AI News HubLIVE

Agents updates

Updating IP Regulations for AI Distillation

Copyright law is ill-suited for AI distillation. This article explores its impact on innovation and examines four potential regulatory approaches, arguing for societal consensus before US AI companies unilaterally set rules.

  • Copyright is a human-made incentive system, not a natural right, and is largely irrelevant to AI model training.
  • Distillation involves training a new model on outputs from another model, raising questions about fairness and innovation.
In-site article

SafeAI – Open-Source Static AI Risk Analyzer for AI Agents

SafeAI is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It runs entirely offline, never executes agents or calls LLMs, and integrates into CI/CD pipelines. It detects 8 AI frameworks, identifies capabilities like shell execution, filesystem access, and generates reports in SARIF, JSON, HTML formats.

  • SafeAI statically analyzes AI agent code early in development to discover risks and capabilities
  • Supports 8 frameworks including LangGraph, CrewAI, detects prompt injection, tool misuse, etc.
In-site article

Mayor Mamdani Says Landlords Can't Use AI Images to Advertise

New York City mayor Zohran Mamdani released a 'Rental Ripoff Report' recommending that landlords and realtors disclose the use of AI in altering rental listings, including images. The crackdown follows thousands of tenant complaints and aims to combat deceptive practices, supporting tenant unions and expanding bargaining rights.

  • Mayor Mamdani's report requires landlords to disclose AI-altered property images.
  • AI-generated deceptive images are increasingly used in real estate listings.
In-site article

AI for Bug Bounty with VulneraMCP

This article introduces VulneraMCP, an AI-enhanced security testing platform built on ZAP. By integrating machine learning through the Model Context Protocol (MCP), it achieves adaptive vulnerability detection and fully automated workflows. The system uses ZAP's REST API for core scanning, dynamically generates payloads based on training data from HackTheBox, PortSwigger Academy, and real-world bug bounty reports, and significantly improves detection accuracy. Author Telmon Maluleka details the architecture, components, workflow, and results.

  • VulneraMCP combines ZAP's scanning engine with AI learning for advanced bug hunting
  • Architecture includes ZAP integration layer, MCP proxy layer, learning engine, and database
In-site article

$20/Month: The Price Ceiling Every AI Company Copied

Almost every major AI subscription, including ChatGPT Plus, Claude Pro, Perplexity Pro, and Google AI Pro, has settled on $20 per month. This price originated from OpenAI's February 2023 launch, designed to subsidize free-tier costs rather than reflect product value. Competitors adopted the number through price anchoring, not independent cost analysis. The pattern is now repeating at higher tiers with $100 and $200 plans.

  • $20/month pricing originated from OpenAI's ChatGPT Plus in Feb 2023 as a stopgap to subsidize free users.
  • Competitors copied the price via anchoring rather than cost-based calculations, creating an industry default.
In-site article

Show HN: Graph Context Engine for Reliable AI

Kritama's Fractal Context Engine enables developers to build reliable AI assistants with dynamic context switching, observable intelligence, small model cost advantages, and programmable policies using HCL and Markdown.

  • Dynamic context switching keeps model focused without noise
  • Observable intelligence allows systematic debugging
In-site article

NVIDIA Released DeepStream 9.1: Bringing Agentic AI to Vision AI With 13 Skills and Multi-View 3D Tracking

NVIDIA DeepStream 9.1 introduces 13 agentic skills that let coding agents like Claude Code and Codex build multi-camera video analytics pipelines from natural-language prompts. Multi-View 3D Tracking (MV3DT) fuses per-camera detections into one shared 3D world with a globally consistent object ID, while AutoMagicCalib (AMC) removes manual camera calibration. The release also adds JetPack 7.2 support and a unified open-source GitHub monorepo.

  • DeepStream 9.1 offers 13 agentic skills for natural-language driven multi-camera vision pipeline creation.
  • MV3DT enables cross-camera 3D tracking with globally unique object IDs without manual calibration.
In-site article

The first industrial operations benchmark for agents

SolarBench is a new benchmark for evaluating AI agents in managing solar power plant operations. It simulates a remote operations desk handling alarms, telemetry, work orders, and parts inventory. The best model, Claude Fable 5, succeeds in 53.8% of tasks but often at excessive cost. Key gaps include probabilistic cost-benefit trade-offs and information source prioritization.

