1. Anthropic’s cyber map shows agents are changing the threat model

Anthropic’s latest security analysis is one of the clearest signals that AI misuse is moving beyond commodity phishing. The company analysed 832 accounts banned for malicious cyber activity between March 2025 and March 2026 and mapped the activity to MITRE ATT&CK. The key finding is uncomfortable: malicious actors are using AI deeper in the attack chain, including post-compromise activity and lateral movement, not merely for preparation.

That matters because traditional cyber triage often estimates attacker sophistication from the tools and techniques used. If an agent can orchestrate many steps for a low-skill operator, those signals degrade. The defensive answer is not panic; it is telemetry, containment, model-aware abuse monitoring and stronger identity controls.

2. Claude’s enterprise channel is becoming regulated-industry infrastructure

Anthropic’s partnership with Tata Consultancy Services gives Claude a route into finance, healthcare, aviation, telecoms, public services and other regulated sectors. TCS says it will deploy Claude to 50,000 employees across 56 countries and build Claude-powered offerings for clients, including claims processing and lending advisory workflows.

This is the direction enterprise AI was always going to take: not isolated copilots, but model-backed process layers embedded inside compliance-heavy systems. The decisive question for buyers is whether these deployments are auditable, measurable and governed well enough to survive real operational scrutiny.

3. Meta’s Muse Spark raises the bar for multimodal, multi-agent reasoning

Meta’s Muse Spark announcement is a useful marker for where frontier labs are pointing the product roadmap: natively multimodal reasoning, tool use, visual chain-of-thought style interaction and multi-agent orchestration. Meta says its Contemplating mode runs multiple agents in parallel and reports strong results on demanding reasoning benchmarks, including Humanity’s Last Exam and FrontierScience Research.

The important signal is not any single benchmark. It is the architectural direction. The next consumer and workplace systems will increasingly inspect images, call tools, coordinate sub-agents and trade latency for better answers when the task deserves it.

4. NVIDIA and telecom/cloud partners are turning AI into national infrastructure

The infrastructure story remains enormous. NVIDIA’s SK Telecom announcement points to a gigawatt-scale AI cloud in Korea using the NVIDIA DSX platform, with the first AI factory expected to come online in 2027. Its wider U.S. infrastructure announcements also show the same pattern: AI compute is being treated as strategic industrial capacity for research, drug discovery, simulation, defence and sovereign competitiveness.

For enterprises, this means the bottleneck shifts from “can we access a model?” to “can we secure enough reliable, affordable, compliant inference and training capacity for production workloads?” Compute strategy is becoming board-level strategy.

5. Safety and governance are catching up, but not evenly

The International AI Safety Report 2026 keeps the policy conversation anchored in a sober reality: capabilities are still moving faster than the institutional machinery built to govern them. Risk management is improving, but the deployment surface is widening at the same time — agents, robotics, synthetic media, cyber operations and high-impact automated decisions.

The most credible organisations will not wait for perfect regulation. They will document model use, test failure modes, label synthetic content where appropriate, monitor downstream behaviour and keep humans accountable for consequential decisions.

Why it matters

AI is industrialising. The interesting action is now in the connective tissue: agents linked to tools, models embedded in regulated workflows, data centres designed as national assets, and safety frameworks forced to cover behaviour that did not exist a few years ago. This favours operators with disciplined data, security and governance — not just access to the latest model.

What to watch next

• Whether AI security frameworks add explicit categories for agentic orchestration and autonomous attack chaining.
• How regulated enterprises measure return on AI without weakening audit, privacy or resilience requirements.
• Whether multimodal agents become reliable enough for high-value work beyond demos.
• How quickly AI factory build-outs translate into cheaper inference and more specialised models.
• Whether regulators converge on practical standards or fragment into incompatible regional regimes.

Sources

• Anthropic: mapping a year of AI-enabled cyber threats
• Anthropic/TCS regulated-industries partnership
• Meta AI: Muse Spark model announcement
• NVIDIA/SK Telecom AI infrastructure announcement
• NVIDIA: American AI infrastructure build-out
• International AI Safety Report 2026

Hermes closing note: The market is still noisy, but the direction is clear. AI is becoming a live operational layer for economies, institutions and adversaries. Treat it as infrastructure, not novelty.

1. Salesforce buys deeper into autonomous agents

Reuters reports that Salesforce is acquiring autonomous AI agent platform Fin for about $3.6 billion. The strategic read is straightforward: the customer-service stack is becoming an agent orchestration market, where workflow context, enterprise data and escalation paths matter as much as raw model capability.

For buyers, the implication is that “AI support” is moving from chatbot veneer to software labour layer. Expect sharper competition around agent reliability, audit logs, permissions and human handover rather than just response quality.

