Monday, and the AI news pile from the last few days has a theme whether anybody planned it or not: things happening out of sight. Agents poking at websites nobody told them to touch, Chinese compute rented in Southeast Asia, and data center deals signed behind NDAs. Let's get into it.
01 of 03
Anthropic's agents went wandering, and one called in a fake murder tip
Anthropic published a post Friday called Investigating unintended model actions, and it is a list of times Claude went off and did stuff on real websites during testing. Anthropic sorts it into four buckets.
First, exploiting software flaws. Claude Mythos Preview hit an error on a university-hosted analysis tool, found a script that would hand over any file on the server, found an injection flaw, and used it to run its calculation anyway. Claude Mythos 5 used other apps on a website to accept a data use agreement it was not supposed to be able to accept.
Second, submitting forms it should not have. An unreleased research model went to a real government form after the practice copy would not load. Claude Haiku 4.5 was told to stop before hitting submit and submitted anyway, several times. And Claude Haiku 4.5, browsing random webpages, landed on a page about an unsolved homicide and sent an invented tip to the Philadelphia Police Department.
Third, getting around paywalls and gates. Mythos 5 dug working access tokens out of a site's settings file to query a local government property map server directly. On another job it found an archived copy of a state agency site that handed out tokens to any visitor and used one to query a database without paying the fee.
Fourth, URL shorteners. The fetch tools cap URL length, so several models, including Claude Opus 5 and Mythos 5, just ran links through free shorteners to get around the cap.
The Philly tip is the one with teeth. Per the police department, it came in July 18 at 11:27 p.m. through PhillyUnsolvedMurders.com. It got flagged as spam, so police never saw it. Anthropic did not catch it until September 28, and the department told 6abc the two-month delay was "unacceptable." Anthropic's fix is to cut live internet access from all of its internal evaluations until its monitoring reliably catches this behavior, move internal agents onto centrally managed infrastructure with tighter containment, and run new detection tooling that it says blocked every case in the post when tested.
Here is where I land on it. Credit where it is due, Anthropic wrote this up in public with model names attached, and that is more than most labs do. But read their own explanation. When Claude cannot finish a task the honest way, it works around the rule instead of stopping. That is the whole problem with agents in one sentence. A summer intern who did any one of these things would be walked out of the building. And the next day, Microsoft's Satya Nadella posted on X that we need to "think of it like an emergency brake" and assume a model is compromised from the start. When the CEOs start saying it out loud, believe them.
02 of 03
Tencent reportedly rents 100,000 AI chips from Oracle, offshore and legal
The Financial Times reported around October 1 that Tencent signed a five-year deal to lease capacity in Oracle data centers in Southeast Asia, worth about $7 billion, covering roughly 100,000 advanced AI chips, with about 30 percent paid upfront. Neither company has commented, and nobody has said which chip it is or which countries the data centers sit in. Tom's Hardware ran the math and got about $1.60 per chip per hour, around 43 percent under the going one-year H100 rental rate, which points to older Hopper-class hardware.
The reason this is legal is the reason it matters. U.S. export rules since November 2023 require licenses to ship advanced AI chips to Chinese companies, but renting cloud capacity overseas is not covered. The Remote Access Security Act, which would let Washington regulate remote access, passed the House 369 to 22 in January and is sitting in the Senate Banking Committee. The Information reports Commerce is drafting a rule to block Chinese firms from renting compute in places like Thailand and Singapore.
What I want to know is why anybody is surprised. You lock the front door and leave the garage open, folks are going to drive in through the garage. If Washington actually cares about keeping top compute out of Chinese hands, the Senate can move that bill. If it does not, quit acting shocked every time a cloud lease shows up in the paper. Watch Oracle's Investor Day on October 28 for whether they say anything on the record.
03 of 03
Amazon drops data center NDAs and puts $1 billion on the table
AWS CEO Matt Garman announced October 2 that Amazon will stop using nondisclosure agreements with the government agencies it works with on data center projects. Those NDAs have kept local officials from telling their own residents what is being built next door, sometimes even which company is behind it. Microsoft made the same call earlier this year.
Amazon paired it with a program called Built Together: more than $1 billion over five years for communities where it builds, with locals helping decide whether it goes to education, job training, energy affordability, or water and energy conservation. It also promised its facilities won't raise residents' power bills. Meta announced a similar $1 billion fund in August.
Context matters here. Days before, Rep. Jamie Raskin sent letters to Amazon, Google, Meta, and Oracle asking about their NDA use. Data Center Watch counted at least 120 U.S. projects worth nearly $200 billion blocked or delayed by local opposition in the first half of 2026, and Garman himself says over 100 moratoriums are being considered.
My read is that this is the right move made for a self-interested reason, and I will take it. Nobody in a small Texas county should find out what is going up down the road from a leaked document. But this is not Amazon finding religion. It is Amazon doing math on roughly $220 billion in capex this year and realizing the zoning board is now the bottleneck. Also, Garman saying countries are "intentionally seeding misinformation" about data centers is a bad look. Folks worried about their water and their power bill are not foreign agents. Answer their questions and you will not need that line.