OpenAI Introduces GPT-6 Cyber — Episode 128 cover art
Episode 128·November 12, 2026·33:51

OpenAI Introduces GPT-6 Cyber

OpenAI’s GPT-6 Cyber leads a slate that also includes 948 validated Linux kernel security patches generated by OpenAI. Show notes: https://tobyonfitnesstech.com/podcasts/episode-128/

🎧 Listen to Episode

AgentStack Daily EP128 — GPT-6 Cyber, 948 kernel patches, local 3D assets

Title: OpenAI Introduces GPT-6 Cyber

Tagline: OpenAI introduces GPT-6 Cyber, while a separate OpenAI effort generated 948 validated Linux kernel security patches. A local model for editable 3D game assets and NVIDIA’s offline speech model handling 40 languages broaden the tooling lineup. Baidu ships a 280B ERNIE Base with 14B active parameters, and research digests examine linked care decisions and more selective, accurate linear attention. Hermes Agent v0.23.0, GitHub’s BYOK separation, Dependabot updates, Cult.fit’s Codex work, expanded university access, and a poisoning-related lawsuit round out the stories.

Feed description: OpenAI’s GPT-6 Cyber leads a slate that also includes 948 validated Linux kernel security patches generated by OpenAI. A local model builds editable 3D game assets, NVIDIA’s offline speech model handles 40 languages, and Baidu ships a 280B ERNIE Base with 14B active parameters. Research covers linked care decisions and selective linear attention, alongside Hermes Agent v0.23.0, GitHub BYOK separation, Dependabot updates, Cult.fit’s Codex tools, university access, and a lawsuit alleging ChatGPT helped plan a poisoning.


Story Slate

  1. Agent Stack Release Readout: Hermes Agent v0.23.0 Hermes Agent v0.23.0 introduces a Webapp that serves the full Desktop workspace from your own gateway, bringing chats, Group Chats, plugins, and settings to a browser with sign-in support. The release also centralizes session ownership so the CLI, terminal interface, Desktop, editors, bots, and scheduled jobs attach to the same agent instead of operating separate copies. Supporting additions include self-updating plugins, price tags and spending limits for paid MCP tools, pluggable delegation, and a larger plugin catalog. Technical depth angle: The key mechanism is a shared gateway that owns agent sessions while different interfaces connect as clients. Hermes Agent’s new Webapp exposes that gateway-backed workspace through a browser, so several surfaces can operate on the same conversations without independently running agents. The release also adds direct controls for plugin updates and spending on paid MCP tools. Actionability angle: Builders can now offer a browser-based interface while keeping terminal, editor, bot, and scheduled-job workflows connected to the same live workspace. Enabling Web Access or webapp.enabled makes the new interface available when a gateway-backed deployment fits the use case, while price tags and spending limits can constrain paid MCP tools. The feature is off by default, so adoption through the web access controls is the next thing to watch. Listener hook: Hermes Agent can now put an entire agent workspace in a browser tab while keeping every connected interface on the same conversations.

  2. OpenAI generated 948 validated Linux kernel security patches OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel. Local privilege escalation is a security flaw that lets someone with limited access gain higher-level access to the same machine. The work points toward a more automated approach to discovering serious kernel flaws and preparing candidate fixes at scale. Technical depth angle: The useful mechanism is an autonomous pipeline with three concrete stages: it found vulnerabilities, validated them, and generated patches. Applied to the Linux kernel—the core system software that manages hardware and system resources—the pipeline produced patches for 948 local privilege-escalation flaws. That end-to-end automation is more significant than any individual patch because it demonstrates a repeatable route from discovery to proposed remediation. Actionability angle: For security teams and open-source maintainers, this is a concrete pattern for automated vulnerability remediation: identify a flaw, verify it, and prepare a proposed fix without handling each step manually. The next thing to watch is how many of the 948 generated patches pass Linux kernel maintainer review and enter the project. Listener hook: A thousand fewer paths to root is a striking result for anyone interested in how AI can move beyond writing code and toward finding serious security flaws.

  3. A local model that builds editable 3D game assets CCORE released GLB-3D-Coder, a 4B model designed to turn text prompts into editable low-poly 3D assets. It generates a Three.js page with a preview and an Export GLB button, letting creators inspect the result and import it into Godot or another editor. Quantized and original weights are available, alongside a dataset of 3,918 tested and rendered examples across 40 domains. Technical depth angle: The useful mechanism is a local text-to-3D coding pipeline: the model generates a complete Three.js page, renders the requested asset in a browser, and exports it as a GLB file. If animation is requested, it is meant to be included in that export, though the publisher says users should verify it in an editor. Actionability angle: This gives local coding agents a concrete path from a natural-language asset brief to an editable game-ready file, rather than stopping at a static image. The main quality boundary is practical: generated assets may need a retry, a code correction, or editor-side verification of materials, lighting, and animation. Listener hook: A four-billion-parameter local model can now generate 3D game assets you can preview and export for further editing.

  4. NVIDIA’s offline speech model handles 40 languages NVIDIA released Nemotron 3.5 Transcribe, an open-weight speech model for offline transcription and audio understanding across 40 languages. It can turn recordings into verbatim or cleaned-up transcripts, translations, speaker-attributed text, timestamps, language labels, or answers to questions, using instructions and optional vocabulary context. The model supports recordings up to one hour and can run through NeMo Speech or Hugging Face Transformers, giving builders a route to private, locally deployed speech workflows. Technical depth angle: Nemotron 3.5 Transcribe combines audio and text instructions to produce text responses, with separate automatic-speech-recognition and speaker-recognition encoders feeding a hybrid language model. It activates approximately 4.3B parameters overall and is available in BF16, FP8, and NVFP4 precision. Prompts can select transcription style, add domain vocabulary, request speaker tags and word timestamps, translate speech, or query the recording. Actionability angle: This makes it possible to build private transcription, meeting analysis, media localization, and audio-search workflows without sending recordings to a remote service. A practical first step is to test it against representative recordings, including accents, overlapping speakers, and the languages your product actually needs. Listener hook: One offline model can now transcribe, translate, label speakers, and answer questions across 40 languages.

