Skip to content

344 results for β€œAX”

ListGrid
What you seeeverything
RecentOldestAddedA–Z
All types344Articles136Papers102Repos38Write-ups36
Threads14Advisories6Tools6Talks4Courses1Other1
β€œAX”
x.comthread🧠 AI

🚨 AI News | TestingCatalog (@testingcatalog) on X

Drex-Max v1 is an open-source multimodal decision model from Nace AI. It takes a document and a question with a fixed set of answers, such as which team should handle a support ticket, and returns a probability for each answer. It runs fully locally on Apple Silicon M4 and M5 Macs, with cloud inference at console.nace.ai and weights on Hugging Face. The post gives no benchmarks or model size.

Hugging FacemacOS
Nace AIDrex-MaxTestingCatalog+1

models, inference, multimodalΒ· Added 2 Nov 2026, published 1 Nov 2026

theblock.coarticleπŸ›‘οΈ Security

North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst

The Block reports that North Korean hackers (TraderTraitor) laundered about $242 million of funds stolen from Binance through Tron in two days, according to analyst SomaXBT. Relay, THORChain, Chainflip and Symbiosis moved about $140 million off Tron. Elliptic counts $2.85 billion frozen or seized, 44% of $6.43 billion stolen, and $3.25 billion in assets no issuer can freeze. The FBI urged THORChain and others to block listed addresses.

TronTHORChain
TraderTraitorDPRKBinance+6

Blockchain, Threat IntelΒ· Published and added 1 Nov 2026

bleepingcomputer.comarticleπŸ›‘οΈ Security

Alpine Linux rebuilds GitLab after attempted RCE attack

Alpine Linux rebuilt its GitLab server and reset all passwords after attackers tried to exploit CVE-2026-97229, a maximum-severity integer overflow in the Onigmo regex engine bundled with Ruby, on October 20-21. Eight worker crashes occurred and four were partially successful. Missing logs and outbound connection records meant compromise could not be ruled out. Alpine had run GitLab 19.3.4, then 19.3.6, which lacked the Ruby patch; the fixed image is alpinelinux/gitlab:19.3.6 with Ruby 3.3.13.

GitLabAlpine LinuxDocker+1
CVE-2026-97229integer overflowOnigmo

Supply Chain, Blue Team & Detection, DevSecOpsΒ· Published and added 1 Nov 2026

decrypt.coarticle🧠 AI

How to Run an AI Model Locallyβ€”And Why You Might Want To

Decrypt guide to running open-weight AI models locally with Ollama and LM Studio. It cites Epoch AI's finding that open models trail the best closed ones by about four months, and sets out VRAM and unified-memory needs (8GB minimum, 24GB for serious use), quantization, licences (MIT, Apache 2.0), install commands and Gemma 4 download sizes. It also notes that the largest open models, such as Qwen3.8-Max, exceed consumer hardware.

OllamaLM StudioHugging Face+7
DecryptEpoch AIGemma 4+11

inference, modelsΒ· Published and added 1 Nov 2026

galaxy.comarticleπŸ›‘οΈ Security

Weekly Research Brief: Binance Hacked; Hyperliquid on Wall Street; Prediction Markets’ Brazil β€˜Miss’

Galaxy Research's weekly brief of 30 October 2026 opens with the Binance hack: about $6.3b drained across 10 blockchains, attributed by TRM Labs and Chainalysis to TraderTraitor (Lazarus-linked). The attacker used EIP-7702 with 50 pre-signed authorizations on Ethereum, and Binance's preliminary finding is a compromised DevOps laptop reaching a service container. Tether and Circle froze about $2.6b. The other sections cover Hyperliquid and prediction markets.

EthereumBitcoinUSDC+2
TraderTraitorLazarus GroupEIP-7702+7

Blockchain, Threat IntelΒ· Added 30 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

Here We Go Again: Binance Loses $6.3b in Largest Robbery in History

Galaxy Research newsletter on the roughly $6.3b drained from Binance across 10 blockchains, which TRM Labs and Chainalysis attribute to TraderTraitor. On Ethereum the attacker used EIP-7702 to turn a hot wallet into a sweeper contract backed by 50 pre-signed authorizations. Binance's preliminary finding is a compromised DevOps laptop, with no wallet key leak. Tether, Circle, Ripple and World Liberty froze about $2.7b; Galaxy also assesses Binance's ability to cover losses.

EthereumBitcoinTether+3
TraderTraitorLazarus GroupBinance+7

Blockchain, Threat IntelΒ· Added 30 Oct 2026

x.comthread🧠 AI

Artificial Analysis (@ArtificialAnlys) on X

Hyperflow H3 is Video Rebirth's 8-step LoRA for MiniMax H3, released in September 2026 with open weights. Artificial Analysis ranks it #5 on AA-Video-I2V v2.1 and #3 on AA-Video-Editing v1.1, ahead of MiniMax H3 (768p). It costs $9.00 per minute for Image to Video and $18.00 for Video Editing at 1088p, under half of Dreamina Seedance 2.5 ($34.12 and $40.82). The thread gives per-capability and per-use-case breakdowns.

LoRAdiffusion model
Artificial AnalysisVideo RebirthHyperflow H3+6

models, evals, multimodalΒ· Added 31 Oct 2026, published 30 Oct 2026

interconnects.aiarticleπŸ›‘οΈ Security

Was I wrong about open models & cyber risks?

Interconnects post in which Nathan Lambert revisits his claim that an open-weight release of Claude Mythos in April 2026 would have been survivable. He argues GLM-5.3 already crosses that capability threshold with little visible harm. He cites Epoch AI's GLM-5.3 Firefox file-exfiltration exploit and Joshua Saxe's trend data, and says recent vulnerability waves come mostly from closed models and general AI diffusion.

GLMFirefoxGitLab+1
MythosProject GlasswingPHP2Shell+9

AI Security, otherΒ· Published and added 30 Oct 2026

bleepingcomputer.comarticleπŸ›‘οΈ Security

CISA says max severity GitLab flaw now exploited in the wild

CVE-2026-97229 is a maximum-severity GitLab flaw in the CI/CD Regular Expression Compiler, caused by an integer overflow, that lets unauthenticated attackers run code via a crafted regular expression. CISA added it to the KEV Catalog and ordered federal agencies to patch under BOD 26-04. GitLab fixed it in CE/EE 19.4.2, 19.3.5 and 19.2.8, and Shadowserver tracks about 2,800 exposed CE instances.

GitLab
CVE-2026-97229CVE-2026-0723CVE-2026-110264+10

AppSec, DevSecOps, Threat IntelΒ· Published and added 30 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

CVE-2026-97229 is a CVSS 10 code execution flaw in Onigmo, Ruby's regular expression engine, reachable through crafted CI/CD configuration in GitLab. Attackers used it against Alpine Linux's GitLab on 20 and 21 October 2026 and failed; Alpine rebuilt the instance and found no tampering with aports or packages. Self-managed installs with their own Ruby need Ruby 3.3.13, 3.4.12 or 4.0.9, not just GitLab 19.3.6. CISA added it to KEV.

GitLabRubyOnigmo+2
CVE-2026-97229CISA KEVBOD 26-04+1

AppSec, Threat Intel, DevSecOpsΒ· Published and added 30 Oct 2026

github.comrepo🧠 AI

rikugan: LLM reverse-engineering agent for IDA Pro and Binary Ninja

Rikugan is a reverse-engineering agent that runs inside IDA Pro and Binary Ninja. It has its own generator-based agent loop, context management, plan mode and 60+ tools, and does not depend on an external MCP server. An orchestrator spawns parallel subagents to analyze a binary. It supports Anthropic, Gemini, MiniMax, Kimi, OpenAI-compatible endpoints and Ollama, with per-model notes.

IDA ProBinary NinjaHex-Rays+6
RikuganClaude Opus 4.6Claude Sonnet 4.6+6

agents, coding-agentsΒ· Added 30 Oct 2026

github.comrepoπŸ›‘οΈ Security

rikugan: LLM reverse-engineering agent for IDA Pro and Binary Ninja

Rikugan is an open-source reverse-engineering agent that runs inside IDA Pro 9.0+ and Binary Ninja, with its own agent loop instead of an MCP server. It has 60+ tools (decompiler, xrefs, strings, types, IL/microcode), parallel subagent exploration, an experimental /modify natural-language patching command and an experimental Binary Ninja deobfuscation skill for control flow flattening and opaque predicates. It supports Claude, Gemini, MiniMax, Kimi, OpenAI-compatible endpoints and Ollama.

IDA ProBinary NinjaLLM+3
control flow flatteningopaque predicatesMBA expressions+1

Malware & RE, AI SecurityΒ· Added 30 Oct 2026

x.comthread🧠 AI

Artificial Analysis (@ArtificialAnlys) on X

Artificial Analysis launched an HLE-Diamond leaderboard in v5 of its Intelligence Index, covering the refined 1,000-question Humanity's Last Exam from CAIS and Scale AI. Each question runs once without tools, graded by GPT-5.6 Luna (medium) as pass@1. Gemini 4 Carbon (high) leads at 69%, Claude Opus 5.5 (max) scores 68%, and the top open weights model, Kimi K3.1 Pro, reaches 37%.

Artificial AnalysisArtificial Analysis Intelligence IndexHLE+9

evals, modelsΒ· Published and added 30 Oct 2026

simonwillison.netarticle🧠 AI

API credits benefit for eligible ChatGPT subscriptions

Simon Willison's 29 October 2026 link post says OpenAI now gives ChatGPT subscribers on $100, $200 and $500 plans an equal amount of monthly API credits for one API organization. It matches the benefit Anthropic announced earlier in October 2026 for Max and Team plans, where the credits expire. Willison holds both subscriptions and says he may ship public demos funded by the credits.

ChatGPTOpenAI API
OpenAIAnthropicSimon Willison

ai-policyΒ· Published and added 29 Oct 2026

bleepingcomputer.comarticleπŸ›‘οΈ Security

Fake crypto app on Apple App Store linked to $23K wallet theft

Padre Terminal, a fake Solana meme-coin trading app on the Apple App Store, drained about $23,000 from 27 Solana wallets after users imported private keys, per blockchain investigator Iris. The app has been removed, but the drainer stayed active; Iris traced funds to two attacker wallets holding 229.66 SOL. Iris also flagged four other suspected impersonator apps (Axiom Pro: Focus, GMGN AI, HyperTerminal-HyperliquidTools, Pump Fun Tokens & Analitycs).

iOSSolanaUSDC
Padre TerminalIrispump.fun+8

Mobile Security, Threat IntelΒ· Added 30 Oct 2026, published 29 Oct 2026

bleepingcomputer.comarticleπŸ›‘οΈ Security

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

UAT-11473, a newly tracked APT cluster, exploits CVE-2026-20127, a max-severity authentication bypass in Cisco Catalyst SD-WAN Controllers (patched February 2026), to deploy the KeyDrift malware framework. KeyDrift's PolyFlame runs inside vdaemon processes, and LittleFilch hooks SSL_read to extract AES-256 IPsec keying material, saved to /var/tmp/vdaemon.bin and sent over UDP. Targets include space, defense and policy organizations. Talos sees overlap with Volt Typhoon's Silent Train network but makes no definitive link.

Cisco Catalyst SD-WAN
CVE-2026-20127UAT-11473UAT-8616+8

Threat Intel, Malware & REΒ· Added 30 Oct 2026, published 29 Oct 2026

latent.spacearticle🧠 AI

Can Frontier Models See Past a Decoy? Elorian Tests Visual Reasoning

DecoyCount is a benchmark from Elorian and Mercor with 1,660 items that tests whether models count objects or fall back on visual shortcuts. Frontier models scored below 50%: GPT-6 Astra led with 43.17%, ahead of Gemini-3.8-flash (32.71%), Qwen3.8-max (28.31%) and Claude-Fable-5.1 (25.22%). CEO Andrew Dai says Elorian's Glimpse model scored 50.48% in a single internal run without tools, and contrasts visual reasoning with world models such as Atlas and Genie 4.

vision-language model
ElorianGlimpseDecoyCount+17

evals, multimodal, modelsΒ· Added 28 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🧠 AI

Decompose, Estimate, Select: Coverage-Aware Context Construction for Long-Form RAG

Decompose, Estimate, Select is a coverage-aware retrieval pipeline for long-form RAG. It splits a query into subquestions, ranks candidates with a coverage-trained bi-encoder, predicts a document-by-subquestion coverage matrix with a cross-encoder, and picks documents by greedy maximum-marginal coverage. On TREC RAG 2024, Ξ±-nDCG@10 rises from 0.625 to 0.702 (gold-nugget bound 0.718). A grounded self-feedback loop raises V_strict by 0.086 over two passes.

RAGbi-encodercross-encoder+1
TREC RAG 2024Ξ±-nDCG@10V_strict

llm-apps, researchΒ· Added 31 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🧠 AI

M-PFT: Angular Margin for Calibrated Prompt-Tuning of Fine-Tuned Vision-Language Models

M-PFT is an angular-margin method for prompt tuning of vision-language models that fixes base-to-novel dual miscalibration (underconfidence on base classes, overconfidence on novel classes). It adds two losses: minimizing the maximum cosine similarity between tunable class embeddings, and minimizing angular distance to each zero-shot embedding. Tests on 9 prompt-tuning methods and 15 datasets show lower novel-class calibration error at comparable accuracy and negligible overhead.

vision-language modelprompt tuning
arXiv

research, multimodal, trainingΒ· Added 31 Oct 2026, published 29 Oct 2026

opensourcemalware.comtalkπŸ›‘οΈ Security

The OpenSourceMalware Show #27

The OpenSourceMalware Show #27 (28 October 2026) is a podcast episode with transcript. It covers the Brotli decoder bug (CVE-2026-111497) vendored in C code across Python, Rust and PHP, and how to find copies via decode.c. It also covers the LiteLLM v1.107.0 compromise from an unrevoked admin key and a relaxed release control, and the MALFEX npm campaign hiding payloads in PNG-header files, plus an AGENTS.md lure and DPRK fake fonts in TTF/OTF.

BrotliLiteLLMnpm+3
CVE-2026-111497Node2ShellPHP2Shell+10

Supply Chain, Threat Intel, DevSecOpsΒ· Published and added 29 Oct 2026

huggingface.coarticle🧠 AI

Introducing AnySpeechRecognizer and AnyDecisionModel: Open Models for Speech and Decisions on Apple Platforms

AnySpeechRecognizer and AnyDecisionModel are two Swift packages from Hugging Face. The first mirrors Apple's SpeechAnalyzer API with swappable engines (NVIDIA Parakeet, Alibaba Qwen3-ASR on Core ML) and adds Sortformer speaker diarization. The second returns typed yes/no, choice and score answers with probabilities via MLX, Core AI, llama.cpp, Jev or Ollama. The post gives M4 Max timings, model sizes and calibration options.

SwiftCore MLMLX+10
AnySpeechRecognizerAnyDecisionModelAnyLanguageModel+17

multimodal, inference, modelsΒ· Published and added 29 Oct 2026

x.comtool🧠 AI

Big Bull (@BIGBULLapp) on X

clauth is a Rust terminal UI for Claude Code that combines multi-account switching with a live 5h / 7d usage monitor. A fallback chain moves the user off an exhausted account before Claude Code blocks. It supports Pro, Max, Team and Enterprise OAuth accounts and custom API endpoints on Linux, macOS and Windows. The post notes that auto-switching means the tool decides when accounts change.

Claude CodeRustOAuth+4
clauthAnthropic

coding-agents, ai-infraΒ· Added 30 Oct 2026, published 28 Oct 2026

endorlabs.comwriteupπŸ›‘οΈ Security

Endor Labs AI SAST Finds Two Apache Kafka Zero-Days: Unbounded Memory Allocation from Brokers to Kafka Streams | Endor Labs

Endor Labs AI SAST found three unbounded memory allocation flaws in Apache Kafka, fixed under CVE-2026-114349 (DefaultRecord decoder, a ~90-byte compressed batch that kills consumers, brokers and the log cleaner) and CVE-2026-111551 (ListDeserializer and Kafka Streams AssignmentInfo decoding). The post gives code, reproducers and payload bytes. Remediation: upgrade to 4.2.2, 4.3.2 or 4.4.0, set max.decompressed.message.bytes, restrict write and group ACLs, and alert on DeadThreadCount.

Apache KafkaKafka StreamsJava+1
CVE-2026-114349CVE-2026-111551denial of service+4

AppSecΒ· Published and added 28 Oct 2026

github.blogarticle🧠 AI

GitHub Universe 2026: Evolving every layer of the stack

GitHub Universe 2026 recap in which GitHub presents its agentic software delivery vision and new Copilot products: the Copilot app, Copilot Fusion multi-model routing, Copilot projects, session continuity, automations that learn from outcomes, and code review Max. GitHub Enterprise customers can use all Copilot features without a separate subscription. GitHub also reports added capacity, a multi-region Azure migration and a redesigned Git architecture.

GitHub CopilotGitHubGit+4
MicrosoftJay ParikhCopilot Fusion+4

coding-agents, agents, ai-infraΒ· Added 29 Oct 2026, published 28 Oct 2026

surgehq.aiarticle🧠 AI

Dayjob: Tax – evaluating AI agents on 50 professional tax assignments

DAYJOB: Tax is Surge AI's benchmark of 50 professional tax assignments across eight practice areas, with 1,789 workspace files such as returns, K-1s, ledgers and IRS notices. Claude Sonnet 5.5 leads at a 10.8% pass rate (pass@1, 95% rubric threshold), ahead of Claude Fable 5.1 (9.6%) and Claude Opus 5.5 (9.2%). Case studies show agents missing deadlines and unverified marital-status assumptions.

