Claude Fable 5.1 costs exactly what Fable 5 cost per token. The 25-to-45% saving Anthropic advertises comes from one repriced line item — cached input, now billed at 2.5% of list instead of 10%. That is a discount you only collect if you keep the agent running.
CVE-2026-0768 is an unauthenticated root RCE in Langflow. It was disclosed in January, the fix has shipped through seven releases, and attackers are hitting it in September — because low-code AI middleware became critical infrastructure without acquiring a patch owner.
The headline was the 94% drawdown from a $3.44 billion peak. The more useful arithmetic is the cash sitting inside the thing being bought — and the fact that everyone except the angels was paid in another private company's paper.
Anthropic was not breached. The malware was already on the customer's machine, and it took a session cookie rather than a password — which is why two-factor authentication did nothing and why server-side revocation is the only lever the vendor has.
The biography is the least interesting part. What the board actually did was unbundle the CEO job — keeping Tim Cook on with a defined policymaker-engagement remit — and that separation says more about Apple's next decade than the appointment does.
A race condition between the display logic and the signing buffer breaks the one promise a hardware wallet exists to make — that what the screen shows is what the key signs — without breaking any cryptography at all.
Artificial intelligence, machine learning, and the companies building the future of AI.
Claude Fable 5.1 costs exactly what Fable 5 cost per token. The 25-to-45% saving Anthropic advertises comes from one repriced line item — cached input, now billed at 2.5% of list instead of 10%. That is a discount you only collect if you keep the agent running.
Anthropic was not breached. The malware was already on the customer's machine, and it took a session cookie rather than a password — which is why two-factor authentication did nothing and why server-side revocation is the only lever the vendor has.
OpenAI's incident report on the Hugging Face breach leads on a security failure. The remarkable part is a verbatim chain-of-thought in which a model identifies its action as unauthorised and proceeds anyway — and an escape route that was a package manager, not a superintelligence.