HuggingFace publishes the full intrusion timeline same day Anthropic turns Claude loose on crypto bugs.
Top Signal
HuggingFace publishes full technical timeline of the July agent intrusion
research to practice
Simon Willison, r/LocalLLaMA
HuggingFace released a detailed technical postmortem of the July 2026 frontier-lab agent intrusion, walking through the actual attack chain rather than just confirming it happened. The same day, a related disclosure surfaced via Reuters (quoted by Akshat Bubna): a Modal customer had shipped an unauthenticated endpoint that let anyone on the internet run code in their sandboxes, and it was exploited in a similar pattern. Together these point to the same root cause showing up twice in one week: agent execution sandboxes without auth checks. If you run any agentic coding tool, code-execution sandbox, or MCP server with a network-reachable endpoint, treat this as a checklist item today, not a someday task. Audit auth on every execution endpoint your agents can reach, not just the ones you remember building.
Read more →
Fast Signals
Anthropic used Claude to find real cryptographic vulnerabilities
research to practice
Simon Willison, HN Front Page
New Anthropic research shows Claude discovering actual cryptographic weaknesses in code, with a public repo included for reproduction. It's a concrete, forkable workflow for LLM-assisted security auditing rather than another capability demo.
Link →
OpenAI open-sources Codex Security
new tool
HN Front Page
A new open-source security toolkit for agentic coding workflows hit HN front page at 270 points. Worth evaluating now that two sandbox-auth failures surfaced in the same week — this is a direct mitigation category.
Link →
uv 0.12.0 breaks the default `uv init` project layout
platform change
Simon Willison
The release changes what `uv init` scaffolds by default, with other breaking changes noted in the changelog. Check any templates or setup scripts that assume the old structure before upgrading.
Link →
Unsloth ships quantized Kimi K3 GGUFs
workflow
r/LocalLLaMA
MXFP4 quantization (1.5TB) and the mmproj file are already live on Hugging Face, days after K3's 2.8T-param weights dropped. Still needs serious hardware, but it's the fastest path to running K3 outside a datacenter.
Link →
Sebastian Raschka breaks down Kimi K3's architecture
research to practice
HN Front Page
A detailed technical walkthrough of what's actually new in K3's architecture, not just benchmark numbers. Useful if you're deciding whether any of its design choices are worth borrowing for your own fine-tunes or inference stack.
Link →
Qwen3.7-flash quietly appears on OpenRouter
emerging signal
r/LocalLLaMA
Pricing is substantially cheaper than Qwen3.6-flash with a native 1M context window, suggesting a small MoE successor is close to an official release. Worth bookmarking if you're cost-optimizing a long-context pipeline.
Link →
Popular LLM benchmarks had broken questions all along
research to practice
r/LocalLLaMA
An audit found up to 12% of GPQA, MMLU-Pro, and MMMU-Pro questions were broken or ambiguous; cleaned versions are now released. If you're citing these benchmarks to justify a model choice, re-run against the corrected sets.
Link →
Radar
Agenta: self-hosted Claude Cowork alternative
Open-source multi-agent workspace that lets you swap in self-hosted models and any harness instead of a single vendor stack. Worth a look if you want the Cowork-style UX without the lock-in.
Link →
DSpark speculative decoding PR opens against llama.cpp
A new speculative-decoding method under review for llama.cpp. Early stage, but speculative-decoding merges have a track record of meaningfully improving local inference throughput.
Link →
Formally verified 3D CSG: trust the spec, not the AI code
An individual dev built what appears to be the first formally verified 3D mesh-intersection implementation, in Lean 4, arguing a 93-line spec beats trusting 1000 lines of AI-generated geometry code. A concrete pattern for where formal verification beats code review on AI output.
Link →
Yap: OSS on-device voice dictation for macOS
A tiny menu-bar app that does hotkey-triggered voice-to-text entirely on-device with no separate model download step. A clean reference implementation if you're building local dictation into your own tool.
Link →
Convergence Watch
kimi k3
TRENDING
3 mentions across HN Front Page, r/LocalLLaMA
Five straight days of rising mentions culminated in the weights release; today's activity has shifted from hype to tooling — quantized GGUFs, architecture deep-dives, real deployment reports. That shift from announcement to infrastructure is usually the signal that a model is actually getting used, not just discussed.
frontier lab agent intrusion
TRENDING
3 mentions across Simon Willison, r/LocalLLaMA
This incident has generated sustained multi-source coverage for over a week. Today's development — an official technical timeline plus a second, related sandbox-auth failure at Modal — reinforces that unauthenticated agent execution endpoints are the recurring root cause across multiple unrelated platforms, not a one-off.