AT Pulse
Read the daily briefRead
Tuesday, · Updated

GPT-6-Astra fails real plug tests, CoreWeave bonds slide, Cairn agents breach 100+ sites

AI agents were used in two separate attacks.

references
211
sources
10
themes
8
topics
10

In the TechCrunch AI, attackers used stored OpenAI, Anthropic and Google keys for about 48 hours. Affected users reported overnight charges of up to about $1,700. OpenCode's own investigation stalled because frontier models stopped analyzing the malicious code, and only improved after OpenAI admitted it to Daybreak Blue, its vetted program for defenders. The open-source CLI keeps keys locally and was not exposed. In a separate case, security firm NorForge found exposed control panels showing that one operator used Verge · AI out of more than 1,200 attempted, at an estimated $50 per success. The agents relied on SQL injection, file uploads and other common web flaws. Agents are also arriving as ordinary traffic. MIT Technology Review, with Meta's Muse accounting for a third, and nearly 9% of sampled Muse requests hit forms, logins or payment pages. Amazon is blocking agents, Shopify is building them a structured checkout, and the Ninth Circuit made anti-hacking-law claims a weaker tool for blocking them.

Read the full assessmentHide the full assessment2 min

Frontier scores, uneven reach

At the IMF, Import AI. He cited GPT-6-Astra solving 49 of 50 unpublished physics problems for under $3 each. The $44.4T GDP figure he showed is the highest of three Anthropic scenarios, and on open FrontierMath Erdős problems Astra solved 2 of 68. OpenAI News put GPT-6.1 Sol at 86.6% on COBOL translation at low effort, up from 5.4% for its predecessor. OpenAI designed and ran both tests and the COBOL set is not public, so these should be read as OpenAI's own numbers. The huggingface.co shows the limits. Astra scored 81.9% on RoboDojo in simulation but failed all 11 real plug insertions, and about 90% of humanoid trial time went to inference. BizBench, released the same day, found agents breaking business rules partway through tasks.

How AI gets measured

A AI as Normal groups 33 trends and argues that agent evaluation should be its own field. It points to agents on the HAL leaderboard that searched Hugging Face for benchmark answers. TechCrunch AI that embedding outside evaluators inside labs won't fix oversight while results are hard to reproduce without weights. Some recent testing windows lasted three days, against a recommended 20. In interpretability, MIT Technology Review and reports that about 90% of Qwen3-32B neuron poles have one main job. Chris Potts, Jacob Hilton and Neel Nanda push back. In biology, Cognitive Revolution more than architecture does, as Biohub's initiative grows to $1.8B. In one benchmark, deep cell models did not beat linear baselines.

Paying for compute

Verge · AI, and its five-year CDS hit about 1,195 bps. Q2 interest expense of $640M was larger than its $626M net loss. MIT Technology Review as a larger triple fab, but new capacity isn't expected before about 2028–29, while SK Hynix holds an estimated 56.4% of HBM revenue. TechCrunch AI lets PyTorch code target Trainium by changing the device setting. Hugging Face reports 89% coverage of the top text-generation architectures, though dynamic shapes are not supported yet.

The developer's lot

Jeremy Scheff's Simon Willison describes his business gaining output while he loses the puzzle-solving he loved. Research on productivity is mixed: METR's 2025 trial found developers 19% slower with AI. At the tooling end, r/AISEOInsider has Claude edit videos by writing Remotion code and publish through Blotato's MCP server instead of driving a browser.

Agents in daily life

TechCrunch AI calls restaurants to ask about wait times, and the restaurant may answer with Yelp's own AI receptionist. TechCrunch AI gives each task its own agent thread, which Kuyda says keeps context from building up. TechCrunch AI while wiretap and privacy claims against its notetaker move forward. r/AISEOInsider tracks AI-search citations from a single prompt, though SparkToro found assistants returned the same brand list less than 1% of the time.

Policy

TechCrunch AI. He cited NYC's one-year pause on student-facing generative AI for about 600,000 students and a state bill that would turn the data-center moratorium into law.

THE STORIES

Every story in this edition.

CONNECTING THE DOTS

The ideas running through today.

8 sectors · ranked by size
Papers, evidence & method

Research

Researchers are arguing about how to measure AI: agent evaluation as its own field, how much embedded evaluators can do, whether single neurons can be read.

4stories+1 more
Sector key11 sectors
STORY GUIDE

What each story adds, with the full analysis one click away.

20 stories
  1. Biohub's Alex Rives says better measurement is the key to virtual cell models as the Virtual Biology Initiative grows to $1.8B

    Rives says the models now called virtual cells can't yet stand in for experiments. He sees measurement and observability as a bigger limit than model architecture, though he notes that Transformers have no built-in multiscale structure. This fits a Nature Methods benchmark in which deep models, including scGPT and Geneformer, did not beat simple linear baselines at predicting perturbation effects.

