Skip to content

← AI Tracker

AI Wochen-Digest

PHP2Shell Hackening, Claude Duet, DeepSeek V4.1 Flash

Freitag, 23. Oktober 2026 - Wöchentliches AI-Briefing · (letzte 7 Tage)

The week was defined by two unrelated detonations. First: PHP2Shell — two critical unauthenticated RCE holes patched across the entire PHP 8.x line, with exploits circulating before disclosure. OpenAI’s GPT-5.6 Sol found one; Wiz found the other independently. For a RegTech CTO, this is the first time an agent-discovered zero-day shaped your Monday patch cycle. Second: the agent-harness war got crowded. Claude Duet (proactive Opus 5.5 agent), Meta’s Muse Spark Open (816B MoE, local-runnable on dual M5 Ultras), DeepSeek V4.1 Flash 1017, and Recursive’s 40B Flint all shipped within seven days. Decision models became a product category. LiteLLM got briefly backdoored on PyPI. Verify your supply chain.

Launches & releases this week

Models

  • Muse Spark Open — Meta’s 816B open-weight MoE with 42B active, 1M context, runnable locally across two M5 Ultra Mac Studios via MLX. (TLDR AI)
  • DeepSeek V4.1 Flash 1017 — KV cache down to 890 bytes per token via cross-layer reuse plus FP4; gains on coding, agentic tasks and whole-repo editing. (TLDR AI)
  • Recursive Flint — 40B MoE with 2.5B active per token, 125+ tok/s on M4 Pro MacBook, built from scratch in under four months as a local coding daily driver. (TLDR AI)
  • MAI-Base-2 — Microsoft’s 2.8T-parameter MoE with 80B active surpasses every open-weight model on held-out pre-training evals; headed for Foundry. (TLDR AI)
  • Mercury 3 — Diffusion LLM generating 1,000+ tokens/sec, 1M context, launch pricing on AI Gateway; targets browser agents and real-time search. (Vercel blog)
  • Voxtral 3 — Mistral speech stack covering 50+ languages with a voice-agent SDK, Mini TTS 3 and Small Transcribe 3 for real-time phone and web agents. (TLDR AI)
  • Nemotron 3.5 Super VL — NVIDIA multimodal reasoner scoring 26.5 on AA Intelligence Index with far fewer output tokens; Bolt 74B-A9B and NVFP4 weights ship alongside. (TLDR AI)
  • Reflection Beam — 501B US open-weight reasoning model (Apache 2.0), low-latency coding/agent focus, free on AI Gateway during launch. (Vercel blog)

Features & Tools

  • OpenAI Decisions API — Fast, low-cost classification endpoint for routing, scoring and gating — OpenAI’s entry into the decision-model category. (OpenAI blog)

Products

  • Claude Duet — Opus 5.5-powered proactive agent that monitors connected apps, prioritises tasks and acts autonomously with approval gates, US Pro/Max waitlist. (TLDR AI)
  • LangSmith LLM Gateway — Public beta: spend caps, rate limits, model fallbacks and PII redaction for production agents without provider lock-in. (LangChain blog)
  • 1Password for Agents — Agents request credentials from a user vault; 1Password autofills on the destination site without exposing the password. (TLDR AI)

Deals & Partnerships

  • OpenAI on Google Cloud — OpenAI frontier models and Codex workflows land in Gemini Model Garden and Google Cloud Marketplace with native GCP IAM and billing. (OpenAI blog)
  • OpenAI acquires Orchestra Bio — OpenAI buys drug-development coordination platform to fold into Rosalind life-sciences suite. (OpenAI blog)
  • Anthropic–Nscale $45B — Second $45B Anthropic–Nscale compute deal in a month; both companies pursuing IPOs. (TLDR AI)
  • OpenAI $1.25T round — UAE-led bridge round of up to $30B at $1.25T valuation ahead of a potential IPO. (TLDR AI)

Stories to follow

The worst week in cybersecurity

An agent-discovered RCE pair in PHP, a backdoored LiteLLM release on PyPI live for two hours, and an eMudhra intermediate-CA key compromise all landed in 72 hours. Agents are now both the discoverers and the attack surface. For a RegTech shop running LiteLLM as its model gateway, this is personal — verify the signature on your image and audit the blast radius of your agent credentials.

  • OpenAI’s PHP Patcher — GPT-5.6 Sol co-discovered two unauthenticated RCE holes patched across all PHP 8.x; exploits circulated pre-disclosure. (TLDR AI)
  • LiteLLM v1.107.0 compromised — Malicious LiteLLM package live on PyPI for ~2 hours before being pulled. (TLDR AI)
  • eMudhra intermediate CA compromise — Private keys of eight intermediate CA certificates trusted by Mozilla, Microsoft, Apple and Chrome leaked. (Simon Willison)
  • AI #191: The Hackening Begins — Zvi calls it probably the worst day in cybersecurity history. (Don’t Worry About the Vase (Zvi))

Decision models become a category

Within a week: OpenAI’s Decisions API, Perplexity Decider V1.2, Liquid d1-ultra, Baseten Mammoth-1/Elephant-1, Microsoft Decision-1, Cloudflare Clairic. Fast, calibrated, no-token classifiers for routing, scoring and gating. This is the practical face of the three-tier architecture: a cheap deterministic-feeling layer between your rules and your reasoners. Expect to retire a lot of LLM-judge code and a lot of regex.

