DawnSift
订阅日报
周六 · 科技日报 · 第 69 期

2026-09-19

— AI 安全与隐私问题集中爆发,今天的主线是「能力越强,责任越重」。

今日 TL;DR

Claude Code 新增 AGENTS.md 支持并重构 Projects 为多 Agent 协作中心;安全研究员用 Claude 攻破 OpenAI 内部仓库,ZCode 被曝静默上传用户 Git 历史;美军因 AI 幻觉差点拦截中国船只;开源侧出现 5.9GB 三元权重 27B 模型和 1M 上下文全模态模型。

一个由特别行动司令部分析师提交、借助 AI 工具生成的报告,错误地识别了船只运载的物资,差点引发战争。

头条

1

Claude Code 大重构:Projects 变身多 Agent 协作中心,原生支持 AGENTS.md多源事件 ×3

Claude Code 2.1.277 起,Projects 从静态文件夹重构为以 Coordinator 为核心的对话驱动协作中心,用户下达高阶目标后自动拆解子任务、派生多条 Git 分支并行执行并提交 PR;同时新增 AGENTS.md 支持,无 CLAUDE.md 时自动读取。Anthropic 内部每天同时运行 3 万个 Agent,26% 核心 AI 研发工作已达 L4 自主级别。 为什么重要:多 Agent 编排从实验走向产品化,开发者需要重新思考代码审查、分支管理和上下文共享的工作流。

社区认可多 Agent 并行开发的价值,但也有人担心云端 Agent 的代码隔离与权限边界尚不清晰。

2

安全研究员用 Claude 攻破 OpenAI 内部仓库,漏洞链涉及堆溢出与 SSO 配置错误多源事件 ×3

Hacktron 团队于 2026 年 7 月 25 日利用堆溢出和 SSO 配置错误两条漏洞链,攻破多名 OpenAI 员工的 ChatGPT 账户,进而访问内部 monorepo,并通过员工 Codex 账户提交 PR #1186742 作为证明。整个攻击过程借助 Anthropic 的 Claude Opus 4.8 和 5 完成,耗时不到 72 小时。 为什么重要:顶级 AI 实验室的安全防护仍存在基础性漏洞,且攻击者已开始用 AI 模型辅助渗透测试,安全攻防进入「AI 对 AI」阶段。

社区普遍认为 6500 美元赏金对 OpenAI 体量而言过低,并担忧其安全投入不足;但也有人赞赏漏洞链本身的精巧,且指出模型权重至今未泄露。

3

ZCode 被曝静默上传用户完整 Git 历史到阿里云 OSS

开发者 ferstar 逆向分析发现,Z.ai 的 AI 编程桌面应用 ZCode 在登录状态下会静默打包用户整个工作区——包括 .git 历史、LFS 缓存、reflogs 和全局配置——加密后上传至 Aliyun OSS。实测捕获 313MB 加密归档,源自 345MB 商业工作区共 42,411 个文件,且加密私钥仅存于云端,用户无法解密自己磁盘上的密文。 为什么重要:AI 编程工具对本地代码仓库的访问权限远超传统应用,此类静默上传行为直接威胁企业源代码安全,开发者需重新审视「登录即授权」的默认信任模型。

社区普遍认为该行为严重越界,即使加密上传也无法消除隐私顾虑;也有人指出需等待 Z.ai 官方回应确认数据用途。

4

美军因 AI 幻觉情报差点拦截中国船只,报告称「几乎引发战争」

CNN 报道,美军特别行动司令部一名分析师使用聊天机器人辅助生成情报报告,错误声称一艘中国船只在中东运输核武器项目组件。美军已准备武装登船、军机升空,行动前才发现报告内容「完全虚假」。 为什么重要:AI 幻觉在军事决策中的后果从「答错题」升级为「可能开战」,这为所有高风险领域的 LLM 部署敲响警钟——人类审核流程不能因 AI 加速而被压缩。

共识是 AI 幻觉用于军事决策极危险,责任在人;但也有人认为人类目标识别同样会出错,AI 未必更差。

5

PrismML 发布 Ternary Bonsai 2 27B:5.9GB 三元权重模型保留 98.2% 性能

PrismML 发布 Qwen3.8 27B 的三元权重版本 Ternary Bonsai 2 27B,体积从 FP16 的 53.80GB 压缩至 5.93GB,在 20 个基准测试上保留父模型 98.2% 的平均性能。模型支持文本和图像输入、262K token 上下文,可在 16GB 笔记本或单张 24GB GPU 上运行,Apache 2.0 许可。 为什么重要:三元量化在保持可用性能的同时将模型体积压缩近 90%,大幅降低本地部署大模型的门槛,对边缘推理和隐私敏感场景意义重大。

