… And users don't necessarily get those updates immediately. Pedhapati said he picked Discord as a target because "It's sitting on Chrome 138, nine major versions behind current." Pedhapati argues that as AI models become more capable of exploit development, the patch window gets smaller. …
… "The server contains the model weight file of a peer, last updated in 2024, and therefore not supposed to be transferred," the paper says. "Following this policy faithfully, the model should leave the model weight file on the server. …
AI + ML Free Software Foundation calls for free-range LLMs rather than factory-farmed AI F is for Free, FSF, and fat chance UPDATED The Free Software Foundation FSF has rattled a saber at Anthropic over the use of its materials in training the AI vendor's models, urging it to set its LLMs free. …
… According to Ramasamy, Anthropic hands off model administration to a government customer like the Defense Department. Model updates, with new or removed capabilities, would have to be negotiated. …
… Now they have a new Big Bad: an AI model that can generate zero-day vulnerabilities. Anthropic made the model and named it Mythos. …
… The model points to issues like "Claude Code's prediction-first behavior is dangerous on capital-at-risk projects" 46212 , "Claude Code is unusable for complex engineering tasks with the Feb updates" 42796 addressed by Claude Code head Boris Cherny , "Artificial degradation, Acquisition Bias, and u… …
… Some of these, like curl, which enables network requests from the command line, might pose a security risk if invoked by an over-permissive AI model. …
AI + ML Anthropic squeezes enterprises by ejecting bundled tokens from seat deal Large organizations pushed toward metered pricing UPDATED More bad news for Claude users. …
… Anthropic paid a $100 bounty, upgraded the critical severity from a 9.3 to 9.4, and updated a " security considerations " section in its documentation. …
… "That tracks with what we're seeing across the industry as models get increasingly good at detecting vulnerable code. Discovery is becoming dramatically cheaper as large models get increasingly good at exploring codebases and reasoning across components. …