  • OpenAI Decisions API — Fast, low-cost focused decisions for classification and routing. (OpenAI blog)
  • Liquid d1-ultra — Multimodal decision model at $0.042 per million input tokens, better calibration than Jev 1.14. (TLDR AI)
  • Mammoth-1 and Elephant-1 — Baseten’s 27B and 9B decision models top the Jev Decision Index. (TLDR AI)
  • Cloudflare Clairic — System-One extraction model that returns values with confidence scores and generates no tokens. (TLDR AI)
  • How to use decision models for evals — Hamel Husain on treating decision models as a low-cost alternative to LLM judges. (Hamel Husain)

Local-first frontier coding is here

Flint runs at 125 tok/s on an M4 Pro. Muse Spark Open spans two M5 Ultras. Spark-X2.6-4B targets device agents. AnyLanguageModel hits 1.0 on Apple platforms. The gap between what fits on your desk and what you rent is closing specifically for coding — relevant for a hybrid gateway strategy where the leaf-node agents run local and only the hard thinking hits Anthropic.

  • Recursive Flint — 40B MoE, 2.5B active, 125+ tok/s on M4 Pro MacBook Pro. (TLDR AI)
  • Muse Spark Open — 816B open-weight MoE running locally across two Apple M5 Ultra Mac Studios via MLX. (TLDR AI)
  • AnyLanguageModel 1.0 — One year of local models on Apple platforms, now stable. (Hugging Face blog)
  • Spark-X2.6-4B — 4B open model with improved coding, long-context and agentic post-training. (TLDR AI)

The harness is the product

Claude Duet points the agent at you; Claude Mods lets you program the interface in TypeScript; Ramp’s Laminar and Meta’s Thin Orchestrator show two in-house harness patterns from teams that got tired of waiting. The frontier moves to how the agent talks to the human — exactly the terrain of vibe coding as a management problem.

What I’m watching

Gathin23/cleanyourtv

27k★ · Java · adb adblock android-tv android-tv-launcher apple-tv Debloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.

deepseek-ai/DeepInfer

20.8k★ · Python DeepInfer: High-performance, large-scale inference framework for DeepSeek models

ly05010419/MacNativeGames

4.8k★ · C no description

simbasjungles/free-my-tv

3.8k★ · Java · android-tv claude-code google-tv home-screen launcher A fast, ad-free home screen for Google TV, LG webOS and Samsung Tizen. One button to undo.

pengchujin/aerial-tv

3.7k★ · Kotlin 给国产电视的一块干净桌面：参照 tvOS 设计的开源 Android TV 桌面，没有广告，开机自动接管。A tvOS-style launcher for Xiaomi, TCL and other China-market TVs.

Read this weekend

How the Claude Code team does code review

The clearest write-up this year on reshaping review for AI-written code: continuous checks instead of end-of-PR gates, tiered risk, humans only where they add signal. Directly maps onto the 22,000-line-PR problem and worth an hour on Saturday if you’re redesigning your team’s review flow.

Quote of the week

We think “did a human read the code?” is an imprecise proxy for “what could go wrong with this change, and which check — automated or human — is the right one to catch it?”

— Addy Osmani, Morgan Westlee Lunt, and Qing Wang (Anthropic) · link

Sources unavailable this week: Every — Chain of Thought (Dan Shipper), Last Week in AI, Latent Space, r/ChatGPTCoding top, r/ClaudeAI top, r/LocalLLaMA top, r/MachineLearning top

Auto-curated weekly by Claude Opus 4.7 from Ben’s Bites, Cursor changelog, Don’t Worry About the Vase (Zvi), Exponential View (Azeem Azhar), GitHub: All-Hands-AI/OpenHands, GitHub: BerriAI/litellm, GitHub: anthropics/claude-code, GitHub: cline/cline, GitHub: huggingface/transformers, GitHub: langchain-ai/langchain, GitHub: langchain-ai/langgraph, GitHub: ollama/ollama, GitHub: sgl-project/sglang, GitHub: vllm-project/vllm, GitLab blog, Google DeepMind blog, Hamel Husain, Hugging Face blog, Import AI (Jack Clark), Interconnects (Nathan Lambert), JetBrains AI blog, LangChain blog, Lenny’s Newsletter, NVIDIA developer blog, Not Boring (Packy McCormick), One Useful Thing (Ethan Mollick), OpenAI blog, SaaStr (Jason Lemkin), Simon Willison, Sourcegraph blog, TLDR AI, The Algorithmic Bridge (Alberto Romero), The Pragmatic Engineer (Gergely Orosz), Together AI blog, Tomasz Tunguz, Understanding AI (Timothy B. Lee), Vercel blog. Source list and editorial profile maintained by Daniel.