White House Freezes GPT-5.6 as Alibaba Faces Record AI Model-Theft Allegations

Two stories about AI and power defined June 25: the Trump administration stepping directly into OpenAI's release calendar for the first time, and Anthropic filing what may be the largest AI model-extraction allegation on record.

Security

Anthropic is asking a court to punish Alibaba for what it describes as the largest Claude cloning attack to date: 25,000 accounts deployed across 28.8 million exchanges to systematically extract Claude's outputs — a scale that implies organized capability transfer, not opportunistic scraping. The volume — nearly 29 million prompt-response pairs — starts to look less like competitive research and more like synthetic data generation for training a rival system. Anthropic also alleges Alibaba defied a Trump executive order in the process, threading the filing directly into the active US-China tech confrontation. The administration is now asked to punish a company it has other reasons to engage with.

Poland arrested four members of a SIM-swapping gang accused of breaching telecom partners and hijacking email accounts to steal millions in cryptocurrency. The method — breach the carrier, redirect the SIM, own the accounts — is well-documented, but the bust is a reminder that insider access at mobile operators remains the most direct path to high-value account takeovers. The group allegedly operated across multiple countries.

Market research firm Klue is dealing with a double-extortion scenario with a twist: the company told customers the original attackers appear to be deleting stolen data, while simultaneously warning that a second threat actor has surfaced demanding ransom. The delete-the-data reassurance is hard to verify — and is undercut here by the second group's appearance, which implies the data circulated before any deletion began.

Microsoft quietly extended its free Windows 10 ESU program to October 2027 — a full year beyond the previous deadline, without announcement. With roughly a quarter of PCs still on Windows 10, the extension is pragmatic. It also confirms that the end-of-life cliff pressure Microsoft implied would force a migration wave was never going to land that cleanly.

AI

The Trump White House asked OpenAI to slow-roll the release of GPT-5.6 over security concerns, and OpenAI complied — sharing the model with select partners rather than releasing broadly. Sam Altman reportedly told employees Wednesday. The stated concern is about properties of the model itself, not downstream misuse — a sharper framing than prior AI safety debates. It's the most direct intervention a sitting US administration has made into a commercial AI release schedule. Context: OpenAI is reportedly leaning toward delaying its IPO to next year, meaning the company is navigating White House pressure on a flagship product while managing pre-IPO scrutiny simultaneously. For OpenAI, complying publicly is the easier move — but the precedent of an administration holding de facto delay power over commercial AI releases is the more lasting outcome.

Bruce Schneier flags a useful parallel: a German court ruled Google liable for inaccuracies in its AI search summaries, rejecting the "users can verify for themselves" defense. If that liability standard migrates toward US jurisdictions, the calculation on when to release a model — and how thoroughly to test it first — shifts considerably regardless of government pressure.

An auditing firm separately reported that some Anthropic customers are finding errant charges on their API invoices. Anthropic hasn't publicly addressed it. Even as Claude is gaining paid market share from ChatGPT among consumers who pay for AI, billing credibility is a risk orthogonal to product quality.

Notion shut down Notion Mail, the inbox it built after acquiring Skiff, because most users are already delegating email to AI agents. The company is "going all in on agents to run your inbox." This isn't a feature failure — it's Notion conceding that the abstraction level changed and a dedicated inbox is the wrong layer to build at.

General Intuition raised $320M toward a $2.3B thesis that video game data can teach AI agents embodied decision-making that text training can't. Patronus AI separately raised $50M to build synthetic environments for stress-testing agents before deployment. Agent evaluation infrastructure is starting to look like an investment category.

Tech

RAMageddon is printing in price tags. Apple moved first, raising iPad and MacBook prices. Xbox followed with the Series S jumping to $499.99 and 1TB models rising $150, effective August 1st — the second Xbox price hike in under a year. Framework flagged supply disruptions affecting its Laptop 13 Pro. The underlying shortage is hitting RAM, SSDs, and spinning storage simultaneously. Apple's margins typically let it absorb component volatility longer than any other consumer hardware company; when Apple passes price increases through to customers, the industry's cushioning is gone.

Polestar was effectively banned from US sales for model year 2027 and beyond under the rule prohibiting vehicles with Chinese-sourced software. Swedish-branded but Geely-owned, Polestar apparently couldn't untangle its software stack to qualify for a waiver. It's a stricter enforcement outcome than many expected from the rule.

The FCC is weighing elimination of E-rate, the $2B program funding school and library internet access for thirty years. FCC Chair Brendan Carr cited screen time concerns; critics called it politics dressed as paternalism. For districts that depend on E-rate, there is no alternative.

YouTube pushed Shorts toward TikTok feature parity: clean-screen mode, 2x playback, heart replacing thumbs-up — all features TikTok shipped years ago. The platforms are now mostly distinguished by recommendation algorithm and brand, not capability.

The administration is managing AI release schedules, hardware costs are escalating across the board, and Notion just retired a product because agents made the category redundant. A consequential day.

Also yesterday

• Chrome Ad Blocker With 10M+ Installs Carries Dormant Script Injection Capability
• Shopify's Shop App Hijacked to Deliver Callback Phishing and Remote Access Malware
• Polymarket Hacked: Third-Party Breach Results in Stolen User Funds