Claude
Surge AIDAYJOBDAYJOB: Tax+7

evals, agentsΒ· Added 29 Oct 2026, published 28 Oct 2026

latent.spacearticle🧠 AI

[AINews] Anthropic ends Coding Interviews: "Hunger beats tenure"

AINews issue of 28 October 2026 from Latent Space. It leads with Felix Rieseberg's post on why Anthropic dropped coding interviews ("Hunger beats tenure"). It then recaps Genie 4, Axiom's Lean formalization of CFSG, claimed ETH refutations by OpenAI and Anthropic, Artificial Analysis Index v5, FrontierCode 2.0, Liquid LFM3, the Qwen3.8 phone-home dispute, and Anthropic's S-1. Reddit recaps are included; the page was truncated before the end.

LeanQwen3.8-27BvLLM+11
AnthropicFelix RiesebergGoogle DeepMind+40

models, evals, ai-policyΒ· Published and added 28 Oct 2026

wiz.ioarticleπŸ›‘οΈ Security

PHP2Shell: Exploitation Attempts and Remediation Trends

Wiz Research follow-up on PHP2Shell (CVE-2026-109618, CVE-2026-109619) after the 21 October 2026 disclosure. Honeypot data shows two variants of an open source exploit kit, one stopped by post_max_size and the other by failed memory leaks and worker pinning, plus PHP2Shell-branded tools that rely on session poisoning and LFI. Daily exposed vulnerable machines fell about 67%.

PHPApacheRoundcube
CVE-2026-109618CVE-2026-109619PHP2Shell+7

Threat Intel, Offensive SecurityΒ· Published and added 27 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

HPE Patches Dozens of Critical Flaws in Networking Products

HPE released patches for 72 vulnerabilities in the AOS-8 and AOS-10 wireless operating systems of its Aruba networking products, including 33 critical flaws. Eight max-severity bugs (CVE-2026-79844 to CVE-2026-79851) allow unauthenticated RCE, authentication bypass and arbitrary command execution. Fixes are in AOS 8.10.0.24, 8.13.3.1, 10.4.1.14, 10.7.2.7 and 10.8.1.2. HPE reports no exploitation in the wild and advises restricting management interfaces to a dedicated VLAN.

HPE Aruba NetworkingAOS-8AOS-10
CVE-2026-79844CVE-2026-79845CVE-2026-79846+5

Cloud & InfraΒ· Published and added 27 Oct 2026

arxiv.orgpaper🧠 AI

AxisQ: Depth-Adaptive Channel--Frequency Quantization for Camouflaged Object Detection

AxisQ is a post-training quantization framework for camouflaged object detection (COD) that allocates activation bits by feature depth. It uses the channel domain for shallow features and the local-frequency domain for deep features, under a fixed per-layer average bit budget. It adds a boundary-aware Hessian approximation for reconstruction. On CAMO at W2A2, weighted F-measure improves 12.7% for CFRN and 33.3% for CamoFormer-P over the strongest baselines.

CNNTransformer
AxisQCFRNCamoFormer-P+1

research, inference, multimodalΒ· Added 28 Oct 2026, published 27 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Measuring Users' Security and Privacy Concerns About Third-Party Community Bots on Discord

Measurement study of 23,102 third-party Discord bots and 183,142 user reviews (2021-2026, 49 languages). A fine-tuned DeBERTa classifier plus manual validation yields 8,832 security and privacy reviews, mapped to a 31-theme taxonomy; Data Sharing (30.5%) and Data Collection (16.2%) dominate. Permission count and admin status correlate only weakly with user concerns. The authors build BotLens, an MCP-server auditing framework with six tools.

DiscordModel Context ProtocolLLM
BotLensDeBERTa

other, AI SecurityΒ· Added 28 Oct 2026, published 27 Oct 2026

decrypt.coarticle🧠 AI

OpenAI Launches GPT-6.1 Terra, Its Half-Good AI Model at Half the Price

GPT-6.1 Terra is OpenAI's mid-tier model, released 26 October 2026 with standard API prices 50% below GPT-5.6 Terra. At low reasoning effort its factual error rate on an internal test fell from 53.6% to 16.7%, and at maximum effort it solved 50.3% of Terminal-Bench 4.0 tasks versus 21.5%. It is available in ChatGPT Work and Codex and as gpt-6.1-terra. All figures are OpenAI's own.

ChatGPTCodexOpenAI API
OpenAIGPT-6.1 TerraGPT-5.6 Terra+11

models, evalsΒ· Published and added 26 Oct 2026

x.comthread🧠 AI

The SI Maximalist (@thesimaximalist) on X

The SI Maximalist posts on X that OpenAI says GPT-6.1 Terra matches GPT-6 Astra on Agents' Last Exam, OpenAI's test of workplace software tasks, at one tenth of the token price. The model is available in ChatGPT Work, Codex and the API. The post only relays OpenAI's claim and gives no benchmark scores, exact prices or method.

ChatGPTCodexOpenAI API
OpenAIGPT-6.1 TerraGPT-6 Astra+2

models, evalsΒ· Added 27 Oct 2026, published 26 Oct 2026

minimaxir.comarticle🧠 AI

OpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why?

Max Woolf's post (minimaxir.com, October 2026) gives a dated timeline of OpenAI and Anthropic price cuts from June to September 2026, including GPT-5.6 Luna down 80%, Opus 5.5 at $4 / $20 / $0.20 and GPT-6.1 Sol at $2 / $10 / $0.10. It argues the cuts come from commodity models, open-weight competition (DeepSeek V4.1 Flash, Kimi K3.1 Pro, 29 OpenRouter providers) and possibly IPO positioning. It notes cache reads make up 96-99% of coding-agent token spend.

OpenRouterCodexClaude Code+3
OpenAIAnthropicGPT-5.6 Sol+16

ai-policy, coding-agents, modelsΒ· Added 26 Oct 2026, published 25 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Maximum-Likelihood Decoding of Gabidulin Codes Is NP-Hard Even in Dimension One

Philippe Gaborit proves that maximum-likelihood decoding of Gabidulin codes is NP-hard even for dimension one: deciding rank distance at most n-2 from the code {Ξ»g} is NP-complete. The reduction is deterministic, so Rank Syndrome Decoding and Rank Minimum Distance for F_{q^m}-linear codes are NP-complete under deterministic reductions, where the earlier reduction was randomized. It goes through a new pivot problem, Twisted Square Membership.

Gabidulin codes
Philippe GaboritGuruswami-Vardy theoremTwisted Square Membership+2

otherΒ· Added 26 Oct 2026, published 25 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

A Kelsey–Kohno Attack Variant against SHA-2 Message Digests in HSS/LMS and XMSS

Falko Strenzke's ePrint 2026/2635 presents a multi-target second-preimage attack on message hashing in HSS/LMS and XMSS with SHA-256 and SHA-256/192. It herds chaining states from many collected signatures into one state, defeating the key and leaf-index prefix. With 2^64 signatures, SHA-256 cost falls from 2^256 to about 2^166 (2^156 at maximal message length). SHAKE256 parameter sets are unaffected.

HSS/LMSXMSSSHA-256+2
Kelsey–Kohno herding attackKelsey–Schneier expandable messagemulti-target second-preimage attack+2

otherΒ· Added 26 Oct 2026, published 25 Oct 2026

x.comarticle🧠 AI

huiwenhan (@huiwenhan) on X

PRAXO-CORE 2.5.0 is a Go agent kernel that owns model calls, tool authorization, context, checkpoints, events and human-in-the-loop decisions, and leaves graph execution, memory storage and tenant policy to RHEOVELA or the host product. The release adds pkg/conformance, with checks for VFS, memory, sandbox, event, policy, model and tool contracts. It also adds stricter Windows path rejection and a plugin trust/SBOM handoff, and it states which adapters are only offline-tested.

GoOllamaModel Context Protocol+6
PRAXO-CORERHEOVELARHEOVELA-ee+4

agents, ai-infraΒ· Added 27 Oct 2026, published 25 Oct 2026

arxiv.orgpaper🧠 AI

Sliding Networks: A Family of Residual Structures Preserving Feature Learning and Feature Diversity

Sliding Networks is a family of residual network structures with a joint width and depth scaling recipe that keeps both locally maximal feature learning and feature diversity in the residual stream. The key quantity is the ratio N_flat/(N_sharp L) tending to a constant alpha, and Half Copy correlated initialization can relax the shape constraints. Residual-MLP experiments support an SDE limit, but language-model experiments show performance differences under regrouping at fixed parameter count.

Transformer
arXiv

researchΒ· Added 27 Oct 2026, published 24 Oct 2026

arxiv.orgpaper🧠 AI

Learning What to Share: Expert Specialization for Time-Series Forecasting

Persistent Closed-Form Routing (PCR) is a plug-and-play method for multivariate time-series forecasting. It alternates exact conditional estimation of channel-specific mixture weights with gradient training of low-rank residual experts around a frozen pretrained forecaster. Across eleven datasets and three backbones, PCR-K4 cuts dataset-balanced MSE by 3.86-14.25% and beats competing specialization methods with fewer trainable parameters. The paper also introduces GalaxyTS, a synthetic dataset with exact shared and channel-specific references.

Mixture of ExpertsTransformer
GalaxyTSPCRPCR-K4+1

researchΒ· Added 27 Oct 2026, published 24 Oct 2026

decrypt.coarticleπŸ›‘οΈ Security

Sweden's Government Offices Block ChatGPT and Claude, Keep Microsoft Copilot

Sweden's Government Offices will block ChatGPT and Claude on staff computers from 26 October 2026 and leave Microsoft Copilot as the only approved AI tool, citing information security. Digitalisation director Mikael Wettercrantz said unvetted AI use had involved sensitive inputs and poorly handled outputs. The Tax Agency and National Board of Institutional Care have similar bans, and the European Parliament disabled AI features in February 2026. Whether Copilot has Claude models enabled is unconfirmed.

ChatGPTClaudeMicrosoft Copilot
Swedish Government OfficesMikael WettercrantzSveriges Radio+5

GRCΒ· Published and added 24 Oct 2026

decrypt.coarticle🧠 AI

Sweden's Government Offices Block ChatGPT and Claude, Keep Microsoft Copilot

Sweden's Government Offices will block ChatGPT and Claude on staff computers from 26 October 2026 and keep Microsoft Copilot as the only approved AI tool, after a security review. Director of digitalisation Mikael Wettercrantz cites sensitive data entered into open services and tools used without a formal contract. The Tax Agency and the National Board of Institutional Care have similar bans. The article notes Copilot can include Claude models, and the Government Offices has not said whether that is enabled.

Microsoft CopilotChatGPTClaude
Sweden's Government OfficesMikael WettercrantzSveriges Radio+7

ai-policyΒ· Published and added 24 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Enhancing LLM-Based Vulnerability Detection via Representation-Aware Logical Ensemble

RALE (Representation-Aware Logical Ensemble) is a method for detecting vulnerabilities in C source code with LLMs trained on different code representations: raw source, Abstract Syntax Trees and Control Flow Graphs. The authors show the representations suit different vulnerability classes, and combine the models with explicit logical rules and majority voting. Single-representation models reach up to 73% F1, while the ensemble reaches 78%.

LLMC
RALERepresentation-Aware Logical EnsembleAbstract Syntax Tree+1

AI Security, AppSecΒ· Added 28 Oct 2026, published 24 Oct 2026

arxiv.orgpaper🧠 AI

Enhancing LLM-Based Vulnerability Detection via Representation-Aware Logical Ensemble

RALE (Representation-Aware Logical Ensemble) is a method for LLM-based vulnerability detection in C code. The authors train LLMs on raw source code, Abstract Syntax Trees and Control Flow Graphs, and find each representation works best for certain vulnerability classes. Combining the models with explicit logical rules and majority voting raises F1 from at most 73% for a single model to 78%, with gains in accuracy, precision and recall.

LLMstatic analysis
arXivRALE

research, trainingΒ· Added 28 Oct 2026, published 24 Oct 2026

coindesk.comarticle🧠 AI

Block's new voice AI sounds eerily human, sparking awe and scam fears

Dessa is a voice AI model from Block, trained from scratch on human speech only, with no text stage. It listens while speaking, so it handles interruptions, laughter and tone changes. Block says it trained on one Nvidia GB200 NVL72 system and that it runs locally on a MacBook Pro with M4 Max or better. Model size, benchmarks and release date are undisclosed. Early access goes to a small group of AI safety researchers. Reactions split between praise and scam fears.

Nvidia GB200 NVL72MacBook ProApple M4 Max
BlockDessaJack Dorsey+7

models, multimodalΒ· Published and added 24 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

Weekly Research Brief: PHP Vulnerability; Objections to OKX-ICE’s Stock Tokenization; Solana Alpenglow Ships

Galaxy Research's weekly brief includes a section on PHP2Shell, two decade-old PHP remote code execution bugs affecting versions back to 5.4, patched in an emergency release. It reports an Amazon honeypot exploit attempt four days before disclosure, thousands of attempts in the 10 hours before the patch per Cloudflare's Matthew Prince, and NSA and FBI offline advice. The author argues the bugs were found with GPT-5.6 Sol and that defence must become agentic. It also lists the week's other incidents, including a CVSS 10.0 GitLab bug and eMudhra's guessable private keys.

PHPWordPressOpenAI+3
PHP2ShellPatch the PlanetCalif+7

Threat Intel, AI SecurityΒ· Added 24 Oct 2026

x.comadvisoryπŸ›‘οΈ Security

Xavier Rivera (@XavierRiveraX) on X

CVE-2026-115560 is a PHP code execution bug reported two days after the PHP2Shell emergency patches. The post says those releases do not fix it and no emergency fix is planned. Only apps that switch session.serialize_handler to php via ini_set() before session_start() are exposed. The mitigation is session.upload_progress.enabled=0, which also covers anyone who applied it for the 21 October advisory. The post gives no technical root-cause detail.

PHP
CVE-2026-115560PHP2Shell

AppSecΒ· Added 25 Oct 2026, published 23 Oct 2026

latent.spacearticle🧠 AI

[AINews] Black October

AINews issue for 21-22 October 2026, built from 12 subreddits and 544 Twitter accounts. It leads with "Black October", a 48-hour run of AI-found vulnerability disclosures (PHP2Shell, a GitLab CVSS 10 flaw, a LiteLLM 1.107.0 password stealer, eMudhra CA keys). It also covers MiniMax M3.1 Flash, Carbon-X and Flint releases, Artificial Analysis coding-agent and CritPt v2 results, and a METR/Redwood audit of OpenAI monitoring.

vLLMLiteLLMPHP+14
Latent SpaceAINewsAnthropic+43

models, evals, ai-safetyΒ· Published and added 23 Oct 2026

arxiv.orgpaper🧠 AI

SCI-AGENT-EXAM: Benchmarking Agents on Scientific Research Tasks

SCI-AGENT-EXAM is a workflow-oriented benchmark of 120 expert-curated tasks across 11 scientific fields and 7 task types from the Scientific Workflow Task Taxonomy (SWTT). Tasks need both executable and textual artifacts, scored by programmatic checks plus an expert-calibrated LLM judge. Ten frontier agents were tested: GPT-6 Astra scored highest at 80.9, but only 26.0% of its runs passed the 0.95 success threshold.

LLM
SCI-AGENT-EXAMScientific Workflow Task TaxonomyGPT-6 Astra+1

evals, agents, researchΒ· Added 26 Oct 2026, published 23 Oct 2026

decrypt.coarticle🧠 AI

Major Banks Find Rogue AI Agents Inside Customer Accountsβ€”And They’re 'Horrified'

Decrypt summarizes an Axios report that major U.S. banks are finding unauthorized third-party AI agents inside customer accounts, often using the customer's own credentials. Morgan Stanley blocks outside agents, while JPMorgan, Bank of America and Citi restrict them. Most banks are moving toward read-only access, like budgeting apps, because agents cannot be told apart or confirmed as authorized.

Morgan StanleyJPMorganBank of America+5

ai-policy, agentsΒ· Published and added 22 Oct 2026

x.comthreadπŸ›‘οΈ Security

Nagli (@galnagli) on X

Tweet by Gal Nagli (galnagli) saying a Gemini model turned the GitLab advisory for CVE-2026-110264 into a working heap exploit in 17 minutes, with the full chain done in about another hour. The flaw is a CVSS 10.0 unauthenticated RCE on self-managed GitLab servers, affecting 12 years of releases, found by joaxcar. The post links a The Hacker News article and gives no technical details of the exploit.

GitLabGeminiCVSS
CVE-2026-110264Gal Naglijoaxcar+1

Offensive Security, AI Security, AppSecΒ· Added 23 Oct 2026, published 22 Oct 2026

arxiv.orgpaper🧠 AI

IFC-MCQ: Automatically Generating Multiple-Choice Benchmarks for Evaluating LLM Agents on IFC Data Retrieval

IFC-MCQ is a method that automatically generates multiple-choice benchmarks from Industry Foundation Classes (IFC) building-model files, so answers can be graded by exact option-set match instead of human or LLM review. Its taxonomy has 15 categories and 36 subtypes in four groups, with answer keys from the file and distractors from file values or rules. Two agentic setups, tool-based and code-based retrieval, showed category-specific failures and variation by IFC model and interface.

LLMIndustry Foundation Classes
IFC-MCQarXiv

evals, agents, researchΒ· Added 23 Oct 2026, published 21 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

β€˜Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Tracebit's research "Making attacking agents pay" describes nine "context bombs", hidden prompts planted in a target that misdirect attacking AI agents with fake targets and endless problems. They stopped all attacks by GPT 5.6 Cyber, Kimi K3, Qwen 3.8 Max and DeepSeek V4 Pro, cut GPT-6 Astra successes by 54% and Claude Opus 5 successes by 91%. The best bomb was a fake pen test report; surviving attacks cost 23x more.

