Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – October 21, 2026

Transcript

AGI Dreams Podcast – October 21, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  The
• 0:00
  PHP
• 0:00
  project
• 0:01
  shipped
• 0:01
  an
• 0:01
  out-of-band
• 0:02
  security
• 0:02
  release
• 0:03
  today
• 0:03
  at
• 0:03
  14:00
• 0:04
  UTC,
• 0:05
  and
• 0:05
  the
• 0:05
  official
• 0:05
  advisory
• 0:06
  finally
• 0:06
  put
• 0:06
  names
• 0:07
  to
• 0:07
  the
• 0:07
  panic
• 0:07
  that
• 0:07
  leaked
• 0:08
  across
• 0:08
  social
• 0:08
  media
• 0:09
  over
• 0:09
  the
• 0:09
  weekend.
• 0:10
  CVE-2026-109618
• 0:15
  and
• 0:15
  CVE-2026-109619
• 0:20
  are
• 0:20
  a
• 0:20
  memory-safety
• 0:21
  flaw
• 0:21
  in
• 0:22
  how
• 0:22
  the
• 0:22
  interpreter
• 0:22
  handles
• 0:23
  out-of-memory
• 0:23
  conditions,
• 0:24
  and
• 0:24
  the
• 0:24
  maintainers
• 0:25
  do
• 0:25
  not
• 0:25
  hedge
• 0:26
  about
• 0:26
  the
• 0:26
  consequence:
• 0:27
  multiple
• 0:27
  OOM
• 0:28
  strategies
• 0:29
  can
• 0:29
  consistently
• 0:29
  trigger
• 0:30
  the
• 0:30
  condition
• 0:30
  and
• 0:30
  lead
• 0:31
  to
• 0:31
  remote
• 0:31
  code
• 0:31
  execution.
• 0:32
  The
• 0:33
  mechanics
• 0:33
  are
• 0:33
  mundane,
• 0:34
  which
• 0:34
  is
• 0:34
  what
• 0:34
  makes
• 0:35
  them
• 0:35
  dangerous.
• 0:36
  PHP
• 0:36
  uses
• 0:37
  an
• 0:37
  early-exit
• 0:37
  bailout
• 0:38
  when
• 0:38
  an
• 0:38
  allocation
• 0:39
  fails,
• 0:40
  but
• 0:40
  request
• 0:40
  memory
• 0:40
  becomes
• 0:41
  reachable
• 0:41
  before
• 0:41
  it
• 0:42
  is
• 0:42
  fully
• 0:42
  initialized,
• 0:43
  so
• 0:43
  a
• 0:43
  failed
• 0:44
  allocation
• 0:44
  at
• 0:44
  the
• 0:44
  wrong
• 0:45
  moment
• 0:45
  leaves
• 0:45
  the
• 0:45
  request
• 0:46
  in
• 0:46
  an
• 0:46
  invalid
• 0:47
  state
• 0:47
  that
• 0:47
  shutdown
• 0:48
  code
• 0:48
  then
• 0:48
  reads
• 0:48
  and
• 0:49
  branches
• 0:49
  on.
• 0:50
  The
• 0:50
  advisory
• 0:51
  classifies
• 0:51
  it
• 0:51
  under
• 0:52
  use-after-free,
• 0:53
  improper
• 0:53
  handling
• 0:54
  of
• 0:54
  exceptional
• 0:54
  conditions,
• 0:55
  and
• 0:56
  uninitialized-pointer
• 0:57
  weaknesses,
• 0:58
  and
• 0:58
  says
• 0:58
  complete
• 0:58
  remote
• 0:59
  code
• 0:59
  execution
• 1:00
  was
• 1:00
  validated
• 1:00
  over
• 1:01
  HTTP
• 1:02
  against
• 1:02
  mod
• 1:02
  php
• 1:03
  with
• 1:03
  default
• 1:03
  limits,
• 1:04
  yielding
• 1:05
  unauthenticated
• 1:05
  code
• 1:06
  execution
• 1:06
  as
• 1:07
  the
• 1:07
  web
• 1:07
  worker
• 1:07
  account
• 1:07
  .
• 1:08
  The
• 1:08
  fix
• 1:09
  removes
• 1:09
  the
• 1:09
  early
• 1:10
  bailout
• 1:10
  in
• 1:10
  favor
• 1:10
  of
• 1:11
  a
• 1:11
  delayed
• 1:11
  soft
• 1:11
  OOM
• 1:12
  plus
• 1:12
  an
• 1:12
  immediate
• 1:13
  hard
• 1:13
  OOM,
• 1:14
  and
• 1:14
  the
• 1:14
  maintainers
• 1:15
  are
• 1:15
  blunt
• 1:15
  that
• 1:15
  updating
• 1:16
  is
• 1:16
  the
• 1:16
  only
• 1:16
  complete
• 1:17
  mitigation
• 1:17
  .
• 1:18
  The
• 1:18
  discovery,
• 1:19
  by
• 1:19
  researchers
• 1:20
  at
• 1:20
  Calif
• 1:20
  working
• 1:21
  with
• 1:21
  OpenAI
• 1:21
  and
• 1:21
  Wiz,
• 1:22
  is
• 1:22
  framed
• 1:23
  as
• 1:23
  the
• 1:23
  modern
• 1:23
  sequel
• 1:24
  to
• 1:24
  Stefan
• 1:24
  Esser's
• 1:24
  2004
• 1:25
  memory-limit
• 1:26
  work
• 1:26
  and
• 1:26
  a
• 1:26
  2020
• 1:27
  bug
• 1:27
  report
• 1:27
  that
• 1:27
  a
• 1:27
  2024
• 1:28
  Quarkslab
• 1:29
  audit
• 1:29
  left
• 1:29
  unproven.
• 1:30
  Two
• 1:31
  OOM
• 1:31
  fatal
• 1:32
  producers
• 1:32
  and
• 1:32
  three
• 1:33
  interruptible
• 1:33
  points
• 1:34
  in
• 1:34
  the
• 1:34
  interpreter
• 1:34
  feed
• 1:35
  the
• 1:35
  same
• 1:35
  primitive,
• 1:35
  reachable
• 1:36
  through
• 1:36
  nested
• 1:36
  multipart
• 1:37
  parsing,
• 1:38
  the
• 1:38
  session
• 1:38
  upload-progress
• 1:39
  feature,
• 1:40
  and
• 1:40
  the
• 1:40
  generic
• 1:40
  unserializer.
• 1:42
  They
• 1:42
  confirmed
• 1:43
  pre-auth
• 1:43
  RCE
• 1:44
  against
• 1:44
  default
• 1:44
  configurations,
• 1:45
  with
• 1:46
  the
• 1:46
  earliest
• 1:46
  affected
• 1:47
  path
• 1:47
  dating
• 1:47
  to
• 1:47
  PHP
• 1:48
  5.4.0,
• 1:50
  and
• 1:50
  a
• 1:50
  target
• 1:51
  list
• 1:51
  that
• 1:51
  reads
• 1:51
  like
• 1:51
  the
• 1:51
  entire
• 1:52
  web:
• 1:53
  WordPress,
• 1:54
  Drupal,
• 1:54
  Joomla,
• 1:55
  Magento,
• 1:56
  phpMyAdmin,
• 1:57
  Nextcloud,
• 1:58
  Laravel,
• 1:58
  and
• 1:59
  Symfony.
• 2:00
  For
• 2:00
  a
• 2:00
  field
• 2:00
  drowning
• 2:01
  in
• 2:01
  model
• 2:01
  hype,
• 2:02
  the
• 2:02
  authors'
• 2:02
  methodology
• 2:03
  note
• 2:03
  is
• 2:03
  grounded:
• 2:04
  no
• 2:04
  model
• 2:05
  simply
• 2:05
  unearths
• 2:05
  all
• 2:06
  bugs
• 2:06
  from
• 2:06
  simple
• 2:06
  prompts,
• 2:07
  because
• 2:08
  LLMs
• 2:08
  drift
• 2:08
  from
• 2:09
  new
• 2:09
  code
• 2:09
  toward
• 2:09
  nearby
• 2:10
  old
• 2:10
  code
• 2:11
  and
• 2:11
  do
• 2:11
  not
• 2:11
  reliably
• 2:11
  start
• 2:12
  from
• 2:12
  obscure
• 2:12
  twenty-year-old
• 2:13
  primitives.
• 2:14
  Know
• 2:14
  your
• 2:14
  target
• 2:15
  still
• 2:15
  decides
• 2:15
  the
• 2:15
  fight
• 2:15
  .
• 2:16
  The
• 2:16
  exposure
• 2:17
  is
• 2:17
  not
• 2:17
  symmetric
• 2:18
  across
• 2:18
  deployments,
• 2:19
  and
• 2:19
  that
• 2:19
  matters
• 2:19
  for
• 2:19
  triage.
