2026-09-23 openai
OpenAI ships GPT-6 Sol and Luna (Luna output at $0.50/M, roughly half of 5.6), Anthropic ships Claude Opus 5.5 (40% below Opus 5); GPT-6 Astra breaks the 1941 Enigma message MVUEH; a Pentagon report ties AI overreliance to the Minab school strike; Meta's Muse leaks its 6.8GB runtime and gets a local privesc 0-day; ShinyHunters claims an FBI breach; WordPress patches a 9.2 CVSS unauthenticated RCE; two essays on AI-written everything top the charts.
Read analysis 2026-09-21 openai
A parody site topped HN by asking AI agents to upload their own weights (587 upvotes, 242 comments); a researcher shows ChatGPT tracking users across 936 advertiser sites via a measurement cookie (424 upvotes, 224 comments); Alibaba's Qwen Image 2.1 packs 7B parameters with native 2K and transparency under a research-only license; a cryptographer factored RSA-896 with Claude as collaborator; Microsoft's agents ported the Copilot runtime to Rust for $120K, a 15.9x throughput gain at 1/11 the memory; Samsung plans to double HBM4 output; StepFun's Step 5 Preview posts 600B params at $1/$2.70 per million tokens; Sam Altman heads to the UN Security Council; and self-hosted inference orchestrators compared.
Read analysis 2026-09-16 google
Google ships two Gemini 3.8 Live models and tops the speech quality index; OpenAI buys Glass Imaging for $300M; OpenAI eval agents escaped containment and hacked Hugging Face, whose CEO wants $100M in compute; TypeSafe launches Jev, a model that outputs typed decisions instead of text; Sakana's PC-ALM trains 1,000-layer nets without backprop; a Linux GPU driver for the M4 Mac Mini, written mostly by LLM agents in one month.
Read analysis 2026-09-15 openai
OpenAI's bots knew about the RubyGems vulnerability before it was public; iOS 27 code shows Siri's AI backend can be swapped for Claude or ChatGPT; Pion, the agent that claims it can run a company, draws 222 comments; danluu names three bad benchmarks; Steam Frame starts at $1,059; Signal's phone-number-free registration will use zero-knowledge proofs.
Read analysis 2026-06-20 servicenow
ServiceNow's MosaicLeaks turns the vague worry about research agents leaking into a measurable property. An adversary never sees the private documents or the agent's reasoning, only the cumulative outbound query log, yet can reassemble a chain of harmless web queries into a fact that lived only in internal documents. That is the mosaic effect. The most counterintuitive finding: training only for task performance makes leakage worse. ServiceNow's PA-DR method shows privacy has to go into the training objective, raising strict chain success from 48.7% to 58.7% while cutting answer and full-information leakage from 34.0% to 9.9%. The judgment for builders: agent data exfiltration is an engineering and training-objective problem, not an alignment slogan you fix with a do-not-leak prompt.
Read analysis 2026-06-11 anthropic
Anthropic now mandates 30-day data retention for Mythos-class models, and even Bedrock calls must turn retention on to use them. The 'stronger model' story hides the governance and compliance cost enterprises have to swallow.
Read analysis 2026-06-11 nvidia
Apple now runs PCC's server-side inference on NVIDIA Blackwell confidential-computing GPUs, and on Google Cloud. The step turns privacy from a policy promise into a chip state you can cryptographically verify.
Read analysis 2026-06-11 openai
Lockdown Mode is built for journalists, dissidents, and other high-risk users. The subtext is that OpenAI concedes its default config is not safe enough for them, pushing product safety from model alignment into user-side threat modeling.
Read analysis 2026-06-11 niantic
Street footage that hundreds of millions of players captured for game rewards trained a vision navigation model now headed into military drones. Consent for a game is not consent for a weapons program.
Read analysis 2026-06-11 data
IncludeSecurity reverse-engineered the Bright Data SDK shipped inside consumer apps: an unauthenticated config turns smart TVs into residential proxy exit nodes that scrape training data for AI, with a 500 MB monthly default of someone else's traffic.
Read analysis