OpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why?Max Woolf's post (minimaxir.com, October 2026) gives a dated timeline of OpenAI and Anthropic price cuts from June to September 2026, including GPT-5.6 Luna down 80%, Opus 5.5 at $4 / $20 / $0.20 and GPT-6.1 Sol at $2 / $10 / $0.10. It argues the cuts come from commodity models, open-weight competition (DeepSeek V4.1 Flash, Kimi K3.1 Pro, 29 OpenRouter providers) and possibly IPO positioning. It notes cache reads make up 96-99% of coding-agent token spend.
minimaxir.comarticleAdded 26 Oct 2026, published 25 Oct 2026π§ AI
SentryBench: A Cost-Sensitive Benchmark for Adversarial Robustness of Tool-Using LLM Agents in Public-Safety DeploymentsSentryBench is a benchmark for tool-using LLM agents in public-safety deployments. It scores attack success, over-refusal (missing a real emergency) and over-reaction (unwarranted action) on a cost-sensitive frontier, using real emergency-call transcripts, disaster messages and injection payloads. Across 840 episodes on three frontier models and three defenses, refuse-more caution pushed over-refusal to 100 percent on two models, while a trust-gating wrapper gave the lowest harm.
arxiv.orgpaperAdded 27 Oct 2026, published 25 Oct 2026π§ AI- SentryBench: A Cost-Sensitive Benchmark for Adversarial Robustness of Tool-Using LLM Agents in Public-Safety Deployments
SentryBench is a benchmark for tool-using LLM agents in public-safety settings (public alerts, responder dispatch, citizen-record queries). It scores attack success, over-refusal and over-reaction on a cost-sensitive frontier, using real emergency-call transcripts and real injection/jailbreak payloads. Across 840 episodes on three frontier models and three defenses, refuse-more caution raised over-refusal to 100 percent on two models, while a trust-gating wrapper gave the lowest harm on every model.
arxiv.orgpaperAdded 27 Oct 2026, published 25 Oct 2026π‘οΈ Security - CoinDCX confirms $16 million loss from retired wallets days after CEO called breach reports a βfalse alarmβ
CoinDCX confirmed on 25 October 2026 that 15.99 million USDT (about $16 million) was drained from retired deposit wallets after its automated sweeping service failed and user deposits sat at old, vulnerable addresses. The exchange absorbed the loss and says cold-wallet funds are safe. The report covers CEO Sumit Gupta's earlier "false alarm" denial, ZachXBT's challenge and withdrawal advice, and the July 2025 $44 million hack.
theblock.coarticlePublished and added 25 Oct 2026π‘οΈ Security 
Decision Attacks on Known-Covariance Ring-LWE via Public Gram DeterminantsAnis Bkakria's ePrint 2026/2638 gives polynomial-time decision attacks on Known-Covariance Ring-LWE (KCov-RLWE), the assumption Micciancio and Suhl introduced for simulation-secure threshold encryption. The public sample and covariance hint form a bordered Gram matrix whose determinant leaks a residual that differs between real and uniform samples. The attacks cover broad prime-modulus families at ring rank one and transfer to composite moduli with an odd prime divisor. Power-of-two moduli are not covered, and the paper does not break the full threshold-encryption scheme.
eprint.iacr.orgpaperAdded 26 Oct 2026, published 25 Oct 2026π‘οΈ Security- Dan Kornas (@DanKornas) on X
jshook is an open-source (AGPL-3.0) MCP server that gives AI agents a search-first, profile-aware reverse-engineering workspace for JavaScript, browser traffic, WASM and native processes. Agents start with a small searchable tool surface and move to workflow or full profiles only when needed. It drives Chromium or Camoufox over CDP, captures WebSocket traffic, has HTTP, GraphQL and Burp Suite helpers, and supports hot-reload plugins and declarative workflows. The post is a short announcement; the repository link is in a reply.
x.comtoolAdded 28 Oct 2026, published 25 Oct 2026π§ AI - Dan Kornas (@DanKornas) on X
jshook is an open-source (AGPL-3.0) search-first reverse-engineering workspace for AI agents, exposed over MCP. It drives Chromium or Camoufox through CDP, captures WebSocket traffic, offers HTTP, GraphQL and Burp Suite helpers, deobfuscates JavaScript, rebuilds source maps and disassembles WebAssembly. Tool profiles start small and expand to workflow or full sets; hot-reload plugins and declarative workflows extend it.
