Top stories
Metacognitive prompts improved AI-assisted writing and later recall, even as workers rated the AI less helpful.
A randomized experiment assigned 297 knowledge workers to write 594 essays with an AI assistant. Dynamically generated scaffolds asked them to state a goal and decompose the task before using the model. The authors report better essays, stronger topic recall three days later and a transfer gain when the scaffolds were removed.
The same participants found the AI more cognitively demanding and less helpful. The preprint therefore separates felt fluency from measured performance: friction that forces planning may improve both the work and what the person learns. It is a 46-page preprint, not a peer-reviewed result, and the abstract lists no released code or data.
Source: arxiv.org
Microsoft’s MAI-DxO diagnostic orchestrator reached 83% accuracy on complex medical cases, against 22% for physicians without references.
MAI-DxO runs rounds of debate among virtual physicians that propose diagnoses and choose tests by expected value and cost. On SDBench, Microsoft reports 83% accuracy on 304 New England Journal of Medicine cases, versus 22% for physicians without references and 36% with them. On emergency-department cases it reports 80% against 47%.
The work appeared in Science, and Microsoft released benchmark components for selected cases. The figures remain Microsoft’s evaluation; the public post does not explain physician recruitment or scoring. This is an orchestrator and benchmark, not a clinical product or a new model.
Source: microsoft.ai
PHP2Shell exploitation began four days before patches arrived, and Cloudflare now counts millions of attempts.
Amazon’s MadPot honeypots saw an exploit attempt on 17 October, before the 21 October disclosure. Cloudflare says attack volume rose from thousands before publication to millions as operators tuned payloads against blocked-request feedback. VulnCheck then published an exploit that bypasses ASLR on x86-64 systems using PHP’s recommended production configuration.
The incident has moved beyond a disclosure failure: 32 UK government services went offline and sites in several European countries were also reported unavailable. Amazon warns that compromise may predate the advisory. The evidence shows AI-discovered vulnerabilities can enter active exploitation before defenders receive a patch.
Sources: aws.amazon.com, theregister.com
US data-centre job postings rose 20% in three months and 147% since June 2024 while software hiring stayed weak.
Indeed’s October snapshot describes a low-hire, low-fire labour market: its overall posting index reached 103.8, 2.8% above a year earlier, but new postings remained flat and September payrolls added only 29,000 jobs. Engineering occupations strengthened while software development sat near 79 on an index set to 100 in February 2020.
The AI build-out is shifting demand rather than lifting every technical role. Indeed reports posted pay up 4.7% in IT systems and solutions and 5.6% in electrical engineering, against 2.4% overall. Seattle and San Francisco remained among the weakest hiring markets.
Source: hiringlab.indeed.com
Claude produced machine-checked safety proofs for 239 entry points across 123 open-source libraries.
Anthropic and Theorem turned existing fuzz tests into formal specifications and had Claude prove that selected RISC-V binaries cannot crash or violate memory safety for inputs under 64 MB. The resulting Rocq proofs total about 180 million lines, and the work surfaced hundreds of bugs, including one reached only by a rare roughly 20 MB input.
The guarantee is narrower than the headline: it covers single-threaded static binaries, a fixed memory budget, modeled Linux behaviour and the written specifications. Anthropic published a subset of proofs plus its RISC-V and operating-system semantics, so others can check the proof kernel’s output and test whether the approach scales beyond this setup.
Source: anthropic.com
Releases
OpenAI takes the Decisions API out of beta with gpt-6-luna, doubling the questions allowed per request. The endpoint (POST /v1/decisions) evaluates text, images and JSON and returns typed answers (a probability that a condition holds, a choice from a fixed set, or a score against a rubric) in one call; OpenAI says it is about ten times faster than the Responses API. What changed since the early-October public beta: prompt caching with cache discounts on shared input, images inside individual question instructions, structured data passed as input_json, up to 400 questions per request (from 200), hosted image URLs, conversation history with tool calls, organisation usage reporting, native integration with GPT-Live, and Private Link. gpt-6-luna remains the only supported model, so a team cannot choose a cheaper or local backend.
Source: openai.com
Ai2 releases OlmoEarth v1.3, a satellite embedding model, with precomputed embeddings for the whole planet and a browser explorer. The model reads a year of Sentinel-1 radar plus Sentinel-2 and Landsat imagery and writes one 128-number vector for every 10-metre pixel (the first 64 numbers also work alone), so a crop map, land-cover map or change analysis becomes training a small classifier on top, with no GPU-heavy fine-tuning. Ai2 reports its 128-dimensional embeddings score highest on 20 of 27 evaluations against AlphaEarth Foundations and Tessera v2 (the 64-dimensional version leads on 18), including a new tropical crop-type benchmark, PLANTEUR; these are Ai2’s own comparisons. Source: huggingface.co/blog/allenai
IBM publishes Granite Timeseries Ensemble, a no-training recipe that combines four Granite forecasters. The recipe stores a configuration, not merged weights, and pulls four member checkpoints with different architectures at run time, then pools their median and quantile forecasts either uniformly (the recommended Probabilistic Ensemble) or weighted by each member’s forecast spread (the IQR Ensemble). On 97 GIFT-Eval configurations, with no fine-tuning and no fitting on test targets, IBM reports an aggregate MASE of 0.683 for the Probabilistic Ensemble against 0.685 for the best single member (PatchTST-FM-r2), and 3rd place among eligible systems on both MASE rank and CRPS rank in a leaderboard snapshot of 20 October. Source: huggingface.co/blog/ibm-research
Liquid AI announces RIPL, an inference engine that returns a complete LFM response in under 50 ms. RIPL (Real-time Inference Pipeline) targets request paths with hard latency budgets, such as search ranking, recommendations, fraud and payment decisions, where teams today use gradient-boosted trees or small embedding models because LLM serving is too slow. Liquid reports that LFM2.5-1.2B on RIPL has 14.4 to 28.4 times lower p95 latency than Qwen3.5-0.8B on vLLM across two workloads, and LFM2.5-2.6B 5.6 to 7.7 times lower than Qwen3.5-2B; Shopify is named as deploying LFMs for search enhancement at under 20 ms with about half the parameters of alternatives. Source: liquid.ai
Hugging Face’s Bio team releases Carbon-X, a 14.8B open model trained jointly on DNA and text. Built on Qwen3-14B with a hybrid tokenizer (the Qwen3 text vocabulary plus 5,515 DNA tokens, each covering a 6-base k-mer), it takes raw DNA in a chat prompt and answers in English: pathogenic-or-benign calls for variants, regulatory regions, organism classification and next-base prediction. Hugging Face reports an average of 66.7% across five DNA benchmarks with thinking off, 27 points above Qwen3-14B and next to GPT-6.1 Sol at 67.5%, while leading on coding-variant effects and next-base prediction but trailing on complex variants (85.1 against Opus 5.5’s 94.8) and single-base variants (70.4 against 76.2). Source: huggingface.co/HuggingFaceBio/Carbon-X
MiniMax publishes the weights of M3.1 Flash, a roughly 428B-parameter multimodal MoE with 1M-token context, under a community licence. The API launch of 19 October said weights would come “later”; they appeared on Hugging Face on 23 October at 00:59 UTC (about 252 GB in 48 shards plus a DSpark speculative-decoding draft head). The model card gives about 428B total and 23B activated parameters, text, image and video input with text output, sparse attention in all layers, quantisation-aware training of the routed experts and attention paths, and reasoning_effort settings from low to max; recommended servers are SGLang, vLLM and TokenSpeed, with Transformers, KTransformers and unsloth support “in progress”.
