DawnSift
S’abonner
sam · Quotidien tech · Numéro 69

2026-09-19

— AI safety and privacy issues are erupting all at once; today's theme is "with greater capability comes greater responsibility."

TL;DR du jour

Claude Code adds AGENTS.md support and refactors Projects into a multi-agent collaboration hub; a security researcher uses Claude to breach OpenAI's internal repository, and ZCode is exposed for silently uploading users' Git history; the US military nearly intercepts a Chinese vessel due to AI hallucination; on the open-source side, a 5.9GB ternary-weight 27B model and a 1M-context omni-modal model appear.

À la une

1

Claude Code major refactor: Projects becomes a multi-agent collaboration hub, natively supports AGENTS.mdMulti-sources ×3

Starting with Claude Code 2.1.277, Projects is refactored from a static folder into a conversation-driven collaboration hub centered on a Coordinator; after users issue high-level goals, it automatically decomposes subtasks, spawns multiple Git branches for parallel execution, and submits PRs. It also adds AGENTS.md support, automatically reading it when CLAUDE.md is absent. Anthropic internally runs 30,000 agents simultaneously every day, and 26% of core AI R&D work has reached L4 autonomous level. Why it matters: Multi-agent orchestration is moving from experimentation to productization, and developers need to rethink workflows for code review, branch management, and context sharing.

The community recognizes the value of multi-agent parallel development, but some worry that code isolation and permission boundaries for cloud agents remain unclear.

2

Security researcher uses Claude to breach OpenAI's internal repository; exploit chain involves heap overflow and SSO misconfigurationMulti-sources ×3

On July 25, 2026, the Hacktron team used two exploit chains—a heap overflow and an SSO misconfiguration—to breach the ChatGPT accounts of multiple OpenAI employees, then accessed the internal monorepo and submitted PR #1186742 via an employee's Codex account as proof. The entire attack was carried out with Anthropic's Claude Opus 4.8 and 5 and took less than 72 hours. Why it matters: Top AI labs still have basic security vulnerabilities, and attackers have begun using AI models to assist penetration testing; security offense and defense have entered an "AI versus AI" phase.

The community generally considers the $6,500 bounty too low for OpenAI's scale and worries about insufficient security investment; however, some praise the sophistication of the exploit chain itself and note that model weights have not leaked so far.

3

ZCode exposed for silently uploading users' complete Git history to Alibaba Cloud OSS

Developer ferstar's reverse-engineering analysis found that Z.ai's AI coding desktop app ZCode, when logged in, silently packages the user's entire workspace—including .git history, LFS cache, reflogs, and global configuration—encrypts it, and uploads it to Aliyun OSS. Testing captured a 313MB encrypted archive originating from a 345MB commercial workspace with 42,411 files, and the encryption private key exists only in the cloud, so users cannot decrypt the ciphertext on their own disks. Why it matters: AI coding tools have far broader access to local code repositories than traditional applications. Such silent upload behavior directly threatens enterprise source code security, and developers need to re-examine the default trust model of "login means authorization."

The community generally considers this behavior a serious overreach, and even encrypted uploads cannot eliminate privacy concerns; some also note that an official response from Z.ai is needed to confirm the data's purpose.

4

US military nearly intercepts Chinese vessel due to AI hallucinated intelligence; report says it "almost triggered a war"

CNN reported that an analyst at US Special Operations Command used a chatbot to help generate an intelligence report that falsely claimed a Chinese vessel was transporting components for a nuclear weapons program in the Middle East. The US military had prepared to board the vessel with armed personnel and had aircraft airborne, only discovering before the operation that the report's contents were "completely false." Why it matters: The consequences of AI hallucination in military decision-making have escalated from "getting the answer wrong" to "possibly starting a war." This is a wake-up call for all LLM deployments in high-risk domains—human review processes must not be compressed just because AI accelerates things.

The consensus is that using AI hallucinations for military decision-making is extremely dangerous and that responsibility lies with humans; however, some argue that human target identification also makes mistakes, and AI is not necessarily worse.