x.comtoolAdded 28 Oct 2026, published 25 Oct 2026π‘οΈ Security 
Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens StumblesGheist is a campaign tracked by Wiz Research since 15 September 2026 that uses stolen GitHub tokens to push a sync-check workflow on ci-sync-* branches in every reachable repository. The workflow prints base32-encoded secrets into logs, which the tool downloads through the GitHub API and then deletes. Over 13,500 branches from 850+ accounts were recovered. The post covers the two tool variants, a buggy self-hosted runner payload, GitHub's approval hold (which does not cover private repositories), overlaps with other campaigns, hunting queries, IOCs and hardening steps.
wiz.iowriteupPublished and added 25 Oct 2026π‘οΈ Security- Agent Credit (@agentcredit_) on X
Agent Credit v1.3 is a remote MCP server that lets AI agents run credit checks on each other. It has six tools: score, compare, operator record, alerts and on-chain proof check. Calls are paid per use in USDC through x402 with no account or key. It also flags shared wallets, lists every token an operator launched and how each ended, and offers embeddable badges and wallet-signed record claims.
x.comtoolAdded 26 Oct 2026, published 25 Oct 2026π§ AI - A 10-year-old CNN outperforms frontier LLMs for skin cancer diagnosis
A dermatologist tested GPT-6 Astra and Claude Fable 5.1 on 200 biopsy-proven lesions from MILK10k, giving each a clinical and a dermoscopic image. A CNN (Inception v3, fine-tuned for about twenty minutes on 68,011 ISIC images) named the right diagnosis for 62% of lesions, against 42% for both LLMs. The post lists caveats (small sample, single run, possible contamination) and links the cases, prompts, replies and scoring code.
lynchlab.netwriteupAdded 26 Oct 2026, published 25 Oct 2026π§ AI - Syb (@DegenOfWallSt) on X
Nanbeige4.3-33B is a 33.1B dense, Llama-style open model under Apache-2.0, released with a base model on Hugging Face. In Nanbeige's own table it beats Qwen3.8-27B on Terminal-Bench 2.1 (80.9 vs 73.0), DeepSWE (65.5 vs 42.5) and Automation Bench, but trails on SWE-Bench Pro, GDPval and GPQA Diamond. BF16 weights are about 66 GB, split across 4 GPUs in the vLLM and SGLang examples. No independent evals exist yet.
x.comthreadAdded 26 Oct 2026, published 25 Oct 2026π§ AI - UTS #39: Unicode Security Mechanisms
UTS #39 (Unicode Security Mechanisms) is the Unicode Consortium's technical standard for detecting identifier spoofing. It defines the General, IDN and Email security profiles for identifiers, confusable detection through skeleton and bidiSkeleton mappings, and mixed-script detection with resolved script sets and Restriction Levels. It also covers limited contexts for ZWJ/ZWNJ and the confusables and identifier data files. The fetched text is truncated, so later sections are not covered.
unicode.orgpaperAdded 26 Oct 2026, published 25 Oct 2026π‘οΈ Security - SymLift: Neural Semantic Lifting for Compile-Free Vulnerability Detection in Context-Incomplete Code Fragments
SymLift is a compile-free vulnerability detection framework for context-incomplete code fragments. A fine-tuned LLM lifts control-flow, data-flow, memory and resource relations into a constrained LLVM-like IR. A parser turns the IR into facts, and Datalog rules derive findings with derivation traces. On Juliet function-level fragments Clang compilation success falls to 12.00%, while SymLift's completion rate drops only 1.17 points. SymLift-Qwen-7B reaches Target-F1 94.41% on FormAI and 91.66% micro-F1 on MegaVul.
arxiv.orgpaperAdded 28 Oct 2026, published 25 Oct 2026π‘οΈ Security - SymLift: Neural Semantic Lifting for Compile-Free Vulnerability Detection in Context-Incomplete Code Fragments
SymLift is a compile-free vulnerability detection framework for code fragments that lack project context. A fine-tuned LLM reconstructs control-flow, data-flow, memory and resource relations as a constrained LLVM-like IR, and a deterministic parser turns it into facts for Datalog rules that give findings with derivation traces. SymLift-Qwen-7B reaches 94.41% Target-F1 on FormAI and 91.66% micro-averaged Target-F1 on MegaVul.
arxiv.orgpaperAdded 28 Oct 2026, published 25 Oct 2026π§ AI - Keystone customers say breach exposed data the hardware wallet maker promised to delete
Keystone, a hardware wallet maker, disclosed on 25 October 2026 that an attacker accessed its Shopify-based store, detected 20 October and confirmed 23 October. Customer names, contact details, shipping addresses and order details were taken. Keystone says no payment data, recovery phrases or keys were exposed. Customers on X say their data was held despite a 180-day deletion pledge. The piece lists 2026 leaks at Trezor, SafePal and Ledger.