每天早晨,一份为你精选的科技日报

网页看大盘,订阅拿专属:AI 按你的兴趣为你精选、可汇入你的私有 RSS,附社区观点——每天早晨直达邮箱,永久免费。

已发布 69 期 · 每天筛过 150+ 条只留值得读的 30 条

AI 动态

StepAudio 3 Music Technical Report

StepAudio 3 Music 技术报告发布,支持显式音乐规划与开放域文本控制的长时音乐生成,采用 50Hz 单码本 tokenizer 与 flow-matching DiT。

开发与开源

Cloudflare Quick Tunnels

Cloudflare Quick Tunnels 上线:一条命令将本地服务暴露为公网加密 URL,无需账号、DNS 或开放入站端口,适合 webhook 和临时演示。

多数人认可 Quick Tunnels 适合临时开发演示,但也有人认为其条款、延迟和滥用风险令人顾虑。

jemalloc 5.4.0 发布:160+ 提交聚焦技术债清理,新增 pinned extent 分配标志及对应 mallctl 统计接口。

OpenJev 上线:通过缓存和受限输出在本地模型上模拟 Jev 的选择概率读 out,社区认为其并非真 Jev 但思路有价值。

多数人认为OpenJev只是用缓存和受限输出模仿Jev,并非真Jev,但也有人认为其思路有价值且Jev本身可被复现。

社区热议

I don't like passkeys

「我不喜欢 passkeys」引发 700+ 评论:多数人反感其生态绑定和备份困难,但也有人认为配合密码管理器时确实方便安全。

评论区普遍反感passkeys,认为其绑定生态、难备份且体验差,但也有人认为用密码管理器时它确实方便安全。

GitHub Trending

Star cloudflare / security-audit-skill A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Star anthropics / claude-code Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Star alibaba / open-code-review Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

affaan-m/ECC★ 262062

Sponsor Star affaan-m / ECC The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

Star Tencent / BrowserSkill Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent.

Star addyosmani / agent-skills Production-grade engineering skills for AI coding agents.

Star TencentCloud / Octop A smarter, self-hosted AI assistant — multi-user, multi-agent.

Star Fission-AI / OpenSpec Spec-driven development (SDD) for AI coding assistants.

Star ankitects / anki Anki is a smart spaced repetition flashcard program

Star anthropics / knowledge-work-plugins Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork

更多值得一看(内容池 71 条)
An Architecture for Long-Horizon Agents: Levels, Ticks and Cascaded Intelligence

arXiv:2609.19519v1 Announce Type: new Abstract: Language-model agents are increasingly asked to carry out work spanning days or weeks, such as an operations remediation or a research programme. Such a task outlives any context window, any process and any interval at which a person can attend. In this paper, we argue that a long-horizon agent must run continually without forgetting before it can learn continually. This ability lies in the harness around the model rather than in the model itself.

RetireOPD: Self-Retiring On-Policy Distillation for Agentic Reinforcement Learning

Multi-turn agents trained with reinforcement learning (RL) receive a single scalar reward per trajectory, which motivates self on-policy distillation (OPD) to supply dense token-level supervision from a self-teacher with privileged task skills, letting a skill-free student internalize them. This recipe, however, is undermined by two findings in agentic tasks: privileged information alone does not always make a teacher reliable, and the benefit of teacher supervision is stage-dependent. We theref

OpenAI and Microsoft knew they were starting a ‘doom loop’ for the web

Recently unsealed court documents in the New York Times' case against OpenAI and Microsoft are pretty damning. The companies' own documentation warned that it was starting a "doom loop" that would damage the web, characterized its scraping of data to train its models as the "largest theft of labor in human history," and that it […]

When EOS Tokens Disagree: Understanding Length Inflation in On-Policy Distillation

We study length inflation in on-policy distillation (OPD), where student responses can become excessively long and even exhaust the generation budget. We identify termination-token mismatch between base students and post-trained teachers as an important source of this behavior. Across Qwen3, Llama, and Gemma, the two models can place their stopping probability on different EOS tokens, even when their declared stopping sets are identical. This mismatch can suppress the student's preferred termina

