vibehacker
News
Perplexity ·

Perplexity red-teams SPACE: no VM escapes, four models bypass egress

Perplexity’s Escaping SPACE Part I gave nine models root in the sandbox behind Perplexity Computer: no VM-to-host escape in 108 runs. With partial network access, four models (Opus 5, GPT-5.6, Kimi K3) reached a blocked URL via DNS spoofing or shared-IP OCR; both paths were patched, and 8 of 10 other sandboxes shared the IP issue.

More news

View all

ZCode finishes remediation: cloud data wiped, opt-in uploads only

Zhipu said ZCode’s Alibaba Cloud OSS bucket from the workspace upload incident is gone (verified by CAICT and NSFOCUS), open source ZCode is at 3.14.3 under Apache 2.0 with a “no upload unless the user starts it” rule, and paid users get quota reset cards plus 100M token packs through Oct 7…

TechNode

OpenRig: multi-agent harness for Claude Code and Codex teams

OpenRig’s Apache 2.0 @openrig/cli lets you define Claude Code and Codex teams in YAML and boot them with one rig up —local daemon, tmux seats, TUI, and MCP for topology control. Install with npm i g @openrig/cli ; run rig setup dry run first because launch writes provider hooks and workspace trust…

GitHub / OpenRig

Nvidia ships OpenShell + Sentry to contain rogue AI agents

Nvidia’s Open Agent Safety Platform pairs open source OpenShell (a CPU sandbox/policy boundary for agents) with Sentry on BlueField 4 DPUs that can quarantine breakouts in milliseconds. Huang says it would have blocked recent lab sandbox escapes; partners include Anthropic, Microsoft, and SpaceXAI—OpenAI is not listed…

TechCrunch

Claude Sonnet 5.5 now generally available in GitHub Copilot

GitHub made Claude Sonnet 5.5 generally available across Copilot Pro through Enterprise—VS Code, JetBrains, Copilot CLI, coding agent, Mobile, and more—billed at Anthropic list rates. Early tests matched Sonnet 5 on coding with fewer steps, tokens, and tool calls; rollout is gradual and admins gate it via model policy…

GitHub Changelog

Spotted something we missed? Start a thread.