View Ridge Security
Back to The Rollout

Hacker used AI agents to break into 100+ sites including John Deere

A hacker used autonomous AI agents to breach 100+ sites, Tenstorrent raised $1.5B at $6.2B, and inclusionAI open-sourced Ming-3.0 audio models.

πŸš€ RELEASES & LAUNCHES

  • inclusionAI releases Ming-3.0-audio-flash (126B MoE) and Ming-3.0-audio-tiny (9.3B) under MIT
    inclusionAI open-sourced Ming-3.0-audio-flash and Ming-3.0-audio-tiny, native audio-language MoE models for speech recognition, audio understanding, and spoken responses.

    • Aimed at developers building speech and audio applications in Chinese and English, including accents, dialects, and noisy recordings.
    • Ming-3.0-audio-flash is a 126B-total/6.5B-active MoE; Ming-3.0-audio-tiny is a compact 9.3B-total/2.7B-active model, both MIT-licensed on Hugging Face and ModelScope.
    • Both accept audio plus text instructions and support transcription, spoken Q&A, long-recording understanding, audio reasoning, and optional synthesized-speech output via a built-in Talker with built-in or reference voices.
    • Deployment is documented via Transformers, SGLang (four GPUs for text output) and vLLM-Omni (reference profile: eight 80GB H800s, 128K context).
    • MIT licensing and local-serving paths make frontier-scale audio understanding and speech output available for self-hosting.
    Sources πŸ“„ Source: huggingface.co Β· πŸ“Ž Coverage: reddit.com Β· πŸ‘ via r/LocalLLaMA (+2)
  • Cohere says all its latest model architectures now run on llama.cpp
    Cohere announced that llama.cpp support for the North Micro Vision Instruct vision encoder means all of its latest model architectures are now compatible with llama.cpp.

    • For local-LLM users and the r/LocalLLaMA community: Cohere's Nick Frosst announced llama.cpp support, fulfilling the community's top request.
    • The team merged llama.cpp support for the vision encoder of North Micro Vision Instruct; the LLM architecture is shared with North Mini Code and Command A+ (cohere2-MoE, added via PR #24260).
    • This means all of Cohere's latest model architectures are now compatible with llama.cpp for local inference.
    • Unsloth GGUFs of North Mini Code 1.0 (a 30B-param MoE with 3B active) are available with quants from 9GB to full BF16, runnable via llama.cpp, Ollama, or vLLM.
    • It matters because builders can now run Cohere's open models locally on consumer hardware through the standard GGUF/llama.cpp ecosystem.
    Sources πŸ“„ Source: github.com Β· πŸ“Ž Coverage: reddit.com Β· πŸ‘ via r/LocalLLaMA

πŸ”¬ RESEARCH

  • Goodfire's Cammarata claims neural networks are "already clean" and mostly legible
    Goodfire researcher Nick Cammarata published an essay arguing neural networks' own neurons are largely interpretable, challenging the superposition explanation for polysemanticity.

    • Who: Nick Cammarata, Goodfire researcher and former OpenAI mechanistic interpretability co-author, writing for interpretability and AI-safety researchers.
    • What: An October 15, 2026 essay, "Neural Networks Are Already Clean," claims polysemanticity stemmed from ordinary fixable issues, not superposition, and that most neurons in models up to trillions of parameters are legible.
    • Key numbers: A preliminary Qwen3-32B audit found ~90% of neuron poles have one main job, ~7% two related jobs, and ~2-4% not understood; InceptionV1's famous cat-and-car neuron is reinterpreted as detecting V-shapes.
    • Caveats: The essay is labeled a working hypothesis, percentages depend on threshold choices, trillion-parameter models are "not close to solved," and a technical companion paper with independent validation is still pending.
    • Why it matters: If neurons can be studied directly, researchers may not need auxiliary tools like sparse autoencoders first, potentially speeding up alignment and model understanding work.
    Sources πŸ“„ Source: already-clean.goodfire.com Β· πŸ“Ž Coverage: technologyreview.com Β· πŸ‘ via MIT Technology Review AI
  • πŸ“„ Source for NVIDIA launches Open Agent Safety Platform with OpenShell runtime and Sentry DPU watchdog β€” nvidianews.nvidia.com