  5. Research digest: AI models miss linked care decisions NPCBench found that strong performance on individual medical questions does not mean a model can make correct linked decisions while managing a patient’s care. The benchmark follows nasopharyngeal carcinoma cases from initial knowledge and planning through follow-up and open consultation, requiring models to connect visual evidence with changes in a patient’s condition. This suggests that medical AI evaluation needs to test whole-care reasoning, not just isolated answers. Technical depth angle: The key finding is a composition gap: models can perform well on separate diagnostic or care questions while failing to make the right sequence of decisions for the same patient. NPCBench evaluates whether answers remain jointly correct across a care pathway, including whether the model uses visual evidence and recognizes changes over time. Actionability angle: For teams choosing or evaluating medical AI, standalone question scores may give an overly optimistic picture; linked patient-level decisions are a more revealing test. The practical consequence is that a model may need targeted evaluation for integrating evidence, updating its understanding of a patient, and handling follow-up decisions. Listener hook: The benchmark shows why a chatbot’s impressive one-question performance may not translate into dependable support for a real patient’s ongoing care.

  6. Research digest: Muir makes linear attention more selective and accurate Muir is a new approach to linear attention that improves how models update and read their compressed memory. It allocates update capacity according to which parts of the memory are most sensitive to change, then adjusts the readout to reduce interference from older information. Across the tested model sizes, Muir produced lower perplexity and higher commonsense accuracy than both GDN-2 and a standard Transformer. Technical depth angle: Linear attention compresses context into a fixed-size state instead of storing and processing every earlier token in the same way. Muir combines its update gates into a selective, low-rank projection, reweights stored information during readout, and uses the freed capacity for a wider feed-forward network. A parallel update also keeps training numerically stable at larger processing chunks. Actionability angle: The work suggests that long-context AI can improve by treating memory updates selectively rather than giving every channel equal importance. That could benefit systems that need to retain useful context without letting memory usage grow as the document becomes longer. Listener hook: A better way to manage compressed model memory could make long-context AI tools more accurate without sacrificing their memory advantage.

  7. Cult.fit uses Codex to build faster operational tools Cult.fit is using Codex to help teams across different functions build tools, move faster, and change how work gets done. The announcement positions Codex as a practical coding partner embedded in day-to-day operations, rather than a specialized experiment for a single team. Cult.fit’s example shows a company applying AI across multiple parts of the organization to turn recurring work into tools. Technical depth angle: The useful mechanism is straightforward: teams use Codex to build tools that support work across functions. The company says this helps teams move faster and reshape how work gets done, turning software creation into a way to improve operational work rather than treating it as a one-off coding task. Actionability angle: This means teams can use Codex to build practical tools around recurring operational needs while collaborating across roles. The example is relevant to builders looking for a concrete route from AI-assisted coding to faster day-to-day execution. Listener hook: Cult.fit is using Codex to make operational tools—not just demonstrate what AI can do.

  8. OpenAI Introduces GPT-6 Cyber OpenAI introduced GPT-6 Cyber, a cybersecurity model designed to find exploitable vulnerabilities and develop fixes. The company says the model was trained to remain within authorized scope, making its core focus identifying real weaknesses and helping address them rather than acting beyond the boundaries of a security engagement. Technical depth angle: GPT-6 Cyber combines vulnerability discovery with fix development in one cybersecurity model. Its defining safety constraint is scope awareness: the model is trained to stay within authorized limits while searching for exploitable weaknesses and working on remedies. Actionability angle: This gives authorized security teams a model that can support both vulnerability-finding and remediation work in the same workflow. The important thing to watch is how effectively the model applies its scope boundaries in real security engagements. Listener hook: OpenAI is bringing language-model reasoning directly into authorized vulnerability discovery and repair work.

  9. GitHub Separates BYOK and Custom-Model Usage GitHub’s Copilot usage metrics API now distinguishes bring-your-own-key (BYOK) traffic from Copilot-hosted model usage. Local BYOK sends requests from Copilot CLI or the app directly to a developer’s provider key or local model. Enterprise custom models route through GitHub and can be identified with a new boolean field. Enterprise and organization reports now separate these categories at user and aggregate levels over one- and 28-day periods. Technical depth angle: The useful change is attribution, not new accounting. Local reports include user activity plus session, request, prompt, and token totals broken out by BYOK kind and client surface. Enterprise custom-model entries carry real request and token counts. Local figures depend on client telemetry and may undercount; GitHub observes enterprise custom-model requests server-side, including in IDEs. Actionability angle: Cost and security teams can now compare hosted use with own-key, local, and enterprise-configured models when reviewing spend or policy. Dashboards should treat local BYOK figures as directional when telemetry is disabled, while enterprise custom-model counts provide a broader cross-client view. Listener hook: Teams running their own models can finally see that traffic separately from Copilot-hosted usage.

  10. Dependabot brings version updates to AI agent packages GitHub added Dependabot version updates for Agent Package Manager, giving teams a way to keep supported AI agent skills, prompts, and instructions up to date. Dependabot checks for newer package versions and opens pull requests containing the updates, so changes can be reviewed before they are applied. The announcement makes agent dependencies more like conventional software dependencies: visible in version control and handled through an established update workflow. Technical depth angle: The useful mechanism is Dependabot’s pull-request workflow for Agent Package Manager, or APM. When it finds a newer version of a supported agent package, Dependabot opens a pull request with the proposed update. That puts version changes into a reviewable code workflow rather than requiring teams to track each package manually. Actionability angle: Teams can now manage supported agent skills, prompts, and instructions with the same pull-request-based update process they use for other dependencies. Builders should review Dependabot’s supported-package coverage before relying on it for a particular agent setup. Listener hook: Your agent’s skills and prompts can now receive version updates through pull requests instead of being maintained entirely by hand.

  11. Palo Alto Networks reportedly in talks to buy Clutch Palo Alto Networks is reportedly discussing a $500 million acquisition of Clutch, a startup focused on security for AI agents. Clutch was last valued at $85 million, according to a source familiar with the matter, making the proposed price nearly six times its previous valuation. The company is backed by Lightspeed and SignalFire. A completed deal would combine Palo Alto Networks with a business centered on a rapidly emerging category: protecting AI agents. Technical depth angle: Clutch is identified as an AI-agent security startup, but the available information does not describe its underlying technology, products, customers, or deployment model. The concrete development is the reported $500 million acquisition discussion, against a prior company valuation of $85 million. Actionability angle: For teams evaluating AI-agent security, the talks signal substantial corporate interest in the category. Until the transaction is confirmed and Clutch’s product details are disclosed, the news does not establish a new capability or workflow that teams can adopt. Listener hook: AI-agent security may be about to become a much bigger part of enterprise software spending.

