Saturday, 29 August 2026
AI agents find exploits from bug rumours alone; OpenAI blocks Cursor after SpaceX acquisition; GLM-5.3's 753B weights go open.
Today's Lead
EngineeringAnil Madhavapeddy
Just a Rumour of a Bug Is Enough to Find a Security Exploit These Days
Open-source security practices like embargoes and private patch development are no longer effective. AI agents can generate exploits from minimal information about a vulnerability. The author showed that AI agents could discover and weaponize vulnerabilities with only a general description. Research shows that GPT-4 agents exploited eighty-seven percent of fifteen vulnerabilities from CVE descriptions. The author recommends continuous shipping, rapid releases, and dynamic protections at the protocol layer instead of secrecy.
Latent Space
[AINews] OpenAI Shuts Off Cursor
OpenAI cut off Cursor's access to its models after SpaceX acquired Cursor. OpenAI cited that Elon Musk's companies violated contracts. Cursor said OpenAI models were only 5 percent of its traffic. This action reflects tension between OpenAI and Musk's AI division. The incident shows both companies have sufficient AI power to make access restrictions matter.
Read →Z.ai / Hugging Face
Z.ai released GLM-5.3, an open-weights language model with 753 billion parameters. The model shows 50 percent improvement on coding tasks over GLM-5.2 and provides state-of-the-art cybersecurity capabilities for vulnerability discovery. GLM-5.3 supports 1 million token context length and multiple serving frameworks.
Read →Chips and Cheese
Hot Chips 2026: Samsung's Processing-in-Memory (PIM)
Samsung embeds compute units into LPDDR5X memory banks. The design uses multiply-accumulate units to perform computation within memory. This provides 614 GB/s internal bandwidth, much higher than standard LPDDR5X. Software constraints limit practical use: the chip must change memory modes to compute, which stops multitasking, and uncacheable memory reduces performance. Eight chips together equal Intel Meteor Lake NPU throughput.
Read →pwning.systems
I Accidentally Turned LLM Memory into Program Analysis
The author built Lemmalog, a Datalog-based system that manages LLM memory for vulnerability research. The system uses structured knowledge and logical rules instead of traditional retrieval. It tracks why conclusions exist and removes dependent facts when assumptions change. Lemmalog reduces context size 38 times on benchmarks compared to standard approaches. The system treats vulnerability investigation like program analysis, where LLMs handle natural language and the database handles logical reasoning.
Read →Geeky Schmidt
Verschlimmbesserung: The Word Your Software Updates Need
Verschlimmbesserung is a German word for improvements that make software worse. Organizations optimize for release speed over quality, so teams ship unnecessary updates that worsen products. Stability deserves recognition as valuable, and knowing when not to ship represents genuine engineering discipline.
Read →Vectorian
Does the Sumerian King List Align with Paleoclimate Events?
A researcher tested whether ancient Sumerian reign lengths match prehistoric paleoclimate events. Statistical analysis found no significant alignment between the two datasets. The hypothesis that the Sumerian King List encodes climate information receives no statistical support.
Read →