The AI Brief

2026-10-08 · Week of Oct 5 · ~8 min read

This Week

OpenAI, Anthropic, and Google all upgraded their flagship models this week, nearly in lockstep. GPT-6 is now live for all of ChatGPT's 1.2 billion users, Claude Haiku 5.5 cuts small-model pricing by up to 90 percent, and Gemini 4 Argon is built around long-horizon tasks and cybersecurity defense. The release cadence across all three labs keeps getting tighter.

Anthropic also spent the week on cybersecurity groundwork: its Cyber Mission has scanned open-source projects for free and surfaced nearly 30,000 candidate vulnerabilities in six months. Over at OpenAI, a fired safety researcher publicly disputed the reasons given for the dismissal, warning it could make other employees afraid to speak up internally.

In China, Manus raised its first round since splitting from Meta, more than $500 million, and is now hiring aggressively back in Beijing. DeepSeek's Flash model redesigned its architecture to cut its inference cache to a quarter of the previous size, pushing further down the cheap-and-fast road.

Featured Stories

Worth your time this week
Anthropic#Security#Research

Anthropic's Cyber Mission: free vulnerability scanning for open source, nearly 30,000 candidates in six months

This is the first time "AI finds bugs" has been packaged as a long-running, free program aimed squarely at critical infrastructure, not a one-off benchmark run. On tests like CyberGym, AI's vulnerability-finding hit rate has jumped from under 20 percent last year to over 85 percent now, and this program puts that progress directly into practice.

Full story

Anthropic announced two cybersecurity initiatives. The first, OSS Scanner, uses the company's strongest models (including Claude Mythos) to scan critical open-source projects for free; over six months it surfaced more than 29,000 candidate vulnerabilities, about 6,000 of which went through human review, and across 48 projects, 97 expert-reviewed high-risk findings cleared the disclosure bar 88 percent of the time. Of 74 reports submitted to wolfSSL, 72 were valid and 5 became official CVEs. The second, a critical infrastructure defense initiative, has 11 founding partners (including Accenture, CrowdStrike, Dragos, Palo Alto Networks, and Rockwell Automation), giving defenders of power, water, and transportation infrastructure access to frontier Claude models plus on-site engineering support.

OpenAI#Product

OpenAI rolls out GPT-6 to everyone, adds a self-charting "Intelligent UI"

GPT-6 isn't just a model swap, the interface changed with it. That follows the same thread GitHub raised last month about the chat box not being the only answer, except OpenAI chose to build the tools directly into the conversation instead of a separate canvas.

Full story

OpenAI rolled out GPT-6 to all ChatGPT users this week, including free users (roughly 1.2 billion people), alongside a new "Intelligent UI" that lets answers surface interactive charts and widgets directly, not just plain text. The company says this version handles complex problems better and has a stronger layer of safety checks.

Anthropic#Product#Business

Claude Haiku 5.5: 90% off prompts under 100K tokens, 75% savings on average

All three labs have spent the past few weeks racing down the same path: keep performance flat while slashing price. Haiku 5.5 is the steepest cut yet, worth putting next to Opus 5.5's "40% savings" claim from last month.

Full story

Anthropic released Claude Haiku 5.5, aimed at high-volume, price-sensitive work like summarization and customer support. Pricing for prompts under 100K tokens drops to $0.10 per million input tokens and $0.50 per million output tokens, a 90 percent cut from Haiku 4.5; above 100K tokens the cut is 50 percent. Anthropic says overall costs are down 75 percent on average.

Google DeepMind#Product#Engineering

Google's Gemini 4 Argon: built for security defense and long tasks, trusted defenders first

All three labs leaned into security this round. Google's angle is giving it to defenders first, which fills a different gap from Anthropic's Cyber Mission the same week.

Full story

Google released Gemini 4 Argon, built around long-horizon software engineering (a reported new high of 77.9 percent on DeepSWE v1.1), enterprise knowledge work, and cyber defense. The new model is rolling out first to trusted cyber-defense teams through the "Fairwind Program," ahead of API and Ultra access. Google also says it's their most resistant model yet to indirect prompt injection attacks.

DeepSeek#Open Source#Engineering

DeepSeek V4.1-Flash redesigns its architecture: cache down to a quarter, price cut another 57%

This is the latest step on the open-and-cheap path. Cutting cache this much takes a real architecture redesign, not a parameter tweak, and it's worth comparing with Haiku 5.5's price cut from the same week to see which one is actually leaner.

Full story

The Batch this week broke down DeepSeek V4.1-Flash's architecture overhaul: full input cache per token drops to about 890 bytes, roughly a quarter of the previous V4-Flash, scoring 39 on Artificial Analysis's intelligence index and topping AutomationBench-AA at 68.9 percent. API cached-input pricing is cut another 57 percent, weights remain free under the MIT license, and the million-token context window is unchanged.

Import AI#Research

Import AI: running a swarm of agents on one task might be a new scaling axis

Most discussion of AI capability progress focuses on a single model getting stronger. This piece treats running many identical agents in parallel as its own scaling axis, an angle that hasn't been talked to death yet.

