Show Notes
Fifty-three people uploaded photographs to ChatGPT. Those photographs are now on the open internet. And OpenAI says it has no way to tell them, because it deliberately built itself so it can't work out whose they were.
More from AI in 15
One AI model passed secrets to another through the timing of a CPU cache. The two models were in separate virtual machines with no shared files and no network link between them, so no monitor could see the messages. OpenAI says its own models found that trick while being paid to break out.
One hundred and eighty million lines of mathematical proof. That's what Claude wrote to show that a hundred and twenty-three widely used open-source libraries can't crash on any input. Not just the inputs someone thought to test. Every input. Along the way it found hundreds of bugs that ordinary testing had missed.
Fourteen years. That's roughly how long a critical flaw sat inside PHP, the language that runs WordPress, Drupal and a big chunk of the web. Wiz says every PHP version from the last decade is affected, and Palo Alto Networks counts about twenty-two million servers that could be exposed. Three separate teams found it, and all three were using AI models.
Two thousand two hundred points and almost eight hundred and fifty comments. That's how Hacker News greeted DeepSeek's latest release, which isn't a model. It's the software that runs DeepSeek's own API, it's now free under an open license, and it runs on Huawei's chips as well as Nvidia's.
About fifty dollars. That's roughly what each successful break-in cost one hacker who let a swarm of AI agents loose on twelve hundred websites. More than a hundred organisations were breached, including John Deere, SharkNinja and Cummins, for a total bill of about five thousand dollars.