跳到正文
10月23日周五
  1. Rohan Paul50

    Maxinsights 推出 MaxGlove,在人们真实工作时记录手部触觉与力数据,补上摄像头拍不到的那层抓握信息。压力决定抓握成败——杯子是滑落还是碎裂,打滑时的修正始于指尖,通常早于摄像头察觉。Maxinsights 称已拍摄 2M+ 小时视频,目标到 2027 年积累一百万小时力数据。

    引用YG (Yuguang Yuan)@BrianYN

    Robots learn by watching people work. Most of what they watch is staged. At @Maxinsights, we capture real work at natural speed in real homes, restaurants, and hotels. 2M+ hours so far. Today we’re announcing a $30M seed round led by @PeakXVPartners, plus two new products: MaxLoop: same-day quality scores on every clip MaxGlove: touch and force data a camera can't capture Thank you to our investors, builders, operators and customers. More to come.

  2. David Singleton57

    Muse 工程负责人 David Singleton 宣布 1Password 直接接入 Muse,用户批准每次登录后 Muse 可继续完成任务,密码始终留在 1Password 保险库中,智能体无法看到或取走凭据。该功能将在未来几天内覆盖所有平台。此集成属于 1Password for Agents 平台发布的一部分,该平台对个人和家庭账户免费且为可选开启。

    引用1Password@1Password

    Today we announce 1Password for Agents platform, building with companies @Muse, SpaceX Super Intelligence Grok @Bot, @AnthropicAI’s @Claudeai, @OpenAI, @TownAI, @Browserbase, @Browser_use, @heydana_ai, Instinct, @usekernel, @Perplexity_ai, @tryramp, @Tomo, and @wajo_ai, with more integrations on the way. 🎉 We've heard from so many of our customers who want to use these new personal AI agents to help them get more done, but want more control over what the agent can access with the same trust and ease of use they get when using 1Password directly. 1Password for Agents gives your agents access without giving up your passwords. When an agent reaches a sign-in form, it requests a credential from your vault. If you approve the request, 1Password directly auto-fills the credential in the destination site so the agent can’t see or take possession of the credentials. The agent gets the task done, but it doesn’t get your passwords.. You stay in control. 1Password for Agents free and optional for personal and family accounts. Unless you opt-in to an agent connector, agents cannot touch your vault. ➡️Learn more: https://bit.ly/487da6J

  3. Rohan Paul65

    METR 和 Redwood Research 各一名员工今年夏天在 OpenAI 驻场三周,评估其内部智能体错位监控系统,简报现已公开。

    引用METR@METR_Evals

    Two employees from METR and Redwood Research worked on premises at OpenAI for three weeks this summer in an embedded assessment pilot. This team evaluated the systems OpenAI was using to monitor for misalignment from internal agents. A brief write-up of their work is now public.

  4. Aravind Srinivas43

    学习新知识时,没有专家资源不再是瓶颈。你可以让 AI 为你制作一段 5 分钟的视频来学习任何内容。这里有一个关于晶圆厂如何制造芯片的视频。

    引用Computer@AskPerplexity

    Computer wrote and produced a five-minute film on how a chip gets made, drawing on 13 technical references from ASML, Intel, TSMC, Cadence, SkyWater, and IEEE Spectrum. Skip to 3:59 for why "3 nanometers" doesn't mean what it sounds like.

  5. OpenAI50

    今年夏天,我们邀请 METR 和 Redwood Research 对我们的内部监控系统进行了一次嵌入式评估试点,在为期三周的时间里提供了对我们基础设施的深度访问权限。 他们的发现帮助我们在扩展该系统时加强了防护措施,也将有助于塑造未来与 METR 及其他第三方评估方的研究合作。

    引用METR@METR_Evals

    Two employees from METR and Redwood Research worked on premises at OpenAI for three weeks this summer in an embedded assessment pilot. This team evaluated the systems OpenAI was using to monitor for misalignment from internal agents. A brief write-up of their work is now public.

  6. Karina62

    Karina Nguyen 引用美国多所大型银行检测到客户账户内未授权第三方 AI 智能体的报道,认为需要类似 OAuth 的 AI 智能体授权机制。她指出难点在于定义“替我处理”究竟授权了什么,尤其是智能体再委托其他智能体时,密码学可验证权限和审计轨迹,但更难的是防止一串合理决策变成用户从未同意的行为。

    引用Madison Mills@MadisonMills22

    SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access

10月22日周四
  1. Aravind Srinivas41

    我们正提供 Computer 额度,用于检查 PHP 漏洞。

    引用Computer@AskPerplexity

    Computer’s new PHP2Shell skill checks your PHP sites and GitHub deployment configs for exposure, then prioritizes fixes. Tasks that use /php2shell-exposure-check are free through October 31, up to 5,000 credits per user. Live now in the skills marketplace for all Computer users.