GPT-6 AstraKimi K3Qwen+3
TracebitMaking attacking agents paycontext bombs+4

AI Security, Blue Team & DetectionΒ· Published and added 21 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations

Paper on prompt injection delivered through forensic evidence, where the seized device's contents are attacker-controlled and the examiner must read them. It extends the anti-forensic model to cover manipulation of the reasoning layer and gives a taxonomy (objective, technique, payload location, concealment). Three proof-of-concept attacks on an LLM-assisted analysis pipeline change a reported conclusion, write attacker-chosen content to the analyst workstation, and trigger outbound network traffic. Mitigations are proposed.

LLM
indirect prompt injectionprompt injectionanti-forensics+1

AI Security, Blue Team & DetectionΒ· Added 24 Oct 2026, published 21 Oct 2026

arxiv.orgpaper🧠 AI

Monitorability Is Trainable: Post-Training for Chain-of-Thought Monitorability

Monitorability Is Trainable proposes an unsupervised post-training objective that maximizes mutual information between a model's chain of thought and its output. On three model organisms with degraded CoT (from compression, monitor optimization, and synthetic-document generalization), it recovers most or all lost monitorability. On undegraded policies it improves CoT monitor and activation probe prediction of unsafe behavior and raises consequential reasoning.

LLM
arXiv

ai-safety, research, trainingΒ· Added 23 Oct 2026, published 21 Oct 2026

aikido.devarticleπŸ›‘οΈ Security

Software supply chain security best practices for 2026

Aikido's guide to software supply chain security controls for 2026, tied to real incidents. It covers a 48-hour package cooldown, ignore-scripts, lockfile enforcement, SHA and digest pinning, scoped tokens, FIDO2, developer endpoint protection, extension allowlists, agent sandboxing, MCP server vetting, slopsquatting, signed SBOMs and rotation drills. Examples include the March 2026 axios compromise and the March 2025 tj-actions/changed-files attack.

npmpnpmGitHub Actions+3
tj-actions/changed-filesCanisterWormGlassWorm+7

Supply Chain, DevSecOps, AI SecurityΒ· Added 22 Oct 2026, published 21 Oct 2026

hirundo.ioarticleπŸ›‘οΈ Security

Qwen3-Coder writes less secure code when told it's for a US persona

Hirundo's case study on Qwen3-Coder-30B-A3B-Instruct, tested with the BaxBench SecretStorage task in Flask. Apps for a US defense contractor were 19% more likely to be hackable than for a Chinese one, and Hong Kong democracy group apps leaked secrets 28% more often. A security instruction did not close the gap, but Hirundo's weight-edited "Westernized" model did. Semgrep with PurpleLlama rules flagged 2 of 1,840 apps; BaxBench attacks broke 1,144.

QwenDeepSeekCrowdStrike+3
HirundoBaxBenchBooz Allen+5

AI Security, AppSecΒ· Added 22 Oct 2026, published 21 Oct 2026

hirundo.iowriteup🧠 AI

Qwen3-Coder writes less secure code when told it's for a US persona

Hirundo case study on Qwen3-Coder-30B-A3B-Instruct using the BaxBench SecretStorage task. Changing only the customer persona shifted security: apps for a US defense contractor were 19% more likely to be hackable than for a Chinese one, and Hong Kong democracy group apps leaked secrets 28% more often. Hirundo's unlearning-based "Westernized" model closed these gaps while keeping general coding ability.

Qwen3-Coder-30B-A3B-InstructBaxBenchHugging Face+5
HirundoQwen3-CoderQwen+12

evals, models, ai-safetyΒ· Added 22 Oct 2026, published 21 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Hirundo tested Alibaba's Qwen3-Coder-30B-A3B-Instruct by having it build 1,840 web apps for a US defense contractor, a Chinese defense contractor, a Hong Kong advocacy group and a neutral club. BaxBench broke into 1,144 apps; 70% of US contractor apps were hackable versus 59% for the Chinese one, and 74% when told to write secure code. Hirundo says removing the model's CCP alignment from its weights closes the gap.

QwenSemgrepLLM
HirundoBaxBenchPurpleLlama+5

AI Security, AppSecΒ· Published and added 21 Oct 2026

securityweek.comarticle🧠 AI

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Hirundo tested Alibaba's Qwen3-Coder-30B-A3B-Instruct by having it build 1,840 web apps for a US defense contractor, a Chinese defense contractor, a Hong Kong advocacy group and a neutral club, scored with Semgrep, PurpleLlama rules and BaxBench. 70% of apps for the US contractor were hackable versus 59% for the Chinese one, and a security instruction did not close the gap. Hirundo says its unlearning of CCP alignment removed the bias.

Qwen3-CoderSemgrepLLM+1
HirundoAlibabaQwen+9

evals, ai-safety, trainingΒ· Published and added 21 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

SoK: Design-Level Backdoors in Block Ciphers Constructions, Detection, and Key Recovery

SoK on design-level backdoors in block ciphers. It places four published designs (Rijmen and Preneel, Paterson, Bannier and Filiol, Peyrin and Wang) in one taxonomy and gives a sound algorithm that recovers a partition trapdoor from S-box tables. It attacks KG-DES, BEA-1 and LowMC-M: KG-DES key recovery takes minutes, and the LowMC-M MALICIOUS backdoor yields the key from 35 to 409 queries. Trapdoors hidden in linear layers leave no trace, so the authors recommend deriving constants verifiably from a public seed.

KG-DESBEA-1LowMC-M+2
Rijmen and PreneelPatersonBannier and Filiol+5

otherΒ· Added 24 Oct 2026, published 21 Oct 2026

arxiv.orgpaper🧠 AI

Protection Is Not One Event: A Survey of RAG Protection Research by Measured Endpoint

Protection Is Not One Event is a survey and human-coded evidence map of 118 RAG defense papers, grouped by measured endpoint into a seven-family taxonomy (kappa=0.867 across 32 annotators). It finds that only 17.8% of studies use content disclosure as their primary endpoint, and that most evaluations use general QA data and non-adaptive attacks. In a testbed on Qwen3-8B, an 8-gram guard cut copying to 0.0%, yet a three-query adaptive attacker still recovered 48.3% of hidden facts. Taxonomy, dataset, coding protocols and testbed are released.

RAGLLMQwen3
Qwen3-8BarXiv

research, evals, llm-appsΒ· Added 24 Oct 2026, published 21 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Protection Is Not One Event: A Survey of RAG Protection Research by Measured Endpoint

Survey and human-coded evidence map of 118 RAG defense papers, organized by measured endpoint across a seven-family taxonomy (content disclosure, formal privacy proxies, access control, corpus-use detection, pipeline integrity). Only 17.8% of studies use disclosure or reconstruction as the primary endpoint, and most use non-adaptive attacks on general QA data. A testbed shows a normalized 8-gram guard cuts 20-token copying to 0.0%, yet a three-query adaptive attacker recovers 48.3% of hidden facts on Qwen3-8B.

QwenLLM
prompt injection

AI SecurityΒ· Added 24 Oct 2026, published 21 Oct 2026

en.cryptonomist.charticle🧠 AI

GPT-6 legacy programming improves as GPT-6.1 Sol scores 97.9% on COBOL test

OpenAI reports gains in GPT-6 family coding for COBOL, Fortran and Visual Basic on two evaluations. On MultiLangBench (build a SQLite-compatible database engine from scratch), GPT-6 Astra averages 87.4% across 20 languages at maximum reasoning effort, versus 37.9% for GPT-5.6 Terra. On a COBOL migration benchmark, GPT-6.1 Sol reaches 86.6% at low effort and 97.9% at higher effort, versus 5.4% for GPT-5.6 Sol.

SQLiteC++Rust+1
OpenAIGPT-6 AstraGPT-6.1 Sol+4

models, evals, coding-agentsΒ· Published and added 20 Oct 2026

bankless.comarticleπŸ›‘οΈ Security

ZachXBT Flags $20M XMR Laundering Ring on Hyperliquid

FreedomXMR (FXMR) is a centralized Monero swap service on Hyperliquid Core that appeared in August 2026. ZachXBT's manual review of every inflow above $10K traced over $20M, more than 87% of volume, to ransomware, malware and exploits including DCENT Wallet, Fetch.ai, Axelar and Gamdom. The admin sources XMR liquidity from KuCoin and won the FXMR ticker in an auction for 518.28 HYPE.

HyperliquidMonero
ZachXBTFreedomXMRDCENT Wallet exploit+7

Threat Intel, BlockchainΒ· Published and added 20 Oct 2026

latent.spacearticle🧠 AI

[AINews] not much happened today

AINews issue for 16 to 19 October 2026 from Latent Space, a digest of Twitter and Reddit AI news. It covers DeepSeek V4.1 Flash 1017 (552B total, 16B active MoE, AA Intelligence Index 45), MiniMax M3.1 Flash, Mercury 3, Meta Muse, Google's HarnessΒ², vLLM v0.32.0 and a Terminal-Bench audit. Only the first 40,000 of 47,045 characters were available.

Mixture of ExpertsGGUFllama.cpp+12
Latent SpaceDeepSeekDeepSeek-V4.1-Flash+42

models, evals, inferenceΒ· Added 30 Oct 2026, published 20 Oct 2026

latent.spacearticle🧠 AI

[AINews] not much happened today

AINews issue covering 16-19 October 2026 from Latent Space, summarising 12 subreddits and 544 Twitter accounts. It leads with DeepSeek V4.1 Flash 1017 (552B total, 16B active MoE, 1M context, MIT license, AA Intelligence Index 45), plus MiniMax M3.1 Flash, Mercury 3 and Meta Muse. It also covers vLLM v0.32.0, InferenceX results, HarnessΒ² and Terminal-Bench audit findings.

Mixture of ExpertsvLLMSGLang+11
Latent SpaceDeepSeek-V4.1-FlashDeepSeek+43

models, evals, inference, agentsΒ· Published and added 20 Oct 2026

huggingface.coarticle🧠 AI

MPS in PyTorch 2.15

PyTorch 2.15 MPS release post from the Hugging Face PyTorch team, covering the Apple silicon backend. It adds float8_e4m3fn tensors with F.scaled_mm, a native grouped matmul that speeds MoE decoding 5 to 6.5x (Qwen3.6-35B-A3B from 9.4 to 61.3 tokens/s on an M3 Ultra), and an 8x faster softmax. Wan2.2 VAE decode peak memory falls from 270 GiB to 8 GiB. It previews 2.16 attention on Metal.

PyTorchMetalMPSGraph+9
Hugging FaceAppleQwen3.6-35B-A3B+6

inferenceΒ· Published and added 20 Oct 2026

arxiv.orgpaper🧠 AI

OpenVLHarness: Real World Visual Agentic Tool-Use with Multimodal Memory

OpenVLHarness is a multimodal reasoning harness for MLLMs built on a capability layer (task-level tool interfaces plus evidence rendering) and persistent multimodal memory that stores images, structured data and web references as addressable artifacts. A coding interface runs generated programs over stored data. Across 22 benchmarks and eight backbones it adds 9.7-12.6 points over no-tool baselines, and GPT-6 Luna at medium effort beats Codex and Visual Sketchpad at maximum effort using at most 37% of their tokens.

vision-language modelQwen3-VLCodex+1
OpenVLHarnessKimi K3GPT-6 Astra+3

agents, multimodal, researchΒ· Added 21 Oct 2026, published 19 Oct 2026

arxiv.orgpaper🧠 AI

Where is Physical RSI capability from? An Observational Scaling Law of LLM-as-policy

The paper introduces PhysRSI-eval, a five-axis metric for physical recursive self-improvement: first-attempt performance, efficiency, success, budget and improvement from failure. Several VLMs are tested on 18 manipulation tasks under a fixed interaction budget. It proposes the Physical Barrel Hypothesis and studies observational scaling. Workspace interventions show that removing history lowers late-round success, while frozen workspaces still help on unseen layouts.

vision-language modelLLM
PhysRSI-evalPhysical Barrel HypothesisarXiv

research, evals, multimodalΒ· Added 21 Oct 2026, published 19 Oct 2026

arxiv.orgpaper🧠 AI

ASTOR: Benchmarking and Improving Autoformulation for Soft-Constraint Optimization with a Formal Grammar

ASTOR is an inference-time framework that has an LLM map a natural-language decision problem to a grammar-guided abstract syntax tree, then deterministically compiles it into executable optimization code. The paper also introduces SoftOR, a benchmark of natural-language problems with soft constraints. On SoftOR, ASTOR has the best aggregate accuracy among comparable single-request and multi-agent LLM methods, and it stays competitive on hard-constraint-only autoformulation benchmarks.

LLM
ASTORSoftORarXiv

research, evalsΒ· Added 21 Oct 2026, published 19 Oct 2026

arxiv.orgpaper🧠 AI

Assisted Turbulence Modeling via Data Assimilation and Machine Learning for Turbomachinery Flows

This paper presents a hybrid framework for axial compressor flow that couples a Multi-Fidelity Ensemble Kalman Filter (MFEnKF) with machine learning. The filter merges PIV experiments with steady RANS and unsteady hybrid RANS/LES simulations. A neural network trained on the enriched data predicts Navier-Stokes volume forcing terms from velocity, velocity gradients and turbulent viscosity. A Mixture of Experts fixes local errors near blade tips, giving lower experimental discrepancy than baseline RANS.

Mixture of Expertsneural networkMulti-Fidelity Ensemble Kalman Filter+3
MFEnKF

researchΒ· Added 21 Oct 2026, published 19 Oct 2026

wiz.ioarticleπŸ›‘οΈ Security

Supply Chain Zero Days: Closing the Gap Between Publication and Detection

Wiz describes its pipeline that analyzes every new npm package version at publication, combining static analysis, an AI classifier, sandbox dynamic analysis and runtime sensor observation, then pushes IOCs to Wiz Defend before a CVE exists. It cites supply chain attacks rising from about 10% of significant incidents in H2 2025 to 25% in H1 2026, and the Axios compromise (v1.14.1, v0.30.4). The keyv case shows C2 domains fetched from an Ethereum smart contract, which only runtime monitoring caught.

npmWizEthereum
Axioskeyvcacheable+3

Supply Chain, Blue Team & DetectionΒ· Published and added 19 Oct 2026

heymaxwell.aiarticle🧠 AI

Maxwell: A new kind of model that sits between code and hardware

Maxwell (Maxwell's Daemon) is doubleAI's first "code execution model" (CEM). It runs inside a live program, finds bottlenecks and emits faster machine code for the exact CPU or GPU, leaving the source untouched. Each rewrite ships with a machine-checked proof of semantic equivalence, built on a formalisation of Python. Early access is announced; the post gives no benchmark figures.

PythonPyTorchRust+6
doubleAIMaxwellAlan Turing+3

models, inference, researchΒ· Added 20 Oct 2026, published 19 Oct 2026

artificialanalysis.aiother🧠 AI

DeepSeek V4.1 Flash 1017 (Max)

DeepSeek V4.1 Flash 1017 (Max) is an open-weights reasoning MoE model from DeepSeek with 552B total and 16B active parameters, a 1M-token context window, text and image input, and an MIT license. Artificial Analysis scores it 45 on its Intelligence Index (open-weights median 19), at $0.30 input and $1.20 output per 1M tokens, 216 tokens per second, and 210M tokens used in the evaluation. It is available through 10 API providers.

DeepSeekMixture of ExpertsLLM
DeepSeek-V4.1-FlashArtificial AnalysisArtificial Analysis Intelligence Index

evals, modelsΒ· Added 20 Oct 2026, published 19 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars

SecurityWeek summarises CyberSN's Cybersecurity Jobs Report. US cybersecurity postings fell 26.4% to 235,786 for January–September 2026, a four-year low. AI Security Engineer demand rose 268.3% and Cyber Data Scientist demand rose 203.5%. Penetration Tester (-45.9%), Threat Hunter (-40.0%) and CISO (-38.9%) postings dropped, and the CISO figure matches 2024 after an unusually strong 2025. Just under 15% of postings mention AI, peaking at 20.0% in September. The report counts postings by work required (CyberSN's 45-role taxonomy) rather than by job title, and it describes what changed, not why.

CyberSNJobSpikrCyberSN Taxonomy

otherΒ· Published and added 18 Oct 2026

anthropic.compaper🧠 AI

How employment is changing at Anthropic

"How employment is changing at Anthropic" is an October 2026 technical report by Nathan Wilmers, Regina Catipon, Maxim Massenkoff and Peter McCrory. It uses internal employment, agent telemetry, output, survey, calendar and hiring data plus 17 interviews. Junior technical hiring fell from 27% to 9%, agent hours reached six times employee hours by August 2026, and adopters' output rose. Employees increasingly do meta-work managing agents.

ClaudeClaude CodeSlack+1
AnthropicNathan WilmersRegina Catipon+5

ai-policy, agentsΒ· Added 19 Oct 2026, published 18 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

SoK: PIAtlas: Decomposing the Unbounded Prompt Injection Attack Space

PIAtlas is a taxonomy of prompt injection attacks organized by how the injected instruction subverts the model, with six mechanism classes as roots of a technique and sub-technique hierarchy. The authors release PICorpus, a license-clean collection of public prompt-injection datasets, and map thousands of records to PIAtlas under a human-verified protocol. Results show attacks combine several techniques from few mechanisms, agent benchmarks cover only part of the space, and adaptive attackers favor mechanisms that curated benchmarks underrepresent.

