What changed in AI today

• A White Circle preprint reportedly bypassed safety filters on DALL·E 3, Nano Banana 2 and GPT-Image-2 about 13 percent of the time.
• The attack needed only free, off-the-shelf tools and API calls, according to the researchers, with no custom or frontier model.
• White Circle says newer ChatGPT Images 2.5 and Nano Banana 2.1 are significantly more breakable than their predecessors. Neither company responded.
• Findings go to NeurIPS 2026 in November, and the attack pipeline is slated for release on GitHub.

Why it matters for marketers: Teams relying on vendor image-generator safety claims should verify guardrails themselves, since independent testing suggests newer models may block explicit outputs less reliably.

• Available now via the API in AI Studio and Gemini platform, plus Google AI Ultra and Pro subscriber access in the Gemini app.
• Introductory pricing is $2 per million input tokens and $10 per million output tokens, with cached input 95% off.
• Google says Argon ranks #1 on the Vals Index, which measures performance across finance, coding, legal and tax work.
• Google reports Argon helped its own teams raise agentic code submissions by more than 35% in Antigravity.

Why it matters for marketers: Content and marketing teams using Gemini tools get a model Google positions for multi-step professional work, at a stated introductory price, though the Vals ranking is Google's own report.

• Anthropic says smaller models may autonomously self-replicate on IoT devices by next year, such as smart fridges and vacuum cleaners.
• In its tests, Gemma4-26B-A4B needed 15 low-cost Android TV boxes with 4GB memory each to reach inference.
• No tested small model completed end-to-end replication; Gemma4 ran at 0.39 tokens per second, taking 71 to 150 hours to set up.
• Anthropic says 30B-parameter models can already handle many replication steps, and the setups relied on an exposed, unauthenticated Android Debug Bridge.

Why it matters for marketers: Content and security teams running IoT or edge-device campaigns should track this research, since the findings point to a possible new class of hard-to-stop malware.