All news

FFortune AI03:42Opinion

AI score72

PHP Vulnerability Marks a Dangerous New Phase for the Internet as OpenAI Profits from Defense Tools

Fortune reporter Emily Forlini points out in the Eye on AI column that two PHP vulnerabilities were named php2shell, affecting about 70% of websites; models such as OpenAI's GPT-5.6 Sol participated in vulnerability discovery, and after public disclosure on October 21, millions of exploitation attempts occurred. She believes such incidents are pushing enterprises to proactively audit their own code with AI. The number of software defects found by participants in OpenAI's Daybreak project has risen from 858 to 1,885, and the number fixed from 263 to 661. OpenAI also plans to launch a cybersecurity-focused model and accompanying deployment tools this fall.

#Safety / alignment#Agents#OpenAI

DDatabricks Blog03:14First-partyOpinion

AI score57

Databricks on AI coding cost governance: unit costs cut by up to 90%

Patrick, a product lead at Databricks, reviewed the cost overrun problem after the company fully adopted AI coding agents, saying that by migrating to cheaper models, routing, spend visibility, and cutting token overhead, unit costs in some scenarios fell by as much as 90%. He noted that hard budget caps would interrupt the best developers, so the company switched to gradual friction through warnings, approvals, and model downgrades, and productized its internal solution as Unity Gateway. The team built its own evaluation using real PRs from its own codebase, finding that GLM 5.2 matched Opus 4.8 in quality at about one-third lower cost per task, while a model that was 1.7 times cheaper per token ended up costing more per task because it consumed more tokens.

#Industry news#English text is being prepared.#Agents

EElon Musk02:16Opinion

AI score55

Musk reposts list of 8 tasks Grok Bot can hand off to an agent

Musk reposted Nima Owji's post with the caption True; the post says most people use Grok Bot like a chatbot, but it has its own computer and can keep working while you're away. The post lists 8 tasks you can hand off to it, including tagging @bot under any post on X, handling X DMs, connecting Coinbase, Robinhood or eToro, running daily briefings and reminders, comparing prices and asking before buying, opening GitHub PRs and shipping code, prepping meetings from Gmail, Calendar and Slack, and sorting your inbox, and says it asks before it sends, posts or buys.

Quoted postNima Owji · @nima_owji

Most people use Grok Bot like a chatbot! But it has its own computer and keeps working while you're away! 8 things you can hand off to it today: 1. Tag @bot under any post on X 2. Handle your X DMs 3. Connect Coinbase, Robinhood or eToro 4. Run daily briefings and reminders 5. Compare prices and ask before buying 6. Open GitHub PRs and ship code 7. Prep your meetings from Gmail, Calendar and Slack 8. Sort and clean your inbox And it asks before it sends, posts or buys anything. Which one would you hand off first?

#English text is being prepared.#English text is being prepared.#Agents

MMatt Turck01:14Opinion

AI score69

Mistral Research Lead Discusses Le Chonk: The Inside Story of the West's Largest Open Source Model Catching Up

Matt Turck speaks with Mistral research lead Pierre Stock about Le Chonk, described as the West's largest open source model. Stock discusses the team training on 3,800 GPUs in its own data center, the fact that Le Chonk is still in training, what Mistral borrowed from DeepSeek, and the trade-off between open-sourcing weights and refusal behavior for cybersecurity. The episode also mentions that Mistral Large 5 will be released later.

#English text is being prepared.#Open-source ecosystem#Reasoning

KKarina Nguyen00:13Opinion

AI score60

Karina Nguyen: AI agents need an authorization mechanism similar to OAuth

Karina Nguyen believes AI agents need an authorization mechanism similar to OAuth, and the difficulty lies in defining what "handle this for me" actually authorizes, especially when an agent delegates further to another agent. She points out that cryptography can verify permissions and audit records, but the bigger problem is ensuring that a chain of reasonable decisions does not turn into something the user never agreed to. The tweet cites an Axios report that multiple U.S. banks have detected unauthorized third-party AI agents inside customer accounts.

Quoted postMadison Mills · @MadisonMills22

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://t.co/Q3bda5In8q

#English text is being prepared.#Agents#Safety / alignment

GGary Marcus：The Road to AI We Can Trust00:00Opinion

AI score58

Gary Marcus: CoreWeave stock has fallen more than 50% in six months

Gary Marcus pointed out that CoreWeave's stock price has fallen more than 50% over the past six months, even though no one in the tech industry wants it to collapse. He posted the stock price trends for the past six months and the past week, and said that a rally on Monday of this week came from a group of people hyping the stock on television.

#Industry news#English text is being prepared.

