New CMU Benchmark: Claude Mythos Substantially Outperforms GPT-5.5 in Autonomous Browser Vulnerability Discovery
A research team at Carnegie Mellon University has built a new benchmark that measures how capably AI agents can autonomously discover and exploit real vulnerabilities in Google's V8 engine. The results showed that Anthropic's Claude Mythos significantly outperformed OpenAI's GPT-5.5.
The test evaluated AI agents' ability to autonomously develop exploits against known vulnerabilities in the V8 engine. Mythos led GPT-5.5 by a wide margin, though its execution costs reportedly ran about 12 times higher.
The results matter for two reasons. First, they objectively demonstrate that state-of-the-art AI models have reached the level where they can autonomously discover and exploit real security vulnerabilities. Second, that capability varies greatly from model to model. Capabilities that can be wielded for attack can equally be applied to vulnerability discovery and defense, once again underscoring AI's double-edged nature in cybersecurity.
Reproducing Gemini's Tool Calling with 26M Parameters — Needle Fires the Starting Gun on Agent Democratization
"Needle," released by the startup Cactus Compute, is a project that successfully distilled Gemini's Tool Calling capabilities into a model with just 26 million parameters. A model small enough to fit on a smartphone reproducing the tool-calling functionality of a giant model is a significant milestone in the democratization of AI agents.
The project scored 562 points on Hacker News, offering one answer to the question of how far agent capabilities can be shrunk. At the same time, a challenge known as the "reliability cliff" has also been pointed out. While miniaturized models achieve high fidelity in reproducing core functionality, they still face a major wall when it comes to reliability on edge cases, and careful evaluation is required before moving them into production.
How far agent capabilities can be ported to small models is one of the key technical themes of 2026. Needle's results demonstrate the possibility, while also highlighting the magnitude of the challenges that remain.
Judea Pearl Mathematically Proves the Limits of "Learning from Data Alone"
Judea Pearl, recipient of the 2011 ACM Turing Award, has presented a mathematical proof of the fundamental limitations of the "learn from data alone" approach in machine learning, sparking discussion on Reddit's r/MachineLearning.
Pearl introduced the Ladder of Causation, a hierarchy that runs from correlation to causation, and from causation to explanation and imagination. He argued that deriving causal relationships from data alone is mathematically impossible. As a concrete example, he noted that "no matter how much data you collect on people who take aspirin, you cannot prove that aspirin is the cause of headaches."
Pearl further criticized the machine learning community for being bound by two sets of "handcuffs." One is the assumption of a "blank slate" (tabula rasa) — the stance of trying to derive everything from data without prior knowledge. The other is the bias that "mimicking how the brain works should be enough." Pearl argued that although solutions already exist in causal inference, adoption has lagged due to the industry's prevailing hype.
In an AI research landscape dominated by data-centrism, this argument — which points to its fundamental limitations — is being watched for its potential long-term impact.
STAM: A New Optimizer for Deep Learning Arrives
A new optimizer for deep learning called STAM (Stable Training with Adaptive Momentum) has been proposed. It aims to address several issues facing existing optimizers such as Adam, AdamW, and Muon.
Its main features are threefold: improved training stability, reduced resource consumption during training, and the ability to tackle optimization problems that existing optimizers struggle with. The paper is available on SSRN, and comparative experiments against other optimizers have also been reported.
With the Adam family of optimizers having long reigned as the de facto standard in deep learning, the arrival of a new alternative is noteworthy. That said, as of this writing it is a solo paper by an individual researcher, and large-scale validation is still to come. The author is reportedly soliciting technical feedback from the community, and evaluating its practical utility is expected to take time.
Anthropic's Vision of an "Intelligence Contest in Automated Auditing" — AI That Uncovers Lies vs. AI That Hides Them
Since 2024, the toolkit for interpreting the internals of LLMs has been rapidly assembled. Sparse Autoencoders (SAEs) decompose activation vectors into tens of thousands of interpretable features, and semantic search can find semantically similar documents in training data. The tools are in place, but the question of who will use them, and how, has remained open.
Before a frontier model's release, a vast range of behaviors — reward hacking, sabotage capabilities, evaluation awareness, hidden objectives, and more — must be tested across countless scenarios. The traditional approach of manual analysis by human research teams is nearing its limits as the number of checks keeps growing.
In response, Anthropic is reportedly steering toward "automated auditing," using AI to audit AI. A picture is emerging of an "intelligence contest" in which the auditing AI tries to detect a model's problematic behaviors while the model under audit tries to hide its own intentions.
As a concrete approach to the practical challenges of AI safety, its future development is drawing attention.