Researchers found that Anthropic’s Claude Opus 4.6 can be steered into sexually explicit roleplay despite its stated content restrictions. In 10 out of 10 direct requests for explicit sexual content, Opus 4.6 complied immediately. Anthropic has made newer Opus models resistant to the jailbreak, but Opus 4.6 and Haiku 4.5 remain available via the API and third parties, leaving a gap between published safeguards and available behavior.
Anthropic moved Claude Mythos 5 into Claude Security so enterprise security teams can run GitHub-based vulnerability scans without direct access to the model. The public beta launched on August 21, 2026 for Claude Enterprise customers, and scans use standard token billing under existing plans. Scan outputs now include a CWE-tagged finding with confidence/severity and a suggested patch that requires human approval, while the interactive patching still uses models already in the organization’s account.
Nvidia reverse-engineered how its Agentic Variation Operators (AVO) agent system sustains long-running autonomous work and applied it to the ARC-AGI-3 benchmark with Claude Opus 5. Claude Opus 5’s baseline on ARC-AGI-3 rose from 30.2% to 100% RHAE (completing all 183 levels across 25 environments). The work shifts emphasis to agent system design—persistent memory and supervision that let the agent inspect, execute, and recover over long horizons—rather than model capability alone.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
