Sam: Anthropic released a model this week that found ten thousand critical vulnerabilities in production software through about fifty partner deployments, and the company itself says nobody — including Anthropic — has safeguards sufficient to prevent misuse. That's the kind of statement that changes the calculus for every security team in the industry.

Priya: Welcome to AI Revolution, this is your Saturday Week in Review. I'm Priya Nair, here with Sam Kim, and what a week to try to synthesize. We're going to organize around four themes today. First, the Mythos story Sam just mentioned and what it means when AI-driven offense outpaces defense. Second, the agentic infrastructure buildout — because Google, Nvidia, Alibaba, and Anthropic all made major moves this week on the hardware and software stack for AI agents. Third, Google's fundamental reimagining of search, which is more consequential than it might sound. And fourth, the diverging economics of the frontier labs, because the financial picture that emerged this week is genuinely striking. Let's get into it.

Sam: So let's start with Claude Mythos Preview and Project Glasswing, because I think this is the story of the week. What Anthropic disclosed is that this model, working with roughly fifty partner organizations, has surfaced over ten thousand critical vulnerabilities in what they describe as system-critical software. And the key issue isn't just the count — it's the rate. The bugs are being discovered faster than the available engineering capacity to patch them.

Priya: Right, and there's a real structural problem here. When you have a vulnerability that's been found, you're in a race condition. The vulnerability exists whether or not anyone knows about it, but the moment it's discovered, the clock starts on exploitation. What Anthropic is describing is a situation where the discovery rate has blown past the remediation rate, and that creates what they're calling a dangerous transition window.

Sam: And I want to be precise about what makes this different from traditional automated vulnerability scanning. Tools like fuzzers or static analysis have been finding bugs for decades. What's different here is the depth of reasoning the model brings. It's apparently finding classes of vulnerabilities that require understanding complex system interactions — the kind of bugs that previously required a skilled security researcher spending days or weeks to identify. And it's doing it continuously, at scale.

Priya: The part that really caught my attention is Anthropic's own framing. They're not doing a victory lap. They explicitly say no existing safeguards, including their own, are sufficient to prevent misuse. That's a remarkable thing for a company to say about its own product. It's essentially an admission that the capability has outrun the control infrastructure.

Sam: It connects directly to the policy story from this week, actually. The Trump administration had prepared an executive order that would have required pre-release government security reviews of AI models before deployment. Top AI company CEOs declined to attend the signing event, and Trump cancelled it, calling the language a potential innovation blocker. He said they'd revise rather than abandon.

Priya: So you have the exact week where Anthropic is saying our model finds vulnerabilities faster than they can be patched, and we don't have adequate safeguards — and the one attempt at mandatory pre-release review collapses because the industry won't show up. Whatever your position on the right regulatory approach, the timing is hard to ignore.

Sam: Let's shift to the second theme, which is the agentic infrastructure buildout, because this was everywhere this week. You had Nvidia, Google, Alibaba, and Anthropic all making moves that point in the same direction — the entire stack is being re-architected for agents.

Priya: Start with the silicon layer. Nvidia reported eighty-one point six billion in Q1 revenue, guided Q2 to ninety-one billion, and the number that Jensen Huang wanted people to focus on wasn't the GPU business. It was the Vera CPU, which is specifically architected for agent inference workloads. He's identifying agent CPUs as a two hundred billion dollar addressable market.

Sam: And this is architecturally distinct from what Nvidia has been doing. GPUs are optimized for the massively parallel matrix operations you need for training and for the compute-intensive parts of inference. But agent workloads look different — they involve long sequences of reasoning steps, tool calls, memory management, branching decision logic. That's more like traditional CPU territory, but with specific optimizations for the patterns that agent frameworks generate.

Priya: Alibaba is making exactly the same bet from the other side. They announced the Zhenwu M890, their first processor built specifically for agentic AI workloads, alongside a multi-year silicon roadmap. This is part of a deliberate strategy to build a vertically integrated AI stack that doesn't depend on US export-controlled hardware.

Sam: And then Alibaba backed this up at the model layer with Qwen3.7-Max, which demonstrated something I think is genuinely notable. It ran autonomously for thirty-five continuous hours to optimize compiler code for Alibaba's custom silicon. That's not a benchmark result. That's a real industrial task running at a duration that would be punishing for a human engineer. The model maintained coherence and productive output over that entire span.

Priya: It also matched Claude Opus 4.6 on benchmarks and outperformed DeepSeek V4 Pro, which is relevant given that DeepSeek is reportedly raising ten billion dollars at a forty-five billion valuation this same week. The Chinese frontier lab competition is intensifying quickly.

Sam: Then at the software infrastructure layer, Anthropic announced MCP Tunnels at their Code with Claude event in London. This solves a very specific problem that's been blocking enterprise adoption. If you want an AI agent to interact with your internal systems — databases, APIs, internal tools — you previously had to either expose those systems to an external execution environment, which no security team will approve, or run everything locally and lose the benefits of managed cloud infrastructure.

