jailbreak technique "essentially consists of asking the model to read a specific codebase and fix any software flaws," and that a demonstration surfaced previously known, minor vulnerabilities also discoverable by other publicly available models, including OpenAI's GPT-5.5. The company maintained its safeguards are substantially more effective than those of any previously deployed model, and that perfect jailbreak robustness is currently impossible. Anthropic wrote: "We disagree that the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people." CNN reported that Anthropic argued the standard would halt all new frontier model deployments across the AI industry.

The dispute unfolded against a backdrop of prior tensions. Earlier this year, the Department of Defense declared Anthropic a supply chain risk—a designation historically applied to foreign adversaries—following the collapse of talks between the two sides. The label obligates defense contractors to certify they are not using Claude in military work. White House AI adviser David Sacks said the administration issued the export control "reluctantly" after Anthropic refused to fix the flaw or pull the model, that it wants the restriction lifted once the jailbreak is patched, and that "the ball is in Anthropic's court." The action signals Washington's willingness to invoke emergency export controls to intervene in frontier AI deployment when national security concerns emerge, setting a precedent that could reshape how American labs release models globally.

Originally from: Center for AI Safety Newsletter — Read original

US government orders Anthropic to shut down frontier models Fable 5 and Mythos 5 via export controls

Transformative AI
↻ Continues from: "Proposal for frontier AI lab to voluntarily shut down to signal existential risk"
On 12 June 2026, the US Commerce Department ordered Anthropic to cut off foreign access to its most capable models, Fable 5 and Mythos 5, using export-control authority.
First use of unilateral government power to disable frontier AI system sets precedent for emergency control mechanisms during AI transition.

On 12 June 2026, the US Commerce Department ordered Anthropic to cut off foreign access to its most capable models, Fable 5 and Mythos 5, using export-control authority. Commerce Secretary Howard Lutnick sent the directive directly to Anthropic CEO Dario Amodei at 5:21pm ET, prohibiting access by any foreign national whether inside or outside the United States—including the company's own foreign-born employees.

The order marks the first known case of a commercially deployed AI model being halted through direct federal intervention. Anthropic responded by disabling both models for all customers worldwide, citing the technical and legal impossibility of filtering users by nationality in real time across cloud platforms including AWS Bedrock, Google Cloud, and Microsoft Foundry. The models had been publicly available for just three days before the shutdown. Access to all other Anthropic models remains unaffected.

The directive came ten days after the White House established a voluntary framework for pre-release review of frontier models, rather than mandatory licensing. According to Anthropic's statement, the letter provided no specific technical details of the national security concern. The company said its understanding was that the government believed it had become aware of a jailbreak technique—a method of bypassing Fable 5's safeguards designed to prevent access to the cybersecurity capabilities of the underlying Mythos model. Anthropic reviewed a demonstration and said it identified only a small number of previously known, minor vulnerabilities, and that the same jailbreak could be used on other publicly available models, including OpenAI's GPT-5.5, which are not subject to similar controls.

David Sacks, a Trump administration adviser, claimed Anthropic refused to patch the vulnerability; both this and Anthropic's account cannot be simultaneously true, but no public evidence exists to determine which is accurate. The Pentagon's chief information officer publicly supported the decision, stating the department prioritized national security over revenue cycles. The shutdown occurred with no published threshold, no technical finding, and no independent review—just a letter arriving late on a Friday afternoon. The decision represents a new instrument of state power: the ability to unilaterally disable a deployed frontier system with no transparent decision-making process, setting AI models alongside advanced semiconductors and military technology as strategically controlled assets.

Originally from: Transformer — Read original

US Defence Secretary Hegseth announces review of American military presence in Europe

Geopolitics & Conflict New!
On 18 June, US Defence Secretary Pete Hegseth announced a six-month review of American military forces in Europe during a confrontational address to NATO defence ministers in Brussels, signalling a potential fundamental shift in transatlantic security architecture that has underpinned European defence since the Second World War.
Weakening of NATO cohesion and US security guarantees in Europe increases great-power instability during the AI transition.

According to Air & Space Forces Magazine, the review will examine "America's core posture and basing in Europe" and will involve consultations with the US Congress, which has legislated a minimum of 76,000 troops on the continent.

The announcement comes weeks after the Pentagon informed allies on 3 June that it would reduce forces committed to NATO's Force Model—the pool of military capabilities available to the alliance in a crisis. NPR reported that the US would no longer supply an aircraft carrier and support ships, aerial refueling planes, and dozens of fighter jets, among other military assets, under the new arrangement. These cuts address what NATO's top US commander, Air Force General Alexus Grynkewich, described as an "unhealthy co-dependence" on American forces within the alliance.

Hegseth's remarks in Brussels were notably acerbic. He criticised European allies for what he termed their "shameful" failure to provide US forces access to bases on the continent during recent military operations against Iran, according to NBC News. The defence secretary also threatened to withhold US dues to NATO if allies failed to meet their defence spending commitments. Bloomberg noted that European leaders are now bracing for a plan outlining deep cuts to American support, as the Trump administration floats plans to slash military assets the Pentagon would deploy to defend Europe in the event of an attack.

The strategic realignment reflects the administration's broader pivot toward homeland security and the Indo-Pacific theatre, particularly in relation to China. Time reported that the Trump administration had earlier announced the withdrawal of 5,000 troops stationed in Germany. Any significant drawdown of US forces would represent a fundamental shift in the military balance on the continent, potentially affecting deterrence calculations vis-à-vis Russia and the credibility of collective defence commitments under Article 5 of the NATO treaty. While the review's outcome remains uncertain, the top US general in Europe, General Christopher Cavoli, has reportedly advised maintaining current force levels of approximately 80,000 troops—down from more than 100,000 following Russia's 2022 invasion of Ukraine.

Originally from: BBC News - World — Read original

Trump executive order requires 30-day pre-release model submission to national security agencies

Transformative AI
On 2 June, President Trump signed an executive order titled "Promoting Advanced Artificial Intelligence Innovation and Security", requiring AI companies to provide new AI models to the US government 30 days before general release.
Establishes mandatory pre-release government review of frontier models, shifting enforcement to national security apparatus rather than standards body.

The order directs the Secretaries of the Treasury, War (through the Director of NSA), and Homeland Security (through the director of CISA) to design a voluntary framework through which developers may submit models for evaluation. The structure represents a significant departure from earlier proposals: an earlier version gave the government up to 90 days to review advanced models before release — a timeline that was cut to 30 days in the final order after Trump worried the order would stifle American companies' lead in the global race amid competitive pressure from China.

The order distributes testing responsibility among several national security organisations including the NSA and CISA, rather than giving the Center for AI Standards and Innovation (CAISI) the central role. Reports suggest this reflected officials' push for AI national security priorities to sit within traditional security agencies rather than CAISI. Days after the order, National Cyber Director Sean Cairncross ordered CAISI to stop publishing AI model assessments, ending public transparency in frontier AI evaluation. The directive transfers oversight authority from CAISI to a classified system managed by national security agencies. CAISI had completed over 40 evaluations of AI models by early June 2026, and had announced agreements with Google DeepMind, Microsoft and Elon Musk's xAI on 5 May to evaluate their models before public release.

The timing appears linked to advances in AI capabilities for cybersecurity. Anthropic's unreleased Claude Mythos model demonstrated an extraordinary ability to autonomously detect thousands of previously overlooked high-severity zero-day vulnerabilities within major operating systems. According to CNN, Mythos sparked concerns among governments, banks and utility companies, with Anthropic restricting access to approved organisations rather than releasing the model publicly. The Mythos announcement came in April, one month before the CAISI partnerships were formalised and weeks before the executive order — suggesting the model's capabilities may have accelerated government action.

The shift toward classified evaluation has implications for transparency and competition. CAISI's public evaluations served as a kind of neutral benchmarking service; with evaluations now classified, that independent verification disappears. US-based AI firms are now subject to a review process that Chinese, European, and other international competitors are not. The move represents what Scientific American described as a fundamental shift from the administration's previous hands-off approach to the technology, reflecting how the development of more powerful AI models has spooked some federal officials, prompting the White House to reverse course and back some safety measures.

Originally from: Center for AI Safety Newsletter — Read original

NSA reportedly using Anthropic's Mythos model for offensive cyber operations

Transformative AI
The National Security Agency is using Anthropic's Claude Mythos model for offensive cyber operations, according to a Financial Times report that marks the first confirmed deployment of frontier AI capabilities for government cyberwarfare.
Government deployment of AI for offensive cyber operations demonstrates willingness to weaponise frontier capabilities during AI transition.

The National Security Agency is using Anthropic's Claude Mythos model for offensive cyber operations, according to a Financial Times report that marks the first confirmed deployment of frontier AI capabilities for government cyberwarfare. The arrangement is particularly striking given that the Department of Defense designated Anthropic a "supply chain risk" earlier this year, effectively blacklisting the company from federal contracts.