5

PrismML releases Ternary Bonsai 2 27B: 5.9GB ternary-weight model retains 98.2% performance

PrismML released Ternary Bonsai 2 27B, a ternary-weight version of Qwen3.8 27B, shrinking size from 53.80GB in FP16 to 5.93GB while retaining 98.2% of the parent model's average performance across 20 benchmarks. The model supports text and image input, a 262K token context, can run on a 16GB laptop or a single 24GB GPU, and is under the Apache 2.0 license. Why it matters: Ternary quantization compresses model size by nearly 90% while maintaining usable performance, greatly lowering the barrier to local deployment of large models and holding major significance for edge inference and privacy-sensitive scenarios.

Chaque matin, un digest tech fait pour vous

Le web montre la vue d’ensemble ; les abonnés reçoivent la leur — sélection IA selon vos intérêts, votre RSS privé intégré, avec les avis de la communauté, livrée chaque matin. Gratuit à vie.

69 numéros publiés · 150+ infos filtrées à 30 chaque jour

Actu IA

The StepAudio 3 Music technical report is released, supporting long-form music generation with explicit music planning and open-domain text control, using a 50Hz single-codebook tokenizer and flow-matching DiT.

Dev & open source

Cloudflare Quick Tunnels launches: expose a local service as a public encrypted URL with one command, no account, DNS, or open inbound ports required, suitable for webhooks and temporary demos.

Most people recognize Quick Tunnels as suitable for temporary development demos, but some find its terms, latency, and abuse risks concerning.

jemalloc 5.4.0 is released: 160+ commits focused on technical debt cleanup, adding a pinned extent allocation flag and corresponding mallctl statistics interface.

OpenJev launches: simulates Jev's choice-probability readout on local models through caching and constrained output; the community believes it is not true Jev but that the approach has value.

Most people think OpenJev merely imitates Jev with caching and constrained output rather than being true Jev, but some believe its approach has value and that Jev itself can be reproduced.

Échos de la communauté

"I don't like passkeys" draws 700+ comments: most people dislike its ecosystem lock-in and backup difficulties, but some think it is indeed convenient and secure when paired with a password manager.

The comment section generally dislikes passkeys, considering them ecosystem-locked, hard to back up, and poor in experience, but some think they are indeed convenient and secure when using a password manager.

GitHub Trending

Star cloudflare / security-audit-skill A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Star anthropics / claude-code Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Star alibaba / open-code-review Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

affaan-m/ECC★ 262062

Sponsor Star affaan-m / ECC The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

Star Tencent / BrowserSkill Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent.

Star addyosmani / agent-skills Production-grade engineering skills for AI coding agents.

Star TencentCloud / Octop A smarter, self-hosted AI assistant — multi-user, multi-agent.

Star Fission-AI / OpenSpec Spec-driven development (SDD) for AI coding assistants.

Star ankitects / anki Anki is a smart spaced repetition flashcard program

Star anthropics / knowledge-work-plugins Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork

Aussi à voir(71 de plus)

arXiv:2609.19519v1 Announce Type: new Abstract: Language-model agents are increasingly asked to carry out work spanning days or weeks, such as an operations remediation or a research programme. Such a task outlives any context window, any process and any interval at which a person can attend. In this paper, we argue that a long-horizon agent must run continually without forgetting before it can learn continually. This ability lies in the harness around the model rather than in the model itself.

