• Updates as the Proteas host Australia at St George’s Park

• Start to play in Gqeberha delayed by rain

• Any thoughts? Get in touch with Jim on email

The rain radar that I can find doesn’t look promising either. Apart from depicting clouds as giant bilious green snot-chunks, which is highly unappealing, it has these chunks circling about and not moving anywhere. The main piece is off to the east of Gqeberha, but the smaller part over the town is largely static both in the prior tracking and the projection, just shifting in small circles.

A bit of a dance went on with the covers, where they came off, umpires talked about an inspection, then the covers went on again. A tale as old as time.

Continue reading...

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

The company held an investor meeting on Wednesday as it plans a blockbuster initial public offering as soon as next month.

© Manuel Orbegozo for The New York Times

Australia are six wickets away from victory after another dream day – with bat and ball – for Matt Renshaw

10th over, Australia 71-1 (Maddinson 48, Labuschagne 5) The Maddo Express keeps rolling, loaded heavy with receipts. South Africa turn to spin, Maddinson puts one foot down the track and lofts Harmer down the ground for six. This is a spectacle. Follows up with a couple more hits down the ground for two runs apiece. His score keeps rattling the loose shingle numbers on the board.

9th over, Australia 59-1 (Maddinson 37, Labuschagne 4) Another edge, Labuschagne this time, getting lucky against Jansen, down through the cordon for three runs, hauled back just in time. That brings Maddinson back on strike… and he immediately whacks another one! Again width, and he plays the same shot he kept trying in the first innings, except that this time he hits the ball. Top edgy, over the cordon, four.

Continue reading...

© Photograph: Themba Hadebe/AP

© Photograph: Themba Hadebe/AP

© Photograph: Themba Hadebe/AP

• Follow updates from Kingsmead Cricket Ground

• Start time is 9.30am local/6.30pm AEDT | Email Rob

12th over: South Africa 37-1 (Markram 24, Bedingham 13) Beautiful batting from Markram. Hazlewood was fractionally too straight, no more than that, and Markram put him away through midwicket with an understated flick of the wrists.

How can Aiden Markram have a Test average of 36? The guy is so good.

Continue reading...

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

• Pat Cummins’ side resume their first innings at Kingsmead

• Any thoughts? Get in touch with Jim on email

69th over: Australia 198-6 (Renshaw 51, Cummins 39) Jansen sees how Nortje is operating and he wants a piece too. The ball is old, why not? Unsociable bouncer at Cummins, who tries to get over it like he did previously but instead wears it inside the curve of his shoulder. Then good fielding behind point denies him a run from the yorker, which is how he escaped Nortje. All of that makes Cummins uncomfortable enough to play and miss outside off stump, but the edge doesn’t come. He’s not daunted though: fifth ball of the over, dropping back past the bowler, you could forgive a lower order player for not belting through for a single. But Cummins does.

68th over: Australia 197-6 (Renshaw 51, Cummins 38) Nortje is firing up, and Renshaw is staying cool. Cummins starts the over, getting a nasty short one that he just about rides the bounce of, then a full straight one that he squeezes out behind square well enough to get off strike. Renshaw though looks absolutely perfect as he defends a mid-level short ball, then goes under a bouncer, then swishes his bat over a wider line to leave.

Continue reading...

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

• Follow updates from Kingsmead Cricket Ground

• Sign up for The Spin newsletter | Get in touch via email

The sun is belting down in Durban at the moment with the forecast for a high of 27C. But a hint of cloud is expected to drift across Kingsmead Stadium during the afternoon. Rain was forecast for day two but the latest forecast suggests that has cleared up.

Nic Maddinson will open for Australia alongside Travis Head. The senior partner of that duo had some choice words for the former greats who have criticised the current side for a lack of runs in recent times.

I think it’s unfairly judged a fair bit from a group of past players, pretty much, that put the bullet through a lot of players. But that’s what they’re paid to do. Some of them need a job, so they go after us and that’s totally fine. This group is strong enough to deal with those sort of things. That’s how it is.

It’s unfortunate sometimes to have some of that feedback from a generation of players that we have huge respect for, but that’s the caper.

Continue reading...

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

© Photograph: Marco Longari/AFP/Getty Images

Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone.

Other industry solutions require a photographer or institution to vouch for an image using their own credentials. We are concerned this puts some photographers, such as those operating in conflict zones, in a difficult position; it should not be necessary to forgo anonymity in order to prove image authenticity. We built Apple Reference Image to avoid using an explicit, public credential for photographers, and to avoid even implicit public association between different photos taken by the same sensor. The final reference image is instead signed by Apple’s signing service, after validation by PCC. That signature is backed by Apple’s strongest technical guarantees.

Our implementation also protects the confidentiality of the image itself, including from Apple. Merely capturing a reference image should never expose the actual pixels to Apple or anyone else. We achieve this through the exceptional privacy properties of PCC—the nodes themselves are architected so that not even Apple can access image data, just as Apple cannot see the information processed for Apple Intelligence in PCC. While the revocation service must maintain a private record of photo GUIDs and associated sensors to allow for revocation, it never has access to the image data, and does not allow for public access to this record. And as final revocation checks occur using on-device lists, a device never reveals to anyone which photo it’s looking at in order to find out whether it’s still valid.

The report makes for good reading; the details are interesting.

Sales of big pickup trucks and sport utility vehicles have dipped as more Americans buy hybrids and smaller cars.

© Rebecca Cook/Reuters

BBC News reports it has seen samples of stolen FBI agents’ medical examinations. The “fitness-for-work” reports identify FBI agents by name and address, and reveal even more personal details. They include blood and urine test results and doctors’ notes mentioning high cholesterol, blood in the urine, and even a shellfish and banana allergy.