  • SolarBench is the first benchmark for AI agents in industrial operations, focused on solar portfolio management.
  • The simulated week stresses alarm triage, repair, parts ordering, and stakeholder communication.
In-site article

What a $20 coding subscription actually buys

Using Tailscale's Aperture gateway to track token consumption in a Claude Pro subscription reveals the real costs behind the flat monthly fee. From $0.31 for a greeting to $3.29 for building a game and $32.76 for a complex project, the article shows how lighter users subsidize heavy ones, and discusses Aperture's features for cost tracking, model selection, guardrails, and the importance of understanding usage patterns to prepare for inevitable repricing.

  • Track token costs with Aperture to see what subscriptions actually cost per request.
  • Example projects cost $0.31 for a greeting and $3.29 for a game, varying by usage.
In-site article

OpenAI Strategic Lead Defines Open-Source AI as Dystopian Hellscape

An OpenAI strategic lead characterizes open-source AI as a dystopian hellscape, while independent observations highlight the strong performance of the Kimi model, rivaling top public models.

  • OpenAI strategic lead criticizes open-source AI
  • Kimi model shows competitive performance in agentic coding
In-site article

Better Than Free: How to Differentiate in the Age of AI

Kevin Kelly's classic essay 'Better Than Free' explores how creators can sell uncopyable 'generative' values when perfect copies are free. He identifies eight such values: Immediacy, Personalization, Interpretation, Authenticity, Accessibility, Embodiment, Patronage, and Findability. These remain crucial in the AI era.

  • When copies become abundant and free, creators must sell what cannot be copied.
  • Kevin Kelly proposes eight 'generatives' like immediacy, personalization, and interpretation.
In-site article

Studying the Role of Sandboxing for AI Control

A study on AI sandboxing found no aggregate improvement in safety or usefulness, but the 'request website' permission model based on the principle of least privilege showed the best qualitative evidence and is expected to remain effective.

  • Sandboxing restricts the attack surface rather than stopping attacks, increasing safety only when it blocks attacks that would bypass monitoring.
  • The 'request website' model requires AI agents to request specific website permissions, approved by a trusted model, following least privilege.
In-site article

Talon – a self-hosted harness for long-lived AI agents

Talon is a multi-platform, self-hosted AI agent framework supporting Telegram, Discord, Microsoft Teams, terminal, and a cross-platform desktop/mobile app. It offers pluggable backends (Claude Agent SDK, Kilo, OpenCode, Codex, OpenAI Agents) and full MCP tool access, with background agents, goal management, skill system, event bus, and hot-reloadable plugins. The architecture is clean, with frontend and backend independent, making it highly extensible.

  • Supports multiple frontends (Telegram, Discord, Teams, terminal, desktop/mobile) and backends (Claude, Kilo, OpenCode, Codex, OpenAI Agents) with rich MCP tools.
  • Features background agents (heartbeat, dream), persistent goals, skill system (SKILL.md), and triggers for proactive task advancement.
In-site article

Show HN: OpenCareLoop - Solve your family's health, one loop at a time.

OpenCareLoop is an LLM-based agent for managing family health, focusing on long-term tracking of each member's health data with structured workflows for medical issues and a loop feature for tracking lifestyle and medication changes. It has been used to solve chronic pain, manage pain levels, assist IVF decisions, and more, but emphasizes that AI outputs must be verified by doctors.

  • LLM-powered agent for family health management with long-term history tracking
  • Structured workflows and a 'loop' to track lifestyle, medication, and habit changes
In-site article

Soofi S: Our first model for industrial AI in Europe

The Soofi consortium unveils Soofi S, a 30B Mixture-of-Experts model trained on 27 trillion tokens, focused on German and English, for industrial applications requiring control and transparency. The model is currently in testing with partners and not yet publicly available.

  • Soofi S is a 30B MoE model trained on 27 trillion tokens, optimized for German and English.
  • Designed for industrial use cases including technical documents, code generation, and agentic AI.
In-site article

PrimeTask: An Offline-First Work OS with BYO AI Through MCP

PrimeTask is a one-time purchase desktop app that integrates tasks, projects, CRM, calendar, focus mode, and a visual canvas, all offline-first. It supports Bring Your Own AI via the MCP standard, allowing users to connect their preferred AI models. The app emphasizes data ownership and privacy, with no subscription fees.