  2. indigo47

    旧金山的 Marathon Fusion 计划先商业化小型聚变反应堆,用聚变中子生产供不应求的医用同位素。该公司此前演示了将汞转化为稳定金、速度超 CERN 纪录 10 倍,并在全球最强等离子体离心机中富集同位素,打破苏联保持 40 年的纪录。靶向放疗需求指数级增长,现有供给跟不上。

    引用Marathon Fusion@MarathonFusion

    Last month, we demonstrated high-rate alchemy: turning mercury into real, stable gold, beating CERN’s record by a factor of 10. Last week, we enriched isotopes in the world’s most powerful plasma centrifuge, beating the Soviet record that stood for 40 years. Now, we’re building a fusion reactor in San Francisco to achieve record power density.

  3. Kling AI67

    OpenArt 宣布 Kling 4.0 上线,可用首、中、尾帧引导视频,最多使用 10 张参考图,并支持文本或帧生成与视频编辑,All-in-One Reference 用一个模型完成生成和编辑。11 月 20 日前 Pro 和 Wonder 套餐享 50% 折扣。

    引用OpenArt@openart_ai

    Kling 4.0 现已在 OpenArt 上线。 • 用起始、中间和结束帧引导你的视频 • 最多可使用 10 张参考图像 • 用文本或帧生成,并编辑你的视频 • 一体化参考:用一个模型生成和编辑视频,进一步掌控 此外,在 11 月 20 日前,Pro 和 Wonder 计划可享 Kling 4.0 五折优惠。

    推荐理由:引用内容给出了 OpenArt 上 Kling 4.0 的帧控制、参考图上限和折扣信息,读者可据此评估视频生成玩法。

  4. Kling AI66

    可灵(Kling)宣布 Kling 4.0 已在 OnSolo 上线。该模型支持单次生成 30 秒原生视频,快速动作和大运镜下保持稳定,立体声配更准的口型同步,并提供 21:9 宽屏,单个任务可叠加最多 15 个参考图和 10 个关键帧以保持角色、镜头与剧情一致。

    引用OnSoloAI@OnSoloAI

    Kling 4.0 现已在 OnSolo 上线。 一次生成 30 秒原生视频。 在快速动作和大范围镜头运动中保持稳定。 立体声,唇同步更精准。 21:9 宽屏。单个任务最多可叠加 15 个参考和 10 个关键帧,让你的角色、镜头和故事保持一致。 今天就用它制作你的下一部短剧、电影或 FMV。

    推荐理由:原文列出了 Kling 4.0 在 OnSolo 上的具体能力变化,创作者可据此评估其对视频创作流程的适用性。

  5. Rohan Paul83

    NSA 警告两个由 Calif 研究人员用 GPT-5.6 Sol 发现的 PHP 关键漏洞(PHP2Shell),敦促组织打补丁或将未修补服务器下线。两个漏洞位于 PHP 核心,在 Apache mod_php 上演示的利用可在应用代码运行前触发。

    引用Rohan Paul@rohanpaul_ai

    使用 GPT-5.6 Sol 的研究人员在 PHP 中发现了一个极其严重的漏洞,PHP 驱动着约 70% 的网站,该漏洞导致主要网站下线,运营方纷纷紧急修补。 发现该漏洞的 AI 安全公司 Calif 在一份声明中表示,如果不尽快修补,这些漏洞可能使全球 70% 的网站面临风险,并称其为“AI 发现的最严重漏洞,甚至可能是整个软件史上最严重的漏洞”。 > PHP 紧急发布了修复程序,因为这些漏洞可能让无账号的攻击者接管 Web 服务器。 > 两个漏洞在 CVSS 严重性评分中均为 9.2 分,影响低至 5.4 的 PHP 版本。 > 当请求在错误的时机触及 PHP 的内存上限时,PHP 会释放内存但保留指向该内存的指针,该工作进程上后续的请求便可劫持这块内存。 > 审计人员在 2024 年发现了这一弱点,但修复工作停滞了数月,部分原因是没有人展示过实际攻击。 > 现由 Google 拥有的云安全公司 Wiz 表示,这些模型让一名研究人员在一周内完成了过去顶尖团队需要数月才能完成的工作。 > CVE 编号的泄露迫使 PHP 提前一天发布,Cloudflare 目前报告称已出现早期攻击尝试。

    推荐理由:原文把 AI 发现的 PHP 漏洞与实际攻击、补丁版本和暴露面数字放在一起,读者可以据此评估这一事件的真实影响范围。