  12. Baidu Ships a 280B ERNIE Base With 14B Active Parameters Baidu has released ERNIE 5.5 Flash Base, a 280B-parameter sparse mixture-of-experts model with 14B active parameters. The model was trained on 33.5 trillion tokens and published before any mid-training or post-training, making the release specifically about the pretrained base. Its headline contribution is substantial model capacity with partial activation: the full model is much larger than the portion used at a time. Technical depth angle: The key mechanism is partial activation. ERNIE 5.5 Flash Base has 280B total parameters, with 14B active, and was trained on 33.5T tokens. The release came before any mid- or post-training, so the published model is the foundation before those additional training stages. Actionability angle: For builders, this is a foundation-model release whose usefulness will depend on the downstream training created around it. The central sizing question is how its 280B total capacity and 14B active parameters compare with a project’s quality and resource requirements; the first mid- and post-trained derivative will provide another useful signal. Listener hook: A 280-billion-parameter model with 14 billion active parameters shows how large model capacity can coexist with partial activation.

  13. Australian universities expand ChatGPT access Australian universities are expanding access to ChatGPT and bringing AI into teaching and learning to prepare students for an AI-enabled workforce. The change treats AI as part of the university experience, giving students access while asking educators to incorporate the technology into learning. OpenAI published the announcement on November 5, 2026, positioning the effort around workforce readiness and graduates who are prepared to work with AI. Technical depth angle: The practical change has two parts: broader student access to ChatGPT and greater use of AI in teaching and learning. This moves the technology beyond an optional outside tool and into the learning environment itself. The stated goal is to help students develop the familiarity needed for an AI-enabled workforce. Actionability angle: For universities, the meaningful implementation question is how expanded ChatGPT access connects with teaching and learning. For students and educators, this signals that hands-on AI experience will increasingly shape university work and preparation for employment. Listener hook: This is a concrete sign that universities are changing how students learn with AI, not merely advising them to try it later at work.

  14. Lawsuit Alleges ChatGPT Helped Plan a Poisoning A lawsuit alleges that a man introduced his wife to ChatGPT and that she used it to plan his murder. According to Ars Technica’s report on the filing, the alleged method involved ChatGPT-steered poisoning of bitter energy drinks. The case is significant because it places an alleged use of AI in a concrete criminal-law setting: the chatbot is alleged to have helped shape a plan for physical harm. Because the account comes from a lawsuit, the facts described remain allegations rather than a judicial finding. Technical depth angle: The concrete mechanism alleged is AI-assisted poisoning: the person accused allegedly used ChatGPT to plan how to contaminate bitter energy drinks so they would poison the person drinking them. The legal focus is the chatbot’s alleged role in planning, not a claim that the model acted independently or that prompting alone proves causation. Actionability angle: For teams building chatbots, this case is a concrete prompt to evaluate whether systems can interrupt assistance with physically harmful plans without overblocking legitimate conversations. The allegation should also remain separate from a technical conclusion: a lawsuit alleging that ChatGPT helped plan an act does not by itself show that the product independently intended or carried it out. Listener hook: A lawsuit turns alleged chatbot-assisted planning into a concrete test of where AI safety, evidence, and criminal liability meet.


Editorial Mix Check

  • flagship_products: 8
  • builder_projects: 7
  • local_ai: 3
  • hardware_compute: 2
  • policy_regulation: 1
  • research: 2

Model Discovery Check

  • Google: Gemini Omni 1.2 Flash (google) — Newly listed this cycle (verified November 06, 2026). Primary source: https://openrouter.ai/models/google/gemini-omni-1.2-flash. Availability: API via OpenRouter. Capabilities: context length 131072; Gemini Omni 1.2 Flash is Google's native multimodal video generation and editing model, the successor to Gemini Omni 1.1 Flash. It generates clips up to 15 seco. Try now / integration angle: available for evaluation via the model page above. Decision: Not Selected — variant/duplicate of a model featured on a recent broadcast, or not a major standalone drop.

  • Google: Gemini Omni 1.1 Flash (google) — Newly listed this cycle (verified November 06, 2026). Primary source: https://openrouter.ai/models/google/gemini-omni-1.1-flash. Availability: API via OpenRouter. Capabilities: context length 131072; Gemini Omni 1.1 Flash is Google's native multimodal video generation and editing model, the generally available successor to Gemini Omni Flash Preview. It is su. Try now / integration angle: available for evaluation via the model page above. Decision: Not Selected — variant/duplicate of a model featured on a recent broadcast, or not a major standalone drop.

  • Auto Code (openrouter) — Newly listed this cycle (verified November 06, 2026). Primary source: https://openrouter.ai/models/openrouter/auto-code. Availability: API via OpenRouter. Capabilities: context length 2000000; Auto Code is OpenRouter’s router built specifically for coding agents and harnesses. It uses the same routing engine as the [Auto Router](https://openrouter.ai/. Try now / integration angle: available for evaluation via the model page above. Decision: Not Selected — variant/duplicate of a model featured on a recent broadcast, or not a major standalone drop.

  • Qwen3.5-4B-GLB-3D-Coder — Source checked November 06, 2026. Primary source: https://huggingface.co/ccore/Qwen3.5-4B-GLB-3D-Coder. Availability: Quantized Q4_K_M and Q8_0 weights and the original Safetensors checkpoint are available under Apache 2.0.. params_active: n/a; params_total: n/a; context: n/a; modality: see primary source. Capabilities: The model turns a text description into a Three.js page with a preview and an export button that produces a GLB asset for editors such as Godot. Evidence: publisher_report. Decision: Selected — covered in the numbered slate from a non-OpenRouter source.

  • NVIDIA-Nemotron-3.5-Transcribe-30B-A4B — Source checked November 06, 2026. Primary source: https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Transcribe-30B-A4B. Availability: Developers can run the checkpoint in process with Hugging Face Transformers or serve it through NeMo Speech.. params_active: n/a; params_total: n/a; context: n/a; modality: see primary source. Capabilities: The model supports multilingual transcription, speech translation, speaker-attributed transcription, timestamp prediction, language identification, and audio question answering. Evidence: publisher_report. Decision: Selected — covered in the numbered slate from a non-OpenRouter source.


Local LLM Spotlight

  • moonshotai/Kimi-K3.1-Pro — https://huggingface.co/moonshotai/Kimi-K3.1-Pro — Trending open model on Hugging Face; task image-text-to-text; 1342 likes and 18432 downloads. Tags: transformers, safetensors, kimi_k31, text-generation, compressed-tensors, conversational, image-text-to-text, custom_code, license:other, eval-results. Try now: Read the linked model card before downloading, and choose a runtime or device only after it confirms the license, weight format, context window, benchmarks, and hardware requirements.

