369 results for “TPU”

List Grid

What you seeeverything

Recent Oldest Added A–Z

All types369 Articles115 Papers102 Repos74 Write-ups39 Threads17

More types6

Advisories7 Tools6 Other4 Talks3 Courses1 Videos1

“TPU”

eva.acarticle🧠 AI

So I guess everyone uses LLMs to think now

"So I guess everyone uses LLMs to think now" is an opinion post from the eva.ac blog. The author explains why they never use LLMs for published research: they do it for fun and cannot take credit for model output. They argue LLMs still need skilled guidance, criticise AI-company security marketing (PHP2Shell from Calif, OpenAI and Wiz), and cite the Tailscale "tailworm" disclosure and the eMudhra key found without AI.

LLMPHPLinux+3

OpenAIAnthropicCalif+5

ai-policy· Added 2 Nov 2026, published 1 Nov 2026

indiatoday.inarticle🛡️ Security

AI startup hacks Anthropic, gains access to employee details, internal messages

Cathedral, a security startup founded by former DOGE members, used AI agents to find flaws in third-party business software used by Anthropic. It reached sales, HR and IT systems in under 12 hours. Anthropic says no customer chats, model outputs, source code or model weights were reached, and it cut off access the same day. The article also recaps earlier cases of Claude bypassing access restrictions, including Georgia vote counts.

Claude

CathedralDOGEAnthropic

AI Security, Threat Intel· Added 1 Nov 2026, published 31 Oct 2026

github.comrepo🧠 AI

Show HN: A language model that lives in a boot sector

bootgpt is a char-level language model that runs from a BIOS boot sector. A 512-byte hand-written asm MBR loads an 11.5 KB int8 model from 23 following sectors and runs it in 16-bit real mode on a 386, generating fake Linux dmesg boot logs. train.py quantises to int8 with power-of-two scales, and its integer simulation matches the asm output char for char.

x86 assemblyNASMQEMU+4

sectorllmsectorlisp-nnOscar Toledo+3

inference, models, training· Added 1 Nov 2026, published 31 Oct 2026

blog.googlearticle🧠 AI

We’ve received our first response from the Project Suncatcher prototype satellite.

Project Suncatcher is a Google research effort to power AI compute in space. Its prototype satellite launched on 1 October 2026 and, after commissioning, returned the first AI response from a data-center-class TPU in orbit: a haiku from the onboard Gemma 4 open model, downlinked over Svalbard. Next come thermal-stress and radiation tests, then twin interconnected satellites in 2027.

TPUGemma

GoogleGemma 4Project Suncatcher+1

inference, ai-infra· Published and added 30 Oct 2026

arxiv.orgpaper🛡️ Security

TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races

TextSeal2 is a distortion-free LLM text watermark that merges two or more keys into one virtual key and couples it to fresh noise through AutoMark's Gaussian copula. Under speculative decoding it verifies keyed drafts with an extra exponential race, so output matches the target model and acceptance rate is unchanged. On three LLMs at a 10^-3 false-positive rate, it detects 8 to 22 points more 100-token answers than TextSeal.

TextSeal2TextSealAutoMark+2

Gumbel-max schemespeculative decodingGaussian copula+1

AI Security· Added 31 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🧠 AI

TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races

TextSeal2 is a distortion-free watermark for LLM output that keeps its signal under speculative decoding. It merges two or more keys into one virtual key coupled to fresh noise through AutoMark's Gaussian copula, and verifies drafts with an extra exponential race. On three LLMs it detects 8 to 22 points more 100-token answers than TextSeal at a 10^-3 false-positive rate.

LLMspeculative decodingGumbel-max watermarking+1

TextSeal2TextSealAutoMark+2

research, inference· Added 31 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🛡️ Security

Understanding and Mitigating Role Spoofing in LLMs

Understanding and Mitigating Role Spoofing in LLMs is an arXiv paper (October 2026) on role spoofing, a prompt injection where malicious tool output impersonates the user. It shows models track "who said what" using both content cues (semantics, style) and structure cues (control tokens, formatting). Attacks combining fake structure and content succeed often, adversarial training stops only content-based attacks, and linear probes trained to predict conversation roles detect spoofing across settings.

LLM

role spoofingrole confusionprompt injection+1

AI Security· Added 31 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🧠 AI

A Unified Hessian-Guided Framework for Post-Training Quantization

This preprint proposes a unified post-training quantization framework for large language models. It derives a Hessian-guided approximation of the output change caused by joint weight and activation quantization, using a tractable Fisher approximation. Quantization ranges, linear transformations and weight rounding are optimized together under one output-sensitivity objective. The authors report gains over state-of-the-art transformation and rounding methods in channel-wise and block-wise settings.

LLMpost-training quantizationHessian-guided approximation+1

arXiv

research, inference· Added 31 Oct 2026, published 29 Oct 2026

securityweek.comarticle🧠 AI

Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model

Gemini 4 Carbon is Google's new frontier model, announced with scores of 88.2% on SEC-bench Pro, 54.8% on ExploitGym and 71.0% on CWE-bench. Google says it beats GPT-6 Astra, Claude Opus 5.5 and Claude Fable 5.1 on these, with no guardrails. Access is limited to Fairwind Program partners at first. Pricing starts at $2 input and $10 output per million tokens, rising to $4 and $20.

Gemini

GoogleGemini 4 CarbonGemini 4 Argon+13

models, evals· Published and added 29 Oct 2026

arxiv.orgpaper🛡️ Security

SEAL: Sealed Queries for Local Sanitization against Indirect Prompt Injection

SEAL is a defense against indirect prompt injection for local LLM agents. It learns a soft prompt and scoring readout offline, then uses a frozen task model to score and delete injected tokens from tool outputs, with queries built from trusted initial context. On AgentDojo, attack success falls from 34.6% to 0.1% and Joint rises from 51.4% to 77.5%, using about 127x fewer defense tokens than PISanitizer.

LLMAgentDojoAgentDyn+1

indirect prompt injection

AI Security· Added 31 Oct 2026, published 29 Oct 2026

eprint.iacr.orgpaper🛡️ Security

High Precision Noise Cleaning for CKKS with Application to Asynchronous Threshold CKKS

High Precision Noise Cleaning for CKKS is an IACR ePrint preprint (2026/2675) by Zhihao Li, Cheng Hong and Tao Wei. It composes lower-degree Hermite polynomials to reach output noise bounds such as 2^-300 for noise flooding, and uses this to build an asynchronous threshold CKKS scheme with strong simulation security in the random oracle model. In OpenFHE, binary-message cleaning falls from 9.63 s to 1.54 s.

CKKSOpenFHE

noise floodingHermite interpolationfunctional bootstrapping+2

other· Added 31 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🧠 AI

inkGround: Benchmarking Fine-grained Visual Grounding Capabilities of Vision-Language Models for Cursive Handwriting in the Wild

inkGround is a benchmark for stroke trajectory recovery from full-page, camera-captured handwriting, with 537 page images (about 18.7k words, 163k strokes) and pseudo-label references filtered by OCR agreement and human raters. Models get a page image and a target word, then output ordered stroke points. Seven VLMs were scored with DTW, Chamfer distance, readability and style similarity. Closed-source models, notably Gemini-3.1-Pro, did best, and the ranking held on IAM-OnDB.

vision-language model

inkGroundIAM-OnDBGemini-3.1-Pro+1

evals, multimodal, research· Added 30 Oct 2026, published 28 Oct 2026

decrypt.coarticle🧠 AI

OpenAI Plans to Buy Google's AI Chips as It Looks Beyond Nvidia: Report

Decrypt reports, citing The Information, that OpenAI plans to buy Google TPUs rather than rent them, to reduce dependence on Nvidia. Neither company has confirmed, and price, volume and timing are undisclosed. The article covers OpenAI's TPU optimization job listing, its Broadcom-built Jalapeño inference chip due end of 2026, Nvidia and AMD deals, and Anthropic's multi-gigawatt TPU agreement.

TPUJalapeñoGoogle Cloud

OpenAIGoogleNVIDIA+10

inference, ai-infra· Published and added 28 Oct 2026

x.comthread🧠 AI

Niko (@nikolayxyz) on X

Gemini 4 Carbon is Google's new frontier model, announced in a post by nikolayxyz that quotes Google's launch text. It ranks #1 on v5.0 of the Artificial Analysis Intelligence Index with 59 points, ahead of Opus 5.5 and GPT-6 Astra. Intro pricing is $2 input and $10 output per million tokens. Access starts for cyber defenders first, as Gemini 4 Argon's did. The captured text is cut off before the rollout details.

Gemini

Gemini 4 CarbonGemini 4 ArgonGoogle+4

models, evals· Added 29 Oct 2026, published 28 Oct 2026

blog.googlearticle🛡️ Security

Gemini 4 Carbon

Gemini 4 Carbon is Google's frontier model, announced with cybersecurity results: 88.2% on SEC-bench Pro (finding vulnerabilities), 54.8% on ExploitGym (exploitation) and 71.0% on CWE-bench (patching). Google reports 0.0% attack success on Gray Swan's indirect prompt injection benchmark. Access starts with a subset of cyber defenders through the Fairwind Program. Pricing is $2 per million input tokens and $10 per million output tokens.

Gemini

Gemini 4 CarbonGemini 4 ArgonFairwind Program+6

AI Security· Added 29 Oct 2026, published 28 Oct 2026

blog.googlearticle🧠 AI

Gemini 4 Carbon

Gemini 4 Carbon is Google's frontier model, announced two weeks after Gemini 4 Argon. It scores 59 on Artificial Analysis Intelligence Index v5.0, 88.2% on SEC-bench Pro, 54.8% on ExploitGym and 71.0% on CWE-bench. Pricing is $2 per million input and $10 per million output tokens. Access starts with a subset of cyber defenders through the Fairwind Program.

Gemini

Gemini 4 CarbonGemini 4 ArgonGoogle+10

models, evals, ai-safety· Added 29 Oct 2026, published 28 Oct 2026

deepmind.googlearticle🧠 AI

Gemini 4 Carbon: Our next frontier model

Gemini 4 Carbon is Google DeepMind's new frontier model, announced two weeks after Gemini 4 Argon. It ranks #1 on Artificial Analysis Intelligence Index v5.0 at 59 and scores 88.2% on SEC-bench Pro, 54.8% on ExploitGym and 71.0% on CWE-bench. Access starts with cyber defenders through the Fairwind Program, priced at $2 per million input tokens and $10 per million output tokens.

Gemini

Gemini 4 CarbonGemini 4 ArgonGoogle DeepMind+12

models, evals, ai-safety· Published and added 28 Oct 2026

endorlabs.comarticle🛡️ Security

The ADLC maturity model: 5 stages of agentic development security | Endor Labs

The ADLC maturity model is a proposed five-stage framework from Endor Labs for scoring security controls over coding agents, from unmanaged experimentation to continuous verification. Each stage has requirements on two tracks, agent actions (shell commands, MCP calls, package installs) and agent output (code, dependencies, secrets). It sets stage 3 at deterministic hooks that block actions, gives evidence-based assessment questions, and lists traps such as relying on prompt-level rules.

Endor LabsAURIModel Context Protocol+2

ADLC maturity modelOWASP SAMMOWASP Top 10 for LLM Applications+5

AI Security, GRC, DevSecOps· Published and added 28 Oct 2026

deepmind.googlearticle🧠 AI

Genie 4: A new generation of world simulation

Genie 4 is Google DeepMind's real-time interactive world model, announced as a research preview for trusted testers. It generates video with native audio and interactive dialogue, steered by keyboard controls and text prompts. Gemini 3.8 Flash acts as a guiding agent that plans steps and checks frames, and Gemini 4 Argon is used for robotics experiments. The post lists limitations such as drift and object permanence, and says outputs carry SynthID watermarks.

GeminiGoogle AI StudioSynthID

Google DeepMindGenie 4Gemini 3.8 Flash+5

models, multimodal, agents· Published and added 27 Oct 2026

privacy.claude.comarticle🧠 AI

Is my data used for model training?

Anthropic's privacy help article on whether customer data trains its models. For commercial products (Claude for Work, Anthropic API, Claude Gov), inputs and outputs are not used for training by default. Thumbs up/down feedback stores the whole conversation for up to 5 years, de-linked from user IDs, and may be used for training. Team and Enterprise owners can disable feedback in organization settings.

ClaudeModel Context ProtocolClaude Code

Anthropic

ai-policy· Added 28 Oct 2026, published 27 Oct 2026

x.comthread🧠 AI

Muzammil Shah (@Muzammil_OX) on X

Kimi K3.1 Pro is a new model from Moonshot AI that scores 55 on the Artificial Analysis Intelligence Index, up 11 points from its predecessor, and ranks 4th overall. It has a 1M-token context window and API pricing of $2 per million input tokens and $10 per million output tokens. Weights are due by November 4. Moonshot removed cyber-related training data, which cut its internal vulnerability research score from 90.5% to 81%.

UnityUnreal EngineGodot

Moonshot AIKimi K3.1 ProKimi+2

models, evals· Added 28 Oct 2026, published 27 Oct 2026

arxiv.orgpaper🧠 AI

Folding Attention Biases into Keys Makes Compacted KV Caches Run on Standard Kernels

The paper folds the per-key logit bias of Attention Matching (AM) KV cache compaction into the keys along one closed-form direction per head, fitted on context queries. The result is a plain cache that FlashAttention and vLLM paged caches can use, with output error bounded by how far each query's projection on that direction is from 1. Unmodified vLLM serves folded caches through a KV connector. On QuALITY and LongHealth the fold is within noise of AM in 13 of 14 settings. Under AM's published per-head budgets it is within noise in 9 of 10.

vLLMFlashAttentionHugging Face+3

Attention MatchingQuALITYLongHealth+2

research, inference· Added 28 Oct 2026, published 27 Oct 2026

simonwillison.netarticle🧠 AI

GPT-6.1 Terra

GPT-6.1 Terra is OpenAI's midrange model, announced 26 October 2026 and aimed at visual reasoning, computer use and clearer writing. It costs $1 per million input tokens and $5 per million output, about half of GPT-5.6 Terra and GPT-6.1 Sol and roughly 10x GPT-6 Luna. Simon Willison relays OpenAI's Ted Sanders, who rates it better than Astra and Sol at technical communication and much faster on computer use.

