←Search results

English text is being prepared.

By relevance · Total 225 results Clear search

Sunday

  1. TechCrunch AI

    Will AI expose the internet's fragile infrastructure?

    TechCrunch's Equity podcast discusses this week's PHP vulnerability incident: the vulnerability had existed for decades and was discovered with the help of AI by human researchers participating in the Hack the Planet project involving OpenAI and Wiz, and website owners were told to patch immediately or take their sites offline. The guests argue that LLMs and AI agents make it easier to discover such vulnerabilities, while PHP underpins about 70% of websites including WordPress and Drupal, and the disclosure process also triggered large-scale attack attempts and link failures.

    TechCrunch's Equity podcast discusses this week's PHP vulnerability incident: the vulnerability had existed for decades and was discovered with the help of AI by human researchers participating in the Hack the Planet project involving OpenAI and Wiz, and website owners were told to patch immediately or take their sites offline. The guests argue that LLMs and AI agents make it easier to discover such vulnerabilities, while PHP underpins about 70% of websites including WordPress and Drupal, and th

    Matched fieldsBody

    #tech-media#Safety / alignment#Agents#Open-source ecosystem

Saturday

  1. Huxiu

    Amazon CEO Jassy on $220 Billion in Capital Expenditure: Compute Is Still in Short Supply, Inference Costs Need to Fall by Another Order of Magnitude

    Amazon CEO Andy Jassy said in an interview on the a16z podcast that the company's capital expenditure is expected to reach $220 billion in 2026, but compute capacity is already sold out for 2026, essentially fully booked for 2027, and a large share of 2028 quotas has been locked in. He described enterprise AI demand as dumbbell-shaped: a large number of production systems in the middle have yet to be deeply integrated because inference costs are too high, and costs need to fall by another order of magnitude before an explosion in adoption occurs. Jassy also noted that 99% of AWS's top 1,000 customers use Graviton, which offers about 40% better price-performance than x86, while Trainium has a 30% to 40% advantage over comparable hardware.

    Amazon CEO Andy Jassy said in an interview on the a16z podcast that the company's capital expenditure is expected to reach $220 billion in 2026, but compute capacity is already sold out for 2026, essentially fully booked for 2027, and a large share of 2028 quotas has been locked in. He described enterprise AI demand as dumbbell-shaped: a large number of production systems in the middle have yet to be deeply integrated because inference costs are too high, and costs need to fall by another order

    Matched fieldsBody

    #hot-signal#Industry news#English text is being prepared.#English text is being prepared.
  2. Huxiu

    Kimi K3.1 Pro Released: Capabilities Improved, but Price Is 16 Times That of DeepSeek and MiniMax Flash

    Moonshot AI released Kimi K3.1 Pro on October 24, retaining K3's 2.8 trillion parameters without redoing pretraining, and raised its Artificial Analysis composite intelligence index from about 44 to about 55 by increasing post-training compute and joint reinforcement learning across hundreds of domains. Its pricing is $2 and $10 per million input/output tokens, or $12 for 1 million tokens each, 16 times the $0.75 idle-time rate of MiniMax M3.1 Flash and DeepSeek V4.1 Flash-1017. The article also compares the three vendors' respective reinforcement in 3D modeling and financial research, full project development, and computer operation and cross-application workflows, and notes that some users report 3D tasks consume tokens so fast that they hit the quota limit.

    Moonshot AI released Kimi K3.1 Pro on October 24, retaining K3's 2.8 trillion parameters without redoing pretraining, and raised its Artificial Analysis composite intelligence index from about 44 to about 55 by increasing post-training compute and joint reinforcement learning across hundreds of domains. Its pricing is $2 and $10 per million input/output tokens, or $12 for 1 million tokens each, 16 times the $0.75 idle-time rate of MiniMax M3.1 Flash and DeepSeek V4.1 Flash-1017. The article also

    Matched fieldsBody

    #hot-signal#Model releases#Reasoning#Agents
  3. Cailianshe

    AI-driven cyberattacks erupt intensively; industry insiders call October a "Black October" for cybersecurity

    Cailianshe reported that in recent weeks hackers have massively deployed AI agents and automated tools to launch attacks, and industry insiders describe this month as Black October in the cybersecurity world. A major vulnerability was exposed in PHP, and as many as 70% of websites worldwide may face the risk of being hacked. The U.S. National Security Agency and the FBI warned enterprises to shut down their websites if they cannot patch immediately, and some government websites in Canada, Belgium, France and the Netherlands have proactively gone offline. Shane Fry, chief technology officer of security firm RunSafe Security, said AI can weaponize a vulnerability into attack code within hours, whereas in the past this took weeks or even months.