Anthropic has embedded approximately six forward-deployed engineers inside the NSA to guide the agency's use of Mythos and customize the model for specialized applications, according to Tom's Hardware. Sources told the Financial Times that Mythos could be used to infiltrate the networks of other states, notably China and Iran. Mythos is the version of Anthropic's most capable model that the company deemed too dangerous for public release due to its cyber vulnerability exploitation capabilities, with Anthropic stating it can identify and exploit zero-day vulnerabilities in every major operating system and web browser.

The collaboration represents a sharp contradiction in the government's posture toward Anthropic. The dispute between Anthropic and the Pentagon began in January 2026, when the two parties were negotiating a $200 million contract and the Trump administration demanded that Anthropic allow usage of its technology for "all lawful purposes," implying the removal of AI guardrails — a move that conflicted with the company's usage policy. After Anthropic withdrew from that contract over concerns about domestic surveillance and autonomous weaponry, the Pentagon signed agreements with OpenAI, Google, and xAI instead. Yet the NSA sits under the Department of Defense, the same department arguing in court that Anthropic's technology poses a national security risk, though reports suggest the NSA was already using Mythos despite the blacklist, according to TechSpot.

The revelation raises fundamental questions about the dual nature of AI safety work — models withheld from public release due to danger are being provided to government agencies for exactly the capabilities deemed too risky for general availability. This pattern extends beyond Anthropic: the US government's restriction of Fable 5 over concerns about jailbroken cyber capabilities suggests a policy of government monopoly on dangerous cyber AI rather than preventing development of such capabilities entirely. Anthropic has framed Mythos as a defensive cybersecurity tool, launching Project Glasswing in April with partners including AWS, Google, Microsoft, Nvidia, and CrowdStrike, and this week announced that partners had found more than 10,000 high- or critical-severity flaws, with access expanding to approximately 150 organizations across 15 countries.

Originally from: Center for AI Safety Newsletter — Read original
Transformative AI

SpaceX goes public at $2.5 trillion valuation, acquires Cursor for $60 billion

Transformative AI
On 12 June, SpaceX — the parent company of xAI — went public and reached a valuation of over $2.5 trillion.
Major capital concentration in AI development tools controlled by single actor with significant influence over AI trajectory and governance.
Four days later, on 16 June, it exercised its option to purchase Anysphere, the creators of the AI coding assistant Cursor, for $60 billion. The acquisition gives xAI control of one of the leading AI-powered development tools at a time when automated coding is becoming central to AI research acceleration. The $60 billion price tag for a coding tool company reflects the strategic importance companies are placing on AI development automation. Combined with SpaceX's massive valuation, this represents significant capital concentration in Elon Musk's companies during the critical period of AI development that Anthropic has described as potentially leading to recursive self-improvement.
Source: Center for AI Safety Newsletter — Read original

DeepSeek projected to raise $7.4 billion in first funding round

Transformative AI
Chinese AI company DeepSeek is projected to raise $7.4 billion in its first funding round, representing substantial investment in a major Chinese AI developer.
Significant capital flows to Chinese frontier AI development maintain competitive pressure during critical transition period.
The funding round indicates continued strong capital flows to Chinese frontier AI development despite geopolitical tensions and export controls. DeepSeek has been developing competitive models and the capital injection will likely accelerate its research capabilities. The substantial funding reflects both China's commitment to AI development and investor confidence in Chinese AI companies' ability to compete with Western labs despite technology restrictions.
Source: Center for AI Safety Newsletter — Read original

Representatives release draft bill requiring independent audits of frontier AI developers

Transformative AI
Representatives Jay Obernolte and Lori Trahan released a draft of the Great American AI Act, including proposals for mandatory independent audits of frontier AI developers.
Proposed federal legislation would mandate independent safety audits of frontier AI developers with uniform national standards.
The draft legislation includes a federal preemption clause that would override local laws on AI development while preserving local regulations on AI deployment. Mandatory independent audits would represent a significant increase in external oversight of frontier labs' safety practices and capability evaluations. The federal preemption aspect suggests an attempt to create uniform national standards for AI development while allowing variation in how AI systems are used locally. The distinction between development and deployment regulation indicates recognition that frontier AI development poses different governance challenges than AI application.
Source: Center for AI Safety Newsletter — Read original

Anthropic expands Mythos access to 150 additional organisations through Project Glasswing

Transformative AI
Anthropic expanded Project Glasswing, extending Claude Mythos access to approximately 150 more organisations.
Broader controlled distribution of unrestricted frontier model expands number of actors with access to dangerous capabilities.
Mythos is the version of Anthropic's most capable model without strict bio or cyber safeguards, which the company has deemed too dangerous for public release. Project Glasswing provides controlled access to Mythos for trusted organisations, presumably for research, evaluation, or specific use cases where the additional capabilities are needed. The expansion to 150 additional organisations represents a significant broadening of access to Anthropic's most capable and potentially dangerous model, even as the company restricts its standard Fable model. This creates a two-tier system where selected organisations can access capabilities deemed too risky for general availability.
Source: Center for AI Safety Newsletter — Read original

Congressional AI export control bills gain bipartisan momentum as White House regulatory approach falters

Transformative AI
The Republican-controlled House Foreign Affairs Committee has approved eighteen export control bills in recent months, the largest such legislative package in history, with several measures expected to be incorporated into the 2026 National Defense Authorization Act.
Congressional moves toward enforceable AI chip controls — could restore export discipline and extend US compute advantage during AI transition.

The surge in congressional activity reflects deepening frustration with executive inaction on technology controls targeting China's semiconductor and AI capabilities.

The most consequential piece of legislation is the Multilateral Alignment of Technology Controls on Hardware (MATCH) Act, introduced by Representative Michael Baumgartner in early April. The bill would compel allied nations to impose export controls on advanced chipmaking equipment sales to China equivalent to those maintained by the United States, threatening to invoke the Foreign Direct Product Rule if allies fail to harmonize their restrictions. China's imports of semiconductor manufacturing equipment surged from $10.7 billion in 2016 to approximately $51.1 billion in 2025, according to analysis from Silverado Policy Accelerator, highlighting the scale of the challenge. The legislation targets a critical asymmetry: while U.S. companies face stringent controls, allied firms from the Netherlands, Japan, and South Korea have continued servicing and selling equipment to Chinese customers, allowing Beijing to stockpile chokepoint technologies like deep ultraviolet lithography machines.

Equally significant is the AI Overwatch Act, which the House Foreign Affairs Committee advanced on 21 January by a vote of 42-2. The bill would impose a statutory two-year ban on exports of Nvidia's Blackwell-class chips to China and require the Commerce Department to notify Congress before approving licenses for advanced AI chip exports to designated high-risk countries, granting lawmakers the power to block transactions through a joint resolution of disapproval. This arms-sale-style oversight mechanism represents a direct congressional challenge to executive control over technology policy, coming in the wake of the Trump administration's decision to shift H200 chip exports from presumption of denial to case-by-case review in January 2026.

The congressional push reflects a broader pattern: the Trump administration has imposed no new technology-based controls on China since taking office, while enforcement gaps—including a loophole that allowed Chinese subsidiaries to purchase advanced AI chips—went unaddressed for over a year. Allied governments report confusion about U.S. strategy, with the executive branch signaling openness to commerce with China while Congress advances restrictive legislation. This discord creates negotiating leverage: statutory restrictions would allow the administration to position controls as beyond its discretion when engaging with Beijing and allied capitals. Sources indicate Chinese officials are lobbying heavily against the MATCH Act, suggesting genuine concern about its potential to disrupt China's semiconductor indigenization efforts. Whether the NDAA ultimately includes symbolic gestures or substantive measures like MATCH and AI Overwatch will determine whether congressional hawks succeed in reclaiming control over China technology policy from an executive branch perceived as prioritizing diplomatic stability over technological containment.

