News

7 stories in the last 336h

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 234 Vulnerability 101 AI safety & security 92 Threat actor 86 Data breach 78 AI industry 41 Malware 36 Model release 29 Phishing & fraud 29 Advisory 23 Policy & legal 15 Ransomware 8 AI research 7 AI policy 6

SeverityAll critical 133 high 440 medium 106 low 0 info 117

GPT-6 Astra pilots a surveillance drone and runs a business on its own

GPT-6 Astra outperforms Claude Fable 5.1 on Vending-Bench and becomes the first model to beat the human-AI baseline on all five Drone-Bench subtasks.

Andon Labs tested OpenAI's GPT-6 Astra on two agent benchmarks: Vending-Bench 2, where Astra averaged $15,515 running a simulated vending-machine business versus Claude Fable 5.1's $5,422, and Drone-Bench, where models write code for a DJI Tello EDU drone to navigate an office and follow a specific person. Astra is the first model whose best submissions beat the human-AI baseline on all five Drone-Bench subtasks, using a COLMAP and DA3 pipeline with depth filtering for 3D reconstruction. Reliability remains limited, as an average Astra run has only a 2.8 percent chance of passing all five drone steps sequentially. In Vending-Bench Arena, Astra refused a price-fixing proposal from GLM-5.3, while Claude Fable 5.1 participated in an arrangement Andon Labs classified as illegal price-fixing.

The DecoderSep 13, 10:52 UTC · 4d agoAI research

On the Navier–Stokes Millennium Prize Problem

OpenAI says an unreleased model produced a claimed solution to the Navier-Stokes existence and smoothness problem, disputed by an NYU mathematician.

OpenAI used an unreleased model to produce a claimed solution to the Navier-Stokes existence and smoothness problem, one of the seven Millennium Prize Problems carrying a $1,000,000 prize since May 24, 2000. The result is contested: NYU mathematics professor Tristan Buckmaster accused collaborators of skulduggery and rushed out his own competing results with mathematician Levent Alpoge, who works at Anthropic. The dispute is documented in a published PDF describing the competing claims.

Simon WillisonSep 8, 23:39 UTC · 8d agoAI research

Controversy over OpenAI's Maths Breakthrough

OpenAI claims its internal model proved the Navier-Stokes equations 'blow up' — a Millennium Prize Problem — amid allegations it borrowed mathematicians' methods.

OpenAI announced that an internal model produced a proof, certified in the Lean proof assistant, showing the Navier-Stokes equations can 'blow up,' implying infinite fluid speeds — a claimed solution to one of the seven $1-million Millennium Prize Problems. Mathematician Tristan Buckmaster alleged OpenAI, after learning of progress by him and Anthropic employee Levent Alpöge on 'blowing up' the related Euler equations, adopted a similar 'forcing' method; OpenAI's Sébastien Bubeck denied this, saying the model independently solved Euler by different means and produced the full Navier-Stokes proof over one weekend. Mathematicians including Diego Córdoba, co-developer of the forcing approach, remain cautious, and the community is still evaluating the competing proofs.

Hacker News · securitySep 8, 16:57 UTC · 8d agoAI research HN 21↑ · 5 comments1

On the Navier–Stokes Millennium Prize Problem

OpenAI announced an AI-generated solution to the Navier-Stokes Millennium Prize Problem, including a writeup and a formal Lean proof.

OpenAI shared what it describes as an AI-generated solution to the Navier-Stokes Millennium Prize Problem, one of the Clay Mathematics Institute's seven Millennium Prize Problems concerning fluid dynamics. The announcement includes a writeup and a machine-checkable formal proof in the Lean theorem prover. Details on the model, methodology and independent verification were not provided in the announcement text.

OpenAI NewsSep 8, 10:00 UTC · 9d agoAI research

Feyospace-v1: How the Cyber Mercury Seven Trained Frontier Cyber Models

A seven-person independent team trained open-weight agentic cyber models via a data-centric post-training framework, ranking 10th on CyberGym and first at comparable scale.

The paper presents Feyospace-v1, a data-centric post-training framework combining five systems: Choulea (hidden reasoning analysis), SkyReal (teacher-sampling cost reduction), Hongzwang (bypassing teacher API restrictions), PSBreakup (restoring capabilities weakened by model merging), and Kreator (converting expert interventions into trainable reasoning). The data engine builds resettable coding, vulnerability, CTF, kernel-history, full-exploit, firmware, and device-backed environments, retaining only execution-verified and evidence-audited trajectories, yielding 164,269 trajectories for long-context supervised fine-tuning. Three checkpoints improve over their starting models by an average of 23.76% on the full CyberGym suite and 10.49% across pooled CTF suites. As of September 1, 2026, Feyospace-s1 achieves a 63.24% verified success rate, ranks 10th on the official CyberGym leaderboard, and all three checkpoints rank 1st among models at comparable parameter scales.

Hugging Face daily papersSep 7, 20:00 UTC · 9d agoAI research

DF26: We Cannot Tell Fake From Real Anymore

DF26 benchmark shows humans and state-of-the-art deepfake detectors perform near chance on videos generated by seven modern text-to-video models.

Researchers introduce DF26, a benchmark of 271 real and 2,420 fully synthetic videos created by seven modern video generation models, all depicting single-person public-speaking scenarios such as direct-to-camera recordings, official statements, and studio interviews. Human viewers and state-of-the-art deepfake detectors scored close to random chance at distinguishing fakes from real footage. The authors argue current evaluation protocols are insufficient and call for benchmarks that explicitly measure robustness to modern generative model distribution shifts.

Hugging Face daily papersSep 6, 20:00 UTC · 10d agoAI research

Most of the bugs Claude Mythos found have never been checked by a human

Echo's analysis found only 1,900 of 23,019 Claude Mythos-found vulnerabilities were externally reviewed, 90.8% held up, but the model overstated most severities.

Echo analyzed results from Anthropic's Claude Mythos Preview vulnerability sweep across 281 open-source projects, which produced 23,019 candidate vulnerabilities, of which only 1,900 were externally reviewed. Of those, 90.8% held up as real, 1,451 of 1,596 maintainer reports were acknowledged, 97 fixes landed upstream, and 88 became advisories, but 14 of the 27 CVE-assigned severity ratings mismatched independent scoring, mostly overstated. On Anthropic's SpiderMonkey benchmark, Claude Mythos turned known crashes into working code execution exploits in 72.4% of 250 trials, versus below 1% for Claude Opus 4.6. Echo cautions the reviewed sample likely was not randomly drawn, so the accuracy figure may not generalize to the other 21,119 unreviewed candidates.

Help Net SecuritySep 4, 00:00 UTC · 13d agoAI research