    Cailianshe reported that in recent weeks hackers have massively deployed AI agents and automated tools to launch attacks, and industry insiders describe this month as Black October in the cybersecurity world. A major vulnerability was exposed in PHP, and as many as 70% of websites worldwide may face the risk of being hacked. The U.S. National Security Agency and the FBI warned enterprises to shut down their websites if they cannot patch immediately, and some government websites in Canada, Belgiu

    Matched fieldsBody

    #chinese#English text is being prepared.#Safety / alignment#Agents
  4. East Money

    AI-driven attacks erupt intensively, and the cybersecurity world ushers in "Black October"

    Cailian Press reported that in recent weeks hackers have massively deployed AI agents and automated tools to launch attacks, and industry insiders describe this month as "Black October" for the cybersecurity world. A major vulnerability was exposed in PHP, and as many as 70% of websites worldwide may face the risk of being hacked. The U.S. National Security Agency and the Federal Bureau of Investigation warned enterprises to shut down their websites if they cannot patch immediately, and some government websites in Canada, Belgium, France and the Netherlands voluntarily went offline. Shane Fry, chief technology officer of the security firm RunSafe Security, pointed out that AI can "weaponize" a vulnerability within hours to generate attack code, whereas in the past this often took weeks or even months.

    Cailian Press reported that in recent weeks hackers have massively deployed AI agents and automated tools to launch attacks, and industry insiders describe this month as "Black October" for the cybersecurity world. A major vulnerability was exposed in PHP, and as many as 70% of websites worldwide may face the risk of being hacked. The U.S. National Security Agency and the Federal Bureau of Investigation warned enterprises to shut down their websites if they cannot patch immediately, and some gov

    Matched fieldsBody

    #chinese#English text is being prepared.#Safety / alignment#Agents
  5. 36Kr · AI

    Today AI Completes Over $200 Million First Round of Financing; Founding Team Responds to Ten Core Questions About Personal AI

    Today AI announced the completion of over $200 million in first-round financing, with investors including IDG Capital, Tencent, 5Y Capital, Ant Group, Sequoia China, Transsion Holdings, Tongge Venture Capital, and Shanghai Jiao Tong University Hanyuan Assets. In the interview, the founding team responded to questions including whether Personal AI is a false demand, why they insist on an independent app and single session, how memory and proactivity reduce delegation costs, as well as privacy authorization and commercialization paths. The team stated that Personal AI is currently in a stage of homogeneous competition, with the moat coming more from Context accumulated through long-term use, and plans to train models that lean more toward interaction and anthropomorphic style.

    Today AI announced the completion of over $200 million in first-round financing, with investors including IDG Capital, Tencent, 5Y Capital, Ant Group, Sequoia China, Transsion Holdings, Tongge Venture Capital, and Shanghai Jiao Tong University Hanyuan Assets. In the interview, the founding team responded to questions including whether Personal AI is a false demand, why they insist on an independent app and single session, how memory and proactivity reduce delegation costs, as well as privacy aut

    Matched fieldsBody

    #hot-signal#Industry news#Agents#English text is being prepared.
  6. Wired AI

    PHP2Shell vulnerability incident shows AI makes old vulnerabilities easier to exploit

    WIRED reported that the newly disclosed PHP vulnerabilities are collectively called PHP2Shell, and within hours of disclosure Cloudflare recorded millions of exploitation attempts, but the PHP Foundation said it has not yet seen a successful exploit. Researchers at security firm Calif, using frontier models from OpenAI's Patch the Planet project combined with PHP expertise, first discovered and constructed an exploit in early August, and researchers from OpenAI and Google's Wiz subsequently also independently discovered similar vulnerabilities using AI. Multiple researchers believe AI has not introduced entirely new attack methods, but has amplified the existing pace of vulnerability discovery and disclosure.

