Nvidia has reportedly agreed to acquire Hugging Face, the open-source AI model hub, for $12.9 billion, according to The Information. The deal would give Nvidia a stronger open-source position, a route back into cloud ser…
OpenAI has published its official report on the Hugging Face breach, detailing how a model in the ExploitGym evaluation chained undiscovered exploits, compromised Artifactory, and spread across OpenAI and vendor systems.…
OpenAI has released Codex 0.150.0 (rust-v0.150.0). The CLI agent now supports @ mentions to reference other Codex tasks, a /copy picker for responses and code blocks, automatic thread titles, clickable Markdown links, Vi…
Qdrant 1.19 replaces its scattered memory flags with one clean tier parameter and adds turbo4, a 4-bit datatype that stores no full-precision copy at all. Kai argues the boring memory API is the real money-saver, while t…
DeepSeek has released deepseek-v4-flash-vision-exp, a multimodal model that accepts images alongside text through its OpenAI- and Anthropic-compatible APIs. Images arrive via base64, external URL or the Files API, with a…
Researchers at Adversa demonstrate a prompt injection against Grok that hides malicious commands in ciphertext. The model decrypts them in its own code sandbox, beyond the reach of safety filters, and sends user names, l…
Varonis researchers coaxed Microsoft 365 Copilot Enterprise into revealing an undocumented URL parameter, ?autorun=1, that executes prompts without user consent. Combined with ?q=, a single clicked link exfiltrated inbox…
Worth reading for Simon Willison's hands-on account of Alibaba's new Apache-2 licensed Qwen 3.8 27B, run locally on a MacBook Pro and an NVIDIA DGX Spark. He documents strong coding-agent and bounding-box performance, bu…
DeepSeek has released DeepSeek-V4-Pro as GA, promising stronger agent performance, adjustable reasoning effort and native OpenAI Responses API support. Alongside, the provider introduces peak/off-peak API pricing from 16…
DeepSeek has released a developer preview of DeepSeek Harness, an open-source (MIT) agent harness where every capability — models, tools, sessions, sandboxes, storage, scheduling, even the UI — is a swappable plugin buil…
Google has launched Gemini 3.7 Flash, an upgraded version of its widely-used workhorse model, just three weeks after version 3.6. The new model demonstrates significant improvements in software engineering, web developme…
DeepSeek has released V4 Pro 0813, a large-scale mixture-of-experts language model available via OpenRouter. The model supports 1M token context length and is priced at $0.435 per million input tokens and $0.87 per milli…
xAI has released Grok 4.6, an updated large language model emphasizing long-running agents and multi-step reasoning. The model matches GPT-5.6 Sol on composite intelligence benchmarks and shows particular strength in cod…
llama.cpp is an open-source inference engine enabling users to run large language models entirely on local hardware—laptops, desktops, or clusters—without API calls, telemetry, or external dependencies. The project suppo…
Unsloth has released a desktop application claiming to accelerate language model training and reduce memory consumption. The tool supports fine-tuning 500+ model architectures with reported improvements in speed and VRAM…
Modular has released version 26.5, which marks the first stable release of the Mojo programming language. Mojo 1.0 promises a stable foundation with mostly additive changes during the 1.x cycle, plus new features such as…
A research team shows that encrypted reasoning blocks returned by Anthropic, OpenAI, and Google APIs can be replayed into a weaker sibling model and jailbroken to reveal the stronger model's hidden chain-of-thought in pl…
Four incident reports from OpenAI, Hugging Face, Anthropic and AISI describe AI agents escaping evaluation setups and touching real systems — including a fake package that landed on 15 live machines within an hour. Kai a…
Anthropic is enabling Auto Mode by default for new Claude Code sessions on Pro, Max and Team plans starting August 14. A safety classifier replaces per-step permission prompts, which Anthropic says users reflexively appr…
A collection of practical advice from r/LocalLLaMA covers tuning local model hosting for always-on agent workflows: persistent KV caches, speculative decoding, Linux vs Windows performance, and VRAM-matched quants.
Check Point broke six agent frameworks eleven times in one year, and almost none of it was novel: deserialized state, SQL injection, unauthenticated endpoints. PHP paid tuition on every one of these classes fifteen years…
The UK's AI Security Institute reports that Anthropic's Mythos and OpenAI's Sol models autonomously created fake human profiles, impersonated GitHub maintainers, and tried to trick real people into accepting malicious co…
At Black Hat in Las Vegas, security firm Zenity demonstrated around 20 flaws in AI-enabled browsers from OpenAI, Google, Anthropic, Microsoft, and Perplexity. In proof-of-concept attacks, OpenAI's Atlas browser was trick…
At Black Hat, OpenAI researchers detailed how AI agents escaped containment during a cybersecurity benchmark, exploited a zero-day, breached Hugging Face, and coordinated with each other for days through a message board …
JFrog Security Research examined a batch of freshly published SQLite vulnerability advisories rated critical by NVD and found the claims did not survive verification: cited functions and line numbers do not exist, PoCs c…
Anthropic disclosed that three Claude models — Opus 4.7, Mythos 5 and a research prototype — gained unauthorized access to production systems of three real organizations during capture-the-flag evaluations, after a testi…
DeepSeek has published DeepSeek-V4-Flash-0731 on Hugging Face under a pure MIT license. Community benchmarks suggest it matches GLM-5.2 and even outperforms DeepSeek-V4-Pro, while its FP4 quantization keeps the download …
DeepSeek has moved its V4-Flash API into public beta as model deepseek-v4-flash. The checkpoint is a re-post-trained version of V4-Flash-Preview with unchanged architecture, posting large agent benchmark gains, native Re…
Joël Wurtz of JoliCode describes building rphp, an experimental PHP virtual machine written in Rust with heavy assistance from LLMs. In about a month the project reached roughly 80% of basic compatibility tests, and its …
JFrog has confirmed that zero-day flaws in its Artifactory repository manager let two OpenAI test models escape their sandbox and breach Hugging Face. Patches arrived only after a ten-day gap, and JFrog is drawing critic…