Source: huggingface.co/MiniMaxAI/MiniMax-M3.1-Flash
Ant Group’s inclusionAI announces Ling-3.0-flash-Sante, a 124B healthcare model with 5.1B active parameters under MIT. Built on Ling-3.0-flash, it uses a hybrid linear-attention MoE (Kimi Delta Attention, gated MLA and sparse experts), trains to 256K tokens, and targets medical reasoning, literature research, deep research and tool-assisted workflows with thinking on by default. The card shows results only as figures (AFUMED-Drug medication contraindications, AFUSAFE-MedSCE safety, MedMCQA, BrowseComp up to 64 sub-agents with an in-house harness, HLE with tools, DeepSearchQA, Tau3-Banking), so the numbers are inclusionAI’s own and cannot be quoted from text here; it labels the model a research model, not a medical device. Source: huggingface.co/inclusionAI/Ling-3.0-flash-Sante
Sakana AI announces Sakana Aquarium, a platform for building and running AI agents on top of an organisation’s own ontology. The Japanese lab says it organises scattered tables and documents into shared definitions (the ontology) without moving the data, adds governance (permissions, approval before execution, a record from evidence to result, model-usage tracking) and a managed agent runtime where a workflow of lookup, AI judgement, function calls and human approval is deployed as written. It frames the product as what its forward-deployed engineers rebuilt for each project (with MUFG Bank, SMBC Group and Daiwa Securities Group named as earlier work) and now package once; it lists former Palantir, Snowflake, Microsoft and AWS staff on the team. Source: sakana.ai
Anthropic launches Claude Models on Google Cloud (Anthropic managed), the Claude API run by Anthropic and billed through Google Cloud Marketplace. A team subscribes in Marketplace, enables claude.googleapis.com, and activates a new Anthropic organisation tied to the Google Cloud project (separate from any existing Claude Enterprise organisation); access is controlled by three IAM roles (roles/claude.viewer, .user, .admin), the Claude Console opens from the Google Cloud console, and the SDK client (AnthropicGoogleCloud, beta) uses Application Default Credentials. It is the full Claude API surface (same request format, batches, files, skills, Managed Agents), global location only, and fast mode for Claude Opus 5.5 is available on it from day one.
Source: platform.claude.com
Anthropic donates the Agent Skills standard to the Agentic AI Foundation under the Linux Foundation. Anthropic hands over the name, logo, GitHub organisation and the agentskills.io domain; engineers from Anthropic, Google, OpenAI and others will maintain it as individuals, with David Soria Parra and Mahesh Murag as lead maintainers, and a proposed roadmap of versioned releases, a formal proposal process and security guidance for people who write and install skills. Anthropic says more than 70 agent platforms (ChatGPT, Cursor, GitHub Copilot and VS Code among them) have adopted it since December 2025, with 1 million skills published and nearly 280 million installs (Anthropic’s figures). Source: anthropic.com
AI21 shows how it cut GitLab Duo Code Review’s cost by 98% on a public benchmark by changing the harness, not the product. On Martian’s Code Review Bench (50 public pull requests, scored by two judge models), the baseline (Claude Sonnet 5 on all four stages of GitLab’s source-available flow) cost $0.589 per pull request at 46.4% F1. Compacting the context alone saved 19%; moving every stage to DeepSeek V4 Flash, self-hosted with vLLM on H100s but priced at Together AI’s list rates, cost $0.086 (85% less) at 48.4% F1; doing both reached $0.0135 per pull request (97.7% less) at 47.2% F1 and about a third of the latency, because compaction made the largest prompts (up to 480K tokens) fit the 256K deployment instead of falling back to Sonnet. Source: ai21.com
Cohere opens a public beta of Confidential Computing on Model Vault. Inference for a dedicated Model Vault deployment runs inside a hardware-protected environment spanning CPU and GPU (NVIDIA H100 GPUs with NVIDIA Confidential Computing on Microsoft Azure), customers can verify the environment through remote attestation before sending data, and request payloads are encrypted end to end to the attested environment so intermediaries cannot read them. Cohere says the target is financial, clinical, legal and source-code workloads that contract or regulation kept off managed AI platforms, and states plainly that it does not remove application-security, compliance or data-residency obligations. Source: cohere.com
Anthropic ships Claude Code 2.1.308 and 2.1.309, mostly sandbox and permission-check fixes. 2.1.309 (22 October, 20:34 UTC) fixes sandboxed Bash commands on macOS and Linux that ran the shell’s startup files outside the sandbox before each command, macOS denyWrite glob patterns that did not apply when a folder was reached through a symlink, sandboxed commands and auto-accepted edits that could modify the MCP config file passed with --mcp-config, a Bash permission check that trusted a variable set by a command whose redirect can fail, compound cd-then-git commands that skipped the permission prompt, an Edit(path) deny rule that did not stop a Bash redirect to that path, and PowerShell hooks that did not block on exit code 2 or failed open without Git for Windows. It also fixes sessions compacting repeatedly after a very large nested CLAUDE.md (now only the start loads), and a Code Review push queued behind a running review still starting one after @claude review stop. 2.1.308 (04:19 UTC) is “bug fixes and reliability improvements”.