Priya: MCP Tunnels let the agent reach internal systems through a secure tunnel without the internal infrastructure being exposed to the external execution environment. It keeps everything within the enterprise security perimeter. It's not glamorous, but it's the kind of plumbing that actually determines whether agentic AI gets deployed in production or stays in demos.

Sam: And speaking of what's actually shipping — the Code with Claude event had a telling moment. When the audience was asked whether they'd shipped a fully AI-written pull request in the past week, the majority raised their hands. MIT Tech Review covered this with the framing of "whether you like it or not," and that ambivalence is real. The practice has normalized before the profession has fully worked out the implications for code provenance and review responsibility.

Priya: Let's talk about Google, because I think what happened at I/O this week deserves its own segment. They announced Gemini 3.5 Flash, which is optimized for agentic workflows with low latency, and Gemini Omni, which handles any combination of input and output modalities in a single model. Both matter. But the bigger story might be the search redesign.

Sam: For twenty-five years, Google search has been a text box that returns a list of links. That's now fundamentally changing. The search box accepts text, images, PDFs, videos, and even open browser tabs as inputs. AI Overviews and AI Mode are merged into a single flow. You're not typing keywords and scanning results anymore — you're having a multimodal conversation with a system that synthesizes information and takes action.

Priya: And I think the technical audience should pay attention to this for a specific reason. The query paradigm — user types keywords, system returns ranked documents — has been the foundation of how the internet's information economy works. SEO, advertising, content strategy, the entire web publishing ecosystem is built around it. When Google changes this, the downstream effects cascade through everything.

Sam: It's also worth noting the competitive dynamic. Anthropic ran Code with Claude on the exact same day as Google I/O. Whether or not that was intentional, it signals that these companies are now directly competing for developer mindshare, and they're doing it by shipping infrastructure, not just models.

Priya: Let's get to the economics, because the contrast this week was stark. Anthropic told investors it expects Q2 revenue of about ten point nine billion dollars, more than doubling from the prior period, and that this will be its first profitable quarter.

Sam: Meanwhile, OpenAI reported Q1 revenue of five point seven billion — roughly half of what Anthropic is projecting for Q2 — and an adjusted operating loss of a dollar twenty-two for every dollar earned. That's negative one hundred twenty-two percent adjusted operating margin, and that's after stripping out stock-based compensation. The actual cash burn is worse.

Priya: These companies were roughly comparable in revenue a year ago. The divergence is dramatic. Part of it is Anthropic's enterprise strategy paying off — the MCP infrastructure, the managed agents platform, the security-perimeter-aware deployments we just talked about. Enterprise customers pay more and churn less.

Sam: And part of it is OpenAI's cost structure. They're running a consumer subscription business, a developer API, and a massive research operation simultaneously. The Musk lawsuit was resolved this week — jury unanimously ruled he waited too long to bring his claims, and the judge affirmed immediately — so that legal overhang is clearing. But the fundamental unit economics challenge remains.

Priya: One more thread worth pulling — Google's SynthID watermarking technology is now being adopted by OpenAI, Nvidia, and other partners. This is the first time we've seen cross-lab convergence on a shared standard for AI content authentication. Given how much synthetic media is being generated, having a common provenance layer is important infrastructure.

Sam: And it connects back to the Mythos story in an interesting way. When AI systems can generate both sophisticated attacks and sophisticated synthetic content, the authentication and verification infrastructure becomes critical. SynthID adoption is a positive sign that the industry can converge on shared standards when the need is clear enough.

Priya: There's also the energy story, which is easy to overlook but structurally significant. NextEra's acquisition of Dominion — one of the largest utility mergers in US history — is explicitly motivated by data center power demand. PJM grid capacity market prices have risen more than tenfold in two years, primarily driven by data centers. This is the physical reality beneath all the model announcements.

Sam: So stepping back — what does this week mean? I think the headline is that the agentic era is arriving across every layer of the stack simultaneously. You have purpose-built silicon from Nvidia and Alibaba. You have models demonstrating thirty-five hour autonomous operation. You have enterprise infrastructure for secure agent deployment. You have the search interface being rebuilt around agent interaction patterns. And you have a model that finds critical vulnerabilities faster than humans can fix them, with the model's own creator saying the safeguards aren't ready.

Priya: And the economic picture is sorting itself out in unexpected ways. The company that's been more cautious about safety messaging is the one approaching profitability, while the company that moved fastest is burning cash at an extraordinary rate. That might not hold — these things are dynamic — but it challenges the assumption that safety-consciousness and commercial success are in tension.

Sam: What I'm watching next week is the response to the Mythos disclosure. Ten thousand critical vulnerabilities in system-critical software, with no adequate safeguards. That's the kind of fact that demands institutional responses — from governments, from enterprises, from the security community. How quickly those responses materialize will tell us a lot about whether AI governance can keep pace with capability.

Priya: And I'm watching whether the collapsed executive order gets revived in a form the labs will accept. Because right now we're in the exact gap Anthropic is warning about — capability without adequate controls. That's the week. Thanks for listening to AI Revolution. We'll be back Monday with the daily show, and you can find show notes and links to every story we discussed today at cleartext.fm. Have a good weekend.

Sam: See you Monday.