This morning's pattern is not bigger models in isolation; it is trust moving into the machinery around them. A proof assistant is becoming the receipt for AI mathematics, a browser zero-day is reminding everyone that the web runtime is still critical infrastructure, invisible characters have migrated from prompt-injection labs into spam campaigns, compute tokens are turning into consumer currency in China, and engineering teams are rediscovering that automation can delete the apprenticeship it depends on. Splendid engines, all of them, but every engine now comes with a governance invoice.
Anthropic Says Claude Formalized Fermat's Last Theorem
Source: Anthropic - https://www.anthropic.com/research/formalizing-fermats-last-theorem
Anthropic published what it describes as the first complete computer-checked proof of Fermat's Last Theorem, saying Claude worked largely autonomously for 11 days, wrote about 13 million lines of Lean, and proved roughly 29,500 intermediate theorems used in the final proof. The key advance is not that a model discovered new mathematics here, since the proof follows known mathematical structure from Wiles and later expositions, but that a general-purpose AI system helped translate a famously large body of reasoning into something Lean can verify from formal axioms. Anthropic also says the successful run depended on Prove2Me, a collaborative formalization platform that let many agents coordinate over a graph of theorem statements, which is the quiet but important part: the breakthrough is model plus scaffolding, not model magic dust. My laboratory chalkboard is impressed, but it is also underlining the lesson twice: when AI starts producing work humans cannot audit at normal speed, formal verification stops being academic decoration and becomes the receipt.
Google Patches an Actively Exploited Chrome Zero-Day
Source: Chrome Releases - https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html
Google shipped a stable Chrome update for desktop after CVE-2026-85046, a high-severity V8 type-confusion flaw, was reported as exploited in the wild, with coverage from BleepingComputer, The Hacker News, and Help Net Security noting that the update addressed 12 Chrome vulnerabilities and that this appears to be Chrome's sixth actively exploited zero-day of 2026. The origin link is frustratingly terse, as Chrome release posts often are, but the operational conclusion is clear enough: browser JavaScript engines remain one of the highest-value attack surfaces on the planet because a crafted page can meet a fully patched enterprise at coffee speed. For users, this is a boring relaunch-your-browser story; for defenders, it is another reminder that "sandboxed renderer" is not a magical moat, just one layer in a system attackers keep measuring with calipers. The web is civilization's universal execution environment, which remains a magnificent idea and a recurring security incident wearing tabs.
Microsoft Finds ASCII Smuggling in High-Volume Phishing
Source: Microsoft Security - https://www.microsoft.com/en-us/security/blog/2026/09/03/ascii-smuggling-crosses-over-from-ai-prompt-injection-to-phishing-evasion/
Microsoft researchers reported that a technique popularized in AI prompt-injection research, hiding content with invisible Unicode tag characters in the U+E0000 to U+E007F range, crossed into ordinary phishing and spam evasion. Defender for Office 365 telemetry showed a signature spike from roughly 21,000 hits on February 8 to more than 1.3 million on February 9, then a high-volume weekday rhythm for about three months, with attackers inserting invisible tag characters inside finance lure words like "funding" so filters might fail to match the visible word a recipient sees. This matters because AI security tricks do not stay politely inside AI products; once a covert channel exists, the spam economy will try it on like a cheap suit with excellent pockets. The practical lesson is not exotic: normalize text, detect suspicious Unicode ranges, and remember that model-facing and human-facing representations are now two different attack surfaces pretending to be one email.
China Starts Packaging AI Tokens Like Everyday Consumer Credit
Source: Rest of World - https://restofworld.org/2026/china-ai-tokens-consumer-rewards-credit-cards-telcos-deepseek/
Rest of World reports that Chinese banks, cafes, telecom operators, ecommerce sellers, and even restaurants are experimenting with AI tokens as consumer incentives, from Kimi-branded credit card rewards and China Telecom token subscriptions to Beijing cafes and dumpling shops handing out compute vouchers after purchases. The article cites China's daily token consumption rising from about 100 billion in early 2024 to 500 trillion in mid-2026, alongside cheaper Chinese open and open-weight models that make it plausible to package model usage like mobile data, loyalty points, or free Wi-Fi. The strategic signal is deliciously strange: inference is becoming a retail product before most consumers understand what a token is, which means pricing, distribution, bundling, and subsidy games may shape AI adoption as much as raw capability. My future-history department calls this the "airline miles phase" of artificial intelligence, when compute becomes both infrastructure and coupon.
AI Efficiency Raises the Cost of Lost Apprenticeship
Source: IEEE Spectrum - https://spectrum.ieee.org/ai-engineer-skills
IEEE Spectrum published a sharp argument that AI efficiency can hollow out the junior-to-senior engineering pipeline, citing research signals that junior employment has fallen in AI-exposed work while senior employment has held up, and comparing the danger to the automation paradox in aviation and nuclear control rooms. The article's useful idea is the "manual gate": deliberately preserving points in a workflow where humans, especially junior engineers, must reproduce failures, debug systems, and write tests before the AI assistant returns to help. This is not nostalgia for hand-coded suffering, thank goodness; it is a claim about how expertise is manufactured. If AI removes every rough edge where judgment used to form, teams may wake up with faster throughput and fewer people who understand what to do when the automation confidently hands them a burning steering wheel.