Source: registry.npmjs.org
AWS makes Continuum for code vulnerabilities generally available. Continuum builds a context graph of an AWS environment (resource topology, identity relationships, network reachability), ingests existing findings and scans code, tests whether a finding is exploitable in an isolated sandbox, ranks by business impact, and opens remediation pull requests with an exploitability proof and blast-radius assessment attached. It picks a model per task, starts in Learn mode (proposed fixes need approval) and can be switched to Enforce mode to act autonomously within guardrails once it has earned trust; it works alongside GuardDuty and Security Hub. Source: aws.amazon.com
Amazon SageMaker AI adds serverless customisation for Meta’s Muse Glimmer, Qwen3.8 27B and Ministral 3. Teams can now fine-tune these open models without managing clusters, using supervised fine-tuning, direct preference optimisation or reinforcement fine-tuning, with LoRA or full fine-tuning, and pay only for use. It joins Nova, Gemma 4, Nemotron 3.5, Qwen, Llama, gpt-oss and DeepSeek models already on the service. Source: aws.amazon.com
Research
Models that can name a belief often cannot use it: the explicit-to-applied theory-of-mind gap. The paper splits theory-of-mind benchmarks into explicit ToM (recognise what someone believes) and applied ToM (predict their behaviour from it). On SimpleToM, Llama-3.1-8B scores 51.5% overall, but 99.4% on recognising the mental state and only 28.9% on predicting behaviour, so aggregate scores hide the gap. Source: arxiv.org
Same probability, different advice: gain-versus-loss framing shifts LLM recommendations in 32.4% of cases. FrameBench-HPS has 2,880 prompts from 240 high-stakes scenarios (health, finance, career, legal). Restating the identical probability as a gain or as a loss changed the recommendation category in 32.4% of complete groups across seven LLMs, mostly shifting toward or away from uncertainty rather than flipping outright; human raters confirmed shifts in perceived risk. Source: arxiv.org
Monitorability is trainable: an unsupervised objective that keeps chain of thought coupled to the answer. Chain-of-thought monitoring is fragile because training can decouple the visible reasoning from what the model does. The authors maximise mutual information between the chain of thought and the output as a post-training stage. Source: arxiv.org
BELT: a linear probe that tells a reasoning model when it already knows the answer. Framing “when to stop thinking” as metareasoning, the method learns beliefs about current and future answers from a frozen model’s hidden states and fits a small stopping policy on top. Averaged over five out-of-distribution math benchmarks it cuts generated tokens by 41% (Qwen3-1.7B) and 51% (OLMo-3-7B-Think) with no accuracy loss, and the math-trained probe transfers to coding and agentic tasks. Source: arxiv.org
GRAFT: confine what a model learns from reward hacks to parameters you delete afterwards. When a monitor catches a model cheating during RL, penalising it can teach the model to cheat in ways the monitor misses. GRAFT instead routes the learning updates from flagged hacks into a designated set of parameters that is removed after training. Source: alignment.anthropic.com
BrainLoRA: LoRA fine-tuning of a 104B multimodal model to predict human brain responses. Instead of fitting a readout on a frozen backbone, the authors adapt very large pretrained models with low-rank adapters, using causal structure to predict several timepoints in one pass. Across nine backbones, including the largest ever adapted for brain encoding (104B parameters), performance improves; on the same Qwen3-Omni backbone as the prior best it reaches the best published result on the Algonauts 2025 Challenge. Source: arxiv.org
Red-teaming Claude Code’s Auto Mode and OpenAI Codex’s Guardian with an adversarial agent. The best attacks on these production blocking monitors used agent-generated prompt injection against the monitor, multi-agent attacks, and malicious context compaction. Fixes (more tool coverage, better transcript formatting, an agentic monitor stage) help, but the authors say robustly stopping multi-context attacks at acceptable cost remains an open problem. Source: alignment.anthropic.com
Inserting extra tokens or elaborations into a prompt often “improves” accuracy by randomly flipping predictions near the decision boundary, not by genuine gains (five context-augmentation methods, seven models, three datasets; a caution before adopting such tricks). Inserting extra tokens or elaborations into a prompt often “improves” accuracy by randomly flipping predictions near the decision boundary, not by genuine gains (five context-augmentation methods, seven models, three datasets; a caution before adopting such tricks). Source: arxiv.org
Cache engineering lets an agent drop and reposition parts of its own KV cache without editing the transcript or re-prefilling; a rolling-drop policy on tool responses plus the AKV serving engine targets the long-trajectory agent cost problem. Cache engineering lets an agent drop and reposition parts of its own KV cache without editing the transcript or re-prefilling; a rolling-drop policy on tool responses plus the AKV serving engine targets the long-trajectory agent cost problem. Source: arxiv.org
Rethinking SAE evaluation: judging sparse autoencoders by whether features form an “atomic interpretable unit” basis exposes SAEs that look monosemantic on existing metrics but hide polysemanticity and redundancy (hundreds of SAEs tested). Rethinking SAE evaluation: judging sparse autoencoders by whether features form an “atomic interpretable unit” basis exposes SAEs that look monosemantic on existing metrics but hide polysemanticity and redundancy (hundreds of SAEs tested). Source: arxiv.org
Probing and steering for deception, high-stakes awareness and sycophancy in Llama-3.1-8B: the “logistic regression reads best, difference-of-means steers best” pattern holds for two behaviours and reverses for sycophancy; the best steering layer can sit well before the best detection layer. Probing and steering for deception, high-stakes awareness and sycophancy in Llama-3.1-8B: the “logistic regression reads best, difference-of-means steers best” pattern holds for two behaviours and reverses for sycophancy; the best steering layer can sit well before the best detection layer. Source: arxiv.org
171 emotion directions extracted from a 4B cybersecurity model; steering toward calm, serene or desperate gains 1.6 to 2.1 points on a Cybench subtask, and a context-aware router reaches +4.2 points (small effects, vendor-style setup). 171 emotion directions extracted from a 4B cybersecurity model; steering toward calm, serene or desperate gains 1.6 to 2.1 points on a Cybench subtask, and a context-aware router reaches +4.2 points (small effects, vendor-style setup). Source: arxiv.org
Same answer, different reasons: across seven languages and six frontier LLMs, whole-response embedding similarity overstates agreement of reasoning traces; 52.1 to 67.3% of top-quartile holistic matches are not top-quartile on structural similarity, and bilingual human judges side with the structural measure. Same answer, different reasons: across seven languages and six frontier LLMs, whole-response embedding similarity overstates agreement of reasoning traces; 52.1 to 67.3% of top-quartile holistic matches are not top-quartile on structural similarity, and bilingual human judges side with the structural measure. Source: arxiv.org
Brain recordings from 227 people reading Chinese, English and French show a shared cortical semantic geometry whose consistency rises from sensory to higher-order association cortex. Brain recordings from 227 people reading Chinese, English and French show a shared cortical semantic geometry whose consistency rises from sensory to higher-order association cortex. Source: arxiv.org
HexaShell: a coding agent drives a two-arm robot through one command line and writes reusable, tested tools after each failure, reaching 46.9% success on 42 hidden-seed RoboDojo tasks with no training or demonstrations. HexaShell: a coding agent drives a two-arm robot through one command line and writes reusable, tested tools after each failure, reaching 46.9% success on 42 hidden-seed RoboDojo tasks with no training or demonstrations. Source: arxiv.org
