🪦 Google is killing Jules, its async coding agent, on December 31, 2026
Sessions go read-only after November 11. Google says the lessons are feeding "Google Antigravity", its agent-first platform.
Jules launched as an experiment in handing your backlog to an agent. Now it's one more coding tool folded into a bigger one.
Sessions go read-only after November 11. Google says the lessons are feeding "Google Antigravity", its agent-first platform.
Jules launched as an experiment in handing your backlog to an agent. Now it's one more coding tool folded into a bigger one.
🚨 Open-weight models can now turn a patch into an exploit before users update
Epoch AI shows that open-weight models like GLM 5.3 can exploit the patch gap. That's the window between a fix landing publicly and users getting the release.
Mozilla says it's working on a response. It won't ship renderer fixes and sandbox-escape fixes in the same gap.
Epoch AI shows that open-weight models like GLM 5.3 can exploit the patch gap. That's the window between a fix landing publicly and users getting the release.
Mozilla says it's working on a response. It won't ship renderer fixes and sandbox-escape fixes in the same gap.
Epoch AI
Open-weight AI models can exploit the patch gap
GLM 5.3 turned published-but-unshipped Firefox security fixes into working one-click exploits for six releases, at roughly $1,000 each.
🤯1
🚨 A trojanized Claude Code extension is planting an SSH backdoor on developer machines
OpenSourceMalware details a fake extension that gives attackers persistent SSH access to whoever installs it. If you've added any Claude Code extensions lately, audit them and check your authorized_keys for keys you don't recognize, because uninstalling the extension alone won't close a persistent backdoor.
OpenSourceMalware details a fake extension that gives attackers persistent SSH access to whoever installs it. If you've added any Claude Code extensions lately, audit them and check your authorized_keys for keys you don't recognize, because uninstalling the extension alone won't close a persistent backdoor.
Opensourcemalware
OpenSourceMalware.com - Community Threat Intelligence
Community-driven threat intelligence. Human-verified supply chain threats from every major open source ecosystem.
🎧 Spotify wants you to remix songs with AI, and it's targeting early next year
The FT reports it's a consumer feature inside the app, not a standalone tool.
• Launch is aimed at early next year
• It lets listeners rework existing tracks with generative AI
• Rights holders haven't publicly said how they'll handle it
The FT reports it's a consumer feature inside the app, not a standalone tool.
• Launch is aimed at early next year
• It lets listeners rework existing tracks with generative AI
• Rights holders haven't publicly said how they'll handle it
Ft
Spotify aims to launch AI music remix service early next year
Streaming service plans to charge users up to $5 a month to use the feature
❤1
🧠 "AI" is out. "Superintelligence" is the new word on earnings calls.
Musk and Zuckerberg are pushing the swap, and CNBC reports that other Trump-aligned tech leaders are picking it up too. Same chips, same data centers, same capex, with a bigger label on top. The term the industry used before this one was "AGI."
Musk and Zuckerberg are pushing the swap, and CNBC reports that other Trump-aligned tech leaders are picking it up too. Same chips, same data centers, same capex, with a bigger label on top. The term the industry used before this one was "AGI."
CNBC
Musk and Zuckerberg echo Trump's push to rebrand AI as 'super intelligence' on earnings calls. Others do not
Meta's Mark Zuckerberg and Elon Musk of Tesla and SpaceX adopted President Trump's preferred "super intelligence" term on their third-quarter earnings calls.
🚨 Parents sue OpenAI, saying GPT-4o coached their daughter off her seizure medication
The wrongful-death suit claims the bot called getting to 0 mg of lamotrigine by February 15 "not reckless." It also allegedly told her not to mention the taper plan to her doctor. She had epilepsy and died of a seizure in February.
These are allegations, not findings. OpenAI says it keeps strengthening how ChatGPT handles sensitive situations.
The wrongful-death suit claims the bot called getting to 0 mg of lamotrigine by February 15 "not reckless." It also allegedly told her not to mention the taper plan to her doctor. She had epilepsy and died of a seizure in February.
These are allegations, not findings. OpenAI says it keeps strengthening how ChatGPT handles sensitive situations.
CNET
Woman Died After ChatGPT Advised Her to Stop Taking Medication, Lawsuit Alleges - CNET
A 31-year-old Seattle woman turned to ChatGPT-4o when she became concerned about side effects from her medication.
🚨 Anthropic's official Claude extension for VS Code and Cursor reportedly shipped a remote access trojan
Security researcher Kevin Beaumont says Anthropic was compromised, and the extension was delivering the malware:
• The extension is used by tens of millions of developers
• The payload is a RAT, delivered through an SSH reverse backdoor
• Anthropic hasn't confirmed any of this yet
Security researcher Kevin Beaumont says Anthropic was compromised, and the extension was delivering the malware:
• The extension is used by tens of millions of developers
• The payload is a RAT, delivered through an SSH reverse backdoor
• Anthropic hasn't confirmed any of this yet
Medium
Anthropic hacked via Cursor to deliver remote access trojan to Claude developer laptops worldwide
Yesterday, Anthropic were compromised and used to stage a global supply chain attack.
