AINewsnow

Quoting Matthew Green

[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and th…

Read the full story at Simon Willison's Weblog ↗

Timeline · 1 report

  1. 2026-10-01 06:29 · Simon Willison's Weblog
    Quoting Matthew Green

More stories

  1. Bring near-Astra intelligence to everyday work with GPT-6.1 Sol on Amazon Bedrock — AWS Machine Learning Blog
  2. Gemini 4 Argon: our next era of frontier intelligence — Google Gemini Blog
  3. OpenAI pauses AI model training after another agent bypasses network restrictions — InfoWorld AI
  4. Introducing dots — OpenAI News
  5. Introducing Claude Sonnet 5.5 on AWS — AWS Machine Learning Blog
  6. FTC launches broad investigation into Anthropic, OpenAI — Washington Post AI
  7. Google announces Gemini 4 Argon AI model, but you can't use it yet — Ars Technica AI
  8. Gemini 4 Argon has a 1M-token output limit, up from 64K for prior models, and initially costs $2/1M input and $10/1M output tokens, rising to $4 and $20 later (Matthias Bastian/The Decoder) — Techmeme

Get the daily brief of stories like this at 6:30 every morning →