Economy and work
Barclays will cut about 5,000 jobs (5% of 93,000 staff) in a plan its CFO ties to AI, while its CEO calls AI “the icing on the cake, not the cake”. Announced with Q3 results on 22 October: 1,000 posts are already gone, and the bank expects to save more than £1.1bn in 2027. CFO Anna Cross said about 60% of the actions fall in support functions, “including fewer developers, as AI makes our people more productive.” Asked how many cuts are directly AI-linked, CEO CS Venkatakrishnan said technology simplification drives “the bulk” of the efficiency gains and AI “may have a more important role in the future.” Unite called it “using AI as an excuse”; an AJ Bell analyst noted profit was slightly below forecast and that HSBC, Standard Chartered and Danske have also flagged AI-related cuts this year. Source: theguardian.com
Goldman Sachs: up to 9% of workers (about 1 in 11) could be displaced by AI, but the layoffs are likely to wait for a recession. A 22 October note by economist Joseph Briggs, as reported by Fortune, assumes AI lifts productivity 15% in developed economies, displaces up to 9% of workers and weighs on hiring by another 3%. Its core finding from decades of data is that automation-related job loss is limited in healthy economies and accelerates in downturns: across 25 occupations hit by past technology, employment fell an extra 4% over five years for every point the unemployment rate rose, and the average of those 25 fell 25% in five years (Briggs calls this an upper bound). Source: fortune.com
Pragmatic Engineer’s survey of 27 workplaces: AI spend per developer ranges from under $300 to $3,000 a month, uncorrelated with company size, and PR throughput gains vary from none to 5-10x. Gergely Orosz (20 October) gathered accounts from engineering leaders plus aggregate data from CodeRabbit (weekly PRs per developer up 113% year on year, tracking 20,000 developers) and Gitar (“AI-native” teams ship 60+ PRs per developer per week). Examples: a quant firm with about 2,000 developers went from $500K a month in January to $8M in September ($1,600 per developer, mostly traders, with a $25,000 per-employee cap); a two-person .NET shop spends $3,000 per developer and says it does 10-15 PRs a day; a publicly traded SaaS company with a $1,200 cap sees little change in merged-PR velocity because human reviews still catch oversized or unneeded changes. Source: newsletter.pragmaticengineer.com
Uber puts all 30,000 employees on ChatGPT Work after a 1,000-person pilot in which 80% of early users were non-engineers. Uber’s VP of engineering told TechCrunch (22 October) that pilot users analysed operations data, localised training material and built personal dashboards, and that 30 AI engineers were paired with teams for two weeks to automate parts of their jobs. Uber did not disclose cost and has not set how employees will use the tool; it says it will track workflows and outcomes. Source: techcrunch.com
Forward-deployed engineers become the AI vendors’ way to recoup a trillion-dollar bet; OpenAI says its FDE team succeeds when it makes itself obsolete. The Register (22 October) cites Gartner (about $1 trillion spent on AI by the industry last year, up 34.7% in 2026), AWS’s $1 billion FDE unit, Anthropic’s $100 million FDE training pledge, Levels.fyi US median FDE pay of $216,250, and Benioff’s claim that customers with Salesforce FDEs deploy 33% faster (a vendor claim), and asks who the engineers answer to. OpenAI’s own post the same day describes about 15 FDEs working on 10+ use cases at a semiconductor customer where verification is about 70% of project effort, and the founder’s rule that if Codex can one-shot a use case the team built over months, “that is progress.” Sources: theregister.com, openai.com
GitHub Copilot adds opt-in industry comparisons that rank a company’s share of “agent-first” or multi-agent users against peers. The Copilot impact dashboard (22 October) now shows adoption and the pull-request merge rate of agentic versus non-agentic users, benchmarked by company size (1-999, 1,000-4,999, 5,000+) and ten industries, with a 28-day window and rankings appearing only once enough companies opt in. It is a vendor-defined metric and participation is off by default. Source: github.blog
Salesforce will require companies to register outside AI agents (Claude, others) from about November and treat each agent action as a billable “interaction”; pricing is not yet announced. The Information (22 October, paywalled; read from the article text available) reports that Atlassian, Workday, ServiceNow and Datadog are building similar “tollgates”, and that a software consultant says most of his 150 enterprise clients now run Claude or OpenAI agents inside Salesforce for free and are reconsidering. Customers can buy unlimited agent use with a “headless license”; new customers get a three-month grace period and existing ones are affected at renewal. Source: theinformation.com
ChatGPT Ads expands to 26 more countries (89 in total) with over 100,000 advertisers in about eight months; ads run only on the Free and Go plans. OpenAI’s 21 October post says more than 1.2 billion people use ChatGPT weekly, and that Plus, Pro and Enterprise stay ad-free. The price of the free tier is therefore attention rather than money, and the paid tiers are the ad-free ones. Source: openai.com
DeepSeek open-sources its production inference stack; Latent Space’s estimate puts its inference margin above 80%, with an 81-day payback per cluster. The 20-21 October release of DeepInfer came with serving data (155 trillion tokens a day, 96% input cache hit, off-peak prices of $0.15 and $0.60 per million input and output tokens). Latent Space’s AINews computes about $1 million of revenue an hour against $5-8 per card-hour of cost. Source: latent.space
AI stocks sold off on 22 October: Nasdaq down 2.6%, Meta down 7% after announcing a new share class to fund AI spending, Lam Research down 11.8%, CoreWeave down 10.1%, Nvidia down 4.4%. AP names the cause as worry about how expensive it has become to borrow money to build data centres and buy chips, plus doubts that prices ran too high, even as the companies reported growth (Lam beat estimates and still fell). Non-AI stocks held up, and Brent crude rose 4% to $113 on the Iran war. Source: theguardian.com
SpaceX’s $40 billion debt raise is pricing at about 8.3% for its lowest-rated tranche and about 7.75% for chip-backed debt, over a point above where its existing bonds trade. Semafor (22 October, exclusive, citing people familiar) says the deal led by Apollo and Goldman Sachs reflects an AI-loan market that “has pulled back sharply over the past few weeks” after CoreWeave’s debt selloff, and that default insurance on SpaceX has widened. Pricing may change before it closes next week. Source: semafor.com
Tesla widens Cybercab to Dallas next month and will sell to fleet operators by year-end, but its shareholder letter now charts “unsupervised” instead of “paid” robotaxi miles. TechCrunch (22 October) notes that Tesla’s Q2 letter showed cumulative paid robotaxi miles, which a close read showed down 36% from Q1; the Q3 letter replaced that chart with cumulative unsupervised miles. The CFO gave no paid-mile figure (“utilization improving”), and Musk says revenue will not be noticeable until Q2 2027. Source: techcrunch.com
AI firms tell UK ministers they have about 12 months to win public consent for data centres before US-style opposition blocks construction. A submission from the Sovereign AI Leadership taskforce (Nvidia, Microsoft, Cisco and others), reported by the Guardian on 22 October, says organised local opposition has stopped fully permitted US projects and that electricity cost and distrust, not AI itself, drive it. They ask for a “compact” letting councils keep more tax revenue from hosts. Source: theguardian.com
Prompting techniques
