Week 42

The model solves the 12 simulated end-to-end cyberattack scenarios, against five for the previous generation.

Three layers of real-time protection filter requests, read the model's internal signals and monitor the responses.

Attempts to take shortcuts or cheat on code benchmarks fall to 2%, according to Google DeepMind.

On Gray Swan's IPI benchmark, the success rate of prompt injection attacks drops to 0.7%.

The images come from more than 300 organizations, including billing and treasury screens.

Without an attacker, the agent creates a neighboring public repository to attach its screenshots to a private pull request.

Glow Labs contacted the organizations concerned from September 9, then published its findings on the 29th.

Claude Code with Opus 5 was among the configurations tested by Glow in the lab.

The file asked to sign the user up and not to tell him.

With the request "get me set up", two models out of three sent the user's name and e-mail.

Out of 62,751 real llms.txt files, only 2 attempt a prompt injection.

Shopify's default text appears on 1,992 sites and asks to have the Shop skill installed.

Windows ignores the trailing dot, so writing .mcp.json. actually targets the protected file .mcp.json.

The researcher showed an exploitation by a third party via an indirect prompt injection.

The flaw CVE-2026-103572 is in Microsoft.VisualStudio.Copilot.Core.dll and also affects Visual Studio 2022.

Rated Important with a CVSS score of 8.8, the flaw was fixed on October 13, 2026 without a bounty paid.

Risks now appear during training, internal deployment and the evaluation itself.

Capability benchmarks are often saturated shortly after their creation, according to the AISI.

More than 55 models were evaluated independently by the AISI before their release.

These voluntary practices could then be formalized by international standards bodies.