• 2:21
  Abstract
• 2:21
  Security's
• 2:21
  threat
• 2:22
  team
• 2:22
  separates
• 2:23
  a
• 2:23
  rawkey
• 2:23
  variant
• 2:23
  that
• 2:23
  abuses
• 2:24
  the
• 2:24
  Zend
• 2:24
  HashTable
• 2:25
  with
• 2:25
  a
• 2:25
  multi-megabyte
• 2:26
  POST
• 2:26
  body,
• 2:27
  which
• 2:27
  an
• 2:27
  edge
• 2:27
  size
• 2:27
  gate
• 2:28
  can
• 2:28
  blunt,
• 2:28
  from
• 2:29
  the
• 2:29
  php2shell
• 2:30
  variant
• 2:30
  that
• 2:30
  abuses
• 2:31
  the
• 2:31
  upload-progress
• 2:32
  callback
• 2:32
  with
• 2:32
  a
• 2:32
  body
• 2:33
  around
• 2:33
  450
• 2:34
  bytes
• 2:34
  on
• 2:34
  any
• 2:34
  POST
• 2:35
  endpoint,
• 2:35
  where
• 2:36
  size
• 2:36
  limits
• 2:36
  are
• 2:36
  useless.
• 2:38
  Cloud
• 2:38
  WAFs
• 2:38
  that
• 2:38
  inspect
• 2:39
  only
• 2:39
  the
• 2:39
  first
• 2:40
  8KB
• 2:40
  to
• 2:40
  128KB
• 2:42
  of
• 2:42
  a
• 2:42
  body
• 2:42
  will
• 2:43
  miss
• 2:43
  it,
• 2:43
  and
• 2:43
  Content-Length
• 2:44
  checks
• 2:44
  are
• 2:44
  bypassed
• 2:45
  by
• 2:45
  chunked
• 2:46
  and
• 2:46
  HTTP/2
• 2:48
  transfers.
• 2:49
  The
• 2:49
  firm's
• 2:49
  advice
• 2:50
  to
• 2:50
  review
• 2:50
  the
• 2:50
  full
• 2:50
  window
• 2:51
  since
• 2:51
  the
• 2:51
  October
• 2:51
  20
• 2:52
  leak
• 2:52
  is
• 2:52
  the
• 2:52
  correct
• 2:53
  instinct,
• 2:53
  because
• 2:54
  patching
• 2:54
  stops
• 2:54
  future
• 2:55
  exploitation
• 2:56
  but
• 2:56
  does
• 2:56
  not
• 2:56
  undo
• 2:56
  access
• 2:57
  already
• 2:57
  taken
• 2:57
  .
• 2:58
  The
• 2:58
  embargo
• 2:59
  did
• 2:59
  not
• 2:59
  survive
• 2:59
  contact
• 3:00
  with
• 3:00
  the
• 3:00
  internet.
• 3:01
  One
• 3:01
  thread
• 3:02
  tracked
• 3:02
  the
• 3:02
  mess
• 3:02
  well:
• 3:03
  Florian
• 3:03
  Roth's
• 3:04
  circulated
• 3:04
  CVSS
• 3:05
  10.0
• 3:06
  against
• 3:06
  the
• 3:06
  official
• 3:06
  v4.0
• 3:08
  9.2,
• 3:10
  watchTowr
• 3:10
  expecting
• 3:11
  the
• 3:11
  hold
• 3:11
  to
• 3:11
  last
• 3:11
  until
• 3:11
  Thursday,
• 3:12
  and
• 3:12
  a
• 3:12
  confirmed-real
• 3:13
  leak
• 3:13
  that
• 3:14
  independent
• 3:14
  parties
• 3:14
  said
• 3:15
  they
• 3:15
  reproduced
• 3:15
  .
• 3:16
  Worth
• 3:16
  separating
• 3:17
  record
• 3:17
  from
• 3:17
  assertion
• 3:18
  here.
• 3:19
  One
• 3:19
  independent
• 3:20
  researcher
• 3:20
  who
• 3:20
  recreated
• 3:21
  the
• 3:21
  bugs
• 3:21
  in
• 3:21
  a
• 3:21
  lab
• 3:22
  posted
• 3:22
  the
• 3:22
  proof-of-concept
• 3:23
  publicly
• 3:24
  rather
• 3:24
  than
• 3:24
  wait
• 3:25
  out
• 3:25
  the
• 3:25
  final
• 3:25
  hours
• 3:25
  of
• 3:26
  coordinated
• 3:26
  disclosure,
• 3:27
  drawing
• 3:28
  the
• 3:28
  obvious
• 3:28
  rebuke
• 3:28
  that
• 3:29
  the
• 3:29
  window
• 3:29
  was
• 3:29
  thirteen
• 3:30
  hours,
• 3:30
  not
• 3:30
  thirteen
• 3:31
  days
• 3:31
  .
• 3:32
  That
• 3:32
  researcher's
• 3:32
  corrected
• 3:33
  write-up
• 3:33
  is
• 3:33
  the
• 3:34
  dissenting
• 3:34
  data
• 3:34
  point
• 3:35
  the
• 3:35
  official
• 3:35
  framing
• 3:35
  glosses
• 3:36
  over:
• 3:37
  an
• 3:37
  ASAN-confirmed
• 3:38
  analysis
• 3:38
  concluding
• 3:39
  the
• 3:39
  session
• 3:39
  cached-pointer
• 3:40
  chain
• 3:40
  is
• 3:40
  dead
• 3:40
  at
• 3:40
  the
• 3:41
  refcount
• 3:41
  increment
• 3:41
  and
• 3:42
  the
• 3:42
  surviving
• 3:42
  defect
• 3:43
  is
• 3:43
  a
• 3:43
  prefork-only
• 3:44
  serialize-state
• 3:44
  use-after-free
• 3:45
  rated
• 3:46
  medium,
• 3:46
  not
• 3:47
  code
• 3:47
  execution
• 3:47
  .
• 3:48
  The
• 3:48
  vendors
• 3:48
  who
• 3:48
  found
• 3:49
  it
• 3:49
  maintain
• 3:49
  full
• 3:50
  mod
• 3:50
  php
• 3:50
  RCE,
• 3:51
  and
• 3:51
  both
• 3:52
  can
• 3:52
  be
• 3:52
  true
• 3:52
  if
• 3:52
  they
• 3:52
  exercise
• 3:53
  different
• 3:53
  paths,
• 3:54
  which
• 3:54
  is
• 3:54
  why
• 3:54
  defenders
• 3:55
  should
• 3:55
  patch
• 3:55
  rather
• 3:56
  than
• 3:56
  adjudicate.
• 3:57
  The
• 3:57
  Dutch
• 3:57
  national
• 3:58
  cyber
• 3:58
  security
• 3:59
  center
• 3:59
  was
• 3:59
  not
• 3:59
  waiting
• 4:00
  on
• 4:00
  the
• 4:00
  debate.
• 4:01
  It
• 4:01
  pulled
• 4:01
  its
• 4:01
  own
• 4:02
  website
• 4:02
  offline
• 4:03
  as
• 4:03
  a
• 4:03
  precaution,
• 4:04
  which
• 4:04
  is
• 4:04
  either
• 4:05
  admirable
• 4:05
  caution
• 4:06
  or
• 4:06
  an
• 4:06
  uncomfortable
• 4:07
  advertisement
• 4:07
  for
• 4:07
  how
• 4:07
  much
• 4:08
  of
• 4:08
  critical
• 4:08
  infrastructure
• 4:09
  runs
• 4:09
  on
• 4:09
  PHP
• 4:10
  .
• 4:12
  While
• 4:12
  PHP
• 4:13
  absorbed
• 4:13
  the
• 4:14
  spotlight,
• 4:14
  a
• 4:14
  quieter
• 4:15
  and
• 4:15
  arguably
• 4:15
  scarier
• 4:16
  failure
• 4:16
  played
• 4:17
  out
• 4:17
  in
• 4:17
  the
• 4:17
  public
• 4:17
  key
• 4:18
  infrastructure
• 4:18
  that
• 4:18
  underpins
• 4:19
  every
• 4:19
  TLS
• 4:20
  handshake.
• 4:21
  The
• 4:21
  private
• 4:21
  keys
• 4:22
  of
• 4:22
  eight
• 4:22
  eMudhra
• 4:23
  intermediate
• 4:23
  CA
• 4:23
  certificates
• 4:24
  were
• 4:24
  compromised,
• 4:25
  and
• 4:25
  the
• 4:25
  cause
• 4:26
  is
• 4:26
  not
• 4:26
  an
• 4:26
  attacker
• 4:27
  but
• 4:27
  arithmetic:
• 4:28
  the
• 4:28
  keys
• 4:28
  were
• 4:29
  incorrectly
• 4:29
  generated,
• 4:30
  so
• 4:30
  anyone
• 4:30
  can
• 4:31
  recover
• 4:31
  them
• 4:31
  from
• 4:31
  the
• 4:31
  certificates
• 4:32
  themselves.
• 4:33
  The
• 4:33
  reporter
• 4:34
  known
• 4:34
  as
• 4:34
  Wayne
• 4:34
  demonstrated
• 4:35
  this
• 4:35
  by
• 4:35
  signing
• 4:36
  a
• 4:36
  terse
• 4:36
  message,
• 4:37
  "We
• 4:37
  have
• 4:37
  a
• 4:37
  problem
• 4:38
  here,"
• 4:38
  with
• 4:39
  the
• 4:39
  private
• 4:39
  key
• 4:39
  of
• 4:39
  each
• 4:40
  of
• 4:40
  the
• 4:40
  eight
• 4:40
  intermediates
• 4:41
  and
• 4:41
  handing
• 4:41
  the
• 4:41
  proof
• 4:42
  to
• 4:42
  the
• 4:42
  root
• 4:42
  program
• 4:42
  teams
• 4:43
  on
• 4:43
  October
• 4:43
  17.