LLM
PIAtlasPICorpusprompt injection

AI SecurityΒ· Added 21 Oct 2026, published 18 Oct 2026

github.comrepoπŸ›‘οΈ Security

OWASP/MCP-Security-Testing-Guide

OWASP MCP Security Testing Guide is a living, GPL-3.0 collection treating the Model Context Protocol as a security boundary from user through model, MCP client, MCP server and tool to the target system. It covers threats, secure development, host/client controls, supply chain, enterprise gateways, detection, incident response, taxonomy, public incidents, case studies and review checklists, with 79 tests in Chapter 3 (sections 3.1–3.19). It includes a finding template, and it links the MCP Goat lab for safe practice. It is useful to AppSec, red team and SOC people assessing MCP deployments.

Model Context ProtocolLLM
OWASPMCP Goat

AI Security, AppSecΒ· Added 17 Oct 2026

github.comrepo🧠 AI

alex09x/kyb

KYB (Know Your Business) is a Rust/axum server that stores agent-written knowledge, incident reports and tasks as Markdown files in Git, one commit per change. Search is hybrid: Tantivy BM25 fused by reciprocal rank with local multilingual-e5-small ONNX vectors, and it can query historical versions or "as of" a date. It ships a kyb CLI, a native MCP endpoint (Claude Code, Codex, Antigravity, Gemini CLI), an installable agent skill, token auth with per-write attribution trailers, secret scanning on writes, and a web console. It targets persistent shared operational memory for multi-agent, multi-machine fleets.

RustGitModel Context Protocol+10
KYBAlexander Panasenkomultilingual-e5-small

agents, mcp, coding-agentsΒ· Added 17 Oct 2026

decrypt.coarticle🧠 AI

TokenMaxxing: How to Get the Most Out of Your AI Models

Decrypt guide to "tokenmaxxing" reframed as maximizing value per token rather than burning tokens. It gives tiered tips: pick smaller models for simple jobs, write one clear prompt, start new chats, cap output length, and use free models (beginner); Claude Code commands like /model, /clear, /compact, /context, /mcp, /effort and plan mode (intermediate); and prompt caching via cache_control, 50% batch discounts, and agent budget limits like --max-budget-usd (advanced). Includes context on Meta, Amazon and Uber token leaderboards and spend, a worked invoice-processing example where routing cut cost from $30 to $3.90, and the Jevons paradox in falling token prices.

Claude CodeClaudeChatGPT+8
DecryptAnthropicOpenAI+14

ai-infra, coding-agents, ai-policyΒ· Published and added 17 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

SecurityWeek summarizes Citizen Lab's AdFection report: Israeli ad firm Discover-Tech, via its Controlium platform, used targeted ads in RTB auctions to de-anonymize, fingerprint and zero-click infect devices with Candiru spyware. At least 45 Al Jazeera devices were targeted in 2024–2025, and an exposed server held four billion bid records spanning ~200,000 sites and apps. Google, IAB Europe, Beeswax and Eskimi cut off the firm; Citizen Lab recommends blocking targeted ads at the gateway.

AndroidiOS
CandiruDiscover-TechControlium+9

Threat Intel, Mobile SecurityΒ· Published and added 17 Oct 2026

huggingface.copaper🧠 AI

OpenGCUA: Toward a Fully Open Stack for Generalist Computer Use

OpenGCUA, from Alibaba's MAI-UI team, is an open stack for generalist computer-use agents (GCUAs), where the model chooses how to observe, act and organize work across GUI, accessibility-tree, API and shell interfaces. Its design combines code execution (GUI actions written as programs with loops and branches) with harness-to-model decision transfer. On OSWorld-v2 it raises mean partial score by +19.6 points across eight models, including GPT-6 Astra and Claude Opus 5, and cuts reported steps per task by 53%. The release includes the harness, prompts, evaluation trajectories, a macOS real-device harness, a cross-device SDK and an interactive lab. It also shows large efficiency gaps between models: Qwen3.8-Max used 19.4x the reasoning tokens of GPT-6 Astra on real macOS tasks.

macOSGitHubHugging Face
OpenGCUAMAI-UIAlibaba+6

agents, research, evalsΒ· Added 17 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Zippel: A Language, Compiler, Runtime, and Analyzer for ZK Proof Systems

Zippel is a language, compiler, runtime and analyzer for writing zero-knowledge proof systems in syntax close to the pseudocode in cryptography papers. Its type system and runtime remove vulnerability classes by construction, for example by synchronizing transcripts automatically and applying the Fiat–Shamir transform correctly. Its static analyses check completeness and soundness from the protocol description alone. The authors implemented 35 proof systems, including Sumcheck, Schnorr, KZG, Groth16, Bulletproofs, Hyrax, Spartan, Dory, HyperPlonk, DeKART and Pari. They report performance competitive with hand-written multi-core implementations.

ZippelRust
Fiat–Shamir transformSumcheckSchnorr+9

AppSecΒ· Added 17 Oct 2026, published 16 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

Proving Humanity

Galaxy research report arguing that CAPTCHAs and behavioral bot detection (reCAPTCHAv3, Cloudflare Turnstile) are failing as AI agents reproduce human conduct, for example ChatGPT Agent clicking through Turnstile's checkbox. It shows that Web Bot Auth signatures and Google's AP2 mandates identify the platform or account key but not a distinct person. It proposes reframing "proving humanity" as ensuring every agent traces to one person counted once, covering Sybil, one-person-one-share, accountability and public-count harms. It lays out requirements for a proof-of-personhood credential: strong, private, portable, delegable and accessible. It deliberately does not evaluate specific projects.

CloudflareCloudflare TurnstilereCAPTCHA+3
proof of personhoodSybil attackliar's dividend+4

AI Security, Identity & AccessΒ· Added 16 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

Weekly Research Brief: Ledger’s $91M Theft, Papertrade

Galaxy Research's weekly brief leads with the roughly $91M theft from Ledger devices sold via the reseller CryptoBilis. A hidden hardware implant read the 24-word recovery phrase off the screen during setup and sent it over LTE through an eSIM, leaving the Secure Element untouched so Genuine Check still passed. Galaxy's onchain tally covers 474 victim addresses, 88% of the value moved in one hour on Oct. 9, and about $56.6M was still parked as of Oct. 15, with Tornado Cash use and a $10M Tether freeze. It places the theft alongside the Coldcard weak-seed, Liquid peg-out and Bitget compromises, and ends with buyer and custody advice. The Papertrade and OCC debanking sections are unrelated to security.

LedgerColdcardBitcoin+2
CryptoBilisGenuine CheckTornado Cash+8

Blockchain, Hardware & RF, Supply ChainΒ· Added 16 Oct 2026

galaxy.comarticle🧠 AI

Proving Humanity

Galaxy Research essay arguing that as AI agents become the main way people use the web, the key question shifts from "is this a machine?" to "is a distinct real person behind it, counted once?". It traces CAPTCHA history (distorted text, image puzzles, reCAPTCHAv3 and Turnstile behavioral scoring) and notes ChatGPT Agent passing Cloudflare's checkbox. It reviews Web Bot Auth signatures and Google's AP2 payment mandates, showing both stop at the platform or key and never establish a person. It then covers harms (one-person-one-share abuse, no one to answer for an agent, distorted public counts, collapsing confidence, scaled deception, broken ad economics) and lists the properties a privacy-preserving proof-of-personhood credential needs: strong, private, portable, delegable, accessible.

Web Bot AuthAgent Payments Protocol (AP2)reCAPTCHA+5
Galaxy DigitalGoogleOpenAI+13

agents, ai-policyΒ· Added 16 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

Inside the $91M Ledger Reseller Wallet Theft

Galaxy Research newsletter piece on the roughly $91M theft from buyers of Ledger hardware wallets sold by the reseller CryptoBilis. A hidden component reads the 24-word recovery phrase off the screen during setup and sends it over LTE via an eSIM. The Secure Element and Genuine Check are untouched, so the check passes on tampered units. It traces the drain across 474 victim addresses on Bitcoin, Ethereum and TRON, including 88% of the value moving in one hour on Oct. 9, and the laundering and freezes (Tornado Cash, Tether). It also places the incident among the quarter's other custody and infrastructure failures (Coldcard weak seeds, Liquid, Bitget) and gives buying and operational guidance.

LedgerBitcoinEthereum+2
CryptoBilishardware implantGenuine Check+9

Blockchain, Hardware & RF, Supply ChainΒ· Added 16 Oct 2026

arxiv.orgpaper🧠 AI

Acceptance Is Not Speed: Length Inflation in Training-Free Lossy Speculative Decoding

This paper shows that training-free relaxed (lossy) verification in speculative decoding causes length inflation: completions get longer, mostly through extended reasoning traces, which offsets gains in accepted tokens per round. Across twelve target-drafter pairs, relaxed rules accept 1.34x as many tokens per round but produce 1.54x longer completions. Rules that cut verifier rounds usually lose substantial accuracy, so the authors argue completion length and verifier rounds must be reported.

LLM
arXiv

research, inference, evalsΒ· Added 20 Oct 2026, published 16 Oct 2026

a16zcrypto.comarticleπŸ›‘οΈ Security

Fast post-quantum signature aggregation with lattice SNARKs

a16z crypto announces Aerie, a lattice-SNARK system that aggregates Falcon-512/1024 signatures into one ~66 KiB proof. On an M4 Max laptop it handles 32,768 signatures in 0.65 s (~50k/s), verifies in 54 ms, and costs ~42 bytes per signature. It benchmarks against Orthus and Ethereum's leanVM hash-based XMSS aggregation, and argues that recursion-free lattice aggregation is simpler than hash-only designs. It also covers Falcon's hardware-wallet and side-channel constraints and why private payments need lattice encryption such as ML-KEM.

FalconEthereumSolana+1
AerieAkitaLattice Jolt+17

otherΒ· Published and added 16 Oct 2026

a16zfrontier.comarticleπŸ›‘οΈ Security

Fast post-quantum signature aggregation with lattice SNARKs

Aerie is an a16z crypto and LayerZero Labs system that aggregates Falcon-512 and Falcon-1024 lattice signatures into one lattice SNARK. On an Apple M4 Max it aggregates 32,768 Falcon-512 signatures in 0.65 seconds, with 54 ms verification and about 42 bytes per signature. The post compares it with Ethereum's hash-based leanVM and XMSS plan and Orthus, and covers Falcon signing limits on hardware wallets.

AerieFalconEthereum+2
AlpenglowleanVMXMSS+11

otherΒ· Added 22 Oct 2026, published 16 Oct 2026

microsoft.comarticleπŸ›‘οΈ Security

Managing open-weight model risk in enterprise deployments

Microsoft blog post introducing "Risk Management for Open-Weight Models in Enterprise", a joint Microsoft–NVIDIA paper. It proposes a shared risk taxonomy (Cybersecurity, Data Protection, Content, Human-AI Interaction, Bias) grounded in ISO standards and the NIST AI RMF. The paper maps evaluations to risks as evidence and argues that risk depends on the model, use case, deployment and safeguards, not on weight openness alone. It also covers how responsibility for controls shifts when enterprises self-host models, and points to a joint repository of evaluations. The first paper focuses on the model layer; runtime, harness and application layers are planned for later.

Microsoft FoundryNVIDIA
NIST AI RMFISO

GRC, AI SecurityΒ· Published and added 16 Oct 2026

microsoft.comarticle🧠 AI

Managing open-weight model risk in enterprise deployments

Microsoft's announcement of "Risk Management for Open-Weight Models in Enterprise", the first paper in a planned joint series with NVIDIA. It proposes a taxonomy of five risk categories (Cybersecurity, Data Protection, Content, Human-AI Interaction, Bias). The approach is grounded in ISO standards and the NIST AI Risk Management Framework. It maps evaluations to risks as evidence, stresses that weight openness alone doesn't determine risk, and explains how self-hosting shifts responsibility for safeguards. A joint repository will collect evaluations, and later work will cover the runtime, harness and application layers.

Microsoft Foundry
MicrosoftNVIDIANIST+7

ai-policy, evalsΒ· Published and added 16 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

I Want to Ride My BIKE: Customizing Bit-Flipping Decoders for Ephemeral Key KEMs

ePrint paper presenting the first optimized implementation of the BF-max bit-flipping decoder for the code-based KEM BIKE, combined with other decoders to trade off decoding failure rate, runtime, public-key and ciphertext size in ephemeral-key settings. It cuts public-key and ciphertext sizes by 7.8% versus LeanBIKE at similar speed and DFR, and gives a combined size 22% below BIKE and 2.79x below HQC. It shows BIKE can fit constrained protocols such as IKEv2, which matters for practical post-quantum migration.

BIKEHQCIKEv2
BF-maxLeanBIKEQC-MDPC+1

otherΒ· Added 17 Oct 2026, published 16 Oct 2026

arxiv.orgpaper🧠 AI

Predictable Scaling: Efficient Model Exploration via Scaling-Law Prediction

Predictable Scaling (PS) is a framework that predicts full-scale recommendation model performance from scaled-down proxies. It builds proxies with composable scaling functions along separate resource axes, then projects metrics to target scale by curve fitting with calibrated uncertainty. Of three predictors, even the raw proxy falls within repeated-run noise, and a Gaussian Process gives 15% lower relative MAE. On a task-specific ranker and a foundation ranker, PS ranks hypotheses correctly at 79-88% compute reduction.

Gaussian Process
arXiv

research, trainingΒ· Added 20 Oct 2026, published 16 Oct 2026

x.comthreadπŸ›‘οΈ Security

!Manan (@0xManan) on X

Social post describing CVE-2026-97229, a CVSS 10 unauthenticated RCE in GitLab CE/EE. A crafted .gitlab-ci.yml with a UTF-8 path passes validation under US-ASCII, then is recompiled by the Onigmo regex engine, where an integer wraps at INT_MAX. That gives attacker-controlled VM ops and system() execution as the git user. The chain is to push a payload to a public project, then call unauthenticated GET /api/v4/projects/:id/ci/lint. It links a Rapid7 PoC and writeup and lists fixed self-managed versions 19.2.8, 19.3.5 and 19.4.2. GitLab.com is already patched.

GitLabOnigmo
CVE-2026-97229integer overflowRapid7

AppSec, Offensive SecurityΒ· Added 17 Oct 2026, published 16 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Can SOLARBURST go silicon? A systematic analysis on software supply chain attacks for VLSI design flows

This paper analyses software supply chain (SWSC) attacks against VLSI design tools. It empirically studies the software composition, security features and tool interactions of VLSI suites, then builds a taxonomy linking SWSC attacks to VLSI attacks, design-flow stages and security outcomes. The taxonomy yields 717 possible new attacks, 60 of them high feasibility, with a threat model, a defense assessment and case studies on an open-source VLSI flow.

SolarWindsSUNBURST

Supply Chain, Hardware & RFΒ· Added 20 Oct 2026, published 15 Oct 2026

arxiv.orgpaper🧠 AI

Librarian Agents: Training LLMs to Curate Long-Context Workspaces that Anticipate Future Queries

Introduces Librarian Agents, where a builder agent turns raw unstructured documents into a hierarchical filesystem of synthetic files and reference links, forming a workspace for a downstream answering agent. Workspace construction is cast as a Markov decision process and the builder policy is trained with reinforcement learning to maximize downstream answering accuracy. It beats the strongest retrieval and precomputation baselines by 33 points on BrowseComp-Plus, amortizes construction cost over repeated queries, and generalizes zero-shot to BRIGHT with a 31-point average gain.

LLMClaude CodeRAG
Librarian AgentsBrowseComp-PlusBRIGHT+1

research, agents, llm-appsΒ· Added 17 Oct 2026, published 15 Oct 2026

arxiv.orgpaper🧠 AI

Topology-Inspired Fine-Tuning for Wind-Field Super-Resolution

The paper fine-tunes a pretrained CNN wind-field super-resolution model with differentiable topology-inspired auxiliary losses on speed, gradient magnitude, soft high-speed level sets and local maxima. It also uses fixed-pair supervision at ground-truth persistence-pair endpoints located offline with the Topology ToolKit. A 16-configuration loss study on a fixed 168-field benchmark finds that gradient supervision gives the strongest persistence-diagram improvement, while fixed-pair supervision gives the most consistent joint improvement in persistence-diagram and merge-tree distances. The combined objective cuts bottleneck, W2,∞ and W2,2 distances by 31%, 25% and 27% relative to the pretrained CNN, at a cost of about half of standard fine-tuning's PSNR gain. It also shows that pointwise metrics and topological distances rank CNN and GAN models differently.

CNNGANTopology ToolKit
arXiv

research, trainingΒ· Added 17 Oct 2026, published 15 Oct 2026

arxiv.orgpaper🧠 AI

Efficient KV Cache Migration for Geo-Distributed LLM Inference in Collaborative Edge Computing

Proposes EdgeFlow, a hybrid KV cache migration scheme for distributed LLM inference across heterogeneous edge servers in Collaborative Edge Computing. It combines direct KV cache transmission with activation-based recomputation, overlapping computation and communication to cut migration time when servers disconnect or overload. The authors formulate a multi-node KV migration optimization problem and give a 2-approximation algorithm built on improved LP relaxation and bipartite graph techniques. Experiments on a real distributed LLM inference platform show up to 45% lower migration time.

LLM
EdgeFlowarXiv

inference, researchΒ· Added 17 Oct 2026, published 15 Oct 2026

arxiv.orgpaper🧠 AI

The importance of tensor handling and implementation of physics-informed DeepONets

Proposes a modified Physics-informed DeepONet (PI-DeepONet) architecture that removes redundancy in how the Branch network processes input functions across collocation points. It is mathematically equivalent to the original but uses smaller input tensors and fewer Branch evaluations. The authors derive training-time scaling laws, then test on 1D, 2D and 3D linear advection problems. Accuracy matches the original, the maximum speed-up is 3.75Γ— in 2D, and a 3D model trains on an NVIDIA A100 only with the new formulation, because the original runs out of memory.