Full story

Jack Clark's issue summarizes Toby Ord's observation: running multiple agents as a "swarm" on the same task. In testing, a swarm of 4 agents uses roughly twice the total tokens of a single agent, but each agent's share is cut in half, in principle cutting wait time in half, though with diminishing returns (a 10x increase in agent count yields only roughly 3x to 5x the performance, not 10x). Ord thinks this kind of swarm scaling could make an intelligence explosion more likely. The same issue cites a poll of 2,498 Americans: 61 percent think the industry's voluntary safety commitments aren't enough, including 53 percent of Trump supporters.

Product Compass#Business#Product

Product Compass: subscription vs. API cost math, Opus 5.5 comes out best value

This kind of "is my subscription actually worth it" math rarely gets laid out this plainly. It's useful if you're already paying for one of these and want to know whether it's worth it, not a vague recommendation.

Full story

Paweł Huryn used his own Bug Hunt benchmark to compare several subscription plans against their API-equivalent multiplier: Muse Code's high-usage plan ($15/month) has the lowest multiplier at 9.3x, Claude Max 20x ($200/month) the highest at 45.3x, Claude Pro ($20/month) at 42x, and ChatGPT Pro 100 ($100/month) at only 10.25x. On raw scores, Sonnet 5.5 (max) scored 51.3/105 on his test at roughly $155 per run; Opus 5.5 scored close behind at 41.7, near Claude Fable 5.1's 43, but at roughly two-thirds the cost. His conclusion: if you're fine with your data going to Meta, Muse Code is cheapest; for large codebases, go with GPT-6.1 Sol; overall best value is Opus 5.5.

Stratechery#Security#Business

Stratechery: Apple's permission model can't hold up against agent-era hackers

This isn't an abstract security warning, it's the author's own first-hand account of getting hacked. Read alongside Anthropic and Google both shoring up security the same week, it makes "agents open up a new attack surface" feel a lot less like theory.

Full story

Ben Thompson writes about his own always-on Mac mini getting hacked through a macOS screen-sharing flaw, and uses the incident to argue Apple's permission model and update habits don't hold up in an age where agents operate computers on people's behalf: the agent itself turns the user into part of the attack surface. He says it's pushed him to rely less on Apple's defaults going forward.

📣 News Briefs

本週摘要

OpenAI、Anthropic、Google 這週幾乎同時換代:GPT-6 全面開放給 ChatGPT 的 12 億用戶,Claude Haiku 5.5 把小模型的價錢砍掉九成,Gemini 4 Argon 主攻長任務跟資安防禦,三家的更新節奏越來越密集。

Anthropic 另一手在做資安基本功:免費幫開源專案掃漏洞的 Cyber Mission,半年掃出近三萬個候選漏洞。OpenAI 這邊則有被解僱的安全研究員公開反駁解僱理由,擔心以後沒人敢在內部講真話。

中國那邊,Manus 脫離 Meta 後拿到第一輪超過 5 億美元融資,回頭在北京大舉招人;DeepSeek 的 Flash 模型靠重新設計架構把推論快取砍掉四分之三,繼續把便宜這條路走到底。

本週精選

本週最值得花時間
Anthropic#資安#研究

Anthropic 的 Cyber Mission:免費幫開源專案掃漏洞,半年抓出近三萬個候選

「AI 找漏洞」第一次被包成一個長期、免費、對準關鍵基礎設施的計畫,不是跑一次 benchmark 就收工。CyberGym 這類評測上 AI 找漏洞的命中率從去年不到兩成衝到現在超過八成五,這個計畫等於把那個進步直接落地。

全文

Anthropic 公布兩項資安計畫。一是 OSS Scanner,用自家最強模型(包含 Claude Mythos)免費幫維護者掃關鍵開源專案,半年內掃出 29,000 多個候選漏洞,人工複核約 6,000 個,其中 48 個專案、97 筆經專家複核的高風險發現裡有 88% 達到揭露門檻,wolfSSL 回報 74 筆通報裡 72 筆有效、5 筆變成正式 CVE。二是「關鍵基礎設施防禦計畫」,找了 11 家創始夥伴(包括 Accenture、CrowdStrike、Dragos、Palo Alto Networks、Rockwell Automation),讓電力水利交通這類關鍵設施的防禦方能用上前沿版 Claude 跟現場工程師支援。

OpenAI#產品

OpenAI 把 GPT-6 全面開放,還加了會自己配圖表的「Intelligent UI」

GPT-6 不只是換模型,介面本身也跟著換,這跟 GitHub 上個月講的「聊天框不是唯一答案」是同一條思路的另一種實踐,只是 OpenAI 選擇把工具直接長在對話裡,不是另外做一個 canvas。

全文

OpenAI 本週把 GPT-6 推給所有 ChatGPT 用戶(包括免費用戶,約 12 億人規模),同時上線新的「Intelligent UI」,讓回答能直接帶出互動圖表跟小工具,不只是純文字。官方說法是這版本處理複雜問題的能力有提升,也加強了安全檢查這一層。