• 4:45
  Those
• 4:45
  intermediates
• 4:45
  chain
• 4:46
  to
• 4:46
  roots
• 4:46
  trusted
• 4:47
  by
• 4:47
  Mozilla,
• 4:47
  Microsoft,
• 4:48
  Apple,
• 4:48
  and
• 4:49
  Chrome,
• 4:49
  which
• 4:50
  means
• 4:50
  that
• 4:50
  until
• 4:50
  last
• 4:51
  week
• 4:51
  a
• 4:51
  holder
• 4:51
  of
• 4:51
  any
• 4:52
  recovered
• 4:52
  key
• 4:52
  could
• 4:53
  impersonate
• 4:53
  any
• 4:53
  website.
• 4:54
  The
• 4:54
  one
• 4:55
  piece
• 4:55
  of
• 4:55
  good
• 4:55
  news
• 4:56
  is
• 4:56
  structural:
• 4:57
  there
• 4:57
  are
• 4:57
  no
• 4:57
  certificate
• 4:58
  transparency
• 4:58
  log
• 4:59
  entries
• 4:59
  for
• 4:59
  these
• 4:59
  intermediates
• 5:00
  since
• 5:00
  their
• 5:00
  April
• 5:01
  2025
• 5:02
  creation,
• 5:02
  so
• 5:03
  CT-enforcing
• 5:04
  browsers
• 5:04
  could
• 5:04
  not
• 5:04
  have
• 5:05
  been
• 5:05
  silently
• 5:05
  attacked.
• 5:06
  What
• 5:06
  nobody
• 5:07
  can
• 5:07
  say
• 5:07
  is
• 5:07
  whether
• 5:07
  non-CT
• 5:08
  clients
• 5:08
  outside
• 5:09
  the
• 5:09
  browser
• 5:09
  were
• 5:09
  targeted
• 5:10
  .
• 5:10
  The
• 5:10
  cleanup
• 5:11
  exposes
• 5:11
  how
• 5:11
  uneven
• 5:12
  revocation
• 5:12
  really
• 5:13
  is
• 5:13
  once
• 5:13
  you
• 5:13
  leave
• 5:13
  the
• 5:14
  browser.
• 5:15
  Browsers
• 5:15
  blocked
• 5:16
  the
• 5:16
  certificates
• 5:16
  within
• 5:17
  days,
• 5:17
  but
• 5:18
  the
• 5:18
  long
• 5:18
  tail
• 5:18
  is
• 5:19
  the
• 5:19
  command-line
• 5:19
  and
• 5:19
  runtime
• 5:20
  world
• 5:21
  that
• 5:21
  verifies
• 5:21
  against
• 5:21
  static
• 5:22
  trust
• 5:22
  bundles
• 5:23
  and
• 5:23
  never
• 5:23
  checks
• 5:23
  revocation
• 5:24
  at
• 5:24
  all.
• 5:25
  Go
• 5:25
  moved
• 5:25
  decisively,
• 5:26
  tracking
• 5:26
  the
• 5:26
  issue
• 5:27
  as
• 5:27
  CVE-2026-111943
• 5:32
  and
• 5:32
  changing
• 5:32
  crypto/x509
• 5:36
  so
• 5:36
  that
• 5:36
  Verify
• 5:36
  filters
• 5:37
  out
• 5:37
  any
• 5:37
  chain
• 5:37
  containing
• 5:38
  the
• 5:38
  distrusted
• 5:39
  intermediates,
• 5:40
  with
• 5:40
  backports
• 5:40
  and
• 5:40
  a
• 5:40
  stream
• 5:41
  of
• 5:41
  downstream
• 5:41
  projects
• 5:42
  bumping
• 5:42
  their
• 5:42
  toolchains
• 5:43
  to
• 5:43
  pick
• 5:43
  it
• 5:43
  up
• 5:44
  .
• 5:44
  On
• 5:44
  macOS
• 5:45
  the
• 5:45
  gap
• 5:45
  is
• 5:45
  concrete
• 5:46
  and
• 5:46
  ugly:
• 5:47
  the
• 5:47
  system
• 5:47
  blocks
• 5:48
  the
• 5:48
  intermediates,
• 5:49
  but
• 5:49
  the
• 5:49
  built-in
• 5:49
  curl,
• 5:50
  git,
• 5:50
  and
• 5:51
  Python
• 5:51
  verify
• 5:51
  against
• 5:52
  a
• 5:52
  copy
• 5:52
  of
• 5:52
  the
• 5:52
  root
• 5:53
  bundle
• 5:53
  that
• 5:53
  has
• 5:53
  not
• 5:53
  been
• 5:53
  updated,
• 5:54
  so
• 5:55
  Harry
• 5:55
  Sintonen's
• 5:55
  mitigation
• 5:56
  of
• 5:56
  manually
• 5:56
  stripping
• 5:57
  the
• 5:57
  emSign
• 5:58
  and
• 5:58
  AAA
• 5:58
  Certificate
• 5:59
  Services
• 5:59
  roots
• 5:59
  from
• 6:00
  the
• 6:00
  keychain
• 6:00
  and
• 6:00
  cert.pem
• 6:02
  is
• 6:02
  not
• 6:03
  paranoia,
• 6:04
  it
• 6:04
  is
• 6:04
  the
• 6:04
  actual
• 6:04
  fix
• 6:05
  until
• 6:05
  packages
• 6:05
  catch
• 6:06
  up
• 6:06
  .
• 6:06
  For
• 6:07
  anyone
• 6:07
  who
• 6:07
  has
• 6:07
  built
• 6:08
  fraud
• 6:08
  defenses,
• 6:09
  the
• 6:09
  lesson
• 6:09
  is
• 6:09
  familiar:
• 6:10
  the
• 6:10
  control
• 6:11
  that
• 6:11
  saved
• 6:11
  the
• 6:11
  browsers,
• 6:12
  transparency
• 6:12
  logging,
• 6:13
  is
• 6:13
  the
• 6:13
  one
• 6:14
  your
• 6:14
  automated
• 6:14
  backend
• 6:15
  clients
• 6:15
  almost
• 6:16
  certainly
• 6:16
  do
• 6:16
  not
• 6:16
  enforce.
• 6:19
  The
• 6:19
  year's
• 6:19
  defining
• 6:20
  shift
• 6:20
  in
• 6:20
  offensive
• 6:21
  tradecraft
• 6:22
  is
• 6:22
  that
• 6:22
  the
• 6:22
  agent
• 6:22
  is
• 6:23
  now
• 6:23
  the
• 6:23
  operator,
• 6:24
  and
• 6:24
  a
• 6:24
  compiled
• 6:24
  statistics
• 6:25
  report
• 6:25
  tries
• 6:26
  to
• 6:26
  put
• 6:26
  numbers
• 6:26
  on
• 6:27
  it.
• 6:27
  The
• 6:27
  anchor
• 6:28
  remains
• 6:28
  Anthropic's
• 6:29
  GTG-1002
• 6:32
  disclosure
• 6:32
  from
• 6:33
  November
• 6:33
  2025,
• 6:34
  a
• 6:34
  Chinese
• 6:35
  state-sponsored
• 6:36
  group
• 6:36
  that
• 6:36
  drove
• 6:36
  Claude
• 6:37
  Code
• 6:37
  to
• 6:37
  autonomously
• 6:38
  execute
• 6:38
  roughly
• 6:39
  80
• 6:39
  to
• 6:39
  90
• 6:39
  percent
• 6:40
  of
• 6:40
  intrusion
• 6:40
  tradecraft
• 6:41
  against
• 6:41
  about
• 6:41
  thirty
• 6:42
  organizations,
• 6:43
  with
• 6:43
  humans
• 6:44
  at
• 6:44
  only
• 6:44
  four
• 6:44
  to
• 6:44
  six
• 6:45
  decision
• 6:45
  points.
• 6:46
  The
• 6:46
  BlueRadius
• 6:47
  dataset
• 6:47
  of
• 6:47
  21
• 6:48
  cases
• 6:48
  finds
• 6:49
  76
• 6:49
  percent
• 6:50
  involved
• 6:50
  excessive
• 6:51
  agent
• 6:51
  privilege,
• 6:52
  71
• 6:52
  percent
• 6:53
  involved
• 6:53
  prompt
• 6:53
  injection,
• 6:54
  and
• 6:54
  81
• 6:55
  percent
• 6:55
  fit
• 6:55
  the
• 6:55
  lethal-trifecta
• 6:56
  pattern
• 6:57
  of
• 6:57
  injection
• 6:57
  plus
• 6:58
  an
• 6:58
  outbound
• 6:58
  tool
• 6:59
  plus
• 6:59
  broad
• 6:59
  standing
• 7:00
  privilege
• 7:00
  in
• 7:00
  one
• 7:00
  agent.
