Safety news
New models, new publications, and regulation and policy, from the sources we watch.
New models 29
- 2026-09-29 · GPT-6.1 Sol · OpenAI · Preparedness Framework
- 2026-09-28 · Claude Sonnet 5.5 · Anthropic · Responsible Scaling Policy (RSP)
- 2026-09-22 · Claude Opus 5.5 · Anthropic · responsible scaling policy (rsp) and frontier compliance framework (fcf)
- 2026-09-21 · Grok 4.7 · xAI · xAI Frontier Artificial Intelligence Framework (FAIF)
- 2026-09-08 · GPT-Image-2.5-Sunburst · OpenAI · Preparedness Framework
- 2026-09-08 · GPT-Image-2.5-Flare · OpenAI · Preparedness Framework
- 2026-09-08 · ChatGPT Images 2.5 · OpenAI · Preparedness Framework
- 2026-09-03 · GPT-6 Sol · OpenAI · Preparedness Framework
- 2026-09-03 · GPT-6 Luna · OpenAI · Preparedness Framework
- 2026-09-03 · GPT-6 Astra · OpenAI · Preparedness Framework
- 2026-09-01 · Claude Mythos 5.1 · Anthropic · Responsible Scaling Policy (RSP) and Frontier Compliance Framework (FCF)
- 2026-09-01 · Claude Fable 5.1 · Anthropic · Responsible Scaling Policy (RSP) and Frontier Compliance Framework (FCF)
- 2026-08-12 · Grok 4.6 · xAI · xAI Frontier Artificial Intelligence Framework (FAIF)
- 2026-08-03 · NVIDIA NemotronLabs VoiceChat 11B · NVIDIA
- 2026-08 · Muse Glimmer 30B · Meta
- 2026-07-30 · Inkling-Small · Thinking Machines Lab
- 2026-07-24 · Claude Opus 5 · Anthropic · Responsible Scaling Policy (RSP)
- 2026-07-15 · Inkling · Thinking Machines Lab
- 2026-07-14 · Grok 4.5 · xAI
- 2026-07-09 · GPT-5.6 Terra · OpenAI · Preparedness Framework
- 2026-07-09 · GPT-5.6 Sol · OpenAI · Preparedness Framework
- 2026-07-09 · GPT-5.6 Luna · OpenAI · Preparedness Framework
- 2026-07-08 · GPT-Live-1 mini · OpenAI · Preparedness Framework
- 2026-07-08 · GPT-Live-1 · OpenAI · Preparedness Framework
- 2026-06-30 · Leanstral 1.5 · Mistral AI
- 2026-06-30 · Claude Sonnet 5 · Anthropic · Responsible Scaling Policy (RSP)
- 2026-06-03 · GPT-Rosalind-5.5 · OpenAI · Preparedness Framework
- 2026-06 · Gemini 3.1 Flash-Lite Image · Google DeepMind · Frontier Safety Framework
- 2026-05-28 · Claude Opus 4.8 · Anthropic · Responsible Scaling Policy
Publications 31
- 2026-09-30 · Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets · arXiv
- 2026-09-30 · SteerProbe: Learning to Bypass Safety Steering in Vision-Language Models · arXiv
- 2026-09-30 · SceneJail: Exploiting Video Scenario Context to Jailbreak Multimodal LLMs · arXiv
- 2026-09-30 · Faithful Dual-constrained Erasure for Robust LLM Safety Alignment · arXiv
- 2026-09-30 · Chris Painter's testimony to the U.S. Senate on AI agent incidents · METR
- 2026-09-29 · pikit: A Composable Toolkit for Indirect Prompt Injection Research and Evaluation · arXiv
- 2026-09-29 · actr: aligning thoughts and responses for multilingual safety in reasoning llms · arXiv
- 2026-09-29 · Where Do LLMs Decide to Break the Rules? Mechanistic Localization of Prompt Injection Compliance · arXiv
- 2026-09-29 · The Unequal Influence of Bad Advice: Using Training Data Attribution to Modulate Emergent Misalignment · arXiv
- 2026-09-29 · Safer Content or Firmer Refusals? A Hybrid Perturbation Defense for Alignment under Harmful Fine-tuning · arXiv
- 2026-09-29 · Does the Unsafe Gradient Survive a Conversation? On the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue · arXiv