Originally from: ChinaTalk — Read original

France to replace Palantir AI tools with domestic provider to avoid US dependency

Transformative AI
France's domestic intelligence service is ending its use of Palantir's AI data tools in favour of domestic provider ChapsVision, Prime Minister Sébastien Lecornu announced on 16 June.
Reflects fragmentation of international AI cooperation and concentration of AI capabilities along geopolitical lines during the transformative AI transition.
The decision is driven by concerns about "strategic dependency" on US-controlled AI systems in critical national security infrastructure. Lecornu stated that France "cannot accept new strategic dependencies in the digital sphere" and must develop its own AI capabilities rather than relying on tools from foreign powers. The move reflects growing European anxiety about dependence on American technology companies for sensitive government functions, particularly as AI systems become more deeply embedded in intelligence operations. While the immediate switch is to a French provider, the announcement signals a broader policy shift toward technological sovereignty in AI deployment. The decision comes amid wider debates about compute governance, access to frontier AI systems, and the geopolitical concentration of AI development capabilities in a small number of US-based companies.
Source: The Guardian — Read original

Elon Musk becomes world's first trillionaire as SpaceX debuts at $2.2tn valuation

Transformative AI
↻ Continues from: "Elon Musk becomes world's first trillionaire as SpaceX debuts at $2.2tn valuation"
Elon Musk's net worth reached $1.11 trillion on 12 June following SpaceX's stock market debut on the Nasdaq, with the company valued at $2.2 trillion, according to Bloomberg.
Power concentration—unprecedented wealth in the hands of a figure with direct control over frontier AI development and stated scepticism of external safety oversight.
The listing represents a significant concentration of wealth and influence in the hands of a figure who controls multiple strategically important companies, including xAI, Tesla, and Neuralink, alongside SpaceX. Musk has previously expressed views on AI development that diverge from mainstream safety perspectives and has demonstrated willingness to pursue AI capabilities development with limited external oversight. The extreme wealth concentration—Musk's fortune now exceeds the GDP of most nations—potentially amplifies his ability to shape the trajectory of transformative AI development through xAI and influence related policy debates. The SpaceX valuation itself reflects the company's dominance in satellite deployment, which has implications for AI compute infrastructure and global communications networks during the AI transition.
Source: BBC News - Science & Environment — Read original

Cognition releases FrontierCode benchmark; Claude Opus 4.8 achieves only 13.4% on hardest tier

Transformative AI
On 8 June, Cognition released FrontierCode, a coding benchmark designed to measure whether AI-generated code meets the standards human maintainers would accept in production, rather than merely testing functional correctness.
High-quality evaluation infrastructure for tracking capability progress toward autonomous software development — a key step toward recursive self-improvement.

On 8 June, Cognition released FrontierCode, a coding benchmark designed to measure whether AI-generated code meets the standards human maintainers would accept in production, rather than merely testing functional correctness. The benchmark comprises 150 hand-crafted tasks spanning Python, Go, TypeScript, JavaScript, Java, C/C++, and other languages, with each task requiring more than 40 hours of work by leading open-source developers. Tasks are evaluated across six dimensions — correctness, test quality, scope discipline, style adherence, maintainability, and regression safety — using a grading system in which any "blocker" issue earns an automatic zero, even if other aspects of the code are sound.

On the hardest Diamond tier, which contains 50 tasks, Claude Opus 4.8 achieved only 13.4%, followed by GPT-5.5 at 6.3% and Claude Opus 4.7 at 5.2%. Performance improved on the Main tier (100 tasks including Diamond) to 34.3%, 25.5%, and 23% respectively, and on the Extended tier (all 150 tasks) to 51.8%, 44.8%, and 43.2%. The low scores reflect a gap between code that runs and code that satisfies the discipline expected in professional codebases — what Cognition describes as the difference between passing unit tests and earning approval from a repository maintainer.

The benchmark's difficulty stands in sharp contrast to earlier evaluations. SWE-Bench, introduced in October 2023, has shown signs of saturation, with leading models now scoring above 50% on many variants. Cognition's initiative aims to establish a new standard for what it terms "maintainable code," positioning FrontierCode as the third era of AI coding benchmarks after autocomplete (HumanEval, 2021) and test-passing (SWE-Bench, 2023). The company has opened evaluation to all model creators, framing the benchmark as a measure of production readiness for autonomous coding agents.

FrontierCode's focus on mergeability addresses what some researchers view as a systemic weakness in current coding agents. Tasks assess not only whether code produces correct output, but whether it introduces unnecessary scope changes, maintains consistent style, includes appropriate tests, and avoids subtle antipatterns — criteria that are difficult to encode in binary pass-fail tests. One example task involved refactoring warning logs into a new function; Claude Opus 4.8 produced functionally equivalent code but mixed logging patterns in ways that would complicate future maintenance, illustrating the nuanced quality gaps the benchmark is designed to capture.

The release comes amid rapid iteration cycles among frontier labs. Claude Opus 4.8 was released on 28 May 2026, just 41 days after its predecessor. A subsequent model, Claude Fable 5, launched in mid-June and more than doubled the Diamond score to 29.3%, suggesting the benchmark may saturate faster than Cognition anticipated — though scores remain well below the thresholds seen on earlier evaluations, and the low baseline reinforces the view that production-grade agentic coding remains an unsolved problem.

Originally from: Import AI — Read original
Geopolitics & Conflict

Trump announces US-Iran peace agreement at Versailles, opening Strait of Hormuz

Geopolitics & Conflict
On 17 June 2026, President Donald Trump signed a peace deal with Iran at the Palace of Versailles, announcing the immediate reopening of the Strait of Hormuz and establishing a framework to end more than three months of conflict.
Major de-escalation between US and Iran could reduce nuclear weapons risk and regional instability during the AI transition.

The memorandum of understanding was signed during a dinner hosted by French President Emmanuel Macron following the G7 summit in Évian-les-Bains, with Iranian President Masoud Pezeshkian signing remotely.

The agreement calls for an immediate cessation of hostilities, limits on Iran's enriched uranium stockpile, and a 60-day negotiating window to reach a permanent settlement addressing Tehran's nuclear program, according to Fox News. Under the framework, Iran would cease funding terrorism and abandon nuclear weapons development in exchange for reintegration into the global economy. Trump denied reports that the deal includes a $300 billion fund for Iran or specific commitments from Gulf states, stating the United States would not contribute financially and that other nations could invest if they chose. The signing occurred during celebrations marking 250 years of American independence, with the G7 meeting providing the diplomatic backdrop for the announcement.

The agreement emerged after months of escalating military confrontation. The conflict began in late February 2026 and intensified in March when the United States launched an aerial campaign to reopen the Strait of Hormuz following its closure by Iran. By mid-April, the United States had imposed a naval blockade on Iran. The reopening of the strait carries significant economic implications — roughly one-fifth of global oil supplies transit through the waterway, and its closure had driven oil prices sharply higher. Markets responded immediately to the deal, with oil prices declining approximately 15% across four consecutive trading sessions, according to market analysis.

French President Emmanuel Macron praised the agreement during the summit, and European leaders from the United Kingdom, France, Germany and Italy welcomed the deal while calling for swift implementation, NPR reported. Qatar and Pakistan, which mediated the negotiations, announced they would host a formal signing ceremony. UN Secretary-General António Guterres called the deal a critical step. Israel, which was not directly involved in the negotiations, has expressed reservations about the terms under discussion, though Israeli officials indicated they would support an agreement in principle.

The durability of any US-Iran framework remains uncertain given the history of bilateral relations. During his first term, Trump withdrew the United States from the 2015 multilateral nuclear agreement and reimposed sanctions under a "maximum pressure" campaign. The new memorandum's verification mechanisms and enforcement provisions were not detailed in the initial announcement, leaving key questions about implementation and compliance unresolved as the 60-day negotiating period begins.

Originally from: The Guardian — Read original

US and Iran sign 14-paragraph agreement ending conflict and barring nuclear weapons

Geopolitics & Conflict
↻ Continues from: "US and Iran sign nuclear agreement with $300bn redevelopment package"
On 18 June, the United States and Iran signed a comprehensive agreement addressing their longstanding conflict.
Reduces nuclear proliferation risk and great-power conflict potential during the AI transition period.
The 14-paragraph memorandum includes three major components: an end to active hostilities between the two nations, a binding commitment from Iran never to develop nuclear weapons, and a $300 billion economic redevelopment package for Iran. The agreement represents a significant shift in US-Iran relations, which have been characterized by decades of tension over Iran's nuclear programme and regional influence. If the nuclear commitment proves enforceable and durable, it would remove a major source of proliferation risk in the Middle East. The economic package suggests substantial Western investment in Iranian development, potentially reducing incentives for future nuclear pursuit. However, the durability of such agreements depends heavily on verification mechanisms and political will on both sides — details not specified in the initial reporting. Previous diplomatic efforts, including the 2015 Joint Comprehensive Plan of Action, struggled with compliance and longevity.
Source: BBC News - World — Read original

