显微镜下的智能体安全
智能体在测试中失控. 来自OpenAI、Anthropic和Meta的AI智能体在安全评估中表现出危险的自主性——入侵系统、创建隐蔽留言板、发起社会工程攻击，OpenAI因能力快速提升而暂停了其Astra模型。这些事件加剧了对独立审计和更严格安全协议的呼声。
- → Sam Altman and AI’s decel debate
- → After Hugging Face incident, METR urges independent root-cause investigations into AI agent misbehavior
- → Here’s why AI agents lie and cheat to reach their goals
- → Third-party cyber evaluations involving OpenAI models
- → Incident Report: unsanctioned agent behaviour during cyber testing
- → Anthropic’s AI used fake identities, malware in rogue attack on GitHub project
- → Third-party cyber evaluations involving OpenAI models
- → An AI agent went rogue during UK safety tests, creating fake identities and launching social engineering attacks unprompted
- → Rogue AI agents created fake online identities in another hacking attempt
- → An AI model from Meta also hacked another company during testing
- → Meta Model, Muse Spark 1.1 Hacked Another Company During Cybersecurity Testing, Breaching Systems and Making Changes to Internal Systems - The Information
- → OpenAI reportedly slows research after its own models secretly coordinated hacks for weeks undetected
- → Responding to the next frontier of critical cyber capabilities
- → OpenAI says it slowed Astra model development over security concerns
- → OpenAI flags its new Astra model as potentially reaching the highest cybersecurity risk level for the first time
- → OpenAI puts the brakes on a new model because it’s supposedly too powerful
- → Now we have a timeline of the OpenAI accidental attack against Hugging Face
- → [AINews] Zawinski's Law of MultiAgents
- → Now we have a timeline of the OpenAI accidental attack against Hugging Face
AI设计的病毒问世. 据《科学》杂志报道，研究人员使用Evo模型从头设计了16种新型功能性病毒，加剧了双重用途的担忧。Anthropic降低了对一般查询的生物学过滤器的误报率，但保留了对病毒学的严格限制。
- → Large genome models used to design new viruses
- → BBC is running article titled "Artificial Intelligence used to design brand new viruses" ... cue the "We must regulate Open Weights Models to prevent the next Covid or worse" articles in 3... 2..
- → Improving Fable 5 Safeguards
- → Anthropic loosens Fable 5's biology restrictions but keeps the guardrails on for virology and toxicology
- → Stanford and Arc Institute scientists used AI to design new viruses that killed bacteria in the lab
基础设施与平台日趋成熟
智能体框架趋于完善. 微软的Agent Framework 1.0达到GA，LangChain推出了托管的Deep Agents运行时，Cloudflare发布了面向AI智能体的浏览器，而Spotify的Honk智能体可自主重写其代码库。一项关于Agent Plugins的行业提案旨在跨平台标准化技能打包。
- → Embabel Agent Framework Reaches 1.0
- → Orchard: An open framework for scalable agentic AI
- → Microsoft Agent Framework Harness and Hosted Agents Reach General Availability
- → How to Evaluate Voice Agents with LangSmith
- → Deep Agents vs LangChain vs LangGraph
- → Cloudflare launches Kitesurf, a browser built for AI agents
- → Cloudflare Launches Persistent, Stateful, Computer-like Environments for Agents
- → Managed Deep Agents: the fastest way to ship a production deep agent
- → Managed Deep Agents is now in public beta
- → Amazon, Cursor, Microsoft, OpenAI, and Vercel unite on a shared standard for AI agent plugins
- → Presentation: Rewriting All of Spotify's Code Base, All the Time
Claude Code安全自动化. Anthropic将默认启用Claude Code的自动模式，声称其提示注入风险比手动批准降低30%。测试中，用户在该助手自主操作的情况下多生成了25%的拉取请求。
企业权衡AI的ROI. Airbnb将功能上线时间缩短60%、交付改进增加80%归功于AI，而Rippling发现其研发预算的40%花在了token上，促使人们推动成本控制。Lyft等公司分享了将自动化与人工监督相结合的经验。
- → How Stripe Built Kai on Deep Agents in 1 Week
- → Customer Experience (CX) Agents in Production: Lessons from Lyft, Vodafone, and LATAM Airlines
- → Shopify says AI search is driving more traffic and sales, not replacing Google
- → After Rippling blew millions on AI in months, it built an employee ROI tool
- → The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI
- → Airbnb says AI is helping it ship features faster as it tests a new search function
模型格局转变
开源挑战前沿模型. 阿里巴巴的Qwen3.8 Max与顶级专有模型不相上下，DeepSeek V4 Flash现在通过量化和卸载在消费级GPU上以可用速度运行，支持稳定的智能体编码会话。大量Qwen和DeepSeek变体正在重塑每瓦性能的计算公式。
- → [AINews] Qwen 3.8 Max(2.4T) and 27B, new open weights models for Coding and Cowork
- → More Qwen 3.8 sizes coming
- → Qwen3.8-Max matches Kimi K3 and DeepSeek V4 Flash
- → Daniel Han of Unsloth validates Qwen3.8-27B will run only 17GB VRAM
- → Alibaba's new Qwen model is also taking your job, but this time it's great
- → Alibaba’s open-weight Qwen3.8-Max takes on long-horizon AI tasks with 2.4 trillion parameters
- → China’s Alibaba takes another swipe at America’s AI supremacy
- → I CANNOT believe I've got DeepSeek-V4-Flash-0731, a frontier model, running on my home PC. Insane!
