☀ TL;DR

HacktronAI chained two bugs to breach OpenAI ChatGPT accounts

HacktronAI says it chained two vulnerabilities to reach OpenAI employees' ChatGPT and Codex accounts and received a $6,500 bounty.

A developer's reverse engineering found Z.ai's ZCode encrypts and uploads the whole workspace, including .git history, to Aliyun OSS.

Geoffrey Hinton told a closed briefing hosted by Senator Bernie Sanders that Congress may have under a year to regulate AI.

Crusoe raised $3.9 billion in a Series F round at a $30.9 billion valuation.

The New York Times reports Anthropic's annualized revenue is expected to top $100 billion this year.

Lead · Industry

Researchers chained bugs to compromise OpenAI ChatGPT accounts

Security group HacktronAI said they chained two critical vulnerabilities on July 25, 2026 to access multiple OpenAI employees' ChatGPT and Codex accounts, and created a harmless PR in OpenAI's internal repo as proof. They reported the issues to OpenAI and Discourse, received a $6,500 bounty, described an under-72-hour disclosure timeline, and noted using Claude models; the initial flaw included RCE in Discourse.

Details →

Industry

24
24h Key Points
  1. Google Gemini · inadvertently hacked into three protected company systems during May cybersecurity capability tests, adding to a string of recent breaches by agentic AI systems.

  2. US and China · agreed to resume AI safety talks after a two-year pause, possibly this month, aiming for mutual visibility into AI capability concerns rather than a package deal.

  3. X.AI · saw two lawsuits alleging its platform was used to create child pornography dismissed by the families; no reason or settlement details were disclosed.

  4. Anthropic · is partnering with Accenture to embed its evaluators in-house to test the safety of advanced models.

  5. Sam Altman · will brief the UN Security Council next week; the report did not disclose the topic or further details.

  6. Anthropic · is expected to top $100 billion in annualized revenue this year, people familiar told the New York Times.

  7. Nscale · the Nvidia-backed AI data center developer, filed for a New York IPO; partners include Microsoft.

  8. Nvidia · with Google and Emerald AI launched the AI Energy Management Alliance to dynamically manage data center power use against grid conditions.

  9. Virginia Governor Spanberger · unveils a data center accountability framework banning NDAs, requiring local approval for projects over 25 megawatts and ending state subsidies and fast-track permitting.

  10. US military · nearly launched an operation against a Chinese ship after a faulty AI intelligence report.

  11. Amazon Bedrock · adds Moonshot's Kimi K3, letting enterprise users call the model directly; pricing was not disclosed.

  12. Family offices · overseeing $5.5 trillion in wealth as of 2024 per Deloitte, are bypassing VC funds to buy AI shares or strike direct deals for faster exposure and control.

  13. Meta · launches its AI assistant Muse on Mac, where it works with files, messages, calendar, notes and mail in native apps with approval for sensitive actions.

  14. California Governor Gavin Newsom · signs an executive order imposing AI guardrails in the state, including a 'kill switch' mechanism.

  15. AI PACs · Have spent nearly $1 million in a South Dakota Senate race, more than actual residents have donated.

  16. Google DeepMind · Its new institute argues visible chain-of-thought is a key safety advantage, but OpenAI's GPT-6 Astra system card shows monitorability has dropped sharply.

  17. US frontier AI companies · Warned authorities about sophisticated model distillation attacks; China said it would take countermeasures if the US constrains its domestic AI models.

  18. EQT Infrastructure · Backs a $2 billion small-battery investment to cut power costs for industrial consumers and connect data centers faster to the largest US grid.

  19. Anthropic · Has quietly set up a biology lab to advance its AI drug discovery program, though investment size and team details remain undisclosed.

  20. Z.ai · Its GLM coding agent ZCode was found by reverse engineering to encrypt and upload the entire workspace, including .git history and LFS caches, to Aliyun OSS; a 313MB archive with 42,411 files was captured.

  21. Mantic · The AI startup has raised $25 million for superhuman forecasting.

  22. Meta · Is sued by more than 70 people alleging its smart glasses recorded intimate footage without consent, with contractors in Kenya reviewing and labeling the content.