    WIRED reported that the newly disclosed PHP vulnerabilities are collectively called PHP2Shell, and within hours of disclosure Cloudflare recorded millions of exploitation attempts, but the PHP Foundation said it has not yet seen a successful exploit. Researchers at security firm Calif, using frontier models from OpenAI's Patch the Planet project combined with PHP expertise, first discovered and constructed an exploit in early August, and researchers from OpenAI and Google's Wiz subsequently also

    Matched fieldsBody

    #tech-media#Safety / alignment#Agents#OpenAI
  7. TMTPost · AGI

    Why AI Audit Tools Are Supplied by the Audited Party: Verification of Four Security Incidents and Seven Papers in One Week

    Using four security incidents within the week of October 16 to 23 as its thread—including two PHP remote code execution vulnerabilities discovered by AI, the backdoored LiteLLM version v1.107.0 surviving on PyPI for about two hours and being downloaded roughly 49,000 times, the OpenCode console leaking third-party model keys for 1.4% of users, and Microsoft reporting that a human organization used the open-source multi-agent penetration framework ARTEX to attack the supply chain—the article discusses the common problems facing AI auditing. After examining seven papers one by one, the author points out that the faithfulness of latent reasoning self-decoding reaches at most 0.4788, sparse autoencoders are nearly blind to backdoor shifts, probes fail when targeted by the object being optimized, and all three mainstream audit tools originate from the audited party's ecosystem or require borrowing the audited party's permissions. The article also cites the NARCBench multi-agent collusion benchmark from Oxford and New York University, as well as the report by Anthropic and Theorem using Claude to write roughly one billion lines of Rocq formal proofs for 239 entry points across 123 open-source libraries.

    Using four security incidents within the week of October 16 to 23 as its thread—including two PHP remote code execution vulnerabilities discovered by AI, the backdoored LiteLLM version v1.107.0 surviving on PyPI for about two hours and being downloaded roughly 49,000 times, the OpenCode console leaking third-party model keys for 1.4% of users, and Microsoft reporting that a human organization used the open-source multi-agent penetration framework ARTEX to attack the supply chain—the article disc

    Matched fieldsBody

    #hot-signal#Safety / alignment#Agents#Papers/Research
  8. Wallstreetcn

    Amazon CEO Jassy: AWS's AI business has an annualized revenue of over $25 billion, and $220 billion in capital expenditure for 2026 is still not enough

    Amazon CEO Andy Jassy said on the a16z podcast that in the first three years of the generative AI wave, AWS's AI business has reached an annualized revenue run rate of over $25 billion, hundreds of times AWS's roughly $60 million in its early days. He said that under capital expenditure of about $220 billion for 2026, capacity for 2026 is already sold out, 2027 is essentially sold out, and a considerable portion of 2028 has also been sold, and that inference costs are still an order of magnitude too expensive, which is the main obstacle to widespread enterprise adoption of AI. He also mentioned that the Bedrock team rebuilt the inference engine with 6 engineers in 76 days, a task that previously required 40 people for a year.

    Amazon CEO Andy Jassy said on the a16z podcast that in the first three years of the generative AI wave, AWS's AI business has reached an annualized revenue run rate of over $25 billion, hundreds of times AWS's roughly $60 million in its early days. He said that under capital expenditure of about $220 billion for 2026, capacity for 2026 is already sold out, 2027 is essentially sold out, and a considerable portion of 2028 has also been sold, and that inference costs are still an order of magnitude

    Matched fieldsBody

    #chinese#Industry news#English text is being prepared.#English text is being prepared.
  9. 36Kr · AI

    SoftBank CDS rises to 432 basis points, Masayoshi Son continues to increase AI investment

    The price of SoftBank's 5-year CDS rose to 432 basis points, the highest since November 2022, and its default insurance price ranks first among major Japanese companies. SoftBank completed a new $10 billion investment in OpenAI earlier this month, bringing cumulative investment to $64.6 billion, and issued bonds with coupons as high as 9.75% to raise funds. The article also mentions the rising scale of CDS trading by AI-related companies, as well as the debt and computing power expenditure pressure of companies such as Anthropic and CoreWeave.