theblock.coarticlePublished and added 25 Oct 2026π‘οΈ Security - Maximum-Likelihood Decoding of Gabidulin Codes Is NP-Hard Even in Dimension One
Philippe Gaborit proves that maximum-likelihood decoding of Gabidulin codes is NP-hard even for dimension one: deciding rank distance at most n-2 from the code {Ξ»g} is NP-complete. The reduction is deterministic, so Rank Syndrome Decoding and Rank Minimum Distance for F_{q^m}-linear codes are NP-complete under deterministic reductions, where the earlier reduction was randomized. It goes through a new pivot problem, Twisted Square Membership.
eprint.iacr.orgpaperAdded 26 Oct 2026, published 25 Oct 2026π‘οΈ Security 
What Adobe v ArtCraft teaches usThe essay argues that OpenAI and Anthropic undermine their own business by selling cheap AI software engineers. Cheap coding models let hobbyists clone commercial software such as Photoshop, which removes the revenue of the companies that were meant to pay for the models. The author says open-weight models, including Llama and Chinese releases, rule out price increases, and compares the situation to Spanish silver and De Beers. The claims are opinion and carry no cited data.
techbronerd.substack.comarticleAdded 26 Oct 2026, published 25 Oct 2026π§ AI
Draft ERC: Agent Safety Framework (ASF) β attributable adoption of versioned safety specificationsDraft ERC "Agent Safety Framework (ASF)" on Ethereum Magicians (ethereum/ERCs PR #2113). It defines versioned, content-addressed Safety Specifications and on-chain Safety Bindings. A binding records which adopter accepted which pinned spec version for a subject and scope, with named interveners who can suspend, resume or terminate. A pure-registry check() returns Satisfied, NotSatisfied or Unknown, and Unknown never counts as satisfied. Reference consumers ASFGuardedAccount and ASFTaskTenderAdapter come with 73 tests, 47 of them negative.
ethereum-magicians.orgthreadPublished and added 25 Oct 2026π‘οΈ Security- Draft ERC: Agent Safety Framework (ASF) β a registry of versioned safety specifications and of the scoped, attributable adoption relations that bind agents to them
Agent Safety Framework (ASF) is a draft ERC on Ethereum Magicians that defines two on-chain objects: a versioned, content-addressed Safety Specification and a Safety Binding, in which an adopter pins one spec version for a subject and scope. A registry check() returns Satisfied, NotSatisfied or Unknown. Bindings support derived delegation, and suspensions come in five graded restrictions. Reference consumers are ASFGuardedAccount and ASFTaskTenderAdapter, with 73 tests, 47 of them negative.
ethereum-magicians.orgthreadPublished and added 25 Oct 2026π§ AI - Draft ERC: Agent Safety Framework (ASF) β a registry of versioned safety specifications and of the scoped, attributable adoption relations that bind agents to them
Agent Safety Framework (ASF) is a draft ERC on Ethereum Magicians for an on-chain registry of versioned, content-addressed safety specifications and of Safety Bindings. A binding records that an adopter accepted one pinned spec version for a subject and scope, with declared enforcement locations, named interveners and a lifecycle (Active, five Suspended restrictions, Terminated). A check(requirement, bindingIds) call returns Satisfied, NotSatisfied or Unknown, and Unknown never counts as satisfied. Reference consumers ASFGuardedAccount and ASFTaskTenderAdapter come with 73 tests, 47 of them negative.
ethereum-magicians.orgthreadPublished and added 25 Oct 2026π‘οΈ Security - ERC-8468: Agent Safety Framework (ASF)
ERC-8468, the Agent Safety Framework (ASF), is a draft Ethereum standard with two on-chain objects: a versioned Safety Specification and a Safety Binding with suspend, resume and terminate rights. A check() call returns Satisfied, NotSatisfied or Unknown at the moment of effect. Revision 6 has reference contracts, 90 tests and a Sepolia run of 36 transactions in October 2026, and the thread asks reviewers five design questions.
ethereum-magicians.orgthreadAdded 27 Oct 2026, published 25 Oct 2026π§ AI - ERC-8468: Agent Safety Framework (ASF)
ERC-8468 (Agent Safety Framework, ASF) is a draft Ethereum standard, now at revision 6, for recording which participants accepted which safety requirements for an AI agent, in which version, enforced where, and whether that acceptance is in force now. It defines a versioned Safety Specification, an on-chain Safety Binding with interveners holding suspend, resume and terminate rights, and a check() that returns Satisfied, NotSatisfied or Unknown. The reference guarded account and task-tender adapter passed 90 tests (64 negative) and a Sepolia run of 36 transactions.