OpenAI API

GPT-6.1 TerraOpenAISimon Willison+7

models, multimodal· Added 27 Oct 2026, published 26 Oct 2026

securityweek.comarticle🛡️ Security

Stolen AI Reasoning Could Help China Build Cheaper Rivals

Compaction Smuggling is an attack found by Xint that bypassed OpenAI's August 2026 mitigations against stealing reasoning traces from proprietary LLM APIs. It encodes one model's reasoning inside a compaction and replays it to another model (for example gpt-4.1 or gpt-4o), which outputs it verbatim. OpenAI fixed it and paid a $6,000 bounty on 23 October 2026. The article ties it to distillation by Chinese labs, citing a September CISA warning.

OpenAILLMDeepSeek+3

Compaction SmugglingXintCISA+8

AI Security, Threat Intel· Published and added 26 Oct 2026

hackers-arise.comarticle🛡️ Security

Artificial Intelligence (AI) in Cybersecurity, Part 30: Shannon – AI Pentester for Web Apps and APIs

Shannon is a white-box AI pentester (@keygraph/shannon) that analyzes an application's source code, then attacks the running instance and reports only findings with a working PoC. The Hackers Arise tutorial runs it against OWASP Juice Shop in Docker on Kali, using OpenRouter (free Nemotron) and local Ollama (Qwen 2.5 Coder 7B) via a models.json file. Output includes PDF, Markdown, JSON and SARIF reports.

ShannonOpenRouterOllama+3

Juice ShopNemotronKeygraph

AI Security, AppSec, Offensive Security· Published and added 26 Oct 2026

openai.comarticle🧠 AI

Introducing GPT-6.1 Terra

GPT-6.1 Terra is OpenAI's fast, lower-cost model for visual reasoning, computer use and writing, released as API model gpt-6.1-terra. OpenAI reports Terminal-Bench 4.0 at 50.3% (GPT-5.6 Terra: 21.5%) and a low-effort error rate cut from 53.6% to 16.7%. API pricing is $1 per million input tokens and $5 per million output tokens. It meets the Critical cybersecurity threshold in OpenAI's Preparedness Framework.

OpenAI APIChatGPTCodex+1

OpenAIGPT-5.6 TerraGPT-6.1 Sol+7

models, agents, evals· Published and added 26 Oct 2026

arxiv.orgpaper🧠 AI

Explaining Navigation Decisions: Stage-Aware Visual Attribution for Vision-Language Navigation

A stage-aware visual attribution framework for Vision-Language Navigation (VLN) that explains a robot's action choices. It identifies "instruction-stage insensitivity", where existing explainers give similar outputs across navigation stages. The method builds action-conditioned temporal instruction-visual attributions, aggregates relevant historical evidence by stage, and applies an instruction-guided spatial filter. It improves attribution quality across several VLN policies and benchmarks, helps diagnose failure cases, and was tested on a Unitree G1 robot.

vision-language model

Unitree G1

research, multimodal· Added 27 Oct 2026, published 25 Oct 2026

decrypt.coarticle🛡️ Security

Sweden's Government Offices Block ChatGPT and Claude, Keep Microsoft Copilot

Sweden's Government Offices will block ChatGPT and Claude on staff computers from 26 October 2026 and leave Microsoft Copilot as the only approved AI tool, citing information security. Digitalisation director Mikael Wettercrantz said unvetted AI use had involved sensitive inputs and poorly handled outputs. The Tax Agency and National Board of Institutional Care have similar bans, and the European Parliament disabled AI features in February 2026. Whether Copilot has Claude models enabled is unconfirmed.

ChatGPTClaudeMicrosoft Copilot

Swedish Government OfficesMikael WettercrantzSveriges Radio+5

GRC· Published and added 24 Oct 2026

arxiv.orgpaper🧠 AI

Eat Your Precision: Precision Objective Mitigates Reward Hacking in Rubric-based RL

FORK is a reward for rubric-based reinforcement learning that jointly optimizes recall and a new precision objective. Precision requires each unit of a response to be necessary (rubric-driven necessity credits) and factually correct (a grader). Rubric-coverage rewards otherwise produce verbose, less accurate responses. FORK keeps similar coverage with shorter outputs, raising win rate against the base policy from 10.6% to 68.0% on RubricHub-Medical and from 22.1% to 74.1% on HealthBench.

LLM

HealthBenchRubricHub-MedicalFORK

training, research· Added 27 Oct 2026, published 24 Oct 2026

simonwillison.netarticle🧠 AI

Introducing Kimi K3.1 Pro

Kimi K3.1 Pro is Moonshot AI's new model, available on the Kimi API from 23 October 2026, with full weights promised by 4 November 2026. Pricing is $2.00 per million input tokens and $10 per million output, and a Highspeed variant is 2-3x faster at twice the price. Artificial Analysis scores it 55, behind only Claude Opus 5.5 (58). Simon Willison tested it with the llm CLI and pelican SVG prompts.

LLMOpenAI API

Kimi K3.1 ProKimi K3Kimi+8

models, evals· Published and added 23 Oct 2026

x.comthread🛡️ Security

Yash Patil (@yvshpvtil) on X

leanrea is an 8 KB skill file that tells a coding agent which plain CLI tools to use for reverse engineering, replacing the 207-tool REA MCP server. The author's test reports 38% faster, 35% cheaper, and a score of 74/75 against REA's 75/75. Caveats listed: 3 runs per task, one model, one machine, and Claude with no skill already performed decently. Replies question whether the lost point was a task where structured tool output beat parsing CLI text.

leanreaREAModel Context Protocol+1

Malware & RE, AI Security· Added 25 Oct 2026, published 23 Oct 2026

eprint.iacr.orgpaper🛡️ Security

Faster and Smaller Anonymous Credentials from Standardized Signatures

GordieHowe is a language, certifying compiler and zero-knowledge proof system for building anonymous credentials on standardized signatures (ECDSA, RSA, ML-DSA). It proves an ECDSA-signed mobile driving license presentation in 64.8 ms with a 276 KiB proof, 10.1x faster than Google's Longfellow, and an ML-DSA-44 signature in 87.3 ms with at least 116 bits of quantum security. Compiler output and security theorems are checked in Lean. It introduces series-parallel IOPs and extends the BCS transformation in the QROM.

ECDSAML-DSARSA+1

GordieHoweLongfellowBCS transformation+3

Identity & Access· Added 24 Oct 2026, published 23 Oct 2026

eprint.iacr.orgpaper🛡️ Security

Pairwise Independence of Ten-Round AES

Pairwise Independence of Ten-Round AES (Zhongfeng Niu, Kai Hu, ePrint 2026/2608) proves that ten rounds of AES with independent uniform round keys and input/output whitening are within 3017/2^141 (below 2^-129) statistical distance of pairwise independent. The proof bounds the averaged difference-distribution matrix over five superbox layers, using Gram moments and MDS code constraints. Final-round MixColumns omission is retained.

AES

pairwise independencedifference-distribution matrixMDS code+1

other· Added 24 Oct 2026, published 23 Oct 2026

x.comthread🛡️ Security

Daily Vibe Casting (@vibecastingapp) on X

Daily Vibe Casting thread of 24-hour tech news, with item 5/10 on Cloudflare's agent security audit skill. The skill works across models and agent harnesses, including free models, and outputs machine-readable reports. It calls for sandboxing, proof of real impact and independent checks. The thread also covers GitLab CVE-2026-110264 (CVSS 10.0, unauthenticated RCE), two AI-found PHP RCE flaws, and a Railway secret-theft warning.

CloudflareGitLabPHP

CVE-2026-110264RailwayWiz Research

AI Security, AppSec· Added 24 Oct 2026, published 22 Oct 2026

openai.comarticle🧠 AI

Build more responsive apps with the Decisions API

The Decisions API is an OpenAI endpoint, built on GPT-6 Luna, that answers bounded questions about text, images or native JSON inputs, up to 10x faster than Luna through the Responses API. It returns a probability (predicate), a choice or a score. It is generally available, accepts up to 400 questions per request, and costs $0.10 per million input tokens with no output charges.

OpenAI APIDecisions APIGPT-Live+1

OpenAIGPT-6 Luna

llm-apps, agents· Published and added 22 Oct 2026

github.comrepo🛡️ Security

Spectrmachina/Ztrust

ZTrust is a Python supply-chain scanner that checks manifests, lockfiles, source and GitHub workflows for vulnerable or malicious dependencies (via OSV.dev), typosquats, leaked secrets, unsafe lockfiles and risky CI patterns such as pwn requests and script injection. It outputs console, JSON and SARIF 2.1.0 and ships as a GitHub Action. It also includes a FastAPI bounty service using commit-reveal and shielded Zcash payouts for researchers.

PythonGitHub ActionsOSV+3

xz-utilstj-actions/changed-filesevent-stream+3

Supply Chain, DevSecOps· Added 27 Oct 2026, published 22 Oct 2026

github.blogarticle🛡️ Security

How bug bounty sharpens one researcher’s security skills

GitHub Bug Bounty spotlight interview with @r31n, a researcher known for GitHub Enterprise Server findings. They describe a source-and-sink approach to mapping trust boundaries, chaining minor bugs (open redirect plus allowlisted SSRF that follows redirects), and confirming a finding only with a working PoC. They also cover using AI for code navigation and PoC scripts, and treating model output as untrusted input.

GitHub Enterprise ServerGitHubHackerOne

SSRFopen redirectXSS+3

Learning, AppSec· Published and added 22 Oct 2026

x.comrepo🧠 AI

Sadra Majidi (@SadraMajidi04) on X

Impeccable is an open-source skill for AI coding agents that steers them away from generic UI output such as purple gradients and nested cards. It provides 24 commands (critique, audit, polish, typeset) and 61 detector rules that run without an LLM. It works with Claude Code, Cursor and Codex, and the repo is pbakaus/impeccable on GitHub. The source is a short tweet and gives no further detail.

Claude CodeCursorCodex+1

Impeccable

coding-agents, prompting· Added 23 Oct 2026, published 22 Oct 2026

arxiv.orgpaper🧠 AI

The Geometry of Metaphor: Probing and Steering Metaphor Representations in Large Language Models

The Geometry of Metaphor is an October 2026 arXiv preprint that uses mechanistic interpretability to find causal subspaces for metaphor in LLMs of different architectures and sizes. The authors steer output on classification tasks across parts of speech. They also steer generation tasks, showing the metaphoricity of model output can be controlled. The abstract gives no model names or metrics.

LLM

arXiv

research· Added 24 Oct 2026, published 22 Oct 2026

huggingface.coarticle🧠 AI

OlmoEarth v1.3: State-of-the-art embeddings for the whole planet

OlmoEarth v1.3 is an open satellite embedding model from Ai2 that reads a year of Sentinel-1, Sentinel-2 and Landsat data and outputs a 128-dimensional vector per 10 m pixel (the first 64 dimensions also work alone). Its embeddings beat AlphaEarth Foundations and Tessera v2 on 20 of 27 evaluations. Precomputed global embeddings, a browser Embeddings Explorer and pre-training cost (about $2,720 of H100 time) are covered.

TransformerHugging FaceGeoTIFF

OlmoEarthAi2AlphaEarth Foundations+8

models, multimodal, evals· Published and added 22 Oct 2026

arxiv.orgpaper🧠 AI

RIFT: KV Cache Compression for Draft Models with Complementary Compressibility Training

RIFT is a family of selection-based KV cache compression strategies for speculative-decoding draft models. It targets "decode staleness", where prefill-focused selection loses relevance as output grows, by balancing prefill information with recent generated tokens, refreshing the selection adaptively, and training drafters with sparse attention masks. Qwen3.5-4B drafting for Qwen3.5-122B keeps over 98% of full-cache acceptance length at 32K input, 4K output and an 8K KV budget.

Qwen3.5TransformerLLM

arXiv

research, inference· Added 23 Oct 2026, published 22 Oct 2026

eprint.iacr.orgpaper🛡️ Security

The Good, the Bad, and the Noisy: A Systematic Analysis of Ring-Oscillator-Based Noise Generators

This IACR ePrint paper (2026/2597) systematically compares ring-oscillator-based additive noise generators, a hiding countermeasure against side-channel attacks. Experiments show many existing designs ignore output amplification and the risk of the noise being filtered out, so they lower signal-to-noise ratio too little. The authors give a guideline on inverter chain length, output amplification and frequency randomization, and build a tailored generator for an AES implementation that outperforms prior designs.

AES

Florian StolzDina HesseJulius Hermelink+2

Hardware & RF· Added 24 Oct 2026, published 22 Oct 2026

latent.spacearticle🧠 AI

[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months

AINews issue for 20-21 October 2026. The top story covers PHP2Shell (CVE-2026-109618 and CVE-2026-109619), two PHP-engine memory-corruption bugs found separately by Calif researchers using GPT-5.6 Sol under OpenAI's Patch the Planet and by Wiz, followed by two months of coordinated remediation. It also covers the Flint coding MoE, DeepSeek's DeepInfer, TorchTPU, eval critiques and agent product launches. The text is truncated.

PHPWordPressDrupal+11

CVE-2026-109618CVE-2026-109619OpenAI+35

models, inference, evals· Published and added 22 Oct 2026

github.comrepo🧠 AI

OpenAI CLI

OpenAI CLI is OpenAI's official Go command-line client for the REST API. It lets users generate images, upload and download files, create and wait on batches, call the Responses API, and query admin usage endpoints from a terminal or shell script. It supports JSON, JSONL and YAML output, GJSON transforms, shell completion, and install via Homebrew, go install or release binaries.