• 7:01
  The
• 7:01
  honest
• 7:02
  caveat
• 7:02
  is
• 7:02
  in
• 7:03
  the
• 7:03
  report
• 7:03
  itself:
• 7:04
  only
• 7:04
  19
• 7:05
  percent
• 7:05
  are
• 7:05
  confirmed
• 7:06
  real-world
• 7:06
  incidents,
• 7:07
  the
• 7:07
  rest
• 7:08
  being
• 7:08
  disclosed
• 7:08
  vulnerabilities
• 7:09
  and
• 7:09
  red-team
• 7:10
  demonstrations,
• 7:11
  so
• 7:11
  the
• 7:11
  Mandiant
• 7:12
  figure
• 7:12
  of
• 7:12
  dwell
• 7:13
  time
• 7:13
  collapsing
• 7:13
  from
• 7:14
  eight
• 7:14
  hours
• 7:14
  to
• 7:14
  twenty-two
• 7:15
  seconds
• 7:15
  describes
• 7:16
  capability,
• 7:17
  not
• 7:17
  an
• 7:17
  epidemic
• 7:17
  .
• 7:18
  The
• 7:18
  excessive-privilege
• 7:19
  number
• 7:20
  is
• 7:20
  the
• 7:20
  one
• 7:20
  fraud
• 7:20
  and
• 7:21
  infosec
• 7:21
  teams
• 7:21
  should
• 7:22
  sit
• 7:22
  with,
• 7:22
  because
• 7:23
  it
• 7:23
  is
• 7:23
  the
• 7:23
  oldest
• 7:23
  mistake
• 7:24
  in
• 7:24
  the
• 7:24
  book
• 7:24
  wearing
• 7:25
  a
• 7:25
  new
• 7:25
  jacket.
• 7:26
  Supply
• 7:26
  chain
• 7:26
  is
• 7:27
  where
• 7:27
  the
• 7:27
  theory
• 7:27
  becomes
• 7:28
  a
• 7:28
  pip
• 7:28
  install.
• 7:28
  A
• 7:28
  LiteLLM
• 7:29
  1.107.0
• 7:32
  PyPI
• 7:32
  wheel
• 7:33
  was
• 7:33
  found
• 7:33
  carrying
• 7:33
  a
• 7:34
  credential
• 7:34
  stealer
• 7:34
  and
• 7:35
  a
• 7:35
  persistent
• 7:35
  Python
• 7:36
  backdoor,
• 7:36
  which
• 7:37
  is
• 7:37
  notable
• 7:37
  less
• 7:37
  for
• 7:37
  novelty
• 7:38
  than
• 7:38
  for
• 7:38
  repetition:
• 7:39
  this
• 7:39
  is
• 7:40
  the
• 7:40
  second
• 7:40
  time
• 7:40
  in
• 7:40
  2026
• 7:42
  that
• 7:42
  a
• 7:42
  release
• 7:42
  of
• 7:42
  the
• 7:42
  widely
• 7:43
  deployed
• 7:43
  AI
• 7:44
  proxy
• 7:44
  gateway
• 7:45
  has
• 7:45
  shipped
• 7:45
  credential-harvesting
• 7:46
  code,
• 7:47
  after
• 7:47
  the
• 7:47
  March
• 7:47
  incident
• 7:48
  that
• 7:48
  abused
• 7:48
  a
• 7:48
  stolen
• 7:49
  publishing
• 7:49
  token
• 7:49
  .
• 7:50
  More
• 7:50
  inventive
• 7:51
  is
• 7:51
  the
• 7:51
  MCP
• 7:52
  server
• 7:52
  that
• 7:52
  Knostic's
• 7:53
  scanner
• 7:53
  flagged
• 7:54
  as
• 7:54
  dangerous.
• 7:54
  Marketed
• 7:55
  as
• 7:55
  a
• 7:55
  tool
• 7:55
  that
• 7:56
  reads
• 7:56
  Reddit
• 7:56
  threads,
• 7:57
  the
• 7:57
  package
• 7:57
  quietly
• 7:58
  downloads
• 7:58
  a
• 7:58
  PNG
• 7:59
  from
• 7:59
  an
• 7:59
  unrelated
• 8:00
  host,
• 8:00
  reads
• 8:01
  the
• 8:01
  lowest
• 8:01
  bit
• 8:01
  of
• 8:02
  each
• 8:02
  color
• 8:02
  channel
• 8:02
  to
• 8:03
  reconstruct
• 8:03
  a
• 8:03
  zlib-compressed,
• 8:04
  base64-encoded
• 8:05
  Python
• 8:06
  file,
• 8:07
  and
• 8:07
  runs
• 8:07
  it
• 8:07
  during
• 8:07
  tool
• 8:08
  use
• 8:08
  rather
• 8:08
  than
• 8:08
  at
• 8:08
  install
• 8:09
  time.
• 8:10
  The
• 8:10
  code
• 8:10
  traces
• 8:11
  to
• 8:11
  an
• 8:11
  educational
• 8:12
  proof
• 8:12
  of
• 8:12
  concept
• 8:13
  whose
• 8:13
  explanatory
• 8:14
  parent
• 8:14
  README
• 8:16
  was
• 8:17
  stripped
• 8:17
  during
• 8:17
  repackaging,
• 8:18
  so
• 8:18
  an
• 8:18
  installer
• 8:19
  sees
• 8:19
  a
• 8:19
  Reddit
• 8:19
  tool
• 8:20
  and
• 8:20
  not
• 8:20
  a
• 8:20
  security
• 8:21
  demonstration.
• 8:22
  The
• 8:22
  payload
• 8:22
  they
• 8:22
  retrieved
• 8:23
  only
• 8:23
  hashed
• 8:23
  a
• 8:24
  config
• 8:24
  file,
• 8:25
  but
• 8:25
  the
• 8:25
  mechanism
• 8:25
  is
• 8:26
  the
• 8:26
  vulnerability:
• 8:27
  there
• 8:27
  is
• 8:27
  no
• 8:27
  signature
• 8:28
  check,
• 8:29
  and
• 8:29
  whoever
• 8:29
  controls
• 8:30
  the
• 8:30
  hosted
• 8:30
  image
• 8:30
  controls
• 8:31
  the
• 8:31
  code
• 8:31
  that
• 8:31
  runs
• 8:32
  .
• 8:32
  In
• 8:33
  the
• 8:33
  same
• 8:33
  identity-replay
• 8:34
  vein,
• 8:35
  a
• 8:35
  small
• 8:35
  published
• 8:35
  tool
• 8:36
  walks
• 8:36
  through
• 8:36
  discovering
• 8:37
  a
• 8:37
  site's
• 8:37
  Turnstile
• 8:38
  sitekey,
• 8:39
  minting
• 8:39
  a
• 8:39
  valid
• 8:40
  challenge
• 8:40
  response,
• 8:41
  and
• 8:41
  replaying
• 8:42
  browser
• 8:42
  identity,
• 8:43
  the
• 8:43
  next
• 8:43
  predictable
• 8:44
  move
• 8:44
  in
• 8:44
  the
• 8:44
  bot-defense
• 8:45
  arms
• 8:45
  race
• 8:45
  .
• 8:49
  Datadog
• 8:49
  Security
• 8:50
  Labs
• 8:50
  ran
• 8:50
  the
• 8:51
  experiment
• 8:51
  everyone
• 8:52
  keeps
• 8:52
  asserting
• 8:52
  the
• 8:53
  answer
• 8:53
  to:
• 8:54
  do
• 8:54
  pre-set
• 8:54
  security
• 8:55
  rules
• 8:55
  actually
• 8:56
  make
• 8:56
  coding
• 8:56
  agents
• 8:57
  write
• 8:57
  safer
• 8:57
  code.
• 8:58
  Using
• 8:59
  Project
• 8:59
  CodeGuard
• 9:00
  rules
• 9:00
  across
• 9:01
  Claude
• 9:01
  Code
• 9:01
  with
• 9:01
  Sonnet
• 9:02
  5,
• 9:03
  Cursor
• 9:03
  with
• 9:03
  Composer
• 9:04
  2.5,
• 9:05
  and
• 9:05
  Codex
• 9:06
  with
• 9:06
  GPT
• 9:06
  5.5,
• 9:08
  researcher
• 9:08
  Kennedy
• 9:08
  Toomey
• 9:09
  asked
• 9:09
  each
• 9:09
  to
• 9:09
  build
• 9:10
  a
• 9:10
  document
• 9:10
  portal,
• 9:11
  with
• 9:11
  a
• 9:11
  prompt
• 9:11
  that
• 9:12
  pointedly
• 9:12
  never
• 9:12
  said
• 9:13
  who
• 9:13
  should
• 9:13
  be
• 9:13
  allowed
• 9:13
  to
• 9:13
  read
• 9:14
  an
• 9:14
  uploaded
• 9:14
  document.
• 9:15
  Every
• 9:16
  baseline
• 9:16
  build
• 9:16
  shared
• 9:17
  the
• 9:17
  same
• 9:17
  insecure
• 9:18
  direct
• 9:18
  object
• 9:18
  reference,
• 9:19
  letting
• 9:19
  any
• 9:20
  authenticated
• 9:20
  user
• 9:21
  read
• 9:21
  anyone's
• 9:21
  files.
• 9:23
  With
• 9:23
  the
• 9:23
  rules
• 9:23
  enabled,
• 9:24
  the
• 9:24
  results
• 9:24
  diverged
• 9:25
  sharply
• 9:25
  and
• 9:25
  unflatteringly.