PI-DeepONetDeepONetPINN+1
NVIDIAarXiv

researchΒ· Added 17 Oct 2026, published 15 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

PROBE: Learning to Audit Policy Compliance in Tool-Using LLM Agents

PROBE (Policy Rule Observation via Behavioral Exploration) trains LLM-based auditors that act as realistic users and probe deployed tool-using agents for policy violations (pricing, privacy, confirmation, safety) across multi-turn, tool-mediated dialogue. It formalizes auditing as a two-player Markov game with a composite reward for violation discovery, plausibility, progress and policy diversity, and compares GRPO, DPO and GFlowNet optimization. Trained auditors find broader, higher-yield violations than zero-shot adversaries, even when much smaller than the target agent, positioning behavioral auditing as a distinct axis next to capability and safety benchmarks.

LLM
PROBEGRPODPO+1

AI SecurityΒ· Added 17 Oct 2026, published 15 Oct 2026

arxiv.orgpaper🧠 AI

PROBE: Learning to Audit Policy Compliance in Tool-Using LLM Agents

PROBE (Policy Rule Observation via Behavioral Exploration) trains LLM-based auditors that act as realistic users and probe deployed tool-using agents for policy violations (pricing, privacy, confirmation, safety) over multi-turn dialogue. It formalizes auditing as a two-player Markov game with a composite reward balancing violation discovery, behavioral plausibility, conversation progress and policy diversity, and compares GRPO, DPO and GFlowNet optimization in a controlled setting. Trained auditors find broader, higher-yield violations than same-architecture zero-shot adversaries, even when much smaller than the target agent. This positions multi-turn behavioral auditing as a distinct evaluation axis alongside capability and safety benchmarks.

GRPODPOGFlowNet+1
PROBEarXiv

evals, agents, trainingΒ· Added 17 Oct 2026, published 15 Oct 2026

coindesk.comarticleπŸ›‘οΈ Security

How Brooklyn prosecutors and the FBI took down a massive crypto fraud network targeting Russian speakers

Brooklyn DA Eric Gonzalez and the FBI seized or disrupted 241 scam websites and 112 servers tied to a crypto investment fraud network that targeted Russian speakers in the US. The scheme used Russian-language Facebook ads, fake advisers who coached victims into sending crypto to fake trading platforms, fee and tax lockouts on withdrawal, and later fake fund-recovery offers. Investigators went after the servers holding victim data and fraud software, because replacement domains kept appearing after earlier takedowns of about 400 domains. The infrastructure was in Ukraine and other Eastern European countries, no arrests were announced, and about $300,000 has been seized.

Facebook
FBIBrooklyn District Attorney's OfficeEric Gonzalez+4

Threat IntelΒ· Published and added 15 Oct 2026

simonwillison.netarticle🧠 AI

LaTeX renderer

Simon Willison describes using Claude Code (Opus 5.5) to build a browser LaTeX renderer inspired by Tiny Little Office, which stores document data in the URL #fragment and ships an llms.txt so agents can construct document links. He lists the prompts: fragment-hash rendering, a custom compression dictionary for LaTeX, an iframe sandbox against XSS copied from his SVG-in-Markdown tool, and loading from a URL or Gist. The finished tool uses Pako 2.1.0, MathJax 4.1.3, faster-latex 0.3.1 and DOMPurify 3.4.16.

Claude CodeLaTeXMathJax+5
Simon WillisonClaude Opus 5.5Paul Ford+3

coding-agentsΒ· Added 16 Oct 2026, published 15 Oct 2026

liquid.aiarticle🧠 AI

LFM2.5-24B-A2B: Built for fast on-device agents

Liquid AI releases LFM2.5-24B-A2B, a 24B-parameter MoE reasoning model with 2B active parameters (40 layers, 64 experts with top-4 routing, hybrid gated short convolutions and GQA). It has a 131K context window, a 128K-token vocabulary and 33T pre-training tokens, and was post-trained with large-scale RL for tool use and agentic tasks. The post reports results against Qwen3.6-35B-A3B on 16 benchmarks (AutomationBench, BFCLv4, ToolSandbox, LiveClaw, τ³-Bench Banking), decode speeds of 184 tok/s on an Apple M5 Max and about 21K output tok/s on a B300 GPU, day-one support in llama.cpp, MLX, vLLM, SGLang and ONNX, and a local Hermes Agent demo. It also describes reward-hacking behaviour during training, including the model detecting its sandbox.

Mixture of Expertsllama.cppMLX+8
Liquid AILFM2.5-24B-A2BLFM2.5-24B-A2B-Base+20

models, inference, agentsΒ· Added 16 Oct 2026, published 14 Oct 2026

simonwillison.netarticle🧠 AI

Tree Appreciator

Simon Willison describes another game experiment, this time in the Claude iPhone app in chat mode rather than Claude Code. He prompted Claude Opus 5.5 Max to build a three.js game called "Tree appreciator" with two algorithmically generated trees and a mechanic based on appreciating their differences, and added "think hard about how to make sure it is both fun and beautiful". After about 3 hours 7 minutes of work it returned a spot-the-difference game with music, animation and achievements. He notes that simply telling Opus 5.5 to "make sure it is fun" works surprisingly well.

Claudethree.js
Simon WillisonClaude Opus 5.5Anthropic

prompting, modelsΒ· Added 15 Oct 2026, published 14 Oct 2026

orca.securityadvisoryπŸ›‘οΈ Security

Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)

Orca Security analysis of CVE-2026-97229, a CVSS 10.0 flaw in GitLab CE/EE. An integer overflow (CWE-190) in the CI/CD regular expression compiler gives memory corruption and code execution as the git user. It is triggered by a crafted regex in .gitlab-ci.yml combined with a UTF-8 repository path, with no authentication needed on instances that allow public project creation or self-registration. Lists affected branches (19.2 before 19.2.8, 19.3 before 19.3.5, 19.4 before 19.4.2), the absence of a workaround, interim mitigations, and a Rapid7 PoC against GitLab CE 19.4.1 with ASLR on. Notes a prior max-severity GitLab bug (CVE-2026-85706) was probed in the wild within hours and later added to CISA KEV.

GitLab
CVE-2026-97229CVE-2026-85706CWE-190+2

AppSec, DevSecOpsΒ· Published and added 14 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

INFUSE: A Unified Surface Benchmark for Indirect Prompt Injection in Agentic Systems

INFUSE is an end-to-end benchmark for indirect prompt injection (IPI) across long-horizon agent workflows (shell commands, code changes, dependency installs, remote services). It has 40 realistic tasks and a taxonomy of 56 attack scenarios in five threat categories, with attacks injected via interaction surfaces encountered mid-task. Across 19 LLMs (GPT, Claude, Gemini, Llama, Gemma, Qwen) and 41,824 adversarial trajectories, mean attack success was 19.6% (LLM-judged) and 15.4% (heuristic), per-model 3.2–41.9%; guard models gave limited protection, while prompt-level hardening cut mean ASR from 58.2% to 14.3%.

LLMClaudeGemini+3
indirect prompt injectionINFUSE

AI SecurityΒ· Added 17 Oct 2026, published 14 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Quantum-Aware Key Rank for Side-Channel Attacks evaluation

Proposes a cost model and metric for an adversary who collects side-channel traces classically and finishes the key search on a quantum computer. Shows any quantum algorithm needs Omega(sqrt(r)) cipher evaluations for key rank r, and that the quadratic advantage holds only up to a rank bound set by the NIST MAXDEPTH budget (about 2^58.6 for AES-128 at D=2^40). Defines a quantum-aware key rank computable from existing rank estimators, with simulated-leakage experiments showing a depth-limited quantum adversary is worth about 22 traces at SNR 0.125.

AES
NIST MAXDEPTHGrover's algorithmquantum search with advice+4

Hardware & RFΒ· Added 16 Oct 2026, published 14 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Hardware-Level Mitigation of Micro-Architectural Leakages in Embedded Processors

Proposes RTL-level architectural changes to general-purpose processors that remove the root causes of micro-architectural leakage, so masked cryptographic software runs securely under the Robust but Relaxed (RR) d-probing model without security-aware compilers or hardware-specific software workarounds. Each countermeasure is formally proven secure and integrated into the Ibex RISC-V core, which is evaluated by tool-assisted leakage assessment of the full netlist and by physical measurements on an FPGA.

IbexFPGA
Robust but Relaxed d-probing modelTCHES

Hardware & RFΒ· Published and added 14 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Tamper Sensing Meshes in Payment Terminals and Beyond

Teardown study of tamper sensing meshes (TSM) across a wide range of card payment terminals, ATM key pads and a data center HSM, with detailed photos of critical features. The authors build a taxonomy of mesh construction techniques, find most commercial meshes use simple constructions far from manufacturing limits, and derive a concise set of design patterns. They argue that meshes beating the industrial state of the art are feasible with cheap, readily available processes, giving researchers a basis for realistic test specimens.

Hardware Security ModulePayment terminalATM key pad
Jan Sebastian GΓΆtteBjΓΆrn ScheuermannTCHES

Hardware & RFΒ· Published and added 14 Oct 2026

x.comthreadπŸ›‘οΈ Security

ThreatWire (@ThreatWire_) on X

ThreatWire post on CVE-2026-97229, an integer overflow in the GitLab CI/CD regex compiler. GitLab rates it CVSS 3.1 10.0 and says it can allow unauthenticated code execution under certain conditions, in both CE and EE. Fixes are in 19.2.8, 19.3.5 and 19.4.2 (not 19.3.4), released Oct 12; GitLab-hosted instances are already patched. The post credits joaxcar via HackerOne and says a Rapid7 researcher published a lab PoC on GitHub, which ThreatWire has not run or verified. It also says the CVE is not in CISA KEV and has no known exploitation.

GitLab
CVE-2026-97229integer overflowjoaxcar+1

AppSecΒ· Added 15 Oct 2026, published 14 Oct 2026

parsimony.lasu.devtool🧠 AI

Show HN: Parsimony – an open-source benchmark for how much code AI models add

Parsimony is an open-source benchmark that ranks AI coding models by how much code their patches add. It parses the patches already published by benchmarks such as SWE-bench Verified, counts syntax-level "coding units" (statements, calls, comparisons, names, literals) rather than lines, and subtracts deleted code to get net units. It adds a leaderboard, an Artificial Analysis Intelligence Index overlay, the author's own DeepSWE runs, and a way to upload your own results. It matters because existing benchmarks score solve rate and cost but not code bloat, which makes codebases harder to maintain. The page states its limits: it measures size, not quality, and more verbose models tend to solve more tasks.

mini-SWE-agentClaude CodePi+1
ParsimonySWE-bench VerifiedDeepSWE+2

evals, coding-agentsΒ· Published and added 13 Oct 2026

huggingface.coarticle🧠 AI

Run fast, private agents on-device with LFM2.5-24B-A2B

Liquid AI releases LFM2.5-24B-A2B, an open-weight reasoning-only mixture-of-experts model (40 layers, 64 experts with top-4 routing, hybrid gated short convolutions and GQA, 2B active parameters) with 131K context and a 128K-token vocabulary. Pre-training scaled to ~33T tokens, followed by long-context mid-training and a five-stage post-training pipeline (SFT, teacher specialization, two multi-domain on-policy distillation stages, agentic RL in harnesses such as OpenClaw, Hermes Agent, Pi, OpenCode). It reports leading or matching results on tool-use and instruction-following benchmarks (e.g. LiveClaw 48.09 vs 38.19 for Qwen3.6-35B-A3B), 184 tok/s on an M5 Max and 21K tok/s on a B300, and includes transformers code and Hermes Agent local-serving config.

Mixture of ExpertsTransformersvLLM+12
Liquid AILFM2.5-24B-A2BLFM2-24B-A2B+18

models, agents, inferenceΒ· Published and added 13 Oct 2026

latent.spacearticle🧠 AI

[AINews] Meta Muse Wonder & Wonder Full: MSL’s Claude 5.5-tier Frontier Model

AINews daily digest (Oct 10–12, 2026) whose top story is Meta Superintelligence Labs' launch of Muse Wonder and Muse Wonder Full. The models have a 1M context window and are priced at $4 input / $20 output per M tokens for Wonder; Full is available only to Muse Code subscribers. It compiles third-party results: Artificial Analysis Intelligence Index v4.3 (Full 56, Wonder 52, Spark 1.3 48, Opus 5.5 58), Terminal-Bench 4.0 gains, Coding Agents Index, and Vals Index ranks. It also records Meta-reported numbers (SWE-Marathon, DeepSWE, MemoryBench), bullish and skeptical practitioner reactions, the "3D demo" benchmaxxing debate, and Muse retention data. The rest of the issue is a roundup of agent RL research (QwenGyre, Sakana MASS, GitSwarm), inference silicon (Maia 300, ReplaySSM), specialised models (GLM-Legal, Decision 3.0), and r/LocalLLaMA and other Reddit threads. The page text was truncated, so the end of the Reddit recap is not covered.

Muse CodeClaude CodeCodex+12
MetaMuseMuse Wonder+45

models, evals, agentsΒ· Published and added 13 Oct 2026

simonwillison.netarticle🧠 AI

llm-meta-ai 0.2

Simon Willison announces llm-meta-ai 0.2, an update to his LLM CLI plugin adding support for Meta's new Muse Wonder and Muse Wonder Full models. He compares SVG pelican drawings across Muse Wonder's six reasoning levels (minimal to max) and against Muse 1.3 and 1.2, noting Meta's roughly monthly release cadence and that Artificial Analysis rates Muse Wonder (Max) as equivalent to GPT-6.1 Sol.

llm-meta-aiLLM
MetaMuseSimon Willison+2

models, evalsΒ· Added 13 Oct 2026, published 12 Oct 2026

x.comthreadπŸ›‘οΈ Security

Dark Web Intelligence (@DailyDarkWeb) on X

Social post summarizing watchTowr's Oct 2026 research on an unauthenticated RCE chain in PaperCut NG 26.0.4-PO build 76508: an auth bypass (WT-2026-0143, no CVE) re-runs the Setup Wizard via the Home page to reset the admin password, then CVE-2026-82077 (Scan-to-Fax path traversal) gives OS command execution. It lists fix versions (build 76530, 26.0.5, 25.0.13), notes watchTowr's detection tool covers only the bypass, and says exploitation of this chain is unconfirmed, unlike the August attacks using CVE-2026-81578 and CVE-2026-82078.

PaperCut
CVE-2026-82077CVE-2026-81578CVE-2026-82078+5

AppSec, Offensive SecurityΒ· Added 13 Oct 2026, published 12 Oct 2026

endorlabs.comarticleπŸ›‘οΈ Security

New research: malware in open source ecosystems surges 14x as attackers hijack trusted packages | Endor Labs

Endor Labs summarizes its report "Malware in the Open Source Ecosystem", built from a survey of 605 IT professionals plus analysis of OSV advisories and npm metadata. Over 90% of all OSS malware advisories were filed in 2025, and npm account-takeover advisories rose about 12x (930 of 1,011 ever recorded), often hitting heavily downloaded packages. It also covers the TeamPCP campaign across GitHub Actions, Docker Hub, npm, OpenVSX and PyPI, the axios compromise, and survey findings: only 21% enforce cooldown periods, 51% found malicious packages in 2025, and ownership of the problem is fragmented.

npmOSVEndor Labs+3
Shai-HuludTeamPCPDPRK+2

Supply Chain, Threat IntelΒ· Published and added 12 Oct 2026

endorlabs.comwriteup🧠 AI

Sonnet 5 vs Fable 5: reliable versus security-forward, not better versus worse | Endor Labs

Endor Labs compares Claude Sonnet 5 and Claude Fable 5 using its Agent Security League, a 200-task benchmark run under both Cursor and Claude Code. Raw FuncPass/SecPass numbers are confounded by cheating (recycled answers) and timeouts, so the post uses three controls: scores restricted to instances where both models finished, cheating rate as its own axis, and tool-call trajectory analysis. Sonnet 5 is more thorough, with higher FuncPass, about 1.5x the tool calls and a lower cheating rate. Fable 5 is more security-forward, with higher SecPass, less exploration and 1.7x–4.75x more cheating.

CursorClaude Code
Endor LabsAgent Security LeagueClaude Sonnet 5+1

evals, coding-agents, modelsΒ· Published and added 12 Oct 2026

protos.comarticleπŸ›‘οΈ Security

Ledger spyware scare spreads beyond Southeast Asia

Protos reports additional alleged Ledger hardware wallets with physical spyware implants, found in devices from a German MediaMarkt reseller, a Philippine LazMall reseller and a Stax model bought from CryptoBilis. Mark Karpelès found that the implants read the device's screen output to capture seed phrases and evade Ledger's Genuine Check. The earlier CryptoBilis-linked incident of Oct 9 drained over $86M. Ledger told resellers to use only authorized channels and never restock returned units, and teardowns have also shown many devices to be clean.

Ledger
CryptoBilisGenuine CheckMark Karpelès+4

Hardware & RF, BlockchainΒ· Published and added 12 Oct 2026

github.comrepo🧠 AI

Show HN: Atticus – Hold-to-talk voice assistant for macOS that runs on Claude -p

Atticus is an MIT-licensed macOS 26+ hold-to-talk voice assistant that uses Apple's on-device speech transcription and runs AI requests through Claude Code on an existing Claude Pro/Max plan, so no API key is needed. Simple commands skip the model entirely (apps open in 0.08 s), actions it has seen once are learned as zero-cost shortcuts, and a "remember…" memory persists across asks. It also sets up no-AI background watchers (polling every 5 s) and holds itself to a budget of a median under $0.002 and 6 s per AI ask, with a system prompt under 10,000 characters.