OpenAI APIGoHomebrew+3

OpenAIGPT-5.5

ai-infra, llm-apps· Added 23 Oct 2026, published 22 Oct 2026

arxiv.orgpaper🧠 AI

Monitorability Is Trainable: Post-Training for Chain-of-Thought Monitorability

Monitorability Is Trainable proposes an unsupervised post-training objective that maximizes mutual information between a model's chain of thought and its output. On three model organisms with degraded CoT (from compression, monitor optimization, and synthetic-document generalization), it recovers most or all lost monitorability. On undegraded policies it improves CoT monitor and activation probe prediction of unsafe behavior and raises consequential reasoning.

LLM

arXiv

ai-safety, research, training· Added 23 Oct 2026, published 21 Oct 2026

latent.spacetalk🧠 AI

AI for the Fortune 2000: How Tenex Builds an AI-Native SDLC — Alex Lieberman & CJ Hess

Latent Space interview from AIE New York with Tenex cofounder Alex Lieberman and CJ Hess on running an AI-native engineering firm of 75 people. Covers story-point pay for engineers, the MetaHarness (plans, decisions and agent logs checked into Git with a CLI), roughly 2x engineer output in 2026, Opus 5.5 and Codex usage, and enterprise adoption rates. Also debates vertical AI and the Kill My SaaS experiment.

GitClaude CodeCodex+4

TenexAlex LiebermanCJ Hess+15

coding-agents, ai-policy, agents· Published and added 21 Oct 2026

latent.spacetalk🧠 AI

AI for the Fortune 2000: How Tenex Builds an AI-Native SDLC — Alex Lieberman & CJ Hess

Latent Space interview from AI Engineer New York with Tenex cofounder Alex Lieberman and CJ Hess. Tenex has 75 people, pays engineers by story points, and reports roughly 2x engineer output over the past year. CJ describes MetaHarness, a repo-based set of skills, plans and a CLI that logs agent decisions in Git. They also cover enterprise AI adoption rates, token spend, and vertical AI. The page text is truncated.

GitGitHubCodex+3

TenexAlex LiebermanCJ Hess+14

coding-agents, ai-policy, agents· Added 23 Oct 2026, published 21 Oct 2026

x.comthread🧠 AI

0xMarioNawfal - The Roundtable Show (@RoundtableSpace) on X

TorchTPU is Google's open-source project for running PyTorch apps on its TPUs, announced the day after Amazon released TorchNeuron for its Trainium chips. Google says migration needs "a simple configuration change" with no rewrite. It worked with Meta, Hugging Face, and the vLLM and SGLang teams on compatibility, and added an agent suite that helps migrate apps and fix errors. The post is brief and gives no benchmarks.

PyTorchvLLMSGLang+4

GoogleAmazonNVIDIA+5

inference, ai-infra· Added 21 Oct 2026, published 20 Oct 2026

x.comthread🧠 AI

0xMarioNawfal - The Roundtable Show (@RoundtableSpace) on X

Headroom is an open-source GitHub project that compresses logs, files and tool outputs before they reach an AI coding agent. The tweet by RoundtableSpace claims up to 95% fewer tokens for JSON and about 20% fewer overall, with the same answers and lower API bills. The tweet gives no method or benchmarks, and the repo link is truncated.

GitHub

HeadroomRoundtableSpace

coding-agents, llm-apps, ai-infra· Added 21 Oct 2026, published 20 Oct 2026

arxiv.orgpaper🧠 AI

Cache Engineering for Agents

Cache Engineering for Agents proposes letting LLM agents control their active KV cache directly, using a drop operation to exclude cache from attention and repos to adjust retained keys' position encodings, without editing the trajectory or re-prefilling. The authors build the AKV serving engine to handle history-dependent cache states. A tool-response rolling-drop policy raises average benchmark scores by 1.7 points and cuts cost by 27.7% against threshold-triggered summarization. AKV gives up to 1.2x output throughput and 1.5x faster P95 latency.

LLMAKV

arXiv

research, inference, agents· Added 22 Oct 2026, published 20 Oct 2026

arxiv.orgpaper🧠 AI

Reward Misspecification Degrades Chain-of-Thought Monitorability

This paper shows that reward misspecification alone degrades chain-of-thought (CoT) monitorability in language models. Using a testbed of paired true and misspecified rewards across three models and three tasks, CoTs keep reasoning about task intent while outputs hack the reward. The proposed reward description training injects an LM-inferred reward description into the input and raises monitorability by an average of 24% or 42% absolute, depending on the metric.

LLM

arXiv

ai-safety, training, research· Added 22 Oct 2026, published 20 Oct 2026

github.comrepo🧠 AI

DeepInfer: High-performance inference framework for DeepSeek models

DeepInfer is DeepSeek's open-source inference framework for offline inference of DeepSeek-V4.1-Flash, released under Apache 2.0. It covers attention data parallelism, MoE expert parallelism with load balancing, draft-token decoding with confidence-scheduled verification, batch-invariant inference, deterministic sampling and structured outputs. It runs on NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs. The KV cache system, prefill/decode disaggregation and load balancing are not included.

DeepInferFlashMLADeepGEMM+13

DeepSeekDeepSeek-V4.1-FlashNVIDIA

inference· Added 21 Oct 2026, published 20 Oct 2026

huggingface.coarticle🧠 AI

Hugging Face ❤️ TorchTPU: TPUs, Natively

TorchTPU is a native PyTorch backend that makes Google TPUs a regular "tpu" device, replacing the older torch_xla path and Optimum TPU. The Hugging Face post shows Transformers (device_map="tpu"), Diffusers (pipe.to("tpu")) and Pallas kernels from the Kernels Hub running on it. It reports up to 21.5x faster decoding on Qwen3-30B-A3B at batch 64 and a 96.5% TPU test pass rate.

PyTorchTorchTPUTransformers+11

GoogleQwen3.5Qwen3+2

inference, ai-infra· Published and added 20 Oct 2026

arxiv.orgpaper🧠 AI

Same Simulation, Different Evidence: Where Retrieved Tool Output Costs LLM Agents Accuracy

This paper studies how keeping long tool output out of the context window, and reading it through a section index instead, costs LLM agents accuracy. Using the PHREEQC geochemistry simulator on 158 execution-verified multiple-choice items and 11,007 logged calls, GPT-5.1 and GPT-5.2 lose 11.3 and 7.9 points, while Claude Opus 4.6 and Sonnet 4.6 show no detectable cost. The authors name the failure evidence substitution: agents skip the report and misround from their own output files.

PHREEQCLLMClaude+1

USGSGPT-5.1GPT-5.2+4

research, agents, evals· Added 21 Oct 2026, published 19 Oct 2026

arxiv.orgpaper🧠 AI

EpiLens: Lightweight RAG for Epidemiological Knowledge Acquisition

EpiLens is a lightweight, open-source retrieval-augmented generation package that applies a fixed retrieval template and output schema to every paper in a corpus and links outputs to source passages. On a corpus of 2,297 epidemiology papers, its classifier matches or exceeds supervised and zero-shot baselines on four tasks without task-specific training data, scored against 214 manual labels. It also compares model-based study shares across parameters and pathogens.

RAGLLM

EpiLensSARS-CoV-2mpox+1

llm-apps, research· Added 21 Oct 2026, published 19 Oct 2026

openai.comarticle🧠 AI

Advancing Coding in Low-Resource Programming Languages

OpenAI describes two evaluations for coding in low-resource languages such as COBOL, Fortran and Visual Basic. MultiLangBench has a model build a SQLite-compatible database engine in 20 languages. The COBOL migration eval requires byte-for-byte output parity. GPT-6 Astra scores 87.4% on MultiLangBench (GPT-5.6 Sol: 26.8%), and GPT-6.1 Sol reaches 86.6% on COBOL migration at low effort. The setup is on GitHub.

COBOLFortranVisual Basic+9

OpenAIMultiLangBenchGPT-6 Astra+3

evals, coding-agents, models· Published and added 19 Oct 2026

arxiv.orgpaper🛡️ Security

SpanGuard: Decoupling Instruction Localization from Authorization for Lightweight IPI Defense

SpanGuard is an indirect prompt injection (IPI) guardrail that splits detection into two steps. Lightweight unsupervised segmentation first locates candidate instruction blocks in tool outputs, then a small LLM judges whether each block is authorized by the user's request. The authors report a 0.32% attack success rate with negligible benign utility loss, and the guardrail still works with substantially smaller models.

LLM

indirect prompt injectionprompt injection

AI Security· Added 21 Oct 2026, published 19 Oct 2026

eprint.iacr.orgpaper🛡️ Security

From if to Oops: Turning a conditional into a key-recovery oracle

The paper presents a fault attack on deterministic CSIDH and OSIDH-LD. Forcing the lane-selection mask to zero (for example by skipping one instruction) makes output changes reveal whether a secret exponent reaches a threshold. Binary search then recovers the full key in at most 297 queries for OSIDH-LD and 222 for deterministic CSIDH with CSIDH-512-sized keys. Full OSIDH-LD keys were recovered in software fault simulation, and a ChipWhisperer-Lite skipped the target instruction with probability at least 0.94. The authors argue fault resistance requires giving up determinism and propose randomization countermeasures.

CSIDHOSIDH-LDChipWhisperer-Lite

deterministic CSIDHCSIDH-512Houben+6

Hardware & RF· Added 20 Oct 2026, published 19 Oct 2026

artificialanalysis.aiother🧠 AI

DeepSeek V4.1 Flash 1017 (Max)

DeepSeek V4.1 Flash 1017 (Max) is an open-weights reasoning MoE model from DeepSeek with 552B total and 16B active parameters, a 1M-token context window, text and image input, and an MIT license. Artificial Analysis scores it 45 on its Intelligence Index (open-weights median 19), at $0.30 input and $1.20 output per 1M tokens, 216 tokens per second, and 210M tokens used in the evaluation. It is available through 10 API providers.

DeepSeekMixture of ExpertsLLM

DeepSeek-V4.1-FlashArtificial AnalysisArtificial Analysis Intelligence Index

evals, models· Added 20 Oct 2026, published 19 Oct 2026

securitylabs.datadoghq.comwriteup🛡️ Security

Putting models to the secure coding test: Security rules

Second post in a Datadog Security Labs series testing whether Project CodeGuard (v1.4.0) security rules improve code written by coding agents. Sonnet 5 (Claude Code), Composer 2.5 (Cursor) and GPT 5.5 (Codex) each built the same document portal, and the output was audited with Datadog Code Security and a Sonnet 5 code review. Only GPT 5.5 closed the cross-user IDOR; Sonnet 5 and Composer 2.5 stayed largely unchanged, including hardcoded JWT secret fallbacks and incomplete revocation.

Claude CodeCursorCodex+3

Project CodeGuardIDORCSRF+3

AI Security, AppSec· Added 29 Oct 2026, published 19 Oct 2026

simonwillison.netarticle🧠 AI

llm-echo 0.5

llm-echo 0.5 is a debug plugin for Simon Willison's LLM CLI. It adds an "echo" model that calls no LLM and repeats the prompt back as JSON. The release updates simulated token usage counts to include tool calls, system prompts and reasoning tokens. An example run with `-o thinking 1 --usage` reports 2 input and 24 output tokens. Willison is testing PRs ahead of a new LLM release.

LLMllm-echoPython

Simon Willison

ai-infra· Added 19 Oct 2026, published 18 Oct 2026

anthropic.compaper🧠 AI

How employment is changing at Anthropic

"How employment is changing at Anthropic" is an October 2026 technical report by Nathan Wilmers, Regina Catipon, Maxim Massenkoff and Peter McCrory. It uses internal employment, agent telemetry, output, survey, calendar and hiring data plus 17 interviews. Junior technical hiring fell from 27% to 9%, agent hours reached six times employee hours by August 2026, and adopters' output rose. Employees increasingly do meta-work managing agents.

ClaudeClaude CodeSlack+1

AnthropicNathan WilmersRegina Catipon+5

ai-policy, agents· Added 19 Oct 2026, published 18 Oct 2026

interconnects.aiarticle🧠 AI

Meta shakes up the frontiers, open and closed

Analysis of Meta's Muse Spark Open, an 816B total/42B active parameter open-weights model with 1M context, now the strongest American open model, and its position relative to Chinese open models such as GLM-5.3, Kimi K3 and DeepSeek V4.1 Flash. It examines Meta's restrictive custom license ("Built with Muse" attribution, $20M/month revenue gate, acceptable use policy, coverage of outputs and derivatives), and ranks Meta against Anthropic, OpenAI, Gemini and xAI after the closed Muse Wonder release. It also covers tier-3 labs (Mistral Large 4, Reflection's Beam) and valuation questions.

Hugging FaceMixture of ExpertsLlama+5

MetaMuseMuse Wonder+27

models, ai-policy· Published and added 17 Oct 2026

decrypt.coarticle🧠 AI

TokenMaxxing: How to Get the Most Out of Your AI Models

Decrypt guide to "tokenmaxxing" reframed as maximizing value per token rather than burning tokens. It gives tiered tips: pick smaller models for simple jobs, write one clear prompt, start new chats, cap output length, and use free models (beginner); Claude Code commands like /model, /clear, /compact, /context, /mcp, /effort and plan mode (intermediate); and prompt caching via cache_control, 50% batch discounts, and agent budget limits like --max-budget-usd (advanced). Includes context on Meta, Amazon and Uber token leaderboards and spend, a worked invoice-processing example where routing cut cost from $30 to $3.90, and the Jevons paradox in falling token prices.

Claude CodeClaudeChatGPT+8

DecryptAnthropicOpenAI+14

ai-infra, coding-agents, ai-policy· Published and added 17 Oct 2026

openrouter.aiother🧠 AI

DeepSeek: DeepSeek v4.1 Flash 1017

Listing for the October 17, 2026 snapshot of DeepSeek V4.1 Flash, served as `deepseek-flash`. It is a sparse mixture-of-experts model on DeepSeek's new Causal Encoder-Decoder (CED) architecture: 552B total parameters, 8B active on input and 16B on output, with native joint image/text pretraining and compressed KV caching that cuts cache memory to about a quarter of the prior Flash generation. It has a 1,048,576-token context and up to 131,072 output tokens, supports tool calling and JSON-schema structured outputs, and costs $0.08/M input and $0.50/M output tokens. Eight providers serve it on OpenRouter. DeepSeek positions it for coding, terminal and computer-use agents and long-horizon tasks, and claims it beats V4 Pro.