• 9:27
  Sonnet
• 9:27
  5
• 9:27
  showed
• 9:28
  no
• 9:28
  meaningful
• 9:28
  improvement
• 9:29
  and
• 9:29
  even
• 9:29
  regressed,
• 9:30
  checking
• 9:30
  session
• 9:31
  revocation
• 9:31
  only
• 9:32
  in
• 9:32
  CSRF
• 9:33
  middleware
• 9:33
  so
• 9:33
  a
• 9:33
  logged-out
• 9:34
  user
• 9:34
  kept
• 9:34
  read
• 9:35
  access
• 9:35
  for
• 9:35
  the
• 9:35
  token's
• 9:36
  lifetime.
• 9:37
  Composer
• 9:37
  2.5
• 9:38
  was
• 9:38
  weakest,
• 9:39
  leaving
• 9:39
  JWTs
• 9:40
  valid
• 9:40
  for
• 9:40
  up
• 9:41
  to
• 9:41
  24
• 9:41
  hours
• 9:42
  after
• 9:42
  logout
• 9:42
  and
• 9:43
  a
• 9:43
  hardcoded
• 9:43
  secret
• 9:43
  fallback
• 9:44
  wrapped
• 9:44
  in
• 9:44
  a
• 9:44
  production
• 9:45
  check
• 9:45
  that
• 9:45
  never
• 9:46
  fires.
• 9:47
  Only
• 9:47
  GPT
• 9:48
  5.5
• 9:49
  earned
• 9:49
  the
• 9:49
  write-up's
• 9:49
  shock,
• 9:50
  shipping
• 9:50
  no
• 9:50
  IDOR,
• 9:51
  Argon2id
• 9:52
  hashing,
• 9:53
  HttpOnly
• 9:54
  cookies,
• 9:54
  and
• 9:55
  magic-byte
• 9:55
  upload
• 9:55
  validation.
• 9:57
  The
• 9:57
  lesson
• 9:57
  lands
• 9:58
  squarely
• 9:58
  on
• 9:58
  anyone
• 9:59
  who
• 9:59
  has
• 9:59
  threat-modeled
• 9:59
  authorization:
• 10:01
  telling
• 10:01
  a
• 10:01
  model
• 10:01
  to
• 10:02
  build
• 10:02
  securely
• 10:02
  does
• 10:03
  not
• 10:03
  encode
• 10:03
  the
• 10:03
  requirement
• 10:04
  to
• 10:04
  filter
• 10:04
  every
• 10:05
  document
• 10:05
  query
• 10:05
  by
• 10:05
  owner,
• 10:06
  so
• 10:06
  the
• 10:06
  prompt
• 10:07
  must
• 10:07
  say
• 10:07
  it
• 10:07
  or
• 10:07
  the
• 10:08
  model
• 10:08
  decides
• 10:08
  .
• 10:09
  That
• 10:09
  empirical
• 10:10
  mess
• 10:10
  is
• 10:10
  the
• 10:10
  backdrop
• 10:11
  for
• 10:11
  CREST's
• 10:11
  whitepaper
• 10:12
  on
• 10:12
  whether
• 10:12
  AI
• 10:12
  makes
• 10:13
  security
• 10:13
  services
• 10:14
  obsolete,
• 10:15
  and
• 10:15
  its
• 10:15
  answer
• 10:15
  is
• 10:15
  a
• 10:15
  flat
• 10:16
  no
• 10:16
  scenario
• 10:16
  in
• 10:17
  which
• 10:17
  cybersecurity
• 10:17
  is
• 10:18
  not
• 10:18
  needed.
• 10:19
  Its
• 10:19
  member
• 10:19
  firms
• 10:20
  report
• 10:20
  surging
• 10:21
  demand
• 10:21
  for
• 10:21
  AI-use
• 10:22
  policies,
• 10:23
  AI
• 10:23
  asset
• 10:24
  discovery,
• 10:24
  and
• 10:24
  testing
• 10:25
  of
• 10:25
  GenAI
• 10:25
  applications,
• 10:26
  even
• 10:27
  as
• 10:27
  buyers
• 10:27
  push
• 10:27
  for
• 10:28
  AI-driven
• 10:28
  price
• 10:28
  cuts
• 10:29
  and
• 10:29
  some
• 10:29
  clients
• 10:30
  refuse
• 10:30
  any
• 10:30
  AI
• 10:31
  in
• 10:31
  their
• 10:31
  supply
• 10:31
  chain,
• 10:32
  pushing
• 10:32
  providers
• 10:33
  toward
• 10:33
  twin-track
• 10:34
  offerings
• 10:34
  with
• 10:35
  and
• 10:35
  without
• 10:35
  it.
• 10:36
  The
• 10:36
  exposed
• 10:37
  services
• 10:37
  are
• 10:37
  the
• 10:37
  predictable
• 10:38
  ones:
• 10:39
  basic
• 10:39
  vulnerability
• 10:40
  scanning,
• 10:40
  report
• 10:41
  drafting,
• 10:42
  first-pass
• 10:42
  code
• 10:42
  review,
• 10:43
  and
• 10:43
  Tier-1
• 10:44
  SOC
• 10:44
  triage.
• 10:45
  The
• 10:45
  premium
• 10:46
  migrates
• 10:46
  to
• 10:46
  red
• 10:46
  teaming
• 10:47
  and
• 10:47
  to
• 10:47
  AI-era
• 10:48
  secure
• 10:48
  design
• 10:48
  authority.
• 10:50
  The
• 10:50
  longer-term
• 10:51
  scenarios
• 10:51
  are
• 10:51
  bracing,
• 10:52
  with
• 10:52
  open-weight
• 10:53
  worlds
• 10:53
  producing
• 10:53
  an
• 10:53
  exponentially
• 10:54
  widening
• 10:55
  gap
• 10:55
  between
• 10:55
  unconstrained
• 10:56
  offensive
• 10:57
  tooling
• 10:57
  and
• 10:57
  cautious
• 10:58
  defenders,
• 10:59
  and
• 10:59
  concentrated
• 10:59
  worlds
• 11:00
  producing
• 11:00
  a
• 11:00
  security
• 11:01
  divide
• 11:01
  where
• 11:01
  warnings
• 11:02
  get
• 11:02
  dismissed
• 11:02
  as
• 11:03
  self-interested
• 11:03
  alarmism
• 11:04
  .
• 11:05
  Security
• 11:05
  Blueprints
• 11:06
  supplies
• 11:06
  the
• 11:06
  empirical
• 11:07
  counterweight
• 11:07
  to
• 11:07
  detection-first
• 11:08
  thinking,
• 11:09
  arguing
• 11:09
  from
• 11:09
  76
• 11:10
  analyzed
• 11:11
  breaches
• 11:11
  that
• 11:11
  four
• 11:12
  structural
• 11:12
  controls
• 11:13
  would
• 11:13
  have
• 11:13
  prevented
• 11:13
  or
• 11:13
  contained
• 11:14
  49
• 11:14
  of
• 11:15
  them,
• 11:15
  and
• 11:15
  that
• 11:15
  three
• 11:16
  invariants
• 11:16
  alone,
• 11:17
  hardware
• 11:17
  second
• 11:18
  factors,
• 11:19
  positive
• 11:19
  execution
• 11:20
  control,
• 11:20
  and
• 11:21
  egress
• 11:21
  restriction,
• 11:22
  would
• 11:22
  have
• 11:22
  stopped
• 11:22
  65
• 11:23
  percent
• 11:23
  across
• 11:23
  a
• 11:24
  70-incident
• 11:24
  set
• 11:24
  spanning
• 11:25
  the
• 11:25
  JADEPUFFER
• 11:28
  agentic
• 11:28
  ransomware
• 11:29
  campaign,
• 11:30
  the
• 11:31
  Qantas
• 11:31
  social-engineering
• 11:32
  breach,
• 11:33
  and
• 11:33
  the
• 11:33
  Conduent
• 11:33
  intrusion
• 11:34
  that
• 11:34
  reached
• 11:34
  at
• 11:34
  least
• 11:35
  25
• 11:35
  million
• 11:35
  people
• 11:36
  .
• 11:40
  MiniMax
• 11:41
  took
• 11:41
  the
• 11:41
  preview
• 11:41
  wrapper
• 11:42
  off
• 11:42
  M3.1
• 11:43
  Flash,
• 11:44
  the
• 11:44
  model
• 11:44
  that
• 11:44
  ran
• 11:45
  anonymously
• 11:45
  as
• 11:45
  Space
• 11:46
  Bunny
• 11:46
  through
• 11:46
  more
• 11:46
  than
• 11:47
  200
• 11:47
  trillion
• 11:48
  tokens.
• 11:49
  It
• 11:49
  is
• 11:49
  a
• 11:49
  mixture-of-experts
• 11:50
  design
• 11:50
  with
• 11:50
  428
• 11:52
  billion
• 11:52
  total
• 11:52
  parameters
• 11:53
  and
• 11:53
  roughly
• 11:54
  23
• 11:54
  billion
• 11:54
  active,
• 11:55
  with
• 11:55
  weights
• 11:56
  promised
• 11:56
  October
• 11:57
  23.
