01
Gemini 3.8 Flash and Flash Cyber land, Fairwind gates the cyber model
Google ships its third Flash in six weeks: a same-price smarter workhorse plus a defender-only cyber model that patches near frontier quality at Flash cost.
What they showed / shipped
- Demis and DeepMind announced Gemini 3.8 Flash and 3.8 Flash Cyber, the third Flash drop in six weeks.
- Google DeepMind: 3.8 Flash targets agentic coding and multi-step reasoning; Flash Cyber is for vulnerability detection and automated patching.
- Official blog: same intro price as 3.7 Flash at $0.75 / $3.75 per 1M tokens through Dec 31, 2026. Flash Cyber is Fairwind-only for vetted defenders.
- Hard numbers from Google: Flash Cyber hits 47.2% pass@1 on CWE-Bench vs 47.8% for a leading frontier model at lower cost, and Chrome Security got 2.6x more correct patches than larger commercial models.
- The Verge notes 3.8 Flash works harder and may cost more per task because it takes extra reasoning steps and tool calls.
- 📌 On the radar: researchers keep pressing OpenAI on Astra safety pacing after yesterday Critical cyber preview. Update only, not a new topic.
Why it matters
- A same-price Flash upgrade you can point agents at today, plus a cyber sibling that is actually gated instead of dumpable.
Sources
02
Perplexity open-sources Lily, the Mac hybrid-compute engine
Yesterday hybrid compute was a product feature. Today the local inference engine behind it is open source for Qwen on Apple silicon.
What they showed / shipped
Why it matters
- You can study or reuse the exact engine that made cloud-to-local handoff real, not just read the marketing post.
Sources
03
Meta Muse Spark 1.3 hits the frontier coding pack
Meta Superintelligence Labs ships Muse Spark 1.3: Wang says it is competitive with Fable 5.1 and better than GPT-5.6 Sol on coding, with fewer tokens and Contemplating multi-agent mode.
What they showed / shipped
Why it matters
- Meta finally has a coding/agent model in the same band as Fable and Sol, not a generation behind.
Sources
04
AI answer engines are citing fake best-of pages and missing numbers
Two audits land the same day: 215k manufactured software pages feeding Perplexity, and about a third of Perplexity number citations that do not contain the number.
What they showed / shipped
Why it matters
- If your product recommends software or quotes stats from an answer engine, you need a cite-verify step, not trust.
Sources
05
Runway ships Dev MCP so coding agents can drive its API
Runway exposes Model Routers, tasks, and debug hooks through an MCP server your coding agent can call without leaving the IDE.
What they showed / shipped
- Runway announced Dev MCP: connect a coding agent to the Runway developer platform to build, debug, and manage Model Routers and tasks in-place.
- 📌 On the radar: World Labs Atlas demos keep expanding, including sports bullet-time from a few camera views.
Why it matters
- Video gen stops being a separate console app and becomes a tool call inside Claude Code / Cursor-class agents.
Sources
06
US government sides with OpenAI in the NYT training fight
The Trump administration backs OpenAI against the New York Times: training on copyrighted material is not infringement, which would reshape every lab that scrapes the open web.
What they showed / shipped
Why it matters
- If courts follow DOJ, the training-data legal overhang shrinks for US labs and anyone fine-tuning on web corpora.
Sources
07
Six curl CVEs after OpenAI and Anthropic found zero
Aisle re-tested curl after frontier labs reported clean: six new CVEs. AI vuln hunting still misses what a focused human pass catches.
What they showed / shipped
- Aisle blog on HN: they found six curl CVEs after OpenAI and Anthropic came back with zero.
Why it matters
- Do not treat a clean lab scan as a ship gate. Use models for triage, then a human or specialized tool for the second pass.
Sources