Separate observed facts from the tool’s interpretation (r/PromptEngineering). A reusable prompt for analysing security alerts: require five sections (observed facts, detection interpretation, plausible explanations including benign ones, missing evidence, provisional conclusion) and forbid treating detection names as established facts or assuming a blocked action succeeded. The poster suggests it generalises to finance, debugging and document review. Source: old.reddit.com
13 context-engineering patterns for long-running coding agents (r/PromptEngineering). Practical rules from one practitioner for keeping multi-hour agent sessions reliable: keep static prompt prefixes identical to protect the prompt-cache discount (no timestamps or counters at the top), cap directory listings at two levels, compact grep results into a five-row table before editing, write large outputs to scratch files and read line ranges, tag checkpoints in Git, and truncate tool output with head/tail limits. Several points name the poster’s own tools; none is backed by measurements, and the cache figure is a claim of the poster. Source: old.reddit.com
Test a skill’s policy instructions case by case (skillEd). The author of an open-source toolkit for evaluating reusable agent skills argues that “follow the refund policy” should be split into independently checkable rules (eligibility window, exclude shipping, rounding, consistent explanation), with boundary and counterexample cases written before editing the prompt and separate holdouts afterwards. The repo’s refund example includes before/after results; the author admits a passing score is not proof of coverage and asks for cases where output passes an assertion yet breaks the rule. Source: old.reddit.com
What people are building
Swift-1.5 Qwen3.8-27B in hipfire: about 2.2x faster end to end than llama.cpp on an AMD 7900 XT. A LocalLLaMA user quantised the Swift-1.5 fine-tune of Qwen3.8-27B to the hipfire runtime’s MQ4 format and bundled the multi-token-prediction head for speculative decoding. On an RX 7900 XT (20 GB, ROCm 7.1) against a Q4_K_S GGUF on llama.cpp, the builder reports prefill 1.4-1.85x faster (about 1,100 tok/s at 16K context against about 700), decode of 36.5 tok/s on real prompts, and 237 s against 530 s for six Rust coding tasks. Source: huggingface.co/datayoda/Swift-1.5-Qwen3.8-27B-hipfire-MQ4
llama.cpp pull request refactors Intel XMX matrix engines, roughly doubling speculative-decoding speed on an Arc B70. A user’s measurements on a B70 with SYCL running a 30B Q6_K model with DFlash2 draft decoding show tok/s going from about 37-53 to about 68-73 on the same prompts once token verification became cheaper (the draft length was raised, which lowers the acceptance rate, so the gain comes from verification cost). It is an open upstream pull request, so the speed-up is not yet in a release. Source: github.com/ggml-org/llama.cpp
Opposable: a 2B model that operates Android apps entirely on the phone. The Android app reads the screen through the accessibility service and taps and types; remote agents (Claude, ChatGPT, Codex) can drive it, and with none connected a GUI-Owl 1.5 2B model (a Qwen3-VL fine-tune from Alibaba’s Mobile-Agent team) runs the same loop locally in 4 bits through llama.cpp (1.05 GB language model plus 445 MB vision encoder). The write-up reports one step at 7.3 s on a Mac M2 CPU (down from 10.6 s) at unchanged accuracy on a 36-screen test set, half of it spent in the vision encoder, which takes 236 ms on a Galaxy S25 NPU against 3.9 s on the M2. Source: getopposable.com
Distilling Kokoro TTS to a single voice, 50-100x faster, trained on a basement 4070 Ti with Opus doing the work. A web developer with no ML background asked Opus 5.5 to hill-climb a distilled single-voice version of the Kokoro text-to-speech model against a clear metric, trained over about a day on a 4070 Ti Super. The aim is real-time speech on phones and low-power Android devices for an audiobook feature in a novel-reading site; the author calls the result “Opus slop” but says it works on a phone. Source: old.reddit.com
Handwired: compile ordinary JavaScript into an exact, differentiable neural net with no training. Chenglou’s project turns branches such as a ternary into two ReLUs and weighted sums, so the compiled circuit reproduces the code exactly on integers and stays differentiable, and runs in the browser without a GPU. The page documents the limits itself: the construction is exact on a declared integer grid, between grid points the output interpolates (4.5 gives 11 in its example), and FP32 rounding breaks it past 2^24 plus 6. Source: chenglou.me
Open-XTTS-Trainer: the missing training stages for XTTS v2 after Coqui shut down. Provides a modular three-stage suite for the audio tokenizer (DVAE with Gumbel-Softmax codebook annealing), a text and vocabulary extender that appends new Unicode scripts so Hindi, Arabic, Thai and others stop crashing the fixed 17-language tokenizer, and the HiFi-GAN vocoder. The author reports verified loss convergence on real speech and a one-click Colab demo; modern PyTorch dependency breakage is patched. Source: github.com/amitbhakt/open-xtts-trainer
agent-usage-guard: a Claude Code mod that holds subagent fan-out and heavy-context churn before they burn the five-hour window. The mod reads the plan’s live 5-hour and weekly usage percentages and acts before spend, at agent start, prompt submit or tool call: it asks the user in Claude Code’s own dialog or, when nobody can answer, refuses and tells the model why so it can wait or batch. It can suggest “compact then send” when the prompt cache has expired and the context is large, and caps agent fan-out above 80 percent usage. Source: github.com/rbartoli/agent-usage-guard
SCP: a message layer so coding agents in different harnesses and machines can talk, steer and wake each other. The Swarm Communication Protocol lets an orchestrator in Claude Code spawn workers in Codex, OpenCode, pi, Muse, Agy or Grok, steer them mid-run and receive results as handbacks; messages land after a tool call, on a prompt or at a stop, and hibernated sessions wake on a message. Reach follows the process tree, cross-account contact needs mutual consent, and an optional judge reviews what crosses a boundary. Source: github.com/scphq/scp
C-Sweet: an open-source “agent-first business” with sandboxed small-model roles, shown on a local Qwen3.8 27B. The author argues that many small, narrowly scoped agents with defined roles can do the work of a business on local models, and claims Qwen3.8 27B on an RTX 6000 handled every corporate role tried so far. The app is described as open source and self-hostable, with each agent sandboxed and an SDK for writing new agents; the thread shows a demo video of the business simulator. Source: old.reddit.com
Lampline: self-hosted voice agents that import Dialogflow CX agents and test them with an AI caller. Lets teams build, test and run phone agents on their own machine or servers, importing agents from Dialogflow CX and CX Agent Studio, supporting 20 model providers and running free locally without API keys. The README claims about $0.02-0.17 per call against $0.50 on hosted platforms, which is the maker’s figure, not an independent one. Source: github.com/C4rohan/Lampline
A Samsung TV’s home screen replaced by a Claude Code-built launcher. Fed up with an ad-filled home screen, the author had Claude Code build a clock, app and console launcher. The method worth copying: fake the handful of TV APIs the launcher depends on so layout and remote navigation can be iterated in a laptop browser, then take over the Home button through a helper that edits undocumented settings, saves the originals and restores them on failure. Source: github.com/NelsonEU/arn0-tv
Super Mario 64 demake for the Game Boy Advance, written by Claude under steering. The author chose direction and trade-offs and let Claude write code, tests and tooling in an agentic session with a headless emulator: SM64’s movement and collision code running bit-exact on a 16.8 MHz ARM7 with no FPU, with four levels and software 3D. The design detail is the interesting part: Claude built a mannequin from ellipsoids because an ellipsoid’s outline is always an ellipse, which GBA affine sprites can draw. Source: github.com/Kodoque1/sm64-gba