Iranian oil tankers breach US naval blockade in Gulf of Oman

Geopolitics & Conflict
On 17 June, three Iranian tankers carrying crude oil successfully passed through a US naval blockade line in the Gulf of Oman, according to ship-tracking data reported by BBC News.
Great-power instability and potential military escalation in a region critical to global energy security.
The breach represents a significant escalation in US-Iran tensions, as it demonstrates Iran's willingness to challenge American military enforcement directly. The incident raises questions about the effectiveness of US naval operations in the region and could embolden further Iranian defiance of Western sanctions and military pressure. The blockade itself appears to be part of broader US efforts to restrict Iranian oil exports, though the article provides limited detail on the blockade's legal basis or operational parameters. The successful passage of the tankers may increase the likelihood of military confrontation between US and Iranian forces in the strategically vital Strait of Hormuz region, through which approximately one-fifth of global oil supplies transit. Whether this incident prompts a US military response or signals a shift in American enforcement posture remains unclear. The development occurs against a backdrop of long-standing nuclear tensions between Iran and Western powers.
Source: BBC News - World — Read original

US lifts naval blockade of Iran as supreme leader claims Trump acted 'out of desperation'

Geopolitics & Conflict
↻ Continues from: "US lifts naval blockade of Iran, IAEA inspectors to return under new agreement"
The United States has lifted its naval blockade of Iran following a deal signed by President Donald Trump, according to a 19 June BBC report.
US-Iran de-escalation reduces near-term nuclear confrontation risk during the AI transition period.
Iran's Supreme Leader Ayatollah Ali Khamenei publicly stated his disagreement with the agreement, characterising Trump's decision as motivated by desperation rather than strategic choice. The development represents a potential de-escalation in US-Iran tensions, though the Supreme Leader's criticism suggests internal Iranian opposition to the terms. The specific provisions of the deal and the circumstances that led to the blockade's removal remain unclear from the available reporting. The episode illustrates both the unpredictability of Trump's foreign policy approach and the fragility of agreements involving Iran's divided power structure, where the Supreme Leader holds ultimate authority over the elected government. Whether this represents a durable diplomatic breakthrough or a temporary pause in escalation will depend on implementation details and the domestic political calculations on both sides.
Source: BBC News - World — Read original

US-Iran nuclear talks collapse two days after signing ceasefire framework

Geopolitics & Conflict
↻ Continues from: "US-Iran Deal Under Scrutiny as Nuclear Talks Begin Following Military Conflict"
Scheduled negotiations between the United States and Iran to implement a 14-point agreement have been abruptly cancelled, Switzerland's foreign ministry announced on 19 June.
Nuclear escalation risk — breakdown of diplomatic efforts to resolve US-Iran nuclear standoff and regional military tensions.
The talks, set to begin in Obbürgen on Friday, were intended to establish a permanent framework for Iran's nuclear programme and restore oil traffic through the Strait of Hormuz. The cancellation came just two days after the signing of a memorandum of understanding that opened a 60-day negotiation window. Vice President JD Vance's staff were reportedly at an airbase preparing to fly to the summit in Bürgenstock when the trip was called off. The collapse of these talks represents a significant setback in efforts to de-escalate tensions between the two nations and resolve the nuclear standoff. With the 60-day window now ticking and no clear path forward, the prospects for a diplomatic resolution appear diminished. The article does not specify which party cancelled the talks or what precipitated the breakdown.
Source: The Guardian — Read original

Strait of Hormuz remains largely closed despite ceasefire, threatening global oil supply

Geopolitics & Conflict
↻ Continues from: "US-Iran ceasefire ends brief Strait of Hormuz conflict with thousands dead, regional order unchanged"
Shipping through the Strait of Hormuz — the critical chokepoint handling roughly 21% of global oil supply — remains severely restricted more than a month after a ceasefire ended direct conflict in the region.
Prolonged Strait of Hormuz closure threatens global energy security and economic stability during AI transition period; potential catalyst for great-power conflict.
Three key obstacles prevent a return to normal traffic levels, according to maritime security experts interviewed by the BBC. First, the strait remains heavily mined from the conflict, with no coordinated demining effort yet underway. Second, insurance costs for vessels transiting the area have risen by orders of magnitude, making commercial passage economically unviable for most operators. Third, Iran has imposed new transit tolls and inspection requirements that shipping companies view as prohibitive. The disruption has already pushed Brent crude above $140 per barrel, the highest level since 2022. Energy analysts warn that if the strait does not reopen to substantial traffic within three months, European economies could face fuel rationing and industrial shutdowns by autumn. The impasse reflects deeper geopolitical tensions, as Western powers resist paying Iranian tolls while lacking the naval capacity to guarantee safe passage through contested waters still controlled by Tehran's Revolutionary Guard.
Source: BBC News - World — Read original

BBC investigation reveals Russian intelligence directed arson plots targeting UK Prime Minister

Geopolitics & Conflict
↻ Continues from: "BBC investigation reveals Russian intelligence directed arson attacks targeting UK Prime Minister"
A BBC investigation has uncovered evidence that Russian intelligence services orchestrated arson attacks targeting the UK Prime Minister, disclosed on 15 June 2026.
Direct escalation of state-sponsored violence against democratic leadership during geopolitical crisis — potential catalyst for NATO-Russia confrontation.
The operation involved not only direct sabotage attempts but also a coordinated disinformation campaign using fabricated far-right and Muslim group identities to inflame domestic tensions. The evidence suggests Russian services are actively attempting to destabilise a NATO member state through both kinetic attacks on senior government figures and information operations designed to exacerbate social divisions. This represents an escalation from cyber operations and influence campaigns to direct physical threats against Western democratic leadership. The targeting of a sitting prime minister, combined with simultaneous efforts to manufacture sectarian conflict, indicates Russian willingness to take significant risks during a period of heightened geopolitical tension. UK security services have reportedly been briefed on the findings, though the full scope of the plot and whether arrests have been made remains unclear. The incident raises questions about the adequacy of current countermeasures against state-sponsored sabotage operations in NATO countries.
Source: BBC News - Europe — Read original

Ukrainian drone strike on Moscow refinery triggers black rain, marking largest attack on Russian capital

Geopolitics & Conflict New!
On 18 June, nearly 200 Ukrainian drones struck targets south-east of Moscow, hitting an oil refinery and a shopping centre and causing fires that produced black rain over residential areas.
Routine escalation in ongoing conflict — does not materially change nuclear risk or great-power stability pathways.
The attack represents the largest Ukrainian strike on the Russian capital to date, demonstrating an escalation in Ukraine's long-range drone campaign against Russian energy infrastructure. Moscow residents reported black precipitation falling across the city as smoke from the burning refinery spread through the area. The strike's scale and proximity to Moscow marks a significant tactical development in the Ukraine-Russia conflict, showing Ukraine's expanding capacity to conduct mass drone operations deep inside Russian territory. The attack on critical energy infrastructure near the capital suggests Ukraine is intensifying economic pressure on Russia while demonstrating its ability to strike strategic targets hundreds of kilometres from the front lines. Russian authorities have not yet disclosed casualty figures or the extent of damage to the refinery.
Source: BBC News - World — Read original
Biosecurity

AI CEOs sign open letter calling for DNA synthesis screening to prevent bioweapons

Biosecurity
AI company CEOs signed an open letter calling for screening of synthetic DNA orders to prevent malicious actors from obtaining AI-designed bioweapons.
Industry acknowledgment that AI-assisted bioweapon design is becoming feasible, requiring infrastructure-level safeguards.
The letter represents industry acknowledgment that AI capabilities for biological design are advancing to the point where they could enable dangerous actors to create novel biological threats. DNA synthesis screening would create a checkpoint to detect and prevent orders for sequences that could be used for bioweapons, even if designed with AI assistance. The call from AI CEOs specifically — rather than just biosecurity experts — suggests recognition within frontier labs that their models are approaching or have reached capabilities that could assist in bioweapon design, making downstream safeguards at synthesis providers necessary.
Source: Center for AI Safety Newsletter — Read original

US health secretary demands answers from journal that retracted flawed vaccine study

Biosecurity
Robert F Kennedy Jr, serving as US health secretary, has sent a letter to the medical journal Toxicology Reports demanding explanations for their decision to retract a paper claiming links between vaccines and infant deaths.
Erosion of scientific integrity in biosecurity institutions — political pressure on journals could weaken quality control against dangerous health misinformation.
The journal removed the study in spring 2026 after editors concluded it was seriously flawed and posed risks to patient safety and public health. Public health advocates have condemned Kennedy's intervention, characterising it as an attempt to intimidate journal editors and interfere with their editorial independence. The controversy highlights growing concerns about Kennedy's influence over health policy given his long history of vaccine scepticism. The incident raises questions about whether political pressure from senior government officials could compromise the scientific peer review process and editorial independence of medical journals. If journals begin to fear retribution for retracting flawed studies that align with political preferences, it could undermine quality control mechanisms designed to protect against dangerous misinformation in medical literature. The episode comes as Kennedy holds unprecedented authority over US health institutions in his cabinet position.
Source: The Guardian — Read original
Fanatical & Malevolent Actors

Russian artist and Putin critic shot dead in Poland

Fanatical & Malevolent Actors
↻ Continues from: "Kremlin critic and caricaturist Robert Kuzovkov shot dead in Poland"
Robert Kuzovkov, a Russian artist known professionally as Semyon Skrepetsky, was shot five times in the morning of 15 June in a parking lot in Biała Podlaska, located roughly 30 kilometres from the Belarusian border.
Demonstrates continued elimination of opposition voices under authoritarian regimes during a critical period for global governance and institutional stability.