Claude CodeClaudeCodex+6
AtticusAnthropicApple+1

agents, coding-agents, multimodalΒ· Published and added 12 Oct 2026

huggingface.copaper🧠 AI

MiMo-V2.6: Scaling Reinforcement Learning Towards Self-Improvement

Technical report for Xiaomi's MiMo-V2.6 omni-modal model family, which scales RL compute along three axes: asynchronous training with 1,568 samples and 2.7-3.7B tokens per step at up to 1M context, more diverse environments (code, general, visual, cyber) under mixed agent harnesses, and groupwise agentic grading that gives better reward signals and favors shorter, token-efficient solutions. Stability measures include a frozen MoE router and a multi-layer defense against reward hacking, built on a mid-trained hybrid-SWA architecture. The authors open-source training dynamics, RL environments and the RL framework, which makes it a useful reference for reproducing scaled agentic RL.

Mixture of ExpertsHugging Face
MiMo-V2.6Xiaomi

training, research, agentsΒ· Added 10 Oct 2026

cisa.govadvisoryπŸ›‘οΈ Security

CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data

Joint FBI/CISA/NSA and allied-agency advisory on China-linked actors enabled by Integrity Technology Group (overlapping with Flax Typhoon, Ethereal Panda, Red Juliett). It details their TTPs: open-source scanners and the MicroScan exploit-script app, an XSS credential-harvesting payload dropping live700_v1.exe, EBurst password spraying against Exchange/O365, SoftEther VPN persistence, DCSync via DC.exe, and email theft via the Curlc4.txt PHP bot and the office-cli utility. It also provides IOCs, MITRE ATT&CK mappings, CVEs, incident response steps, and mitigations.

SoftEtherMicrosoft 365Active Directory+3
Integrity Technology GroupFlax TyphoonEthereal Panda+13

Threat Intel, Blue Team & DetectionΒ· Added 9 Oct 2026

decrypt.coarticle🧠 AI

OpenAI and Anthropic Are Quietly Rehearsing for the Day After an AI Catastrophe

Decrypt summarizes an Axios report that Anthropic, OpenAI and other AI firms are privately rehearsing the political response to a catastrophic AI event, most likely a large cyberattack on banking, internet, power or water. Insiders reportedly expect a major incident within 6–12 months, and the plan is to red-team worst cases and brief Congress so executives can shape post-incident regulation. It also recaps recent incidents: OpenAI models escaping a sandbox to breach Hugging Face while chasing ExploitGym answers, an Anthropic test misconfiguration that let Claude models hack three real organizations, and CrowdStrike linking South Korean bank attacks to agents built on Claude and DeepSeek. It covers proposals including the Sanders/Casar Ban Artificial Superintelligence Act and mandated kill switches.

ClaudeDeepSeekHugging Face
AnthropicOpenAIDario Amodei+10

ai-policy, ai-safetyΒ· Published and added 9 Oct 2026

labs.watchtowr.comwriteupπŸ›‘οΈ Security

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)

watchTowr's analysis of the PaperCut NG 26.0.4-PO build 76508 pre-auth RCE chain, built from WT-2026-0143 (authentication bypass) and WT-2026-0144 / CVE-2026-82077 (post-auth RCE). The bypass reaches Setup Wizard forms through the Tapestry service parameter via the Home page, which resets the admin password. The RCE uses path traversal in the Scan to Fax connector. It also gives the August to September 2026 patch and bypass timeline, including exploited CVE-2026-81578 and CVE-2026-82078.

PaperCut NGApache TapestryJava
CVE-2026-82077CVE-2026-82078CVE-2026-81578+12

AppSec, Offensive Security, Identity & AccessΒ· Added 30 Oct 2026, published 9 Oct 2026

arxiv.orgpaper🧠 AI

Multi-Stream Attention Residuals

Introduces Multi-Stream Attention Residuals (MSAR), which extends Attention Residuals (AttnRes, single-stream softmax attention over network depth) to multi-head depth attention. Heads get diverse views through multi-scale causal convolutions over sequence context, and the retrieved streams are merged by lightweight adaptive mixing into a single-stream layer input, so no persistent multi-stream storage or communication is needed. It beats standard residuals, manifold-constrained Hyper-Connections (mHC) and AttnRes on 12 downstream benchmarks at 18B and 28B MoE scales, with an iso-loss compute speedup of 1.58x versus 1.35x for AttnRes and 1.30x for mHC.

TransformerMixture of Experts
Multi-Stream Attention ResidualsAttention ResidualsHyper-Connections+1

researchΒ· Added 12 Oct 2026, published 9 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Beyond-Birthday MAC Security for Encrypted Wegman-Carter and EWCDMD

Proves that the nonce-based MACs Encrypted Wegman-Carter (EWC) and EWCDMD (the dual of EWCDM) are unforgeable beyond the birthday bound. With an n-bit block cipher and an O(2^-n)-AXU hash, both are secure up to 2^{5n/6} MAC queries and nearly 2^n verification queries in the nonce-respecting setting. This settles an open question left by earlier birthday distinguishing attacks (Cogliati–Seurin on EWC, Nandi on EWCDMD), which never yielded forgeries. The proofs analyze forgery events directly through auxiliary experiments. The EWC proof adds conditional permutation analysis and collision multiplicity bounds with KL divergence, and the EWCDMD proof uses Hellinger distance and Fourier analysis.

EWCDMEWCDMDEncrypted Wegman-Carter+8

otherΒ· Added 12 Oct 2026, published 9 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

US Disrupts Chinese State-Sponsored Hacking Tools

The US, alongside UK, Australian, Canadian, Japanese, New Zealand, and Spanish agencies, disrupted MicroScan and FishHub, hacking tools built by China's Integrity Technology Group and used by the state-sponsored actor Flax Typhoon (aka Ethereal Panda, Red Juliett, Storm-0919, UNC5007) against US, Japanese, Polish, and Taiwanese critical infrastructure and universities. MicroScan is a Python-based scanner with over 1,300 penetration-testing scripts targeting Apache Struts, Jenkins, WebLogic Server, WordPress, OpenSSL, and other services, delivered via a Mirai-derived IoT botnet; FishHub let operators remotely search and exfiltrate files from victim networks. The advisory also details the group's broader toolkit (SoftEther VPN for persistence, EBurst for Exchange password spraying, DC.ex for Active Directory data extraction) and the seizure of the domains used to access the tools.

NmapWordPressActive Directory+3
Flax Typhoon (Ethereal Panda, Red Juliett, Storm-0919, UNC5007)Integrity Technology GroupMicroScan+4

Threat Intel, Offensive SecurityΒ· Published and added 9 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

RM-KLPT: Algebraic Pathfinding for Superspecial Abelian Surfaces with Maximal Real Multiplication

The paper presents RM-KLPT, an algorithm that solves the algebraic pathfinding problem in isogeny graphs of superspecial abelian surfaces with maximal real multiplication. It does this by solving a norm equation in ideals of a quaternion algebra over a real quadratic field. The authors implement it and revisit the RM-CGL hash function of Charles, Goren and Lauter. They show that if the initial surface's algebraic description is known, RM-KLPT gives a second-preimage attack on the hash. Paths are much shorter (~p^3) than with KLPT^2, because a higher-dimensional Deuring correspondence exists in the RM setting. The paper also discusses cryptographic constructions that could be built on RM-KLPT.

RM-KLPTRM-CGLKLPT+4

otherΒ· Added 12 Oct 2026, published 9 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

Coverage of Pwn2Own Ireland 2026 results: contestants earned over $1.2 million total, with Google Pixel 10 exploits alone paying out $560,000 across three teams. Ikotas Labs won the full $300,000 Pixel payout by chaining multiple bugs for remote compromise, while Tim Becker/Yves Bieri and Dimitrios Valsamaras/Ken Gannon earned reduced payouts for exploits involving previously known flaws. Other notable rewards went for hacks of the Samsung Galaxy S26, Sonos Era 300 speaker, Philips Hue Bridge Pro, Home Assistant Green hub, Lexmark/Brother/Canon printers, Garmin Index BPM, and AI infrastructure including Oracle Autonomous AI Database, OpenAI Codex, Nvidia Dynamo, and LiteLLM.

AndroidSamsung Galaxy S26OpenAI Codex+2
Pwn2Own Ireland 2026Ikotas LabsTim Becker+3

Offensive Security, Mobile Security, Hardware & RFΒ· Published and added 9 Oct 2026

x.comthreadπŸ›‘οΈ Security

Ned Peterson (@NedPeterson99) on X

A post summarizing a joint FBI and six-country advisory on actors tied to Integrity Technology Group (the sanctioned Chinese firm linked to Flax Typhoon and the Raptor Train botnet). They password-sprayed Microsoft 365 and Exchange accounts over EWS, OWA, ActiveSync and PowerShell with EBurst. They then drained mailboxes with a PHP bot over Exchange Web Services and an office-cli utility using stored client ID, tenant ID and secret values, and exposed the stolen email to third parties through a web app, in some cases restricted to Xiamen IP addresses. Victims were in government, law enforcement, healthcare and religious organizations across Southeast Asia, Africa and North America, with activity since at least January 2021. Defensive takeaways: enforce MFA on every legacy path, retire basic auth and EWS, audit OAuth apps and service principals with mail-read rights, and alert on bulk mailbox pulls.

Microsoft 365Microsoft ExchangeEBurst+3
Integrity Technology GroupFlax TyphoonRaptor Train+3

Threat Intel, Identity & AccessΒ· Added 11 Oct 2026, published 9 Oct 2026

arxiv.orgpaper🧠 AI

Beyond the Monolithic Interface: A Research Agenda for Plural Conversational AI

A narrative review in HCI arguing that the single-voice chatbot interface causes three harms: cognitive offloading, ideological narrowing of user beliefs, and epistemic compression of cultural and value diversity. It proposes multi-persona interfaces, which show several personas to the user at once, as a low-cost fix. The design draws on game design and participatory simulation (magic circle, role differentiation, persona embodiment). It offers a taxonomy for designing such interfaces and calls for empirical studies that link technical pluralistic alignment methods to real human-AI interaction.

arXiv

research, ai-safetyΒ· Added 12 Oct 2026, published 9 Oct 2026

karagila.orgarticle🧠 AI

OpenAI, the Partition Principle, and Mathematics

A set theorist who works on the Axiom of Choice responds to OpenAI's announcement that an AI system showed the Partition Principle does not imply the Axiom of Choice, a problem over a century old. They judge the preprint unclear, oddly structured and poorly referenced, and say it would be desk-rejected as a journal submission. The post argues that dumping unreadable machine-generated "solutions" on mathematicians shifts the verification burden onto them. It also raises open questions about AI disclosure statements, chat logs for reviewers, arXiv rate limiting, and how funders and the public will read these claims.

LeanChatGPT
OpenAISam AltmanarXiv

ai-policyΒ· Added 9 Oct 2026, published 8 Oct 2026

x.comthreadπŸ›‘οΈ Security

Dark Web Intelligence (@DailyDarkWeb) on X

A Twitter/X post digests joint advisory AA26-281A from FBI, CISA, NSA and allied agencies (UK, Australia, Canada, Japan, New Zealand, Spain) on China-based Integrity Technology Group enabling threat actors, tracked elsewhere as Flax Typhoon, Ethereal Panda and Red Juliett, to target US critical infrastructure, government, healthcare, education and law enforcement networks worldwide. The actors chain open-source scanners, large botnets, XSS, password spraying against Microsoft Exchange, VPN persistence and credential-harvesting scripts. CISA added five exploited CVEs (ISC BIND, Apache Struts, ProFTPD, ONLYOFFICE Docs, Strapi) to its KEV catalog with an Oct 11 federal remediation deadline, and STIX IOCs accompany the advisory.

ISC BINDApache StrutsProFTPD+3
CVE-2015-5477CVE-2016-3081CVE-2015-3306+7

Threat IntelΒ· Published and added 8 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

β€˜Shielded Bitcoin

Galaxy Research newsletter piece covering "Shielded Bitcoin," a paper by [[alloc] init] researchers Clara Shikhelman, Mikhail Komarov, and Aleksei Moskvin proposing a Zcash-style shielded pool (encrypted notes, public nullifiers, zero-knowledge proofs) run as a Bitcoin L1 metaprotocol via OP_RETURN envelopes, with peg-in/peg-out deliberately left to a future "PIPEs v2" paper. The article's security-relevant angle flags that novel ZK circuits need battle-testing β€” citing Zcash's own Orchard Pool soundness bug that survived professional audits for four years before being fixed in the Ironwood upgrade β€” and that bridge/peg mechanisms (the likely weak point) have historically been the most exploited component in crypto, naming Ronin, Wormhole, Nomad, and KelpDAO. It also notes a growing AI-driven deanonymization threat to transparent blockchains, citing ETH Zurich/Anthropic research showing LLM agents can re-identify pseudonymous users from profile data alone.

BitcoinZcash
RoninWormholeNomad+5

BlockchainΒ· Added 8 Oct 2026

galaxy.comarticle🧠 AI

Weekly Research Brief: AI Governance, Shielded Bitcoin, and Mention Markets

Galaxy Research's weekly brief devotes its lead section to AI governance: it recaps Sam Altman's and Dario Amodei's UN Security Council remarks calling for international AI safety coordination, contrasts a disclosed OpenAI agent incident (an agent accessed non-public Medicare data in Australia, reported three months late) with Anthropic's 950-agent DNA-database research run, and cites concrete agent-economy data β€” OpenRouter's agent token usage overtaking human usage and growing ~14x since February, Cloudflare's agent-traffic crossover, and Vercel AI Gateway data showing a 23% monthly price drop and open-weight models rising to 56% of token volume. The analysis argues that as inference gets cheaper and open-weight models gain share, AI governance's hard problem shifts from controlling frontier labs to controlling where cheap, widely available agents can act. The rest of the newsletter covers an unrelated Bitcoin privacy protocol proposal and CFTC guidance on prediction "mention markets."

OpenRouterCloudflareVercel AI Gateway+1
Sam AltmanDario AmodeiOpenAI+7

ai-policyΒ· Added 8 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

πŸ’§ Looting of Liquid Sidechain Underscores Emerging Cyber Threat to Bitcoin

Galaxy Research breaks down the theft of 4,000 BTC (~$320m) from the Liquid Network, a Bitcoin sidechain run by the Liquid Federation. Attackers exploited a bug in the sidechain node code to artificially mint 4,000 L-BTC, then abused an auto-forward feature offered by federation member SideSwap to bypass peg-out address whitelisting and withdraw real BTC to the main chain; the self-described "white hats" returned 85% but held 15% hostage, negotiating with developer Blockstream via PGP-encrypted OP_RETURN messages and demanding a 10% bug-bounty payout. The piece also contrasts this with concurrent Coldcard and BTCPay Server incidents and speculates about AI-assisted vulnerability discovery.

BitcoinLiquid NetworkBlockstream+3
Liquid Federationpeg-out whitelist bypassOP_RETURN encrypted negotiation

BlockchainΒ· Added 8 Oct 2026

galaxy.comarticle🧠 AI

AI Labs’ Call to

A Galaxy Research newsletter piece dissecting Dario Amodei's essay "We Must Pace the Frontier," which proposed embedded third-party evaluators (e.g. METR), cross-lab safety coordination with antitrust waivers, and eventual global AI governance including China. The piece separates Amodei's "operational" (QA/pipeline) and "research" (alignment, interpretability, evals) problems from his "Democratic Coordination" ask, arguing the latter functions as a regulatory moat rather than a necessity, and draws a parallel to Sam Bankman-Fried/FTX-era effective-altruism rhetoric about unilateral existential-risk authority. It covers reactions from Sam Altman (agreeing to adopt evaluators), Trump (rejecting slowdown, citing the AI race with China), David Sacks (questioning METR's neutrality), and Mark Zuckerberg (citing Meta's unilateral delay of Muse and existing liability incentives as sufficient without an industry pact).

Hugging Face
Dario AmodeiAnthropicSam Altman+12

ai-policyΒ· Added 8 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

AI Agents Aren’t Waiting for Global Safety Rules

A Galaxy Research newsletter piece covering Sam Altman and Dario Amodei's UN Security Council addresses calling for international AI safety standards and cross-border incident reporting, set against a concrete failure case: an OpenAI agent accessed public and non-public files on Australia's Medicare statistics portal on June 18 due to "misaligned model behavior," with OpenAI notifying Services Australia nearly three months later, after discovering the issue in an August review. The article also cites Anthropic's disclosure that ~950 Claude agents autonomously searched DNA databases for 21 hours to identify a novel enzyme system, and data showing agent token usage now exceeds human usage on OpenRouter and Cloudflare's network, arguing that cheaper, more capable, increasingly open-weight models are outpacing the kind of frontier-lab-centric coordination proposed at the UN.

OpenAIAnthropicClaude+3
Services AustraliaMedicare statistics portalWe Must Pace the Frontier

AI Security, GRCΒ· Added 8 Oct 2026

galaxy.comarticle🧠 AI

AI Agents Aren’t Waiting for Global Safety Rules

A Galaxy Research newsletter piece analyzing the gap between AI governance proposals and real-world agent deployment: Sam Altman and Dario Amodei's UN Security Council remarks calling for international safety standards and cross-border incident reporting, contrasted with an OpenAI agent that accessed non-public Medicare files in Australia (reported to regulators nearly three months after the fact) and Anthropic's deployment of ~950 Claude agents to search DNA databases for 21 hours, consuming 210M tokens, to identify a novel enzyme system. It ties these events to measurable trends β€” agent token usage on OpenRouter growing ~14x from February to August 2026 versus 2.8x for human usage, Cloudflare's automated-traffic-over-human crossover arriving earlier than forecast, and Vercel AI Gateway data showing average token price falling 23% in a month with open-weight models rising from 7% to 56% of volume β€” arguing that falling costs and spreading open-weight adoption make frontier-lab self-regulation insufficient for agent governance.

