Search AI news

Researchers from Stanford and UC Berkeley Introduce TokenGate: Token-Gated Attention Makes Long-Context Prefill Up to 11.3x Faster

Researchers from Stanford University and the University of California, Berkeley have introduced TokenGate—a plug-and-play, learnable token-pruning module designed for existing large language models (LLMs). This approach accelerates the first-token generation time (TTFT) for long-context prefill by 1.4 to 11.3 times without sacrificing accuracy, while reducing peak memory usage by 1.5 to 3.4 times. The associated code and checkpoints have been made open source.

Anthropic launches OSS Scanner, a free AI-powered vulnerability scanner for critical open-source projects.

Anthropic launched OSS Scanner on October 8, 2026—a free, opt-in AI vulnerability-scanning tool powered by strong models such as Claude Mythos, designed specifically for critical open-source projects. As of October 19, it had onboarded 114 projects and, within 11 days, reported 77 high-severity and 803 medium-severity vulnerabilities (according to model ratings), with 88% of sampled audit results meeting its disclosure standards.

Why it matters：This tool represents a large-scale implementation of LLMs in the open-source security domain, characterized by zero cost, full automation, and offline auditing; however, bypassing the human review stage introduces risks of false positives and duplicate issues. Its accuracy metrics—88% detection rate and 1% false positive rate—and real-world project feedback (e.g., wolfSSL, curl) provide an empirical benchmark for the current state of AI‑driven vulnerability discovery.

Kimi releases K3.1 Pro: Terminal task capabilities top the charts, with simulation debugging and multimodal programming showcasing the nascent form of embodied intelligence.

On October 25, 2026, Kimi released the K3.1 Pro model, which ranked first in the Terminal-Bench 4.0 terminal task benchmark with a 67.2% success rate. Its capabilities—including autonomously fixing emulator errors, performing physics simulations, conducting audio analysis, constructing 3D scenes, and editing videos—point toward exploring pathways in embodied intelligence technology.

Why it matters：The material is based on a hands-on test report published with authorization from Titanium Media, covering authoritative third-party benchmark data (such as Artificial Analysis and Terminal-Bench 4.0), official self-test results, and the author’s multi-scenario functional validation. It highlights the K3.1 Pro’s substantial advancements in execution performance, simulation closed-loop capabilities, and multimodal programming, while clearly noting performance limitations and undisclosed information (e.g., Flash/Ultra has not yet been released), in compliance with fact-checking and source attribution requirements.

A quarter of PRs are “AI garbage”! The Linux Foundation has released a new report: AI writes code 52% faster, yet open-source maintainers are even more exhausted.

On October 20, the Linux Foundation released a report indicating that generative AI reduces the time required for code writing by an average of 52%; however, open-source project maintainers estimate that roughly 25% of pull requests are low-quality “AI slop,” with this figure rising to 31% in large-scale projects. The report highlights that the efficiency gains have not been matched by corresponding reductions in review and governance costs, as only 35% of projects have established formal AI contribution policies, underscoring growing developer burnout and a trust deficit.

Microsoft open-sources Agensh: a decentralized framework that supports 1024 autonomous, collaboratively operating AI coding agents.

On October 25, 2026, Microsoft Research open-sourced Agensh, a multi-agent runtime framework that operates without a central coordinator, enabling 1 to 1,024 LLM-powered coding agents to self-organize and collaborate on ProgramBench. The system achieves decentralized coordination through shared dashboards inspired by Gitea, Mattermost, and DeLM, with all agents following the same prompt-driven five-step loop; its scalability has been validated in a Linux + Docker environment.

Why it matters：This achievement represents a significant evolution in multi-agent system architectures—abandoning the traditional “master‑agent” paradigm and enabling large‑scale self‑organization through prompt engineering and lightweight service composition. Empirical results on ProgramBench (e.g., 128 agents achieving a 49% improvement in task load balancing across five tasks) establish a new benchmark for distributed AI engineering. Released under the MIT License and compatible with mainstream single‑agent tools such as Copilot CLI, it offers valuable guidance for practical development.

Underdog Saluki 27B: Technical Analysis of the 2-bit Qwen3.8-27B Tool-Calling Model Based on GSQ-RCO

This article introduces Saluki 27B, a model released by Underdog—a 7.9 GB, 2-bit quantized variant of Qwen3.8-27B—built using the GSQ-RCO method from ISTA-DASLab. It claims to outperform the original 54 GB full-precision model on the BFCL v4 benchmark across 120 tasks; however, all performance conclusions are based solely on the developers’ assertions and have not been independently verified.