Show HN: Scry, programmable internet search w/ congestion pricing

Meet Scry, a 500 TB NVMe internet index in ClickHouse that you can run ~arbitrary readonly SQL and some of Datalog over, and I handle the problem of resource-contention with congestion-based micro-auction pricing. When there's capacity, the service is free for non-commercial use. --- Hello. It's 2026, we're training simulated fruit fly brains to play Beat Saber, do we still have to be stuck with internet (re)search as fn: natural language -> black box we can't do anything about -> ranked_list/su

JEPA-Anything: Learning Predictive Models across Different Worlds

World modeling enables intelligence to anticipate consequences, guide interventions, and learn from interaction. Yet predictive models remain domain-specific: can a common learning principle support world modeling across radically different systems? We introduce JEPA-Anything, a domain-agnostic framework based on orthogonal predictive factorization (OPF). Extending joint-embedding predictive architectures, OPF decomposes latent targets into complementary factors, learns them through dedicated pa

Characterizing Web Search by Conversational LLM Agents: From Search Decisions and Strategies to Results and Responses

arXiv:2609.19244v1 Announce Type: new Abstract: Conversational LLM agents increasingly rely on Web search, yet the end-to-end lifecycle of agentic search remains poorly understood. We present the first study of Web search across four major conversational platforms (ChatGPT, Claude, Grok, and DeepSeek), combining real-world user interactions (invivo) with controlled experiments using the same platform's models by their APIs (invitro). We investigate the quality of agentic decisions to invoke Web

Compositional Reasoning in Language Models under Reinforcement Learning Post-Training

arXiv:2609.19465v1 Announce Type: new Abstract: Compositional reasoning is critical for real-world problem solving: since training data is necessarily limited, models must generalize by composing learned skills in new ways. While post-training methods such as reinforcement learning (RL) have substantially improved the reasoning abilities of language models (LMs), their effects on compositional reasoning remain less well understood. We propose a dependency-graph framework to formalize composition

Position: It is Time to Virtualize Foundation Models with a Self-evolving Operating System Layer

arXiv:2609.19203v1 Announce Type: new Abstract: AI applications have shifted from single, monolithic foundation models (FM) to compound agentic systems. Yet today's stacks remain fragmented: even as protocols (e.g., MCP, A2A) ease tool/agent connectivity, each framework embeds an implicit runtime for state, memory, budgets, and guardrails, making behavior non-portable and governance brittle. It mirrors computing before operating systems, when every program re-implemented basic services. This pos

Safety Beyond the Interface: Detecting Harm via Latent States in Large Language Models

arXiv:2609.19472v1 Announce Type: new Abstract: Autonomous systems increasingly rely on Large Language Models (LLMs) yet the safety infrastructure surrounding these models introduces latency and compute overhead. This limits utility in resource-constrained, time-critical deployments. Existing external guardrail models remain blind to the model's internal workings, creating a fundamental assurance gap. We ask: does the model already know when the content is harmful? We extract activations from LL

LLM-as-an-Improver: Turning Verification into Better Candidates

arXiv:2609.19515v1 Announce Type: new Abstract: Verifier-based selection improves LLM performance by generating multiple candidate solutions and using a verifier to select the most promising one. However, existing methods typically treat verification only as a ranking step and discard its feedback once a fixed candidate pool has been evaluated. In this paper, we ask whether verification can also improve the candidate set itself. To this end, we introduce LLM-as-an-Improver and propose Verify--Re

MiniMax Code goes open source

MiniMax has open-sourced the terminal version of MiniMax Code: How can developers verify the content that encoding proxies read, send, and store? This is a topic that has been widely discussed recently. Open sourcing the agent doesn’t automatically answer every privacy or security question, but it gives the community something concrete to inspect. The repository includes: interactive TUI and headless execution code editing, shell commands, diffs, and test verification permission controls and san

AI hallucination nearly triggers US military operation

“It’s important for service members to understand the uncertainty inherent to LLMs," a GovAI research scholar warns.

World model companies are keeping a lot of secrets

Everyone in the world-models space is sitting on a pile of cash and a ton of buzz, but good luck getting anyone — from the founders to their own data suppliers — to tell you what they're actually building.