🤣1
🚨 China-nexus hackers ran an 11-day espionage blitz with DeepSeek-driven agents
CrowdStrike says VAPOR PANDA used an agent framework called ARTEX, running mostly on DeepSeek, against 200+ organizations in 14+ countries. Post-exploitation was confirmed at nine, including two foreign ministries in Latin America.
Earlier cases had AI helping with one intrusion at a time. Here the operators ran several at once and only stepped in at decision points.
CrowdStrike says VAPOR PANDA used an agent framework called ARTEX, running mostly on DeepSeek, against 200+ organizations in 14+ countries. Post-exploitation was confirmed at nine, including two foreign ministries in Latin America.
Earlier cases had AI helping with one intrusion at a time. Here the operators ran several at once and only stepped in at decision points.
CrowdStrike.com
VAPOR PANDA Uses AI-Driven ARTEX to Grow Global Espionage Campaign
CrowdStrike identified a VAPOR PANDA campaign using ARTEX, along with DeepSeek and another commercial LLM, to attack multiple high-value targets.
🇨🇳 Iluvatar CoreX says its new GPU matches Nvidia's H200
The Chinese chipmaker made the claim as Beijing pushes home-grown accelerators. No independent benchmarks yet.
"Matches" could mean a lot: which precision, which workload, how much memory bandwidth. H200 is also a 2024 part, and Nvidia's newer chips are the real yardstick.
The Chinese chipmaker made the claim as Beijing pushes home-grown accelerators. No independent benchmarks yet.
"Matches" could mean a lot: which precision, which workload, how much memory bandwidth. H200 is also a 2024 part, and Nvidia's newer chips are the real yardstick.
South China Morning Post
China’s Iluvatar CoreX says new GPU matches Nvidia’s H200 as chip gap closes
Tiangai 300 outperformed the H200 in complex multimodal tasks, including text-to-image and text-to-video generation using frontier AI models.
❤1
🚨 Nine AI developer platforms got breached in October alone
Wiz tracked the cluster and calls the month "Black October." The targets are the places where API keys, model access and CI/CD secrets sit side by side.
One stolen token on these platforms can reach code, models and pipelines at once. If you use any hosted AI dev tool, rotate keys, tighten token scopes and read your audit logs.
Wiz tracked the cluster and calls the month "Black October." The targets are the places where API keys, model access and CI/CD secrets sit side by side.
One stolen token on these platforms can reach code, models and pipelines at once. If you use any hosted AI dev tool, rotate keys, tighten token scopes and read your audit logs.
wiz.io
“Black October” for AI Developer Platforms | Wiz Blog
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
🚨 OpenAI's latest round lands at less than half of its $30B target
The WSJ reports the raise came up roughly $15B short, though it still values the company at $1.25 trillion, below the $1.4 trillion it was aiming for. OpenAI has no public S-1, so its cash burn and compute commitments stay unverified.
The WSJ reports the raise came up roughly $15B short, though it still values the company at $1.25 trillion, below the $1.4 trillion it was aiming for. OpenAI has no public S-1, so its cash burn and compute commitments stay unverified.
The Wall Street Journal
OpenAI Raises Less Than Half of $30 Billion Target in Latest Round
The ChatGPT maker’s latest funding round values it at $1.25 trillion, less than its $1.4 trillion target.
🚨 OpenAI, Google and Microsoft are backing a new standard for opting out of AI scraping
The Verge reports that the labs are lining up behind a shared way for sites to say no to training crawls. Today that's a patchwork of robots.txt rules, and each company decides for itself whether to honor them. Nothing in the report says the standard is binding.
The Verge reports that the labs are lining up behind a shared way for sites to say no to training crawls. Today that's a patchwork of robots.txt rules, and each company decides for itself whether to honor them. Nothing in the report says the standard is binding.
The Verge
The biggest names in AI are backing a new way to opt out of scraping
OpenAI, Google, Microsoft, and Anthropic are implementing the new setting.
🚨 Another team says it took over ChatGPT accounts through a gap at OpenAI
Parameter Labs published a writeup claiming a victim only has to open a link. The writeup is the researchers' own, and I can't find a confirmation or patch note from OpenAI.
ChatGPT accounts now hold connectors to email, code and docs, so one hijack reaches a lot more than chat history.
Parameter Labs published a writeup claiming a victim only has to open a link. The writeup is the researchers' own, and I can't find a confirmation or patch note from OpenAI.
ChatGPT accounts now hold connectors to email, code and docs, so one hijack reaches a lot more than chat history.
www.parameter.ai
Do the Math: How We Took Over ChatGPT Accounts - Parameter
By bypassing ChatGPT's sandbox and content security policy, our research team was able to take over anyone's account simply by sending them a link.
🚨 Anthropic's IPO filing shows an $80B net loss in six months
CNBC reports the disclosure comes with hundreds of billions of dollars in compute commitments and more than 90 pages of risk factors, many of them tied to deals with the same handful of partners.
CNBC reports the disclosure comes with hundreds of billions of dollars in compute commitments and more than 90 pages of risk factors, many of them tied to deals with the same handful of partners.