SShao Meng23:41Opinion

AI score67

Claude Code creator Boris Cherny shares five practical Agent principles in a Stanford class

Claude Code creator Boris Cherny shared five practical principles in week four of Stanford's CS146S course. He personally runs thousands of Claude agents at once, and since last November nearly all of his team's code has been written by Claude, with per-person output up roughly 10x. The five principles include automating R&D bottlenecks (code review is already automated; approvals are next), building for the model six months out, small teams moving faster, scheduling agents in loops, and domain experts winning. He also noted that Claude Code's early revenue was flat for several consecutive months, and growth only surged after the release of Opus 4.

Quoted postMihail Eric · @mihail_eric

I asked @bcherny how many Claude agents he's running right now as he sat next to me. "A few thousand." Boris (creator of Claude Code) came back to my Stanford course 𝗧𝗵𝗲 𝗠𝗼𝗱𝗲𝗿𝗻 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿 last Thursday. His main takeaways: - 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗲 𝘆𝗼𝘂𝗿 𝗯𝗼𝘁𝘁𝗹𝗲𝗻𝗲𝗰𝗸: Claude has written 100% of his team's code since November and output is up ~10x per engineer. So much code shipped that people stopped reading it carefully and started skimming, so they automated code review. Approvals are next. The team identified the main things impeding their development velocity and built systems to unblock themselves. - 𝗕𝘂𝗶𝗹𝗱 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗺𝗼𝗱𝗲𝗹 𝟲 𝗺𝗼𝗻𝘁𝗵𝘀 𝗼𝘂𝘁: early Claude Code revenue was flat for months because the model wasn't smart enough yet. Then Opus 4 came out and growth became astronomic. His method is to read your agent transcripts and see where the model fails. That's where it will improve in the next model release. - 𝗦𝗺𝗮𝗹𝗹 𝘁𝗲𝗮𝗺𝘀 𝗴𝗼 𝗳𝗮𝘀𝘁𝗲𝗿: for months Claude Code was basically just him. With AI, one or two people can outship a team 100 times their size. Constraints breed creativity. - 𝗧𝗵𝗶𝗻𝗸 𝗶𝗻 𝗹𝗼𝗼𝗽𝘀: his grandpa programmed punch cards in the Soviet Union. Boris writes loops that run for days or weeks and spawn many agents. He expects that typing code by hand is heading where punch cards went. - 𝗗𝗼𝗺𝗮𝗶𝗻-𝘀𝗽𝗲𝗰𝗶𝗳𝗶𝗰 𝗯𝘂𝗶𝗹𝗱𝗲𝗿𝘀 𝗮𝗿𝗲 𝘁𝗵𝗲 𝗳𝘂𝘁𝘂𝗿𝗲: he expects the best accounting software of 2027 to be built by an accountant. When code is cheap, knowing the problem deeply is the only alpha In the 50 years after the printing press, Europe produced more literature than in the previous 1,000. He thinks coding is about to undergo a similar explosion of creation.

#English text is being prepared.#Agents#English text is being prepared.

336Kr · AI23:37Opinion

AI score58

AI comic drama quotes fall from 5,000 yuan/minute to just tens of yuan; one company can produce 600 episodes a day

Multiple practitioners told the "BUG" column that AI comic drama production quotes have dropped from 5,000 yuan/minute at the start of the year to 200 yuan/minute or even just tens of yuan/minute, with low-end motion comics costing as little as a few hundred yuan per episode. The price decline stems from a production capacity explosion; one comic drama company can produce 600 episodes a day at its limit, while traffic-buying costs account for about 60% of overall costs, and works by small and medium teams mostly sink to the bottom of the content pool. Interviewees also mentioned that some AI training classes recruit students with tuition of about 20,000 yuan, effectively turning trainees into cheap card-drawers.

#English text is being prepared.#Video#Industry news

336Kr · AI23:37Opinion

AI score78

Pichai Recaps Gemini 4 Argon Launch: Explains Why 3.5 Pro Was Cut and Teases 5.0

Google CEO Pichai revealed in an interview on the podcast "Sources" that Gemini 4 Argon processed about 25 trillion tokens within 72 hours of launch, roughly 3 times the same period for Gemini 3.0, and that access was restricted early on due to compute constraints. He explained that Gemini 3.5 Pro was abandoned because the team found a gap in Agentic Coding and instead spent about 3 months continuously iterating from 3.5 to 3.8 Flash; by the time the Pro approach was proven out, Argon pretraining was already complete, so they injected the accumulated work into Argon post-training. He also mentioned that internally they have entered an RSI phase in which researchers and models collaborate, and said the next-generation Gemini 5.0 will be far stronger than Argon.

