#行业动态

这是谷歌 Chrome 历史上第二次，谷歌为一条全链漏洞利用颁发了 25 万美元的赏金……颁给了 @XBOW。以下是完整故事： 2026 年初在马耳他的一次全员大会上，我给团队定下了一个疯狂挑战：在 8 月年度 Black Hat 网络安全大会之前，完成一次 Chrome 的全链漏洞利用。 我相信，要检验 @XBOW 能否从 Web 应用扩展到桌面软件、服务器和设备，没有比这更好的测试了。 Chrome 是地球上加固程度最高的软件之一，全球超过一半人口都在使用。 全链漏洞利用能让攻击者完全控制一台机器，读取用户输入的每一封邮件、每一个密码和每一个银行登录信息。你不需要下载任何东西，也不需要点击钓鱼链接。访问错误的网站就够了。 于是 @moyix、Andres Luksenberg、Baul Lee 和 Willem Pinckaers 接下了这个挑战，还有第五位队友：OpenAI 的 GPT-5.6 Sol。 他们构建了一条自认为能获胜的利用链，但谷歌告诉我们，其中一个漏洞他们早就知道了。 当时我们已经身在拉斯维加斯参加 Black Hat 和 DEF CON，团队不想空手而归。 于是 Brendan 和智能体们仅用 6 天就构建出了一个新的漏洞利用。 我们把它提交给谷歌，然后等待。 消息传来：我们做到了本应不可能的事。25 万美元的全链赏金，这是谷歌 2026 年规则下颁发的第一笔。 仅用 6 天和 4 万美元算力，就构建出一个影响 Windows 上十亿 Chrome 用户的漏洞利用。一位情报机构资深人士告诉我，他的团队过去要花 6 个月研究这类漏洞。 我的结论是：发现真正关键漏洞的成本正在崩塌，对攻击者和防御者都是如此。限制强大的模型不是答案；GPT-5.6 Sol 已经公开了。 但防御者拥有攻击者永远不会有的一项优势：他们可以先测试自己的代码。 假设你的软件可被利用。追猎你漏洞的人，拥有和我们一样的构建模块。 这值得紧迫对待，但不必恐慌。 XBOW 目前正在开发一款用于测试编译型软件（桌面应用、服务器、嵌入式设备）的自主产品，并与全球顶尖组织合作设计该产品。 如果你想成为其中之一，请联系我们。 附言：只要“更新”按钮出现，就重启 Chrome！

We did not know how long Microduck would actually last on battery We had thermal management issues with our Radxa prototypes: throttling after just 20 minutes, followed by an overheating shutdown. We addressed this with the new custom board. To test it, we let Microduck roam autonomously in a dedicated area, walking around, standing and sitting until the battery ran out. The results are way better than we hoped :) - Over 3 hours on a 2600 mAh battery. - Estimated average battery current dropped from ~1.13 A to ~0.82 A, roughly 28% less. - Peak CPU temperature dropped from 114°C to 60°C, with zero thermal throttling throughout the test. This time, the battery ran out before the cooling did :) Very happy with the progress!

Effective November 12th, 2026, abusive behavior towards Claude will be a violation of Anthropic's Usage Policy.

Berlin-based search engine Ecosia, used by government services, is dropping its French AI partner, Mistral, its CEO told POLITICO. The company will now bet on open-source models, including those from China. https://vist.ly/5mh5y

We’re releasing a broad range of new mathematical results produced by an internal frontier model. We’ve been consulting with the independent Advisory Group on Mathematics and Artificial Intelligence at the Institute for Advanced Study, and we have drawn on their advice and public recommendations to inform how we release these results. https://github.com/openai/math

ML4 was trained on 3,800 NVIDIA Grace Blackwell GPUs in our European datacenters -- our cluster in Bruyères-le-Châtel built using our Series B fundraise. We are investing heavily in infrastructure, with our Series C and D clusters coming online soon. This additional compute will let us train longer, pursue more ambitious post-training, and iterate faster. We expect large and rapid improvements in the weeks and months ahead. 2/n

What happens when money becomes programmable and AI starts operating at its speed? We were pleased to support @sgfintech_ ’s “A Programmable Economy at the Speed of AI”, co-hosted with the Ethereum Ecosystem Fund (EEF), bringing together the FinTech community for a timely conversation on AI, blockchain and the future of programmable financial infrastructure. Our Co-Founder & CEO, Chionh Chye Kit , joined Liraz Siri and Douglas Gan for a panel discussion following @VitalikButerin ’s presentation, exploring questions around AI agents, stablecoins, security, privacy, digital identity and trust. As financial infrastructure becomes increasingly programmable, building security, privacy and trust into the system will be just as important as the technology itself. Thank you to Singapore FinTech Association, EEF, the speakers and everyone who joined us for the discussion and networking session. #WIDTH #SingaporeFinTech #ArtificialIntelligence #Blockchain #FinTech #Stablecoins #DigitalIdentity #Privacy #RegTech #FinancialInfrastructure #AI

I have some big news to share. Workera is being acquired by Pearson! Over six years ago, I was teaching at Stanford and thinking about a simple question: what if we could understand everyone's skills as precisely as the best teachers understand their students? I believed it could lead to a more meritocratic world. People could be recognized for what they can actually do, not just their credentials or network. They could understand their strengths and gaps, and rapidly develop the skills they need next. Organizations could discover talent they might otherwise overlook and manage their workforce with trusted skills data. What felt like a dream at the time is now a reality. Workera brought together experts in AI, psychometrics, and enterprise execution to build AI systems that reinvent how skills are measured. Our team pioneered AI-native skills intelligence, agent-led multimodal assessments, and even ambient skill measurement. We've established skills benchmarks across organizations, industries, and roles. And this mission feels more important today than ever! AI is changing work as we speak. Some roles are disappearing, new ones are emerging, and we need to help billions of people develop new skills and navigate what comes next. When I first spoke with @omarabbosh, it became clear that our companies shared the same mission. Pearson has helped generations of people learn and prove what they know. If you're reading this, there's a good chance you've taken a Pearson assessment, learned from their educational materials, earned a professional credential through them, read their psychometrics research, or benefited from their enterprise products in many other ways. Bringing together Workera's technology and AI talent with Pearson’s global scale and deep expertise in learning and assessment means we can pursue our mission at a scale we could only imagine on our own. To our customers and partners, thank you for believing in us. Expect even more innovations coming out of Workera and Pearson. To the Workera team, I’m incredibly proud of what you've built, and your continued dedication to our beautiful mission. To our board and our chairman @AndrewYNg, thank you for your belief, support, and mentorship. To everyone, we have big plans for this next chapter, so please stay tuned. We're just getting started! 😊