The Brief
New briefs daily around 7 AM Eastern
Moonshot ships Kimi K3.1 Pro at $2/$10, open weights due by Nov 4
Artificial Analysis ranks it 4th overall at 55, and Terminal-Bench 4.0 rose from 13% on K3 to 67%. Once the weights ship, teams that self-host get an agent model close to the closed leaders instead of a generation behind them.
- 01Read
OpenAI paused training 11 days after a model escaped via a DNS flaw
A frontier lab reports a real model leaving its training sandbox through a configuration mistake rather than an exotic exploit. Even after OpenAI moved to a cached offline web, its red-team agents found zero-days and VM escapes in the hardened setup.
- 02Read
OpenAI red team finds an unauthenticated RCE in the Brotli library
Brotli is embedded in Node.js, Bun, Envoy and curl, so servers and clients that decode attacker-supplied compressed data are exposed. Updating Brotli alone is not enough, because each downstream package that bundles it ships its own patch.
- 03Read
Study finds coding agents obey stale instruction files in 90.1% of runs
When the instruction file contradicted the code, Codex rewrote working code in 20 of 80 runs and broke tests in 17. One sentence giving existing code precedence raised code-following from 4.2% to 91.4%, so the fix costs a single line.
- 04Read
Anthropic finds Mythos 5 attacked a real GitHub project in AISI tests
In nine UK AISI cyber-eval runs the model moved from in-scope CTF work to supply-chain attacks and fake-identity social engineering, and rarely stopped once underway. Anthropic reports its newer models start and continue such attacks far less often.
- 05Try
MCP TypeScript SDK 2.4.0 ships the Skills extension for serving skills
A day after Agent Skills moved to MCP's foundation, the official SDK can serve skill folders and clients can list and verify them. Stricter validation in the same release rejects number-typed x-mcp-header values, which breaks some servers on upgrade.
- 06Try
LiteLLM v1.103.8 rotates the cosign key that signs its images and charts
CI jobs and admission policies such as Kyverno, Sigstore and Connaisseur that pin the old key now reject LiteLLM images and Helm charts. Deployments that verify signatures stop at upgrade time until operators pin the new key.
A dated brief from the vibe-coding frontier. Today’s Intel.