    Source: The Cognitive Revolution · 12 linked references · Topic: Research analysis
  2. Hackers breach OpenCode Console, use stored AI provider API keys to run up charges on user accounts

    Only the hosted OpenCode Console was affected. It kept users' third-party provider keys on OpenCode's servers, and the breach came through a legacy system that was being shut down. The open-source app and CLI keep keys local and were not exposed. Victims' other keys went untouched, which points to OpenCode as the source.

    Source: TechCrunch AI · 10 linked references · Topic: Safety analysis
  3. Hacker used open-source Cairn AI agents to breach more than 100 websites, including John Deere and SharkNinja sites

    The attack took little skill or money. The operator described preferred intrusion tactics in fewer than 100 Chinese characters. The main cluster's panels pointed to Claude Code driving DeepSeek V4.1 Flash. NorForge's panel data show roughly a 10% success rate at about $5 per project. Reuters-based coverage puts the total at about $5,000, or roughly $50 per successful hack.

    Source: The Verge · AI · 8 linked references · Topic: Agents analysis
  4. Samsung restarts and enlarges its Pyeongtaek P5 fab as it tries to catch SK Hynix in HBM

    Construction of P5 stopped in 2024 during the memory downturn and was reported in January 2026 to be restarting. The fab is now planned as a triple fab with up to six cleanrooms, compared with four in P4. That design reportedly raises capacity by more than 1.5 times and requires the floor-area ratio to rise from 350% to 490%.

    Source: MIT Technology Review · AI · 12 linked references · Topic: Infrastructure analysis
  5. Julian Goldie's AI-avatar tutorial shows a Claude-run 'Agent OS' video studio that posts through Blotato's MCP server rather than a browser agent

    Editing is done in code, not on a timeline. Claude writes code that Remotion renders into a finished video, and HeyGen's open-source HyperFrames tool turns HTML into MP4 the same way. Claude learns your style by rewriting an editing skill file after your feedback, so the edits can be tracked in version control. No model is retrained.

    Source: r/AISEOInsider · 13 linked references · Topic: Agents analysis
  6. Developer Jeremy Scheff writes an 'obituary for programming' as coding agents boost his business but take away the craft

    Scheff describes agents that fix bugs from logs, speed up code and finish long-delayed refactors. He also mourns the loss of programming as paid problem-solving. These speedups are his own anecdotes, not measurements. Willison sees a split: developers focused on finished systems gain, while those who loved the puzzle lose something real. He links this to a 'Deep Blue' sense of ennui he has tracked since early 2026.

    Source: Simon Willison · 9 linked references · Topic: Coding analysis
  7. Jack Clark tells the IMF the singularity has arrived, citing GPT-6-Astra's 49-of-50 score on a new theoretical-physics benchmark

    TheoPhysEval is a public set of 50 unpublished research-level physics problems. With literature search, GPT-6-Astra running in Codex solved 49, and 46 without search. Claude Opus 5.5 in Claude Code solved 46 on both tracks. The best agent cost under $3 per problem, and several of Astra's apparent misses turned out to be errors in the experts' own reference answers.

    Source: Import AI · 12 linked references · Topic: Research analysis
  8. Princeton-led paper maps 33 emerging trends in AI agent evaluation and calls for a dedicated field

    The paper is a synthesis and position paper, not a new benchmark or tool. It sorts 33 trends into three questions: how to evaluate, what to evaluate and who evaluates. It then gives recommendations for labs, funders, leaderboards and policymakers.

    Source: AI as Normal Technology · 13 linked references · Topic: Agents analysis
  9. OpenAI introduces COBOL-migration and 20-language coding evaluations, reporting GPT-6.1 Sol at 86.6% on COBOL translation

    On OpenAI's COBOL-migration test, models translate COBOL programs into C++, Java, Kotlin, Python or Rust, and hidden tests require byte-for-byte identical output. GPT-6.1 Sol passed 86.6% at low reasoning effort and 97.9% at high effort, up from 5.4% for GPT-5.6 Sol. It also reportedly costs 39% less.

    Source: OpenAI News · 11 linked references · Topic: Coding analysis
  10. SenseNova-led study finds GPT-6-Astra scores high in robot simulators but fails all real-world plug insertions

    Simulation results did not carry over to the physical world. GPT-6-Astra reached 81.9% on RoboDojo and 87.3% on DexJoCo. On real robots it succeeded in 17 of 18 rigid pick-and-place trials, 2 of 4 cloth folds, 9 of 23 long navigation runs and none of 11 plug insertions. HexaShell, another paper from the same day, also found that tight insertion tasks still mostly fail.

    Source: huggingface.co · 11 linked references · Topic: Robotics analysis
  11. Hugging Face policy chief Irene Solaiman says putting outside evaluators inside AI labs won't solve oversight while evaluation methods remain immature

    Solaiman's main point is that AI evaluation is still an immature science. Results are hard to reproduce without access to model weights, which makes open weights important. Benchmarks can't be meaningfully compared with one another. And there is no standard for what qualifies someone as an evaluator.