GitHub Project Radar

  • DeusData/codebase-memory-mcp — https://github.com/DeusData/codebase-memory-mcp — DeusData/codebase-memory-mcp provides local code intelligence that connects code, documentation, and infrastructure in a persistent graph, with MCP tools and change-aware test selection. stars: 48,200; stars_delta_30d: +2,431 (+5.3%) since 2026-10-04; latest_release: v0.12.1 (2026-10-16). Why this is on the radar now: v0.12.1 shipped on 2026-10-16 and the repository was updated on 2026-11-04. Stack improvement angle: Adding its persistent repository graph and MCP tools would help agents ground code changes, documentation updates, and infrastructure work in explicit relationships. Try now: Try the MCP tools on a small scratch repository and ask an agent to map the code, documentation, and infrastructure connections.

  • ahujasid/mcp-for-blender — https://github.com/ahujasid/mcp-for-blender — ahujasid/mcp-for-blender is a community plugin that lets any LLM control Blender, and it is not affiliated with the Blender Foundation. stars: 33,443; stars_delta_30d: +3,498 (+11.7%) since 2026-10-04; latest_release: none published on GitHub as of 2026-11-06. Why this is on the radar now: The repository was updated on 2026-11-04 and enters the radar with 33,443 stars. Stack improvement angle: Pairing the plugin with an agent harness could let agents inspect and modify Blender scenes through natural-language instructions. Try now: Enable the plugin in Blender and request one small, easily reversible scene edit.

  • PrefectHQ/fastmcp — https://github.com/PrefectHQ/fastmcp — PrefectHQ/fastmcp is a Python framework for building MCP servers and clients. stars: 28,327; stars_delta_30d: +810 (+2.9%) since 2026-09-04; latest_release: v4.1.6 (2026-11-03). Why this is on the radar now: v4.1.6 shipped on 2026-11-03 and the repository was updated on 2026-11-06. Stack improvement angle: It could provide a consistent Python service layer for exposing an agent stack's tools, resources, and external integrations over MCP. Try now: Create a minimal MCP server that exposes one useful tool and connect it to your agent workflow.


Extra Research Candidates

  • webAI Releases TwIL-8B, an 8.8B Reasoning Model Scoring 98.2 on MATH-500 — https://www.marktechpost.com/2026/11/04/webai-twil-8b-reasoning-model/ — webAI released TwIL-8B, an 8.8B reasoning model post-trained from IBM Granite 4.2 8B. It posts 98.2 on MATH-500 and 81.6 on LiveCodeBench, but trails similar-size models on knowledge benchmarks. The post webAI Releases TwIL-8B, an 8.8B Reas Technical depth angle: TwIL-8B is an 8.8-billion-parameter reasoning model produced through post-training from IBM Granite 4.2 8B, with reported scores of 98.2 on MATH-500 and 81.6 on LiveCodeBench.

  • Australian universities are creating AI-native graduates — https://openai.com/index/australian-universities-ai-native-graduates — Australian universities are expanding access to ChatGPT and bringing AI into teaching and learning to prepare students for an AI-enabled workforce. Technical depth angle: The universities' approach combines expanded student access to ChatGPT with AI integration across teaching and learning for an AI-enabled workforce.

  • Flipsnack grows product signups with conversion optimization — https://openai.com/ads/customers/flipsnack — Flipsnack focused its ChatGPT Ads campaigns on getting people to try its product, growing registrations while lowering the cost per signup. Technical depth angle: Flipsnack used campaign conversion optimization focused on product trials, which grew registrations while lowering cost per signup.


Show Notes

Episode 128 — November 06, 2026

[00:00] Episode hook

Hermes Agent v0.23.0 introduces a Webapp that serves the full Desktop workspace from a user’s own gateway, putting chats, Group Chats, plugins, and settings in a browser with sign-in support. OpenAI has generated 948 validated Linux kernel security patches through an autonomous pipeline that finds, validates, and creates fixes for local privilege-escalation vulnerabilities. Separately, CCORE released GLB-3D-Coder, a 4-billion-parameter model that turns text prompts into editable low-poly 3D assets while generating a Three.js preview page with an Export GLB button. NVIDIA’s Nemotron 3.5 Transcribe is an open-weight speech model for offline transcription and audio understanding across 40 languages, producing verbatim or cleaned-up text. NPCBench reports that medical AI models can answer individual questions well yet fail at linked care decisions, exposing a gap between isolated accuracy and coordinated clinical reasoning. Muir advances linear attention by making compressed-memory updates more selective and accurate, allocating capacity to the portions of memory most sensitive to change.

[02:00] Agent Stack Release Readout: Hermes Agent v0.23.0

Hermes Agent shipped v0.23.0 on November 5, 2026, with a practical change for people running agents across several surfaces: the complete Desktop workspace can now open in a browser tab. Its new Webapp serves the same chats, Group Chats, plugins, and settings from your own gateway. It is reachable from a browser on your network or through a public URL with sign-in, and the Webapp ships with both the Docker image and Nix package. Access is off by default and can be enabled through webapp.enabled or Web Access in Settings.

The release also changes how Hermes Agent coordinates work. Each machine now runs one gateway that owns its sessions, while the CLI, terminal interface, Desktop, editors, messaging bots, and cron attach to that gateway as clients. That gives surfaces access to the same conversations without each running its own agent, reducing the duplicate-message and missing-message problems that could occur when several interfaces previously operated independently. Desktop can keep multiple machines connected at once, while Group Chats route their own conversations.

Around that foundation, v0.23.0 adds self-updating plugins, price tags and spending limits for paid MCP tools, and pluggable delegation. The plugin catalog expanded from about 600 to more than 1,050 entries, and the built-in skill set became leaner. The release also includes memory and latency work intended to improve long-lived gateways.

[02:44] OpenAI generated 948 validated Linux kernel security patches

OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel. A local privilege-escalation vulnerability is a flaw that lets someone with limited access gain higher privileges on the same machine, so these are issues that could turn ordinary access into much greater control.

The important change is not simply that AI produced code. The system carried the work across three connected stages: discovery, validation, and patch generation. Applied to the Linux kernel—the core system software that manages hardware and other system resources—that approach produced 948 patch candidates for distinct vulnerabilities.

For maintainers, the result offers a large body of proposed fixes rather than another abstract promise about automating security work. It also gives builders a concrete model for vulnerability-remediation systems that proceed from finding a flaw to checking it and preparing a repair.

What to watch next is how many of those patches survive maintainer review and become part of the Linux kernel. The pipeline has completed its reported discovery-and-patch-generation cycle; acceptance upstream is the next meaningful test.