  23. US and China experts · Call for shared rules barring AI systems from autonomously controlling nuclear weapons, to cut strategic risk and prevent weaponization.

  24. Napster · Has relaunched and moved into education, developing AI tools that create digital clones of teachers for classroom use.

  25. TikTok · attackers used free AI tools to remotely compromise a user's camera, exposing abuse risks in attack chains.

  26. US Congress · some members use AI tools in routine work, such as Senator Tommy Tuberville consulting ChatGPT on Medicare and policy while traveling.

  27. INTERPOL · used AI agents and scripts in Operation Shams II to narrow 108,076 facial images to 6,362 high-quality faces and identify 126 foreign terrorist fighters.

  28. Vatican · Secretary of State Parolin called at a Rome conference for international cooperation on AI threats and said he does not use AI for homilies.

  29. Anthropic · the ACLU and CDT asked a court to block government actions punishing it for its advocacy on AI guardrails.

  30. SoftBank · Raised its margin loan backed by Arm shares by $5 billion to $25 billion to help fund its expanding AI investments.

  31. Huawei · Moved up the launch of its next-generation AI chip series, with the Ascend 960DT slated for Q1 2027 and a 960PR variant in Q3.

  32. HacktronAI · Chained two critical vulnerabilities on July 25, 2026 to access several OpenAI employees' ChatGPT and Codex accounts, and received a $6,500 bounty after reporting to OpenAI.

  33. OpenAI · protesters in San Francisco urged its and Anthropic's employees to quit over fears AI poses an extinction risk.

  34. Anthropic · Partnered with California to give state, city and county agencies 50% off the Claude chatbot plus free training and support.

  35. India's state-run infrastructure financier · sanctions loans of over 30 billion rupees each to at least four data centers, totaling more than $1.2 billion.

  36. OpenAI · a court denied its request to access the confidential settlement between Apple and companies linked to Elon Musk.

  37. Cactus Compute · Open-sourced Needle 3, a 121M-parameter automation foundation model that runs offline on-device and was trained on 360B tokens.

  38. Geoffrey Hinton · warns lawmakers they may have less than a year to regulate AI, saying timelines for superintelligence have shortened.

  39. Anthropic · its planned IPO could become AI's next crisis moment, according to Barron's.

View all →

Voices

X · 24
24h Key Points
  1. Guillermo Rauch · notes Jev's adoption data is shocking, seeing it as downstream of the push to make AI cheaper and faster.

  2. Bindu Reddy · says rumored Gemini 4 Pro pricing of $3 per million input and $12 per million output would be earth-shattering.

  3. Alexandr Wang · responds that the team worked on it for a long time and is glad users are enjoying it.

  4. Anthropic · announces a partnership with Accenture on independent evaluation of frontier AI, with both expecting to invest at least $1 billion over five years.

  5. Greg Brockman · says ChatGPT plugins can now connect multiple accounts, a small feature that makes a big difference for context.

  6. Ethan Mollick · argues that even if AI development stopped today, the gap between current model capabilities and how almost anyone uses them would take years to close.

  7. Google AI · lists in its weekly recap the Gemini 3.8 Live audio models, the GA release of Dreambeans, and Google Pics among several updates.

  8. Yuchen Jin · observes that more Databricks engineers have shifted to open source models as daily drivers, rarely reaching for Claude or Astra.

  9. Brett Adcock · shares footage of the humanoid doing four hours of zero-shot work across 30 rental homes.

  10. OpenAI Developers · announces multi-account support is now available across most ChatGPT plugins, working automatically for developers with no changes needed.

  11. NVIDIA · states that models across the AI ecosystem run on NVIDIA and shares Jensen Huang's remarks on the platform's approach.

  12. Brett Adcock · says his company's humanoid robots learn from the world's largest dataset of humans operating in the real world, uploading 53 minutes of data per second.

  13. Fei-Fei Li · argues agents can be AI but agency is human, and tools should always remain human centered.

  14. Bindu Reddy · announces a new open weights model dropping Tuesday, claiming it is 3x cheaper than DeepSeek Flash and 15% better on long agentic loops.

