The world’s largest AI newsletter keeping 2,000,000+ readers ahead of the curve. Get the latest AI news and how to apply it in 5 minutes. By @rowancheung
Join for free →
Joined May 2016
- Tweets5K
- Following119
- Followers23K
- Likes4.6K
Pinned Tweet
Today, we launched the Community AI Workflow Hub.
Our most requested feature of all time.
A place for builders, everyday knowledge workers, and the AI curious to learn from real people doing real work with AI 🤝
Top stories in robotics today:
- This $20K robot butler is up for reservations
- Unitree H2-X plays action hero
- Tesla fires up Optimus production
- Waymo wants 20K robotaxis by 2027
LAUNCHED: Anthropic is previewing Claude Duet, a new proactive agent app powered by Opus 5.5.
Now in a U.S. waitlist preview for Pro and Max users.
An OpenAI model just helped find what the company calls "one of the most impactful security issues in recent memory."
The target was PHP, the language behind WordPress and nearly 70% of websites.
Security firm Calif pointed GPT-5.6 Sol at PHP’s code, and it found a critical flaw that could let attackers take over a server without logging in. Wiz found the same bugs independently.
OpenAI then spent two months coordinating the response with PHP’s maintainers, Wiz and Cloudflare.
Patches dropped this morning after details leaked early, but any server that hasn’t updated is still exposed.
The National Security Agency told organizations that can’t update yet to take their systems offline.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Top stories in AI today:
- Sam Altman details the AI industry’s endgame
- Ex-OpenAI research chief’s Arda debuts at $1.5B
- Make Claude Code check its work after each edit
- Anthropic’s Claude takes on scorpion antivenom
The Electric Plant Co. built an AI that reads a plant’s electrical signals to tell how it’s doing, minute by minute.
Its Bombadil model was trained on over 7M hours of data from 125+ species, and can spot plant stress days before it actually shows in the leaves.
Co-founder @justinmast says farming and forestry are "the largest use of fresh water on Earth," yet nearly all of it is "managed from the outside in."
"We need planetary gardeners."
Full post: xitter.cf/justinmast/status/2112…
1/ Today we’re unveiling Bombadil, @electricplantco's foundation model that reads the electrical signals of living plants and turns them into a continuous view of their physiology.
Trained on 7M+ hours of plant electrical signal across 125+ species. That makes Bombadil the most species-diverse model of directly recorded electrical biosignals in existence. The animal equivalent would be one model that reads the brainwaves of blue whales, horseshoe crabs and fruit flies.
Runway CEO Cristóbal Valenzuela was asked on stage if AI could replace human actors. “Yeah, absolutely. I think it’s already happening in a way.”
Valenzuela spoke at Turin's VIEW Conference last week, in a session titled "Every Pixel Will Be Generated."
Nvidia’s Richard Kerris argued Marlon Brando improvising with a cat in 'The Godfather' could never be prompted.
Valenzuela: “Not now, but I think models are going to get probably to a point where you can probably direct them in a very similar way."
RAISED: Bob McGrew, OpenAI’s former research chief, just introduced Arda, an AI manufacturing startup now valued at $1.5B after a $230M round.
McGrew says it does for factory engineers "what Claude or Cursor does for programmers."
Via @CNBC:
Can you make medicine for a virus no one’s seen yet?
Red Queen Bio is using AI to develop antibody drugs that could help stop future pandemics, including threats that AI itself might help create:
Inception just launched Mercury 3, which it calls the strongest diffusion language model yet.
It’s 40x bigger than Mercury 1 but still puts out 1,000+ tokens a second.
The comparison is to the fast, cheap tier, with Inception saying it matches or beats OpenAI’s GPT-6 Luna and Anthropic’s Claude Haiku 5.5.
Where ChatGPT and Claude write one word at a time, diffusion models draft many words at once and refine them, making them a strong fit for use cases like voice agents, live tutoring, and customer support, where any lag shows.
Mercury 3 is live: the most capable diffusion LLM released to date.
It outperforms GPT-6 Luna and Claude Haiku 5.5 across a range of benchmarks while running at over 1,000 tokens per second.
More than 40x the size of Mercury 1, 3x more intelligent across standard benchmarks, and just as fast, with a 1M-token context window.
Available today on the Inception API, @baseten, and @OpenRouter .