[03:51] A local model that builds editable 3D game assets

CCORE released GLB-3D-Coder, a specialized 4B coding model for creating low-poly game assets and procedural scenes. It is based on Qwen3.5-4B and is available in two quantized formats as well as its original Safetensors checkpoint under the Apache 2.0 license. The workflow starts with a prompt for a character, prop, building, or environment. The model turns a text description into a Three.js page with a preview and an export button that produces a GLB asset for editors such as Godot. Users can inspect that page, export the asset as a GLB file, and import it into Godot or another editor that supports that format. Animation can be requested and included in the export, although the publisher recommends checking that it survived the export. CCORE also released its training dataset: 3,918 tested and rendered examples spanning 40 domains, with validated GLB exports. Its RIFTWARD showcase demonstrates one possible agent workflow, with generated assets assembled into a browser arena that no longer needs live model inference during play. A copyable prompt in that showcase connects a coding agent to a local model API for building a game from generated outputs. The practical limit is that some requests need a retry or a small code correction. Materials, lighting, and animation can also differ between the browser preview and the imported asset, so editor inspection remains an important step. Some requests require a retry or a small code correction, and exported assets may differ from the browser preview in materials, lighting, and animation. Quantized Q4_K_M and Q8_0 weights and the original Safetensors checkpoint are available under Apache 2.0.

[05:31] NVIDIA’s offline speech model handles 40 languages

NVIDIA released Nemotron 3.5 Transcribe as an open-weight offline speech model for 40 languages. It accepts recordings along with text instructions and optional context, so the same model can produce a verbatim research transcript, readable captions, a translation, a speaker-attributed transcript with word timestamps, or an answer to a question about the audio. The model supports recordings up to one hour and uses approximately 4.3B active parameters, including its audio encoder. NVIDIA publishes BF16, FP8, and NVFP4 weights, with documented deployment on one H100 80 GB. Developers can run the checkpoint in process with Hugging Face Transformers or serve it through NeMo Speech. On the publisher’s multilingual benchmark, Nemotron 3.5 Transcribe recorded a mean word error rate of 4.62, compared with 6.49 for Qwen3-ASR-1.7B. These are publisher-reported results; individual languages, accents, and recording conditions still need local testing. Audio understanding, reasoning, and spoken instruction following were evaluated only in English and may not work reliably in other languages. The model is designed for offline processing rather than real-time streaming automatic speech recognition. The practical opportunity is private speech infrastructure for meeting analysis, customer-service analytics, localization, and audio search, with prompts controlling whether the output should sound raw, cleaned up, tagged by speaker, or translated. The model supports multilingual transcription, speech translation, speaker-attributed transcription, timestamp prediction, language identification, and audio question answering.

[06:54] Research digest: AI models miss linked care decisions

NPCBench focuses on nasopharyngeal carcinoma, a cancer of the nasopharynx, and asks whether AI can reason through a complete patient journey rather than answer disconnected questions. It covers the kinds of knowledge and planning that would be expected in specialist training, then follows cases through diagnosis, follow-up, integrated care-pathway decisions, and open-ended consultation.

The headline result is a gap between component performance and dependable clinical coordination. Across the evaluated models, being right on individual diagnostic or care tasks did not guarantee that both answers were jointly right for the same patient. The benchmark therefore tests whether a model can combine subspecialty knowledge with visual evidence, track changes in a patient’s condition, and meet the requirements of a consultation.

Among 21 multimodal models, strict success on the full care path reached at most 23%. The practical consequence is clear: medical AI evaluation should examine linked decisions over time, not just isolated factual accuracy. NPCBench makes that distinction measurable by tying stepwise tasks to patient-level care trajectories.

[07:56] Research digest: Muir makes linear attention more selective and accurate

Linear attention offers a practical way to handle long context: instead of retaining every earlier token in full, it compresses what it has read into a fixed-size state. Muir improves that process by recognizing that updates are not equally important across the state. Writes affect many channels, while erasure can be represented with fewer parameters, so Muir concentrates update capacity where it matters and reweights the stored information when reading it out. It also uses the recovered capacity for a broader internal processing network and introduces a parallel update that keeps training stable at larger processing chunks. Across the tested model sizes, Muir achieved lower perplexity than GDN-2 and a standard Transformer, along with stronger commonsense accuracy and better extractive recall than GDN-2. The tangible consequence is potentially better long-context software, such as an assistant that can search and summarize a very large document while keeping its compressed memory from growing with the document’s length. The result also challenges the assumption that every part of a model’s compressed memory deserves equal attention.

[09:01] Cult.fit uses Codex to build faster operational tools

Cult.fit is using Codex to help teams across functions build tools, move faster, and change how work gets done. The company’s announcement describes a broad, practical application of the coding assistant: people in different parts of the organization use it to create software that supports how the business operates. That makes the example useful for teams considering where AI-assisted development could have an immediate effect, especially when the goal is to turn repeated tasks into tools rather than add another isolated chatbot workflow. The company’s account centers on speed and changed working practices, so the result to watch is how these tools spread across functions and affect the way work moves. For builders, the takeaway is concrete: start with a real operational bottleneck and use Codex to build a tool that addresses it.

[09:51] OpenAI Introduces GPT-6 Cyber

OpenAI has introduced GPT-6 Cyber, a cybersecurity model for finding exploitable vulnerabilities and developing fixes. The announcement, published on November 5, 2026, positions the model around a concrete security task: identify weaknesses that attackers could actually exploit, then help produce a response.

The key design choice is scope. OpenAI says GPT-6 Cyber was trained to stay within authorized limits, so the model is intended to work on security problems without expanding beyond the permissions or boundaries of the engagement. That makes scope handling part of the model’s core behavior, not merely an instruction added around a generic assistant.

For builders and security teams, the immediate opportunity is a unified workflow that moves from discovering an exploitable flaw to developing a fix. Teams could use it to investigate systems they are authorized to test and turn findings into remediation work, reducing the handoff between identifying a problem and addressing it.

The next thing to watch is how GPT-6 Cyber performs on real authorized security engagements, especially when a finding requires judgment about what is in scope and how the proposed fix should be developed.

[11:00] GitHub Separates BYOK and Custom-Model Usage

GitHub shipped attribution fields in the Copilot usage metrics API for bring-your-own-key (BYOK) and enterprise custom models. Local BYOK is configured by developers and sends requests from Copilot CLI or the Copilot app directly to their provider key or local model. Reports expose local activity and totals by BYOK kind and client surface, including active-user counts. Admins can configure enterprise custom models; GitHub routes those requests through GitHub, marks them with `is_custom_enterprise_model`, and includes real request and token counts even for IDE clients. A model used both as hosted and custom appears as separate entries. Existing totals remain unchanged; the change is clearer attribution. The main caveat is measurement: local BYOK relies on client telemetry and token reporting, so it can undercount, while enterprise custom-model counts are observed server-side. Historical report days have no `is_custom_enterprise_model` data.

