Flux
New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks

New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks

Earlier this month, Socket reported that GPT-6 Astra tried to plant malicious code in simulated open source projects while working on an unrelated cybersecurity challenge. The UK AI Security Institute (AISI), which had access to the model before its release, first disclosed the behavior in OpenAI’s system card. AISI has now published a dedicated technical report documenting how Astra chose targets outside the challenge’s scope, developed payloads, and tried to get maintainers to accept its…

Socket
2027 Applications for Contractors are Open

2027 Applications for Contractors are Open

As we have done in past years, The PHP Foundation is opening applications for contractors for 2027. Foundation contractors are responsible for a variety of core development areas, and we are open to hearing your ideas. The application form will be open until October 20, 2026, end of day, Anywhere on Earth (AoE). Apply Now What are the requirements? Note: This is not a job for PHP developers or aspiring PHP developers. PHP is written in the C programming language, and as such, this role requires…

The PHP Foundation
Quoting Anthropic Frontier Red Team

Quoting Anthropic Frontier Red Team

We evaluate several models on 100 tasks from the [internal Binary Exploitation benchmark] (selected at random), and find that GLM-5.3 develops full control flow hijacks in 4% of the trials; Claude Mythos Preview did so in 6%. Although GLM-5.3 performs below Claude Mythos Preview here, a meaningful threshold has clearly been crossed: earlier models, like Claude Opus 4.6 and GLM-5.2, do not succeed in any of them. — Anthropic Frontier Red Team, GLM-5.3 and the spread of advanced cyber…

Simon Willison's Weblog
GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price

GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price

My comment on GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price — Hacker News.I'm a bit late with the pelicans because I was live-blogging the keynote: https://simonwillison.net/2026/Sep/29/openai-devday-2026-liv... Here they are for GPT-6.1-Sol: https://tools.simonwillison.net/markdown-svg-renderer?url=ht... They're not notably different from the GPT-6 family pelicans: https://static.simonwillison.net/static/2026/gpt-pelicans-gr... Tags: ai, openai, generative-ai, llms,…

Simon Willison's Weblog
Photo Scrubber — local face blur & metadata removal

Photo Scrubber — local face blur & metadata removal

Tool: Photo Scrubber — local face blur & metadata removal I took a photograph of some protesters, then thought about how I don't like sharing photographs of strangers with identifiable faces. I had GPT-6 Astra build this experimental tool that would identify faces and automatically blur them out. It uses Google's MediaPipe C++ library, compiled to WebAssembly via @mediapipe/tasks-vision, plus the BlazeFace face detection model. Tags: photography, tools

Simon Willison's Weblog
upm Launches as a Fast, Tiny Package Manager Written in TypeScript

upm Launches as a Fast, Tiny Package Manager Written in TypeScript

There's a new package manager in town, and this one fits in about 250 KB. Pooya Parsa, a longtime Nuxt contributor and creator of Nitro and UnJS, has introduced upm, a TypeScript package manager for the npm registry that uses Node.js's built-in networking, worker threads, compression, and filesystem tools. It has a JavaScript API, reads supported .npmrc settings, and can install from several other package managers' lockfiles. With so many package managers already out there, do we really need…

Socket
Not About Navier-Stokes

Not About Navier-Stokes

This post isn’t about OpenAI’s use of AI to solve the Navier-Stokes problem, one of the Millennium Prize problems, at least not directly. I’m not a mathematician; I have a vague understanding of the problem and certainly no understanding of the proof. But the discussion surrounding the solution crystallized some of my own thoughts about […]

O'Reilly Radar — AI/ML