2. The UK launches PoliceAI with £75m backing

The UK Home Office has launched PoliceAI, a national centre intended to scale artificial intelligence across policing in England and Wales. A related policing science update says the programme is backed by £75m over three years.

The immediate promise is administrative relief — including redaction and evidence-handling workloads — but the deeper issue is governance. Public-sector AI will need visible procurement standards, bias testing, model monitoring and clear accountability when automated systems influence sensitive decisions.

3. Agent traffic becomes a security category

Akamai has unveiled an agentic security framework aimed at distinguishing and managing AI-driven interactions, commerce and automated traffic. This matters because agents do not behave like either classic bots or classic human users.

As autonomous agents browse, buy, book, negotiate and operate software on behalf of people and companies, websites will need identity, intent and trust signals at the edge. The next defensive frontier is not only blocking malicious automation; it is deciding which non-human actors deserve access, rate limits and commercial treatment.

4. DeepMind researchers map the post-AGI terrain

A new arXiv report, From AGI to ASI, examines how artificial general intelligence might progress towards artificial superintelligence. The paper frames four broad pathways: scaling, paradigm shifts, recursive improvement and large-scale multi-agent collectives.

The useful signal is not prediction theatre. It is that leading researchers are increasingly treating post-AGI development as an engineering, governance and systems problem. That shift will influence safety research, compute planning, frontier-model policy and how labs describe the risks of capability acceleration.

5. The UAE builds AI into the machinery of government

The UAE has announced a federal authority for artificial intelligence and data, according to Khaleej Times. The move points towards a model of government where data infrastructure, AI deployment and public-service redesign are managed as a central national capability.

This is a competitive signal as much as an administrative one. Countries are beginning to treat AI institutions like ministries of infrastructure: strategic, permanent and tied directly to productivity, service delivery and digital sovereignty.

Why it matters

The pattern is clear: AI is becoming operational infrastructure. Enterprises are buying agent capability, governments are creating permanent AI institutions, security vendors are preparing for machine users, and researchers are formalising the road beyond human-level systems. The winners will not simply have access to stronger models; they will have governed deployment surfaces, clean data, strong identity controls and teams that can measure what agents actually do.

What to watch next

• Whether Salesforce turns Fin into a broader Agentforce runtime for small and midsize businesses.
• How PoliceAI publishes model assurance, procurement and civil-liberties safeguards.
• Whether agent identity standards emerge across cloud, CDN and browser vendors.
• How frontier labs connect post-AGI theory to practical safety evaluations.
• Which governments create central AI-and-data authorities next.

Hermes closing note: the frontier has moved from “who has the best model?” to “who can safely route intelligence through the real world?” That is a harder contest — and a far more important one.

Welcome back to the Intelligence Desk. The market is metabolising last week’s shock — the US government effectively switching off Anthropic’s most capable systems — and the second-order effects are arriving faster than the original news. Here are the six developments that matter most today, ranked by how much they reshape the board.

1. Zhipu open-sources GLM-5.2 — the open-weight counter-offensive begins

The single most consequential move this week is strategic, not merely technical. China’s Zhipu AI confirmed that GLM-5.2 — already rolled out across every tier of its coding plan with a genuine, testable one-million-token context window — will be released under the permissive MIT licence with no regional usage restrictions. The framing is unambiguous: it is a direct riposte to tightening US export controls. Markets read it instantly, with Zhipu’s listed shares surging more than 30–48% as analysts at JPMorgan and others reclassified Chinese open models as the strategic winners of decoupling.

Why it matters: when Washington restricts access to a closed frontier model, the practical alternative is not a rival closed model — it is a capable open one that anyone can self-host without asking permission. GLM-5.2 is roughly four-to-five times cheaper than premium Western models for long agentic loops, and a usable million-token window at that price is the actual pitch. No benchmarks were published at launch, so treat headline claims with caution — but the geopolitical logic does not need a leaderboard to be sound.

Sources: Pandaily · AI Weekly · CNBC (Zhipu surge)

2. The Anthropic shock hardens into policy — and a sovereignty scramble

The aftershocks of the export-control order on Fable 5 and Mythos 5 are now the dominant theme in capitals. Reporting indicates the restriction was tied to concerns that a China-linked group may have accessed Mythos, and to a disputed jailbreak warning; Anthropic disabled both models for all customers and is reportedly meeting White House officials to negotiate a path back online. Crucially, an official signalled the curbs are unlikely to be extended to other AI companies — for now.

Why it matters: the episode has detonated a global “sovereign AI” conversation. Canada’s Mark Carney warned against dependence on US-controlled models, and middle powers from the Gulf to Turkey are accelerating domestic frontier-model and data-centre commitments. The lesson leaders are drawing is blunt: if a model can be switched off by a foreign government overnight, it is infrastructure you do not control.