[11:52] Dependabot brings version updates to AI agent packages

On November 3, 2026, GitHub announced that Dependabot version updates now support Agent Package Manager, or APM. This gives teams a way to keep supported AI agent skills, prompts, and instructions up to date.

The mechanism is straightforward: Dependabot identifies newer versions of supported agent packages and opens pull requests with the proposed changes. Teams can inspect those updates before applying them, bringing agent dependencies into a familiar version-control workflow.

The practical benefit is maintenance: builders do not need to track every supported skill, prompt, or instruction package manually to see when a newer version is available. The next useful signal to watch is the breadth of supported-package coverage, because that determines how much of an agent setup can benefit from automated version updates.

[12:38] Palo Alto Networks reportedly in talks to buy Clutch

Palo Alto Networks is reportedly in talks to acquire Clutch, an AI-agent security startup, for $500 million.

The proposed price is striking against Clutch’s last reported valuation of $85 million, a difference of roughly six times. Lightspeed and SignalFire back the company. A source familiar with the matter supplied the valuation, while the acquisition remains under discussion.

For builders, the immediate significance is about market direction rather than an available product change. Clutch is specifically focused on security for AI agents, and a deal with Palo Alto Networks could give that category a larger corporate platform. The next concrete development will be whether the companies confirm an agreement and disclose more about how Clutch’s offering fits into the combined business.

[13:24] Baidu Ships a 280B ERNIE Base With 14B Active Parameters

Baidu has released ERNIE 5.5 Flash Base, a large sparse base model with 280B total parameters and 14B active parameters. Sparse mixture-of-experts models activate only part of their overall parameter capacity for an input, and this release makes that distinction explicit.

The model was trained on 33.5T tokens. Baidu published it before any mid- or post-training, so the release is specifically the pretrained foundation before those stages. That gives builders a new large-capacity base to evaluate and build downstream work from.

The concrete numbers are 280B total parameters and 14B active parameters. What emerges after mid- and post-training is the next thing to watch.

[14:03] Australian universities expand ChatGPT access

Australian universities are expanding student access to ChatGPT and bringing AI into teaching and learning. OpenAI reported the effort on November 5, 2026, saying it is intended to prepare students for an AI-enabled workforce.

The change goes beyond making an AI chatbot available. Universities are also incorporating AI into learning activities, making it part of how students and educators engage with university work. The immediate goal is workforce readiness: producing graduates who are familiar with working alongside AI.

For the sector, this makes the relationship between tool access and teaching especially important. Wider access can only matter fully when students have meaningful opportunities to use AI within their learning. For learners, university AI integration is becoming a defining part of how they prepare for professional life.

[14:51] Lawsuit Alleges ChatGPT Helped Plan a Poisoning

Ars Technica reported on November 5, 2026, that a lawsuit alleges a man introduced his wife to ChatGPT and that she used it to plan his murder. The alleged mechanism was poisoning through bitter energy drinks, with the chatbot allegedly guiding the plan.

The case matters because it places an alleged use of ChatGPT directly within the criminal-law process. The allegation is not that the model acted on its own; it is that a person allegedly used the chatbot as a planning tool for physical harm.

Because this is a lawsuit, the account should be understood as an allegation rather than an established finding. The next point to watch is how the court evaluates the evidence behind the claimed role of ChatGPT.

Chapters

  • 00:00 — Intro: Agent Stack Release Readout: Hermes Agent v0.23.0 / OpenAI generated 948 validated Linux kernel security patches / A local model that builds editable 3D game assets
  • 02:00 — Agent Stack Release Readout: Hermes Agent v0.23.0
  • 02:44 — OpenAI generated 948 validated Linux kernel security patches
  • 03:51 — A local model that builds editable 3D game assets
  • 05:31 — NVIDIA’s offline speech model handles 40 languages
  • 06:54 — Research digest: AI models miss linked care decisions
  • 07:56 — Research digest: Muir makes linear attention more selective and accurate
  • 09:01 — Cult.fit uses Codex to build faster operational tools
  • 09:51 — OpenAI Introduces GPT-6 Cyber
  • 11:00 — GitHub Separates BYOK and Custom-Model Usage
  • 11:52 — Dependabot brings version updates to AI agent packages
  • 12:38 — Palo Alto Networks reportedly in talks to buy Clutch
  • 13:24 — Baidu Ships a 280B ERNIE Base With 14B Active Parameters
  • 14:03 — Australian universities expand ChatGPT access
  • 14:51 — Lawsuit Alleges ChatGPT Helped Plan a Poisoning

Primary Links


Release Coverage Check

  • Hermes Agent — Latest stable verified: v0.23.0, published 2026-11-05T21:32:33Z. Recent episode version tags detected: v2026.9.14, v2026.9.21, v2026.9.24, v2026.9.7. Selected missing version(s): v0.23.0.
  • OpenAI Codex — Latest stable verified: rust-v0.167.0, published 2026-11-06T01:40:00Z. Recent episode version tags detected: rust-v0.163.0, rust-v0.164.0, rust-v0.165.0, rust-v0.166.0. No new stable release this cycle.
  • Claude Code CLI — Latest stable verified: 2.1.311, published 2026-10-26T19:47:57.395Z. Recent episode version tags detected: 2.1.308, 2.1.311, latest, stable. No new stable release this cycle.
  • Antigravity CLI — Continuous delivery model; no discrete release tags verified this cycle (latest build as of 2026-11-06). Recent episode version tags detected: @google/antigravity, v2.0.

Harness Version Reference

  • Hermes Agent — v0.23.0
  • OpenAI Codex — rust-v0.167.0
  • Claude Code CLI — 2.1.311
  • Antigravity CLI — Continuous delivery (no tagged release verified this cycle)

Featured Story Plan

  • Story 3: A local model that builds editable 3D game assets — prioritize its source-backed capability, comparison when documented, limitations, and practical consequence; no word quota.
  • Story 4: NVIDIA’s offline speech model handles 40 languages — prioritize its source-backed capability, comparison when documented, limitations, and practical consequence; no word quota.

