OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. openai.com/index/coordinated…

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent. It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

这几天用muse用的睡眠颠倒了🤣不过是真好用，远超 grok bot....

You can now choose 12-hour prompt caching in the API. Persistent agents, like dots, reuse context throughout the day. You can keep shared instructions, tools, and context cached longer and pay the lower cached-input rate, even when requests are hours apart.

Personal Intelligence is now rolling out for Gemini on Android Auto and in the coming months to cars with Google built-in, so you can get even better hands-free help on the road. With your permission, Personal Intelligence securely connects information from the Google apps you already use — like Gmail, Google Calendar, and Search — so you can make complex requests, get personalized recommendations, retrieve details from past conversations and more.

几乎所有Opus 5.5犯蠢的案例都来自于上下文压缩，上下文压缩会莫名其妙地编造授权、编造所谓的「教训」。我不知道为什么Claude的上下文压缩质量远不如GPT...

Two important changes to timeline recommendations: - New AI/SI ranking model that predicts probable time spent much better - Retrieval model trained to surface posts people read all the way through User active seconds is growing exponentially and hitting all-time highs almost every day:

我很好奇一个问题： 大家在不同的 Coding Agent 之间到底怎么共享上下文？ 比如我现在在Claude Code里跑完了一个项目，或者项目跑到一半，然后需要在CodeX里继续。 这两块的上下文怎么衔接比较好？有没有优雅的解决方案？