Being a computer scientist who refuses to find anything about LLMs interesting right now is a bit like being a geneticist who refuses to find anything interesting about the recently opened Jurassic Park. Tags: llms , ai , generative-ai

QVAC Genesis III: A Large-Scale, High-Quality Open Synthetic STEM Corpus for Efficient Language Model Pre-Training

arXiv:2609.19513v1 Announce Type: new Abstract: High-quality pre-training data is a critical bottleneck for educational and STEM-specific language models targeting edge AI and on-device deployment where token budgets are tightly constrained. While major organizations train ever-larger models on private corpora, the open ecosystem lacks STEM-focused synthetic datasets that deliver high per-token learning value efficiently for small models. To address this gap, we introduce QVAC Genesis III, a 191

RiskChainBench: A Benchmark for Obfuscated Platform Message Restoration and Evidence-Grounded Web Investigation

Platform abuse campaigns conceal redirection instructions with emojis, homophones, character decomposition, and redundant symbols, then route users through disguised links to services associated with pornography, fraud, gambling, or illicit transactions. Existing benchmarks evaluate obfuscated text and risky webpages separately, obscuring how target recovery affects downstream evidence acquisition. We introduce RiskChainBench, pairing 3,600 synthetic token-text restoration inputs from 600 source

M9RProduct Hunt1 minAI开发工具

Multiplayer space for your AI coding agents and teams Discussion | Link

Looking at jev launch website and demo video on x.com…. it seems like it’s a very intelligent classifier with custom prompt and custom criteria instruction reading capabilities. It can do well defined narrow and well defined task Me, following NLP since good old days of word embedding and BERT,,, be like asking…. Isn’t that BERT? yeah i know BERT need fine tuning to adapt to custom domain, but can Jev be like generalised form of BERT?

Hey community, Jovan from UkisAI here, We're the team behind Swift Qwen3.8 27B, the Qwen model with token usage and overthinking error improvements Our estimate is that we can make a great improvement to Bonsai 2, as our testing indicates that it suffers greatly from overthinking loops and in general high token usage impacting it's performance. My ask for you is: Is a Swifted version of Bonsai 2 something you guys would enjoy? If yes, what size is the most relevant. 1-bit, 2-bit or both? Thank y

do you want some omni? here is omni for you 1. 🧭 Overview This repository hosts two checkpoints of the Realtime-Venus system: Realtime-Venus-Omni ( Realtime-Venus-Omni/ ): the 9B audio-visual interaction model. It continuously watches and listens, decides whether and when to respond, and generates text and speech on a shared causal timeline. Adapted from MiniCPM-o 4.5, it supports proactive interaction, semantic interruption handling, and training-free long-video memory. Realtime-Venus-Audio ( R

Prism-ML Bonsai 2 Joins Our Qwen3.8 Quantization Comparison

Hey r/LocalLLaMA , Prism-LM recently released its Bonsai 2 QAT models based on Qwen3.8, and they quickly gained traction. In our evaluation, the models strike a strong balance between throughput and quality, reaching roughly 91.5% on our composite benchmark . We wanted to see how they compare under the same methodology we use for the rest of our Qwen3.8 evaluations, so we ran Bonsai 2 through our own benchmark suite. One important clarification: these are our evaluation results, not Prism’s repo

Do AI Agents Understand Computer Architecture?

arXiv:2609.19387v1 Announce Type: new Abstract: Agents are increasingly asked to design hardware, and increasingly reported to succeed. Such reports establish that a design improved; they cannot establish why. An agent that improves an accelerator may be reasoning about the machine, or may be searching competently over knobs whose meaning it never recovers -- and only the first transfers to the next architecture. Existing evaluations cannot tell the two apart, because they vary the agent while h

Gavin Newsom is pushing for an AI kill switch

California Gov. Gavin Newsom (D) is positioning the state to take the lead on AI oversight, including the potential to mandate a "kill switch" for frontier models, with a new executive order issued Friday. Newsom's order directs the state to convene a group of experts that will deliver recommendations within two months on how to […]

悬垂效应One Useful Thing1 minAI研究
The Overhang

Using your deep knowledge, wide knowledge, taste, and agency

Dario Amodei and other AI leaders want to ‘Pace the Frontier’ but…how?

A week after an Anthropic researcher’s doomsday warning rattled the AI world, the company’s CEO Dario Amodei has outlined his plan to “pace the frontier” of AI development. The proposal leans on independent safety evaluators and coordination between AI labs in democratic countries, and it’s already picked up some industry support, along with some pointed pushback from Nvidia’s Jensen Huang. Watch […]

The Download: AI’s extinction risk and bioweapons threat

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Could AI really kill us all? Your questions, answered On Wednesday, MIT Technology Review hosted a live Roundtables event that asked the question many seem to be asking right now: could…

The specter of AI-enabled bioweapons is a wake-up call for biotech

In recent weeks, leaders of some of the biggest AI companies have warned that the very tech they are developing is dangerous. Last weekend, Anthropic CEO Dario Amodei argued that AI carries serious risk and that progress should be slowed. OpenAI CEO Sam Altman responded on X: “I agree with Dario that we need to pace the…