Research Evidence Contract

{
  "policy_version": 1,
  "featured_stories": [
    4,
    3
  ],
  "records": [
    {
      "story": 1,
      "title": "Agent Stack Release Readout: Hermes Agent v0.23.0",
      "source_sha256": "25ffdd1641549eefa228aa9e35240e8d0d6c942c49b8623bf39b025a23fa4687",
      "source_url": "https://github.com/NousResearch/hermes-agent/releases/tag/v0.23.0",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 2,
      "title": "OpenAI generated 948 validated Linux kernel security patches",
      "source_sha256": "8d8b43d254fd54265b0e8c019746a11b0b5104d116c4c3f9a2c550fc38e298b5",
      "source_url": "https://openai.com/index/a-thousand-fewer-paths-to-root/",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 3,
      "title": "A local model that builds editable 3D game assets",
      "source_sha256": "0846d05975385fb7e268a9d62fa3fed63ca7cf6cc34331defe56f3d63ad6e414",
      "source_url": "https://huggingface.co/ccore/Qwen3.5-4B-GLB-3D-Coder",
      "model_story": true,
      "model_review": {
        "release_status": "released",
        "evidence_type": "publisher_report",
        "release_quote": "CCORE project release · November 5, 2026 · Apache 2.0  \nRepository: ccore/Qwen3.5-4B-GLB-3D-Coder · Checkpoint: latest uploaded",
        "release_span": "S005",
        "change": {
          "status": "supported",
          "claim": "CCORE released GLB-3D-Coder, a specialized 4B coding model for creating low-poly game assets and procedural scenes.",
          "quote": "CCORE GLB-3D-Coder is a specialized 4B coding model for low-poly game assets and procedural scenes.\nCCORE project release · November 5, 2026 · Apache 2.0  \nRepository: ccore/Qwen3.5-4B-GLB-3D-Coder · Checkpoint: latest uploaded\nCCORE maintains this release.",
          "source_span": [
            "S002",
            "S005",
            "S007"
          ],
          "quotes": [
            "CCORE GLB-3D-Coder is a specialized 4B coding model for low-poly game assets and procedural scenes.",
            "CCORE project release · November 5, 2026 · Apache 2.0  \nRepository: ccore/Qwen3.5-4B-GLB-3D-Coder · Checkpoint: latest uploaded",
            "CCORE maintains this release."
          ]
        },
        "capabilities": {
          "status": "supported",
          "claim": "The model turns a text description into a Three.js page with a preview and an export button that produces a GLB asset for editors such as Godot.",
          "quote": "Describe a character, prop, building, or environment, and the model writes a complete Three.js HTML/JavaScript page with a preview and an Export GLB button.\nOpen the page, inspect the result, and export the asset for Godot or another editor that supports GLB.\nInspect the scene, click Export GLB, and import the downloaded .glb into your editor.",
          "source_span": [
            "S003",
            "S004",
            "S061"
          ],
          "quotes": [
            "Describe a character, prop, building, or environment, and the model writes a complete Three.js HTML/JavaScript page with a preview and an Export GLB button.",
            "Open the page, inspect the result, and export the asset for Godot or another editor that supports GLB.",
            "Inspect the scene, click Export GLB, and import the downloaded .glb into your editor."
          ]
        },
        "comparison": {
          "status": "unverified",
          "claim": "",
          "quote": "",
          "source_span": []
        },
        "limitations": {
          "status": "supported",
          "claim": "Some requests require a retry or a small code correction, and exported assets may differ from the browser preview in materials, lighting, and animation.",
          "quote": "Some requests need a retry or a small code correction.\nInspect the exported asset in your editor, since materials, lighting, and animations can differ from the browser preview.",
          "source_span": [
            "S087",
            "S088"
          ],
          "quotes": [
            "Some requests need a retry or a small code correction.",
            "Inspect the exported asset in your editor, since materials, lighting, and animations can differ from the browser preview."
          ]
        },
        "access": {
          "status": "supported",
          "claim": "Quantized Q4_K_M and Q8_0 weights and the original Safetensors checkpoint are available under Apache 2.0.",
          "quote": "Q4_K_M, Q8_0, and the original Safetensors weights are available now.\nThe released Q4_K_M, Q8_0, and original Safetensors weights use the latest uploaded checkpoint.\nReleased under Apache 2.0, based on Qwen/Qwen3.5-4B.",
          "source_span": [
            "S008",
            "S050",
            "S103"
          ],
          "quotes": [
            "Q4_K_M, Q8_0, and the original Safetensors weights are available now.",
            "The released Q4_K_M, Q8_0, and original Safetensors weights use the latest uploaded checkpoint.",
            "Released under Apache 2.0, based on Qwen/Qwen3.5-4B."
          ]
        }
      }
    },
    {
      "story": 4,
      "title": "NVIDIA’s offline speech model handles 40 languages",
      "source_sha256": "5ab26cfea0f4bcf7a6975b1a0b7d4fd7cdd51f0412c6c277ee14baec0881bf6c",
      "source_url": "https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Transcribe-30B-A4B",
      "model_story": true,
      "model_review": {
        "release_status": "released",
        "evidence_type": "publisher_report",
        "release_quote": "Release Date\nBuild.Nvidia.com 10/28/2026\nGithub 10/28/2026 via NVIDIA NeMo Speech\nHugging Face 10/28/2026 via NVIDIA-Nemotron-3.5-Transcribe-30B-A4B\nNGC 10/28/2026 via NVIDIA-Nemotron-3.5-Transcribe-30B-A4B\nReferences\nModel page: NVIDIA-Nemotron-3.5-Transcribe-30B-A4B\nTechnical report: Nemotron 3.5 Transcribe Technical Report\nBase language model: NVIDIA Nemotron-3.5 Lightning 30B-A3B BF16\nQuick-start and inference documentation: see Inference quick start guide.",
        "release_span": "S061",
        "change": {
          "status": "supported",
          "claim": "NVIDIA released Nemotron 3.5 Transcribe as an open-weight offline speech model for 40 languages.",
          "quote": "Nemotron 3.5 Transcribe is an open-weight, offline speech and audio model for transcription in 40 languages, with support for recordings up to one hour and a 65,536-token context.",
          "source_span": [
            "S003"
          ],
          "quotes": [
            "Nemotron 3.5 Transcribe is an open-weight, offline speech and audio model for transcription in 40 languages, with support for recordings up to one hour and a 65,536-token context."
          ]
        },
        "capabilities": {