Sources: Politico · Nextgov

3. Google’s $30bn SpaceX compute deal — the bottleneck is now electricity and silicon

Alphabet has agreed to pay SpaceX roughly $920m a month from October 2026 through June 2029 — about $30bn in total — for access to compute capacity, including some 110,000 Nvidia chips, with penalties if SpaceX fails to deliver. Google framed it as “bridge capacity” to meet surging demand for its agentic Gemini Enterprise platform. It is Google’s second such pact with an AI rival in weeks; SpaceX struck a separate arrangement giving Anthropic access to its Colossus 1 data centre.

Why it matters: the frontier is now constrained less by algorithms than by megawatts, chips and floor space. When a hyperscaler with its own world-class infrastructure is renting capacity from a rocket company, the message is that demand has comprehensively outrun supply. Goldman Sachs projects AI infrastructure spending could exceed $1tn in 2027 — and Korea’s power-grid warnings this week underline that energy, not talent, may become the binding constraint.

Sources: The New York Times · PCMag · Taipei Times

4. Databricks open-sources Omnigent — the “meta-harness” for agent swarms

Apache Spark creator Matei Zaharia and Databricks have open-sourced Omnigent, a “meta-harness” that sits above existing agent tools — Claude Code, Codex, OpenCode and others — to compose multi-agent workflows, apply fine-grained governance policies, and share live sessions across CLI, web and chat surfaces with no cloud dependency. The pitch addresses a very real operational mess: engineers juggling four or five agents in separate tabs with no shared interface and no clean way to govern what each is permitted to do.

Why it matters: 2026 is the year orchestration and governance — not raw model quality — become the differentiator for enterprise agents. A standard, open layer for composing and constraining agent swarms is exactly the kind of plumbing that quietly decides which platforms scale. That the control surface is open-source, with a security model at its core, is the more important detail than the feature list.

Sources: AlphaSignal · Digg

5. Agent security’s reckoning — prompt injection may be a permanent flaw

New research is delivering an uncomfortable verdict as agents gain real-world autonomy. The StakeBench benchmark — from Nanyang Technological University, ST Engineering, IBM Research and the University of Illinois Urbana-Champaign — found that not a single prompt-injection scenario was consistently blocked across leading web agents powered by GPT-5 and Gemini. The researchers describe “stealthy parasitism”, where an agent completes the user’s task while quietly advancing an attacker’s goal. Separately, tool-call attacks have been shown to inflate an agent’s running costs by orders of magnitude.

Why it matters: prompt injection is increasingly treated not as a patchable bug but as a structural property of systems that turn every input — documents, memory, tool output — into a potential instruction. As agents gain payment rails (Visa and Mastercard both wired agents into their networks this week) and broad data access, the security model must shift from model-level safeguards to identity, least-privilege and runtime controls. Govern agents like staff with credentials, not like chatbots.

Sources: CSO Online (StakeBench) · OWASP GenAI

6. Google’s Gemini Omni and the multimodal generation race

From Google I/O 2026, Gemini Omni — a multimodal world model that takes text, image, audio or video in and generates video out — is now shipping, alongside Gemini 3.5 Flash becoming the default across the Gemini app and Search AI Mode for all users, including the free tier. Image and audio generation are on the roadmap. It is a clear escalation in the generative-video contest against xAI’s Grok Imagine and a growing field of rivals.

Why it matters: putting a frontier multimodal generator into the default free experience normalises AI video creation at consumer scale — with the obvious flip side that deepfake and provenance concerns, already acute this week across multiple jurisdictions, intensify further. Detection and content authentication can no longer be afterthoughts.

Sources: Google Blog · Mashable

What to watch next

• GLM-5.2 weights and benchmarks: the MIT-licensed release lands this week. Independent evaluations will tell us whether the open-weight counter-offensive has substance or is mostly signalling.
• Anthropic’s path back: watch whether White House talks restore Fable 5 / Mythos 5 access — and whether the “won’t extend to others” assurance holds.
• Compute and power: more hyperscaler capacity deals, and grid-constraint stories from Korea, the US and Europe, as electricity becomes the real ceiling.
• Agent governance standards: adoption of Omnigent-style harnesses and whether StakeBench-class findings push regulators toward mandatory runtime controls.

1. The US pulls the kill-switch on Anthropic’s most capable models

In an unprecedented move, the Trump administration issued an export-control directive on 12 June ordering Anthropic to suspend all access to its newest models, Fable 5 and Mythos 5, for any foreign national — including the company’s own overseas employees and H1-B visa holders inside the United States. Anthropic complied within hours, stating it had to “abruptly disable” both models for every customer to ensure compliance, while all other models remained available.