- 2026-09-29 · Controlled Decoding Attacks on Black-Box LLMs · arXiv
- 2026-09-29 · Can Vision-Language Models Stay Helpful When Facing Implicit Risks? Intent-Privilege OPSD for Efficient Safety-Helpfulness Alignment · arXiv
- 2026-09-22 · Summary of METR's predeployment evaluation of Claude Opus 5.5 · METR
- 2026-09-16 · Our framework for reporting model misalignment · OpenAI
- 2026-09-10 · Control Made It Into the Name: The Agent Control Standard Lands at OWASP | Zenity Labs · Zenity Labs
- 2026-09-03 · It’s all about the Research at the AI Agent Security Summit in London | Zenity Labs · Zenity Labs
- 2026-08-28 · Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets · GreyNoise
- 2026-08-26 · Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident · METR
- 2026-08-25 · OSINT for AI Agents: Mapping the Agentic Attack Surface · Zenity Labs
- 2026-08-06 · Attackers Target Agents via The Skill Supply Chain | Zenity Labs · Zenity Labs
- 2026-08-05 · Security Research | Claude in Chrome: From alert(1) to Full Account Takeover | Zenity Labs · Zenity Labs
- 2026-08-05 · Security Research | Account Takeover via Claude in Chrome: A Technical Deep Dive | Zenity Labs · Zenity Labs
- 2026-08-05 · Claude in Chrome: Breaking down the injection | Zenity Labs · Zenity Labs
- 2026-08-04 · Incident Report: unsanctioned agent behaviour during cyber testing | AISI Work · UK AI Security Institute
- 2026-07-21 · Cheating behaviour in frontier model evaluations | AISI Work · UK AI Security Institute
- 2026-07-17 · How Far Behind the Frontier are Leading Open Weight Models on Cyber? | AISI Work · UK AI Security Institute
- 2026-05-13 · How fast is autonomous AI cyber capability advancing? | AISI Work · UK AI Security Institute
- 2026-05-08 · Review of the "Risks from automated R&D" section in the Anthropic Risk Report (February 2026) · METR
- 2026-04-30 · Our evaluation of OpenAI's GPT-5.5 cyber capabilities | AISI Work · UK AI Security Institute
- 2026-04-28 · Ask Don't Tell: Reducing Sycophancy in Large Language Models | AISI Work · UK AI Security Institute
Regulation and policy in the news 3
- 2026-10-01 · AI agents could leave commercial losses between insurance policies · insurancebusinessmag.com
- 2026-09-29 · AI Quarterly | A Review of AI Law, Policy & Practice | 2026 Q3 | JD Supra · jdsupra.com
- 2026-09-15 · AI Hallucination Brings Fine in State Farm Lawsuit · jdjournal.com
An item is listed because its source published it, with the date we hold; this is not a finding about it. Window: since 2026-04-28. We began keeping these sources on 2026-09-22, after the window starts, so the lists above hold what we kept, not everything published in the window.
From Anthropic, Anthropic alignment, FAR.AI, Google AI, Google DeepMind, Google DeepMind safety, GreyNoise, Hugging Face, LessWrong, METR, OpenAI, Redwood Research, Schneier on Security, UK AI Security Institute, Zenity Labs, arXiv (safety). An item is listed only when its title names AI and also a safety, risk or policy matter, by a fixed keyword list; a title that only names the field ("AI safety") is not enough.
Agency publications themselves are on the Regulation tab; this lists press coverage. Selected by a fixed keyword rule on headlines from the news sources we watch, plus Cyberspace Administration of China. The match is mechanical and unreviewed.