Archive
模型安全、資安、隱私、供應鏈、紅隊與防護。
AI 安全
The new release forces some Claude Code web tool requests through the session network proxy and also fixes issues involving proxied environments, MCP reconnections, and sensitive input handling. It adds a Python SDK migration command, but Anthropic has not disclosed the vulnerabilities’ severity or the scale of impact.
代理工具
The MCP maintainers are concentrating the next phase of specification work on five areas, including server-initiated events, agent identity, and progressive tool discovery. These items remain on the roadmap, while current SDK support for Tasks and extended notifications still has gaps.
最新模型
A Beijing Academy of Artificial Intelligence research team has proposed a three-stage post-training method that enables models to answer questions about a fixed document set without RAG. IAR outperformed standard SFT across all metrics in seven of eight experiments, although the results still depend on synthetic question-answer pairs, model judges, and model-specific hyperparameter tuning.
AI 安全
Semantica 0.6.6 delivers a concentrated set of fixes for multiple vulnerability classes affecting knowledge graph imports, backups, exports, and external requests, and its maintainers recommend that all deployments upgrade. The release also adds a fact-retraction mechanism that preserves provenance records, along with CrewAI integration.
代理工具
Nous Research has rolled keyless web search, persistent memory for scheduled tasks, and execution-stall safeguards into Hermes Agent 0.20.5. Although labeled a patch release, it merges roughly 323 PRs; full migration notes will not arrive until 0.21.0.
推論系統
Hugging Face now lets MiniMax H3, MiniMax Music 3, and Wan-Animate-2 plug in directly as composable blocks, without traditional DiffusionPipeline wrappers. The release also adds limited tensor parallelism, low-bit quantization backends, and security fixes, but removes Flax and changes LoRA outputs.
AI 安全
SafeBranch rolls back an agent’s hazardous trajectory to a critical decision point and compares safe and unsafe actions only within the same context. The trained model requires no external critic at deployment, but results are currently limited to simulated household environments, and data construction still relies on GPT-4o judgments.
最新模型
ConceptGuard no longer treats the forget and retain sets as unrelated facts. Instead, it requires models to suppress harmful uses of a technology while preserving legitimate ones. All four unlearning methods exhibit a trade-off between forgetting and utility, with highly inconsistent results across concepts.
AI 安全
The open-source agent runtime Forge can now isolate MCP connections and credentials by user while automatically performing OAuth 2.1 metadata discovery and dynamic client registration. The release also adds granular egress controls and approval auditing, although MCP support currently remains focused on HTTP transport.
AI 安全
The new benchmark deduplicates agent skills from 13 public sources and splits them by structural family, preventing near-duplicate samples from appearing in both the training and test sets. The best text classifier performed strongly on a random split, but misclassified 62.4% of benign skills as malicious when evaluated on unseen sources.
AI 安全
New research shows that even when models refuse to disclose secrets directly, statistical features such as response length, formatting, and word choice may still carry contextual information. An adaptive black-box attack can recover nearly all two-digit secrets, while achieving an 82% exact-match rate for four-digit secrets.
AI 安全
PolicyGuide does more than block policy-violating actions before tool calls: it tracks incomplete policy steps during every user turn. It improved reliable success rates across three τ²-bench domains, but adds one LLM verification call per turn, and some procedural-compliance metrics were designed by the authors themselves.