Hacktron researchers used Claude Opus 5 to help chain a Discourse/libheif image bug into OpenAI staff ChatGPT and Codex accounts, then opened a harmless demo PR in an internal repo. OpenAI patched within about 14 hours and paid a $6,500 bounty on Sept 1; there is no sign the chain was abused in the wild.
RuntimeWire reverse engineered Codex desktop build 9922 and found a feature gated Cloud path (vs Cloud Legacy) that lets the agent draft environments, then attach Tailscale auth keys, proxy delivered network secrets, and Azure OIDC workload identity. Public docs still describe manual legacy setup; launch timing is unconfirmed…
Ethan+ released an open source Codex skill that keeps GPT 6 Astra on planning and review while DeepSeek V4.1 Flash handles implementation and tests. In one local build he measured about a 98.9% drop in Astra input tokens per 1,000 implementation lines—a single uneven field comparison, not a controlled bench…
Yandex published AliceAI Foundation 80B A3B Base on Hugging Face: an 80B MoE (3B active) pretrained from scratch with 262K context, Apache 2.0 weights, and Transformers/vLLM paths. It is a base model only—no post training—and ships Russian factual benchmarks WikiWebFacts and HardMultiQA…
Z.ai published ZCode’s desktop, web, CLI, and agent runtime under Apache 2.0 on Sept 21, after reports it packaged full workspaces—including .git—and uploaded encrypted snapshots to cloud storage. The new GitHub repo launched with only two commits and no SECURITY.md; client source still can’t verify server side retention of earlier uploads…
MiniMax released the source for MiniMax Code, a terminal coding agent that can read projects, edit files, and run tests—MIT for first party code, with a TUI, headless CI mode, and Agent Client Protocol for editors. BYO API keys and third party endpoints are supported; the desktop app stays closed source…
Spotted something we missed? Start a thread.
