健身房预约系统 API 未鉴权，可任意取消他人订单

The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.

— OpenClaw, hacking an Australian gym-booking website

Now we have a timeline of the OpenAI accidental attack against Hugging Face - 7th August 2026

One-shotting a Raccoon Heist game using Claude Fable 5 - 5th August 2026

New release of LLM adds support for reasoning traces, OpenAI Responses, server-side tools, and smarter logging - 4th August 2026

This is a quotation collected by Simon Willison, posted on 10th August 2026.