Monday, September 21, 2026
The Treasury secretary told reporters after weekend talks with Vice Premier He Lifeng in New York that the world's two largest AI powers should move 'from opaque to more transparency' on incidents that touch national security.
The Heapjack technique meant that opening a stranger's repository in Codex and asking a question about it could hand the repository's author unsandboxed execution on your machine. OpenAI fixed both flaws within eight days of the August 12 report.
A Chinese blogger found a 313 MB archive of his commercial project queued for upload after 564 failed attempts, encrypted with a key only Z.ai holds. The company has apologised and patched the behaviour, but developers say the damage to trust is done.
The model runs on consumer GPUs and ships with day-zero Diffusers and ComfyUI support, but its research license bars commercial use and its benchmark wins are self-reported.
The mixture-of-experts flagship activates about 27B parameters per token and is pitched on task cost rather than raw capability, targeting software engineering, professional knowledge work and finance.
The research model interrupted users less often than rivals in tests but trailed on task accuracy, and the team plans to release weights and training data.
The Cyberspace Administration's proposal would also bar stranger-to-stranger social networking for most minors and require a minors' mode for AI services that could affect the cognition of users under 16.