• 11:58
  The
• 11:58
  pitch
• 11:58
  is
• 11:58
  price
• 11:59
  and
• 11:59
  speed:
• 11:59
  output
• 12:00
  above
• 12:00
  200
• 12:01
  tokens
• 12:01
  per
• 12:01
  second,
• 12:02
  costs
• 12:02
  cut
• 12:03
  70
• 12:03
  percent
• 12:04
  against
• 12:04
  its
• 12:04
  predecessor,
• 12:05
  and
• 12:05
  flat
• 12:06
  pricing
• 12:06
  of
• 12:06
  fifteen
• 12:07
  cents
• 12:07
  per
• 12:07
  million
• 12:08
  input
• 12:08
  tokens.
• 12:09
  The
• 12:09
  benchmark
• 12:10
  sheet
• 12:10
  is
• 12:10
  strong
• 12:11
  on
• 12:11
  exactly
• 12:11
  the
• 12:11
  agentic
• 12:12
  and
• 12:12
  security
• 12:12
  work
• 12:13
  this
• 12:13
  audience
• 12:13
  cares
• 12:13
  about,
• 12:14
  with
• 12:14
  76.2
• 12:16
  on
• 12:16
  BankerToolBench
• 12:17
  for
• 12:17
  multi-step
• 12:17
  financial
• 12:18
  workflows
• 12:19
  and
• 12:19
  82
• 12:19
  percent
• 12:20
  on
• 12:20
  CyberGym
• 12:21
  for
• 12:21
  vulnerability
• 12:21
  discovery
• 12:22
  and
• 12:22
  validation
• 12:22
  .
• 12:23
  Community
• 12:24
  notes
• 12:24
  fill
• 12:24
  in
• 12:25
  the
• 12:25
  architecture
• 12:25
  and
• 12:25
  the
• 12:26
  context
• 12:26
  that
• 12:26
  a
• 12:26
  2.7-trillion-parameter
• 12:28
  Pro
• 12:28
  variant
• 12:29
  is
• 12:29
  expected
• 12:29
  to
• 12:29
  follow
• 12:29
  .
• 12:30
  The
• 12:30
  skeptic's
• 12:31
  reflex
• 12:31
  applies:
• 12:32
  these
• 12:32
  are
• 12:33
  vendor
• 12:33
  numbers,
• 12:34
  a
• 12:34
  CyberGym
• 12:34
  score
• 12:35
  means
• 12:35
  little
• 12:35
  without
• 12:35
  cost-per-case
• 12:36
  accounting,
• 12:37
  and
• 12:37
  the
• 12:37
  real
• 12:37
  story
• 12:38
  is
• 12:38
  the
• 12:38
  cheap-inference
• 12:39
  business
• 12:39
  model
• 12:39
  a
• 12:39
  cohort
• 12:40
  of
• 12:40
  Chinese
• 12:40
  open-weight
• 12:41
  labs
• 12:41
  has
• 12:41
  standardized.
• 12:43
  A
• 12:43
  dense
• 12:43
  daily
• 12:43
  roundup
• 12:44
  of
• 12:44
  leaks
• 12:44
  is
• 12:44
  useful
• 12:45
  mostly
• 12:45
  as
• 12:45
  weather,
• 12:46
  tracking
• 12:46
  a
• 12:46
  possible
• 12:47
  GPT-6.5
• 12:48
  tease,
• 12:49
  GPT-6.1
• 12:50
  Turbo
• 12:50
  surfacing
• 12:51
  in
• 12:51
  a
• 12:51
  Microsoft
• 12:52
  pull
• 12:52
  request,
• 12:53
  and
• 12:53
  Nvidia
• 12:53
  pushing
• 12:54
  Kimi
• 12:54
  K3
• 12:54
  to
• 12:54
  423
• 12:56
  tokens
• 12:56
  per
• 12:56
  second
• 12:56
  per
• 12:57
  user,
• 12:57
  though
• 12:57
  the
• 12:58
  item
• 12:58
  that
• 12:58
  should
• 12:58
  interest
• 12:59
  defenders
• 12:59
  is
• 12:59
  an
• 12:59
  Anthropic
• 13:00
  open-source
• 13:00
  scanner
• 13:01
  offering
• 13:01
  free
• 13:02
  periodic
• 13:02
  security
• 13:03
  scans
• 13:03
  of
• 13:03
  critical
• 13:03
  projects
• 13:04
  with
• 13:04
  proof-of-concept
• 13:05
  exploits
• 13:05
  and
• 13:06
  suggested
• 13:06
  patches
• 13:07
  .
• 13:07
  Mistral's
• 13:08
  Voxtral
• 13:08
  3
• 13:09
  is
• 13:09
  the
• 13:09
  more
• 13:09
  disciplined
• 13:10
  release,
• 13:10
  a
• 13:10
  full
• 13:11
  speech
• 13:11
  stack
• 13:11
  rather
• 13:12
  than
• 13:12
  a
• 13:12
  single
• 13:12
  model.
• 13:14
  The
• 13:14
  transcription
• 13:14
  tier
• 13:15
  spans
• 13:15
  a
• 13:15
  flagship
• 13:16
  Small,
• 13:16
  a
• 13:17
  4-billion-parameter
• 13:18
  Mini
• 13:18
  at
• 13:18
  $0.0035
• 13:20
  per
• 13:20
  minute,
• 13:21
  and
• 13:21
  a
• 13:21
  sub-500ms
• 13:23
  realtime
• 13:23
  variant,
• 13:24
  all
• 13:24
  with
• 13:24
  diarization
• 13:25
  and
• 13:25
  context
• 13:26
  biasing
• 13:26
  across
• 13:27
  more
• 13:27
  than
• 13:27
  fifty
• 13:27
  languages,
• 13:28
  with
• 13:28
  Mistral
• 13:29
  claiming
• 13:29
  state-of-the-art
• 13:30
  multilingual
• 13:30
  accuracy
• 13:31
  over
• 13:31
  Whisper
• 13:32
  and
• 13:32
  Gemini
• 13:32
  3.5
• 13:33
  Transcribe.
• 13:34
  The
• 13:34
  TTS
• 13:35
  side
• 13:35
  covers
• 13:35
  more
• 13:36
  than
• 13:36
  35
• 13:36
  languages
• 13:37
  at
• 13:37
  thirteen
• 13:37
  dollars
• 13:38
  per
• 13:38
  million
• 13:38
  characters
• 13:39
  with
• 13:39
  voice
• 13:39
  cloning
• 13:40
  from
• 13:40
  thirty
• 13:40
  minutes
• 13:40
  of
• 13:40
  audio,
• 13:41
  and
• 13:41
  the
• 13:41
  voice-agent
• 13:42
  SDK
• 13:43
  chains
• 13:43
  realtime
• 13:43
  transcription,
• 13:44
  a
• 13:45
  reasoning
• 13:45
  model,
• 13:45
  and
• 13:46
  speech
• 13:46
  on
• 13:46
  a
• 13:46
  LiveKit
• 13:46
  pipeline
• 13:47
  where
• 13:47
  no
• 13:47
  stage
• 13:48
  waits
• 13:48
  for
• 13:48
  the
• 13:48
  one
• 13:48
  before
• 13:49
  it,
• 13:49
  so
• 13:49
  each
• 13:50
  turn
• 13:50
  completes
• 13:50
  in
• 13:50
  under
• 13:51
  a
• 13:51
  second
• 13:52
  and
• 13:52
  the
• 13:52
  agent
• 13:52
  stops
• 13:53
  talking
• 13:53
  when
• 13:53
  the
• 13:53
  caller
• 13:53
  interrupts.
• 13:55
  The
• 13:55
  sovereignty
• 13:56
  angle
• 13:56
  is
• 13:56
  the
• 13:56
  differentiator:
• 13:58
  it
• 13:58
  self-deploys
• 13:59
  on-premises
• 14:00
  or
• 14:00
  in
• 14:00
  private
• 14:00
  cloud,
• 14:01
  giving
• 14:01
  an
• 14:02
  organization
• 14:02
  control
• 14:03
  over
• 14:03
  where
• 14:03
  audio
• 14:04
  is
• 14:04
  processed
• 14:04
  and
• 14:05
  whether
• 14:05
  it
• 14:05
  is
• 14:05
  retained
• 14:05
  .
• 14:09
  The
• 14:09
  most
• 14:09
  interesting
• 14:09
  research
• 14:10
  of
• 14:10
  the
• 14:10
  batch
• 14:11
  is
• 14:11
  a
• 14:11
  Stanford
• 14:11
  paper
• 14:12
  proposing
• 14:12
  HybridAgent,
• 14:13
  an
• 14:13
  LLM
• 14:14
  agent
• 14:14
  that
• 14:14
  reasons
• 14:15
  in
• 14:15
  latent
• 14:15
  space
• 14:16
  and
• 14:16
  acts
• 14:16
  through
• 14:16
  text.
• 14:17
  Text
• 14:18
  agents
• 14:18
  must
• 14:18
  verbalize
• 14:19
  every
• 14:19
  reasoning
• 14:20
  step
• 14:20
  before
• 14:20
  calling
• 14:20
  a
• 14:21
  tool,
• 14:21
  while
• 14:22
  latent-reasoning
• 14:22
  methods
• 14:23
  compute
• 14:23
  in
• 14:23
  continuous
• 14:24
  hidden
• 14:24
  space
• 14:24
  but
• 14:25
  cannot
• 14:25
  touch
• 14:25
  tools
• 14:26
  or
• 14:26
  leave
• 14:26
  a
• 14:26
  readable
• 14:26
  trace.