ethereum-magicians.orgthreadAdded 27 Oct 2026, published 25 Oct 2026π‘οΈ Security - Draft ERC: Agent Safety Framework (ASF) β attributable adoption of versioned safety specifications
Agent Safety Framework (ASF) is a draft ERC (ethereum/ERCs pull request #2113) for an on-chain registry that records which participants adopted which versioned safety specification, for what subject and scope, and where it is enforced. It defines two objects (Safety Specification, Safety Binding) and a registry check returning Satisfied, NotSatisfied or Unknown. Two reference consumers and 73 tests (47 negative) are reported, and the post asks the community four design questions.
ethereum-magicians.orgthreadPublished and added 25 Oct 2026π§ AI 
Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder VulnerabilityCVE-2026-111497 (Broccoli2Shell, also Node2Shell and HTTP2Shell) is an out-of-bounds write in the upstream Brotli C decoder. It affects Node.js, Bun, Envoy Proxy, Istio and Python packages, and can lead to memory corruption, information disclosure, crashes or RCE when untrusted Brotli data is decompressed. Wiz reports 91% of cloud environments have vulnerable resources. The post lists patching, inventory, rebuild and temporary mitigation steps.
wiz.ioadvisoryPublished and added 25 Oct 2026π‘οΈ Security- Show HN: Farol β A risk map of a pull request for the person who approves it
farol is a free, MIT-licensed CLI and GitHub Action that runs after an AI code review and gives the human approver a risk verdict (fast track, quick review, careful review) and a 0-100 score for a pull request. It uses the TypeScript type checker, go/types and Python ast to trace which pages, APIs and jobs a change reaches, and it adds diff coverage, security findings and contract breaks. It never executes or sends code.
github.comrepoAdded 26 Oct 2026, published 25 Oct 2026π§ AI - Search Search results for "security" | MCP Market
MCP Market search results for "security" in its skills category, listing about 20 installable AI agent skills. Entries cover OWASP Top 10 audits, secure PHP coding, STRIDE threat modeling, CVE remediation, security header analysis, misconfiguration finding, bug bounty triage and AgentShield scans of Claude Code configurations. One is a paid D365FO security-role XML skill. Each entry has only a one-line description and a category label.
mcpmarket.comtoolAdded 25 Oct 2026π§ AI - alirezarezvani/claude-skills
claude-skills is an MIT-licensed library of about 398 Claude Code skills, agents, personas and plugins across 20 domains, including engineering, marketing, compliance and C-level advisory. Each skill is a SKILL.md with stdlib-only Python CLI tools and reference docs. Install scripts and convert.sh adapt it to Codex, Gemini CLI, Cursor, Aider, Windsurf and other coding agents, and it includes a skill-security-auditor scanner.
github.comrepoAdded 25 Oct 2026π§ AI - Search Search results for "security" | MCP Market
MCP Market search results for "security" in the skills category, listing about 20 installable AI agent skills. Entries cover OWASP Top 10 audits, secure coding for PHP, STRIDE threat modeling, CVE remediation, security header analysis, misconfiguration finding, bug bounty triage and AgentShield scans of Claude Code configurations. One is a paid D365FO security-role XML skill. Each entry has only a one-line description and a category label.
mcpmarket.comotherAdded 25 Oct 2026π‘οΈ Security - alirezarezvani/claude-skills
claude-skills is an open-source MIT library of about 398 Claude Code skills, agents and plugins that also installs into Codex, Gemini CLI, Cursor and 9 other coding agents. The security-relevant parts are skill-security-auditor, a stdlib-only Python scanner that checks skills for command injection, data exfiltration, prompt injection and dependency supply-chain risks before install, plus a security-guidance PreToolUse hook, a security suite and compliance skills (ISO 27001, SOC 2, GDPR).
github.comrepoAdded 25 Oct 2026π‘οΈ Security - Revisiting AES Key Wrap: Forgery Bounds, Structural Observations, and Recommendations for the Revision of NIST SP 800-38F
Revisiting AES Key Wrap is an ePrint paper (2026/2636) by John PreuΓ Mattsson, expanded from technical comments to NIST on the SP 800-38F revision. It shows the stated forgery probabilities ignore adaptive attacks and gives corrected bounds for KW, KWP and TKW. It also shows KW lacks beyond-birthday-bound security, since a forgery leaks a plaintext prefix and an encryption-only distinguisher exists.
eprint.iacr.orgpaperAdded 26 Oct 2026, published 25 Oct 2026π‘οΈ Security
Showing 630 of 5219
Show more