The PHP “Meltdown” incident reveals how AI can amplify the threat of legacy vulnerabilities.

Security researchers, using AI tools, have turned a PHP vulnerability—known collectively as PHP2Shell—that has existed for years and was once considered difficult to exploit—into a real-world exploitable attack surface. Within hours of the vulnerability being made public, it was already targeted in millions of exploitation attempts, yet no successful intrusions have been reported to date.

Why it matters：This incident clearly demonstrates for the first time that AI does not create new vulnerabilities out of thin air; rather, it significantly lowers the barrier to exploiting existing vulnerabilities, highlighting AI’s dual role in accelerating both offensive and defensive security dynamics. Moreover, all valid findings rely on human–machine collaboration.

Sebastian Raschka has released an eight-video course titled “Building a Reasoning Model from Scratch.”

On October 24, 2026, Sebastian Raschka published an eight-part, over-11-hour hands-on video course on Python and PyTorch in Ahead of AI magazine (magazine.sebastianraschka.com), systematically covering the evaluation of inference models, scaling during inference, reinforcement learning (RLVR), and knowledge distillation, with all methods implemented using the pre-trained Qwen3-0.6B model.

Why it matters：This course is the author’s advanced technical educational offering, following “Building Large Language Models from Scratch.” It focuses on the core evolutionary direction of today’s mainstream LLMs—enhancing inference capabilities—covering the entire technical pipeline from setting up the foundational environment to GRPO reinforcement learning and self‑distillation. The author explicitly states that all implementations are “hand‑crafted from scratch,” fully reproducible, and highly instructive with significant engineering reference value.

Anthropic open-sources the OS-level sandbox sandbox-runtime: providing container-free file and network isolation for AI agents.

On October 24, 2026, Anthropic open-sourced sandbox-runtime (srt), an OS-level sandboxing tool that operates without containers, designed to restrict file read/write and network access permissions for AI agents, MCP servers, and CLI tools. It supports macOS (Seatbelt), Linux (bubblewrap), and Windows (alpha), with npm package version 0.0.81 under the Apache-2.0 license.

Why it matters：This tool represents a significant advancement in AI security infrastructure—achieving fine-grained, full-process-tree coverage through the operating system’s native isolation mechanisms, directly addressing the risks of prompt injection and privilege escalation, and has already been deployed for internal validation within Claude Code.

月之暗面发布Kimi K3.1 Pro：2.8万亿参数开源权重模型，11月4日开放权重

月之暗面于2026年10月22日前后发布Kimi K3.1 Pro，一款2.8万亿参数、1040亿激活参数的多模态MoE模型，宣称性能逼近Fable 5.1；官方承诺11月4日发布开源权重，但截至报道时权重尚未公开；独立评测显示其在智能指数、代码与网络安全基准中表现突出，但存在推理成本、本地部署可行性及营销透明度等争议。

Why it matters：该事件标志着当前最接近闭源前沿模型能力的开源权重模型正式进入发布倒计时，是AI开源生态关键进展；材料来源为Latent Space旗下AINews（2026年10月24日发布），内容基于对X平台、Reddit、Arena及Artificial Analysis等多方独立评测的整合，信息密度高且具时效性与交叉验证特征。

谷歌I/O 2026发布Gemini for Science、WeatherNext与Antigravity 2.0等AI科研与健康工具

谷歌研究团队在I/O 2026大会上集中发布面向科学发现、气候预测、医疗健康与边缘计算的系列AI系统，包括多模态科研助手Gemini for Science、支持飓风预警的WeatherNext、可自主构建操作系统的Agentic平台Antigravity 2.0，以及开源量子芯片Willow等；所有成果均为实验性演示，尚无独立验证或监管批准。

Why it matters：人工审核

谷歌推出零信任聚合私有分析技术，融合密码学与可信执行环境

谷歌研究团队发布新型私有分析方案，通过创新的单轮格密码聚合协议与可信执行环境（TEE）协同验证，实现无需信任单一实体的数据聚合，在保障用户数据始终驻留设备的前提下，获取群体级匿名洞察。

Why it matters：人工审核