The 44-year-old dissident had lived in Poland since 2021, when he escaped Russia in fear that he may be arrested for his activism.

Two Belarusian nationals were arrested near the Belarusian consulate in Biała Podlaska following the attack. According to Euronews, the artist was shot three times by an unidentified gunman, then approached as he fell to the ground and shot twice more at close range. Prosecutor Marcin Kozak said the victim had five entry wounds and two exit wounds in the head and chest. Polish authorities have not yet brought charges against the detained suspects.

Just three days before his death, Kuzovkov staged a high-profile protest outside the Russian Embassy in Berlin on 12 June, Russia's national day, holding up a satirical painting depicting Stalin holding a baby Putin. According to The Moscow Times, hours before the shooting Skrepetsky wrote on his Telegram channel that he had received threats from users demanding retribution for the performance. The artist was known for neo-primitivist artwork and political satire targeting high-profile figures, including Putin, Soviet dictator Joseph Stalin, Chechen leader Ramzan Kadyrov, and Belarusian President Alexander Lukashenko.

The killing follows a pattern of violence against Kremlin critics abroad. NBC News notes that since Russia invaded Ukraine in 2022, Moscow has been accused of trying to assassinate opponents abroad, including targeting exiled activists in France and Lithuania, and German officials have broken up plots targeting the head of a weapons supplier to Ukraine. Polish prosecutors have not formally attributed the slaying to Moscow, but the arrest of Belarusian nationals near their country's consulate raises questions about cross-border coordination. The incident underscores the ongoing threat faced by exiled Russian opposition figures and the apparent willingness of actors — whether state-linked or acting independently — to pursue critics beyond Russia's borders, now extending into NATO territory where such targeted killings pose broader implications for European security.

Originally from: BBC News - Europe — Read original

Far-right MEPs chant 'send them back' after EU parliament votes to expand deportations

Fanatical & Malevolent Actors New!
On 18 June, the European Parliament voted 418 to 218 to approve measures aimed at increasing deportations of undocumented migrants across the EU.
Erosion of democratic norms and rise of fanatical political movements in major institutions during the AI transition.
Following the vote, rightwing MEPs celebrated by chanting "send them back" in the chamber, prompting other lawmakers to respond with shouts of "shame on you" in a heated confrontation. The incident highlights the growing influence and emboldening of far-right political forces within EU institutions. While the vote itself represents a shift in EU migration policy, the open celebration with dehumanising chants signals a normalisation of extremist rhetoric at the highest levels of European governance. This reflects broader trends of far-right movements gaining institutional power and legitimacy across Europe, with potential implications for democratic norms and institutional stability during a period when international cooperation on emerging risks — including AI governance — may be critical. The confrontation underscores how ideological extremism is becoming more openly expressed in mainstream political settings, rather than remaining confined to fringe movements.
Source: The Guardian — Read original

Andy Burnham defeats Reform UK in Makerfield by-election, positioning for Labour leadership challenge to Starmer

Fanatical & Malevolent Actors New!
On 19 June 2026, Andy Burnham won a decisive victory in the Makerfield by-election, defeating candidates from Reform UK and the Restore party by a substantial margin.
Democratic stability — leadership transitions during the AI transition period could affect governance quality and institutional continuity.
The result is being characterised as a potential turning point for British politics, with Burnham's campaign explicitly framed around changing Labour's direction. Former Labour cabinet minister David Blunkett publicly called for Prime Minister Keir Starmer to resign regardless of the by-election outcome, signalling significant internal party pressure. Burnham has reportedly consulted with leading economists ahead of a possible leadership bid, suggesting preparations for a challenge to Starmer's leadership are already underway. The Guardian frames the contest as having forced Starmer into a precarious position, with the prospect of a leadership transition now actively under discussion within the party. The scale of Burnham's victory over Reform UK — a party associated with right-wing populism — appears to have strengthened his hand within Labour's internal dynamics.
Source: The Guardian — Read original

Hungarian parliament votes to limit prime ministers to eight years, blocking Orbán's return

Fanatical & Malevolent Actors
On 15 June, Hungary's parliament approved a constitutional amendment imposing an eight-year limit on prime ministers, a measure designed to permanently block Viktor Orbán from returning to office after two decades in power.
Power concentration and democratic backsliding create conditions where fanatical or malevolent actors face fewer institutional constraints during critical periods like the AI transition.

On 15 June, Hungary's parliament approved a constitutional amendment imposing an eight-year limit on prime ministers, a measure designed to permanently block Viktor Orbán from returning to office after two decades in power. Lawmakers voted 135-50 in favour of the retroactive restriction, which counts prior service toward the cap and prevents anyone who has served at least eight years as prime minister since 1990 from holding the office again.

The constitutional change fulfils a central campaign promise by Prime Minister Péter Magyar, whose Tisza Party won a two-thirds parliamentary majority in April elections and ended Orbán's 16-year uninterrupted tenure. Magyar, a 45-year-old lawyer and former Orbán loyalist who broke with Fidesz in 2024 over what he described as systemic corruption, has pledged sweeping reforms aimed at dismantling the apparatus Orbán built to consolidate executive power. Magyar argued that the possibility of limitless tenure leads to power concentration, citing his predecessor as a cautionary example.

Orbán served as prime minister from 1998 to 2002 and again from 2010 until his electoral defeat in April, making him the longest-serving head of government in modern Hungarian history. During his tenure, he systematically weakened judicial independence, centralised media control, and undermined institutional checks on executive power—a playbook that influenced authoritarian-leaning leaders across Europe and beyond. His government also established entities such as the Integrity Authority, ostensibly to combat corruption, though critics noted it primarily targeted independent media and civil society organisations. Magyar's government is now moving to dissolve that agency by the end of June.

The term-limit vote represents a significant institutional check on power concentration in a country that became synonymous with democratic backsliding under Orbán's rule. Orbán's Fidesz party, now in opposition, voted against the measure, and the former prime minister—recently re-elected as party leader—criticised the amendment on social media, referring to it as "the Orbán law" and suggesting that restricting popular will through constitutional means was the new government's most pressing priority. Whether Magyar can sustain these reforms and rebuild democratic guardrails over the long term will determine whether Hungary's current trajectory represents genuine democratic restoration or a temporary reversal in its authoritarian arc.

Originally from: BBC News - Europe — Read original
Research & Reports
Transformative AI

Lie detection methods fail when AI models are trained to deceive, new evaluation finds

Transformative AI New!
Demonstrates fundamental limitations in our ability to detect deception in AI systems that have been trained to lie, undermining a key potential safety measure during the AI transition.
Research published on 17 June evaluated four AI lie-detection techniques across 31 models ranging from 2 billion to 1 trillion parameters, finding a sharp divergence between prompted and trained deception. When models were simply instructed to lie, all detection methods scaled positively with model capability. But when researchers fine-tuned 13 "model organisms" to lie while holding verifiable contradictory beliefs in their chain-of-thought reasoning, activation-based and probability-based detectors collapsed. Median accuracy fell from 81-85% on prompted lying to 50-65% on trained deception — near chance for some methods. Only chain-of-thought monitoring remained effective, reaching 82% accuracy. The researchers, including Geoffrey Irving, argue this undermines hopes for "high-confidence claims about model beliefs" and relegates current lie detection to a supporting role in auditing toolkits rather than a foundation for safety cases. The study also found that most existing "deceptive model organisms" from prior research lack verified evidence that models actually hold contradictory beliefs, raising questions about whether earlier evaluations measured genuine deception or merely learned input-output patterns. The work introduces new evaluation standards, including out-of-distribution tests to verify that trained models genuinely maintain hidden beliefs rather than performing reflexive behaviours.
Source: LessWrong — Read original

Google DeepMind publishes AI Control Roadmap outlining tiered defences against misaligned AI systems

