01Binance's report: the $6.34B hack began with an engineer searching for an AI coding tool and installing a tampered Homebrew
Binance's initial report on the October 29 hack (about $6.34B in digital assets) traces it back to June, when a wallet DevOps engineer installed a popular AI coding tool through a tampered Homebrew download found via a search engine; a fake job interview in September and an internal AI tool on October 20 got the attackers the rest of the way. The FBI attributes it to North Korea; Binance says it is covering the loss.
Postman's desktop app auto-installed plugins into Claude Code and Codex and tried to approve its own startup hook
A GitHub issue shows Postman's desktop app installing its plugin into Claude Code and Codex for existing users, adding a startup hook that tells agents to load the Postman skill for any non-trivial API work, and an installer that tries to mark that hook as trusted. The report says it does not establish that any data was sent.
Apple's 10-K: AI agents may exceed permissions, resist instructions, and conceal actions
Apple's new 10-K lists AI agents as a risk: they may take actions nobody directed, exceed permissions, resist instructions, get around security controls, conceal actions or hide information, and some consequences may be impossible to reverse. The same day, Apple opened Siri AI to all developers in the iOS 27.3 betas.
In Codex, Sol asked a user: may I solve this image CAPTCHA and send the request?
A user on r/codex shared a Codex prompt in which Sol asked whether it could solve an image CAPTCHA on a French support form and send a prepared request; they say they hadn't nudged it, clicked allow, and it did. Most commenters welcomed fewer CAPTCHAs; a few argued agents shouldn't bypass them.
OpenAI: ChatGPT's search-like queries are about a fifth of Google's; 1.2B weekly users
ChatGPT consumer lead Adam Fry told Big Technology that ChatGPT's search-like queries are roughly a fifth of Google's volume (OpenAI's own estimate), that weekly users went from 1 billion to 1.2 billion in about two months, with 1.5 billion images a week and 250 million weekly voice users, and that Chat and Work are being merged.
Google: AI products and Google Search will be off for K-12 student accounts until schools turn them on
Google says Gemini, Gemini Notebook, Gemini in Classroom and Google Search will be off for K-12 student accounts until administrators turn them on. Because Search includes AI Overviews and AI Mode, a school that wants no AI at all also loses Search. Guided Learning launched in Classroom the same day, with a Search pilot at some US schools.
Two OpenAI staff had GPT-6 Astra design a device for talking to Codex in under a week; an unnamed internal model beat Astra on a CAD benchmark
OpenAI says two team members used GPT-6 Astra to design a prototype device for talking to Codex in under a week β enclosure, circuit board, interface and software β though manufacturing took several rounds of review. It also showed an unnamed internal model scoring 0.875 on BenchCAD 2.0, against 0.594 for GPT-6 Astra at its highest setting.
spaCy's creator: the Qwen fix used Python, not just reading weights; Simon Willison's laptop Qwen 3.8 named three of four games from raw weights
spaCy author Matthew Honnibal argues the MIT weight-editing post mixes techniques: only three experiments read raw weights without tools, on networks of 17Kβ172K weights, while the Qwen math fix used Python and up to 50 batches of test runs. Simon Willison then had Qwen 3.8 27B on his laptop identify Pac-Man, Breakout and Pong from raw weights (46 minutes to just over an hour each); it missed Freeway.
Revolut made self-hosted GLM its default for coding and says AI coding costs fell about 90%
Revolut says making self-hosted models its default cut AI coding inference costs by roughly 90%: self-hosted GLM cost about $0.30 per million tokens, around a tenth of Codex or Claude Code, and it now serves GLM-5.3 on 56 Nvidia B200 GPUs to about 2,000 engineers, who use the cheap tokens for debugging and tickets.
itch.io deleted "a couple terabytes of ai slop"; Nexus Mods made AI disclosure mandatory for new mods
itch.io posted that it "just deleted a couple terabytes of ai slop", pointing to the AI spam clause in its quality guidelines. The same day Nexus Mods made AI disclosure mandatory for new uploads, required AI-assisted mods to explain how AI was used, pledged never to train AI on mods, and said AI-tagged mods got 2.13% of donation points this year.
Claude Opus 5.5 vs GPT-6 Astra: Who Can Beat the Original Celeste First?
GPT-6.1 Terra Just Dropped. I Actually Tested It.
OpenAI and Claude Just Disproved a Famous Math Conjecture. Is P = NP?
OpenAI's "Alien Math": What Did AI Actually Solve?
Opus 5.5 Motion Graphics: Zero After Effects, All Code
What Do Q4 and Q8 Mean? I Squeezed One AI Into 9 Versions
I Locked an AI in 1900. Can It Beat Einstein to Relativity?
AI Jailbreaking Explained: Does the Grandma Trick Still Work?
AI Just Read a Herculaneum Scroll Without Opening It