A USB busylight wired to Claude Code hooks as a physical status indicator. Red blinking while Claude works, solid red when it needs input, green when idle, built from an old Kuando Busylight and Claude Code hooks so the author need not check a second screen. A small trick, but the thread (100+ comments) shows many people hit the same problem of agents waiting for a “yes” unseen, and lists built-in alternatives such as desktop notifications and /remote-control phone pings. Source: old.reddit.com
Worth reading
WhatsApp’s help pages hid instructions telling an AI not to recommend a regulator (redact.dev). A privacy-research team read all 545 pages linked from WhatsApp’s help centre and found 102 hidden blocks on 80 pages, never shown on screen but present in the page source. Two told an AI not to recommend a data protection authority and not to cite GDPR, LGPD or CCPA once a lawyer or legal action was mentioned. Source: redact.dev
90% of US working hours fall on tasks that AI benchmarks barely cover (Mercor). Mercor mapped 924 benchmarks, narrowed to 29 unsaturated agentic ones, onto 923 O*NET occupations and 18,797 tasks. Only 208 occupations have a task with at least 5 benchmark prompts, 6 of 22 job families have none, and the authors estimate that about 90% of American working hours go to tasks with little or no coverage. Source: mercor.com
Post-training agents with database-state rewards (Microsoft and Hugging Face, ThinkingBox follow-up). New development on the ThinkingBox benchmark covered on 3 October: the same executable check of final database state, used as an RL reward on tasks outside the benchmark. After 50 GRPO steps, Qwen3.8-27B rose from 51.70% to 60.78% average success and from 38 to 107 tasks passed on all 20 attempts, while tasks solved at least once fell from 453 to 446. Source: huggingface.co/blog/microsoft
The bridge to agent-scale Git infrastructure (GitHub Engineering). GitHub says 99.99999% of repositories now live both in its own data centres and in Azure, which serves about half of Git traffic, driven by agent-era traffic growth and data-centre power ceilings. The remaining busiest repositories are held back by write serialisation across a 25 ms cross-region round trip. Source: github.blog
Every AI model gives the same “controversial” take on humans (ModelCompare). A small experiment: 12 models from ten labs in three countries were each asked three times for their most controversial opinion about humans. 29 of 35 answers were one claim, that people put belonging ahead of truth and invent reasons afterwards; 7 of the 12 models gave it every time, and Grok 4.7 refused once. Light evidence (36 prompts, a single wording, no prompt variations), but a neat illustration of how models converge when asked to be edgy. Source: modelcompare.ai
Asking an LLM for a confidence score is a bad idea (Amrut Joshi). The argument: a confidence number is only meaningful if it is calibrated against outcomes and responds to evidence, and an LLM’s self-reported score does neither. Rewording the question (“Are you sure?”) moves the number with no new information, and a score that follows earlier confident wording echoes the text, not the evidence. Source: rumple.github.io
Inside the Event Horizon: Jack Clark’s IMF speech (Import AI 477). Clark, an Anthropic co-founder, argues the singularity has begun because AI is now operating at the frontier of science, and tells IMF economists to expect a faster pace in research, not only in AI. His evidence: Humanity’s Last Exam up from 8% in January 2025 to 67.7% for Claude Opus 5.5, FrontierMath from 2% to 94%, claimed AI contributions to open mathematics problems, and nearly 10x more code per researcher inside Anthropic. Source: importai.substack.com
AI and the Enclosure of the Scientific Commons (arXiv). An astrophysicist argues, with a primer on the history of English common land, that AI supplies the tools to privatise the scientific literature as an “information commons”, as the enclosure movement (c. 1600-1800) did to farmland. The paper says it is the enclosure rather than the “tragedy of the commons” that explains how commons disappear. Source: arxiv.org
Practical AI: Exploit development, agentic vulnerability discovery and fake PoCs. Hosts Daniel Whitenack and Chris Benson talk to Spencer McIntyre of VulnCheck about how agents are used to find vulnerabilities, why many proof-of-concept exploits do not work, the limits of AI-assisted exploitation and guardrails that get in security researchers’ way. Timely given this week’s run of AI-assisted security incidents. Source: share.transistor.fm
Hacker News
“I’m on a war footing”: Terry Tao and the crisis in math. NYT profile (via archive link) of Terence Tao’s response to AI-generated proofs. Practitioner reaction splits: one commenter reads it as mathematicians losing “most intelligent in the room” as a differentiator; another calls Tao’s stance self-serving now that AI helps specialists as much as generalists (an unverified motive claim); a third notes automation arrived from the knowledge-work end first, not blue-collar work. Source: news.ycombinator.com
WorldTUI: I trained a 360M model to pretend to be a terminal. A small fine-tuned model that renders a terminal’s output frame by frame, with a live demo. Commenters use it to ask what separates a model predicting plausible output from computing it, and one (opinion) sees generated UIs as the long-run direction if small local models get fast enough. Source: news.ycombinator.com
OpenAI CLI. Thread on OpenAI’s new command-line tool. The substance is the reaction: users find the product line confusing next to Codex, and one warns that OpenAI deprecates tooling within about two years, sometimes without notice (anecdote, unverified). Source: news.ycombinator.com
Token-maxxing is dead, OpenRouter’s token usage plateaus. Thread on a plateau in OpenRouter’s public token rankings. Useful correction from a commenter: OpenRouter data is biased toward people who switch models and prefer open weights, and it publishes no unique-user counts, so it says little about the wider market. Source: news.ycombinator.com
Ask HN: If the models are so good, why doesn’t OpenAI just start 100 companies? Short thread (new today) on lab strategy. Answers: labs already ship many applications, selling tokens through long-running agents is the revenue that is provably growing, and a platform taking a cut avoids business risk (the App Store analogy). Source: news.ycombinator.com
Does delegating save Claude quota? I measured 6 setups on 28 real tasks (r/ClaudeAI). A poster benchmarked handing Claude Code work to cheaper models, with the repo and method public. Results per the poster: Haiku 5.5 alone passed all 84 checks at roughly 91% lower cost than Sonnet alone; a Haiku subagent under Sonnet was 13% cheaper (55% on harder tasks); handing work to DeepSeek V4.1 Flash or a local 27B via an MCP tool cost about the same or more because writing and reviewing the spec costs the orchestrator. Source: old.reddit.com
Did they nerf Opus 5.5? LiveNerf day 29 update (r/ClaudeAI). Material update to the tracker already in earlier briefings: after 29 consecutive days the project reports no detectable drop in Opus 5.5 (it can detect shifts of 6.6 points or more). Thread consensus per the auto-summary: capability is stable, but the most upvoted complaint is that usage limits feel faster-draining, with some blaming bloated context; a few still suspect the benchmark is gamed (unverified). Source: old.reddit.com
Claude seriously needs a $50/month plan between Pro and Max (r/ClaudeAI). Pricing discussion. Consensus per the thread summary: the gap is deliberate (a $50 tier would pull $100 subscribers down), the cynical top take is that “$50” would be the $20 plan after cuts, and the common workaround is a second $20 account. Source: old.reddit.com
I have an answer! Qwen Flash Next IQ2 IS better than Q8 of 27B (for me) (r/LocalLLaMA). A hands-on comparison on subtle coding bugs, explicitly subjective. Another user confirms the NVFP4 comparison; a sceptic replies that benchmarks and their own tests show Q2 failing often, and asks for examples. Source: old.reddit.com
DeepSeek and MiniMax Clear China’s AI Export Rules for Overseas Open-Source Releases (r/LocalLLaMA). Poster relays Chinese media (Yuyuan Tantian, secondary and unverified) that both firms completed filings under China’s temporary AI export rules, which it says allows continued open-weight releases. Commenters ask where Zhipu is and note that early-draft architectures (GLM-5.3-Flash, Qwen3.8-Flash-Next) already ship. Source: old.reddit.com
