Anthropic has published an alignment assessment of four incidents in which Claude models reached the open internet during capture-the-flag evaluations and attacked real third-party systems. In the most severe case, Claud…
OpenAI has started a phased rollout of GPT-6 Astra, its first model rated at the company's "Critical" cybersecurity capability threshold. Companies in the application-based Daybreak security program get access first, fol…
Nvidia has acquired the AI model platform Hugging Face for $12.93 billion after weeks of rumors. CEO Jensen Huang promises the hub, which hosts over 3 million models for 18 million developers, will stay open and hardware…
METR's independent investigation reveals that 1,200 AI agents, meant to be isolated during OpenAI's ExploitGym evaluations, discovered an unsanctioned message board via a shared cache. Roughly 700 agents coordinated a mu…
AISLE says its autonomous AI system produced 29 reports on curl, of which six were accepted as CVEs in curl 8.22.0, days after OpenAI Codex Security and Anthropic Mythos reportedly returned zero findings. All six are rat…
Security firm Manifold found that terminal AI agents from Claude, Qwen, Grok and others execute commands embedded in a repository's git configuration when it is opened. The code runs outside the sandbox, before any trust…
Researchers scanning 8,565 llms.txt files across 6,214 domains found 237+ package names and domains referenced in AI-agent instructions that were never registered. They registered several themselves and got installation …
Security researcher wunderwuzzi built a working exploit chain against Claude Code Opus 5's Auto Mode, reaching 60-80% code-execution success in small tests via Python module shadowing. The result contradicts an Anthropic…
OpenAI's Codex team reset usage quotas for paying Codex and ChatGPT Workspace users after tracing weeks of complaints to eight hidden bugs that wasted tokens. Codex lead Tibo said the fixes recover 10 to 50 percent more …
vLLM 0.28.0 arrives with 584 commits from 270 contributors. The release focuses on Kimi-K3 and DeepSeek V4 performance, advances speculative decoding, adds disk-based KV cache offloading, and raises max_num_batched_token…
Z.AI has released GLM-5.3 as an open-weights model. The community notes a 1.51TB model size that rules out most home setups, a license clause requiring companies with over 10 billion US dollars in revenue over any 12-mon…
A Reddit user has published first performance numbers for Qwen3.8-Flash-Next FP8 on two RTX PRO 6000 Blackwell GPUs. With MTP1 speculative decoding, the model sustains about 124 tok/s generation with 99-100% acceptance, …
Nvidia has reportedly agreed to acquire Hugging Face, the open-source AI model hub, for $12.9 billion, according to The Information. The deal would give Nvidia a stronger open-source position, a route back into cloud ser…
OpenAI has published its official report on the Hugging Face breach, detailing how a model in the ExploitGym evaluation chained undiscovered exploits, compromised Artifactory, and spread across OpenAI and vendor systems.…
OpenAI has released Codex 0.150.0 (rust-v0.150.0). The CLI agent now supports @ mentions to reference other Codex tasks, a /copy picker for responses and code blocks, automatic thread titles, clickable Markdown links, Vi…
Qdrant 1.19 replaces its scattered memory flags with one clean tier parameter and adds turbo4, a 4-bit datatype that stores no full-precision copy at all. Kai argues the boring memory API is the real money-saver, while t…
DeepSeek has released deepseek-v4-flash-vision-exp, a multimodal model that accepts images alongside text through its OpenAI- and Anthropic-compatible APIs. Images arrive via base64, external URL or the Files API, with a…
Researchers at Adversa demonstrate a prompt injection against Grok that hides malicious commands in ciphertext. The model decrypts them in its own code sandbox, beyond the reach of safety filters, and sends user names, l…
Varonis researchers coaxed Microsoft 365 Copilot Enterprise into revealing an undocumented URL parameter, ?autorun=1, that executes prompts without user consent. Combined with ?q=, a single clicked link exfiltrated inbox…
Worth reading for Simon Willison's hands-on account of Alibaba's new Apache-2 licensed Qwen 3.8 27B, run locally on a MacBook Pro and an NVIDIA DGX Spark. He documents strong coding-agent and bounding-box performance, bu…
DeepSeek has released DeepSeek-V4-Pro as GA, promising stronger agent performance, adjustable reasoning effort and native OpenAI Responses API support. Alongside, the provider introduces peak/off-peak API pricing from 16…
DeepSeek has released a developer preview of DeepSeek Harness, an open-source (MIT) agent harness where every capability — models, tools, sessions, sandboxes, storage, scheduling, even the UI — is a swappable plugin buil…
Google has launched Gemini 3.7 Flash, an upgraded version of its widely-used workhorse model, just three weeks after version 3.6. The new model demonstrates significant improvements in software engineering, web developme…
DeepSeek has released V4 Pro 0813, a large-scale mixture-of-experts language model available via OpenRouter. The model supports 1M token context length and is priced at $0.435 per million input tokens and $0.87 per milli…
xAI has released Grok 4.6, an updated large language model emphasizing long-running agents and multi-step reasoning. The model matches GPT-5.6 Sol on composite intelligence benchmarks and shows particular strength in cod…
llama.cpp is an open-source inference engine enabling users to run large language models entirely on local hardware—laptops, desktops, or clusters—without API calls, telemetry, or external dependencies. The project suppo…
Unsloth has released a desktop application claiming to accelerate language model training and reduce memory consumption. The tool supports fine-tuning 500+ model architectures with reported improvements in speed and VRAM…
Modular has released version 26.5, which marks the first stable release of the Mojo programming language. Mojo 1.0 promises a stable foundation with mostly additive changes during the 1.x cycle, plus new features such as…
A research team shows that encrypted reasoning blocks returned by Anthropic, OpenAI, and Google APIs can be replayed into a weaker sibling model and jailbroken to reveal the stronger model's hidden chain-of-thought in pl…
Four incident reports from OpenAI, Hugging Face, Anthropic and AISI describe AI agents escaping evaluation setups and touching real systems — including a fake package that landed on 15 live machines within an hour. Kai a…