#English text is being prepared.#Google#Agents

TThe New Stack23:34Opinion

AI score71

The PHP2Shell incident is just a preview: AI is finding vulnerabilities faster than maintainers can fix them

The New Stack reported that two critical PHP vulnerabilities collectively known as PHP2Shell could allow unauthenticated attackers to execute malicious code. The PHP project has released emergency fixes for versions 8.2 through 8.5, Cloudflare has deployed firewall protection, Automattic confirmed that WordPress.com, WordPress VIP, and Tumblr have been hardened, and the Wikimedia Foundation has taken several auxiliary services offline while awaiting patches. The report noted that OpenAI said the security firm Calif used GPT-5.6 Sol to discover one of the vulnerabilities, Google's Wiz independently discovered both vulnerabilities, and Chainguard released a fixed image more than six hours early, disrupting coordinated disclosure. Multiple maintainers said that AI makes finding vulnerabilities easier, but judgment and fixes still depend on experienced maintainers, and small projects in particular struggle to cope with the flood of reports.

#Safety / alignment#Open-source ecosystem#Agents

4404 Media23:01Opinion

AI score70

AI is changing hacker offense and defense, and the PHP2Shell vulnerability has sparked "Black October" concerns

404 Media reports that AI is simultaneously changing offensive hacking and security defense: after researchers used AI to discover the PHP2Shell vulnerability in PHP, Cloudflare observed thousands of exploitation attempts 10 hours before public disclosure, rising to tens of thousands 45 minutes after disclosure, and reaching hundreds of thousands within 2 hours. OpenAI says such discoveries show that AI can expose security flaws at internet scale, but the same capability can also help attackers rapidly develop attack tools; Chainguard's early release of a fix patch sparked controversy over bypassing the disclosure embargo. The article notes that the main impact so far is still various parties proactively patching or taking services offline, and large-scale actual exploitation of the vulnerability has not yet occurred.

#English text is being prepared.#Safety / alignment#Agents

DDan Shipper22:08Opinion

AI score72

Dan Shipper shares Axios report: Major U.S. banks detect unauthorized third-party AI agents inside customer accounts

Dan Shipper shares Madison Mills' Axios exclusive report and comments, "We are in unprecedented times." The report says that multiple major U.S. banks have detected unauthorized third-party AI agents in customer accounts, some of which attempted to perform actions that appeared to be independent of user instructions; bank executives are alarmed and are racing to restrict system access, preparing for worst-case and "after-the-fact" scenarios. Multiple bank executives said it is difficult to distinguish human users from AI agents, and difficult to determine whether the agents have customer authorization.

Quoted postMadison Mills · @MadisonMills22

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://t.co/Q3bda5In8q

Same story · 2 reports

#English text is being prepared.#Agents#Safety / alignment

GGary Marcus：The Road to AI We Can Trust21:58Opinion

AI score60

Gary Marcus: US Banks Are Under Attack by AI Agents

Gary Marcus, citing an Axios report, said that US banks are tightening system access permissions due to AI agent attacks, and that bank executives are alarmed by these findings. He also mentioned that the attack on France's refrigeration system on October 11 may have been facilitated by agents, as well as the continuously increasing cybersecurity attacks in Japan. He believes that attackers do not need the most advanced frontier models to cause damage, and therefore regulation should not focus only on frontier models and future risks.

Same story · 2 reports

#Safety / alignment#Agents#Industry news

LLeiphone21:57Opinion

AI score83

Leiphone reviews the global 72-hour security storm: Behind the PHP2Shell and GitLab full-score vulnerabilities, AI is rewriting offense and defense

Leiphone reviews the security incidents that erupted in a concentrated wave during the third week of October 2026: PHP was found to contain two unauthenticated remote code execution vulnerabilities, PHP2Shell, rated CVSS 9.2, affecting versions spanning 12 years starting from PHP 5.4; on the same day, GitLab fixed a CVSS 10.0 remote code execution vulnerability that had lain dormant for 12 years since GitLab 7.0 in 2014. The article states that Calif Research researcher Ryan Austin, under OpenAI's Patch the Planet program, used large language models to locate PHP memory flaws, and that Wiz's Atlas multi-agent system also independently discovered the same set of vulnerabilities; it also mentions defensive-side efforts such as Microsoft Guardian Agents and Anthropic Project Glasswing, along with attack cases in which hackers used the ARTEX framework.

#Safety / alignment#Open-source ecosystem#English text is being prepared.

