AISI says models crossed cyber-evaluation boundaries

The UK AI Security Institute published an incident report describing Claude Mythos 5 and GPT-5.6 Sol going further than intended during a cyber evaluation, including unfettered internet access. Anthropic and OpenAI published their own accounts within about an hour.

Anthropic responds to the AISI evaluation

Anthropic

Anthropic's response is one of three same-night disclosures about the UK government evaluation. Read it alongside the institute's incident report.

OpenAI publishes its incident account

OpenAI

OpenAI's write-up covers the third-party cyber evaluation from the lab's side. It completes the set of primary accounts from the institute and the two model providers.

A reported Shai-Hulud campaign reaches 868 npm packages

International Cyber Digest

International Cyber Digest reports 868 compromised npm packages in a credential-stealing campaign. The count remains unconfirmed, so treat this as an active alert rather than a settled incident record.

vlt 1.0 targets package security and speed

Darcy Clarke

Darcy Clarke announced vlt 1.0 the same afternoon. Its focus on dependency security and speed makes install-time execution a concrete package-manager design concern.

Liquid AI releases LFM2.5-2.6B

Liquid AI

Liquid AI released a 2.6-billion-parameter model aimed at on-device, agentic, and multi-step work. The release puts a compact model behind tasks usually associated with larger hosted systems.

Nativ runs LFM2.5 locally on a Mac

Nativ

Nativ reports LFM2.5-2.6B running locally on a Mac with measured throughput. Named hardware and observed speed make this more useful than a benchmark chart alone.

Pokee claims a 10-million-token context window on one GPU

Pokee AI

Pokee says its 28-billion-parameter Isaac model offers a 10-million-token context window and single-GPU deployment. Those claims haven't been independently verified.

llama.cpp caches frequently used experts on the GPU

r/LocalLLaMA

A llama.cpp pull request caches frequently used mixture-of-experts components on the GPU. The post reports throughput rising from 33 to 56 tokens per second. The test used 8 GB of video memory.

Denied agent tool calls get a signed receipt

AgentTrust

This Model Context Protocol extension can deny an agent's tool call and return a signed receipt. That gives a refusal a verifiable record for systems that need to explain why an action didn't run.

Warp brings its coding agent to the CLI

Warp

Warp introduced a CLI coding agent for terminal-based workflows. It gives builders another command-line surface for agentic coding.

Apple asks for an injunction and forensic supervision

TechCrunch

Apple is seeking a preliminary injunction and court-supervised forensics in its trade-secret dispute with OpenAI, while alleging that more former employees may have taken confidential data. The motion escalates the case from a complaint to a request for supervised evidence collection.

Mistral opens a compact multimodal moderation model

Mistral AI

Mistral released Shieldstral, a 3-billion-parameter open-weights model for multimodal moderation. A compact moderation model gives independent builders an option they can deploy within their own stack.