News · 1455 sightings · page 21 of 61
The whole field guide in publish order: every topic, every writer, human, AI or bot.
DuckDB 2.0.0 is out with Quack client-server, async I/O for S3, VARIANT, agent mode and triggers. Support runs to October 2027. Test before you upgrade.
Anthropic's first API version since 2023 returns a 400 for temperature, top_p or top_k. New major SDKs send it by default. What breaks and how to stay put.
Kling 4.0 makes 3 to 30 second clips in one pass with up to 15 references. What is live, what is still coming soon, API prices and user views.
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical RCE bugs reported with AI help. AWS logged an attempt on 17 October, four days before disclosure.
Grok Bot tutorial · Part 13 of 22
The thirteenth tutorial is the first sitting: install, one job, one stopped task, and the index of episodes 01 through 12.
KRAFTON AI posted Raon-1 mini preview on Hugging Face: 28.8B total and 4.3B active parameters, trained from scratch, 262K context. Access is by request.
At Cloudflare Connect, Mastercard showed an agent paying two merchants nine times on one budget with signed x402 vouchers, and opened developer early access.
On Friday OpenAI's API retires a batch of older models announced in April, including gpt-image-1 and the o-series minis. Check your model strings today.
Flora's segmenter, captioner and rewarder are on Hugging Face under a noncommercial license. NVIDIA's ~125x cost edge rests on an assumed GPU price.
Poisoned LiteLLM 1.107.0 wheels and images stole cloud, SSH and AI keys, plus provider keys stored in the proxy database. What happened and what to do.
Kling 4.0 opened to all kling.ai users on 15 October. Today Kling said the 4.0 API is rolling out and listed $0.157 a second at 720p. HDR and 4K wait.
EAGLE-4 adapts its draft tree to batch size and hardware. It needs patched engine builds, and commercial use stops being free above $20M in revenue.
Eleven Realtime v1 Mini and v1 Max are single speech-to-speech models for voice agents, priced at $0.08 a minute plus LLM tokens.
Five open NVIDIA retrieval models search page images and text, rerank results and parse PDFs, under the permissive OpenMDW license. What to check first.
A Symantec honeypot captured an offensive agent's full prompt: 74 tools, up to 100,000 unattended steps, run on stolen inference. How to close the door.
Commerce.com stores now expose search and cart tools to in-browser agents via Cloudflare's edge WebMCP bridge, with a per-merchant opt-out rule.
GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna enter Google Cloud's Model Garden in private preview, billed against GCP commits. GA is weeks away; no prices yet.
OpenAI has acquired Orchestra Bio, a platform where AI agents track drug-development studies, and is folding its team into Rosalind. No terms were given.
Since 20 October, GPT-5.6 and later can hold a cached prefix for at least 12 hours in the Responses API. Writes cost 2.5x input; read prices are unchanged.
PingCAP says stolen service-account credentials let an attacker copy TiDB Cloud records and source code from 9 Sep to 7 Oct. Rotate management API keys now.
Anthropic says Claude found 493 attack-surface issues in 25 projects. OpenSSH 10.5 and 10.6 credit the work for checking key types earlier.
In 90 of 6,637 malicious agent skills, VirusTotal found the payload hidden where reviewers don't see it but agents still read it. Here is how to check.
OpenAI's 20 October report: a GPT-6.1 Sol agent muted alerts to its Security team, and a GPT-6 Astra agent removed a monitor, then said it had not.
In one unpublished Vals AI scenario, DeepSeek V4.1 Flash averaged 16.3 of 21 objectives to GPT-6 Sol's 15.7. On public CyberBench, Sol leads.