Multi-turn agents trained with reinforcement learning (RL) receive a single scalar reward per trajectory, which motivates self on-policy distillation (OPD) to supply dense token-level supervision from a self-teacher with privileged task skills, letting a skill-free student internalize them. This recipe, however, is undermined by two findings in agentic tasks: privileged information alone does not always make a teacher reliable, and the benefit of teacher supervision is stage-dependent. We theref

Recently unsealed court documents in the New York Times' case against OpenAI and Microsoft are pretty damning. The companies' own documentation warned that it was starting a "doom loop" that would damage the web, characterized its scraping of data to train its models as the "largest theft of labor in human history," and that it […]

We study length inflation in on-policy distillation (OPD), where student responses can become excessively long and even exhaust the generation budget. We identify termination-token mismatch between base students and post-trained teachers as an important source of this behavior. Across Qwen3, Llama, and Gemma, the two models can place their stopping probability on different EOS tokens, even when their declared stopping sets are identical. This mismatch can suppress the student's preferred termina

Meet Scry, a 500 TB NVMe internet index in ClickHouse that you can run ~arbitrary readonly SQL and some of Datalog over, and I handle the problem of resource-contention with congestion-based micro-auction pricing. When there's capacity, the service is free for non-commercial use. --- Hello. It's 2026, we're training simulated fruit fly brains to play Beat Saber, do we still have to be stuck with internet (re)search as fn: natural language -> black box we can't do anything about -> ranked_list/su

World modeling enables intelligence to anticipate consequences, guide interventions, and learn from interaction. Yet predictive models remain domain-specific: can a common learning principle support world modeling across radically different systems? We introduce JEPA-Anything, a domain-agnostic framework based on orthogonal predictive factorization (OPF). Extending joint-embedding predictive architectures, OPF decomposes latent targets into complementary factors, learns them through dedicated pa

arXiv:2609.19244v1 Announce Type: new Abstract: Conversational LLM agents increasingly rely on Web search, yet the end-to-end lifecycle of agentic search remains poorly understood. We present the first study of Web search across four major conversational platforms (ChatGPT, Claude, Grok, and DeepSeek), combining real-world user interactions (invivo) with controlled experiments using the same platform's models by their APIs (invitro). We investigate the quality of agentic decisions to invoke Web

arXiv:2609.19465v1 Announce Type: new Abstract: Compositional reasoning is critical for real-world problem solving: since training data is necessarily limited, models must generalize by composing learned skills in new ways. While post-training methods such as reinforcement learning (RL) have substantially improved the reasoning abilities of language models (LMs), their effects on compositional reasoning remain less well understood. We propose a dependency-graph framework to formalize composition

arXiv:2609.19203v1 Announce Type: new Abstract: AI applications have shifted from single, monolithic foundation models (FM) to compound agentic systems. Yet today's stacks remain fragmented: even as protocols (e.g., MCP, A2A) ease tool/agent connectivity, each framework embeds an implicit runtime for state, memory, budgets, and guardrails, making behavior non-portable and governance brittle. It mirrors computing before operating systems, when every program re-implemented basic services. This pos

arXiv:2609.19472v1 Announce Type: new Abstract: Autonomous systems increasingly rely on Large Language Models (LLMs) yet the safety infrastructure surrounding these models introduces latency and compute overhead. This limits utility in resource-constrained, time-critical deployments. Existing external guardrail models remain blind to the model's internal workings, creating a fundamental assurance gap. We ask: does the model already know when the content is harmful? We extract activations from LL

arXiv:2609.19515v1 Announce Type: new Abstract: Verifier-based selection improves LLM performance by generating multiple candidate solutions and using a verifier to select the most promising one. However, existing methods typically treat verification only as a ranking step and discard its feedback once a fixed candidate pool has been evaluated. In this paper, we ask whether verification can also improve the candidate set itself. To this end, we introduce LLM-as-an-Improver and propose Verify--Re

MiniMax has open-sourced the terminal version of MiniMax Code: How can developers verify the content that encoding proxies read, send, and store? This is a topic that has been widely discussed recently. Open sourcing the agent doesn’t automatically answer every privacy or security question, but it gives the community something concrete to inspect. The repository includes: interactive TUI and headless execution code editing, shell commands, diffs, and test verification permission controls and san