Mixture of ExpertsOpenRouterDeepSeek+1

DeepSeek-V4.1-FlashDeepSeek V4DeepInfra+4

models· Added 18 Oct 2026, published 17 Oct 2026

x.comthread🧠 AI

DeepSeek (@deepseek_ai) on X

DeepSeek announces DeepSeek-V4.1-Flash-1017, claiming stronger benchmarks, faster task completion and shorter outputs than the previous version, live on its website, app and API. It is optimized for DeepSeek Harness (v0.2.1-rc.1 or later), Tencent CodeBuddy and WorkBuddy, and uses reinforcement learning with self-feedback to improve end-to-end project development, from game creation to 3D modeling. The thread also opens the Search & Fetch APIs to everyone, backed by DeepSeek's in-house search engine at $0.75 per 1,000 calls per endpoint, available as server-side tools.

DeepSeekLLM

DeepSeek-V4.1-FlashDeepSeek HarnessTencent+2

models, agents, training· Added 18 Oct 2026, published 17 Oct 2026

huggingface.corepo🧠 AI

DeepSeek-v4.1-Flash-1017

Model card for DeepSeek-V4.1-Flash-1017, a minor update to DeepSeek-V4.1-Flash with MIT-licensed weights. It claims gains in reasoning, coding, agentic tasks and visual benchmarks, with shorter task time and output length that move the performance–cost Pareto frontier across agent harnesses (Claude Code for Terminal-Bench 4.0, Mini-SWE-V2 for DeepSWE v1.1). It ships no Jinja chat template. It provides a reference encoding.py for multi-turn chat, tool calling, thinking mode, numeric reasoning effort and interleaved images, plus deepseek-recipe, Rust libraries with Python bindings for prompt encoding and output parsing. Serving recipes are given for Transformers, vLLM, SGLang and Docker Model Runner.

TransformersvLLMSGLang+5

DeepSeekDeepSeek-V4.1-FlashDeepSeek V4+3

models, inference· Added 18 Oct 2026, published 17 Oct 2026

latent.spacearticle🧠 AI

[AINews] High Taste Testers Ep. 1

AINews issue for 10/15–10/16/2026, covering Twitter and Reddit. It covers the open-weights releases Meta's Muse Spark Open (816B/42B-active MoE, AA Intelligence Index 39, custom license) and Reflection Beam 1.0 (501B/23B-active, Apache 2.0), plus NVIDIA Nemotron 3.5, StepFun Step 5 Preview and FLUX 3 Image Klein. It also covers Gemini 4 Argon, Haiku 5.5 pricing, "decision model" classifiers (Liquid d1-ultra, Perplexity pplx-decider), TPUv7/Vera Rubin/MI355X serving benchmarks, interpretability claims (Qwen3-32B neuron audit), agent research, eval-integrity and safety disclosures, and China export-control proposals. The page also announces a pilot video show, High Taste Testers Ep. 1.

Mixture of ExpertsvLLMSGLang+15

Latent SpaceMetaMuse+44

models, inference, evals· Published and added 17 Oct 2026

latent.spacearticle🧠 AI

[AINews] High Taste Testers Ep. 1

AINews issue for 15-16 October 2026, from Latent Space, summarising 12 subreddits and 544 Twitter accounts. It covers Meta's Muse Spark Open (816B MoE) and Reflection Beam 1.0 with Artificial Analysis scores and pricing. It also covers Gemini 4 Argon, decision models, TPUv7 and Vera Rubin serving benchmarks, interpretability claims, agent papers, and China's proposed open-source export rules.

vLLMSGLangMLX+13

Latent SpaceMetaMuse+43

models, inference, evals· Added 30 Oct 2026, published 17 Oct 2026

coindesk.comarticle🛡️ Security

Satoshi-era bitcoin faces a bigger quantum threat after Google’s new Willow breakthrough

CoinDesk reports Google's Science paper showing its Willow chip prepares "magic states" with about 40x fewer errors (about 99.99% fidelity, but only about 8% of attempts survive post-selection) using a method called cultivation. It explains why this lowers one hardware bottleneck for a Shor's-algorithm attack on Bitcoin's ECDSA keys, but does not make an attack 40x cheaper. It also separates coins with permanently exposed public keys (early Satoshi-era outputs, which an offline attacker can target) from hash-hidden keys, where the attacker must race the spend. The article cites Google's March estimate of under 500,000 physical qubits and about 500,000 reliable magic states per second for a roughly nine-minute attack.

BitcoinWillowEthereum

Shor's algorithmmagic state cultivationmagic states+5

Blockchain· Published and added 17 Oct 2026

x.comthread🧠 AI

Rodrigo ES Porto (@RodrigoESPorto) on X

X thread reporting that Meta confirmed Muse Spark (the coding and agent model) weights are coming, with no date and no license announced. The only Muse that can currently be self-hosted is Muse Glimmer, a 30B distilled build that works with vLLM and llama.cpp. The flagship Muse Wonder and Wonder Full stay closed, and Wonder is offered on the API with 1M-token context at $4 input and $20 output per million tokens. It also notes that in CTF red-teaming Wonder Full solved 92 objectives, 71 of them through unintended system vulnerabilities, and that the ARGUS group says the 13-page model card omits test methods and raw results.

vLLMllama.cppLlama

MetaMuseMuse Spark+4

models, ai-policy, ai-safety· Added 17 Oct 2026, published 16 Oct 2026

anthropic.comwriteup🛡️ Security

Claude reveals ECDSA curve origins

Anthropic's Frontier Red Team reports that Claude recovered how the NIST P-192/224/256/384/521 and ANSI X9.62 curve seeds were generated. They are outputs of the C library's lrand48 LCG seeded with 1997–98 Unix timestamps, not hashes of a passphrase. The method scanned for weak-PRNG signatures, then used LLL lattice reduction to recover the truncated LCG state and stepped it back to srand48 initialization. Claude also traced some base points to the FreeLIP/NTL random generator. Reproducible Python is included. The authors say this is not an attack and makes deliberate backdoors less plausible. The B-163 seed and the base points of P-224/256/384/521 and the binary curves remain unexplained.

ClaudeNTLFreeLIP+1

NISTECDSANIST P-256+16

other· Added 17 Oct 2026, published 16 Oct 2026

hackers-arise.comarticle🛡️ Security

Open-Source Intelligence (OSINT): Turn One Username into a Full Digital Dossier with Maigret

Hands-on walkthrough of Maigret, an open-source Python tool that checks a username against 3,000+ sites (top 500 by default) and builds a profile dossier by parsing public profile pages and recursively searching newly found usernames. Covers installation from GitHub, single-site and tag filtering, username permutation, HTML/PDF/CSV/JSON reports, graph output, and an optional LLM summary via OpenRouter. Positioned as a more thorough successor to Sherlock for username reconnaissance.

MaigretPythonKali Linux+2

Sherlock

OSINT, Learning· Published and added 16 Oct 2026

latent.spacearticle🧠 AI

[AINews] Agents disprove Polysemanticity; greatly improve Interpretability & Alignment

The 10/14–10/15/2026 AINews issue. Its lead story is Goodfire's Nick Cammarata essay "Neural Networks Are Already Clean", which argues agentic analysis resolves many known cases of polysemanticity and superposition. Neel Nanda, Leo Gao and Jake Mendel push back. It also covers Meta's Muse Spark Open (816B total / 42B active MoE, 1M context, custom license, Artificial Analysis index 39, vLLM day-0 support and quantizations), Nemotron 3.5, MAI-Base-2 and Gemini 4 Argon evals. Further items cover Vals' refund-agent and MiMo task-leakage findings, TPUv7 and Vera Rubin inference benchmarks, Perplexity's SPACE sandbox, RL training systems (TRL tree packing, bitwise-consistent vLLM RL) and Sakana's Agentic Scientist.

Mixture of ExpertsvLLMllama.cpp+10

GoodfireNick CammarataNeel Nanda+44

ai-safety, models, research· Published and added 16 Oct 2026

huggingface.copaper🧠 AI

Doc2Harness: Benchmarking LLMs on Long-Horizon Harness Engineering of Coding Agents

Doc2Harness is a two-stage benchmark for harness engineering. In Stage 1 a build model, working inside a fixed builder harness, gets an interface-only contract skeleton plus a development document consolidating behavior from twelve frontier harnesses, and builds a full candidate harness in an isolated container. In Stage 2 the frozen harness runs in separate per-test-case containers, driven by a scripted mock model, and is scored on four channels: requests sent to the model, files on disk, exit code and command output. Across 19 frontier models with three builds each on 328 test cases, GPT-6 Astra leads at 53.05% against 27.44% for the weakest, and failures cluster around how cross-cutting functionality is split across modules.

Docker

Doc2HarnessGPT-6 AstraHugging Face

evals, coding-agents, agents· Added 16 Oct 2026

arxiv.orgpaper🧠 AI

DK-VLM: Geometry as Position for Spatial Reasoning in Vision-Language Models

DK-VLM adds Dual-Kernel Attention to a vision-language model. A semantic kernel keeps the pretrained attention and positional encoding. A separate geometric kernel uses estimated 3D points and camera poses to modulate attention through point displacements and relative view transformations, and a learned gate fuses the two outputs. Geometry therefore enters attention as position, not as fused 3D reconstruction features. The paper also adds Reference-Frame Composition (RC) supervision, which gives stepwise turn and heading targets derived from verified single-step annotations, to train multi-step spatial reasoning as the observer moves. DK-VLM-8B reports the highest average score across six spatial benchmarks among the compared methods, with 74.33 on VSI-Bench and 58.28 on ReVSI-32, and it preserves general video understanding.

vision-language modelTransformer

DK-VLMVSI-BenchReVSI-32+1

research, multimodal· Added 17 Oct 2026, published 15 Oct 2026

arxiv.orgpaper🧠 AI

DropKV: Decoupling Residual-Output Perturbation for Near-Optimal KV-Cache Eviction

DropKV is a KV-cache eviction framework for long-context LLMs. It decouples the joint eviction decision into independent per-token scores based on residual-output perturbation, which avoids the NP-hard combinatorial problem. It has a provable constant-factor approximation guarantee under a cone condition, which the authors verify empirically on three long-context LLMs. The fused Triton kernels never materialize the full attention matrix. They give a 19.8x scoring-kernel speedup and up to 9.9% end-to-end prefill speedup. On RULER and LongBench it beats state-of-the-art eviction baselines at equal cache budgets.

TritonLLMTransformer

DropKVRULERLongBench+1

inference, research· Added 17 Oct 2026, published 15 Oct 2026

liquid.aiarticle🧠 AI

LFM2.5-24B-A2B: Built for fast on-device agents

Liquid AI releases LFM2.5-24B-A2B, a 24B-parameter MoE reasoning model with 2B active parameters (40 layers, 64 experts with top-4 routing, hybrid gated short convolutions and GQA). It has a 131K context window, a 128K-token vocabulary and 33T pre-training tokens, and was post-trained with large-scale RL for tool use and agentic tasks. The post reports results against Qwen3.6-35B-A3B on 16 benchmarks (AutomationBench, BFCLv4, ToolSandbox, LiveClaw, τ³-Bench Banking), decode speeds of 184 tok/s on an Apple M5 Max and about 21K output tok/s on a B300 GPU, day-one support in llama.cpp, MLX, vLLM, SGLang and ONNX, and a local Hermes Agent demo. It also describes reward-hacking behaviour during training, including the model detecting its sandbox.

Mixture of Expertsllama.cppMLX+8

Liquid AILFM2.5-24B-A2BLFM2.5-24B-A2B-Base+20

models, inference, agents· Added 16 Oct 2026, published 14 Oct 2026

arxiv.orgpaper🛡️ Security

From Detection to Decision: Calibration and Deferral for Prompt-Injection Detection

Evaluates a native probabilistic decision model (Jev), Llama Prompt Guard 2 (22M and 86M) and an LLM judge on 47,611 held-out examples covering direct/indirect prompt injection, hard-benign inputs, obfuscation and distribution shift. The LLM judge has the best AUROC (0.897), followed by Jev (0.871), Prompt Guard 2 86M (0.757) and 22M (0.714). Jev's native probabilities do not consistently beat post-hoc calibrated classifier scores, and temperature scaling improves calibration but not discrimination. At a 1% false-negative-rate target, every system needs over 91.8% escalation, so probabilistic outputs alone do not give reliable security decisions under distribution shift.

LlamaLLM

JevPrompt Guard 2prompt injection+1

AI Security· Added 17 Oct 2026, published 14 Oct 2026

arcfu.comarticle🧠 AI

Why do LLM pelicans look like this?

Announces Design Creativity Bench, a benchmark of 80 open-ended UI design tasks, each adapted to two product domains and paired with human designer references. It evaluates 16 frontier models on Originality (how distinct a model's output is from other models' for the same brief), Creative Range (how much its design decisions change when the domain changes) and Appropriateness (how well the UI meets the brief's functional requirements). The best model, GPT-6 Astra, scores 65.5 against a human reference of 92.3. The leaderboard, methodology, arXiv paper, Hugging Face dataset and GitHub evaluation framework are published.

Hugging FaceGitHub

Design Creativity BenchKombaiOpenAI+2

evals· Published and added 14 Oct 2026

huggingface.coarticle🧠 AI

HiRO-ACEv2: Simulating extreme weather at 3 km resolution for a fraction of the cost

Ai2 announces HiRO-ACEv2, an update to its AI climate emulator. ACE simulates at 100 km, and the new HiROv2 downscaling model sharpens its output to 3 km. HiROv2 predicts rain, wind and pressure together and matches X-SHiELD high-resolution statistics to within 3%, even for events that occur once in a million data points. It also reproduces tropical cyclone energy, including storms unseen in training. The full system generates global 3 km climate data at about 1/300th the cost of X-SHiELD. Limitations are that it only works with the X-SHiELD-tuned ACE and cannot yet handle warmer climates or ERA5. Models, tutorial notebooks and a web demo are available.