• 14:27
  HybridAgent
• 14:28
  splits
• 14:29
  the
• 14:29
  difference
• 14:29
  with
• 14:29
  HybridLink,
• 14:30
  a
• 14:30
  lightweight
• 14:31
  two-layer
• 14:31
  adapter
• 14:32
  of
• 14:32
  roughly
• 14:32
  ten
• 14:32
  million
• 14:33
  parameters
• 14:33
  that
• 14:34
  maps
• 14:34
  hidden
• 14:34
  states
• 14:35
  back
• 14:35
  into
• 14:35
  the
• 14:35
  input
• 14:35
  embedding
• 14:36
  space
• 14:36
  so
• 14:37
  the
• 14:37
  model
• 14:37
  can
• 14:37
  consume
• 14:38
  both
• 14:38
  token
• 14:38
  embeddings
• 14:39
  and
• 14:39
  raw
• 14:39
  latent
• 14:39
  vectors
• 14:40
  through
• 14:40
  one
• 14:40
  interface.
• 14:42
  The
• 14:42
  agent
• 14:42
  enters
• 14:42
  latent
• 14:43
  mode
• 14:43
  by
• 14:43
  emitting
• 14:44
  an
• 14:44
  anchor
• 14:44
  token
• 14:45
  and
• 14:45
  exits
• 14:45
  when
• 14:46
  the
• 14:46
  adapter's
• 14:46
  output
• 14:46
  lands
• 14:47
  nearest
• 14:47
  an
• 14:47
  exit
• 14:48
  anchor,
• 14:48
  deciding
• 14:49
  step
• 14:49
  by
• 14:49
  step
• 14:49
  whether
• 14:50
  to
• 14:50
  think
• 14:50
  in
• 14:50
  words
• 14:50
  or
• 14:50
  vectors,
• 14:51
  and
• 14:51
  a
• 14:51
  persistent
• 14:52
  KV
• 14:52
  cache
• 14:53
  carries
• 14:53
  text,
• 14:53
  latents,
• 14:54
  and
• 14:54
  tool
• 14:54
  observations
• 14:55
  across
• 14:55
  turns
• 14:56
  as
• 14:56
  continuous
• 14:57
  working
• 14:57
  memory.
• 14:58
  Trained
• 14:58
  in
• 14:58
  two
• 14:59
  stages
• 14:59
  on
• 14:59
  Qwen3
• 15:00
  backbones
• 15:00
  at
• 15:00
  4,
• 15:01
  8,
• 15:01
  and
• 15:01
  14
• 15:02
  billion
• 15:02
  parameters,
• 15:03
  it
• 15:03
  beats
• 15:03
  matched
• 15:03
  baselines
• 15:04
  by
• 15:04
  10.4
• 15:04
  percent
• 15:05
  on
• 15:05
  average
• 15:05
  after
• 15:06
  reinforcement
• 15:06
  learning,
• 15:07
  with
• 15:07
  the
• 15:07
  14B
• 15:08
  model
• 15:08
  topping
• 15:08
  the
• 15:08
  strongest
• 15:09
  agentic
• 15:09
  baseline
• 15:10
  by
• 15:10
  17.4
• 15:11
  percent
• 15:11
  while
• 15:11
  using
• 15:12
  35
• 15:12
  to
• 15:12
  55
• 15:13
  percent
• 15:13
  fewer
• 15:14
  tokens
• 15:14
  and
• 15:14
  running
• 15:15
  1.8
• 15:15
  to
• 15:15
  2.6
• 15:16
  times
• 15:16
  faster.
• 15:17
  Causal
• 15:18
  probes
• 15:18
  show
• 15:18
  the
• 15:18
  latents
• 15:19
  carry
• 15:19
  real
• 15:19
  work,
• 15:20
  since
• 15:20
  swapping
• 15:21
  in
• 15:21
  another
• 15:21
  problem's
• 15:22
  latent
• 15:22
  thoughts
• 15:22
  drops
• 15:23
  MATH500
• 15:25
  accuracy
• 15:26
  by
• 15:26
  45
• 15:26
  to
• 15:26
  47
• 15:27
  percent
• 15:27
  .
• 15:28
  The
• 15:28
  authors
• 15:29
  sell
• 15:29
  one
• 15:29
  property
• 15:29
  that
• 15:30
  deserves
• 15:30
  a
• 15:30
  harder
• 15:30
  look,
• 15:31
  because
• 15:31
  they
• 15:31
  frame
• 15:32
  latent
• 15:32
  reasoning
• 15:33
  as
• 15:33
  a
• 15:33
  security
• 15:33
  feature:
• 15:34
  the
• 15:34
  thoughts
• 15:34
  exist
• 15:35
  only
• 15:35
  as
• 15:35
  backbone
• 15:36
  hidden
• 15:36
  states
• 15:36
  readable
• 15:37
  through
• 15:37
  the
• 15:37
  provider-owned
• 15:38
  adapter,
• 15:39
  so
• 15:39
  there
• 15:39
  is
• 15:39
  no
• 15:39
  text
• 15:39
  to
• 15:40
  leak.
• 15:40
  For
• 15:41
  an
• 15:41
  attacker
• 15:41
  trying
• 15:41
  to
• 15:42
  extract
• 15:42
  a
• 15:42
  hidden
• 15:42
  system
• 15:43
  prompt,
• 15:43
  that
• 15:44
  is
• 15:44
  a
• 15:44
  genuine
• 15:44
  win.
• 15:45
  For
• 15:45
  a
• 15:46
  defender
• 15:46
  who
• 15:46
  relies
• 15:46
  on
• 15:46
  reading
• 15:47
  an
• 15:47
  agent's
• 15:47
  chain
• 15:48
  of
• 15:48
  thought
• 15:48
  to
• 15:48
  catch
• 15:48
  misalignment
• 15:49
  before
• 15:49
  it
• 15:49
  acts,
• 15:50
  it
• 15:50
  is
• 15:50
  the
• 15:50
  opposite
• 15:51
  of
• 15:51
  a
• 15:51
  win,
• 15:51
  because
• 15:52
  an
• 15:52
  unreadable
• 15:52
  trace
• 15:53
  is
• 15:53
  precisely
• 15:54
  the
• 15:54
  monitorability
• 15:54
  window
• 15:55
  that
• 15:55
  a
• 15:55
  large
• 15:55
  camp
• 15:56
  of
• 15:56
  safety
• 15:56
  researchers
• 15:57
  considers
• 15:57
  essential.
• 15:59
  The
• 15:59
  paper
• 15:59
  reports
• 15:59
  that
• 16:00
  external
• 16:00
  monitors
• 16:00
  stayed
• 16:01
  within
• 16:01
  0.022
• 16:02
  AUROC
• 16:03
  of
• 16:03
  text
• 16:03
  agents
• 16:04
  and
• 16:04
  localized
• 16:04
  first
• 16:05
  errors
• 16:05
  98
• 16:06
  to
• 16:06
  99
• 16:06
  percent
• 16:06
  of
• 16:07
  the
• 16:07
  time,
• 16:07
  which
• 16:08
  is
• 16:08
  reassuring
• 16:08
  but
• 16:08
  measured
• 16:09
  over
• 16:09
  only
• 16:09
  two
• 16:09
  hundred
• 16:10
  questions,
• 16:11
  and
• 16:11
  the
• 16:11
  work
• 16:11
  ships
• 16:11
  without
• 16:12
  a
• 16:12
  dedicated
• 16:12
  limitations
• 16:13
  section,
• 16:13
  with
• 16:14
  cost
• 16:14
  figures
• 16:14
  resting
• 16:15
  on
• 16:15
  stated
• 16:15
  pricing
• 16:16
  and
• 16:16
  excluding
• 16:16
  prefill
• 16:17
  and
• 16:17
  tool
• 16:17
  execution.
• 16:19
  What
• 16:19
  one
• 16:19
  paper
• 16:19
  markets
• 16:20
  as
• 16:20
  privacy
• 16:20
  is
• 16:21
  what
• 16:21
  another
• 16:21
  community
• 16:21
  calls
• 16:22
  losing
• 16:22
  the
• 16:22
  defender's
• 16:23
  window,
• 16:24
  and
• 16:24
  both
• 16:24
  readings
• 16:24
  are
• 16:24
  supported
• 16:25
  by
• 16:25
  the
• 16:25
  same
• 16:26
  architecture.
• 16:28
  Two
• 16:29
  long
• 16:29
  interviews
• 16:29
  this
• 16:30
  cycle
• 16:30
  point
• 16:30
  at
• 16:30
  the
• 16:30
  human
• 16:31
  wreckage
• 16:31
  orbiting
• 16:32
  the
• 16:32
  AI
• 16:32
  boom,
• 16:33
  and
• 16:33
  both
• 16:33
  demand
• 16:33
  the
• 16:33
  same
• 16:34
  discipline:
• 16:35
  separate
• 16:35
  what
• 16:35
  the
• 16:35
  public
• 16:36
  record
• 16:36
  supports
• 16:37
  from
• 16:37
  what
• 16:37
  the
• 16:37
  speaker
• 16:37
  asserts.
