DeepSeek 的 V4.1 Flash 1017 把开源模型在 ARC-AGI-2 拉到 78.1%,还顺手刷了 ARC-AGI-3 和 -1 的开源最佳,关注开源推理的可以看看成绩单。
GLM 5.3 independently builds Firefox 0day exploit chains
3 Nov 2026. Agent security dominated the day: Epoch AI tests found Z.ai's open-weight GLM 5.3 turned unreleased Firefox security patches into working exploits, chaining a second model-discovered vulnerability to steal local files and passwords, with each attack costing about $1,000. Defences look fragile too — new SecPO research cuts prompt-injection success on Qwen3.6-27B, while an AI Control study found simple features beat 20 of 24 open-source monitor models. On models, DeepSeek's V4.1 Flash 1017 topped open-weight results on ARC-AGI, scoring 78.1% on ARC-AGI-2 and 5.81% on ARC-AGI-3, and Mistral published a full technical report on ML4 training. In compute economics, Anthropic has committed $895.4B in compute and infrastructure spending, with $447.5B due before 2031, while TrendForce reports GPU lead times stretching to 45 weeks amid NVIDIA's Rubin transition and Neocloud players like Lambda and Nscale face downgraded valuations. OpenAI separately shipped Pando, a Git-compatible backend for massive Codex agent workloads.
Models
5 itemsFrontier labs rarely publish full training details, so this document gives practitioners a real reference for replication choices around data and training pipeline decisions. Builders studying how top European labs structure large-scale training can compare Mistral's approach with the more limited disclosures from US and Chinese competitors.
Z .ai 的开源模型 GLM 5.3 能自己读懂未发布补丁,独立找出 Firefox 0day 并做出完整攻击链,Chrome 反而扛住了,细节都在测试过程里。
The New Stack 拿 GPT-6.1 Terra 和 Claude Opus 5.5 跑了三组硬核测试,Terra 答题更准还只要八分之一的价格,数据很实在。
Design output that comes with a full build sequence shifts world models from visual generation toward tools engineers can actually hand to manufacturing. Teams in hardware, CAD tooling or robotics can use SKY-001 to automate part trees and assembly steps at a claimed 150x lower cost than GPT-6 Astra. The two-stage composer-plus-predictor architecture is also a template for anyone building hierarchical agent systems.
Products
5 itemsOpenAI 自研的 Git 兼容后端 Pando 了解一下,专门解决 Codex 让大量智能体并行改代码时 Git 扛不住的问题。
Server-side thread caching shifts state management from the client to Anthropic's infrastructure, cutting request payloads and per-turn latency for chat applications. Builders maintaining long conversations in production will find this directly useful. It parallels similar stateful-session approaches from competitors like OpenAI's Responses API, so teams comparing multi-turn efficiency across providers have a new data point.
NVIDIA 开源了这个 Auto Ontology 库,能从企业元数据自动生成语义层,让 Agent 写的 SQL 更靠谱,还支持 MCP 接入,做数据 Agent 的可以试试。
Making the rewritten NCCL backend the default means distributed training setups may see different communication behaviour after upgrading, and FSDP2's finer memory controls matter for teams pushing large-model training on limited hardware. Developers running inference on NVIDIA Blackwell or Apple Silicon can test NVFP4 and FP8 decode paths directly. Anyone deploying PyTorch 2.15 can bring upgrade questions to the live session with the Meta engineers behind the release.
The admission layer being pure rules with zero model involvement is the most transferable idea here — it cuts cost and false triggers before the LLM ever runs. Builders working on team-facing or multi-agent systems can borrow the ticket-state model and write-ahead logging for their own orchestration stacks. The project is open-source and came from the Chinese community, so it can be studied and self-hosted anywhere without waiting on a commercial release.
Industry
5 itemsAnthropic 的算力账单曝光了:8954 亿美元承诺,大半不能取消,它甚至自己买芯片装机器,看完就懂前沿模型的成本压力。
The bottleneck is shifting from GPUs to passive components: substrates and capacitors running at over 3 times balanced lead times will gate Rubin availability more than NVIDIA's own supply. Enterprise buyers waiting for Rubin may face a two-tier market as hyperscalers take early allocation. Procurement teams should weigh locking in current-generation GPU servers and smaller RDIMM modules before queues lengthen further.
华为昇腾 950 超节点拿下了世界互联网大会领先科技奖,一套灵衢协议连 1024 张 NPU,国产算力这块可以看看它的规模细节。
GPU 租赁这门生意开始还钱了:Lambda 估值缩水、CoreWeave 债券收益率翻倍,Nebius 宁可让客户预付也不发债,看看资本怎么重新给 AI 基建定价。
Papers
4 itemsThe key insight is that DPO-based defences anchor to an insecure reference model, and an injection-invariant oracle can be approximated in practice — a fix that goes beyond simply training on more attacks. Teams building agentic systems can fine-tune with the released SecPO model, loss and adversarial training data rather than relying on prompt filtering. The released checkpoint is based on Qwen3.6-27B, making it directly usable for open-weight deployments.
Zyphra 的论文提出 ZHA,几步蒸馏就能把现有模型改成亚二次注意力,1M 上下文以上比现有稀疏注意力方法快很多,做长上下文的值得看。
The paper shows that a usually implicit implementation choice — whether to renormalize survivors' gate scales — can flip which pruning method wins, so benchmark tables built on one operator may not generalize. Engineers pruning MoE checkpoints get concrete guidance: match the operator to the router's training, and validate on math and code tasks rather than multiple-choice accuracy alone. Researchers should adopt the five-item reporting checklist when publishing pruning results.
如果你在做 AI Control 或监控器评估,这篇得看:它指出了标准数据集的两个漏洞,还重建了数据集和检查工具一并开源。
How-to
3 itemsCache-aware serving is becoming the bottleneck as agentic pipelines resend long prefixes on every call, and HiCache's unified KV layout means cached prefixes survive changes in parallelism setup rather than being discarded on redeployment. Teams running GLM, DeepSeek or other long-context models on SGLang can pair HiCache with external stores like Alibaba Tair KVCache to cut TTFT without re-architecting their serving topology. The iFLYTEK deployment is a concrete reference point for production coding-agent workloads.
The migration from Bedrock Flows to AgentCore shows where low-code orchestration hits its limits and when a managed agent runtime pays off — a decision many platform teams will face. DevOps and platform engineers building their own triage or on-call automation can reuse the architecture pattern and scaling lessons directly. The under-15-minute triage figure gives a concrete benchmark for setting internal targets.
AWS 官方教程,教你用 Nova Embeddings 加 AgentCore 搭多智能体,把航空零件替代评估从几天缩到几分钟,工程师朋友可以照着做。