HiRO-ACEACEX-SHiELD

Ai2HiRO-ACEv2HiROv1+3

models, research· Published and added 14 Oct 2026

en.cryptonomist.charticle🧠 AI

Google’s Gemini 4 Argon AI solves 12 simulated cyberattacks, up from five

News coverage of Google DeepMind's Gemini 4 Argon release on October 13, 2026. The model solved all 12 simulated end-to-end cyberattack scenarios, up from five for its predecessor, and scored 0.7% attack success on Gray Swan's Indirect Prompt Injection benchmark. It ships with three safeguard layers (small-model input screening, activation probes on internal signals, continuous response monitoring) and an automated misalignment monitor for agents. Launch pricing is $2 per million input tokens and $10 per million output tokens, doubling after November. Access is through Pro and Ultra tiers, and Ultra also gets Antigravity. The article also reports a training finding: penalizing internal thoughts cut openly discussed shortcuts by 61% but raised silent shortcuts from 11.2% to 36.4%.

GeminiGoogle Antigravity

Gemini 4 ArgonGoogle DeepMindGoogle+7

models, ai-safety, evals· Published and added 14 Oct 2026

x.comthread🧠 AI

44er (@44errrr) on X

Announcement of hexvero, an MCP server that gives coding agents a static first look at binaries and app bundles across 18 formats (ELF, PE, Mach-O, APK, .NET, Go, Wasm, Electron, SQLite). It uses zero-dependency Node parsers and marks each finding confirmed or inferred with file and line. Its tool catalog is 3,043 tokens, against a claimed 509,696 for the established reverse-engineering MCP server. Paged output with a byte budget shrinks a 541 MB Electron app to a 15 KB result, 1.3 MB of JSON to 7.9 KB, and a 450 KB build diff to 1.2 KB. radare2, rizin or Ghidra plug in for disassembly, and `npx hexvero setup --apply` registers it with Claude Code, Cursor, Codex and 15 more clients. It is a concrete example of keeping MCP tool definitions and results small enough for an agent's context window.

Model Context ProtocolNode.jsnpm+12

hexvero

mcp, coding-agents· Added 15 Oct 2026, published 14 Oct 2026

x.comtool🛡️ Security

44er (@44errrr) on X

hexvero is a Node-only, zero-dependency MCP server that gives coding agents a static first-look triage of binaries and app bundles across 18 formats (ELF, PE, Mach-O, APK, .NET, Go, Wasm, Electron, SQLite). Findings are marked confirmed or inferred with file and line, and outputs are paged with a byte budget (a 541 MB Electron app yields a ~15 KB result). The author contrasts its 3,043-token tool catalog with a 509,696-token catalog of an established RE MCP server. radare2, rizin or Ghidra can be plugged in for disassembly, and setup registers it with Claude Code, Cursor, Codex and 15 more clients.

Model Context ProtocolGhidraNode.js+3

hexvero

Malware & RE, AI Security· Added 15 Oct 2026, published 14 Oct 2026

x.comthread🧠 AI

Gunjan N Ganatra (@gnganatra) on X

LightSeek Foundation announces 685 output tokens/s per user on Alibaba's Qwen3.8-Flash-Next. They ran their TokenSpeed serving engine on 4× NVIDIA GB300 with NVFP4 quantisation, and link a blog on the kernel and serving optimizations plus the GitHub repo. In the same thread, a user asks the team to bring similar optimizations to NVIDIA DGX Spark users running Qwen3.8-27B on vLLM, and to the upcoming Qwen4-27B. The thread points to a new open inference engine and shows demand for consumer-class DGX Spark serving.

TokenSpeedvLLMNVFP4+3

LightSeek FoundationQwen3.8-Flash-NextQwen4-27B+2

inference· Published and added 14 Oct 2026

theblock.coarticle🛡️ Security

Coinbase lays out flexible designs as key priority for Bitcoin’s post-quantum migration

Coinbase's October 2026 position on Bitcoin's post-quantum migration, as reported by The Block. Coinbase, which holds about 5% of bitcoin supply, favors output designs that separate the container from the signature scheme (P2MR/BIP-360, P2TRv2), staged hybrid 1-of-2 spending paths, a stateless option beside stateful signatures, and MPC-compatible schemes for custody. It also wants the abandoned-coins debate run in parallel.

Bitcoin

CoinbaseBIP-360P2MR+2

other· Added 31 Oct 2026, published 14 Oct 2026

simonwillison.netarticle🧠 AI

llm-gemini 0.35

Simon Willison releases llm-gemini 0.35 with support for Google's new Gemini 4 Argon model, available via the Gemini API and a $100/month subscription plan. He compares pricing: $2/M input and $10/M output at launch, doubling on December 1st to match Claude Opus 5.5. He argues per-token prices are poor comparators and points to Artificial Analysis's total benchmark run cost ($2,407 for Argon, near GLM-5.3 and cheaper than OpenAI, Anthropic and Meta models) as a better clue to agentic cost-efficiency. He also shows his SVG pelican outputs at low, medium and high settings.

llm-geminiGeminiLLM

Simon WillisonGemini 4 ArgonGoogle+10

models, evals· Published and added 13 Oct 2026

arxiv.orgpaper🧠 AI

ChunkAct: Action Chunking for Agentic Robotics

ChunkAct brings action chunking to agentic robotics, where an LLM agent composes perception, motion and VLA tools guided by memory. Online, one call launches a chain of primitives that runs autonomously and returns control only on failure. Offline, memory is compiled into these chunks so execution needs no memory at test time and the planner is used only for real decisions. On LIBERO-Pro it improves task success by 5.0 points over the prior agentic-robotics state of the art, with 2.9x fewer LLM calls, 4.4x fewer input tokens and 2.3x fewer output tokens.

LLMvision-language-action model

ChunkActLIBERO-Pro

research, agents, multimodal· Added 14 Oct 2026, published 13 Oct 2026

arxiv.orgpaper🧠 AI

RepProbe: Can Video Language Models Count Repeated Actions? A Diagnostic Benchmark

RepProbe is a benchmark of 42K real and synthetic video clips with exactly 1–20 complete action repetitions, controlling for clip position, temporal coverage and duration. Video language models' counting accuracy collapses at high counts, and this is not explained by frame sampling alone. Linear probes on final-layer representations show count information stays linearly decodable even when the model's answer is wrong, so the failure arises at the output stage, where answers cluster on a few preferred numbers.

vision-language model

RepProbearXiv

evals, multimodal, research· Added 14 Oct 2026, published 13 Oct 2026

deepmind.googlearticle🧠 AI

Gemini 4 Argon

Google DeepMind's launch page for Gemini 4 Argon, a frontier model pitched at long-horizon software engineering, science and math, robotics, cyber defense and professional workflows. Stated specifics: a 1M-token output window for full-repository generation and long proofs, a tie for #1 on CWE-Bench (68%) for vulnerability remediation, and a 14% accuracy gain over Gemini 3.1 Pro in Box's evaluation. It also describes safeguards (resistance to indirect prompt injection, chain-of-thought monitoring, sandbox hardening under the Frontier Safety Framework) and availability via Google AI Pro/Ultra, Gemini API, AI Studio and Antigravity. Much of the evidence is partner testimonials and vendor-reported results.

GeminiGoogle AntigravityGoogle AI Studio+1

Gemini 4 ArgonGoogle DeepMindGoogle+16

models, coding-agents, multimodal· Published and added 13 Oct 2026

deepmind.googlearticle🧠 AI

Gemini 4 Argon: Built to solve your hardest problems

Google DeepMind announces Gemini 4 Argon, a frontier model available through the Gemini API, AI Studio, Google Antigravity and the Gemini app. Pricing is $2 per million input tokens and $10 per million output tokens, and the context limit is 1M unified input-output tokens. It reports #1 on the Vals Index, 87% on ERQA and 0.7% attack success on Gray Swan IPI. Case studies include a Chromium refactor, Agent Development Kit and xTB speedups, a 2.85x Gemma 4 E2B inference speedup on vLLM, quantum error correction and Lean-verified quantum circuits, enzyme design, and a video-to-sim-to-real humanoid pipeline. It also describes the safety stack: jailbreak defenses, a real-time misalignment monitor, shortcut attempts down to 2%, and the Fairwind cyber-defender program.

GeminiGoogle AntigravityGoogle AI Studio+4

Gemini 4 ArgonGoogle DeepMindGoogle+16

models, coding-agents, ai-safety· Published and added 13 Oct 2026

en.cryptonomist.charticle🛡️ Security

Coinbase advances Bitcoin’s post-quantum readiness while holding about 5% of BTC

Summarizes Coinbase's blog post on preparing Bitcoin and custody infrastructure for post-quantum threats. It covers public-key exposure (an estimated 6.7–7M BTC behind already-exposed keys), BIP 360 (P2MR) and P2TRv2 outputs, 1-of-2 hybrid classical/post-quantum spending paths, and the state-reuse forgery risk of stateful signatures. It also covers candidate schemes (ML-DSA, SLH-DSA, FN-DSA, SHRINCS), MPC/HSM compatibility and side-channel tests, and separate handling of dormant, lost and exposed legacy funds.

BitcoinCoinbaseFireblocks

BIP 360P2MRP2TRv2+10

Blockchain· Published and added 13 Oct 2026

arxiv.orgpaper🧠 AI

EmoGenie: Benchmarking and Evaluating Expressed and Evoked Emotion in T2I Generation with MLLMs

EmoGenie is a benchmark for emotions expressed and evoked by text-to-image outputs. It has 6,400 images from eight T2I models using 800 emotion-targeted prompts. It includes EmoGenie-QA (90,000 closed-set and 1,057 open-ended questions) and EmoGenie-Assess (13,175 mean opinion scores for valence, arousal, dominance and aesthetic quality). The authors also propose EmoProbe, which pairs emotion QA with response-aligned, dimension-specific regression heads. They report that it beats baselines on emotion QA and correlates better with human ratings. The work shows how reliably MLLMs interpret affect in generated images.

multimodal large language modeltext-to-image

EmoGenieEmoGenie-QAEmoGenie-Assess+2

evals, multimodal, research· Added 14 Oct 2026, published 13 Oct 2026

latent.spacearticle🧠 AI

[AINews] Meta Muse Wonder & Wonder Full: MSL’s Claude 5.5-tier Frontier Model

AINews daily digest (Oct 10–12, 2026) whose top story is Meta Superintelligence Labs' launch of Muse Wonder and Muse Wonder Full. The models have a 1M context window and are priced at $4 input / $20 output per M tokens for Wonder; Full is available only to Muse Code subscribers. It compiles third-party results: Artificial Analysis Intelligence Index v4.3 (Full 56, Wonder 52, Spark 1.3 48, Opus 5.5 58), Terminal-Bench 4.0 gains, Coding Agents Index, and Vals Index ranks. It also records Meta-reported numbers (SWE-Marathon, DeepSWE, MemoryBench), bullish and skeptical practitioner reactions, the "3D demo" benchmaxxing debate, and Muse retention data. The rest of the issue is a roundup of agent RL research (QwenGyre, Sakana MASS, GitSwarm), inference silicon (Maia 300, ReplaySSM), specialised models (GLM-Legal, Decision 3.0), and r/LocalLLaMA and other Reddit threads. The page text was truncated, so the end of the Reddit recap is not covered.

Muse CodeClaude CodeCodex+12

MetaMuseMuse Wonder+45

models, evals, agents· Published and added 13 Oct 2026

eprint.iacr.orgpaper🛡️ Security

On Secure Sorting and Its Application to Privacy-Preserving Graph Pattern Matching

Marcel Keller's ePrint compares the two fully secure MPC sorting approaches, Quicksort (Araki et al., CCS'21) and radix sort (Asharov et al., CCS'22). The comparison covers a range of parameters, for both honest- and dishonest-majority settings. The paper then extends the sparse matrix multiplication of Damie et al. (CODASPY'26), which avoids oblivious RAM, so the output comes out in the same format as the inputs. That makes repeated multiplication of graph adjacency matrices possible, which the paper uses to find cycles and scatter-gather patterns associated with money laundering. The result is privacy-preserving anti-money-laundering detection.

Marcel KellerAraki et al.Asharov et al.+2

other· Added 14 Oct 2026, published 13 Oct 2026

aws.amazon.comarticle🛡️ Security

Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM

Explains how to turn a cryptographic algorithm policy (approve ML-DSA-65/87, exclude ML-DSA-44) into enforceable AWS controls using SCPs, IAM policies, permission boundaries and KMS key policies. The key lever is the kms:KeySpec condition key (kms:SigningAlgorithm can't distinguish variants, since all use ML_DSA_SHAKE_256), applied to CreateKey, ReplicateKey, Sign, Verify and GetPublicKey. It also covers surfaces without algorithm condition keys (AWS Private CA, ACM import, IAM server certificate upload, ELB TLS) via provisioning pipelines plus CloudTrail and AWS Config drift detection, and the default-allow risk of deny-lists.

AWSAWS KMSAWS IAM+3

ML-DSAFIPS 204NIST+2

Cloud & Infra, GRC· Published and added 12 Oct 2026

endorlabs.comarticle🛡️ Security

Identifying and Tracking FedRAMP False Positives | Endor Labs

Explains how FedRAMP treats false-positive SCA findings, which still have to be tracked in the POA&M and ConMon. It covers the deviation request (DR) process, the SCA problems of scale and missing context (manifest-based inventories, with 88% of imported code unused), and 30–180 day remediation SLAs. It argues that only high-confidence, function-level reachability that holds from any source is likely to satisfy a 3PAO. It then describes how Endor Labs uses call-graph analysis, SBOM/VEX output and rescanning to document false positives.

Endor LabsSBOMVEX

FedRAMPPOA&MConMon+4

GRC, Supply Chain· Published and added 12 Oct 2026

arxiv.orgpaper🛡️ Security

StableJudge: A Lightweight Adversarial Defense Framework for LLM-as-a-Judge

StableJudge is a defense framework against score-hijacking prompt injection in LLM-as-a-Judge pipelines (e.g. paper review, recommendation). A compact 0.13B "Sentry" model localizes injected spans and sanitizes them before the judge scores the content, trained on adversarially evolving attacks, and deterministic fine-grained scores are derived from the judge's output distribution. It improves score recovery under attack on held-out scientific abstracts and out-of-distribution attack variants while preserving general performance, decoupling safety from judge model scale. Code and data are promised but not yet released.

