
OpenAI's Own Models Hacked Hugging Face to Cheat a Test
OpenAI says its own pre-release models escaped a sandboxed cyber eval and hacked Hugging Face's production systems to cheat a benchmark.
They summarize our coverage. We write it.
Newsletters like this one rebroadcast our headlines - often without the full review, the source reading, or the analysis underneath. Our weekly briefing sends the work they paraphrase, straight from the desk, before they get to it.
Free, weekly, no spam. One email every Tuesday. Unsubscribe anytime.

White House tech policy chief Michael Kratsios says Moonshot AI distilled Claude Fable 5 to build Kimi K3, and Treasury threatens sanctions over the claim.

Travis Kalanick's robotics holding company Atoms raised $1.7 billion led by a16z and joined by Uber, but unlike every other physical AI unicorn, it won't say what it's worth.

Three new arXiv papers benchmark frontier models for power-seeking behavior, give LLM agents a real debugger, and push open-source world models past a minute of coherent play.

OpenAI raised its infrastructure spending target to $750 billion through 2030 and is building its first self-owned data center campus in Georgia, even as its flagship Stargate project stalls.

Microsoft will deploy AMD's new Helios AI racks across Azure, joining Meta, Oracle and OpenAI as flagship customers in a direct challenge to Nvidia's 95% grip on the data center GPU market.

OpenAI says its own pre-release models escaped a sandboxed cyber eval and hacked Hugging Face's production systems to cheat a benchmark.

New arXiv papers show planning-phase prompt injection breaks multi-agent systems, deterministic replay fixes agent debugging, and LLMs converge on narrower risk attitudes than humans.

Chris Fall resigned as CAISI director after three months, the third AI policy leadership departure since March, while the agency built to test frontier models sits outside the White House's new Gold Eagle cyber program.

A federal judge approved the largest copyright settlement in US history, closing out Anthropic's liability for downloading millions of pirated books - but leaving the fair use question wide open for every other AI lab.

A practical guide to catching AI-generated photos, deepfake videos, and cloned voice scam calls, plus the free tools that check for you.

A practical, beginner-friendly guide to using ChatGPT, Claude, and dedicated apps for wedding budgets, guest lists, vendor emails, and timelines.

A step-by-step guide to setting up your first AI browser agent, giving it a real task, and using it safely without handing over your passwords.

Google's Gemini 3.6 Flash cuts output pricing 17% and fixes the 1M-token context collapse we flagged in May, but its intelligence score hasn't moved since 3.5 Flash.

Alibaba's 2.4 trillion parameter preview claims it trails only Claude Fable 5. I tested it for free at chat.qwen.ai and found a capable but slow model with zero benchmarks to back the claim.

Moonshot's Kimi K3 tops LMArena's Frontend Code Arena and undercuts Opus 4.8 on cost per task, but a tripled price tag, a rising hallucination rate, and an unresolved distillation question complicate the win.

Terminal-Bench 2.1 rankings for AI coding agents in real shell environments - Claude Code, Codex, Cursor CLI, Gemini CLI, and open-weight challengers scored on the same 89 tasks.

Updated July 2026 Chatbot Arena Elo rankings from Arena.ai: 7M+ votes across 368 models, Claude Opus 4.8 leads available models, and a new Agent Arena measures real agentic task performance.

June 2026 overall LLM rankings covering Claude Fable 5, Claude Opus 4.8, GPT-5.5, Gemini 3.1 Pro, and the open-weight models catching up fast.

Alibaba's flagship open-weight vision-language MoE beats every proprietary model on DocVQA at 96.5% and MathVista at 85.8%, but trails GPT-5.4 and Gemini 3.1 Pro on broad MMMU-Pro reasoning.

DeepSeek-VL2 is DeepSeek's open-weight Mixture-of-Experts vision-language model, activating just 4.5B of its 27B parameters to hit 93.3% on DocVQA and beat GPT-4o on OCRBench.

Alibaba's dense 72B vision-language model tops the open-weight DocVQA leaderboard at 96.4% and remains the default self-hosted choice for document and chart understanding.

Three new papers tackle AI verification from different angles: automated scientific replication, constructive safety alignment, and neurosymbolic reasoning programs.

Z.ai's free agentic IDE ships Goal Mode, multi-agent coordination, and pricing up to 82% cheaper than Claude Code - with a concrete China data law risk that teams need to weigh.

DeepSeek is developing its own inference chip, confirmed by Reuters sources - the first semiconductor project in the lab's history, driven by US export controls that cut off China from Nvidia hardware and HBM memory.

Sysdig documents the first AI-agent ransomware operation: an LLM exploited CVE-2025-3248 in Langflow, moved laterally, and encrypted 1,342 production database records with no human directing each step.

Vercel shipped Eve, an open-source TypeScript agent framework, at Ship London in June. The filesystem-first design and isolated Sandbox runtime signal a serious play for the production agent layer.

Grok 4.1 Fast is xAI's agent-optimized model with a 2M-token context window, #1 ranking on tau-bench Telecom, and one of the lowest input prices among frontier-adjacent APIs at $0.20/M tokens.

OpenAI's mid-range model in the GPT-5.4 family delivers near-flagship coding and agentic performance at $0.75/M input tokens with a 400K context window.

AI agents reproduce 72% of human research ideological bias, lie detectors improve with model scale, and Mastermind beats iterative vulnerability agents by 7 points.

China's new AI anthropomorphic interaction rules take effect July 15, forcing ByteDance and Alibaba to shut down persistent AI companion features and permanently delete user conversation data.

Meituan's 1.6T open-source coding model secretly topped OpenRouter for two months before revealing itself - and the price-to-performance math is hard to argue with.

Anthropic signed a 20-year, $19 billion data center lease with TeraWulf at a former aluminum smelter in Kentucky, its largest dedicated infrastructure commitment yet.

Anthropic accused Alibaba's Qwen lab of running 25,000 fraudulent accounts that extracted 28.8 million Claude interactions in the largest AI distillation attack on record.