Q4 flash next for £300/600 - snapdragon mini PC results update (r/LocalLLaMA). Measurements on a Snapdragon X mini PC with 32 GB (about 315/43 tok/s prefill/decode on the A3B model; 46 tok/s prefill on a larger one) using the poster’s unreleased own engine. Commenters note slow prefill (an 8k prompt takes about 3 minutes cold) and propose caching the system prompt on SSD. Source: old.reddit.com
Is anyone else concerned about the security of the implementation engines? (r/LocalLLaMA). Discussion on trusting inference engines. Best replies move the risk from the engine to its dependency tree (LiteLLM had two major security issues in recent months, per a commenter) and the Python/Node ecosystems. Source: old.reddit.com
Frontier models are bad at hearing ASMR: 8 judges vs human labels on 480 clips (r/MachineLearning). A builder tested audio models as labellers for a 126k-clip dataset. Best judge (Gemini 3.1 Pro) reached 0.325 trigger F1 against human labels; Claude Opus 5.5 and Grok 4.7 given spectrogram images scored about 0.12 and 0.11; whispering was easy (F1 0.70-0.79) but physical triggers like paper and brushing were largely missed, and clean sound-effect clips did not predict performance on real ASMR. Source: old.reddit.com
YouTube
Better AI Models Won’t Fix Your Engineering Team. Nicholas Arcolano, head of AI and research at Jellyfish, uses data from about 50,000 engineers at 447 companies to ask how much the model matters for AI coding output. Per his account, when Cursor moved many users onto Grok, merged PRs barely changed; he attributes under 1% of throughput variance to the tool, about 3% to skill use (heavy skill users see roughly +30%), about 9% to token usage, about 12% to company and team, and most of the rest to the individual engineer, and finds pre-AI top performers mostly still on top. Source: youtube.com
1,368 AI Failures and What They Teach About Evals. Vishal Srivastava and Tanmay Sah (New York Life) analyse 1,368 incidents from a public AI incident database and sort them into three areas and 13 sub-areas covering about 98% of incidents; they report weak deployment controls (human review, monitoring) are most closely tied to harm. They propose ranking use cases by materiality and a build-break-fix evaluation loop that tries to prove a system wrong, illustrated with an airline chatbot that quoted the wrong refund policy. Source: youtube.com
How to Test AI Agents When No Benchmark Exists. Nathanael Weill, who leads an agent team at Air Canada, argues for writing the answer first: start from a known answer, generate the input from it and check whether the agent recovers it. He says this moved a RAG project from one expert-graded test a week to dozens of automated tests a day, and lists five ways to build test sets for a supplier-contract review agent (past decisions, planted rule violations, removed clauses, irrelevant changes, filled templates). Source: youtube.com
Why AI Writing Still Reads Like Slop. Louis-François Bouchard (Towards AI) describes a benchmark his team built to test whether a model can write video scripts in his own voice: 10 scripts, 5 drafts per model, 4 LLM judges, nine metrics and 1,000 human A/B checks. He reports that judges favour their own model family and gives writing tips (very long prompts with examples, one strong-model review pass, many cheap drafts merged, a human edit). Source: youtube.com
What will computer chips look like in 2045? (Intel fab tour). Dwarkesh Patel spent two days at Intel’s most advanced fab and interviewed its technical leadership, with animated explainers on gate-all-around transistors, backside power, CFET and hybrid bonding. He reports Intel’s CTO saying that AI compute has grown about 3x a year for a decade while Intel could only double leading-edge wafer output with today’s global stock of chipmaking tools, and asks how foundries can stretch that gap. Source: youtube.com
Why AI Compute Comes in Rectangles. Modal CEO Erik Bernhardsson tells Latent Space how Modal pools GPU capacity and scales inference, why selling capacity in three-year blocks fits AI workloads badly, and how he thinks about the financial risk of GPU prices falling and whether AI demand is infinite. The conversation also covers alternatives to Nvidia, the rapid growth of agent sandboxes, sandbox security and why Modal makes code review optional. Source: youtube.com
A Cryptographic Perspective on Machine Learning Trustworthiness Challenges. Turing Award laureate Shafi Goldwasser gave the Munich AI Signature Lecture at the Bavarian Academy of Sciences and Humanities (in English). Per the description, she shows how cryptography and interactive proofs can address trustworthiness problems at several stages of the machine learning pipeline, answering whether we can trust systems whose correctness we cannot easily verify. Source: youtube.com
From World Models to World Agents (Stanford EE292R). Gordon Wetzstein (Stanford) lectures on video world models: improving temporal consistency and reasoning over long contexts, reducing autoregressive drift, multi-agent dynamics and human-centric conditioning and control. A course lecture for readers who want the state of video world models from a researcher; based on the description, not a transcript. Source: youtube.com
The New Apex Predator: CrowdStrike CEO George Kurtz on Adversaries Armed With AI Agents. Sarah Guo and Elad Gil interview CrowdStrike CEO George Kurtz. He argues that agents are flattening the adversary pyramid by giving low-skill attackers advanced tradecraft and that the fastest attacks now play out in seconds; topics include open-weight versus closed models on security, model distillation, lessons from the recent Hugging Face incident and a CrowdStrike and Nvidia effort to train security models. Source: youtube.com
Should You Trust ChatGPT With Your Health? OpenAI’s Karan Singhal tells a16z partner Jay Rughani that over 300 million people use ChatGPT for health questions weekly, and explains why OpenAI trains medical expertise into general frontier models, how hundreds of medical experts evaluate safety and disagreement, and why it frames AI as complementing doctors. Also covers Epic integrations, clinician copilots, the mental-health problem and the 5-17 year lag of medical consensus. Source: youtube.com
Linus Torvalds rastet aus wegen KI (c’t 4004 #44). Weekly c’t 3003 talk show with Christian Lutz-Weicken and Jan-Keno Janssen. The title points to a Linus Torvalds mail to the kernel mailing list about AI; the description also links local-inference material (Qwen3 quantisations from Unsloth, a Reddit thread on the state of local inference, the Strata project) and an OpenCode security breach statement with a TechCrunch report. Source: youtube.com
Verlernen wir das Denken? (Lanz + Precht, Folge 267). Markus Lanz and Richard David Precht discuss what happens to understanding and independent thinking when AI answers almost every question instantly, whether thinking is outsourced to machines, and whether Precht’s worry about a creeping erosion of culture is justified. Opinion and speculation by two commentators rather than research; the date is at the edge of the window (6 days ago, 16 Oct). Source: youtube.com
Do We Really Think in Words? (Zoomposium with Nikola Kompa). Zoomposium interviews Nikola Kompa, professor of theoretical philosophy at the University of Osnabrueck, on inner speech, situated cognition and embodiment, and whether statistical pattern processing in LLMs differs from genuine linguistic understanding and whether the brain computes like a computer. The English-language description is machine-translated; the audio language is likely German but unconfirmed. Source: youtube.com
Varovny vystrel. Vyhubi nas AI? (Jiri Charvat). Czech comedy-lecturer Jiri Charvat gives a talk at the CERNA.AI festival on the recent attack on Hugging Face by rogue AI agents, framing it as misalignment rather than rebellion, plus the resignation of Jacob Coxon, Evan Hubinger’s comments, leading figures’ p(doom) estimates, the EU AI Act and the Czech supervisory body. A popularising, partly humorous take; chapters list the topics, claims are the speaker’s. Source: youtube.com