  • PrimeTask is an all-in-one productivity system combining tasks, projects, CRM, calendar, and more.
  • It operates offline-first, with data stored locally and a one-time purchase model.
In-site article

Build: Mobile-First AI Creation on Roblox

Roblox announces Build, a mobile-first AI creation tab within the app that allows users to turn text prompts into basic games. Combined with new AI tools in Studio, it aims to lower barriers for creators. Testing begins July 28 in New Zealand, with broader rollout in coming months.

  • Roblox launches 'Build', a mobile-first AI creation tab enabling game generation from text prompts.
  • AI models trained on extensive 3D and gaming data produce functional objects and scenes.
In-site article

Show HN: Teya – Open‑source AI family agent on a wall‑mounted Android phone

Teya is an open‑source AI family agent that turns a cheap Android phone into a wall‑mounted smart home hub. It understands context, remembers personal facts, and performs tasks like shopping lists, calendar management, timers, reminders, expense tracking, and safe calling. Privacy is built in: all data stays on device, and conversation transcripts are never saved.

  • Runs on a cheap Android phone (Android 8.0+), no server needed.
  • Voice‑controlled, recognizes individual family members, and remembers personal details.
In-site article

Show HN: Slopsift – a local, graph-backed linter for AI writing

SlopSift uses a custom-trained dependency parser to detect canned arguments, unsupported claims, and filler in writing. It runs locally, respects privacy, and offers CLI and agent integration for automated linting.

  • Employs a small dependency parser to analyze word relationships and identify structural issues.
  • Fully local: model and rules run on-device without uploading data.
In-site article

Show HN: Turn a Suno song into a music video with beat-synced auto-editing

Paste a Suno or FlowMusic link or upload your own track, add a photo, and AI generates a cinematic music video with beat-synced editing, lip-sync, and more. Free trial with 1,250 free credits, ready in minutes.

  • Supports Suno/FlowMusic links or uploaded audio; add a photo and style prompt, AI produces a music video.
  • Features lip-sync, multi-model pipeline (storyboard, image gen, video gen, lip-sync, final edit).
In-site article

KDnuggets Weekly Roundup: Week of July 13, 2026

This week's highlights include stopping if-else chains with the registry pattern, 12 ways to reduce LLM latency and costs, 5 real-world SQL projects for your portfolio, Git worktrees for AI development, structured generation with Outlines, 7 Python frameworks for local AI agents, 10 YouTube channels to stay ahead in AI, getting started with Conductor for Gemini CLI, 5 free resources on agentic AI, and working with Pi coding agents.

  • Registry pattern replaces brittle if-else chains for extensible code
  • Optimize LLM inference by minimizing tokens, model routing, and caching
In-site article

Bound – A deterministic control harness for AI agents

BOUND is a lightweight control harness that adds a deterministic evaluation step after each agent action, using observable evidence to decide whether to ACCEPT, RETRY, REPLAN, or ROLLBACK, preventing unnecessary refinement and regressions.

  • Deterministic decision engine using observable evidence
  • Four decisions: ACCEPT, RETRY, REPLAN, ROLLBACK
In-site article

Show HN: Open-source skills that make any AI agent write native social posts

Inklate releases open-source skills that teach AI agents to learn your strategy, voice, and platform-native format, producing LinkedIn posts, X threads, carousels, video scripts, and more—no accounts or APIs required.

  • Open-source skill set for AI agents to create native social media content.
  • Learns user context and voice through interviews and writing samples.
In-site article

Controlling Reasoning Effort in LLMs

This article explores how to develop reasoning models with multiple effort modes, covering the evolution from o1 and DeepSeek-R1 to GPT-5.6, and key techniques such as RLVR training, inference scaling, think tokens, and reasoning mode toggles.

  • Reasoning models output intermediate reasoning traces, distinguishing them from conventional LLMs.
  • RLVR training rewards only final answer correctness, not the reasoning trace.
In-site article

Go Micro – An agent harness and service framework in Go

Go Micro is an agent harness and service framework for Go. It turns services into AI-callable tools, agents into services with LLMs, and workflows into durable code paths. It supports MCP, A2A, and x402 protocols, with built-in planning, delegation, and safety layers.

  • Go Micro provides an agent harness with tools, memory, guardrails, and workflows.
  • Services automatically become AI-callable tools; agents are services with LLMs.
In-site article

Chasing the AI High: Clay, Kilns, and the Red Queen's Race

This article explores the pitfalls of over-relying on AI coding agents, drawing parallels to the Red Queen's Race from 'Through the Looking-Glass.' It argues that removing human friction in software development—like code review and design debates—leads to fragile, unfired 'clay' code that cannot withstand pressure. The author warns that the race to ship faster with AI creates a doom loop of increasing complexity and fragility.