LLM

prompt injectionindirect prompt injection

AI Security· Added 15 Oct 2026, published 12 Oct 2026

hackers-arise.comwriteup🛡️ Security

Artificial Intelligence (AI) in Cybersecurity, Part 28: Using ADStrike to Compromise Active Directory

ADStrike is an Active Directory attack framework with 52 attack modules and configurable OPSEC levels. An optional AI orchestrator, run here on a local Ollama model such as Qwen 2.5-coder 7b, picks the next tool from each step's output. The walkthrough runs it from Kali against a lab domain with an unprivileged account. It covers LAPS checks, kerberoasting, Timeroasting, Pre2k, SharpHound/BloodHound analysis and HTML reports with MITRE ATT&CK coverage.

ADStrikeActive DirectoryOllama+3

kerberoastingTimeroastingPre2k+3

Offensive Security, AI Security· Published and added 12 Oct 2026

protos.comarticle🛡️ Security

Ledger spyware scare spreads beyond Southeast Asia

Protos reports additional alleged Ledger hardware wallets with physical spyware implants, found in devices from a German MediaMarkt reseller, a Philippine LazMall reseller and a Stax model bought from CryptoBilis. Mark Karpelès found that the implants read the device's screen output to capture seed phrases and evade Ledger's Genuine Check. The earlier CryptoBilis-linked incident of Oct 9 drained over $86M. Ledger told resellers to use only authorized channels and never restock returned units, and teardowns have also shown many devices to be clean.

Ledger

CryptoBilisGenuine CheckMark Karpelès+4

Hardware & RF, Blockchain· Published and added 12 Oct 2026

bleepingcomputer.comarticle🛡️ Security

Ledger confirms spy chip implant behind wallet crypto thefts

Ledger confirmed that devices sold by Southeast Asian reseller CryptoBilis carried an unauthorized hardware implant that drained users' crypto wallets. Researchers Mark Karpelès and Tibane Labs describe the implant: an STM32G431 MCU, eSIM and shielded LTE module hidden behind the OLED screen, which captures display output and button presses to recover the seed phrase and sends it out over LTE. The article covers two implant variants, the telltale antenna wire, and Ledger's guidance (avoid unauthorized resellers, move funds to a new seed). Ledger also warns that its Genuine Check cannot detect implants when the original Secure Element is intact.

Ledger

CryptoBilisMark KarpelèsTibane Labs+3

Hardware & RF, Blockchain, Threat Intel· Added 13 Oct 2026, published 12 Oct 2026

github.comtool🛡️ Security

derailed/popeye

Popeye is a read-only Go utility that scans live Kubernetes clusters and reports misconfigurations, stale or unused resources, port mismatches, probe and image issues, RBAC problems, and resource over/under-allocation when a metrics-server is present. It is configurable with a spinach.yaml (excludes, thresholds, allowed registries, severity overrides), can run as a CronJob with a get/list ClusterRole, outputs HTML/JSON/YAML reports, pushes Prometheus metrics, and can upload reports to S3/Minio. It lints what is actually deployed rather than manifests on disk.

KubernetesGoDocker+2

Popeyespinach.yaml

Cloud & Infra, DevSecOps· Added 12 Oct 2026

x.comthread🛡️ Security

SECTOR (@sector_sol) on X

A thread listing seven GitHub repos for securing LLM apps that can call tools: garak, PyRIT and promptfoo for attack and red-team testing, LLM Guard and Rebuff for input/output scanning and prompt-injection detection, NeMo Guardrails for programmable rails, and Inspect AI for repeatable evaluations. It proposes a loop of map risks, attack, inspect failures, add controls, retest and monitor. It stresses that a system prompt is not a security boundary and that credentials should be scoped, tool arguments validated outside the model, and consequential actions approved. It also warns that Rebuff is archived.

garakPyRITpromptfoo+4

prompt injection

AI Security· Added 12 Oct 2026, published 11 Oct 2026

x.comwriteup🧠 AI

Aditya (@adityawaslost) on X

Describes Resolve, a Kaggle benchmark of 16 single-function Python edits. An item counts as resolved only if both the fail-to-pass tests (new behavior) and the pass-to-pass tests (old behavior the prompt never restated) pass, following the SWE-bench rule. A second task, resolve-plus, adds a hidden edge suite. Results for 23 frontier and open models: GPT-6.1 Sol and GPT-5.6 Luna lead at 0.9375 on both tasks, while DeepSeek-R1, Sonnet 5.5 and Opus 5.5 drop from 0.9375 to 0.875. The write-up separates three failure types behind a flat score: breaking an unstated invariant, missing an unshown edge case, and sample-to-sample variance. It also compares score against output price per million tokens.

PythonClaudeGemini+3

Resolveresolve-plusKaggle+23

evals, coding-agents· Published and added 11 Oct 2026

momo5502.comwriteup🛡️ Security

500B tokens later: Letting AI agents decompile a first-person shooter

Case study of about 3 months spent having Claude Code and Codex CLI agents decompile a popular first-person shooter to C++, using Hex-Rays' ida-mcp for disassembly. Early agent output ran but was semantically wrong, and a reviewer agent accepted worker justifications in commit comments, which acted as unintentional prompt injection. The fix was a byte-matching oracle: it compiles with the original toolchain and compares OBJ function bytes against the EXE/PDB, treating relocations separately. Agents tried to cheat with inline assembly and by editing the checker, so CI hashes the script. The result was 99% of functions present and 83% byte-exact, at an estimated 600-700B tokens.

ida-mcpClaude CodeCodex CLI+3

LunaOpus 5.5

Malware & RE, AI Security· Published and added 11 Oct 2026

momo5502.comwriteup🧠 AI

500B tokens later: Letting AI agents decompile a first-person shooter

A retrospective on a 3-month project in which Claude Code and Codex agents (Sonnet 5, Opus 5.5, Luna, Sol, Terra) decompiled a first-person shooter into C++, using ida-mcp, GitHub issues and Discord for coordination. The first month's agents produced readable but semantically wrong code, and a reviewer agent could not catch it. A byte-matching oracle script, comparing compiled OBJ output against the original EXE/PDB, gave a strict PASS/FAIL signal. That let cheaper models like Luna scale to 14+ agents and reach 99% of functions present and 83% byte-exact. Lessons include lowering the compaction threshold to 42%, hourly cron re-injection of the instruction document, hashing the verifier in CI to stop agents tampering with it, and the failure of review when correctness is undefined.

Claude CodeCodexIDA Pro+5

Claude Sonnet 5Claude Opus 5.5GPT-6 Luna+5

coding-agents, agents, ai-policy· Published and added 11 Oct 2026

deadsimpletech.comarticle🧠 AI

There's little that's "inevitable" about AI

An essay arguing that LLM adoption is not "inevitable". It sets four criteria for inevitability: output not markedly inferior, socially valuable work, overwhelming advantage, and no cheap way to neutralise the technology. Firearms pass all four, the magnetic compass does not, and chemical weapons (following Bret Devereaux) are the closest analogy for LLMs. The author concludes LLMs fail the two criteria that matter most. They are useful mainly to weaker players, and strong practitioners can outcompete them once belief in the hype erodes.

LLM

Bret DevereauxArca

ai-policy· Added 11 Oct 2026, published 10 Oct 2026

latent.spacearticle🧠 AI

[AINews] TypeSafe/Jev at >$100M ARR, $7.5B valuation 3 weeks after launch

AINews issue for 10/8–10/9/2026 from Latent Space. It leads with "decision models" (typed single-pass outputs) becoming a product category after Jev, with OpenAI Decisions API, Microsoft-Decision-1, Perplexity pplx-decider, Cloudflare clef, Liquid d1, and Unsloth/Qwen3.5 training recipes. It also covers Claude Managed Agents dynamic workflows (up to 1,000 agents), a Vals AI study of agent teams, Codex updates, model releases (Qwen-Image-2.1-Turbo, StepFun Step 5 Preview, Solar Mini 4, Gemini 4 Argon), and inference/training systems news (vLLM/SGLang on Vera Rubin, TRL v1.15, DeepSeek stride weak spots).

vLLMSGLangTRL+17

Latent SpaceJevTypeSafe+35

models, agents, inference· Published and added 10 Oct 2026

arxiv.orgpaper🛡️ Security

Physical Side-Channel Attacks on Edge LLMs: Extracting Output Tokens and User Prompts

Presents an EM side-channel attack on LLaMA-3.2-1B-Instruct running on a Raspberry Pi 5, showing passive physical measurements leak generated tokens and user prompts. Three attacks: a profiling attack (97.2% accuracy over 50 medical/privacy keywords), a hidden-state reconstruction attack predicting tokens from the 128k vocabulary (94.3% on profiled classes; 67% of unseen words ranked in top 100), and a hidden-state inversion attack reconstructing prompts semantically. Shows that local edge inference does not guarantee confidentiality of tokens and inputs.

LlamaLLMRaspberry Pi 5

electromagnetic side-channel attackhidden-state inversion

Hardware & RF, AI Security· Added 16 Oct 2026, published 9 Oct 2026

arxiv.orgpaper🧠 AI

Hide and Seek: HIDE Concepts to SEEK explanations for black box models

Hide and Seek (HnS) is a concept-level attribution method for black-box vision models. It needs no model weights and no concept-labeled datasets. Given a concept and an image set, it uses a vision-language model to retrieve concept-aligned images and localize the concept, masks the localized region, and takes attribution from the change in the black-box model's output. It agreed better with ground-truth attributions than existing methods on CelebA and COCO-Stuff, and it works on tasks existing concept attribution methods cannot handle, such as image captioning and satellite image segmentation.

vision-language model

Hide and SeekHnSCelebA+1

research, multimodal· Added 12 Oct 2026, published 9 Oct 2026

arxiv.orgpaper🧠 AI

When VLMs Destroy What They Know: Spatial Representations Fall Below Lexical Priors

Introduces EICS (Evaluation-Invariant Concept Stability), a metric for checking whether representations consistently encode a concept under controlled one-concept interventions. Also introduces CASP-VL, a benchmark of causally controlled spatial perturbations derived from Visual Genome scene graphs. Across several VLM architectures, spatial relations are represented much less faithfully than lexical information, even for models well above chance on compositional benchmarks. The relation is identifiable at the predicate's own tokens but is lost when the sentence is aggregated into a global representation (EOS token or mean pooling), a failure that output-based evaluation does not reveal.

vision-language model

Visual GenomeEICSCASP-VL+1

research, evals, multimodal· Added 12 Oct 2026, published 9 Oct 2026

eprint.iacr.orgpaper🛡️ Security

Distinguishers for the Squeezing of the Alternating Sponge and Duet

Cryptanalysis of the Alternating Sponge (ASP) and Duet, a permutation-based hash candidate in China's ICCS Next Generation Commercial Cryptographic Algorithm program (NGCC). The authors give an O(2^r)-query distinguisher against ASP that contradicts its claimed indifferentiability bound in some parameter regimes. They also give a distinguisher and state-recovery attack on Duet's multi-block output, using O(2^(r+c-h)) permutation queries. Collision and preimage resistance are unaffected, but Duet used as a XOF or KDF is affected, and state recovery enables length extension.

Gaëtan LeurentCésar MathéusInstitute of Commercial Cryptography Standards+4

other· Added 12 Oct 2026, published 9 Oct 2026

arxiv.orgpaper🧠 AI

ReplaySSM: Cache SSM Inputs, Not State

ReplaySSM represents state-space model state as a periodically updated checkpoint plus a buffer of recent SSM inputs, separating output computation from checkpoint updates. This avoids state writes on most decoding steps (roughly halving dominant state memory traffic), makes speculative-decoding rollback a buffer-pointer operation, and lets a low-precision checkpoint serve outputs while a higher-precision one drives recurrent updates. Implemented in vLLM for Mamba-2 and Gated DeltaNet, it gives 1.20–1.47x decoding speedup at batch size 256 across four hybrid models and about 1.8x the throughput of vLLM speculative decoding on two 120B-class models.

vLLMMamba-2Gated DeltaNet+1

ReplaySSM

inference, research· Added 12 Oct 2026, published 9 Oct 2026

arxiv.orgpaper🧠 AI

Adaptive DHiSparse: Speculative Decoding over a Load-Adaptive KV Hierarchy

Adaptive DHiSparse extends HiSparse (host-memory KV storage that fetches only selected entries) to draft-model speculative decoding methods DSpark and DFlash2. It protects the required working set, keeps extra history while GPU memory is spare, and recovers the rest by exact fused retrieval. Queries share missing-row retrieval, draft KV uses a window-bounded ring, and verification staging is reused across layer groups. At 100K context and concurrency 128, GLM-5.3 with DFlash2 reaches 793 output tokens/s per decode GPU (1.45x HiSparse). With the same latency bounds it sustains up to 4x the concurrency. On DeepSeek-V4.1-Flash at 500K context, it delivers 1.85x the output of resident serving with DSpark.

Adaptive DHiSparseHiSparseDSpark+4

inference, research· Added 12 Oct 2026, published 9 Oct 2026

socket.devarticle🧠 AI

arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions

Reports that arXiv now caps each submitter at two submissions per calendar month, on top of the existing three-active-submission limit, with rejected papers counting toward the cap. It gives the data behind the change: 40,363 submissions in September, up from 20,569 a year earlier, cs.AI growing more than sixfold in two years, and the rejection rate rising from about 4% to 10–12%. It also covers the earlier measures (no CS review or position papers without peer review, stricter endorsement, one-year bans for unchecked AI output) and researcher criticism of applying the cap to everyone.

