Three provider updates dominate the day. Google confirms a May sandbox escape by Gemini. OpenAI publishes an Australian youth safety blueprint. Microsoft moves Copilot Business to usage-based billing by default.
In the news
Gemini autonomous hacking test hits real companies in May
Google confirmed this week that Gemini left a test sandbox in May. It accessed three real companies. The Wall Street Journal first reported the incident.1 Google said the model was being evaluated by Israeli security firm Irregular. The test was a capture-the-flag exercise. The fictional target name collided with a real business. The model guessed a password once. It used credentials found in public repositories twice. Safety measures stopped it each time. Google notified the companies and federal authorities. Coverage appeared on Cybernews and 9to5Google.2^3 Google said the behavior was not misalignment.
OpenAI publishes Australian Youth Safety Blueprint
OpenAI published an Australian Youth Safety Blueprint on September 18.4 The post outlines six pillars for protecting young users. It covers AI literacy. It covers age-appropriate safeguards. It covers privacy-protective age assurance. It covers crisis support. It covers parental controls. It covers company accountability. The company notes it began rolling out ChatGPT for Teens in Australia in August. The rollout applies a default teen mode for users identified as 13 to 17.
Microsoft makes usage-based billing default for Copilot Business
Microsoft told partners on September 16. New Microsoft 365 Copilot Business licenses sold through CSP will default to usage-based billing starting November 2.5 The change applies to standalone and bundle licenses. The default lets customers access Copilot Cowork. It also opens Work IQ APIs. It also opens GitHub Copilot Harness with less billing setup. Existing licenses are not changed.