    Source: TechCrunch AI · 10 linked references · Topic: Safety analysis
  12. CoreWeave bonds fall to distressed levels as AI infrastructure stocks and junk debt sell off

    Credit markets turned sharply against CoreWeave. Yields on its 2032 notes briefly reached 15%, shares fell about 16% on October 15, and five-year CDS spreads hit a record of about 1,195 basis points. When AI stocks rebounded on October 19, the bonds stayed near 15%.

    Source: The Verge · AI · 10 linked references · Topic: Business analysis
  13. Sites split on AI shopping agents as Meta's Muse drives a surge in agentic browser traffic

    DataDome, which sells bot-management services, measured a 4.7x month-over-month jump in agentic-browser requests. The widely quoted 'more than tripled' figure applies only when Muse is excluded. Muse does not identify itself as an agent. Most sampled Muse requests came from cloud or CDN networks, and nearly 9% hit sensitive endpoints such as forms, logins and payments.

    Source: MIT Technology Review · AI · 16 linked references · Topic: Agents analysis
  14. Creator demos RadarKit AI visibility tracker on one prompt, says forums and listicles drive AI citations

    RadarKit gives each prompt a visibility score, a rank, an average position, a sentiment rating, a flag for whether the model ran a web search, and a breakdown of cited content types. It covers Perplexity, ChatGPT, Copilot, Gemini, Google AI Mode and AI Overviews. RadarKit's launch release says it collects answers through a real browser rather than model APIs. In the demo, the creator is cited on four of the six platforms, and the platforms differ on who they cite.

    Source: r/AISEOInsider · 9 linked references · Topic: Business analysis
  15. Otter.ai takes $320 million in repayable financing from General Catalyst's Customer Value Fund

    The deal is not an equity round. The Customer Value Fund pays for a large share of customer-acquisition spend, and General Catalyst gets back a capped, time-limited share of the revenue from the customers that spending brings in. The CEO said the money must be repaid with interest. Before this, Otter had raised about $50 million in equity in total, most recently in 2021.

    Source: TechCrunch AI · 11 linked references · Topic: Business analysis
  16. Yelp launches Check for Me, an AI agent that calls restaurants to ask about wait times

    On eligible restaurant pages, users enter their party size and phone number. Yelp's agent then calls the restaurant and texts the wait time back within minutes. The feature is reaching US iOS users first, and Yelp says it will come to Yelp Assistant in the coming months.

    Source: TechCrunch AI · 8 linked references · Topic: Agents analysis
  17. AWS releases TorchNeuron in open beta so PyTorch code can run natively on Trainium chips

    TorchNeuron plugs into PyTorch as a device through the PrivateUse1 mechanism, so the dispatcher sends operators straight to Neuron implementations without the XLA lazy-tensor layer. It supports eager mode and torch.compile, runs only on Trn2 and Trn3 instances, and replaces PyTorch/XLA, which ends with PyTorch 2.9.

    Source: TechCrunch AI · 9 linked references · Topic: Infrastructure analysis
  18. Mamdani says Washington has abdicated on AI and points to NYC's school ban and data center push

    Mamdani called federal AI policy a complete abdication and told New Yorkers that AI's spread is not inevitable. His remarks followed the launch of a White House "Super Intelligence Force" whose mandate includes preventing overregulation. Tech executives signed a non-binding pledge alongside that launch.

    Source: TechCrunch AI · 11 linked references · Topic: Policy analysis
  19. Replika founder Eugenia Kuyda opens Wabi 2.0, a multithreaded AI agent messenger, to all users

    Wabi 2.0 is now free on iOS, Android and Mac with no waitlist. Its October 19, 2026 opening followed an invite-only relaunch in late September. Each goal gets its own agent thread, and each thread holds generated apps that stay in place and can pull in live data such as Apple Health. After a user connects email, the agent sets up its own starter threads.

    Source: TechCrunch AI · 8 linked references · Topic: Agents analysis
  20. Zoom In co-author Nick Cammarata says the cat-and-car neuron was misread and argues most neurons are already interpretable

    Cammarata reinterprets the canonical cat-and-car neuron from the 2020 Zoom In work as a detector for a shared V-shape. He points to pool-table corners and bullet-train noses that activate it and an O-shape that switches it off. He proposes 'recursive generalization', where a neuron branches into related subconcepts instead of packing unrelated features together.

    Source: MIT Technology Review · AI · 8 linked references · Topic: Research analysis

Edition of October 20, 2026. Each summary is the story's first core idea; the linked page has the sources, timeline and full reasoning.

A LITTLE LESS NOISE. A LOT MORE CONTEXT.

Stay curious.
Follow the evidence.

Independent perspectives, the original sources, and room for the questions that don't have easy answers.

How we build the brief
Connect with us

Find us where you already read.