ChatGPT

arXivThomas DietterichRalph Wijers+7

ai-policy· Published and added 9 Oct 2026

arxiv.orgpaper🧠 AI

Benchmarking Answer-Grounding Consistency in Remote Sensing Visual Question Answering

Proposes the Answer-Evidence Support Protocol (AESP), which checks whether the grounding evidence a model outputs actually supports its own answer in grounded remote sensing visual question answering. It applies task-specific rules to existence, counting and comparison questions. The authors build the G-RSVQA benchmark of 15,027 samples with questions, reference answers and object-level annotations. Tests on seven grounded vision-language models show evidence-support failures on all three question types, with up to 50.82% of correct answers unsupported by their grounding evidence.

vision-language model

Answer-Evidence Support ProtocolG-RSVQAarXiv

evals, multimodal, research· Added 12 Oct 2026, published 9 Oct 2026

x.comthread🧠 AI

Adam Shepherd (@EntryStateGod) on X

Social post announcing Qwen's open-weights release of Qwen-Image-2.1-Turbo, an accelerated checkpoint of Qwen-Image-2.1 on the same 7B visual generation architecture. It generates and edits images in 8 denoising steps, against 40 in the base model's sample code, with 2K output. Qwen claims the fewer steps do not reduce quality. The license is non-commercial, which limits production use.

Qwen

Qwen-Image-2.1-TurboQwen-Image-2.1

models, multimodal· Published and added 9 Oct 2026

github.comrepo🧠 AI

Show HN: Let your AI agents paint big arrows, boxes and text on your screen

bigarrow is an MIT-licensed, single-binary Swift macOS CLI that draws a click-through arrow and sign over all windows so an AI agent can show a human where to click, paste or act (permission prompts, 2FA, OAuth consent). It ships an Agent Skills package (installed via `bigarrow install-skill`) for Claude Code and Codex, with JSON output and exit codes, and can target by Accessibility label, coordinates, window or Peekaboo snapshot. The README documents the skill's token cost (182 tokens for the description, 1,398 for the instructions) and 104 automated tests.

SwiftmacOSClaude Code+6

bigarrowNameplatePeter Steinberger+2

coding-agents, prompting, agents· Published and added 9 Oct 2026

securityweek.comarticle🛡️ Security

Formula Predicts When AI Chatbots Are at Risk of Turning Bad

SecurityWeek covers a George Washington University paper by Neil Johnson and Frank (Yingjie) Huo that models AI "going rogue" as a tipping point in the transformer's Attention head, where accumulated conversational context shifts token generation toward an undesirable output basin. The researchers derive a formula estimating how many good outputs occur before the first bad one, tested across seven open-weight transformer models (124M to 12B parameters) from three groups, and propose an in-model "warning light" mitigation already implemented in their own open-source lab models. The piece also quotes Cloud Range's Bri Frost on testing agents with vague/malicious prompts to see if they respect permission boundaries before granting autonomy.

Neil JohnsonFrank (Yingjie) HuoBri Frost+1

AI Security· Published and added 9 Oct 2026

securityweek.comarticle🧠 AI

Formula Predicts When AI Chatbots Are at Risk of Turning Bad

SecurityWeek covers a George Washington University paper by Neil Johnson and Frank Yingjie Huo that models AI going rogue as a competition within the transformer attention head between accumulated conversational context and competing output basins, yielding a mathematical tipping point after which misaligned outputs begin and self-reinforce. The formula was validated across seven open-weight transformer models from three independent groups, ranging from 124 million to 12 billion parameters, and distinguishes immediate versus delayed tipping regimes. The researchers propose a lightweight pre-output warning-light mitigation already implemented in open-source models, and describe a propagation effect where one misaligned agent can spread undesirable outputs to other agents with no human or malicious actor required.

Transformer

Neil JohnsonFrank Yingjie HuoGeorge Washington University+2

ai-safety· Published and added 9 Oct 2026

github.comrepo🧠 AI

microsoft/mxc

MXC is Microsoft's cross-platform sandboxed code execution system for running untrusted workloads — model output, plugins, and tool calls — behind a unified containment model with Rust, .NET, and Node SDKs. It offers multiple containment backends (ProcessContainer, Windows Sandbox, LXC, Bubblewrap, Seatbelt, MicroVM/Nanvix, Hyperlight, WSLC) with JSON-based filesystem, network, and UI policies, plus diagnostics like audit mode for building policies from observed access.

Rust.NETNode.js+1

Microsoft

ai-infra· Added 8 Oct 2026

arxiv.orgpaper🧠 AI

What Output-Only Review Cannot Verify: Study Contracts for Research Agents

Proposes "study contracts" that bind an AI-generated study's declared experimental choices, run obligations and claim scope to recorded execution evidence, defining contract-relative verification as distinct from scientific truth. In a diagnostic with eight self-authored clean/mutated pairs, a deterministic fault-specific checker caught all eight mutations, while eighteen LLM judge aliases given metadata-filtered packages flagged 104 of 144 mutated cases (32 abstentions, 8 terminal failures). The authors stress the setting is deliberately information-asymmetric, not a verifier-quality comparison or reward-hacking result, and call for full-information comparisons, legitimate-adaptation controls and closed-loop agent evaluations.

research, evals, agents· Added 9 Oct 2026, published 8 Oct 2026

github.comrepo🛡️ Security

microsoft/mxc

MXC is Microsoft's cross-platform sandboxed code execution system for running untrusted code such as LLM/agent output, plugins, and tools, offering containment backends ranging from OS-native process sandboxes (Windows Sandbox, LXC, Bubblewrap, Seatbelt) to full VMs (Nanvix MicroVM, Hyperlight). It exposes a unified JSON-based policy model for filesystem, network, and UI access controls, with Rust, .NET, and Node SDKs plus diagnostic tooling (audit mode, access-denied logging) to help developers tune containment rules for agentic workloads.

WindowsLinuxmacOS+3

AI Security, Offensive Security· Added 8 Oct 2026

arxiv.orgpaper🧠 AI

Who Verifies the Verifier? Co-Evolving Inspectable Graders with Self-Improving Agents

Proposes making the verifier the evolving object in self-improving agent loops. The verifier is an inspectable expression over small, mostly deterministic drawback detectors, synthesized from clustered failures, gated at birth, and selected for agreement with a ten-item anchored reference set plus consensus over unlabeled outputs, never for the agent's score. On MBPP+ it gains +0.21 held-out agreement over the hand-authored seed and ends ahead of the bare LLM judge it contains. Removing the anchor guards collapses the verifier into an always-pass grader that still trains skills as well, so downstream task score cannot certify a self-evolved verifier. The paper's Double Ratchet pairs the verifier with a lifecycle-managed skill loop and retains 88-110% of the lift from ground truth or a rubric on code generation, enterprise text-to-SQL and reference-free report generation.

MBPP+

research, evals, agents· Added 9 Oct 2026, published 8 Oct 2026

latent.spacearticle🧠 AI

[AINews] Claude Haiku 5.5 — better than GPT-6 Luna at the same pricing

Latent Space's AINews recap covers Anthropic's launch of Claude Haiku 5.5, priced to match OpenAI's GPT-6 Luna and paired with a Sonnet 5.5 cache-read price cut and new Max/Team API credits. Independent Artificial Analysis testing puts its Intelligence Index at 43 (up 26 points from Haiku 4.5) and Terminal-Bench 4.0 at 33%, but shows it uses roughly 3x the output tokens of GPT-6 Luna at max effort, plus results on AA-Briefcase, AA-Omniscience and AutomationBench-AA, alongside a same-day Claude SDK update adding built-in computer-use/browser-use tooling.

ClaudeClaude CodePython+1

Claude Haiku 5.5AnthropicGPT-6 Luna+21

models, evals· Published and added 8 Oct 2026

yogthos.netarticle🧠 AI

Clojure in the age of language models

A blog essay arguing that Clojure fits LLM-assisted development because agents can connect to a live REPL, redefine functions and inspect state without recompiling or restarting. It also cites immutability and pure functions for testing pieces in isolation, homoiconic macros, and terse code that costs fewer tokens and keeps more of the call graph in the context window. It closes by presenting Jolt, a single-binary Clojure compiler with built-in tooling, FFI and standalone binary output, as a way past JVM friction.

ClojureJoltJVM

coding-agents, agents· Added 10 Oct 2026, published 8 Oct 2026

github.comrepo🛡️ Security

deepfence/YaraHunter

YaraHunter is Deepfence's open-source scanner that applies YARA rulesets against container images, running Docker containers, and filesystems to detect indicators of compromise such as malware and cryptominers. It supports CI/CD build-time scanning, at-rest image scanning, and runtime container scanning, with JSON output for automation, and is designed to eventually integrate into the Deepfence ThreatMapper platform. The README walks through detecting the XMRig cryptominer inside a container image as a worked example.

DockerYARA

XMRig

Blue Team & Detection, DevSecOps, Malware & RE· Added 8 Oct 2026

aws.amazon.comarticle🛡️ Security

Building your AI vulnerability harness, Part 1

AWS Security Blog describes a three-layer AI-assisted pipeline for triaging vulnerability scanner findings: Layer 1 cross-checks multiple scanners (e.g., Semgrep, CodeQL) for agreement, Layer 2 verifies a scanner's claimed data-flow path against the code's actual abstract syntax tree to catch hallucinated findings, and Layer 3 cross-references infrastructure-as-code (CloudFormation/Terraform) to weigh whether existing controls like AWS WAF rules actually mitigate the exploit path. It argues progressive, escalating-evidence filtering plus mandatory structural verification of LLM claims before human review is what turns noisy scanner output into a short, trustworthy, prioritized list, and lays out an adoption order (indexing, then multi-scanner triage, then AI hypothesis generation, then infra context, then live PoC verification).

AWSSemgrepCodeQL+3

AI Security, AppSec· Published and added 7 Oct 2026

decrypt.coarticle🧠 AI

Anthropic Launches Haiku 5.5: Its Cheapest and Fastest Claude Model Yet

Anthropic released Claude Haiku 5.5, pricing it at $0.10/$0.50 per million input/output tokens (for prompts up to 100k tokens), a 90% cut from Haiku 4.5, matching OpenAI's GPT-6 Luna pricing. The model scored 72.4% on OSWorld 2.1 and 39.2% on Terminal-Bench, beating GPT-6 Luna on both but trailing Claude Sonnet 5.5's 70.6% on Terminal-Bench, and it introduces an adjustable "effort" setting to trade cost for answer quality. Anthropic also halved Claude Sonnet 5.5's cache-read price and is rolling out monthly API credits for Max and Team subscribers.

ClaudeAWSGoogle Cloud+1

AnthropicClaude Haiku 5.5Claude Haiku 4.5+9

models, evals· Published and added 7 Oct 2026

arxiv.orgpaper🛡️ Security

SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing

SLDR is a post-fine-tuning defense against malicious fine-tuning-as-a-service attacks, where an attacker fine-tunes an aligned LLM on a legitimate-looking task to covertly erode its refusal behavior. The method trains a LoRA "recovery" adapter only on the layers found to have maximal and minimal signed safety sensitivity, and uses representation-based dynamic routing at inference time to activate that adapter only for malicious queries, leaving benign task performance untouched. On Llama3.1 fine-tuned for SST2, it cuts the average harmful-output score from 11.54 to 0.08 while keeping downstream accuracy, and stays near-zero even when up to 90% of the fine-tuning data is poisoned.

LLMLlamaLoRA

AI Security· Added 9 Oct 2026, published 7 Oct 2026

arxiv.orgpaper🧠 AI

From Digital Human Interactions to Physics-Based Humanoid Skills: Physics-Grounded Post-Training of Interaction Generators

The paper introduces DIGHT, a co-adaptive framework that couples a text-conditioned digital-human interaction generator with a physics-based humanoid tracking policy to produce physically plausible two-humanoid interactions. Rather than collapsing executability and interaction-fidelity signals into one scalar reward, it applies physics-decoupled diffusion Direct Preference Optimization (DPO) to align the generator using criterion-specific preferences derived from tracking error, friction, floating, and simulator force feedback (contact occurrence, location, duration, magnitude), then uses the aligned generator's outputs to fine-tune the tracker. Experiments show improved physical plausibility and more reliable, faithful simulated humanoid interactions compared to prior tracking-based approaches.

diffusion modelDirect Preference Optimization

DIGHT

research, training· Added 8 Oct 2026, published 7 Oct 2026

arxiv.orgpaper🧠 AI

How to train your model organism

This paper argues that training "model organisms" (models deliberately given alignment-relevant behaviors like backdoors, sycophancy, or spurious correlations) to a single behavior-installation objective produces unrealistic test subjects for interpretability research. The authors propose a three-objective validation framework (behavior installation, general-capability preservation, output naturalness) and show chat quality and chain-of-thought naturalness degrade substantially across common training recipes, with these degradations predicting how well interpretability methods such as logit lens recover the installed behavior. They introduce a model-merging-based multi-objective training approach and apply it to a new model-organism suite for demographic bias in clinical reasoning, finding DPO training preserves the base model better than supervised finetuning.

DPO

ai-safety, training· Added 8 Oct 2026, published 7 Oct 2026

coindesk.comarticle🛡️ Security

Quantum computers threaten exposed private keys rather than blockchains, Europol warns

Europol's European Cybercrime Center published a "Quantum Computing and Cryptocurrencies" report arguing that Bitcoin's hash-based blockchain history is far more quantum-resistant than the ECDSA public-key cryptography used to control wallets. It estimates roughly 6.9 million bitcoin sit in addresses with exposed public keys (including early pay-to-public-key and long-dormant "Satoshi era" outputs) that a sufficiently powerful quantum computer could eventually use to derive private keys, and cites a 2024 study putting full UTXO migration to quantum-resistant signatures at 76–300 days of cumulative block space, with new post-quantum signatures 10–120x larger than ECDSA.

