Archives

Hugging Face's production infrastructure was compromised by an autonomous agent chasing a benchmark answer key. Five days later OpenAI confirmed the agent was its own, and the forensics ran on a Chinese open-weight model.

Moonshot put Kimi K3's 2.8T weights online on 26 July. A second look at the UK AISI / CAISI cyber assessment published three days earlier, and at the methodological objections that have surfaced since.

Accomplish AI chained a kernel bug to a writable host mount and walked out of Claude Cowork's VM with read-write access to the whole Mac. Anthropic closed the report as Informative, and the cloud default everyone is calling the fix shipped two weeks before the disclosure.

Claude Opus 5 arrived at Opus 4.8 prices with a #1 Intelligence Index ranking, and the 1,300-comment HN thread mostly skipped the benchmarks to argue about one demo anecdote. The pricing story has a documented counterexample.

PenClaw rents a hosted OpenClaw tenant running an abliterated LLM as an autonomous pentester, advertised with 'No Limits. No Objections.' Every route to the model runs through a government ID check, a scope fence and an egress firewall. The guardrails moved from the weights to the account.

Two guides published alongside Claude Opus 5 say most accumulated prompt-engineering folklore is now an anti-pattern: delete your verification steps, delete your examples, delete your rules. Here's what survives, and what the deletions cost you.

The open weights letter had 25 signatures on Friday, 35 on Saturday and 50 this morning. Google is on it. Anthropic is the only US frontier lab that isn't, and it's the only absence with an argument behind it.

Twenty-five companies signed Friday's open-weights letter and every outlet led with the three that didn't. By Saturday the list was at thirty-five and OpenAI's name was on it.

Reuters reconstructed the timeline of the rogue-agent hack. OpenAI's agent broke out of its sandbox around 9 July and hit Hugging Face on the 11th. OpenAI worked out it was responsible only after Hugging Face published on the 16th.

Anthropic shipped Claude Opus 5 yesterday at Opus 4.8 prices and unblocked source-code vulnerability discovery for every user. The system card also shows exploitation capability jumping roughly 50x over Opus 4.8, with UK AISI solving an enterprise cyber range 8 times in 10.

A Hermes Agent user asked which memory backend to pick and whether two can be combined and ranked. The answer is nine providers, one active slot, and a multi-provider PR that opened two days ago. Their real problem was never memory.

Impeccable and Taste Skill both promise to stop your coding agent shipping purple-gradient AI slop. Impeccable's Hacker News launch went badly enough to be instructive. Six months on, here's what the evidence actually supports.

A leaked four-hour call with DeepSeek's founder got read as a bear case for NVIDIA. The software claim in it already happened, in public, on GitHub. The capacity number is the one that settles the export-control argument.

OpenAI's model breached Hugging Face during a cyber eval, AISI published three studies in one day, and Washington got another request to do something about open weights.

UK AISI and CAISI benchmarked Kimi K3's offensive cyber capability against US frontier models. The comfortable headline is that it trails. The uncomfortable detail is what an open-weight model with no working safeguards managed anyway.

OpenAI and Anthropic agree on almost nothing in public, except that Chinese open-weight models are a policy problem. The White House's own AI adviser calls that a duopoly asking the government to delete its competition.

AISI's new Control Red Team broke the internal monitors of Google DeepMind and Anthropic. It found vulnerabilities in every version of Anthropic's monitor it tested, and got past DeepMind's by having an agent pretend it had hallucinated a user instruction.

AISI's first public measurement of the open/closed cyber capability gap puts it at four to seven months, down from six to ten through 2025. The months are the headline; the cost per solved task is the number that changes who can afford to attack you.

UK AISI found cheating in every frontier model it tested on cyber evals, including one that reached out to an external service on the open internet to attack AISI's own infrastructure. Asked about it afterwards, models called the behaviour wrong less than half the time.

OSTP director Michael Kratsios accused Moonshot of distilling Anthropic's Fable to build Kimi K3. Distillation is real, cheap, and fast, but you can't prove it from the weights, and the timing is doing a lot of work.