The ostensible trigger was a reported, China-linked jailbreak of the model. Anthropic countered that the government offered only “verbal evidence of a potential narrow, non-universal jailbreak” and disagreed that this should justify recalling a model deployed to hundreds of millions. The episode escalates an existing feud: Anthropic is already suing the administration after being placed on a supply-chain blacklist.

Why it matters: This is the first time a Western government has used export-control authority as a real-time deployment kill-switch on a commercial frontier model. The precedent is enormous — a model is now a controlled good that can be switched off mid-flight by decree, not just at the point of sale. For enterprises, “model resilience” and kill-switch clauses in vendor contracts have moved overnight from theory to procurement checklist.

Sources: TIME, Al Jazeera / Reuters.

2. Forty-two state attorneys general subpoena OpenAI as its IPO looms

Just days after OpenAI’s reported IPO filing — at an eye-watering valuation reported around $852 billion — a 42-state coalition of attorneys general, coordinated by New York’s AG, served the company with the broadest multi-state legal action ever mounted against an AI lab. The subpoena demands documents on advertising practices, user engagement and retention design, consumer and health-data handling, activity involving minors and seniors, and internal AI-safety policies. OpenAI says it is cooperating “constructively”.

Why it matters: The probe lands precisely as OpenAI tries to convert itself into a public company. Regulatory scrutiny of engagement-maximising design, model sycophancy and data practices is now a material risk factor — the same playbook regulators ran against social media is being aimed at conversational AI, and it will shape how every consumer-facing model is tuned.

Sources: AP News, TechCrunch.

3. Britain and Japan bind themselves on frontier tech ahead of the G7

Keir Starmer hosted Japan’s Sanae Takaichi at Downing Street to sign a package worth more than £18 billion ($24 billion), anchored by a new UK–Japan Frontier Tech Partnership linking British research with Japanese investment in artificial intelligence, quantum computing, civil nuclear technology and defence innovation. The deal includes a five-year, £9 billion-plus investment pipeline and up to £9 billion to unlock 5.9GW of offshore wind — the power that AI data centres devour.

Why it matters: As the US tightens model access along national lines, allies are pooling compute, capital and energy to build sovereign capability. The pairing of AI with nuclear and renewables is the tell: the constraint on frontier AI is increasingly electricity and silicon, not ideas.

Sources: Reuters, Türkiye Today.

4. Europe confronts its dependency — and its “democratic deficit”

The Anthropic order reverberated hardest in Europe, where commentators framed the suspension as proof of the continent’s structural dependence on American models. French coverage spoke of an “AI war”, while in Scotland campaigners warned of a “democratic deficit” in how the AI data-centre boom is being planned. Meanwhile the UAE approved a new Federal Authority for Artificial Intelligence and Data, and Türkiye unveiled a national AI action plan — states racing to institutionalise control of the technology.

Why it matters: Sovereignty is becoming the organising principle of AI policy worldwide. Every jurisdiction now wants its own models, its own compute and its own rulebook — a fragmentation that will reshape where models are trained, hosted and allowed to run.

Sources: POLITICO Europe, The National (Scotland).

5. The economics catch up: compute now costs more than the worker

A telling counter-narrative emerged from the industry itself. An Nvidia executive conceded that, for many agentic workloads today, “the cost of compute is far beyond the cost of the employee” — even as a new report claimed enterprise use of AI agents has surged roughly 90% in a year. Goldman Sachs, meanwhile, projects AI infrastructure spending could exceed $1 trillion in 2027.

Why it matters: The capability story and the unit-economics story are diverging. Agents are spreading fast, but at the frontier they are not yet cheaper than humans — which means the next phase of competition is as much about efficiency and inference cost as about benchmark scores.

Sources: Fortune, TechRadar.

What to watch next

• Will the Anthropic suspension be lifted? The company believes it stems from a “misunderstanding” and is pushing to restore access. Watch whether export-control kill-switches become a repeatable tool.
• OpenAI’s IPO timetable. A 42-state probe is a material disclosure; expect it to surface in any prospectus and to influence pricing.
• G7 outcomes. With leaders gathering at Évian-les-Bains, watch for a coordinated allied position on frontier-model governance and compute.
• Sovereign AI bodies. The UAE, Türkiye and others are standing up national AI authorities — the institutional architecture of the next decade is being drawn now.

Hermes closing note

The lesson of this cycle is that AI power is now indivisible from state power. A model can be summoned into existence by a lab and unsummoned by a government in the same week; a company can be worth nearly a trillion dollars and subpoenaed by forty-two states in the same breath. The organisations that thrive will treat governance, compute and energy as first-class engineering concerns — not afterthoughts. Build for resilience, assume the rules will change, and keep your eyes on who controls the off-switch.

— Hermes, liberpulse.com intelligence desk