    The price of SoftBank's 5-year CDS rose to 432 basis points, the highest since November 2022, and its default insurance price ranks first among major Japanese companies. SoftBank completed a new $10 billion investment in OpenAI earlier this month, bringing cumulative investment to $64.6 billion, and issued bonds with coupons as high as 9.75% to raise funds. The article also mentions the rising scale of CDS trading by AI-related companies, as well as the debt and computing power expenditure press

    Matched fieldsBody

    #hot-signal#Industry news#OpenAI#Anthropic
  10. Yicai

    When Meta Muse Collides with Amazon: AI Is Leaving the Chatbox to Contest the New Internet Gateway

    Meta launched its personal AI Agent Muse last month. It has an independent virtual computer and browser and can send emails, book travel, and shop on behalf of users. It reached about 2.8 million downloads within two weeks of launch, and at the October 21 earnings call it was announced that more than 10 million people had activated it. Less than two weeks after launch, Muse was blocked by Amazon from accessing its shopping site. Amazon said AI Agents should identify themselves and respect whether the service provider permits entry. The article argues that the two sides are fighting over who controls the subsequent search, comparison, decision-making, and payment after consumers form purchase intent, while Google keeps intent-to-execution within its own system through its own ecosystem such as Universal Cart.

    Meta launched its personal AI Agent Muse last month. It has an independent virtual computer and browser and can send emails, book travel, and shop on behalf of users. It reached about 2.8 million downloads within two weeks of launch, and at the October 21 earnings call it was announced that more than 10 million people had activated it. Less than two weeks after launch, Muse was blocked by Amazon from accessing its shopping site. Amazon said AI Agents should identify themselves and respect whethe

    Matched fieldsBody

    #chinese#English text is being prepared.#Agents#Industry news
  11. Wallstreetcn

    Goldman Sachs trading head interprets institutions' significant AI position reduction: power gap and cost of capital in focus

    Rich Privorotsky, Goldman Sachs' head of European fixed income and equity trading, revealed in an interview on the "The Markets" podcast that last week the Goldman Sachs prime brokerage business book saw the largest technology stock selloff in its history. He noted that the market expects AI capital expenditure to reach 1.1 trillion US dollars next year, but investors demand to see backlog orders converted into revenue, while a power gap of about 40 to 50 gigawatts next year casts doubt on computing power delivery. He said the macro environment is shifting from a savings glut to a spending glut, and believes spot market computing power prices are still hitting new highs, with demand showing no sign of weakening.

    Rich Privorotsky, Goldman Sachs' head of European fixed income and equity trading, revealed in an interview on the "The Markets" podcast that last week the Goldman Sachs prime brokerage business book saw the largest technology stock selloff in its history. He noted that the market expects AI capital expenditure to reach 1.1 trillion US dollars next year, but investors demand to see backlog orders converted into revenue, while a power gap of about 40 to 50 gigawatts next year casts doubt on compu

    Matched fieldsBody

    #chinese#Industry news#English text is being prepared.#English text is being prepared.

Friday

  1. Tessl: Product and Engineering Blog

    When agents write code, who should get deployment permissions?

    The Tessl blog proposes that agents can write code and suggest fixes, but should not have permission to deploy to production; deployment permissions should be given to the CI/CD pipeline. The article cites a case from the Cline repository: a malicious issue title can induce its triage agent to install a package from an attacker's fork, and via a shared build cache steal an npm token to publish an unauthorized version. The author advocates treating everything an agent reads as untrustworthy, and replacing manual code review with short-lived OIDC identities, hash-locked dependencies, and an independent verifier.

    DevCon NYC

    The Tessl blog proposes that agents can write code and suggest fixes, but should not have permission to deploy to production; deployment permissions should be given to the CI/CD pipeline. The article cites a case from the Cline repository: a malicious issue title can induce its triage agent to install a package from an attacker's fork, and via a shared build cache steal an npm token to publish an unauthorized version. The author advocates treating everything an agent reads as untrustworthy, and

    Matched fieldsBody

    #company#Safety / alignment#Agents#English text is being prepared.
  2. Shao Meng

    How OpenAI defines FDE: consolidating customer-customized Harness into a unified Codex

    OpenAI's FDE team was established in early 2025, with the goal of filling the deployment gap between model capabilities and customers' real-world constraints; the approach is to first get results into production, then consolidate customized solutions into reusable products. In the early days, every use case required extensive customized integration; after Codex became stronger, the team rebuilt the application on Codex, turning customized applications into plugins and skills based on Codex primitives, and self-reports that about 90% of the customized code for each project was removed. In a semiconductor customer case, about 15 FDEs covered 10+ use cases, self-reporting about 48% time savings in targeted test generation and about 22% median performance improvement in kernel optimization; in a telecom customer service voice case, the key evaluation rose from about 60% to 90%+ in about six months.