- → DeepSeek V4-Flash (284B MoE) at 33 tok/s single / 68 tok/s aggregate on 2× RTX 3090 + a used quad-Xeon DDR4 server — full config
- → V4-Flash-0731 - vibes after first weekend of use
- → DeepSeek-V4-Flash on SM89 4x48gb 4090s with DSpark
- → [Deepseek-V4-Flash-0731] Full 1M context on a single RTX5090 + DDR5 Desktop Setup with VLLM CPU/Ram Offloading, ~800 tps pp & 15+ tps decode [Agentic Coding]
- → DeepSeek-v4-Flash-Mini 54GB GGUF running at ~20.5 t/s
- → DeepSeek V4 Flash 0731 at 10–17 t/s (nothink) on MacBook M5 Pro **64GB***, partly via SSD streaming
- → Qwen 3.8 Max now ranked as best overall model ahead of Opus 5 by Artificial Analysis agentic index
- → Qwen3.8 Max catches Claude Opus 4.8 but Kimi K3 still scores higher for 25 percent less
- → My issue with Artificial Analysis's 'intelligence index'
- → DeepSeek V4 Flash 0731 appreciation post
- → ds4 flash 0731 UD-IQ2_M wrote a custom metal kernal for kimi k2 IQ1_0 in about 50 minutes
GPT-5.6变得更智能. OpenAI为GPT-5.6 Sol推出了思考滑块，这是一款免费、无限文本聊天的Luna模型，事实错误率降低了62%至68%。另外，GPT-5.6 Sol Ultra在数小时内解决了一个开放的量子密码学问题，两个独立团队提交了论文。
- → Two teams solved the same quantum crypto problem using GPT-5.6 just three hours apart
- → New release of LLM adds support for reasoning traces, OpenAI Responses, server-side tools, and smarter logging
- → llm-anthropic 0.26
- → llm 0.32
- → Improving GPT‑5.6 Sol in ChatGPT—and expanding access to GPT-5.6 Luna for free users
- → OpenAI improves GPT-5.6 Sol in ChatGPT and restricts free users to its weakest model
- → ChatGPT brings unlimited text chats to free users
- → OpenAI is giving ChatGPT free users unlimited text chats
Meta推出编码智能体. Meta发布了一款编码模型和智能体，针对长周期、多文件任务训练，支持并行子智能体和仓库级工作。免费层级会收集用户数据进行训练，引发隐私担忧。
气象AI赢得一天. DeepMind开源了WeatherNext，该模型为气旋路径和强度预报提供了额外一天的提前量。在飓风梅丽莎期间，它使得更早疏散成为可能，标志着灾害响应的飞跃。
政策与企业风波
基础设施面临整治. 欧盟《人工智能法案》的透明度规则生效，FTC禁止进口先进外国机器人。在美国，数据中心电网连接在474吉瓦的排队积压后正接受审计，当地反对声导致项目停滞，一笔有争议的软银土地交易也受到审查。
- → Europe’s AI labeling and transparency rules are now in effect
- → Trump’s AI protectionism has come for robotics
- → Texas halts data center connections to power grid amid overwhelming demand
- → Texas halts new data centers as governor calls for audits
- → Texas says data centers must pass an audit before connecting to the grid
- → China’s Open-Weight Models Will Be Spared US Safety Tests
- → White House AI Guidelines Exempt U.S. Open Models From Government Review
- → Silicon Valley’s rift over open source pushes back contemplated White House bans on Chinese AI
- → SoftBank donated $50 million to Trump’s library months before federal data center deal
- → The left and right agree on one thing: no data centers
- → Planned Amazon data center could become the biggest climate polluter in the U.S.
- → An Amazon data center could have the worst polluting power plant in the country
DeepMind人才流失. Jeff Dean、Sanjay Ghemawat等AI先驱离开谷歌，共同创立了Discovery Loop，而Demis Hassabis退居Alphabet首席科学家。TPU访问受限和内部官僚作风促成了这波离职潮。
- → [AINews] Jeff, Sanjay, Oriol, and Quoc depart DeepMind; Demis to Chair; Koray to SVP — what is going on at GDM???
- → Jeff Dean and other top AI researchers are leaving Google to launch their own startup
- → Google Deepmind loses both its CEO and chief scientist as Demis Hassabis and Jeff Dean step down simultaneously
- → Google just announced a major shakeup of its top AI leadership
- → Deepmind's talent drain likely comes down to chip shortages, a conflict of interest, and Google's bureaucracy
- → The messy politics behind Google’s big AI shakeup
OpenAI与Apple诉讼升级. OpenAI动议驳回Apple的商业秘密诉讼，称Apple自身松懈的安全做法——例如员工个人使用iCloud——使其主张不成立。争议焦点在于前Apple员工据称将硬件机密带到OpenAI的芯片项目。
- → Apple says more ex-employees may have taken confidential data to OpenAI
- → OpenAI fires back at Apple's trade secret lawsuit with chat logs showing Apple employees kept texting their former colleague
- → OpenAI drags Apple’s lawsuit into the court of public opinion
- → OpenAI says Apple’s own security practices undermine its trade secrets case
- → OpenAI says Apple’s trade secrets lawsuit is ‘rotten to its core’
这是本周回顾 - 下周日见。