  • AI-generated code is like unfired clay: fast to shape but lacking structural integrity.
  • The Red Queen's Race metaphor illustrates how AI forces teams to run faster just to stay competitive, increasing complexity.
In-site article

AI Mania Is Eviscerating Global Decision-Making

Based on direct observations, the author argues that organizations worldwide are gripped by AI mass hysteria, with nearly all AI projects failing while employees and executives are pressured to profess faith in AI, suppressing rational decision-making.

  • All AI projects observed by the author's team have failed, with a 0% success rate.
  • Internal chatbots are barely used, and customer-facing chatbots provide poor experiences.
In-site article

Timeline Studio

Timeline Studio is a local-first AI video editor that runs in the browser, combining a CapCut-style multi-track timeline with browser-side AI voiceovers, automatic captions, vision tools, talking-avatar generation, and deterministic offline export.

  • Multilingual AI voiceovers, automatic captions, smart framing, portrait matting, vocal separation, and digital human generation.
  • Full video editing capabilities including multi-track timeline, keyframe animation, filters, effects, stickers, and more.
In-site article

We run 100% agentic coding at a €2M ARR healthcare SaaS

appointmed shares its experience with 100% agentic coding in a healthcare SaaS, emphasizing that agentic coding does not replace engineering judgment but shifts effort to task shaping, codebase legibility, and rigorous review.

  • Agentic coding doesn't replace engineering judgment; responsibility remains with humans.
  • Clear task descriptions and well-structured codebases are prerequisites for effective agent work.
In-site article

Google Cloud’s Always-On Memory Agent Replaces RAG and Embeddings With Continuous LLM Consolidation on Gemini 3.1 Flash-Lite

Google Cloud's generative-ai repository ships the Always-On Memory Agent, a reference implementation that treats memory as a running process. Built on Google ADK and Gemini 3.1 Flash-Lite, it uses no vector database and no embeddings. Instead, an orchestrator routes to Ingest, Consolidate, and Query sub-agents that read, connect, and write structured memory into SQLite 24/7.

  • Always-On Memory Agent is a lightweight background process that runs 24/7, using Google ADK and Gemini 3.1 Flash-Lite.
  • It eliminates vector databases and embeddings, relying on an LLM to write structured memory to SQLite.
In-site article

AI Mania Is Eviscerating Global Decisionmaking

Based on firsthand observations and extensive industry conversations, the author argues that businesses and institutions worldwide are gripped by an AI-induced mass psychosis. Claiming a 100% failure rate for observed AI projects, he describes how executives irrationally mandate AI adoption, punish non-users, and foster a culture of 'AI-washing' and fake metrics. The article urges a rational reassessment of AI's limitations.

  • The author's team observed a 0% success rate in AI projects over 18 months; productivity gains are largely fabricated.
  • Executives are forced to publicly profess faith in AI, while internally engineers 'AI-wash' their work to meet mandates.
In-site article

Agentic AI Is Taking over Execution, Not Just Content Generation

A shift from copilot-style AI to agentic AI is transforming marketing. Autonomous agents now execute multi-step campaigns, optimizing budgets and channels without human intervention. While powerful, success requires human oversight of goals and boundaries.

  • Agentic AI systems autonomously execute marketing goals, unlike copilot tools that require prompts.
  • Examples include Salesforce Agentforce, HubSpot Breeze, Adobe Agent Orchestrator, and Braze Operator.
In-site article

AI and Creativity

Jack Conte, CEO of Patreon, argues that AI is a tool that will transform creative processes, not destroy creativity. Drawing parallels with historical resistance to the synthesizer, he emphasizes that human story and artistic vision remain central. Low-quality AI art is a passing phase, akin to clip art, while the real potential lies in AI expanding the creative process.

  • Jack Conte compares AI to the synthesizer: feared initially but eventually expanded creative possibilities.
  • AI changes the process of creation, not the art itself; human connection and storytelling are irreplaceable.
In-site article

Cicy-code – a local-first multi-agent coding workspace via npx

cicy-code is an open-source, local-first multi-agent development workspace that integrates tmux, WebTTY terminal, React frontend, AI gateway, and a skill marketplace. It ships as a single binary via npx, enabling users to quickly start an agent team in about 5 minutes.

