New from OpenRouter: 7-day average token volume for Anthropic models is up 3.6x since the launch of Opus 5.5
Sonnet 5.5 and Haiku 5.5 have also been well received.
If one were to think of the most straightforward explanation given this happened 1/100k turns, wouldn’t it just be that they trained it on a lot of alibaba infra and sometimes that just slips out?
Obviously, that’s a problem and you shouldn’t use a model that’s gonna put your data somewhere you haven’t authorized it to, but it might not be *malicious*, could just be a bad model.
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: https://t.co/TZSugXi2ZE
Introducing Pomerado (YC F26): the faster, cheaper, and more reliable alternative to browser use.
Open source. Sign up for free to supercharge your agents 🧵
Many recent lone-actor incidents used ARTEX with DeepSeek 4.1 Flash as the primary model (including the South Korean bank attacks documented by CrowdStrike). This is an abliterated version of that model with the guardrails removed. Great for defense too, but as always, dual-use.
SITUATION DETECTED: Warhound launched from stealth today with a $200M seed at a $1.2B valuation. Ben Lamm and Palmer Luckey are cloning gene-edited bio-enhanced dogs and equipping them with custom Anduril vests, goggles, and sensors for the military and law enforcement.