Being a computer scientist who refuses to find anything about LLMs interesting right now is a bit like being a geneticist who refuses to find anything interesting about the recently opened Jurassic Park. Tags: llms , ai , generative-ai

arXiv:2609.19513v1 Announce Type: new Abstract: High-quality pre-training data is a critical bottleneck for educational and STEM-specific language models targeting edge AI and on-device deployment where token budgets are tightly constrained. While major organizations train ever-larger models on private corpora, the open ecosystem lacks STEM-focused synthetic datasets that deliver high per-token learning value efficiently for small models. To address this gap, we introduce QVAC Genesis III, a 191

Platform abuse campaigns conceal redirection instructions with emojis, homophones, character decomposition, and redundant symbols, then route users through disguised links to services associated with pornography, fraud, gambling, or illicit transactions. Existing benchmarks evaluate obfuscated text and risky webpages separately, obscuring how target recovery affects downstream evidence acquisition. We introduce RiskChainBench, pairing 3,600 synthetic token-text restoration inputs from 600 source

M9RProduct Hunt1 minIAOutils dev

Multiplayer space for your AI coding agents and teams Discussion | Link

Looking at jev launch website and demo video on x.com…. it seems like it’s a very intelligent classifier with custom prompt and custom criteria instruction reading capabilities. It can do well defined narrow and well defined task Me, following NLP since good old days of word embedding and BERT,,, be like asking…. Isn’t that BERT? yeah i know BERT need fine tuning to adapt to custom domain, but can Jev be like generalised form of BERT?

Hey community, Jovan from UkisAI here, We're the team behind Swift Qwen3.8 27B, the Qwen model with token usage and overthinking error improvements Our estimate is that we can make a great improvement to Bonsai 2, as our testing indicates that it suffers greatly from overthinking loops and in general high token usage impacting it's performance. My ask for you is: Is a Swifted version of Bonsai 2 something you guys would enjoy? If yes, what size is the most relevant. 1-bit, 2-bit or both? Thank y

do you want some omni? here is omni for you 1. 🧭 Overview This repository hosts two checkpoints of the Realtime-Venus system: Realtime-Venus-Omni ( Realtime-Venus-Omni/ ): the 9B audio-visual interaction model. It continuously watches and listens, decides whether and when to respond, and generates text and speech on a shared causal timeline. Adapted from MiniCPM-o 4.5, it supports proactive interaction, semantic interruption handling, and training-free long-video memory. Realtime-Venus-Audio ( R

Hey r/LocalLLaMA , Prism-LM recently released its Bonsai 2 QAT models based on Qwen3.8, and they quickly gained traction. In our evaluation, the models strike a strong balance between throughput and quality, reaching roughly 91.5% on our composite benchmark . We wanted to see how they compare under the same methodology we use for the rest of our Qwen3.8 evaluations, so we ran Bonsai 2 through our own benchmark suite. One important clarification: these are our evaluation results, not Prism’s repo

arXiv:2609.19387v1 Announce Type: new Abstract: Agents are increasingly asked to design hardware, and increasingly reported to succeed. Such reports establish that a design improved; they cannot establish why. An agent that improves an accelerator may be reasoning about the machine, or may be searching competently over knobs whose meaning it never recovers -- and only the first transfers to the next architecture. Existing evaluations cannot tell the two apart, because they vary the agent while h

California Gov. Gavin Newsom (D) is positioning the state to take the lead on AI oversight, including the potential to mandate a "kill switch" for frontier models, with a new executive order issued Friday. Newsom's order directs the state to convene a group of experts that will deliver recommendations within two months on how to […]

A week after an Anthropic researcher’s doomsday warning rattled the AI world, the company’s CEO Dario Amodei has outlined his plan to “pace the frontier” of AI development. The proposal leans on independent safety evaluators and coordination between AI labs in democratic countries, and it’s already picked up some industry support, along with some pointed pushback from Nvidia’s Jensen Huang. Watch […]

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Could AI really kill us all? Your questions, answered On Wednesday, MIT Technology Review hosted a live Roundtables event that asked the question many seem to be asking right now: could…

