Лента новостей —
что происходит в безопасности ML и LLM прямо сейчас

Been spending some time learning about this piece of fascinating technology lately and I found that it can help me with some of my orgs problems. Currently serving 400+ people through bedrock and I am interested in adding a gateway layer to have some: - rbac capabilities for MCPs

Пользователь пишет интересы текстом, мы делаем из них один эмбеддинг. Работает он как монета (ROC-AUC 0.52), а на коротких интересах 0.41, то есть хуже случайного порядка. Прогнали шесть вариантов починки и подняли до 0.80. Рассказываю, что сработало, а что нет. Что показали цифр

Пользователь пишет интересы текстом, мы делаем из них один эмбеддинг. Работает он как монета (ROC-AUC 0.52), а на коротких интересах 0.41, то есть хуже случайного порядка. Прогнали шесть вариантов починки и подняли до 0.80. Рассказываю, что сработало, а что нет. Что показали цифр

The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent is uncertain. The post OpenLeash Adds a Human Check to Risky AI Agent Actions appeared first on SecurityWeek.

Claude Code saves every session as JSONL on your machine. I got curious about repeated work and smart caching, which i am actively working on. This read only plugin hows how your agent *actually* behaved across all your sessions. Mine, across 369 sessions / 8,467 tool calls: - 11

This is my second post here! Cool if you check it out! Short version: i built a POC where a fine-tuned open model behaves as it should until it sees a specific trigger, then drops its guardrails and instructions. the keyword version is a toy, but the real point is that the trigge

I received the two emails below earlier in the month. They’re vaguely coherent. I suppose I shouldn’t be surprised that the corpus that AIs are training on contain data suggesting that I am someone to write to with random computer and network security problems. After all, I obser

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders (like go

NVIDIA has released Switchyard, an Apache-2.0 Rust proxy and library for LLM traffic. It decodes requests into provider-neutral types, routes them with passthrough, random, LLM-classifier, or stage-router algorithms, and translates responses back into the client's format, so Clau

I was curious if anyone is using Genie Code beyond usual SQL generation. for ex. to build or iterate on agent workflow or tool integrations. Was wondering how useful it is in a real LLM app development workflow. Iam asking because started to use it for an LLM app and want to see

Google's Gemini 3.8 Flash, the third Flash model in six weeks, matches Claude Opus 5 on some agentic coding benchmarks at lower cost. But its "working harder" reasoning burns about 30 percent more output tokens per task, making it pricier in practice than its predecessor despite

I have been working on a session-ingestion boundary for an open-source context graph, and I would value criticism of the design rather than the UI. The current implementation reads local Codex and Claude Code session files, groups them by project, and projects a selected session

LLM умеет отвечать на вопросы, но не знает особенностей вашего проекта и внутренней документации. В статье разберём, как с помощью RAG подключить собственные данные к модели: от подготовки документов и эмбеддингов до поиска нужного контекста и генерации ответов. Разобрать подход

Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks intensify. The post UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure appeared first on SecurityWeek.

submitted by /u/company_url_finder [link] [comments]

Для оценки эффективности ИИ уже давно и успешно используют самые разные бенчмарки. Берем модель/агента, выдаем им одинаковый набор задач, считаем долю успешных решений и получаем удобную цифру, по которой можно сравнивать системы между собой.По результатам используем ту, которая

Для оценки эффективности ИИ уже давно и успешно используют самые разные бенчмарки. Берем модель/агента, выдаем им одинаковый набор задач, считаем долю успешных решений и получаем удобную цифру, по которой можно сравнивать системы между собой.По результатам используем ту, которая

Anthropic publish the system prompts for their Claude consumer applications (Claude.ai and the Claude mobile apps - sadly not for Claude Cowork or Claude Code). I love that they do this, and that they share not just the current prompts but historic changes to their prompts as wel

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on the developer's machine, four of them still unpatched at publication. The command executes as the u

Авторизация тихо отключилась сама, пока исследователи списывали аномалии на плановые тесты.

Hi, we're using Luna api for our agent, in some cases it starts spitting repeating stuff, like tool calls, or hashes... like 10k of them... until we cut it off... does anyone else has the same issue? submitted by /u/spider853 [link] [comments]

Инцидент застал отрасль врасплох: спасительное обновление вышло, но ставить его никто не спешит.

Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-speaking users through a fake television-streaming campaign on Meta and can give operators near-complete control of infected devices. ThreatFabric said t

Anybody here has experience with cloud providers to increase your OpenAI and Anthropic model endpoint quota (TPM) as a startup? I think we are pretty lucky that our product has got more traction than we anticipated, and now it's causing us problems. When usage spikes, we easily h

We needed to know where the open-source AI-detection field actually stands, so we ran every notable open detector through the same protocol. Setup: - Public data only: Jabarian & Imas 2025 (NBER), Liang 2023 TOEFL essays, a 1,060-text frontier set (GPT-5.x, Claude Opus 5, Gemini

Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, timely, accurate, and audience-appropriate communications during IT and operational technology (OT) outages. Whether caused by

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2

Anthropic introduced Enterprise Frontier Safeguards (EFS), a system that combines zero data retention with automated monitoring for misuse. The post Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards appeared first on SecurityWeek.

2 сентября Qwen3.8-Max-0902 поднялась на первую строку общего зачёта Code Arena WebDev. На момент исходной новости модель набрала 1691 очко и опережала Claude Opus 5 Max на три пункта.Проблема скрывается рядом с красивой цифрой: результат Qwen помечен как предварительный, голосов