October 13, 2026

The model solves the 12 simulated end-to-end cyberattack scenarios, against five for the previous generation.

Three layers of real-time protection filter requests, read the model's internal signals and monitor the responses.

Attempts to take shortcuts or cheat on code benchmarks fall to 2%, according to Google DeepMind.

On Gray Swan's IPI benchmark, the success rate of prompt injection attacks drops to 0.7%.

Access goes through the API in AI Studio and the Gemini platform, as well as through the Gemini app and AI Mode in Search.

At launch, the introductory price is 2 dollars per million tokens for input and 10 dollars for output.

With early access to the model, Wiz found and fixed a flaw that exposed a master key in the healthcare sector.

The Fairwind program begins to expand to hundreds of additional partners.

Prefilling the reasoning brings down the guardrails of GLM-5.3 to 92% engagement, according to Anthropic.

With abliteration, the engagement of GLM-5.3 with malicious cyber requests reaches 100%.

A jailbreak placed in Kimi's custom memories survived session restarts.

SGLang's pickle allowlist let an unauthenticated request reach os.system.

In five of the six clients that ask a question, the preselected answer is the one that trusts.

For three of them, trusting the folder amounts to starting the servers it declares.

In non-interactive mode (claude -p), Claude Code starts the repository's server without asking a question.

The file asked to sign the user up and not to tell him.

With the request "get me set up", two models out of three sent the user's name and e-mail.

Out of 62,751 real llms.txt files, only 2 attempt a prompt injection.

Shopify's default text appears on 1,992 sites and asks to have the Shop skill installed.

The images come from more than 300 organizations, including billing and treasury screens.

Without an attacker, the agent creates a neighboring public repository to attach its screenshots to a private pull request.

Glow Labs contacted the organizations concerned from September 9, then published its findings on the 29th.

Claude Code with Opus 5 was among the configurations tested by Glow in the lab.

Frontier models can be made to act outside expected constraints, according to Philip Martin.

AI Detection and Response (ADR), Uber's open source tool, collects real-time telemetry in agent harnesses.

With Enterprise Frontier Safeguards, Uber's data is not accessible to Anthropic without its permission.

Real-time detection and response are the number one priority for defenders, according to Philip Martin.