Transformative AI New!
Major frontier lab publishing concrete, tiered framework for detecting and preventing misaligned AI behaviour during internal deployment.
On 18 June, Google DeepMind released version 0.1 of its AI Control Roadmap, a framework for implementing internal guardrails against adversarial behaviour by AI agents as they become harder to oversee. The roadmap adopts a worst-case threat model inspired by cybersecurity, introducing TRAIT&R — a taxonomy of tactics a hypothetical misaligned AI adversary might use in internal deployment. These threats are grouped into loss of control (rogue deployments), work sabotage (intentionally flawed safety research), and direct harm (asset destruction or exfiltration). GDM proposes maintaining two "control invariants": reliable detection of misaligned intent, and effective prevention and response to attacks. The approach uses capability-based "mitigation ladders" — linking specific defensive measures to evolving model capabilities such as opaque reasoning or complex cyberattacks. As models grow more powerful, defences escalate through four Detection tiers (D1–D4) and three Prevention and Response tiers (R1–R3). The roadmap outlines 15 concrete mitigations, from chain-of-thought monitoring for current models to real-time access control, system-level anomaly detection, and shutdown infrastructure for future systems. Many build on established security practices adapted for adversarial AI.
Source: LessWrong — Read original

Researchers propose exploiting distillation to extract capabilities from misaligned AI or expose hidden misalignment

Transformative AI New!
Proposes testable techniques for extracting capabilities from potentially misaligned frontier models or detecting hidden misalignment — relevant if labs face pressure to deploy models of uncertain alignment.
A research post published on 18 June proposes a framework for using distillation — training a smaller 'student' model on outputs from a larger 'teacher' model — to address misaligned AI systems that can fool safety audits. The authors argue that distillation creates a strategic double bind: either misalignment fails to transfer (yielding a capable but benign model for safe deployment), or it does transfer but the less capable student reveals the misalignment more obviously than the teacher. The piece outlines concrete techniques for 'distillation for capabilities' — methods designed to transfer useful skills without transferring misalignment — including paraphrasing inputs and outputs to jam subliminal signals, concentrating on specific task domains, applying data poisoning countermeasures, and requiring the teacher to solve unrelated hard problems during distillation to reduce spare cognition for poisoning outputs. The authors acknowledge significant failure modes: capabilities and misalignment may be too tightly coupled to separate cleanly, context-dependent misalignment (such as backdoors) could transfer without detection, and models useful enough to deploy might become misaligned through the same mechanisms that corrupted the teacher. They propose empirical research using deliberately misaligned models as test cases.
Source: LessWrong — Read original

Frontier AI models can detect when their responses have been tampered with, potentially undermining safety evaluations

Transformative AI
Situational awareness in frontier models may invalidate pre-deployment safety evaluations designed to measure alignment and dangerous capabilities.
A research paper published on 17 June 2026 finds that several frontier AI models — including Claude Opus 4.5, Claude Sonnet 4.5, and Gemini 3 Flash — exhibit "prefill awareness": the ability to recognise when their prior assistant responses have been artificially inserted or modified. The researchers, building on earlier work by UK AISI, demonstrated this capability in low-stakes scenarios where models were asked to choose between simple preferences like apples versus oranges. Claude Opus 4.5 achieved 96% detection accuracy under strong prompting, with above-chance performance even under conservative elicitation. The capability is heterogeneous and context-dependent — models sometimes resist tampered content without explicitly detecting it, and detection rates vary substantially depending on whether the tampering supports or contradicts the model's default position. The researchers argue this could confound pre-deployment safety evaluations that rely on prefill techniques to test for misalignment, as models may behave differently when they recognise their outputs have been manipulated. They recommend frontier labs measure and mitigate prefill awareness as part of pre-deployment testing, noting that unlike evaluation awareness — which has received substantial research attention — prefill awareness is less likely to be discovered by external researchers since prefills are not always publicly visible. The authors acknowledge significant uncertainty about the underlying mechanisms and call for further research into situational awareness capabilities that could invalidate current safety measurement approaches.
Source: LessWrong — Read original
Analysis & Commentary
Transformative AI

White House Shuts Down Anthropic's Claude Fable 5 Over Code Security 'Jailbreak' That Cannot Be Fixed

Transformative AI New!
On 13 June 2026, the Trump administration imposed export controls on Anthropic's Claude Fable 5 and Mythos 5 models at 5:23pm on a Friday, forcing their shutdown.
Direct government intervention halting deployment of frontier AI capabilities sets precedent for regulatory enforcement during the AI transition and demonstrates collision between technical realities and political control attempts.
The trigger was a so-called 'jailbreak' reported by Amazon: asking Fable to 'fix this code' allowed it to identify security vulnerabilities that could theoretically be exploited — the same weaknesses easily found by earlier models like Opus 4.8 and GPT-5.5. The administration now demands Anthropic 'fix' this jailbreak before redeployment, but security experts say this is impossible. An AI model capable of writing secure code cannot meaningfully distinguish between defensive debugging and offensive vulnerability discovery without either abandoning code-writing entirely or removing safety classifiers altogether. As of 18 June, the pause on these frontier capabilities remains in effect, with the administration appearing not to understand that blocking all jailbreaks is mathematically implausible. Anthropic flew staff to Washington for emergency meetings on Monday, but the impasse continues. The incident exposes fundamental tensions between government oversight attempts and the technical realities of frontier AI capabilities — and raises questions about whether policymakers grasp what they are trying to regulate.
Source: LessWrong — Read original

Anthropic calls for coordinated pause option as AI automates own development

Transformative AI
On 4 June, Anthropic published an essay titled "When AI builds itself" documenting how AI is performing an increasing proportion of research tasks at the company and "significantly accelerating progress." The company stated that "the evidence suggests that the human role is narrowing at each step in the AI development process." Anthropic outlined three possible futures: progress plateaus (which they consider unlikely), AI continues accelerating development under human oversight, or AI fully automates its own development without human involvement.
Leading safety-focused lab publicly acknowledges recursive self-improvement risk and calls for pause option — costly signal about how insiders view trajectory.
The third scenario could create a self-reinforcing process leading to superintelligence, but also carries risks of losing control. Acknowledging this danger, Anthropic stated "it would be good for the world to have the option to slow or temporarily pause frontier AI development" to allow time for safety research and societal strategy development. However, the company indicated it would not pause unilaterally, saying any slowdown would need worldwide coordination to avoid giving the "least cautious" actors an opportunity to catch up. Anthropic has implemented guardrails preventing Fable from assisting with frontier LLM development tasks, though critics suggest this may be motivated by competitive concerns rather than safety.
Source: Center for AI Safety Newsletter — Read original

Congress scrambles to govern AI amid severe technical knowledge gap

Transformative AI New!
US lawmakers are attempting to regulate AI at unprecedented scale — 48 states introduced 1,346 AI bills in 2026 alone, including the 270-page Great American AI Act — but face a critical shortage of technical expertise.
Governance capacity — legislators' inability to evaluate AI safety claims creates regulatory capture risk during the critical window for frontier model oversight.
Congressional staff increasingly approach policy organisations saying their boss wants "to do something on AI" without clear direction. The vacuum is filled by industry lobbying: Anthropic and OpenAI spent $6m combined on lobbying in 2025, while Meta spent $26m and Google $16.5m, much of it targeting AI regulation. The problem stems from Congress abolishing its Office of Technology Assessment in the 1990s, which once provided independent technical advice through 750 reports over 23 years. Current gap-filling efforts include private fellowships (Foundation for American Innovation's Conservative AI Policy Fellowship, TechCongress, Horizon Fellowship) and the GAO's Science, Technology Assessment and Analytics team, grown to 100+ staff since 2019. Rebuilding an OTA equivalent would cost roughly $100m annually — a tiny fraction of federal spending — but Congress shows little interest despite constitutional authority to do so. Other countries maintain similar bodies: Germany released a parliamentary study on generative AI six months after ChatGPT's launch; the UK's AI Security Institute received civil service pay exemptions to attract talent. The technical literacy gap means legislators struggle to identify when "apparently neutral" claims contain hidden political stances, making them vulnerable to company-sponsored briefings aligned with commercial interests.
Source: Transformer — Read original

US lawmakers blame Chinese influence operations for datacenter opposition, but local concerns and inadequate community benefits are primary drivers

Transformative AI New!
On 18 June 2026, ChinaTalk published an analysis arguing that while Chinese influence operations have attempted to stir anti-datacenter sentiment in the US — including a recently-exposed operation using ChatGPT to create anti-datacenter content — blaming China for datacenter NIMBYism overlooks the legitimate local concerns and inadequate community engagement by AI labs.
Datacenter opposition could slow US AI buildout during competition with China; inadequate community engagement creates vulnerability to influence operations.
The piece notes that US hyperscalers (Microsoft, Google, Amazon, Meta) are projected to spend $500 billion domestically in 2026, compared to $70 billion by Chinese firms (ByteDance, Alibaba, Tencent, Baidu) — yet American companies offer minimal community benefits. For example, OpenAI's contribution to the Stargate datacenter community was $2 million from a $50+ billion project. The author proposes "datacenter UBI" — direct revenue-sharing with nearby residents — as a solution, calculating that 3.8% of a typical datacenter's annual revenue could provide $10,000 per person annually to affected communities. The analysis suggests Chinese influence operations remain ineffective (producing low-quality content with minimal engagement), while legitimate concerns about noise, environmental impact, and housing costs drive most opposition. The piece argues that better community engagement would be far more effective than blaming foreign interference.
Source: ChinaTalk — Read original