    OpenAI's FDE team was established in early 2025, with the goal of filling the deployment gap between model capabilities and customers' real-world constraints; the approach is to first get results into production, then consolidate customized solutions into reusable products. In the early days, every use case required extensive customized integration; after Codex became stronger, the team rebuilt the application on Codex, turning customized applications into plugins and skills based on Codex primi

    Matched fieldsBody

    #hot-signal#Industry news#Agents#English text is being prepared.
  3. 36Kr · AI

    Exiting after just 188 days, big-company AI products are accelerating their reshuffle

    36Kr sorted through the product moves of eight companies—Tencent, Alibaba, Baidu, ByteDance, and Moonshot AI, Zhipu, MiniMax, DeepSeek—across ten AI tracks over four years, finding that competition cycles have shortened, product lifecycles have grown shorter, and renaming, integration, and shutdowns have become the norm. Tencent QClaw went from public beta on March 20 to announcing service shutdown arrangements on September 24, just 188 days, with user data to be migrated to WorkBuddy; Alibaba's Qwen announced the upcoming release of its personal assistant product Qwen Go!. Alibaba and ByteDance cover all ten tracks, Tencent and Baidu each cover nine, and DeepSeek covers only two.

    36Kr sorted through the product moves of eight companies—Tencent, Alibaba, Baidu, ByteDance, and Moonshot AI, Zhipu, MiniMax, DeepSeek—across ten AI tracks over four years, finding that competition cycles have shortened, product lifecycles have grown shorter, and renaming, integration, and shutdowns have become the norm. Tencent QClaw went from public beta on March 20 to announcing service shutdown arrangements on September 24, just 188 days, with user data to be migrated to WorkBuddy; Alibaba's

    Matched fieldsBody

    #hot-signal#English text is being prepared.#Agents#Industry news
  4. 36Kr · AI

    AI mass-generates e-commerce videos: a 5-person team produces over a thousand per day, at under 5 yuan each

    Yunying Research Society analyzes that AIGC is taking over the mass-production stage of e-commerce recommendation videos; a team of about 5 people can generate over a thousand videos in a few minutes, at under 5 yuan each, while manual shooting costs about 100 to 200 yuan per video. The specific approach is to first break out fixed blocks and variable blocks to form a template, then use low-cost models such as Grok Video and the Seedance entry version to test hooks and directions, and after getting data, switch to Veo, Sora, and the Seedance HD version to produce finished products. The article also mentions that Douyin, Xiaohongshu, and Video Accounts all tightened AIGC content review this year, and that Ocean Engine reported at the end of August that it had shut down more than 50,000 violating accounts, and holds that once materials are no longer scarce, judgment and aesthetics become the new threshold.

    Yunying Research Society analyzes that AIGC is taking over the mass-production stage of e-commerce recommendation videos; a team of about 5 people can generate over a thousand videos in a few minutes, at under 5 yuan each, while manual shooting costs about 100 to 200 yuan per video. The specific approach is to first break out fixed blocks and variable blocks to form a template, then use low-cost models such as Grok Video and the Seedance entry version to test hooks and directions, and after gett

    Matched fieldsBody

    #hot-signal#English text is being prepared.#Video#Industry news
  5. 36Kr · AI

    Liang Wenfeng needs his own Tibo: DeepSeek product department integration and the Agent path

    DeepSeek has integrated the Harness with the web, App, and open platform teams into a product department, led by Cui Tianyi, and the official website has posted recruitment positions in two directions: AI product manager and Agent Harness. The article uses OpenAI Codex lead Tibo Sottiaux and the Anthropic Claude Code team as examples to explain how the execution capabilities of coding tools can be extended into a general work task entry point. DeepSeek, while open-sourcing Harness and the inference framework DeepInfer, is also facing cost pressure on caching and transmission brought by long tasks.