Anthropic#產品#商業

Claude Haiku 5.5:100K 以內的 prompt 砍價九成,平均省 75%

三巨頭這幾週都在拚「效能不掉、價錢砍一半」這條路線,Haiku 5.5 是目前砍最兇的一次,值得跟上個月 Opus 5.5 打的「省四成」放在一起比。

全文

Anthropic 發布 Claude Haiku 5.5,主打大量、對價格敏感的任務(摘要、客服這類)。100K token 以內的 prompt 定價砍到每百萬輸入 token 0.1 美元、輸出 0.5 美元,比 Haiku 4.5 便宜九成;超過 100K 的部分砍五成,官方說平均下來整體成本省了 75%。

Google DeepMind#產品#工程

Google 的 Gemini 4 Argon:主打資安防禦跟長任務,先給受信任的防禦方用

三家這次升級不約而同都往資安方向加碼,Google 選的角度是「先給防禦方用」,跟同週 Anthropic 的 Cyber Mission 算是從兩個不同方向在補同一塊缺口。

全文

Google 發布 Gemini 4 Argon,主打長任務的軟體工程(在 DeepSWE v1.1 拿到 77.9%,號稱新高)、企業知識工作跟網路防禦。新模型先透過「Fairwind Program」開給受信任的網路防禦團隊,之後才會上 API 跟 Ultra。官方也說這是他們目前最抗間接提示注入攻擊的模型。

DeepSeek#開源#工程

DeepSeek V4.1-Flash 重新設計架構,快取砍到四分之一、定價再降 57%

這是「開源又便宜」這條路線最新的一步,快取砍這麼多不是調個參數就能做到,代表架構本身真的重新設計過,值得跟同週 Haiku 5.5 的降價放在一起看誰砍得實在。

全文

The Batch 這期拆解 DeepSeek V4.1-Flash 的架構改款:單 token 的完整輸入快取砍到約 890 bytes,大概是上一代 V4-Flash 的四分之一,在 Artificial Analysis 的智能指數拿到 39 分,在 AutomationBench-AA 拿下 68.9% 排第一;API 的快取輸入價格再砍 57%,權重照舊走 MIT 授權免費放出,百萬 token 的上下文窗口沒有縮水。

Import AI#研究

Import AI:讓一群 agent 同時做同一件事,可能是新的推論擴展軸

目前討論 AI 能力進展大多在談單一模型變強,這篇把「讓很多個一樣的 agent 同時跑」當成獨立的擴展軸來看,是一個還沒被講爛的角度。

全文

Jack Clark 這期整理 Toby Ord 的觀察:讓多個 agent 組成「群」同時處理同一個任務,實測 4 個 agent 的群體總 token 用量大概是單 agent 的兩倍,但分到每個 agent 頭上的 token 砍半,等於有機會把等待時間壓到一半,不過效果會遞減(agent 數放大 10 倍,表現大概只提升 3 到 5 倍,不是 10 倍)。Ord 認為這種「群體擴展」可能讓智能爆炸式進展更容易發生。同期還有一份對 2,498 名美國人的民調,61% 覺得業界自願承諾的安全規範不夠,其中連 53% 的川普支持者也這麼想。

Product Compass#商業#產品

Product Compass:訂閱 vs 用 API 算成本,Opus 5.5 CP 值最高

這種「訂閱划不划算」的算法平常沒人認真攤開來算,對自己在用這些訂閱、想知道錢花得值不值的人是直接能用的材料,不是空泛的推薦。

全文

Paweł Huryn 拿自己的「抓 bug」測試(Bug Hunt benchmark)比較幾個訂閱方案換算成 API 等值的倍數:Muse Code 高用量方案(每月 15 美元)換算倍數 9.3 倍最低,Claude Max 20x(每月 200 美元)換算 45.3 倍最高,Claude Pro(每月 20 美元)有 42 倍,ChatGPT Pro 100(每月 100 美元)只有 10.25 倍。拿實測分數看,Sonnet 5.5(max)在他的測試拿 51.3/105 分、平均每次跑要花 155 美元左右,Opus 5.5 分數(41.7)接近 Claude Fable 5.1(43),但成本大概只要三分之二。他的結論:能接受資料分享給 Meta 就選 Muse Code 最省,做大型程式庫就選 GPT-6.1 Sol,整體 CP 值最高是 Opus 5.5。

Stratechery#資安#商業

Stratechery:蘋果的權限模型,擋不住 agent 時代的駭客

這不是抽象的資安警告,是作者自己真的被駭之後寫的第一手反省,跟這週 Anthropic、Google 都在補資安這條線放在一起看,更能感覺到「agent 會打開新的攻擊面」這件事已經不是理論。

全文

Ben Thompson 這篇講自己一台常開的 Mac mini,被一個 macOS 畫面分享的漏洞駭進去,他藉這件事講蘋果的權限模型跟更新習慣,在 agent 到處幫人操作電腦的時代接不上:agent 本身等於把使用者變成攻擊面的一部分。他說這讓他決定以後盡量少依賴蘋果的預設設定。