  • Local-first multi-agent workspace for coding agents.
  • Integrates tmux, WebTTY, React, AI gateway, and skill marketplace.
In-site article

Show HN: Google Search Console MCP

An open-source MCP server that gives AI assistants read-only access to Google Search Console data across all properties via natural language queries.

  • Connects AI assistants (Claude, Cursor, etc.) to Search Console API via MCP
  • Read-only service account credential covers all properties at once
In-site article

A little experiment in evading AI detection

The author attempted to evade AI detection using Claude Code, 10 parallel agents, and basic tricks, but failed. The article details multiple attempts including using Wikipedia rules, Pangram API feedback, and mimicking specific author styles, all unsuccessful. The only success was manual rewriting of his own article, reducing AI detection score to 0%.

  • The author used AI to draft 84 blog posts, nearly all flagged as 100% AI-generated.
  • Attempts to evade detection via AI editing, mimicking human style, and copying a specific author's voice all failed.
In-site article

Gpu.ai $1k Grand Prize Buildathon August 22nd 2026: Build on Free Cloud GPUs

GPU.ai is hosting a global online buildathon from August 22-24, 2026, with a $1,000 grand prize and free GPU credits. Accepted teams must build AI apps, agents, APIs, or creative workflows using GPU.ai's affordable cloud GPUs. Only 50 teams are accepted.

  • GPU.ai Buildathon runs August 22-24, 2026, offering $1,000 grand prize and free GPU credits
  • Open to solo developers and teams; only 50 teams accepted
In-site article

In-browser agent that bulk enriches any webpage

Retriever launches agentic dataset enrichment running in your browser, allowing you to enrich contact lists from any webpage you're logged into, such as Luma event pages, with LinkedIn profiles, work emails, and more, then score and contact top prospects—all for about $1.25 per 500 records.

  • Works on any webpage you have open, using your existing logins to access attendee lists or employee directories.
  • From a single prompt, it extracts data from the page, matches against pre-indexed datasets, and performs live scrapes to fill in missing fields.
In-site article

Flathub's AI slop ban looks like it was the right call

New data shows that nearly three-quarters of apps rejected by Flathub for heavy AI usage are already abandoned, validating the platform's controversial ban.

  • Flathub banned AI-coded app submissions last month amid criticism.
  • Analysis of 120 rejected repositories found 73% are no longer active.
In-site article

AINews: Not Much Happened Today

A quiet day in AI news, but Kimi K3's release sparked debates on Chinese open-weight models nearing the frontier. Databricks raised $188B, OpenRouter may be acquired. Technical deep dives into K3's architecture, benchmarks, and agent scaffolding.

  • Kimi K3 release reignites China/US frontier gap debate
  • Databricks $188B Series M
In-site article

Tabstack by Mozilla

Tabstack is a Mozilla-backed platform that offers a unified API for extracting structured data, conducting research with citations, and automating browser tasks, without managing LLMs, browsers, or pipelines. It emphasizes privacy (no training on data, data purged) and uses the open-source browser engine Pilo to reduce token consumption.

  • Tabstack provides endpoints like /extract/json, /research, and /automate for data extraction, research Q&A, and browser automation.
  • All calls run on Mozilla-backed infrastructure; data is never used for model training and is promptly purged.
In-site article

Postlia – a social media scheduler that flags AI-sounding posts

Postlia is a social media management tool that enables scheduling and publishing to LinkedIn, Bluesky, Instagram, TikTok, Pinterest, YouTube Shorts, and Mastodon. It offers 25+ free tools including handle checkers, caption generators, and hashtag generators, many without signup. Paid plans start at $29/month with a 7-day free trial. Built by a two-person team, it emphasizes simplicity and support.

  • Supports 7 platforms: LinkedIn, Bluesky, Instagram, TikTok, Pinterest, YouTube Shorts, Mastodon (X/Twitter coming soon)
  • Includes free AI-powered tools for captions, hashtags, bios, and more
In-site article

PenEcho: An Open-Source Canvas with AI

PenEcho is an open-source shared canvas that integrates AI for handwriting, equations, diagrams, and spatial context. It operates through a browser canvas, server validation, and multiple executors (OpenAI API, Codex CLI, Claude CLI) to generate editable drafts. Users can move, resize, accept, or discard each AI suggestion. The canvas supports a 20,000 x 20,000 logical size with sparse rendering, local snapshots, and various configuration options. Requires Node.js 18.17+ and an API key or authenticated CLI tools. The article covers installation, executor selection, security, and cost estimation.

