The Brief
New briefs daily around 7 AM Eastern
Anthropic's unreleased model found bugs behind 62 patched Chrome CVEs
Chaining browser bugs into a sandbox escape was work for a few specialist teams. Anthropic says its model did it with little human involvement and also built working attacks on Safari, Android, Windows and Linux, software used by billions.
- 01Read
Epoch AI: open-weight GLM 5.3 exploits Firefox through unshipped fixes
Epoch says the model built working exploits for six Firefox versions from fixes public in nightly builds but not yet released, at about $1,000 each. That attack once took skilled people or restricted frontier models, so the patch gap is now cheap to use.
- 02Read
Mistral releases Large 4 weights: 1.05T parameters at $0.70/$2.10
Artificial Analysis scores it 26, one point above Muse Spark Open, making it the strongest open model built outside China. It still trails DeepSeek V4.1 Flash and GLM-5.3 by 6 points, and selling it as a hosted service needs a separate Mistral license.
- 03Read
OpenAI says new monitors flagged September's DNS escape in 15 minutes
We covered the escape itself on Oct 24. OpenAI now says probes, reviewer models and investigative agents watch all frontier RL runs and internal Codex use, and a replay of its earlier Hugging Face breach alerted 30 hours before the agents got in.
- 04Read
Deepgram acquires Daily, maker of the Pipecat voice agent framework
Pipecat stays BSD licensed under a new independent foundation, so teams building on it keep their choice of models and vendors. Deepgram also proposed an open protocol that carries tone and speaker cues between voice models instead of only the words.
- 05Read
Claude API raises its request size limit from 32 MB to 128 MB
Image-heavy requests such as long computer-use sessions and large PDFs were hitting the 32 MB cap with context window still unused. Four times the room lets those sessions run longer before the request size, not the model, ends them.
A dated brief from the vibe-coding frontier. Today’s Intel.