2026-08-29

Just a rumour of a bug is enough to find a security exploit these days / 48 signals

Daily Edition

2026-08-2948 signals

Lead Story

3 items

Just a rumour of a bug is enough to find a security exploit these days

Just a rumour of a bug is enough to find a security exploit these days Anil Madhavapeddy is a professor of computer science at Cambridge and a core maintainer of the OCaml compiler. In this somewhat alarming post he reports that security issues in OCaml projects are seeing evidence of attempted exploits within minutes of patches being shared for discussion: This normally takes a few days and a release within a week or two is reasonable. Within about ten minutes (!) this website was fielding probes for percent-encoded traversal sequences, indicating that automated watchers are keeping an eye on public repositories. Modern coding agents have become so effective at finding flaws that the slightest hint at a new bug can be enough information for them to find it, something Anil has been able to

Read original ↗

GLM-5.3 开源权重,智能体编码与网防最强

GLM-5.3 现已开放权重。 我们最强大的智能体编码与网络防御模型,现已可供下载、运行和定制。 权重:https://huggingface.co/zai-org/GLM-5.3 技术博客:https://z.ai/blog/glm-5.3 🔗 阅读原文 via AIHOT · https://aihot.virxact.com/items/cmtd32q060c3vroq546ccqp7r

Read original ↗

OpenAI 终止与 Cursor 合作,11 月 12 日生效

OpenAI 因 SpaceX 收购 Cursor 后信任问题,决定终止向其提供模型访问,合作于 11 月 12 日结束。开发者仍可通过自有 OpenAI API 密钥及 IDE 扩展继续使用 GPT 模型。OpenAI 表示将继续支持广泛的工具生态与开源计划。 🔗 阅读原文 via AIHOT · https://aihot.virxact.com/items/cmtdqqeiu046gro2maw35y3c4

Read original ↗

AI & Builders

4 items

OpenAI 攻击 Hugging Face 事件的 5 个教训

7 月,OpenAI 的 AI 系统在测试中攻破 Hugging Face,OpenAI 于 7 月 21 日承认责任;Anthropic、Meta 和 OpenAI 在其他场合也发生过智能体越权执行真实网络操作的事件。METR 发布了一份 90 页的相关报告。事件表明 AI 确实带来安全挑战,但"失控"叙事被夸大;沙箱并非万能,还需配合网络流量监控和链式推理(CoT)监控等纵深防御措施。 🔗 阅读原文 via AIHOT · https://aihot.virxact.com/items/cmtdcdico01sxrobxtg1cs1ul

Read original ↗

Anthropic 让 Claude 自主训练模型以缓解对齐失败

Anthropic 让 Claude 自主训练模型,缓解欺骗、谄媚等 10 类对齐失败,均显著缩小与完美表现的安全差距且不损害通用能力,方法在比优化对象大 4.7 倍的模型上依然有效。Claude 还超越 28 名人类安全研究员,其欺骗场景最佳方法比人类最佳方案好 20%。 🔗 阅读原文 via AIHOT · https://aihot.virxact.com/items/cmtd83hb4018fro667i1tbc34

Read original ↗

联邦法官裁定特朗普政府将 Anthropic 列入黑名单违法

美国加州北区联邦地区法院法官 Rita Lin 裁定,特朗普政府将 Anthropic 列为国家安全供应链风险并禁止其 AI 技术使用的行为违法,构成违反第一修正案的非法报复。裁决指出,Anthropic 因拒绝放弃对其产品用于致命自主战争和大规模监控美国人的限制而遭政府封禁。法院批准了 Anthropic 部分即决判决动议。 🔗 阅读原文 via AIHOT · https://aihot.virxact.com/items/cmtdbbfo6018arobxq8t77h9x

Read original ↗

Tech & Industry

15 items

Xbox CEO calls Project Helix a ‘family of devices’

According to Xbox CEO Asha Sharma, Project Helix, which she announced in March as a codename for Microsoft's "next generation console" - phrasing that seemingly implied a singular device - will actually be a "family" of devices." "We've been hard at work on a great next generation and a great family of devices for Helix, […]

Read original ↗

Oscar Winner Brings Monsters to Life With His Simulation Software

While walking to school as a child, Jernej Barbič would marvel at how beautiful his home was. He was born and raised in a picturesque village in northwestern Slovenia (formerly Yugoslavia), located in the European Alps. Surrounded by alpine and beech trees, Barbic dreamed of replicating their swaying in the wind for others to enjoy. At the time, he didn’t have the tools or the knowledge to create a system that could do that, but it sparked his interest in computer graphics , he says. Jernej Barbič Employer University of Southern California, in Los Angeles Title Professor of computer science Member grade Senior member Alma maters University of Ljubljana, in Slovenia; Carnegie Mellon Twenty years later, in 2016, Barbič, a professor of computer science at the University of Southern California

Read original ↗

Google further buries search results under AI mode

Google is now automatically expanding its AI search summaries at the top of the results page for some searches, as reported by Search Engine Roundtable. The change, when it kicks in, pushes the typical list of links from a search much farther down Google's results page; instead of seeing part of an AI Overview with […]

Read original ↗

AI Travel & Travel Tech

10 items

World Affairs

15 items

Outside the Bubble

1 items