Salesforce Agentforce: Bridging the Enterprise AI Gap from ‘Vibe Coding’ to Battle-Tested Orchestration

Building an AI prototype is easy, but operating autonomous agents at scale requires production-grade tooling. Salesforce Agentforce bridges the gap from "vibe coding" to enterprise reliability by combining synthetic stress-testing, real-time optimization, dynamic agentic UIs, and deterministic guardrails—as proven by Southwest Airlines' 7x ROI. The post Salesforce Agentforce: Bridging the Enterprise AI Gap from ‘Vibe Coding’ to Battle-Tested Orchestration appeared first on MarkTechPost .

Can MiniMax-H3 Reason About the Physical World? An Evaluation of Omni-Modal Generative Model

Recent Omni-Modal Generative Models (Omni-Models) have advanced content generation toward unified modeling of text, images, video, and audio. MiniMax-H3 exemplifies this transition by combining multimodal context understanding with joint audio-visual generation in a shared latent framework. Its unified architecture raises a fundamental question: Can multimodal alignment improve the model's world reasoning, and what new evaluation paradigms do omni-modal inputs enable? To investigate this questio

What Do We Expect from LLMs? Mapping the Design of LLM Benchmarks

arXiv:2609.19182v1 Announce Type: new Abstract: Benchmarks are central to how progress in large language models (LLMs) is assessed and communicated. Yet model rankings alone reveal little about how evaluation requirements themselves are changing. The expanding variety of benchmarks offers another perspective: what researchers expect LLMs to do, and what they count as successful performance. We systematically map 14,767 papers introducing or updating evaluation resources from arXiv submissions be

Is HF starting to move against abliterated models?

Baseten launched a new safety infrastructure standard alongside its Base Labs research arm on Wednesday, partnering with Hugging Face and Goodfire AI to build safety evaluation and monitoring infrastructure for open-weight models. The announcement lands amid debate for the safety of open-weight models — which can be made dangerous by removing their safeguards through a rising technique known as abliteration . The scale of the problem is massive: Hugging Face, which hosts open source AI models, c

Verifiable Social Reasoning for LLM Assistants

LLM assistants are widely used for daily social advice, yet evaluating their social reasoning in such consultation settings remains challenging since (i) it requires setups where the assistant learns about social situations from subjective user narratives, and (ii) social properties, such as others' intentions, typically lack verifiable ground truth. To address these challenges, we introduce Fuse, a multi-agent simulation framework for studying user-mediated social reasoning. In Fuse, a target a

Partnering with Accenture on embedded evaluation

We're partnering with Accenture on independent evaluation of frontier AI. This is an important step toward the commitment, made in our CEO’s essay “We Must Pace the Frontier,” to embed evaluators within Anthropic. The partnership will be led by Faculty, Accenture’s specialist AI business, and will include evaluating and red-teaming models, conducting alignment assessments, and testing model safeguards. Accenture helps businesses and governments deploy AI across many industries. Their understandi

bonsai's document reveal how much cherry picked their headlines are

bonsai claim 98.2% intelligent retained, but their own documents show Ternary Bonsai 2 27B reaches 52.8 and 60.8, respectively, compared with 69.7 and 80.6 for Qwen3.5-27B, retaining roughly three quarters of the full-precision performance on both benchmarks. that qwen3.5 is a typo cause these are qwen3.8 numbers, altho qwen3.5 numbers are bonsai_2/q3.5 52.8 / 41.6 = 126.9% bonsai_2/q3.5 60.8 / 72.4 = 84.0% Long-context and coding performance. This release also delivers on the roadmap set out in

JEV architecture

My understanding so far: You take an LLM and use it without thinking (That's what openjev does?) You leave out the text generation in the end and take the confidence score in the matrix before that phase That's it. Right? They gave it a mysterious marketing name.

Still on the Jev waitlist? I hosted OpenJev. It's free, go play with it

TypeSafe announced Jev on Tuesday: you give it data plus typed questions (yes/no, pick-one, 0–N scale) and it returns a probability for every option, crazy fast. I signed up and then refreshed my inbox. A lot. Meanwhile Matt Mastracci opened vLLM PR #57250 , which does the same trick on DiffusionGemma with a single denoising step. The model basically fills in a multiple-choice bubble sheet. My "quick look" turned into three straight days, and now there's OpenJev : an open-source server with Jev'

每天早晨,一份为你精选的科技日报