As we reported last week, extortion group ShinyHunters claims to have breached the FBI. After reportedly taking over ransomware group Clop’s leak site, ShinyHunters says it attacked the FBI to punish the agency for spreading what it calls false information about the group.

The BBC’s findings raise the stakes: The alleged theft includes highly sensitive medical records, not just staff identity and contact data. ShinyHunters shared samples with journalists as proof of its claims.

The BBC states:

“The samples shared with journalists appear genuine and include names, addresses, phone numbers, badge numbers, job titles and information about spouses.”

ShinyHunters claims it accessed several systems, including FBI MedLink, which stores medical records, and FBI BEAST, which handles background checks on employees and applicants, but the FBI has not confirmed these claims. The FBI has acknowledged an incident affecting FBIJobs-related systems and says it is investigating whether its own environment or a third-party provider was compromised.

The group’s stated demand remains non-financial: It wants the FBI to retract or remove a May advisory that ShinyHunters calls false and defamatory. It says it will release the data within five days if its demands are not met.

The cybercriminals also raised the number of affected people. ShinyHunters nows claims to hold sensitive information on around 60,000 current and former FBI staff. Medical histories could make affected people vulnerable long after the immediate incident: Unlike a stolen password, a medical record cannot be changed.

What to do if you’re affected

The FBI has not yet confirmed what information was accessed or who was affected. If you are a current or former FBI employee, a relative of one, or have applied for an FBI job:

• Check the FBI’s advice. Every breach is different, so check FBI.gov for updates and follow any specific advice it offers.
• Change your password. If you have an FBI Jobs account and reuse its password elsewhere, change it on those other accounts. Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you.
• Enable two-factor authentication (2FA). If you can, use a FIDO2-compliant hardware key, laptop, or phone as your second factor. Some forms of 2FA can be phished just as easily as a password, but 2FA that relies on a FIDO2 device can’t be phished.
• Watch out for impersonators. Cybercriminals may contact you posing as the FBI, another government agency, or someone you know. Verify the identity of anyone who contacts you.
• Take your time. Phishing attacks often impersonate people or brands you know and use themes that require urgent attention, such as missed deliveries, account suspensions, and security alerts.
• Set up identity monitoring. This can alert you if your personal information is found being traded illegally online and help you recover afterward.

---

Let’s face it, an incognito window can only do so much. 
 
Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance. 

Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings.

A few of the highlights:

• AI agents increasingly handled reconnaissance, exploitation, data theft, propaganda production, surveillance workflows, and research while humans selected targets, set goals, and reviewed important outputs.
• The report describes attackers using AI to industrialize credential theft, cloud compromise, phishing, vulnerability research, and the extraction of sensitive data from downstream organizations.
• Influence operations used persistent agent memory, fake news sites, fabricated journalists, synthetic personas, political profiling, and large-scale multilingual content, although high content volume often produced little genuine engagement.
• Surveillance and repression cases included automated dossiers, biometric and communications analysis, transnational targeting, coercive recruitment, and systems that continued operating locally after model access was revoked.
• Biological and weapons cases show dual-use risk: AI supported advanced scientific and military work, but the report generally doesn’t establish completed biological weapons or operational battlefield deployment.

Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this:

We identified a cell of threat actors based in northern Yemen running three weapons development programs: a guided rocket that used a commodity phone-class flight computer with final-phase homing guidance; a multi-stage ballistic missile with a stated range goal above 2,000 km; and a multi-variant missile (referred to as the “R2000” set) that included a hypersonic glide vehicle variant.

The actors used Claude Code in place of human software engineers to develop the guidance, navigation, and control (GNC) software that steers and stabilizes a flying vehicle. For example, they used Claude to integrate an open-source autopilot onto a phone-class flight computer, writing the control and position estimation software, tuning the control settings, running a firmware build pipeline, and performing a flight simulation. The actors managed several Claude instances at once, assigning each one a role, much as a lead would delegate work on a small engineering team: the actors tasked one instance with writing the code, another with research, and a third with reviewing the code the first instance produced.

Our safeguards blocked many of their requests, but not all of them. The actors used a variety of tactics to evade our safeguards, including hiding their goals and the products the software was meant for, and they split their work across multiple sessions so no single session revealed their full intent.

These actors carried out a sustained effort to develop guided weapons, including using Claude to design guidance software. We do not have evidence the actors succeeded in fielding an operational device; but they did test-fire a guided rocket. This field test appears to have failed: within hours, the actors returned to Claude to work out why it failed.

Expect more of this. AI systems democratize expertise and capability. Most of the time that’s a good thing, but sometimes it’s not.

Quarterly revenue also more than doubled, to $96.22 billion, the company said, topping expectations on Wall Street.

© Manuel Orbegozo for The New York Times

The offering could value the five-year-old A.I. start-up at $2 trillion, its bankers have told potential investors, which would exceed Elon Musk’s SpaceX.

© Don Feria/Associated Press

The chart is interesting.

On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 (5.9% at k=15) and Mythos 5 (2.6%), making it the most robust model evaluated. Opus 5 also outperformed all non-Claude models on this benchmark. The most robust non-Claude model was Muse Spark at 16.5% within 15 attempts—more than eight times Opus 5’s rate. The most capable GPT 5.6 variant, Sol, was comparable to its predecessor GPT 5.5 (20.0% versus 20.8% within 15 attempts), and was 10 times as likely to be successfully attacked as Claude Opus 5 at 2.0%. The other GPT 5.6 variants are less robust, at 30.4% (Terra) and 43.9% (Luna). A single attempt against GPT 5.6 Sol succeeded 3.1% of the time, higher than the 2.0% an attacker achieved against Opus 5 after fifteen attempts.

We know that preventing prompt injection is impossible in the general case. But we are getting much better at blocking it in specific cases.