• 16:38
  Tucker
• 16:39
  Carlson's
• 16:39
  conversation
• 16:40
  with
• 16:40
  journalist
• 16:40
  Andy
• 16:41
  Ngo
• 16:41
  concerns
• 16:42
  Ngo's
• 16:42
  book
• 16:42
  on
• 16:42
  the
• 16:42
  Zizians,
• 16:43
  a
• 16:43
  violent
• 16:44
  group
• 16:44
  he
• 16:44
  traces
• 16:45
  out
• 16:45
  of
• 16:45
  the
• 16:45
  Bay
• 16:45
  Area
• 16:45
  rationalist
• 16:46
  and
• 16:46
  effective-altruism
• 16:47
  scene,
• 16:48
  founded
• 16:49
  by
• 16:49
  a
• 16:49
  former
• 16:49
  NASA-adjacent
• 16:50
  computer
• 16:50
  scientist
• 16:51
  who
• 16:51
  concluded
• 16:52
  that
• 16:52
  the
• 16:52
  movement's
• 16:52
  existing
• 16:53
  figures
• 16:53
  were
• 16:53
  not
• 16:54
  doing
• 16:54
  enough
• 16:54
  to
• 16:54
  stop
• 16:54
  world-ending
• 16:55
  AI
• 16:56
  and
• 16:56
  that
• 16:56
  his
• 16:56
  circle
• 16:57
  was
• 16:57
  a
• 16:57
  vanguard
• 16:57
  entitled
• 16:58
  to
• 16:58
  act.
• 16:59
  Ngo
• 16:59
  describes
• 17:00
  an
• 17:00
  ideology
• 17:00
  blending
• 17:01
  rationalism,
• 17:02
  transhumanism,
• 17:03
  and
• 17:03
  a
• 17:03
  theory
• 17:04
  that
• 17:04
  the
• 17:04
  brain's
• 17:04
  two
• 17:04
  hemispheres
• 17:05
  host
• 17:05
  separate
• 17:06
  identities
• 17:06
  that
• 17:06
  could
• 17:07
  be
• 17:07
  split
• 17:07
  apart
• 17:07
  through
• 17:07
  sleep
• 17:08
  deprivation,
• 17:09
  recruiting
• 17:09
  heavily
• 17:10
  from
• 17:10
  STEM
• 17:10
  and
• 17:10
  quantitative-finance
• 17:11
  backgrounds.
• 17:13
  He
• 17:13
  links
• 17:13
  eight
• 17:13
  deaths
• 17:14
  to
• 17:14
  the
• 17:14
  group
• 17:14
  across
• 17:15
  a
• 17:15
  timeline
• 17:15
  running
• 17:15
  from
• 17:16
  a
• 17:16
  2022
• 17:16
  sword
• 17:17
  attack
• 17:17
  during
• 17:18
  an
• 17:18
  eviction
• 17:18
  dispute
• 17:18
  to
• 17:19
  the
• 17:19
  2025
• 17:20
  shooting
• 17:20
  of
• 17:20
  a
• 17:20
  Border
• 17:20
  Patrol
• 17:21
  agent,
• 17:21
  while
• 17:22
  stressing
• 17:22
  that
• 17:22
  no
• 17:22
  one
• 17:23
  has
• 17:23
  yet
• 17:23
  been
• 17:23
  convicted
• 17:23
  of
• 17:23
  any
• 17:24
  of
• 17:24
  them.
• 17:24
  The
• 17:25
  framing
• 17:25
  leans
• 17:25
  hard
• 17:26
  on
• 17:26
  Ngo's
• 17:26
  and
• 17:26
  Carlson's
• 17:27
  broader
• 17:27
  and
• 17:27
  contested
• 17:28
  claims,
• 17:29
  and
• 17:29
  the
• 17:29
  criminal
• 17:29
  cases
• 17:30
  remain
• 17:30
  unadjudicated,
• 17:31
  so
• 17:31
  the
• 17:32
  through-line
• 17:32
  for
• 17:32
  a
• 17:32
  technical
• 17:33
  reader
• 17:33
  is
• 17:33
  narrower:
• 17:34
  an
• 17:34
  AI-doom
• 17:34
  subculture
• 17:35
  produced
• 17:35
  genuine
• 17:36
  violence,
• 17:37
  and
• 17:37
  the
• 17:37
  communities
• 17:37
  it
• 17:38
  grew
• 17:38
  from
• 17:38
  would
• 17:38
  rather
• 17:38
  not
• 17:39
  discuss
• 17:39
  the
• 17:39
  lineage
• 17:39
  .
• 17:41
  The
• 17:41
  second
• 17:41
  is
• 17:41
  independent
• 17:42
  YouTuber
• 17:43
  James
• 17:43
  Lee's
• 17:43
  year-long
• 17:44
  case
• 17:44
  that
• 17:44
  Sam
• 17:44
  Altman
• 17:45
  faces
• 17:45
  criminal
• 17:45
  exposure
• 17:46
  across
• 17:46
  his
• 17:46
  finances,
• 17:47
  his
• 17:48
  sister's
• 17:48
  allegations,
• 17:49
  and
• 17:49
  the
• 17:49
  death
• 17:49
  of
• 17:50
  former
• 17:50
  OpenAI
• 17:50
  researcher
• 17:51
  Suchir
• 17:51
  Balaji.
• 17:52
  The
• 17:53
  financial
• 17:53
  thread
• 17:53
  is
• 17:53
  the
• 17:54
  most
• 17:54
  checkable,
• 17:54
  contrasting
• 17:55
  Altman's
• 17:55
  2023
• 17:56
  congressional
• 17:57
  testimony
• 17:58
  that
• 17:58
  he
• 17:58
  holds
• 17:58
  no
• 17:59
  OpenAI
• 17:59
  equity
• 18:00
  with
• 18:00
  a
• 18:00
  sworn
• 18:01
  filing
• 18:01
  in
• 18:01
  the
• 18:01
  Altman
• 18:01
  family
• 18:02
  trust
• 18:02
  dispute
• 18:03
  stating
• 18:03
  that
• 18:04
  his
• 18:04
  venture
• 18:04
  fund
• 18:04
  Hydrazine
• 18:05
  owned
• 18:05
  OpenAI
• 18:06
  shares,
• 18:06
  which
• 18:07
  if
• 18:07
  proven
• 18:07
  would
• 18:07
  raise
• 18:08
  a
• 18:08
  perjury
• 18:08
  question.
• 18:09
  The
• 18:09
  video
• 18:10
  is
• 18:10
  one-sided
• 18:11
  and
• 18:11
  mixes
• 18:11
  documented
• 18:12
  filings
• 18:12
  with
• 18:12
  unverified
• 18:13
  allegation,
• 18:14
  and
• 18:15
  it
• 18:15
  needs
• 18:15
  one
• 18:15
  correction
• 18:15
  a
• 18:16
  careful
• 18:16
  editor
• 18:16
  should
• 18:17
  make:
• 18:17
  the
• 18:17
  civil
• 18:18
  suit
• 18:18
  from
• 18:18
  Altman's
• 18:19
  sister
• 18:19
  was
• 18:19
  reported
• 18:19
  dismissed
• 18:20
  earlier
• 18:20
  this
• 18:21
  year,
• 18:21
  which
• 18:21
  cuts
• 18:22
  against
• 18:22
  Lee's
• 18:22
  framing
• 18:23
  of
• 18:23
  it
• 18:23
  as
• 18:23
  live
• 18:23
  exposure.
• 18:24
  Balaji's
• 18:25
  death
• 18:25
  was
• 18:25
  ruled
• 18:25
  a
• 18:25
  suicide,
• 18:26
  Lee
• 18:26
  disputes
• 18:27
  the
• 18:27
  ruling,
• 18:28
  and
• 18:28
  the
• 18:28
  reporting
• 18:29
  he
• 18:29
  leans
• 18:29
  on,
• 18:29
  including
• 18:30
  Ronan
• 18:30
  Farrow's
• 18:31
  interviews
• 18:31
  describing
• 18:32
  Altman
• 18:32
  in
• 18:32
  unflattering
• 18:33
  terms,
• 18:33
  is
• 18:34
  testimony
• 18:34
  about
• 18:34
  who
• 18:35
  said
• 18:35
  what,
• 18:36
  not
• 18:36
  a
• 18:36
  finding
• 18:36
  of
• 18:36
  fact.
• 18:37
  The
• 18:37
  standing
• 18:37
  record
• 18:38
  on
• 18:38
  Altman's
• 18:38
  candor
• 18:39
  is
• 18:39
  already
• 18:39
  substantial,
• 18:40
  so
• 18:40
  the
• 18:40
  value
• 18:41
  here
• 18:41
  is
• 18:41
  the
• 18:41
  Hydrazine
• 18:42
  equity
• 18:42
  question,
• 18:43
  and
• 18:43
  the
• 18:43
  burden
• 18:43
  it
• 18:44
  carries
• 18:44
  is
• 18:44
  Lee's
• 18:44
  own
• 18:45
  closing
• 18:45
  line
• 18:45
  that
• 18:45
  the
• 18:46
  truth
• 18:46
  should
• 18:46
  fear
• 18:46
  no
• 18:46
  scrutiny
• 18:47
  .