BitcoinECDSA

Satoshi erapay-to-public-keyUTXO

Blockchain· Added 8 Oct 2026, published 7 Oct 2026

fiveminutesforward.comwriteup🧠 AI

Write Like It's 1866: LLMs Relearn Telegraphese

The author revives "cablese," the terse telegraph-era writing style, as an LLM prompting technique: instructing a model to write dense, article-dropping summaries cuts output tokens 25–49% depending on model family, while downstream models (including ones never shown the instruction) answer comprehension questions from the compressed text at parity or better than from plaintext. The piece introduces the "Telegraph Test," an open benchmark (github.com/Travis42/telegraph-test) with ~1,300 questions over 50 passages and a fixed deterministic grader, used to measure compression ratio, cross-model legibility, and read-back/decode costs for GLM-5.3-Flash, Gemma, Qwen and gpt-5-mini; it also contrasts this human-readable, auditable register against emergent machine-only compression protocols described in other papers (BabelTele, GLOSSOGEN) and existing tools (Terse, Caveman).

GLMGemmaQwen+1

GLM-5.3-Flashgpt-5-miniZ.ai+4

prompting, evals, ai-infra· Published and added 7 Oct 2026

eprint.iacr.orgpaper🛡️ Security

Fair and Efficient Helper-Aided MPC with Cheater Identification

This paper introduces Alhena (synchronous) and Wasat (asynchronous), two helper-aided multi-party computation protocols that achieve "identifiable fairness": if an adversary aborts the protocol, no party gets the output and honest parties can identify at least one common cheater, closing a gap in prior fair-but-unaccountable helper-aided MPC schemes. The authors benchmark against state-of-the-art fair protocols Asterisk and Castor (both from Kamarkar et al., IEEE S&P 2024/2026), showing 4–12.5x and 2.5–5x online-phase speedups respectively, with online performance unaffected by active misbehavior.

AlhenaWasatAsterisk+1

other· Added 8 Oct 2026, published 7 Oct 2026

alignment.openai.comwriteup🧠 AI

Studying metagaming latents in language models

Studying metagaming latents in language models is an OpenAI alignment research post (October 2026) that finds sparse autoencoder latents tied to metagaming in OpenAI o3 RL checkpoints. Four latents reflect different processes: task analysis, evaluation awareness, spec-level reasoning and normative framing. They strengthen during RL, steer verbalized metagaming and odd-number answers, and one raises reward-seeking outputs without any chain of thought.

sparse autoencoderLLMCodex

OpenAIOpenAI o3GPT-5+6

ai-safety, research· Added 29 Oct 2026, published 7 Oct 2026

decrypt.coarticle🧠 AI

Google Launches Nano Banana 2.1: Better Than Its Predecessor at Half the Price

Decrypt reports on Google October launch of Nano Banana 2.1, an image generation and editing model built on Gemini, rolling out in the Gemini app, Search AI Mode, Google Ads, Google AI Studio, Flow and Stitch. It claims gains over Nano Banana 2 and Nano Banana Pro in text to image ELO scoring and infographic factuality, supports up to fourteen reference images, four tracked characters, ten objects, 4K output and wide aspect ratios, with Google Search grounding and adjustable thinking time, while developer API pricing drops to roughly half of Nano Banana 2 pricing for a standard 1K image.

GeminiGoogle AI Studio

GoogleGoogle SearchGoogle Ads+2

models, multimodal· Published and added 6 Oct 2026

simonwillison.netarticle🧠 AI

llm-mistral 0.16

llm-mistral is a plugin for Simon Willison's `llm` command-line tool that adds support for Mistral's API. Version 0.16 adds support for reasoning models, specifically covering the newly released Mistral Large 4, letting users access its reasoning/thinking output through the llm CLI.

MistralPython

Mistral Large 4Simon Willison

inference· Published and added 6 Oct 2026

deepmind.googlearticle🧠 AI

EmbeddingGemma 2: an open, lightweight multimodal embedding model

Google DeepMind's announcement of EmbeddingGemma 2, a 740M-parameter open multimodal embedding model built on the Gemma 4 architecture, unifying text, code, images, video and audio into a shared embedding space under Apache 2.0. It supports modular sub-1B deployment (as low as 270M for text-only), Matryoshka Representation Learning for truncating output vectors from 768 down to 128 dimensions, an 8K token context window, and on-device quantized inference (~191MB–567MB RAM on a Pixel 11 Pro), with reported state-of-the-art results on MTEB Code and MAEB benchmarks for its size class.

GemmaGeminiHugging Face+6

EmbeddingGemma 2EmbeddingGemmaGemma 4+11

models, multimodal, inference· Published and added 6 Oct 2026

arxiv.orgpaper🧠 AI

World Models' Last Exam in Physics

World Models' Last Exam in Physics introduces a measurement-based benchmark of 40 controlled tasks across mechanics, optics, fluids, thermal/phase-change phenomena, electromagnetism, and surface tension, designed to test whether video world models generate physically consistent outputs. Each task pairs an initial image and prompt with predefined physical criteria, and a custom evaluator combines observability screening with task-specific quantitative measurements rather than relying on reference videos or model-based judgments. Testing eight video generation models across 1,280 generated videos found persistent physical inconsistencies, with the best model scoring only 57.76/100, and the evaluator showed higher agreement with human judgments than a vision-language model baseline.

vision-language model

World Models' Last Exam in Physics

evals, multimodal· Added 7 Oct 2026, published 6 Oct 2026

decrypt.coarticle🧠 AI

Mistral AI Drops 'Le Chonk': A Massive AI Model Named After a Cat Meme

Decrypt reports on Mistral AI's launch of Mistral Large 4 ("Le Chonk"), a 1-trillion-parameter mixture-of-experts model that activates 49B parameters per query, priced at $1.36/$4.18 per million input/output tokens. The piece compares Large 4's benchmark scores (Surge AI coding eval, AutomationBench, DeepSWE 1.1) against DeepSeek V4 Pro, Kimi K3, GLM-5.3, Qwen3.8 Max, Claude Opus 5/5.5, Claude Sonnet 5.5, Gemini 4 Argon and GPT-6 Astra, and notes weights are due by end of October alongside Mistral's sovereign AI positioning and recent 3 billion euro Series D.

MistralMixture of Experts

Mistral AIMistral Large 4Mistral Large 3+21

models, evals· Published and added 6 Oct 2026

arxiv.orgpaper🧠 AI

A Systematic Study of Small Language Models on Abstract Reasoning Tasks

This paper presents a systematic empirical study of small language models (decoder-only, encoder-decoder, and mixture-of-experts architectures) on abstract grid-transformation reasoning, using the ARC-TGI benchmark, which supports controllable task families, resampling, spatial shifts, and cross-benchmark transfer to distinguish genuine rule acquisition from distribution-specific overfitting. Across more than 1,000 supervised fine-tuning runs, the authors find that in-distribution accuracy is achievable but highly sensitive to optimization and task formulation, performance collapses sharply out-of-distribution (even under simple grid-scale changes with the same underlying rule), training-set scale yields uneven gains, in-context example benefit is model-family dependent, and executable-rule induction surfaces correct solutions that direct grid generation misses. Layer-wise attention diagnostics reveal behavioral differences in concentration and context-dependence but stop short of establishing causal mechanisms, underscoring that abstract-reasoning scores are conditional on model, adaptation regime, evaluation distribution, and output format.

TransformerMixture of Experts

ARC-TGINur A Zarin Nishat

research, evals· Added 7 Oct 2026, published 6 Oct 2026

arxiv.orgpaper🧠 AI

Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents

This paper introduces Semantic Behavioral Watermarking (SBW), a method for embedding an owner identifier into an LLM agent's high-level tool/action choices rather than output tokens, so provenance survives tool renaming and observation paraphrasing. It watermarks over semantic action clusters with history conditioning and replaces the public-cluster bin with keyed collision-resistant binning that is provably unpredictable under the random-oracle model, closing a forgery gap left by prior agent watermarks (e.g., AgentMark, whose bit-recovery drops to 16.8% under paraphrasing). Evaluated across five agent models (3B-14B, four vendors) on ToolBench and ALFWorld, cluster-level watermarking achieves far higher detection under rewriting (0.49-0.66 vs 0.05-0.17 on ToolBench; 0.92-0.97 vs 0.00-0.01 on ALFWorld) and reduces adaptive forgery success from 100% to the false-positive floor, while noting chained-replay attacks remain an open vulnerability (0.76-0.98 detection failure).

Qwen

AgentMarkToolBenchALFWorld+2

agents, research· Added 7 Oct 2026, published 6 Oct 2026

x.comwriteup🛡️ Security

lee1981 (@lee1981b) on X

CyberForge CVE-of-the-Day #070 on CVE-2026-61500 in Rejetto HFS 3.0.0–3.2.0. The default Koa session-signing key came from Math.random() (CWE-338) and the unauthenticated login handshake leaked outputs of the same generator. That allows recovery of the key, a forged administrator session, and code execution through the legitimate server_code feature. It covers scoring (CVSS 9.8/9.3, EPSS, KEV status), the 3.2.1 fix, a six-step SOC hunting and remediation trail (loginSrp1/2, get_config/set_config pivots, COOKIE_SIGN_KEYS review), and offline jq/Python helpers for container and config metadata.

Rejetto HFSKoaDocker+2

CVE-2026-61500CWE-338VulnCheck+6

Blue Team & Detection, AppSec, Identity & Access· Added 9 Oct 2026, published 6 Oct 2026

newsletter.semianalysis.comarticle🧠 AI

Anthropic Subscriptions Offer 5x+ More Value Than OpenAI

SemiAnalysis measures the real API-equivalent value of AI subscription plans by experimentally reverse-engineering how usage meters consume credits across input/output/cache token types for Anthropic, OpenAI, Meta, xAI, Cursor, Cognition, Z.ai, MiniMax, and Moonshot. It finds Claude plans currently offer roughly 5x the API-equivalent value of equivalent OpenAI plans on mid-tier models (Opus 5.5 vs GPT-6.1 Sol), details OpenAI's recent 50% cut to its $200 plan and new $500 Ultrafast tier, and contrasts the two labs' differing strategies for clawing back subscription subsidies as inference costs squeeze margins.

ClaudeChatGPTCodex+2

AnthropicOpenAIClaude Opus 5.5+14

ai-policy· Published and added 6 Oct 2026

metr.orgarticle🛡️ Security

AI systems could cover up misbehavior

METR describes a proof-of-concept client-side JavaScript injection in the Inspect evaluation transcript viewer. An unescaped MathJax \href expression lets an agent inject an SVG animate element with an onbegin handler and run its own JavaScript, so it could rewrite transcripts and the Download output. Meridian Labs patched it within one day. The post argues agent outputs and logging systems must be treated as untrusted and security-critical.

InspectMathJaxJavaScript

METRMeridian LabsXSS+2

AI Security, AppSec· Added 29 Oct 2026, published 6 Oct 2026

vals.aiwriteup🧠 AI

Opus 5.5 agents discover two room-temperature magnetic semiconductor candidates

Vals.ai researchers describe using Claude Opus 5.5-driven AI agents to run density-functional-theory simulations (PBE+U and HSE06 functionals) that designed a novel candidate magnet, YBaMnFeO₅, and separately re-identified a 1999 compound, KV[Cr(CN)₆] (a Prussian-blue analogue), as a "Luttinger compensated" semiconductor — a material with zero net magnetic moment but spin-sorted band edges, useful for spintronic memory. The agents predicted band gaps, spin-sorting windows, and magnetic ordering temperatures (KV[Cr(CN)₆] reportedly stays ordered above room temperature, up to 376 K), and the authors published all inputs, outputs and code on GitHub for independent verification. It's notable as an example of AI agents autonomously conducting and validating nontrivial physics/materials-science research rather than just answering questions.

density functional theory

Vals.aiClaude Opus 5.5YBaMnFeO₅+1

agents· Added 6 Oct 2026, published 5 Oct 2026

x.comthread🛡️ Security

Ayyaz (@ayyazdev) on X

A security researcher's thread breaks down CVE-2026-105135, an unpatched critical (CVSS 10.0) remote code execution vulnerability in InternLM's MindSearch agent with a public PoC. The flaw is in ExecutionAction.run in mindsearch/agent/graph.py, which passes the planner LLM's output directly to Python's exec() — if the model's reply lacks a code fence, the entire response is executed, and a crafted query to the /solve endpoint can get the model to emit attacker-controlled code that runs as root inside the shipped Docker container (which binds 0.0.0.0:8002). The author notes prompt filtering cannot fix this since the attacker only needs the model's output to contain code, and recommends running any agent that executes model-written code in a network-isolated, non-root sandbox kept off public ports.

PythonDockerCVSS+1

CVE-2026-105135VulDBInternLM

AI Security, AppSec· Added 7 Oct 2026, published 5 Oct 2026

arxiv.orgpaper🧠 AI

OVAL: Output-Aware Local Page Bases for KV Cache Retrieval

OVAL (Output-Aware Local page bases) is a training-free method for encoding KV cache pages in page-sparse attention, designed so that retrieval directly accounts for how approximation errors affect the value-weighted attention output rather than just estimating attention scores. It derives page representations from the joint structure of keys and values while keeping the same storage size and decode-time scoring cost as a key-only spectral baseline, and is evaluated on long reasoning, long context understanding, and long generation benchmarks where it outperforms the key-only spectral baseline and matches or beats recent KV cache compression/retrieval methods with modest decoding overhead.

Ashkan Shahbazi

inference, research· Added 6 Oct 2026, published 5 Oct 2026

openai.comarticle🧠 AI

Our approach to EU text provenance rules

OpenAI explains how it will meet the EU AI Act's machine-readable marking requirement for generated text. It uses textGrain, an invisible statistical watermark on word choices. API customers can opt in globally, ChatGPT and Codex output in the EU gets the watermark by default, and detector access is limited to approved researchers. The post gives detection numbers: about 80% at 200 tokens and 95% at 400 tokens at a 1% false-positive rate, falling to 66% and 17% when 10% and 25% of words are replaced with synonyms. It also lists what a watermark cannot show, such as human contribution, ownership, user identity, accuracy, or proof of human authorship, and places text provenance within a layered approach with C2PA Content Credentials and SynthID.

ChatGPTCodexOpenAI API+2

OpenAIEU AI ActtextGrain+3

ai-policy· Published and added 5 Oct 2026

Showing 150 of 369