Turns out the future does have flying cars

New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…

Today we're launching cve.now 🚨 Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this? cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login. cve.now

The internet is going into a LOCKDOWN. Hundreds of millions of websites are potentially at risk from cyberattacks. Governments, banks and major platforms have already taken their websites OFFLINE. Many are already calling it “Black October.” At the centre of the shutdowns is something most of us have never heard of, but use every day. PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password. Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity. Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving. Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours. Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline. Websites have gone dark worldwide, from government portals and hospitals to banks. CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit. Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each. Over 1.1 million use older versions no longer receiving official PHP updates. Older installations may need an upgrade to a supported PHP version or a fix from their software provider. And patching does not remove a backdoor an attacker may already have planted. Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections. But PHP isn’t the only security story unfolding. -Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers. -India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”. -State Bank of India confirmed 3,897 customer records on the dark web. -Criminals used AI agents to break into 400+ Latin American banks. -Capcom confirmed a breach exposing 11.7 million email addresses. -GitLab disclosed a 10/10 severity flaw in versions going back to 2014. -LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets. None of these has a confirmed link to PHP2Shell. We’re seeing separate breaches unfold together. The true number of incidents could take months to come out. The world is still on alert. Attacks are still coming.

Today we're launching cve.now 🚨 Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this? cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login. cve.now

This is Kimi K3.1's voxel pagoda vs frontier models I also did GPT-6 Astra so you can see what I mean about it having similar design style, I attached carbon too from checkpoint 1 i'm redoing it now with the new checkpoint The actual tower is near identical in design to Astra, and you know what that means 🙏

Dude, how fast this session limit is draining is wild 💀 How did I hit 100% in just over 2 hours without doing anything heavy?

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent. It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

Trillions are pouring into the race to build the first general superintelligence, but leveraging your own specialized know-it-all is now possible as of today. I built the knowledge systems at @stripe and @uber. Then I helped Anthropic, Metronome, and Graphite build a killer developer experience. Everyone wants Stripe-level quality, but that bar is too low. Falconer gives you and your customers complete, specialized intelligence: an internal knowledge base and external documentation in one beautiful package. Falconer is the ultimate trust engine to manage your context: self-driving, observable, and agent-friendly. I co-founded @falconer_ai with @mbenedetto212 and assembled a team of know-it-all builders. We're backed by fellow know-it-alls @thegp, @BoxGroup, @svangel, @karimatiyeh, @benln, @zachlloydtweets, @CeciStalls, @MerrillLutsky, @scottmac, @malthe, and @adamjstevenson, with angels from Anthropic, Stripe, Meta, Cursor, Replit, and more. Frontier intelligence companies like @FireworksAI_HQ and @⬛⬛⬛⬛⬛⬛; fintech companies like @payabli and @vori; and healthtech companies like @thatch_ai use @falconer_ai because they all share the same vision as us: the knowledge you earn should belong to you. Now you can know everything, so you can build anything.

Introducing Claude Opus 5.5, the first model in our new Claude 5.5 family. It performs at the level of Claude Fable 5.1 for most tasks, and costs 40% less to run than Opus 5.