  • PenEcho is an open-source AI-powered shared canvas for handwriting, equations, and diagrams.
  • It captures content on the browser canvas, validates via server, and generates drafts using AI executors.
In-site article

AI Hasn't Shifted the Bottleneck From Coding to Code Review

Contrary to popular belief, AI hasn't shifted the bottleneck from coding to code review. The real constraint is downstream deployment batches, where changes accumulate after review. Over 90% of teams ship in batches, and speeding up code review only worsens the actual bottleneck.

  • The perceived shift to code review is a myth; the real bottleneck is deployment batches.
  • More than 90% of teams deliver changes in batches, with most having 2-10 pending changes.
In-site article

Open Source Extraction Service

LangChain has released a hosted version of an open-source extraction service that supports extracting structured data from PDF, HTML, and text files. The service is free to use but not intended for production workloads or sensitive data. It allows users to define extraction schemas, add few-shot examples, and switch between different LLM models. With a simple frontend, developers can quickly experiment and integrate the service into their own LangChain workflows.

  • LangChain launched a hosted version of an open-source structured data extraction service with a simple frontend.
  • Supports PDF, HTML, and text files; users can define custom schemas and provide few-shot examples.
In-site article

Overtraining as the path to human-like AI

The article examines Gwern's theory that overtraining large models on small datasets (grokking) can lead to more human-like general intelligence. It discusses current LLM limitations and proposes a training strategy opposite to mainstream approaches.

  • Grokking: sudden capability jump after prolonged training
  • Current LLMs lack deep generalization
In-site article

The Most Powerful People in A.I

July 15, 2026: Power in AI has shifted from compute and capital to control of capital flows. This list ranks individuals based on their influence over AI capital over the past 12 months, including Elon Musk, Sundar Pichai, Dario Amodei, Mark Zuckerberg, Sam Altman, and many others, detailing their strategic moves and investments.

  • AI power is no longer defined solely by compute and capital; control of capital flows is now key.
  • Elon Musk integrated xAI, SpaceX, and X into a $1.75 trillion vertical empire.
In-site article

Patreon Blocks AI Crawlers from Copying Content: 'Creators Deserve Compensation'

Patreon partners with Cloudflare to block AI training crawlers at the network level. CEO Jack Conte insists creators deserve consent, credit, and compensation. The move protects creator content while allowing search crawlers for discovery.

  • Patreon partners with Cloudflare to block AI training crawlers network-wide.
  • CEO Jack Conte announces on Instagram, emphasizing consent, credit, and compensation for creators.
In-site article

Build an Agentic Event Venue Operator with MongoDB Atlas, Voyage, and LangGraph

This tutorial demonstrates how to build an agentic event venue operator with persistent memory and operational context using MongoDB Atlas, Voyage AI embeddings, LangGraph, and optional Langfuse tracing. The demo scenario is the MongoDB Open, a fictional tennis tournament, where the agent handles weather disruptions, distinguishes visitor segments, and makes real-time decisions under capacity constraints. The article covers architecture, setup, UI walkthrough, memory store, vector search, hybrid search, and visual RAG.

  • Tutorial builds an agentic event venue operator with persistent memory and operational context, going beyond simple chatbot demos.
  • Uses MongoDB Atlas as the operational and memory layer, combined with Voyage AI embeddings and LangGraph workflows.
In-site article

GPT-5.6 Sol Ultra Built a Full Chrome V8 Exploit Chain from Patch Commits

In a recent benchmark, GPT-5.6 Sol Ultra autonomously constructed a complete Chrome V8 exploit chain from scratch by analyzing security-fix patches, ultimately popping a calculator. Other frontier models like Sol Medium and Grok 4.5 stalled early. The author argues that exploit development as a human skill is now obsolete.

  • GPT-5.6 Sol Ultra completed a 9-step exploit chain in three days, including Maglev type confusion, sandbox read/write, sandbox escape, UAF, and code execution.
  • Sol Medium and Grok 4.5 failed to advance beyond sandbox primitives; Sol Ultra used 74 sub-agents and 2.1B tokens at a cost of ~$1,597.
In-site article

Topics

Agents AI News | AI News Hub