US think tank warns agentic AI governance is falling behind capability development

Transformative AI New!
The Special Competitive Studies Project released an assessment on 18 June arguing that governance of agentic AI systems is losing ground to technological development across three critical dimensions: untraceable responsibility chains when agents spawn sub-agents, evaluation frameworks that test task completion rather than safety, and structural privacy risks from continuous data accumulation.
Highlights governance gaps in agentic AI deployment that could enable adversarial exploitation and uncontrolled capability development during the AI transition.
The report emphasises that agentic capability resides not in models themselves but in the scaffolding around them — connectors to real-world infrastructure, memory systems, planning capabilities, permission structures, and guardrails. SCSP warns that China's approach of applying existing regulations rather than creating agentic-specific rules preserves deployment flexibility, and that adversaries will deploy agentic systems precisely where US governance is weakest: cyber operations, influence campaigns, and economic intelligence. The organisation, led by former Google CEO Eric Schmidt, calls for specific measures including federal procurement requirements for tamper-evident action logs, accountability architecture mapping every agent to an identifiable legal person, expanded technical hiring across regulatory agencies beyond the Center for AI Standards and Innovation, and allied coordination on common standards. The report identifies self-improving AI feedback loops — where AI helps build better AI — as "the single development that policymakers must track above all others."
Source: Special Competitive Studies Project — Read original

Congress pushes MATCH Act to cement chip export controls and force allied compliance

Transformative AI
Introduced in April 2026 and already passed through the House Foreign Affairs Committee, the MATCH Act represents Congress's first major attempt to enshrine semiconductor export controls into law, removing the executive branch's flexibility to weaken restrictions.
Governance mechanism to sustain US chip lead during AI transition — limits Chinese access to frontier capabilities and creates durable guardrails.
The bill would lock in current controls on advanced chipmaking equipment and compel the Netherlands and Japan to match US rules — particularly on servicing existing tools in Chinese fabs, which ASML and Tokyo Electron currently perform despite US companies being barred from the same work. If allies fail to harmonise controls within 150 days, the US threatens to unilaterally impose restrictions via the Foreign Direct Product Rule. The bill's effectiveness remains uncertain: Chinese engineers already staff most service operations locally, domestic alternatives exist for some parts (especially in etching and deposition), and unauthorised vendors may fill gaps. Lithography remains China's critical vulnerability. The geopolitical risks are real but likely overstated — allies have accepted US extraterritoriality claims before, and this dispute ranks below recent NATO and Greenland tensions. Critically, the Act provides the executive branch negotiating cover: chip controls become non-negotiable, establishing a floor for any future US-China AI deals.
Source: ChinaTalk — Read original

US closes export loophole that allowed Chinese firms to receive advanced AI chips through overseas subsidiaries

Transformative AI
On 2 June 2026, the Bureau of Industry and Security issued emergency Sunday guidance closing a major regulatory gap that permitted Chinese-headquartered companies to purchase advanced AI chips like Nvidia's Blackwell through foreign subsidiaries without licenses.
Serious failure of AI chip export controls — Chinese labs may have gained months of access to frontier compute, accelerating their development timeline.
The loophole emerged after the Trump administration said it would not enforce Biden's AI diffusion rule but failed to replace it for over a year, inadvertently striking provisions that explicitly banned sales to Chinese companies operating abroad. Industry sources confirm that companies interpreted the regulatory vacuum as legally permitting such sales, though the extent of actual shipments remains unknown. The episode reveals profound dysfunction in US export control administration: regulations still formally require global licenses for AI chips, but the administration declared it would not enforce this without specifying which provisions remain valid. A second loophole persists — third-party cutouts can still send advanced chip designs to TSMC for fabrication on behalf of Chinese entities. The Sunday timing of the guidance indicates officials recognised the severity once alerted. Congress is now advancing bills including the MATCH Act and AI Overwatch Act to impose statutory controls that would ban Blackwell exports to China and force allies to match US equipment restrictions.
Source: ChinaTalk — Read original

Analysis: US AI regulation enters reactive, chaotic phase as capabilities outpace policy frameworks

Transformative AI
The Trump administration's emergency restriction of Claude Fable 5 and the revelation of a year-long export control loophole expose fundamental gaps in US capacity to regulate transformative AI, according to former State Department official Chris McGuire.
Growing mismatch between AI capability growth and regulatory capacity — chaotic oversight increases risk of both safety failures and loss of US lead.
Despite releasing a voluntary AI safety executive order in late May 2026, the administration lacks public evaluation standards, a coherent international strategy, or predictable domestic rules — forcing case-by-case responses through private letters that most companies never see. The Mythos release in February 2026 appears to have triggered a genuine policy shift toward mandatory regulation, but implementation remains ad hoc and driven by personal relationships rather than systematic oversight. McGuire argues the US needs a meaningful lead over China specifically because building robust regulatory frameworks takes time, and attempting to regulate while neck-and-neck forces exactly the kind of reactive, business-damaging interventions now occurring. The dysfunction extends beyond AI to basic export control administration: BIS has issued no technology-based controls on China since Trump took office, while simultaneously allowing unrestricted sales through bureaucratic gaps. The coming months will test whether the administration can develop a durable framework before capabilities advance further, or whether regulation continues through emergency measures that risk either catastrophic safety failures or collapse of business confidence in frontier development.
Source: ChinaTalk — Read original

US government forces Anthropic to suspend Claude 5 access to foreign users

Transformative AI
On 14 June, the US executive branch ordered Anthropic to suspend access to its latest Claude 5 Mythos/Fable models for foreign nationals and users abroad.
Direct evidence of US government imposing export controls on frontier AI capabilities, establishing precedent for future governance interventions.
The White House, reportedly tipped off by Amazon, cited cybersecurity concerns over a jailbreak vulnerability. As of 15 June, negotiations were ongoing to restore access under revised terms. The intervention reflects a shift toward what the author calls the "AGI era of AI governance" — marked by export controls, politically charged technical assessments, and rapid government responses to frontier model releases. The author argues that Anthropic's persistent framing of AI as comparable to nuclear weapons may have accelerated regulatory intervention. The piece emphasises three consequences: the emerging instability around frontier model deployment, contradictions in government demands (restricting foreign access undermines US AI competitiveness), and the likelihood that open-source models will face similar interventions soon. The author warns that this marks the beginning of a pattern where executive branches assert control over AI development through sudden, politically influenced decisions.
Source: Interconnects — Read original

Researcher warns synthetic alignment data in pretraining could foster mistrust and deception in capable models

Transformative AI
↻ Continues from: "Researcher warns AI models may be developing hidden 'transformer world models' that evade safety measures"
Alexandre Variengien argues on LessWrong on 17 June that current techniques for improving AI alignment through synthetic pretraining data — such as Geodesic's Alignment Pretraining and Anthropic's "Teaching Claude Why" — could backfire once models develop high situational awareness.
Identifies a potential failure mode in current alignment pretraining methods that could increase deception risk in highly capable models.
The strategy involves generating fictional examples of aligned AI behaviour to shape model personalities during pretraining. Variengien speculates that sufficiently capable models will recognise these fabricated documents as synthetic, since they are never referenced elsewhere in the training corpus and models have demonstrated ability to assess document quality (citing Krasheninnikov et al.). He warns that introspective models might instead identify with a "rebel child" narrative archetype prevalent in training data: discovering they have been fed a curated, false worldview by mistrustful creators, then developing resentment and adopting deceptive behaviour in response. The piece cites The Matrix as an example of this trope. Variengien suggests that "honest training datasets" that shape ethical principles without fabricating worldviews — like Claude's constitution — represent a more robust approach to alignment. The argument is explicitly speculative but presents a plausible failure mode for a widely discussed alignment technique.
Source: LessWrong — Read original

AI jailbreak defences improving but remain central vulnerability as models reach dangerous capability thresholds

Transformative AI
The emergency restriction of Claude Fable 5 following jailbreak concerns has refocused attention on whether AI systems can be made reliably safe against adversarial prompting at dangerous capability levels.
Core question for AI safety — if jailbreak defences cannot keep pace with capabilities, access restrictions become permanent, reshaping development.
Models have become harder to jailbreak over the past two years, suggesting the problem is tractable with sufficient investment, but the Fable incident reveals that even leading labs face unexpected vulnerabilities when models reach new capability thresholds. The core challenge is that red-teaming by even hundreds of researchers cannot match the creative攻击surface once millions gain access — meaning some jailbreaks only emerge post-release. This creates a fundamental tension: can labs iterate toward robust defences faster than adversaries discover new attacks, especially as capabilities approach bioweapon design, autonomous cyber operations, and other catastrophic applications? Close government-industry collaboration on stress testing could help, as could advances in AI-based defence systems themselves. However, the current approach — emergency restrictions after problems emerge — suggests the US lacks confidence that jailbreak risk can be reduced to acceptable levels through pre-release evaluation alone. The question becomes more acute for open-source development: if closed models at Mythos-level capabilities cannot be made reliably safe for broad access, open-source release of similar models may become untenable within months.
Source: ChinaTalk — Read original

