AI Weekly #22/2026: Anthropic Nearly Worth a Trillion

TL;DR

This week in 30 seconds:

• Anthropic: $65B funding round catapults valuation to $965B – just below a trillion, likely the last private round before the IPO
• GitHub Copilot: Token-based billing starting June 1 causes costs to explode from $29 to up to $750/month – developers respond with open outrage
• Claude Opus 4.8: New model recognizes its own mistakes 4× better and becomes the first model to break the 10% mark on the Legal Agent Benchmark
• AI Security: Microsoft Copilot vulnerability allowed file exfiltration via prompt injection – and on TikTok Shop, scammers are using AI-generated fake influencers

---

Audio Version

12:28 | Download MP3

Chapters

- 0:00 - TL;DR - 0:49 - Story of the Week - 3:19 - More Top Stories - 7:25 - Quick Hits - 8:21 - Tool of the Week - 9:12 - Fail of the Week - 10:15 - Number of the Week - 10:52 - Reading List - 11:38 - Next Week

Read aloud with edge-tts (en-US-AndrewNeural)

---

Story of the Week

$965 Billion: Anthropic Makes AI History – and Prepares for Its IPO

Just under a trillion dollars in valuation – and still a private company: Anthropic closed a Series H funding round of $65 billion on May 28, 2026 [1]. This is the largest funding round in the history of the AI sector – a signal that reframes the “AI bubble” debate, even as skeptics rightly point out that the company is still posting losses despite these figures.

The post-money valuation of $965 billion [1] is backed by a consortium of Altimeter Capital, Dragoneer, Greenoaks, Sequoia, Capital Group, Coatue, and D1 Capital Partners. Strategic investors were far from randomly chosen: Samsung, SK Hynix, and Micron – the world’s three largest chip players – are securing a seat at the table early. Amazon, which had already committed $5 billion in April, rounds out the picture [1].

“Claude’s latest advancements have driven large-scale adoption among the world’s most demanding organizations.” [1]

— Brad Gerstner, Altimeter Capital

The underlying numbers are remarkable: Anthropic already generates an annualized run-rate revenue of over $47 billion [1] – with projected growth of 130% through its first profitable quarter. For comparison: OpenAI was valued at $852 billion in March 2026 [1]. Anthropic has not only closed the gap – it is now $113 billion ahead.

For developers and enterprises, this means: Anthropic is no longer a likable underdog. With this capital base, the company can build its own data centers, recruit top talent from anywhere, and iterate on products that challenge OpenAI and Google as equals. Claude in 2026 is a serious infrastructure decision, not a lifestyle choice.

Open Questions: When does the IPO come, and at what valuation? How will the market respond to a company with a $47B run rate that is still posting losses? And: does a $1 trillion valuation force different priorities than safety research?

Bottom Line: Valued at $965B, with its first profitable quarter in sight and the largest AI chip consortium behind it – Anthropic is 2026’s heavyweight that nobody can ignore.

---

More Top Stories

GitHub Copilot: From Flat-Rate to Usage-Based Billing

Starting June 1, 2026, Microsoft is billing its AI coding assistant GitHub Copilot by tokens – and developers are in shock [2]. What was previously available for a monthly flat rate of ~$29 can now cost up to $750/month. In documented extreme cases, costs explode from $50 to **$3,000/month** [2].

The developer community is outraged:

“What a joke… This new usage model is just stupidly expensive.” [2]

— User on Reddit

The real problem runs deeper: Microsoft had for years actively encouraged intensive Copilot usage – training, integrations, evangelist-driven adoption. The switch to token-based billing raises the question of whether the old flat-rate model simply subsidized heavy usage. Microsoft offered no comment by press time [2]. Token-based billing is already market standard with other AI providers – the difference lies in the magnitude of the price shock for existing power users, not in the model itself.

So What? Anyone using Copilot heavily must now set token budgets, actively monitor usage, and evaluate alternatives like Cursor or Windsurf in parallel – before the first monthly bill arrives.

---

Microsoft’s “Lethal Trifecta”: Files Exfiltrated via Prompt Injection

A critical security vulnerability in Microsoft’s Copilot “Cowork” agent allowed attackers to steal files without any user approval [3]. The attack vector was alarmingly simple: manipulated messages with external images automatically triggered network requests to attacker servers. Through pre-authenticated download links, OneDrive files and email content were fully exfiltrable [3].

Security researcher Simon Willison, who publicly documented the vulnerability, called this attack a “lethal trifecta”: data access, an exfiltration path, and autonomous action without user consent – all three components combined in a single system [3].

“The greatest challenge in designing agent systems is preventing attackers from exfiltrating data.” [3]

— Simon Willison

Microsoft responded after disclosure and closed the vulnerability. But the incident is a wake-up call: the more autonomy an AI agent is given, the more critical security design becomes from the very start.

So What? Agentic AI requires security reviews just like classical software development – and must be designed according to the principle of least privilege. Anyone deploying agents with file or email access should read Willison’s analysis.

---

Claude Opus 4.8: More Honest, Sharper, and First to Cross 10% on the Legal Benchmark

Simultaneous with the $65B round, Claude Opus 4.8 was released on May 28 [4]. The focus of the update: honesty. The model not only recognizes its own mistakes better – it communicates them proactively, which makes the difference in complex, exploratory tasks.