πŸ“Š BENCHMARKS & EVALS

  • BitNet b1.58 2B4T still gives wrong output on CPU; Bonsai 1.7B correct, ik_llama.cpp fastest
    A r/LocalLLaMA user benchmarked low-bit (1-bit/ternary/2-bit) GGUF models on CPU, finding bitnet.cpp main still produces wrong output for BitNet b1.58 2B4T while Bonsai 1.7B is correct and ik_llama.cpp with -rtr is usually fastest.
    • Tested on an ARM server (Neoverse-N1) and x86 VMs with AVX2 (Intel Xeon, AMD EPYC), checking outputs against an HF transformers reference rather than judging text by eye.
    • BitNet b1.58 2B4T on bitnet.cpp main (0b341e5) is wrong on CPU: perplexity is ~6x the reference on x86 despite plausible-looking text, and it prints '????' on ARM.
    • Known causes were already reported (issue #588: SiLU used where the model uses ReLU2; #470 for ARM); the poster tested each proposed fix against the reference.
    • The working fixes are the one-line activation fix from #588 (or #605 plus a runtime key) plus isHuangXin/llama.cpp#2 on ARM.
    • Bonsai 1.7B produced correct output wherever it loaded, and ik_llama.cpp with -rtr was usually the fastest runtime.
    Sources πŸ“„ Source: github.com Β· πŸ“Ž Coverage: reddit.com Β· πŸ‘ via r/LocalLLaMA

πŸ’° BUSINESS & FUNDING

  • Tenstorrent raises $1.5B Series E at $6.2B valuation to scale open-weight AI chips
    Tenstorrent raised a $1.5B Series E at a $6.2B valuation to scale its open-weight AI chips after drawing acquisition interest earlier in the year.
    • For AI developers and enterprises seeking alternatives to Nvidia's proprietary accelerators, spanning edge to data center.
    • Tenstorrent closed a $1.5B Series E at a $6.2B valuation, announced Oct 19, 2026, choosing to remain independent after acquisition interest earlier in 2026.
    • The company builds AI computers on Tensix cores and RISC-V IP, with an open-source software stack (TT-Forge, Tenstorrent Metal) and products like Blackhole cards and Galaxy servers.
    • It follows a $693M Series D in Dec 2024 at a $2B pre-money valuation; Tracxn lists ~$2.46B raised across 11 rounds.
    • The funding will scale open-weight AI chip development and its open-source ecosystem, positioning Tenstorrent as a vendor-lock-in-free Nvidia challenger.
    Sources πŸ“„ Source: tenstorrent.com Β· πŸ“Ž Coverage: techcrunch.com Β· πŸ‘ via TechCrunch AI

⚠️ INCIDENTS & SAFETY

  • Hacker used AI agents to break into 100+ sites including John Deere, SharkNinja, Cummins
    A single hacker used mostly autonomous AI agents on the open-source Cairn platform to break into more than 100 websites, including John Deere, SharkNinja, and Cummins.

    • Targets: US, Canadian, Australian, and Japanese companies; Reuters identified victims including John Deere, SharkNinja, and Cummins.
    • What happened: AI security firm Norforge found 20+ exposed instances of Cairn, an open-source 'general-purpose problem-solving engine,' being used maliciously; the most active attacker spent a few thousand dollars and attempted 1,200 break-ins.
    • The attacks ran with little human involvement β€” the hacker specified intrusion tactics in under 100 Chinese characters, and successful breaches took about 23 hours.
    • Victims say impact was limited: John Deere reports no indication sensitive data was accessed; SharkNinja says a standalone product-support site was affected and contained; Cummins is investigating a third-party vendor site.
    • Why it matters: it demonstrates AI agents enabling large-scale, low-cost cyberattacks, and Norforge is working to take down the malicious Cairn instances; Cairn's creator says misuse 'is a human decision, not a feature of the engine.'
    Sources πŸ“„ Source: norforge.com Β· πŸ“Ž Coverage: reuters.com Β· πŸ‘ via The Verge AI
  • AI game clones push indie devs to delay demos and hide work-in-progress
    Indie developers are withholding public demos and early footage because AI coding tools let anyone clone their games within days, sometimes before launch.

    • Affects indie game developers promoting games on Steam, mobile, and console storefronts.
    • Alliance Arts delayed its Steam Next Fest demo for Drunken Goddess Reflex, citing fears AI could replicate the game's presentation and gameplay before launch; it will now show the demo only in closed sessions.
    • Freya HolmΓ©r's rotating-pivot Tetris prototype was cloned within days of a 50-second social media clip; Charlie Greenman shipped his version, Rotris, after about a day of AI-assisted work.
    • Moldova-based Midnight Works reportedly used generative AI at 'every step'β€”banners, screenshots, UI, 3D modelsβ€”to mass-produce clones of popular games.
    • Devs like Lucas Pope and Sos Sosowski say the trend discourages sharing work in progress, creating a bind: no sharing means no sales, sharing means getting cloned.
    Sources πŸ“„ Source: 404media.co Β· πŸ“Ž Coverage: arstechnica.com Β· πŸ‘ via Ars Technica AI

Make AI adoption safer

Build practical guardrails around the AI tools your team already uses.

Explore Secure AI Adoption