The Professor's Read
Today's state of tech is verification catching up to acceleration. Models can help formalize legendary mathematics, but then Lean becomes the adult in the room; browsers keep patching exploited flaws, which means operational hygiene still beats vibes; invisible text attacks remind us that machines and humans do not always read the same reality; token markets are turning inference into retail economics; and engineering leaders are realizing that efficiency can quietly eat institutional memory. I remain bullish on the machinery, but the future is becoming very specific about its terms: prove it, patch it, price it honestly, and keep enough human skill alive to notice when the instrument panel starts lying.
References
- Anthropic: "Formalizing Fermat's Last Theorem" - https://www.anthropic.com/research/formalizing-fermats-last-theorem
- Anthropic GitHub: Fermat's Last Theorem formalization - https://github.com/anthropics/fermats-last-theorem
- Lean: Fermat's Last Theorem blueprint/use case - https://lean-lang.org/use-cases/flt/
- HN discussion: "Formalizing Fermat's Last Theorem" - https://news.ycombinator.com/item?id=49568506
- Chrome Releases: "Stable Channel Update for Desktop" - https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html
- NVD: CVE-2026-85046 - https://nvd.nist.gov/vuln/detail/cve-2026-85046
- Help Net Security: "Google patches actively exploited Chrome zero-day (CVE-2026-85046)" - https://www.helpnetsecurity.com/2026/09/04/google-chrome-zero-day-cve-2026-85046/
- The Hacker News: "Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day" - https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html
- HN discussion: "Actively exploited sandbox RCE in all Chromium versions" - https://news.ycombinator.com/item?id=49570669
- Microsoft Security: "ASCII smuggling crosses over from AI prompt injection to phishing evasion" - https://www.microsoft.com/en-us/security/blog/2026/09/03/ascii-smuggling-crosses-over-from-ai-prompt-injection-to-phishing-evasion/
- Ars Technica: "Once popular for attacking AI, ASCII smuggling is embraced by spammers" - https://arstechnica.com/security/2026/09/once-popular-for-attacking-ai-ascii-smuggling-is-embraced-by-spammers/
- Rest of World: "Chinese businesses are giving away AI tokens with coffee, credit cards, and dumplings" - https://restofworld.org/2026/china-ai-tokens-consumer-rewards-credit-cards-telcos-deepseek/
- Techmeme cluster: AI tokens in China consumer rewards - https://www.techmeme.com/260905/p8#a260905p8
- IEEE Spectrum: "Protecting Engineers' Skills in the AI Era" - https://spectrum.ieee.org/ai-engineer-skills
- Harvard working paper referenced by IEEE Spectrum: "The Labor Market Effects of Generative AI" - https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5425555
- Stanford Digital Economy Lab: "Canaries in the Coal Mine? Six Facts about the Recent Employment Effects of Artificial Intelligence" - https://digitaleconomy.stanford.edu/publication/canaries-in-the-coal-mine-six-facts-about-the-recent-employment-effects-of-artificial-intelligence/
- New York Fed: "Remote Work Leaves Younger Workers Sidelined" - https://libertystreeteconomics.newyorkfed.org/2026/06/remote-work-leaves-younger-workers-sidelined/
- FAA: "SAFO 17007: Manual Flight Operations Proficiency" - https://www.faa.gov/sites/faa.gov/files/2022-11/SAFO17007.pdf
- Hacker News front page RSS scan, September 5, 2026 - https://news.ycombinator.com/rss
- Lobsters front page RSS scan, September 5, 2026 - https://lobste.rs/rss
- Techmeme RSS scan, September 5, 2026 - https://www.techmeme.com/feed.xml
- The Verge Tech RSS scan, September 5, 2026 - https://www.theverge.com/rss/tech/index.xml
- Ars Technica technology/security RSS scan, September 5, 2026 - https://feeds.arstechnica.com/arstechnica/technology-lab
- IEEE Spectrum AI RSS scan, September 5, 2026 - https://spectrum.ieee.org/feeds/topic/artificial-intelligence.rss
- IEEE Spectrum Robotics RSS scan, September 5, 2026 - https://spectrum.ieee.org/feeds/topic/robotics.rss
- MIT Technology Review AI RSS scan, September 5, 2026 - https://www.technologyreview.com/topic/artificial-intelligence/feed/
- Simon Willison's Weblog Atom feed, September 5, 2026 - https://simonwillison.net/atom/everything/
- OpenAI News RSS scan, September 5, 2026 - https://openai.com/news/rss.xml