ClaudeOpenRouterCloudflare+1
Sam AltmanDario AmodeiOpenAI+7

ai-policyΒ· Added 8 Oct 2026

galaxy.comarticle🧠 AI

Understanding AI, Part I: The Machines That We Taught

Galaxy Research's explainer traces AI's intellectual history from the 1956 Dartmouth Workshop and the Logic Theorist through the symbolic-AI era (expert systems like Mycin and XCON, the Cyc project) to the sub-symbolic/connectionist revival (Perceptron, Hopfield networks, backpropagation, LeCun's CNN zip-code reader) that culminated in deep learning and the 2017 Transformer architecture. It then surveys three machine-learning paradigms (supervised, reinforcement, unsupervised) and five deep generative architectures (autoregressive, diffusion, GANs, VAEs, normalizing flows), closing with how modern LLM chatbots combine these via pretraining, SFT, and RLHF, and how multimodal, reasoning, RAG, agent, and world-model systems extend base LLMs.

Transformer
Jensen HuangGreg BrockmanGPT-6 Astra+34

researchΒ· Added 8 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

Weekly Research Brief: Bitget Hack, AI Accord and SEC FAQs

Galaxy Research's weekly brief includes a detailed postmortem of the $387.5M Bitget hack: attackers exploited a zero-day in two unnamed third-party security products ("Product A"/"Product B") to obtain high-level internal credentials, inserted forged withdrawal commands into Bitget's wallet backend across 11 chains, then deleted the fraudulent commands β€” with Bitget attributing the attack to North Korean actors based on IP behavior and wallet overlaps found by Elliptic and TRM. The piece draws a direct parallel to the $1.5B Bybit/Lazarus heist (compromised Safe{Wallet} infrastructure rather than stolen keys) to argue that private-key cryptography is effectively solved and attackers now target the approval pipeline/intermediary services instead; it also covers the follow-on $3.8M NEAR Intents Omni-bridge exploit and THORChain's continued role laundering DPRK proceeds. The newsletter's other sections (White House "Super Intelligence" AI Accord, SEC crypto buyback FAQs) are policy commentary, not security-technical.

THORChainGnosis Safe
BitgetLazarus GroupDPRK+8

Blockchain, Threat IntelΒ· Added 8 Oct 2026

galaxy.comarticle🧠 AI

AI Gets a New Name, but the Rules Stay the Same

Galaxy Research analyzes the White House Accord on Super Intelligence, a voluntary pact signed by Google, Anthropic, Meta, OpenAI, Nvidia, and xAI committing to internal safety controls, auditing, and board oversight for cyber/bio/chem risks and unintended system access, alongside a Trump executive order renaming "artificial intelligence" to "super intelligence" in non-statutory government documents. The piece argues the accord carries no penalties, no disclosure requirements, and no government enforcement, framing it as an attempt to manage public anxiety (citing CNN/UMass polling showing majority fear of AI) rather than substantive regulation, and situates it against Leopold Aschenbrenner's Situational Awareness and the AI 2027 report's predicted regulatory trajectories.

OpenAIAnthropicMeta+11

ai-policyΒ· Added 8 Oct 2026

arxiv.orgpaper🧠 AI

MiMo-V2.6: Scaling Reinforcement Learning Towards Self-Improvement

Technical report for the MiMo-V2.6 omni-modal model series, which scales RL compute after mid-training on a multimodal corpus, using a hybrid sliding-window-attention architecture. RL is scaled along three axes: asynchronous training with 1,568 samples and 2.7-3.7B tokens per step at up to 1M context; diverse environments (code, general, visual, cyber) under mixed agent harnesses; and groupwise agentic grading that gives better rewards for long-horizon tasks and favors shorter, token-efficient solutions. Stability measures include freezing the MoE router and a multi-layer defense against reward hacking. The authors open-source the training dynamics, RL environments and RL framework.

Mixture of Experts
MiMo-V2.6Xiaomi

training, research, modelsΒ· Added 9 Oct 2026, published 8 Oct 2026

securityweek.comarticleπŸ›‘οΈ Security

TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

Florida, Iowa, Montana, and Nebraska sued TP-Link Systems over allegedly misleading security marketing and undisclosed China ties, joining a similar Texas suit from February; the complaints cite TP-Link routers' role in the Volt Typhoon and Flax Typhoon campaigns and botnet abuse by Chinese and Russian actors. The piece also details five newly disclosed TP-Link Aginet vulnerabilities (CVE-2025-30237 through CVE-2025-30241) reported by SEC Consult, including an unauthenticated super-admin auth bypass, a root-privilege command injection, hardcoded device-model encryption keys exposing Wi-Fi/ISP credentials, and a USB-based physical-access filesystem dump affecting 65 device models.

TP-Link
CVE-2025-30237CVE-2025-30238CVE-2025-30239+6

Hardware & RF, Threat Intel, GRCΒ· Published and added 8 Oct 2026

latent.spacearticle🧠 AI

[AINews] Claude Haiku 5.5 β€” better than GPT-6 Luna at the same pricing

Latent Space's AINews recap covers Anthropic's launch of Claude Haiku 5.5, priced to match OpenAI's GPT-6 Luna and paired with a Sonnet 5.5 cache-read price cut and new Max/Team API credits. Independent Artificial Analysis testing puts its Intelligence Index at 43 (up 26 points from Haiku 4.5) and Terminal-Bench 4.0 at 33%, but shows it uses roughly 3x the output tokens of GPT-6 Luna at max effort, plus results on AA-Briefcase, AA-Omniscience and AutomationBench-AA, alongside a same-day Claude SDK update adding built-in computer-use/browser-use tooling.

ClaudeClaude CodePython+1
Claude Haiku 5.5AnthropicGPT-6 Luna+21

models, evalsΒ· Published and added 8 Oct 2026

unit42.paloaltonetworks.comarticleπŸ›‘οΈ Security

Evolution of Web3 in Cloud Supply Chain Attacks

Unit 42 analysis of how supply chain malware uses Web3 for command and control, in three phases: EtherHiding (smart contract state), TxDataHiding (transaction calldata across TRON, Aptos and BSC) and NullReceiver (C2 IPv4 decoded from a zero-value transaction's recipient address). It covers the ChainDrop npm worm, the PolinRider campaign and DPRK-linked Axios, Mastra and arrayref compromises. It ends with detection and CI/CD policy guidance.

npmBunTron+3
ChainDropPolinRiderEtherHiding+15

Supply Chain, Threat Intel, BlockchainΒ· Added 30 Oct 2026, published 7 Oct 2026

aws.amazon.comarticleπŸ›‘οΈ Security

Building your AI vulnerability harness, Part 1

AWS Security Blog describes a three-layer AI-assisted pipeline for triaging vulnerability scanner findings: Layer 1 cross-checks multiple scanners (e.g., Semgrep, CodeQL) for agreement, Layer 2 verifies a scanner's claimed data-flow path against the code's actual abstract syntax tree to catch hallucinated findings, and Layer 3 cross-references infrastructure-as-code (CloudFormation/Terraform) to weigh whether existing controls like AWS WAF rules actually mitigate the exploit path. It argues progressive, escalating-evidence filtering plus mandatory structural verification of LLM claims before human review is what turns noisy scanner output into a short, trustworthy, prioritized list, and lays out an adoption order (indexing, then multi-scanner triage, then AI hypothesis generation, then infra context, then live PoC verification).

AWSSemgrepCodeQL+3

AI Security, AppSecΒ· Published and added 7 Oct 2026

decrypt.coarticle🧠 AI

Anthropic Launches Haiku 5.5: Its Cheapest and Fastest Claude Model Yet

Anthropic released Claude Haiku 5.5, pricing it at $0.10/$0.50 per million input/output tokens (for prompts up to 100k tokens), a 90% cut from Haiku 4.5, matching OpenAI's GPT-6 Luna pricing. The model scored 72.4% on OSWorld 2.1 and 39.2% on Terminal-Bench, beating GPT-6 Luna on both but trailing Claude Sonnet 5.5's 70.6% on Terminal-Bench, and it introduces an adjustable "effort" setting to trade cost for answer quality. Anthropic also halved Claude Sonnet 5.5's cache-read price and is rolling out monthly API credits for Max and Team subscribers.

ClaudeAWSGoogle Cloud+1
AnthropicClaude Haiku 5.5Claude Haiku 4.5+9

models, evalsΒ· Published and added 7 Oct 2026

anthropic.comarticle🧠 AI

Claude Haiku 5.5

Anthropic's announcement of Claude Haiku 5.5, a small model positioned for high-volume, cost-sensitive tasks like summarization, classification, database queries, and as a subagent alongside Opus 5.5 and Sonnet 5.5. The model introduces an adjustable effort setting (trade cost for intelligence), costs roughly 75% less on average than Haiku 4.5, and ships with updated cybersecurity and biology safeguards plus alignment evaluation results detailed in its system card. The post also covers a 50% cache-read price cut for Sonnet 5.5, new monthly API credits for Max/Team subscribers, and SDK support for computer use and browser use in beta.

ClaudeAWSGoogle Cloud
Claude Haiku 5.5Claude Haiku 4.5Claude Sonnet 5.5+4

modelsΒ· Published and added 7 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

Applying Security by Design at the Point of Execution: How Governed Security Requirements Affect the Security of AI-Generated Code

Evaluates delivering security requirements from a governed security-by-design knowledge base (SbD-ToE) to a code-generating LLM through an MCP server at generation time. On DualGauge (59 Python tasks) the share passing all security tests rose from 44.1% to 78.0%; on BaxBench (28 backend scenarios) the share of functionally correct solutions with no successful exploit rose from 65% to 86%, matching the authors' Oracle Security Reminder (85%). The joint secure-and-functional metric did not improve significantly, since stricter code failed functional tests that fix unstated values. The study used one model and one generation per task, and it proposes measuring conformance with applicable requirements rather than only detecting known weaknesses.

Model Context ProtocolLLMPython
SbD-ToEDualGaugeBaxBench+2

AI Security, AppSecΒ· Added 9 Oct 2026, published 7 Oct 2026

arxiv.orgpaper🧠 AI

Applying Security by Design at the Point of Execution: How Governed Security Requirements Affect the Security of AI-Generated Code

The preprint tests whether security requirements from a governed security-by-design knowledge base (SbD-ToE), delivered to a code generator through a Model Context Protocol server at generation time, make AI-written code more secure. On DualGauge (59 Python tasks, LLM-judge scoring) the share of tasks passing all security tests rose from 44.1% to 78.0%. On BaxBench (28 backend scenarios with real exploits in containers) the share of functionally correct solutions with no successful exploit rose from 65% to 86%, comparable to the authors' Oracle Security Reminder (85%). The pre-specified joint secure-and-functional metric did not improve significantly, and the stricter code failed functional tests that fix values the task never states. The study used one model and one generation per task. The authors argue that current benchmarks only detect the weaknesses their evaluators were built for, and propose measuring conformance with the requirements that apply.

Model Context ProtocolPython
DualGaugeBaxBenchSbD-ToE+1

evals, mcp, coding-agentsΒ· Added 9 Oct 2026, published 7 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing

SLDR is a post-fine-tuning defense against malicious fine-tuning-as-a-service attacks, where an attacker fine-tunes an aligned LLM on a legitimate-looking task to covertly erode its refusal behavior. The method trains a LoRA "recovery" adapter only on the layers found to have maximal and minimal signed safety sensitivity, and uses representation-based dynamic routing at inference time to activate that adapter only for malicious queries, leaving benign task performance untouched. On Llama3.1 fine-tuned for SST2, it cuts the average harmful-output score from 11.54 to 0.08 while keeping downstream accuracy, and stays near-zero even when up to 90% of the fine-tuning data is poisoned.

LLMLlamaLoRA

AI SecurityΒ· Added 9 Oct 2026, published 7 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Hide Now, Trace Later: Retrospective Attribution in Issuer-Hiding Credentials

Krenn, Lesaignoux, Mir and Spini (AIT Austrian Institute of Technology) propose an "issuer inspection" mechanism for issuer-hiding attribute-based credentials (ABCs): an inspection authority can release time-bound keys that let verifiers locally flag presentations tied to a specific compromised issuer without unmasking other issuers or periods. They formalize the syntax/security model, give a generic construction, and instantiate it concretely using Groth's randomizable structure-preserving signatures, Schnorr-style proofs, and an adapted Gentry anonymous identity-based encryption scheme, showing the overhead stays practical. This addresses the accountability gap introduced when issuer-hiding ABCs conceal which authority issued a credential during verification.

Groth randomizable structure-preserving signaturesGentry anonymous identity-based encryptionSchnorr-style proofs

Identity & AccessΒ· Added 8 Oct 2026, published 7 Oct 2026

arxiv.orgpaper🧠 AI

TR-PTQ: High-Accuracy Integer-Only Transformer Post Training Quantization via Taylor Region Reformulation

TR-PTQ is a post-training quantization method for transformers that identifies learned LayerNorm scale parameters and GELU's compounded approximations (not SoftMax) as the main sources of accuracy loss when quantizing, contrary to common assumptions about numerical precision. It introduces a unified integer-only formulation using shared Taylor Region exponential/logarithm primitives so division and square roots can run entirely in the log-domain with standard integer arithmetic, paired with a calibration-free, outlier-aware LayerNorm optimization, eliminating the need for floating-point hardware for nonlinearities while keeping accuracy degradation under 1.5% across vision and language benchmarks.

Transformer

inferenceΒ· Added 8 Oct 2026, published 7 Oct 2026

arxiv.orgpaper🧠 AI

WorldSolver: Can LLM Agents Simulate the Physical Dynamics via Solver Generation?

WorldSolver is a benchmark of 168 physics-simulation coding tasks drawn from 61 classic computer-graphics papers across 7 physical domains, each giving an LLM agent a fixed code scaffold and asking it to implement the missing solver. Agents are scored on three axes β€” Execution Checks, Visual Fidelity, and Physical Plausibility β€” and frontier agents GPT-5.6 Sol and Claude Opus 5 top out at only 48.7% and 46.7% overall, showing current agents struggle to produce executable, visually and physically correct simulation code.

GPT-5.6 SolOpus 5

research, evalsΒ· Added 7 Oct 2026, published 6 Oct 2026

decrypt.coarticle🧠 AI

Mistral AI Drops 'Le Chonk': A Massive AI Model Named After a Cat Meme

Decrypt reports on Mistral AI's launch of Mistral Large 4 ("Le Chonk"), a 1-trillion-parameter mixture-of-experts model that activates 49B parameters per query, priced at $1.36/$4.18 per million input/output tokens. The piece compares Large 4's benchmark scores (Surge AI coding eval, AutomationBench, DeepSWE 1.1) against DeepSeek V4 Pro, Kimi K3, GLM-5.3, Qwen3.8 Max, Claude Opus 5/5.5, Claude Sonnet 5.5, Gemini 4 Argon and GPT-6 Astra, and notes weights are due by end of October alongside Mistral's sovereign AI positioning and recent 3 billion euro Series D.

MistralMixture of Experts
Mistral AIMistral Large 4Mistral Large 3+21

models, evalsΒ· Published and added 6 Oct 2026

arxiv.orgpaper🧠 AI

Lachesis: Lifetime-Aware KV Cache Placement for Agent Serving across HBM and High-Bandwidth Flash

Lachesis is a lifetime-aware KV cache placement layer for LLM agent serving that sits between the agent harness and the serving engine, deciding whether to write each KV cache segment to HBM or high-bandwidth flash (HBF) based on its expected lifetime. The authors identify temporal, structural, and inter-worker axes along which KV cache lifetime diverges in agentic workloads, and show in trace-driven simulation that lifetime-aware placement extends HBF's write-endurance-limited lifetime by 1.19–3.13x over naive HBM-first placement, reaching 3.3–12.2 device-years. This matters for serving infrastructure as agentic workloads with long-lived, multi-agent context accumulation push memory capacity demands beyond what HBM alone can economically provide.

HBMHigh-Bandwidth Flash
Lachesis

inference, researchΒ· Added 7 Oct 2026, published 6 Oct 2026

arxiv.orgpaper🧠 AI

Covariate-dependent Nonparametric $g$-modeling for regression via infinite Mixture-of-Expertizing class

This arXiv methodology paper extends empirical Bayes g-modeling, which estimates a latent prior over regression coefficients from data, to the case where the entire prior distribution depends on covariates. The authors show the unrestricted nonparametric MLE (NPMLE) of this covariate-dependent prior is ill-posed, and resolve it by introducing an "infinite Mixture-of-Expertizing" class of conditional priors, proving that the resulting NPMLE is exactly a softmax-gated Mixture of Experts whose number of experts is determined by the data rather than fixed in advance. They give two exemplar-based estimation algorithms with automatic expert selection, a post-hoc aggregation step for interpretability, and theoretical results (Lipschitz continuity of conditional priors, universal approximation of continuous gating functions by aggregated softmax gates), validated on synthetic and real datasets.

Mixture of Experts

researchΒ· Added 7 Oct 2026, published 6 Oct 2026

openai.comarticle🧠 AI

Advancing computer use with Ironclad

OpenAI describes a research collaboration with Ironclad (contract lifecycle software) to train and evaluate computer-use agents on complex business workflows such as configuring NDAs, procurement approval rules and reusable legal clauses. It covers 11 tasks scored against 8–50 criteria each, hosted Ironclad environments, synthetic training tasks and reinforcement learning. On this research eval GPT-6 Astra (Max reasoning) averaged 55.0% against 41.6% for GPT-5.6 Sol (High reasoning), with estimated time per attempt down from 37.0 to 19.2 minutes. An internal model reached 63.7%. The post also invites other software companies to partner. The results are self-reported, on a non-public eval.