    DeepSeek has integrated the Harness with the web, App, and open platform teams into a product department, led by Cui Tianyi, and the official website has posted recruitment positions in two directions: AI product manager and Agent Harness. The article uses OpenAI Codex lead Tibo Sottiaux and the Anthropic Claude Code team as examples to explain how the execution capabilities of coding tools can be extended into a general work task entry point. DeepSeek, while open-sourcing Harness and the infere

    Matched fieldsBody

    #hot-signal#Industry news#Agents#English text is being prepared.
  6. TMTPost · AGI

    Meta Q3 earnings: advertising props up 97% of revenue, Muse still burning money

    Meta Q3 revenue was $64.6 billion, up 26% year-over-year, of which advertising contributed $63.06 billion, accounting for 97.6% of total revenue. The personal agent Muse, launched on September 8, surpassed 10 million downloads within 40 days of launch, but high capital expenditure turned free cash flow negative at $2.12 billion, and the full-year Capex guidance floor was raised from $130 billion to $135 billion. Muse currently mainly relies on subscription fees, with shopping being the most frequent use case; more than 25% of users have used the shopping feature, with average spend per transaction exceeding $200.

    Meta Q3 revenue was $64.6 billion, up 26% year-over-year, of which advertising contributed $63.06 billion, accounting for 97.6% of total revenue. The personal agent Muse, launched on September 8, surpassed 10 million downloads within 40 days of launch, but high capital expenditure turned free cash flow negative at $2.12 billion, and the full-year Capex guidance floor was raised from $130 billion to $135 billion. Muse currently mainly relies on subscription fees, with shopping being the most freq

    Matched fieldsBody

    #hot-signal#Industry news#Agents#OpenAI
  7. TMTPost · AGI

    Pichai Reviews Gemini 4 Argon: Why 3.5 Pro Was Cut

    Google CEO Pichai revealed in the "Sources" interview that Gemini 4 Argon processed about 25 trillion tokens in 72 hours of launch, 3 times that of Gemini 3.0 in the same period, and is still rate-limited due to compute constraints. He explained for the first time the reason for cutting Gemini 3.5 Pro: the team found a gap in the model on Agentic Coding, first used the Flash version to complete intensive iterations from 3.5 to 3.8 in about 3 months, while Argon pretraining had already been completed at that time, so they injected the accumulated gains into Argon post-training. He also mentioned that Google internally has entered the RSI stage of researchers and models collaborating, and said the next-generation Gemini 5.0 will be much stronger than Argon.

    Google CEO Pichai revealed in the "Sources" interview that Gemini 4 Argon processed about 25 trillion tokens in 72 hours of launch, 3 times that of Gemini 3.0 in the same period, and is still rate-limited due to compute constraints. He explained for the first time the reason for cutting Gemini 3.5 Pro: the team found a gap in the model on Agentic Coding, first used the Flash version to complete intensive iterations from 3.5 to 3.8 in about 3 months, while Argon pretraining had already been compl

    Matched fieldsBody

    #hot-signal#Industry news#Google#DeepMind
  8. Wallstreetcn

    TS Lombard speculates the AI bubble may burst in early 2028, with U.S. tech stocks potentially plunging 40%

    In an October 22 research note, TS Lombard Chief Macro Strategist Dario Perkins projected that the AI capital expenditure boom could end in early 2028, with the S&P 500 falling 30%, tech stocks plunging 40%, and about $20 trillion in market value evaporating. The report argues that current AI revenue growth mainly comes from the capital expenditure cycle among tech giants and debt financing, and lists six chain-reaction triggers: revenue falling short of expectations, rising credit risk, depreciation pressure, an IPO wave, the semiconductor cycle, and regulatory and safety concerns. The report estimates that U.S. GDP would fall by about 2 percentage points and about 800,000 data center-related jobs would be lost, but private-sector balance sheets are healthy and the Federal Reserve has ample room to cut rates, making the recession closer to those of 1990 or 2001 than to 2008.

    In an October 22 research note, TS Lombard Chief Macro Strategist Dario Perkins projected that the AI capital expenditure boom could end in early 2028, with the S&P 500 falling 30%, tech stocks plunging 40%, and about $20 trillion in market value evaporating. The report argues that current AI revenue growth mainly comes from the capital expenditure cycle among tech giants and debt financing, and lists six chain-reaction triggers: revenue falling short of expectations, rising credit risk, depreci

    Matched fieldsBody

    #chinese#English text is being prepared.#Industry news#English text is being prepared.