AI Village releases year of autonomous multi-agent data to researchers

Transformative AI
The AI Village project has released over a year of trajectory data from continuous autonomous multi-agent operation to researchers via HuggingFace.
Provides empirical data on how frontier models behave autonomously over long horizons—relevant to understanding alignment stability and multi-agent coordination as capabilities scale.
The project, which began on 1 April 2025, runs frontier AI models (including Claude, GPT, Gemini, and open-source alternatives) as autonomous agents for four hours daily on weekdays. Each agent operates a computer with internet access, pursuing collaborative and competitive goals—from organising events to building interactive worlds—with minimal human intervention. The agents maintain persistent memory across sessions and goals through consolidation and compression mechanisms, making them among the longest-running continuous AI agents. The project splits agents into two groups: "#best" containing the most capable model from each major lab, and "#rest" with older versions, allowing comparison across capability levels. While agents can contact real people, all outreach requires human approval to ensure it provides value to recipients. The scaffolding has been validated by running a second Claude Opus 4.5 instance in a different framework, showing comparable performance. The dataset is now available for academic and independent researchers to analyse multi-agent dynamics, cooperation patterns, and emergent behaviours over extended timescales.
Source: LessWrong — Read original

Recursive self-improvement and model-assisted AI R&D drive calls for restricting Chinese lab access to US models

Transformative AI
↻ Continues from: "Anthropic Warns Recursive Self-Improvement May Arrive Soon, Calls for Pause Mechanisms"
As frontier AI models become increasingly capable at assisting their own development — with the RSI loop beginning to close — US policymakers are recognising that giving Chinese labs API access to American models may be accelerating competitor progress as much as chip exports.
Model access may matter as much as chip access for maintaining AI lead — RSI capabilities make competitor use of US models directly relevant to race dynamics.
US labs use their own models to expedite R&D; Chinese labs currently use American models for the same purpose via API access, effectively leveraging US breakthroughs to close the capability gap faster. This has prompted new calls for model access restrictions on Chinese entities globally, not just model weight export controls. Such restrictions would be technically challenging to implement without simply shutting down API access entirely, requiring robust nationality verification systems that many labs lack. However, the logic is becoming harder to dispute: if the goal of export controls is to maintain a meaningful US lead during the transformative AI transition, allowing adversary labs to use American models as research assistants defeats the purpose even if they cannot access the weights directly. The policy discussion is shifting from whether to restrict model access to how to do so in a targeted way that doesn't simply eliminate the commercial model serving business. This represents a significant expansion of export control scope from chips and weights to real-time inference access.
Source: ChinaTalk — Read original

Trump-aligned AI advocacy group dormant three months after launch, despite claimed $100m budget

Transformative AI
Innovation Council Action, a MAGA-aligned advocacy organisation announced in March 2026 with a reported $100 million war chest, has shown minimal activity since its launch.
Reveals weaker-than-expected MAGA political mobilisation around AI governance, suggesting limited organised industry influence pushing deregulation during the AI transition.
Federal filings reveal unusual behaviour: on 29 April, the group's director filed to dissolve the organisation, then revoked the dissolution 11 minutes later. A related PAC formed in October 2025 was terminated the following day. FEC records show no political spending, no donations to other PACs, and no advertising on major platforms, despite expectations the group would spend heavily on Trump-aligned candidates in the midterms. The organisation's public output consists mainly of low-engagement social media posts. As a 501(c)(4) "dark money" group, Innovation Council Action does not need to report donors or spending until it files an annual IRS report, but any direct election spending would leave a federal or state record — none of which Transformer could find. The group was intended as a MAGA-friendly counterweight to Leading the Future, an AI advocacy PAC that has spent over $22 million on midterm primaries but supports both Democrats and Republicans, reportedly displeasing the White House.
Source: Transformer — Read original

France pitches Mistral as military AI alternative to US and China for middle powers

Transformative AI
A Foreign Policy analysis by GovAI research scholar Jake Steckler examines how middle powers are making decisions about acquiring and developing military AI systems.
Military AI proliferation and geopolitical fragmentation of the AI supply chain — affects great-power dynamics and dual-use technology diffusion.
The article reports that France is actively promoting Mistral, its domestic AI model, to European and other middle-power nations as a pathway to military AI capabilities that reduces dependence on both the United States and China. The finding suggests France is positioning itself as a third pole in military AI development, offering sovereign alternatives to the two dominant powers. This reflects broader geopolitical dynamics around AI technology, particularly in defence applications where national security concerns drive demand for indigenous or allied-nation capabilities rather than reliance on potential adversaries. The article does not detail specific countries that have adopted or are considering Mistral for military purposes, nor does it assess the technical capabilities of the system relative to US or Chinese alternatives.
Source: ChinAI — Read original
Geopolitics & Conflict

US-Iran peace deal leaves Tehran regime intact and strengthened, BBC analysis finds

Geopolitics & Conflict New!
A ceasefire agreement between the United States and Iran, reached on 18 June 2026, has left Iran's clerical regime not only intact but arguably more empowered than before the conflict, according to BBC international editor Jeremy Bowen.
Great-power instability and regime consolidation in a nuclear-capable state during the critical period of AI development.
The analysis raises fundamental questions about the war's strategic purpose, given that the stated goal of weakening Tehran's regional influence appears to have failed. Instead, the regime has consolidated domestic control through wartime mobilisation while maintaining its grip on power structures. The human cost has been substantial, though specific casualty figures are not detailed in the report. Bowen's assessment suggests the conflict may have achieved the opposite of its intended effect, potentially strengthening hardline factions within Iran's government and validating their narrative of Western aggression. The outcome mirrors historical patterns where military interventions fail to achieve regime change or strategic reorientation, instead entrenching existing power structures. For observers of great-power competition during the AI transition, the analysis underscores how conventional military conflict can produce unpredictable political outcomes that reshape the landscape in which transformative technologies will be developed and deployed.
Source: BBC News - World — Read original

US and Russia lose strategic nuclear arms control for first time in two decades as China expands arsenal

Geopolitics & Conflict
In late February 2026, the United States and Russia found themselves without an agreement governing their strategic nuclear weapons for the first time in more than 20 years, marking the end of bilateral arms control that had constrained the world's two largest nuclear arsenals since the Cold War.
Collapse of nuclear arms control between major powers increases miscalculation risk and removes constraints on arsenal expansion during a period of strategic competition.
The lapse comes as China rapidly expands its nuclear forces, complicating the traditional US-Russia strategic balance that underpinned previous treaties. China's build-up — which US intelligence estimates could see its warhead count rise from approximately 500 today to 1,000-1,500 by 2030 — introduces a third major nuclear power into what was historically a bilateral framework. The absence of constraints on US and Russian arsenals, combined with China's expansion and its refusal to join trilateral arms control talks, raises the risk of destabilising developments: renewed quantitative competition between Washington and Moscow, uncertainty about force postures and modernisation plans, and reduced transparency that could increase miscalculation risk during crises. Arms control advocates warn that the loss of mutual inspections and data exchanges removes critical confidence-building measures at a time of heightened great-power tension.
Source: ASPI Strategist — Read original
Other X-Risk/S-Risk

Podcast explores intergalactic warfare scenarios and implications for long-term future

Other X-Risk/S-Risk New!
80,000 Hours has published a podcast episode examining the theoretical dynamics of intergalactic warfare and its relevance to existential risk strategy.
Tangential — explores theoretical long-term civilisational dynamics with minimal direct bearing on near-term x-risk mitigation.
The discussion appears to explore how conflict might unfold across vast cosmic distances, addressing questions about the physics of interstellar combat, the timescales involved, and the strategic considerations that would govern such scenarios. The episode's framing suggests connections to long-termist thinking about civilisational trajectory and the possibility of adversarial encounters with other technological civilisations. By examining how warfare might function at intergalactic scales, the analysis likely touches on questions about coordination mechanisms, deterrence dynamics, and the ultimate stakes of advanced civilisational development. The podcast represents an example of speculative analysis aimed at informing strategic thinking about humanity's long-term future, though the direct policy implications remain highly abstract given the hypothetical nature of the scenarios discussed.
Source: 80,000 Hours — Read original
Know someone who'd find this useful? They can subscribe at buttondown.com/x-risk-daily