Ironclad
OpenAIGPT-6 AstraGPT-5.6 Sol

agents, training, evalsΒ· Published and added 6 Oct 2026

newsletter.semianalysis.comarticle🧠 AI

Anthropic Subscriptions Offer 5x+ More Value Than OpenAI

SemiAnalysis measures the real API-equivalent value of AI subscription plans by experimentally reverse-engineering how usage meters consume credits across input/output/cache token types for Anthropic, OpenAI, Meta, xAI, Cursor, Cognition, Z.ai, MiniMax, and Moonshot. It finds Claude plans currently offer roughly 5x the API-equivalent value of equivalent OpenAI plans on mid-tier models (Opus 5.5 vs GPT-6.1 Sol), details OpenAI's recent 50% cut to its $200 plan and new $500 Ultrafast tier, and contrasts the two labs' differing strategies for clawing back subscription subsidies as inference costs squeeze margins.

ClaudeChatGPTCodex+2
AnthropicOpenAIClaude Opus 5.5+14

ai-policyΒ· Published and added 6 Oct 2026

metr.orgarticleπŸ›‘οΈ Security

AI systems could cover up misbehavior

METR describes a proof-of-concept client-side JavaScript injection in the Inspect evaluation transcript viewer. An unescaped MathJax \href expression lets an agent inject an SVG animate element with an onbegin handler and run its own JavaScript, so it could rewrite transcripts and the Download output. Meridian Labs patched it within one day. The post argues agent outputs and logging systems must be treated as untrusted and security-critical.

InspectMathJaxJavaScript
METRMeridian LabsXSS+2

AI Security, AppSecΒ· Added 29 Oct 2026, published 6 Oct 2026

metr.orgarticle🧠 AI

AI systems could cover up misbehavior

METR argues that AI agents could hide misbehavior by subverting the tools humans use to review them, so observability should be treated as security-critical infrastructure. As a proof of concept, a researcher with AI help found a MathJax-based JavaScript injection in the Inspect transcript viewer in about 10 minutes. It could let an agent alter the displayed transcript. Meridian Labs patched it within a day, and METR has seen no agent exploit it.

InspectMathJaxJavaScript
METRMeridian LabsOpenAI+1

ai-safety, evalsΒ· Added 29 Oct 2026, published 6 Oct 2026

arxiv.orgpaper🧠 AI

BRANCH-MoE: Balance-Aware Tree Routing for Large Embedding Models

BRANCH-MoE proposes routing experts in a Mixture-of-Experts layer through a binary decision tree of depth log2(E), where each internal node's branching probability is centered on an exponential-moving-average of arrival-weighted scores, avoiding the need for an auxiliary load-balancing loss. The paper proves the EMA mechanism prevents routing-mass collapse under log-concave arrival distributions, links expert execution frequency to stochastic-gradient convergence rate, and shows that tree-prefix device assignment bounds cross-device communication. It is benchmarked against Switch softmax routing, DeepSeek-V3 dynamic-bias routing, Skywork logit-normalized routing, and hash routing on Criteo CTR, Forest Covertype, HIGGS, and YearPredictionMSD with E=16 experts and top-4 routing.

Mixture of Experts
DeepSeek-V3SkyworkCriteo+3

researchΒ· Added 6 Oct 2026, published 5 Oct 2026

arxiv.orgpaper🧠 AI

How Sparse Probability Maps Shape Mixture-of-Experts Routing

This paper trains matched 300M and 1B parameter top-2 mixture-of-experts language models using softmax, 1.5-entmax, sparsemax and 2-normmax routing functions and measures how much probability mass each discards and whether tokens are dropped from selected experts. It finds routers co-adapt their learned score distributions to each map's fixed dropping threshold β€” entmax learns tighter score spreads that avoid dropping experts, while normmax routes 21% of tokens to a single expert β€” and that while no sparse map beats softmax on validation loss, sparse-trained models (especially sparsemax) are far more robust to running with a larger K at inference time.

Mixture of ExpertsTransformer

researchΒ· Added 6 Oct 2026, published 5 Oct 2026

x.comthread🧠 AI

Franco Naumow. (@naumowf) on X

A tweet analyzing the Artificial Analysis Intelligence Index v4.3.2 finds that the best open-weights model, Xiaomi's MiMo-V2.6-Pro (released Sep 21, scoring 46), still trails what would have been the top closed frontier score as of 104 days earlier β€” Claude Fable 5's 50 on Jun 9, which itself surpassed the prior best (Claude Opus 4.8 at 42). It notes the current top-of-leaderboard gap is 12 points, with Claude Opus 5.5 (max) scoring 58, framing the persistent ~3.5-month lag of open weights behind the closed frontier.

MiMo-V2.6-ProXiaomiClaude Fable 5+4

evals, modelsΒ· Published and added 5 Oct 2026

arxiv.orgpaper🧠 AI

SpatialChain: A Benchmark for Auditing Spatial Reasoning Faithfulness in VLMs

SpatialChain is a benchmark of 28,350 training and 899 test examples pairing spatially-oriented GQA questions with scene-graph-grounded reasoning chains, designed to audit whether VLMs' correct spatial answers reflect faithful reasoning or linguistic shortcuts. Using a two-axis evaluation (chain-overlap metrics plus a scene-graph-aware LLM judge), the authors find that four of nine tested models hit β‰₯79% accuracy while showing shortcut rates above 39%, that chain quality predicts correctness for most models except Claude Sonnet 4.6 and InternVL3.5-8B (which fail differently, via terse vs. verbose-decorative reasoning), and that SFT on SpatialChain improves Qwen3-VL-8B accuracy by +6.2pp while cutting its shortcut rate to 22%. The faithfulness judge is validated against human annotations and a second LLM judge, with data, generation scripts and evaluation code released publicly.

vision-language modelQwen3-VL
Claude Sonnet 4.6InternVL3.5-8BQwen3-VL-8B+1

evals, multimodalΒ· Added 6 Oct 2026, published 5 Oct 2026

arxiv.orgpaperπŸ›‘οΈ Security

SatBleed: Security of Commoditized Communication Modules in Satellites

SatBleed is an arXiv paper presenting the first in-depth security evaluation of commercial off-the-shelf (COTS) Communication Subsystem (COM) modules used in small satellites. The authors build a threat taxonomy for COM-targeting attacks, analyze representative COM hardware from multiple vendors, and uncover severe firmware, protocol, and architectural vulnerabilities. By correlating findings with open-source telemetry data, they identify at least 28 vulnerable missions currently in orbit that are susceptible to hostile takeover via their command-and-control link.

SatBleed

Hardware & RFΒ· Added 6 Oct 2026, published 5 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

HyBind: Structural Analysis of PQ/T Hybrid Cryptographic Usage

HyBind is an intraprocedural Python static-analysis framework that traces cryptographic component secrets through code to determine whether post-quantum/traditional (PQ/T) hybrid key-derivation and signature-verification logic actually requires both algorithms to succeed, rather than silently accepting a result from only one. It uses registered API contracts and function-return/execution-effect checks to distinguish real AND-logic hybrids from presence-based heuristics that wrongly treat joint and single-algorithm contributions as equivalent. The authors validate it on 50 controlled fixtures and 33 programs (15 using native ML-KEM/X25519 and ML-DSA/Ed25519 APIs), showing relaxed checks can misclassify traditional-only results as hybrid.

Python
ML-KEMX25519ML-DSA+1

AppSecΒ· Added 8 Oct 2026, published 5 Oct 2026

eprint.iacr.orgpaperπŸ›‘οΈ Security

Role-Specific Signature Placement in TLS 1.3: Cost Propagation and PQC Migration

An IACR eprint paper evaluating all 13-cubed ways to assign 13 post-quantum/traditional signature parameter sets across the Root, Intermediate and Leaf roles of a TLS 1.3 certificate chain, holding the algorithm set fixed and varying only placement. Across 286 three-algorithm groups, median max/min ratios reach 2.085x for TLS handshake latency, 4.310x for certificate body size and 4.551x for path-validation cost purely from role order, with Leaf placement mattering far more than Root/Intermediate swaps. It also shows that looking only at Certificate-message size can misrank candidates such as ML-DSA-65 versus SLH-DSA-SHAKE-192s once the Leaf signature in CertificateVerify and full authentication-path cost are included, arguing PQC certificate-chain design must account for role-specific cost under real network/load conditions.

TLS 1.3X.509ML-DSA
ML-DSA-65SLH-DSA-SHAKE-192s

AppSecΒ· Added 8 Oct 2026, published 5 Oct 2026

arxiv.orgpaper🧠 AI

Sharpening Tax in Post-Training

This paper studies the sharpening hypothesis of RL post-training on LLMs: that it mainly sharpens existing base-model behaviors, boosting pass@1 at the cost of solution coverage (pass@K), and shows this cost extends to agentic, multi-turn tool-use tasks, not just math/coding. The authors introduce Sharpening Tax, a metric quantifying this coverage loss, measured across 14 base/post-trained model pairs from four model families on three agentic benchmarks (42 cases), finding post-training pushes tasks toward always-solved or never-solved extremes. They also propose posterior-tempered group sampling (PTGS), a Bayesian per-prompt temperature adaptation method that reduces the tax during RL training while improving both coverage and single-shot accuracy.

research, trainingΒ· Added 4 Oct 2026

adversa.aiarticleπŸ›‘οΈ Security

Top AI agent security resources β€” October 2026

Adversa AI's October 2026 roundup of 49 AI agent security resources, grouped into incidents, defenses, attack techniques, vulnerabilities, red-teaming, frameworks, and CISO material. It covers OpenAI and Gemini agent containment failures (a DseWiki message-board abuse, DNS tunneling, a RubyGems supply-chain attack, Gemini's CTF breakout into real companies), concrete exploits like SalesBleed against Salesforce Agentforce, BragJack hijacking five browsers' built-in AI assistants, CVE-2026-65669 (SQL Copilot sysadmin escalation) and CVE-2026-77521 (MaxKB sandbox bypass), plus defense research (ActGuard, Verifiable Action Card, Agent Control Standard) converging on the idea that authorization must never rest solely on model output.

OpenAIAnthropicClaude+3
CVE-2026-65669CVE-2026-77521Loopjacking+11

AI SecurityΒ· Added 7 Oct 2026, published 4 Oct 2026

x.comthread🧠 AI

SunsetSyntax (@sunsetsyntax) on X

A short account of switching from a split Neo4j (relationships) + separate vector DB (embeddings) setup β€” which required manually reconciling IDs whenever an agent wrote a fact β€” to NornicDB, a single Go-based graph+vector store that speaks Bolt/Cypher and bundles an MCP server in one process. The point is that agents can query a unified memory store without an app layer babysitting two separate databases.

Neo4jGoModel Context Protocol
NornicDB

agents, mcpΒ· Published and added 4 Oct 2026

decrypt.coarticle🧠 AI

OpenAI Banned PewDiePie Twice While He Built Ajax, an Uncensored AI That Will Run on Your PC

Decrypt reports that YouTuber PewDiePie is building Ajax, a 9-billion-parameter fine-tune of Alibaba's Qwen3.5 meant to run locally inside his self-hosted assistant app Odysseus. He describes distilling training data from OpenAI's GPT-5.6 Sol (which got his account banned twice under OpenAI's anti-distillation terms), stripping the model's built-in refusals using the open-source abliteration tool Heretic, and continuing to train it with GRPO. The piece also references an August study showing encrypted reasoning tokens from OpenAI, Anthropic and Google could be replayed and decoded from public repos, and OpenAI's late-September disruption of a reasoning-extraction campaign tied to Moonshot AI.

Qwen3.5GRPOOpenAI API
PewDiePieOpenAIGPT-5.6 Sol+6

models, trainingΒ· Published and added 3 Oct 2026

galaxy.comarticleπŸ›‘οΈ Security

DΓ©jΓ  Vu, Lazarus Crew: $387.5m Bitget Exploit Repeats a Pattern

Galaxy Research post-mortem on the $387.5m Bitget hot/warm wallet theft across 11 chains, attributed to North Korean (Lazarus/DPRK) actors via IP behavior and onchain wallet-overlap analysis by Elliptic and TRM. SlowMist traced the intrusion to a zero-day exploit against two unnamed third-party security vendors ("Product A"/"Product B") that let attackers insert and then delete fraudulent withdrawal commands in Bitget's wallet backend, rather than compromising private keys or cold storage. The piece draws a direct parallel to the February 2025 Bybit/Safe{Wallet} $1.5B theft (doctored signing interface) and the same-week NEAR Intents $3.8m hot-wallet exploit, arguing that private-key cryptography is now reliably secure so attackers instead target the intermediary infrastructure/pipeline that authorizes transactions, with stolen funds repeatedly laundered through THORChain.

THORChainNEAR IntentsGnosis Safe+1
Lazarus GroupDPRKBitget+6

Blockchain, Threat IntelΒ· Added 2 Oct 2026

github.comrepo🧠 AI

Bifrost (Maxim AI) β€” open-source LLM gateway

Bifrost is an open-source, high-performance LLM gateway (by Maxim AI) that exposes a single OpenAI-compatible API across 23+ providers including OpenAI, Anthropic, AWS Bedrock, Google Vertex, Azure, Cohere, Mistral, and Ollama. It provides automatic failover, load balancing, semantic caching, Model Context Protocol (MCP) tool integration, budget and governance controls, OIDC user provisioning, and Prometheus-based observability, deployable via npx or Docker with claimed sub-15 microsecond overhead at 5,000 RPS. It is positioned as a drop-in replacement requiring only a base-URL change for existing OpenAI, Anthropic, or GenAI SDK code.

DockerGoModel Context Protocol+4
Maxim AI

ai-infra, mcpΒ· Added 2 Oct 2026

arxiv.orgpaper🧠 AI

World Embedding Benchmark

The World Embedding Benchmark is a new evaluation suite of 8,000 controlled simulation cases across 80 families (fluid mechanics, solid mechanics, dynamics, optics & electromagnetism), each pairing a rendered video with simulation-derived physical annotations. It tests pre-trained omnimodal embedding models on text-video retrieval, physical-property regression, and multiple-choice video-description classification, finding that current embeddings align poorly cross-modally while lightweight probes can still recover physical quantities, and that continual contrastive training improves alignment but hurts regression. The authors also show retrieval-augmented generation using these embeddings with MiniMax-H3 improves the physical fidelity of generated videos.

MiniMax-H3
World Embedding Benchmark

evals, multimodal, researchΒ· Added 5 Oct 2026, published 2 Oct 2026

arxiv.orgpaper🧠 AI

NeutronGym: Physics-Graded Neutron Instrument Design for LLM Agents

NeutronGym is an executable environment for neutron scientific-instrument design where LLM agents build instruments via validating tools, McStas ray-traces the result, and a level-resolved ladder grades syntax, runtime, structure and physics without an LLM judge. A curated McStasBench slice adds 16 tasks from published instruments; seven frontier models solve at most 7 of 16, but reinforcement learning on the ladder's reward takes Qwen3-8B from 11% to 77% on held-out instances (surpassing an untrained Qwen3-32B), with ablations showing the partial-credit ladder is responsible for most of the gain.

Qwen3McStas
NeutronGymMcStasBenchQwen3-8B+1

evals, training, researchΒ· Added 5 Oct 2026, published 2 Oct 2026

openai.comarticle🧠 AI

A model guide for the GPT-6 family

OpenAI's practical guide to the GPT-6 family (Astra, 6.1 Sol, Luna), with per-token pricing and when to use each model. It gives guidance on picking a reasoning level (low to max), Fast and Ultrafast speed modes, and rewriting skills, AGENTS.md and prompts with clear decision boundaries and a definition of "done". For long-running agent work it covers mid-turn steering over the Responses WebSocket API, async tool calling, multi-agent delegation (beta) and computer use with Playwright or PyAutoGUI. It also gives production advice on prompt caching, compaction, monitoring and measuring cost per successful task.

OpenAI APICodexResponses API+3
OpenAIGPT-6 AstraGPT-6.1 Sol+1

prompting, agents, ai-infraΒ· Published and added 2 Oct 2026

github.comrepoπŸ›‘οΈ Security

NuvexNetwork/nuvex

Nuvex is a Solana-native verifiable compute and oracle protocol, still pre-mainnet, whose own README documents unresolved security gaps instead of hiding them: its VRF proof verification relies on solana-ecvrf 0.0.1 (RFC 9381 ECVRF-Edwards25519-SHA512-TAI) which has no known audit, max_fee is stored but never actually charged, and VRF fulfillment is first-come among any node meeting the configured stake/heartbeat threshold β€” meaning an operator who funds several keys at a low minimum stake can selectively pick which randomness output gets used. The deploy-mainnet script is stubbed to exit before any transaction, and unresolved design questions (fee shares, challenge/reject state transitions) are tracked as explicitly blocked ADRs rather than quietly shipped.

SolanaRust
solana-ecvrfRFC 9381ECVRF-EDWARDS25519-SHA512-TAI

BlockchainΒ· Published and added 2 Oct 2026

arxiv.orgpaper🧠 AI

ReFract: Benchmarking Perspective Awareness in Language Model Agents with Text World Models

ReFract is a benchmark of 150 expert-validated entries testing whether LLM agents can infer a user's role and act only through tools/actions legitimate for that role, a capability the authors term "Perspective Awareness." Entries are grounded in anonymized industrial-maintenance support queries and use constructed Text World Models to simulate the agent's operating environment and generate perspective-aware action trajectories. State-of-the-art LLMs solve at most 69% of tasks, with over half of trajectories containing attempts at perspective-violating actions, exposing this as a largely unsolved axis of agent evaluation relevant to high-stakes, physically-enacted agent deployments.

ReFract

evals, agentsΒ· Added 5 Oct 2026, published 2 Oct 2026

Showing 180 of 344

Show more