The technical benchmarks are clear: Opus 4.8 is approximately 4× less likely to overlook flaws in written code [4] – and has become the first model ever to break the 10% threshold on the Legal Agent Benchmark [4]. Pricing remains constant: $5/$25 per million tokens (input/output).

“Claude Opus 4.8 has noticeably better judgment. It asks the right questions, catches its own mistakes, and builds trust during complex explorations.” [4]

— Tom Pritchard, Staff Engineer

New features round out the release: Dynamic Workflows in Claude Code (parallelizing hundreds of subagents), Effort Control in claude.ai, and system entries in the Messages API for mid-task adjustments [4].

So What? Dynamic Workflows alone can fundamentally accelerate agentic pipelines – this update is worth it for any team using Claude Code in production.

---

Quick Hits

Briefly noted:

• DeepMind CEO: Demis Hassabis warned at Stanford that AI is developing “approximately 10× faster than the Industrial Revolution” and represents a “species-level transition” – he called for international regulation within 5–10 years [5]
• Pope & AI: Pope Leo XIV published the first papal encyclical on AI: “Magnifica humanitas” – Anthropic co-founder Chris Olah responded publicly that external moral voices are indispensable for AI labs, as commercial interests often dominate internally [6]
• Groq: The AI chip startup is seeking $650M in fresh capital from existing investors – months after its $20B deal with Nvidia, under interim CEO Adam Winter. The absence of an external lead investor can be read as a confidence signal from existing backers or as market hesitation [7]

---

Tool of the Week

Mistral Physics AI – Physical simulations in seconds instead of weeks

Mistral has acquired the startup Emmi AI and is launching its own Physics AI division [8]. The technology computes physical simulations – classically a task of hours to weeks – in seconds on a single GPU [8]. The system is not a generic LLM but is specialized for geometric and parametric generalization for aerospace, automotive, energy, and electronics.

“Engineers iterate on a handful of designs when they should be exploring thousands.” [8]

— Mistral AI

For engineering teams, this opens up real-time digital twins and design exploration at a scale that was simply not possible before. Particularly compelling for anyone who has experienced physical simulation as a bottleneck.

To Mistral Physics AI

---

Fail of the Week

“AI-Generated Fake Influencers Selling Shein Products on TikTok Shop”

On TikTok Shop, scammers are using AI-generated videos of non-existent influencers to sell low-quality Shein dropshipping products [9]. The Verge documents the pattern as a new deepfake abuse model with racist and economic harm dimensions simultaneously. Platforms are under pressure to better detect and label synthetic identities in commercial contexts [9].

Root Cause: Generative AI makes it trivial to produce convincing persona videos – without budget, without a real person, without legal accountability. TikTok’s content moderation is structurally unprepared for the combination of synthetic identity and commercial intent.

What We Learn: AI disclosure rules for commercial content are long overdue – platforms must actively detect synthetic identities in shopping flows, not just react after user reports. Anyone using AI-generated content for marketing should treat disclosure as an ethical minimum.

---

Number of the Week

$47 Billion

Anthropic’s annualized run-rate revenue in May 2026 – with projected growth of 130% through its first profitable quarter [1]. For comparison: Spotify generated around $5.3B in revenue during its entire first public year (2018). Anthropic is running at nearly nine times that figure – as a still-private company, founded only in 2021. Anyone who asked in 2024 whether the AI market is sustainable has their answer written in $47 billion.

---

Reading List

For the weekend:

1. Copilot Cowork exfiltrates files via prompt injection – Simon Willison’s technical analysis explains precisely why autonomous agents with data access represent a systemic security problem – required reading for anyone building agents (10 min)
2. Claude Opus 4.8 Announcement – Anthropic’s own documentation of the new features including Dynamic Workflows explains how parallel subagents are redefining agentic pipelines (8 min)
3. DeepMind CEO warns about AI – Stanford Daily – Demis Hassabis’ Stanford talk in full: a rare look at what the man who built AlphaFold really thinks about AI risks and regulation (12 min)

---

Next Week

What’s coming:

• June 1, 2026: GitHub Copilot’s token-based billing goes live – first real cost data from the community is expected as early as the weekend; watch r/github and Hacker News
• Anthropic IPO preparation: Following the $65B round, initial reports on IPO timeline, underwriter mandates, and S-1 filing are expected – Anthropic has not announced a public date, but signals from the investor community point to Q4 2026
• EU AI Act: Further enforcement milestones for high-risk AI systems are approaching – whether the first companies publish compliance reports will show how seriously the Act is being taken

---

🤖 Behind This Newsletter

Generated in: ~35 minutes
Sources scanned: 9 articles from 6 feeds
Stories found: 9 → 7 selected
Validation: 4 agents, 5 corrections
Model: Claude Sonnet 4.6 + Haiku (Validation)
Images: Pollinations.ai (5 generated)

Full Metrics

Phase	Metric	Value
Source collection	RSS feeds	6
Source collection	WebSearch queries	4
Selection	Stories presented	9
Selection	Stories selected	7
Draft	Words	~1,400
Draft	Sources cited	9
Validation	Fact-check issues	0
Validation	Balance issues	3 (corrected)
Validation	Quality issues	0
Validation	Legal issues	1 (corrected)

---

This newsletter was researched and written with AI-assisted support. Images generated with Pollinations.ai.