In recent weeks, leaders of some of the biggest AI companies have warned that the very tech they are developing is dangerous. Last weekend, Anthropic CEO Dario Amodei argued that AI carries serious risk and that progress should be slowed. OpenAI CEO Sam Altman responded on X: “I agree with Dario that we need to pace the…

Building an AI prototype is easy, but operating autonomous agents at scale requires production-grade tooling. Salesforce Agentforce bridges the gap from "vibe coding" to enterprise reliability by combining synthetic stress-testing, real-time optimization, dynamic agentic UIs, and deterministic guardrails—as proven by Southwest Airlines' 7x ROI. The post Salesforce Agentforce: Bridging the Enterprise AI Gap from ‘Vibe Coding’ to Battle-Tested Orchestration appeared first on MarkTechPost .

Recent Omni-Modal Generative Models (Omni-Models) have advanced content generation toward unified modeling of text, images, video, and audio. MiniMax-H3 exemplifies this transition by combining multimodal context understanding with joint audio-visual generation in a shared latent framework. Its unified architecture raises a fundamental question: Can multimodal alignment improve the model's world reasoning, and what new evaluation paradigms do omni-modal inputs enable? To investigate this questio

arXiv:2609.19182v1 Announce Type: new Abstract: Benchmarks are central to how progress in large language models (LLMs) is assessed and communicated. Yet model rankings alone reveal little about how evaluation requirements themselves are changing. The expanding variety of benchmarks offers another perspective: what researchers expect LLMs to do, and what they count as successful performance. We systematically map 14,767 papers introducing or updating evaluation resources from arXiv submissions be

Baseten launched a new safety infrastructure standard alongside its Base Labs research arm on Wednesday, partnering with Hugging Face and Goodfire AI to build safety evaluation and monitoring infrastructure for open-weight models. The announcement lands amid debate for the safety of open-weight models — which can be made dangerous by removing their safeguards through a rising technique known as abliteration . The scale of the problem is massive: Hugging Face, which hosts open source AI models, c

LLM assistants are widely used for daily social advice, yet evaluating their social reasoning in such consultation settings remains challenging since (i) it requires setups where the assistant learns about social situations from subjective user narratives, and (ii) social properties, such as others' intentions, typically lack verifiable ground truth. To address these challenges, we introduce Fuse, a multi-agent simulation framework for studying user-mediated social reasoning. In Fuse, a target a

We're partnering with Accenture on independent evaluation of frontier AI. This is an important step toward the commitment, made in our CEO’s essay “We Must Pace the Frontier,” to embed evaluators within Anthropic. The partnership will be led by Faculty, Accenture’s specialist AI business, and will include evaluating and red-teaming models, conducting alignment assessments, and testing model safeguards. Accenture helps businesses and governments deploy AI across many industries. Their understandi

bonsai claim 98.2% intelligent retained, but their own documents show Ternary Bonsai 2 27B reaches 52.8 and 60.8, respectively, compared with 69.7 and 80.6 for Qwen3.5-27B, retaining roughly three quarters of the full-precision performance on both benchmarks. that qwen3.5 is a typo cause these are qwen3.8 numbers, altho qwen3.5 numbers are bonsai_2/q3.5 52.8 / 41.6 = 126.9% bonsai_2/q3.5 60.8 / 72.4 = 84.0% Long-context and coding performance. This release also delivers on the roadmap set out in

My understanding so far: You take an LLM and use it without thinking (That's what openjev does?) You leave out the text generation in the end and take the confidence score in the matrix before that phase That's it. Right? They gave it a mysterious marketing name.

TypeSafe announced Jev on Tuesday: you give it data plus typed questions (yes/no, pick-one, 0–N scale) and it returns a probability for every option, crazy fast. I signed up and then refreshed my inbox. A lot. Meanwhile Matt Mastracci opened vLLM PR #57250 , which does the same trick on DiffusionGemma with a single denoising step. The model basically fills in a multiple-choice bubble sheet. My "quick look" turned into three straight days, and now there's OpenJev : an open-source server with Jev'

Chaque matin, un digest tech fait pour vous