Researchers used Claude to breach OpenAI systems through forum flaws

🚀 RELEASES & LAUNCHES

• Ant Group and Tsinghua release Realtime-Venus full-duplex AI system
  Ant Group and Tsinghua released Realtime-Venus, a full-duplex multimodal AI system.

  • For developers and researchers building real-time audio, video, and speech assistants.
  • The release includes 9B Realtime-Venus-Omni and Audio checkpoints with 40,960-token contexts, BF16 weights, and native speech output.
  • Realtime-Venus supports proactive interaction, interruption-aware dialogue, long-video memory, and asynchronous task delegation through its Harness runtime.
  • Reported results include 70.2% on StreamingBench, 97% continuation through user backchannels, and 75.93% delegation-routing accuracy for Omni.
  Sources 📄 Source: arxiv.org · 📎 Coverage: realtime-venus.github.io · 👁 via r/LocalLLaMA

• MiniMax open-sources MiniMax Code terminal coding agent
  MiniMax open-sourced MiniMax Code, a terminal coding agent.

  • For developers who want an AI coding workflow in the terminal.
  • MiniMax Code supports interactive TUI and headless execution for code edits, shell commands, diffs, and test verification.
  • It includes permission controls, sandboxing, Plan Mode, resumable sessions, subagents, plugins, skills, MCP, and ACP.
  • Developers can use MiniMax or bring OpenAI- and Anthropic-compatible providers through BYOK; the repository is MIT-licensed.
  Sources 📄 Source: github.com · 📎 Coverage: reddit.com · 👁 via r/LocalLLaMA

💰 BUSINESS & FUNDING

• Manus seeks $500M at $4B valuation after resuming independent operations
  Manus is reportedly raising $500 million at a $4 billion valuation.
  • Manus serves users and companies with a chatbot, vibe-coding tools, browser assistance, and generative features for apps, websites, designs, presentations, and video.
  • The Chinese AI startup has resumed independent operations after its planned $2 billion Meta acquisition was blocked.
  • Manus is discussing a $500 million round at a $4 billion valuation, with IDG Capital, Boyu Capital, CATL, Tencent, HSG, and ZhenFund among potential or existing backers.
  • Manus required users to export and back up their data before deleting data generated after Meta’s acquisition to comply with regulations.
  Sources 📎 Coverage: techcrunch.com · 👁 via TechCrunch AI

⚠️ INCIDENTS & SAFETY

• Researchers used Claude to breach OpenAI systems through forum flaws
  Hacktron researchers used Claude to exploit OpenAI-linked forum flaws.

  • Hacktron AI’s three-person security team targeted OpenAI through its bug-bounty program.
  • Using Claude Opus 4.8 and 5, researchers exploited a HEIF-processing flaw in Discourse to achieve remote code execution in under 72 hours.
  • A second flaw let them take over employee ChatGPT and Codex accounts and reach OpenAI’s GitHub organization; they submitted a pull request as proof but did not read Monorepo’s internal code.
  • OpenAI and Discourse fixed the issues, and OpenAI paid Hacktron $6,500; the case shows AI tools can shorten exploit development from months to days.
  Sources 📎 Coverage: techcrunch.com · 👁 via TechCrunch AI, The Verge AI (+1)

• Federal Register briefly used Alibaba’s Qwen AI search model
  The Federal Register briefly deployed Alibaba’s Qwen3 0.6B model to search public comments.

  • Federal Register visitors could use the tool to search public comments on proposed regulations.
  • The site used an open-weight Qwen3 model at the 0.6B level for document retrieval.
  • The tool ran for at least a day before National Archives officials removed it.
  • Experts said the deployment likely posed little security risk because the content was public, while lawmakers opposed federal use of Chinese models.
  Sources 📎 Coverage: arstechnica.com · 👁 via Ars Technica AI

🏛️ POLICY & REGULATION

• California orders review of frontier-AI rules, including potential kill switches
  California ordered an expert review of AI rules covering potential frontier-model kill switches.

  • For frontier-AI companies operating in California and state AI auditors.
  • Gov. Gavin Newsom’s executive order convenes experts to recommend stronger AI-safety measures within two months.
  • The review will consider onsite independent verification, audited risk reports, routinely tested kill switches, and reporting loss-of-control incidents.
  • California is positioning the framework as a model for federal AI oversight.
  Sources 📎 Coverage: theverge.com · 👁 via The Verge AI

• Virginia governor forms AI task force and tightens data center oversight
  Virginia created an AI task force and new data center oversight rules.

  • The measures target Virginia communities, residents, and state agencies.
  • Executive Order 22 bans data center project NDAs, expedites noise regulations, and orders a review of backup-generation operations.
  • The AI task force will assess workforce displacement, data privacy, and how existing law applies to AI harms.
  • A new framework could give local communities more say, slow approvals, and add environmental and energy-price safeguards.
  Sources 📎 Coverage: theverge.com · 👁 via The Verge AI