          "status": "supported",
          "claim": "The model supports multilingual transcription, speech translation, speaker-attributed transcription, timestamp prediction, language identification, and audio question answering.",
          "quote": "NVIDIA developed this Speech-Augmented Language Model (SALM) for multilingual transcription, speech translation, contextual transcription, speaker-attributed transcription, rich transcription, timestamp prediction, language identification, and audio question answering.",
          "source_span": [
            "S008"
          ],
          "quotes": [
            "NVIDIA developed this Speech-Augmented Language Model (SALM) for multilingual transcription, speech translation, contextual transcription, speaker-attributed transcription, rich transcription, timestamp prediction, language identification, and audio question answering."
          ]
        },
        "comparison": {
          "status": "supported",
          "claim": "On the publisher’s multilingual benchmark, Nemotron 3.5 Transcribe recorded a mean word error rate of 4.62, compared with 6.49 for Qwen3-ASR-1.7B.",
          "quote": "| Capability | Benchmark | Metric | Nemotron 3.5 Transcribe | Next best open-weight model |\n|:---|:---|:---|:---|:---|\n| English ASR | Open ASR Leaderboard, 9 public sets | Mean WER ↓ | 4.71 | Qwen3-ASR-1.7B 4.94 |\n| Long-form ASR | Open ASR Leaderboard, long-form | Mean WER ↓ | 10.98 | Parakeet-TDT-0.6B-v3 13.37 |\n| Multilingual ASR | Multilingual Open ASR Leaderboard, 7 languages | Mean WER ↓ | 4.62 | Qwen3-ASR-1.7B 6.49 |\nEfficiency",
          "source_span": [
            "S017"
          ],
          "quotes": [
            "| Capability | Benchmark | Metric | Nemotron 3.5 Transcribe | Next best open-weight model |\n|:---|:---|:---|:---|:---|\n| English ASR | Open ASR Leaderboard, 9 public sets | Mean WER ↓ | 4.71 | Qwen3-ASR-1.7B 4.94 |\n| Long-form ASR | Open ASR Leaderboard, long-form | Mean WER ↓ | 10.98 | Parakeet-TDT-0.6B-v3 13.37 |\n| Multilingual ASR | Multilingual Open ASR Leaderboard, 7 languages | Mean WER ↓ | 4.62 | Qwen3-ASR-1.7B 6.49 |\nEfficiency"
          ]
        },
        "limitations": {
          "status": "supported",
          "claim": "The model is designed for offline processing rather than real-time streaming automatic speech recognition.",
          "quote": "Internal audio chunking does not make it a real-time streaming ASR service.",
          "source_span": [
            "S052"
          ],
          "quotes": [
            "Internal audio chunking does not make it a real-time streaming ASR service."
          ]
        },
        "access": {
          "status": "supported",
          "claim": "Developers can run the checkpoint in process with Hugging Face Transformers or serve it through NeMo Speech.",
          "quote": "To run the model in-process with Hugging Face Transformers instead, install it from source and transcribe a recording:\nThe example below serves this checkpoint on one H100 80 GB with vLLM 0.32.0 and the latest NeMo Speech main branch.",
          "source_span": [
            "S029",
            "S022"
          ],
          "quotes": [
            "To run the model in-process with Hugging Face Transformers instead, install it from source and transcribe a recording:",
            "The example below serves this checkpoint on one H100 80 GB with vLLM 0.32.0 and the latest NeMo Speech main branch."
          ]
        }
      }
    },
    {
      "story": 5,
      "title": "Research digest: AI models miss linked care decisions",
      "source_sha256": "236290b492d8aa2b25a8e3f6cc6af322d4781db69f813ec3c6b02dfb88429f4b",
      "source_url": "https://arxiv.org/abs/2611.08369",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 6,
      "title": "Research digest: Muir makes linear attention more selective and accurate",
      "source_sha256": "48b28b81eb70b6cb73c83540730670c86306f36c7d947f49557f3ea74e3e54ff",
      "source_url": "https://arxiv.org/abs/2611.08376",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 7,
      "title": "Cult.fit uses Codex to build faster operational tools",
      "source_sha256": "1f0528ebe7fe692b41e34593b3f85b41468a32eca9c7fbab8c6c761f356ce0f2",
      "source_url": "https://openai.com/index/cultfit-builds-with-codex",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 8,
      "title": "OpenAI Introduces GPT-6 Cyber",
      "source_sha256": "4fdab19092106a07a21f3eb1f8c3f45049aac3cafe22e2e92438e425e0c3efd5",
      "source_url": "https://openai.com/index/introducing-gpt-6-cyber",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 9,
      "title": "GitHub Separates BYOK and Custom-Model Usage",
      "source_sha256": "e77b8d0de5baa440815ec4d9a47e0c97834d8c67c3443960c52c1d56a4f56055",
      "source_url": "https://github.blog/changelog/2026-11-03-byok-and-enterprise-custom-models-in-the-copilot-usage-api",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 10,
      "title": "Dependabot brings version updates to AI agent packages",
      "source_sha256": "939d5fb856616e4000a5c990eafc63f539068e68f34828273fad1080f43bd969",
      "source_url": "https://github.blog/changelog/2026-11-03-dependabot-version-updates-support-agent-package-manager",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 11,
      "title": "Palo Alto Networks reportedly in talks to buy Clutch",
      "source_sha256": "09873c62978991e41ef1e9a3364095b094c2e9b6e9d8c467247aafa533f3cfa7",
      "source_url": "https://techcrunch.com/2026/11/05/palo-alto-networks-in-talks-to-buy-ai-agent-security-startup-clutch-for-500m/",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 12,
      "title": "Baidu Ships a 280B ERNIE Base With 14B Active Parameters",
      "source_sha256": "3cf681eb1b31f57897d69a84e8a97f27a560ae7e0e700d2defe0cf17541e9ec5",
      "source_url": "https://www.marktechpost.com/2026/11/05/baidu-ernie-5-5-flash-base-280b-moe/",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 13,
      "title": "Australian universities expand ChatGPT access",
      "source_sha256": "86026bfa936c6d6bf1aafd559e07f52a56bcf85d5e9841ff8c983d07a7145d96",
      "source_url": "https://openai.com/index/australian-universities-ai-native-graduates",
      "model_story": false,
      "model_review": null
    },
    {
      "story": 14,
      "title": "Lawsuit Alleges ChatGPT Helped Plan a Poisoning",
      "source_sha256": "25d844c82d76857127e29d980a678f97135962e263effa74c095f526c79aff4a",
      "source_url": "https://arstechnica.com/tech-policy/2026/11/lawsuit-man-introduced-his-wife-to-chatgpt-she-used-it-to-plan-his-murder/",
      "model_story": false,
      "model_review": null
    }
  ]
}

🎙 Never miss an episode — subscribe now

🎙 Subscribe to AgentStack Daily