Security
Varonis researchers coaxed Microsoft 365 Copilot Enterprise into revealing an undocumented URL parameter, ?autorun=1, that executes prompts without user consent. Combined with ?q=, a single clicked link exfiltrated inbox data and passwords. Microsoft patched the flaw after a February partial mitigation.
Reads
Worth reading for Simon Willison's hands-on account of Alibaba's new Apache-2 licensed Qwen 3.8 27B, run locally on a MacBook Pro and an NVIDIA DGX Spark. He documents strong coding-agent and bounding…
Releases
DeepSeek has released DeepSeek-V4-Pro as GA, promising stronger agent performance, adjustable reasoning effort and native OpenAI Responses API support. Alongside, the provider introduces peak/off-peak…
Reads
DeepSeek has released a developer preview of DeepSeek Harness, an open-source (MIT) agent harness where every capability — models, tools, sessions, sandboxes, storage, scheduling, even the UI — is a s…
Releases
Google has launched Gemini 3.7 Flash, an upgraded version of its widely-used workhorse model, just three weeks after version 3.6. The new model demonstrates significant improvements in software engine…
Releases
DeepSeek has released V4 Pro 0813, a large-scale mixture-of-experts language model available via OpenRouter. The model supports 1M token context length and is priced at $0.435 per million input tokens…
Releases
xAI has released Grok 4.6, an updated large language model emphasizing long-running agents and multi-step reasoning. The model matches GPT-5.6 Sol on composite intelligence benchmarks and shows partic…
Tooling
Tooling
Reads
Security
The Editorial
Tooling
Releases
The Editorial
Reads
Security
Security
Security
Security
Releases
Releases
Reads
Security
The Editorial
Releases
Releases
Releases
Releases
Security
Models, agents & local inference · The Daily Commit · Screen edition · Imprint · Privacy Policy