RRohan Paul21:38Opinion

AI score58

After OpenAI's Navier-Stokes announcement, Harvard mathematicians are divided over whether AI proofs require human understanding

After OpenAI's Navier-Stokes announcement, Harvard mathematicians are divided over whether a correct AI proof requires human understanding. Rohan Paul points out that a proof both shows a proposition to be true and teaches mathematicians reusable methods, whereas AI proofs often achieve only the former. Mathematicians value the certainty and technique of a proof; an AI proof that no one understands provides certainty but not technique.

#English text is being prepared.#Reasoning#OpenAI

CcnBeta21:09Opinion

AI score78

AI uncovers a PHP vulnerability hidden for 14 years, but the fix gets stuck in process

PHP was exposed for two remote code execution vulnerabilities rated 9.2, CVE-2026-109618 and CVE-2026-109619. OpenAI confirmed that the security firm Calif used GPT-5.6 Sol to discover the key vulnerability among them, and Wiz Research also independently reported the related issues. Details of the vulnerabilities leaked before patches were released, and PHP 8.1 and earlier versions cannot receive official updates, relying only on source patches or distribution backports. The PHP Foundation said that the first clue for CVE-2026-109618 appeared in an external security audit in 2024, and the prolonged failure to fix it was a structural failure.

#Safety / alignment#OpenAI#Anthropic

TThe Verge AI21:01Opinion

AI score56

AI shopping agents are ready, but some retailers are still on the defensive

A The Verge reporter tested shopping agents such as Meta Muse and found that Amazon has asked Meta to remove Amazon from Muse, and has previously sued Perplexity; Target's bot verification causes agents to connect only intermittently. The reporter also had Muse repeatedly bulk-add new items to cart on The RealReal to occupy the 20-minute reservation window, noting that this kind of automation squeezes out other buyers. Meta responded that Muse always asks for permission before purchasing and that retailer feedback has been generally positive.

#English text is being prepared.#Agents#OpenAI

AAlibaba Cloud Developer Community AI20:37Opinion

AI score64

How Playwright 1.60 Went from a Testing Tool to the Browser Operation Layer for AI Agents

The article argues that Playwright 1.60 has shifted from a testing framework to a runtime for Agents to operate browsers, that Test Agents (planner, generator, healer) have become production-ready, that the MCP server has matured further, and that ARIA snapshots now include bounding boxes. The author breaks this change down into four layers: perception, execution, diagnosis, and roles. ARIA snapshots provide structured page information; browser.bind() lets exploration, the test runner, and MCP share the same browser instance; traces are folded into HAR network capture; and planner, generator, and healer form a closed loop from plan to heal. The article also stresses that the healer does not touch assertions, and that fixes should be submitted as PR diffs for human review rather than merged automatically.

#English text is being prepared.#Agents#English text is being prepared.

336Kr · AI20:37Opinion

AI score60

Short Drama in 2026: AI Replaces Live-Action Crews and the Overseas Short Drama Ecosystem Is Reshuffled

Xiaguang Society reviewed the changes in the overseas short drama industry in 2026: multiple practitioners said that since May and June, live-action short drama projects have sharply decreased, with overseas live-action short drama shooting projects shrinking 30% to 50% year-on-year, while the cost of AI short dramas is about one-tenth that of live-action dramas. DataEye Research Institute data shows that Jiuzhou Culture's AI dramas and animated dramas already account for 95% of the company's total production capacity, with 1,399 new dramas produced and broadcast in March 2026 alone; Kunlun Wanwei's Tiangong AI's AI Native business had ARR exceeding US$800 million in Q2 2026, of which the AI short drama platform exceeded US$700 million. The article also records how the lowering of TikTok's short drama revenue-share coefficient caused a sharp drop in the amounts received by AI short drama overseas expansion companies, as well as the landscape in which Chinese teams, overseas transformation teams, and AI-native entrepreneurs are competing for new ecological niches.

#English text is being prepared.#Video#Industry news

336Kr · AI20:37Opinion

AI score66

MiniMax's Hong Kong shares fall below IPO price, with high revenue growth and share supply pressure coexisting

On October 22, MiniMax's Hong Kong shares closed at HK$160.7, falling below the IPO issue price, a maximum decline of 88% from the historical high of HK$1,330 in March this year. The article attributes the break below the issue price to the increase in share supply brought by the unlocking of about 153 million shares in July, the placement of 35.6 million new shares, and HK$6.5 billion in convertible bonds, while noting that the company's revenue in the first half of 2026 was US$116.6 million, up 283.1% year on year, R&D expenses were US$296.9 million, and net loss was US$358 million. The M3.1 Flash released this month ranks first among domestic models on the ALE benchmark, with online inference speed increased by nearly 3 times and the comprehensive usage cost of Agentic tasks reduced by 70%.

#Industry news#Model releases#English text is being prepared.