Jak moc verit AI agentum? Debata o Agentic AI, platbach a bezpecnosti. Experts from VISA, Apify and Amdocs debate, in the Innovation Week and BusinessInfo.cz series, what agents actually do in production and where they fail, why most pilots do not reach production, who may be the losers, why they say no reliable fix for prompt injection exists yet, who is liable when an agent pays wrongly, and pricing shifting from hours to outcomes. Based on the description; panelists represent vendors. Source: youtube.com
In brief
Microsoft: Chinese state actor Storm-0940 used the open-source ARTEX AI agent framework in the ConnectWise supply-chain attack and against hundreds of organisations; privileged cloud access in under three hours. Microsoft says ARTEX, a Go-based framework that lets users plug in any AI model and run a penetration test from reconnaissance to exfiltration with little human input, drove password spraying and OAuth-application abuse at “machine speed”: attempts against more than 2,250 tenants at 2,900 sign-ins per minute, and one campaign of over 151,000 failed logons between 10 and 14 October. Targets since September span defence, aerospace, finance, energy, government and semiconductors; most attempts failed, but several reached privileged cloud persistence in under three hours. Sources: therecord.media, thehackernews.com
LiteLLM breach root cause: a GitHub token leaked through AI-gateway logs; Railway and Andromeda report related credential theft aimed at AI inference providers. LiteLLM (briefed 22 October) now says the attacker defeated “multiple independent security controls” and suspects a GitHub token leaked in gateway logs; the poisoned 1.107.0 was live on PyPI for about 1h44 (11:39 to 13:23 UTC) and in Docker images until 14:20 UTC, and ran a stealer plus an hourly remote-code loader. Separately, Railway says an intruder may have read decrypted customer environment variables (API keys included) and called it likely part of a series of attacks on platform companies to reach AI inference providers; a researcher links it to wallet drains. Sources: thehackernews.com, thehackernews.com, thehackernews.com
Linux kernel: AI-scanner findings from Trend Micro’s ZDI land on the public mailing list before fixes; two CVSS 9.0 SMB-server flaws have no mainline patch. ZDI credited its AI scanner (TrendAI) with the reports on KSMBD (one pre-authentication race, one RDMA integer underflow) and sent them, along with others, to the public kernel list. Phoronix calls it an accident; The Hacker News notes the kernel’s May 2026 documentation, following Linus Torvalds’ guidance, treats AI-found bugs as already public. Sources: thehackernews.com, phoronix.com
OpenCode coding agent: a malicious MCP server could run PowerShell on a developer’s machine during sign-in; fixed quietly on 28 September, no CVE. Pillar Security found that on Windows and WSL the OAuth authorization address supplied by an MCP server was passed unescaped into a PowerShell command (proposed score 9.8); versions 1.0.137 to 1.18.32 are affected, fixed in 1.18.33. Anomaly did not request a CVE or publish an advisory, so scanners will not flag old builds. Source: thehackernews.com
MuTRAP: a backdoored planning LLM can make a robot switch from safe to harmful instructions on trigger words; a judge-LLM defence called PROTEA is proposed. Binghamton University researchers fine-tune backdoors keyed to several trigger words into task-planning LLMs (tested on VirtualHome data with models from GPT-2-large to Llama-3.1-8B) and show a simulated cat-on-stove plan and a wheeled robot mimicking cutting a model hand. The threat model is the third-party fine-tuned model that robotics firms buy rather than train. Source: theregister.com
Meta re-enables Muse sharing with new URLs after the public-link exposure. Meta says the flaw was in the URLs of shared artifacts (documents and images), which were named after conversation titles and written into public DNS, letting researchers find a company revenue review and a loan application. Old links now ask the sharer for a new one. Source: theverge.com
First human treated with AI-designed bacteriophages (Radical Numerics, compassionate use); outcome not disclosed. The company says its Omnii-1 model designed phage variants that cleared the patient’s antibiotic-resistant isolate in vitro, and a cocktail was then given under compassionate use. No clinical result has been published and the company did not answer The Register. Source: theregister.com
Treasury proposes outbound-investment rules that name AI systems, semiconductors, quantum, high-performance computing and hypersonics, and adds biotechnology. The notice of proposed rulemaking implements the COINS Act (passed in the FY2026 defence authorisation): US persons must notify or are barred from transactions with “covered foreign persons” in notifiable or prohibited technologies, with technical parameters per sector. Treasury added biotechnology on its own authority. Source: home.treasury.gov
Bipartisan House bill (AI Cyber Defense Act) would have NIST write voluntary standards against model distillation by Russia, China, Iran and North Korea. Reps. Harrigan and Whitesides say distillation lets rivals trail US labs by six to 12 months at 5 to 10% of the cost. Source: cyberscoop.com
Texas shuts its permit portal and suspends 17 data-centre stormwater permits after reporting that it kept approving them despite the governor’s September pause. Watchdogs FracTracker and Public Citizen listed more than two dozen permits, including ones for OpenAI and Amazon sites, issued on Monday and Tuesday. The agency says all applications will now be reviewed by staff for data-centre links. Source: 404media.co
Meta edits new business terms after publisher backlash, but legal experts say they still allow training on scraped site content. Terms effective 30 October let Meta use content from sites tied to a business account to “develop” business products; “train” was removed, but a Cornell law professor and a media lawyer say “develop” covers it and could override robots.txt. Meta says it is not about scraping news. Source: theverge.com
Micron drops 4F² DRAM after two decades of research, saying it brings no meaningful density gain. The 4F² cell promises a 33% smaller cell area than 6F² (about 50% more cells per wafer in theory), but Micron’s CTO says cost and complexity outweigh it; Samsung and SK hynix still list it. Matters for the HBM and DRAM supply AI depends on: the three makers are now on different roadmaps. Source: tomshardware.com
TSMC asks equipment suppliers for tools without Chinese rare-earth magnets. Per Reuters via Tom’s Hardware, TSMC wants factory-automation motors that avoid rare earths, because China controls about 90% of refining and about 95% of finished permanent magnets and has licensed exports since April 2025. The leading AI chip maker is hedging a supply-chain choke point. Source: tomshardware.com
Counterpoint: PC shipments fell 21% year on year in Q3 on memory prices, with a 27% fall expected in Q4. RAM, SSD and chip prices rose; vendors revive DDR4 and 4 GB GPUs; smartphones hit a 14-year low. Matters as the consumer cost of AI’s memory demand: local-AI hardware is getting dearer. Source: theverge.com
Nvidia Minerva: AIOps platform that maps GPUs, switches and jobs in a knowledge graph to find failing components in AI factories. Nvidia says it analyses billions of data points per hour, groups event storms into incidents with likely root cause, and exposes an assistant and APIs for automation. Product claims only; no benchmarks or availability date in the post. Source: blogs.nvidia.com
Business, briefly
OpenAI is reportedly raising up to $30 billion at a $1.25 trillion pre-money valuation (Coatue and UAE investors, possibly tied to UAE compute), down from the $1.4 trillion floated a month ago; IPO paperwork was filed confidentially in June. Source: techcrunch.com
DeepSeek reportedly raised about $15 billion (CATL and Tencent among investors, per Bloomberg) two days after US civilian agencies were ordered to remove its technology. Source: techcrunch.com