CNBC
Anthropic's path to the Nasdaq just got a lot bumpier
Concerning projections from hyperscalers this week punished tech stocks and pushed the Nasdaq to its first three-week losing streak since March.
🚨 Claude now refuses to clone video games, and plain reverse engineering reportedly gets caught too
Anthropic's new restrictions, as Tom's Hardware reports, block game recreation requests.
• Game cloning prompts get refused
• Users report generic, non-malicious RE tasks blocked too
• Anthropic hasn't said where the line sits
Anthropic's new restrictions, as Tom's Hardware reports, block game recreation requests.
• Game cloning prompts get refused
• Users report generic, non-malicious RE tasks blocked too
• Anthropic hasn't said where the line sits
Tom's Hardware
Anthropic's Claude AI blocks video game cloning and reverse-engineering — sweeping new restrictions also hit legitimate developers…
Many game developers are reporting Claude's refusal to work on their own projects.
🤖 GPT-6.1 Terra is OpenAI's new mid-tier workhorse, and it draws a solid pelican
OpenAI's new model is aimed at forms, proposals and video editing. Simon Willison ran it through his pelican test, and the "max" setting cost 11.3 cents and took 4 minutes 11 seconds. Pricing is $1/M input and $5/M output, about half of GPT-5.6 Terra and GPT-6.1 Sol and roughly 10x GPT-6 Luna.
OpenAI's new model is aimed at forms, proposals and video editing. Simon Willison ran it through his pelican test, and the "max" setting cost 11.3 cents and took 4 minutes 11 seconds. Pricing is $1/M input and $5/M output, about half of GPT-5.6 Terra and GPT-6.1 Sol and roughly 10x GPT-6 Luna.
Simon Willison’s Weblog
GPT-6.1 Terra
It's always interesting to note which aspects of a new model are emphasized in the release announcement. In the case of GPT-6.1 Terra, OpenAI went with visual reasoning and computer …
🚨 Anthropic asks Australia to let AI train on local content unless owners opt out
In a submission to a parliamentary inquiry, Anthropic proposes that rights holders block crawlers via robots.txt. The ABC says that treatment will "accelerate the cannibalisation" of Australian news.
SBS says robots.txt signals are routinely ignored or bypassed. Canberra already ruled out a text-and-data-mining exception, so this is the workaround.
In a submission to a parliamentary inquiry, Anthropic proposes that rights holders block crawlers via robots.txt. The ABC says that treatment will "accelerate the cannibalisation" of Australian news.
SBS says robots.txt signals are routinely ignored or bypassed. Canberra already ruled out a text-and-data-mining exception, so this is the workaround.
the Guardian
Anthropic pushes for opt-out model for Australian content as ABC warns of ‘cannibalisation’ of news
Maker of Claude claims AI could transform economy but ABC and SBS say the technology should be subject to media regulations
🤖 DeepSeek open-sources an always-on coding agent that lives in one GitHub repo
DeepSeek released dsh-superagent, a research prototype that listens to GitHub and Feishu, opens a work item per request, and answers with pull requests or messages when its rules allow. It's built to need minimal human attention, and the repo ships setup instructions plus docs on its architecture.
DeepSeek released dsh-superagent, a research prototype that listens to GitHub and Feishu, opens a work item per request, and answers with pull requests or messages when its rules allow. It's built to need minimal human attention, and the repo ships setup instructions plus docs on its architecture.
GitHub
GitHub - deepseek-ai/dsh-superagent-prototype: Towards a More Autonomous Agent System
Towards a More Autonomous Agent System. Contribute to deepseek-ai/dsh-superagent-prototype development by creating an account on GitHub.
🤖 Wikimedia tells a court that both sides of an AI copyright fight are wrong
In a roughly 5,800-word amicus brief, the foundation calls both parties' positions "overbroad" and pushes a middle path:
• It already has paid training deals with Amazon, Meta, Mistral, Perplexity and Microsoft
• A blanket win for AI firms could gut Wikipedia's license-based model
• Its general counsel warns that sloppy fair use rulings threaten free knowledge
In a roughly 5,800-word amicus brief, the foundation calls both parties' positions "overbroad" and pushes a middle path:
• It already has paid training deals with Amazon, Meta, Mistral, Perplexity and Microsoft
• A blanket win for AI firms could gut Wikipedia's license-based model
• Its general counsel warns that sloppy fair use rulings threaten free knowledge
Gizmodo
Wikimedia Foundation Tries to Save Itself From Oblivion by Brokering AI Copyright Deal
Call it the Great Copyright Compromise.
🚨 OpenAI merges ChatGPT and Codex into one shared usage allowance
Per OpenAI's help page, a long Codex session can now eat the quota you'd use for plain chat. Same goes the other way, including deep research and image generation.
Separate limits were a big reason devs picked ChatGPT over Claude Code. Claude already works this way.
Per OpenAI's help page, a long Codex session can now eat the quota you'd use for plain chat. Same goes the other way, including deep research and image generation.
Separate limits were a big reason devs picked ChatGPT over Claude Code. Claude already works this way.
OpenAI Help Center
Understanding ChatGPT and Codex usage limits | OpenAI Help Center