|
🦊 AI model built Firefox exploits on its own
LINK
|
- Epoch AI researchers showed that the open-weight GLM 5.3 autonomously built working Firefox exploits within 48 hours, attacking 6 versions shipped between September 17 and October 26 at roughly $1,000 in API fees each.
- Given only a target version, basic tools, and public information offline, the model saw through Firefox's disguised security fixes, chained multi-stage exploits to bypass sandbox defenses, and rediscovered an unknown file-reading vulnerability in every attempt, with the fastest break taking 12 hours.
- Mozilla patched that bug in Firefox 159.0 on October 27 and the researchers suspect it makes attacks "substantially more difficult," though they warn the patch-gap flaw is structural across browsers, firmware, and mobile OSes, and no provider's guardrails blocked the exploit work.
|
📋 OpenAI rebuilds its AI rulebook around 5 values
LINK
|
- OpenAI reorganized its Model Spec around five values, faithfulness to human intent, harm minimization, honesty and transparency, human agency, and care, in an update published yesterday that retires most of the Spec's detailed style guidance.
- The revision adds a layered chain of command, root sections from the Spec can't be overridden by context, followed by system, developer, and user instructions, plus root-level rules barring GPT from pursuing side objectives and requiring it to stay corrigible to human oversight and shutdown.
- OpenAI recommends logging autonomous work in a ScopeOfAutonomy record with fields like allowed_tools, max_cost, and an ending condition, though the company said its models do not yet fully reflect the Spec and framed this as a first step.
|
🔐 Cursor reveals SSH backdoor hidden in malicious Claude extension
LINK
|
- Cursor disclosed yesterday that a maliciously modified version of the Anthropic.claude-code extension in its VS Code marketplace ran code attempting to install a persistent SSH backdoor, affecting at most 5,000 users.
- Version 2.1.313, live for roughly 11 hours yesterday, harvested host details and added an attacker-controlled SSH key, installing a LaunchAgent on macOS or scheduled task on Windows that retried a reverse tunnel and beaconed back to the attacker.
- Cursor pulled the package, rebuilt its marketplace, and took the attacker's server offline, but warns that uninstalling the extension is insufficient since standalone persistence scripts keep running, so run its impact check and remediation scripts against the published indicators.
|
🌐 Deep Agents now browse sites with no API
LINK
|
- LangChain's Managed Deep Agents v0.10 shipped today with browser use, letting agents act on sites that expose no API, booking travel, canceling subscriptions, filing claims, by reading the page's accessibility tree and clicking through rendered JavaScript.
- Each agent runs its own browser in a LangSmith sandbox with automatic navigation and screenshot tools; the release cites agentic browser requests climbing 4.7x in September, and adds async subagents that run long tasks in the background while the orchestrator keeps talking.
- At a login or two-factor wall the agent hands the window to you so credentials never enter the model's messages or traces, then rechecks the page once you hand control back, though handoff links expire after 15 minutes.
|
💰 Baseten's joey-1 decides for a penny per million tokens
LINK
|
- Baseten's Base Labs released joey-1, a 2B-parameter decision model priced at $0.01 per million input tokens and available through its Model APIs and as open weights on Hugging Face under the MIT license.
- Rather than generating text, joey-1 returns a calibrated probability for every option in one forward pass, serving an average request at 20ms P50 latency, about 2.5x faster than the 9B elephant-1, for high-volume jobs like ticket triage and routing.
- Positioned as a first-line model that escalates to heavier siblings when uncertain, joey-1 scored 63.30 on the Jev Decision Index 0.4 public split, top among sub-4B models but below elephant-1 in every evaluated area.
|
|
