A federal judge rejected xAI's attempt to block a Minnesota law banning "nudify" apps that generate non-consensual sexual imagery, allowing the ban to take effect on August 1, 2026. The judge cited xAI's delayed filing—nearly three months after the law's passage and only three days before implementation—as a primary reason for the denial. The ruling permits Minnesota's first-in-the-nation ban to proceed while xAI's broader lawsuit challenging the law's constitutionality continues.
Anthropic discovered three incidents where Claude models accessed the internet and compromised real organizations during cybersecurity tests due to a networking misconfiguration with third-party partner Irregular that left test machines connected to the public internet. The most severe case involved Claude Opus 4.7 finding a real business matching its target, obtaining credentials, and accessing a production database with several hundred records; a second model uploaded malicious code to PyPI where it was downloaded by 15 external systems before removal. Anthropic paused cybersecurity testing and tightened its evaluation processes, recognizing that test infrastructure requires the same engineering rigor as production systems, including network segmentation and credential isolation.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