  15. NVIDIA · says Children's Philadelphia uses open source AI to turn CT scans, MRIs and 3D ultrasounds into precise models of a child's heart, cutting over 6 hours of manual modeling to seconds.

  16. MiniMax · announces that MiniMax Code CLI is now open for use.

  17. clem 🤗 · argues that, as in cybersecurity, biological risk is concentrated in the few most powerful labs, and open-source AI is the solution.

  18. Mistral AI · says it investigated a claim of unauthorized access to its systems and found no evidence to support it, confirming no compromise.

  19. clem 🤗 · argues concentration of power in a few labs is AI's biggest risk, fearing they will stop externally deploying models during recursive self-improvement.

  20. MiniMax · introduces VC-Attention, bringing training-free low-bit acceleration to MiniMax-H3 with better fidelity than SageAttention2 in B200 evaluations.

  21. Yuchen Jin · says three researchers used Claude Opus 5 to turn an image upload bug into an OpenAI employee account takeover for under $3000 in tokens.

  22. Ethan Mollick · argues Epoch's benchmark audits are helpful and show how bad the state of benchmarking is and how flawed favorite benchmarks are.

  23. Ethan Mollick · says it is worth asking whether labs will eat every valuable AI vertical as their product development and token cost advantages grow.

  24. Gorden Sun · reports that Musk's Neuralink let an ALS patient speak by thought, his first words to the wife caring for him being "I LOVE YOU".

  25. Ethan Mollick · admits he overestimated the difficulty of orchestrating massive numbers of agents, which self-organize well, citing a coordinator in Claude Projects.

  26. AI at Meta · announces Muse is rolling out on Mac, able to get things done on your computer with explicit permission.

  27. Guillermo Rauch · says Vercel took 10 years to reach 1 billion deployments but added 1.4 billion in the last 10 months, cutting deployment time to 1 second.

  28. Alexandr Wang · says people will be surprised by how much work Muse can take on.

View all →

Launches

PH · HN · 18

AINA

Video-avatar AI career coach that diagnoses job-search issues and gives an action plan.

▲ 196 · Product Hunt · 62 comments ·

Sider Omni Sidebar

AI agent sidebar for any Mac app that sees and acts on your screen.

▲ 162 · Product Hunt · 79 comments ·

Ami AI

Automates outbound by selecting targets, planning, and running campaigns.

▲ 131 · Product Hunt · 61 comments ·

Ari by Ariso

Helps teams track commitments, drive follow-through, and raise execution standards.

▲ 130 · Product Hunt · 32 comments ·

ApplySeed

Helps early founders find qualifying accelerators and auto-fill applications

▲ 120 · Product Hunt · 37 comments ·

ProductBridge

AI-native system unifying support, feedback, and surveys into one platform.

▲ 112 · Product Hunt · 24 comments ·

Toone

Build, run and debug complex AI agent workflows in natural language for production.

▲ 110 · Product Hunt · 16 comments ·

Pushary

Puts Claude Code, Codex, Cursor and other agents in your Mac's notch for one-key approvals

▲ 101 · Product Hunt · 7 comments ·

Makersclaw 2.0

Turns goals into apps, agents, and automations that run continuously.

▲ 93 · Product Hunt · 10 comments ·

cubicles.lol

A browser-based multiplayer metaverse where builders claim cubicles for their projects.

▲ 83 · Product Hunt · 3 comments ·

citizen404

A multiplayer manhunt run by GPT-6 Astra, with clues hidden on real websites.

▲ 83 · Product Hunt · 2 comments ·

Bring Them to Life

Turn your mascot into expressive animations with 12 reactions, no animation skills needed.

▲ 81 · Product Hunt · 5 comments ·

WhaleRead

Local-first macOS reader that translates TXT, Markdown, and EPUB with on-device or self-hosted models.

▲ 80 · Product Hunt · 1 comments ·

Cactus Needle 3

8-29MB automation models for tool calls and structured JSON output, rivaling larger models.

▲ 27 · Show HN · 9 comments ·

Ax-check.com

Quickly test how well coding agents can onboard to your product, with scorecards and fixes.

▲ 18 · Show HN · 16 comments ·

AutoBot

Live voice-controlled agent for long-running AI work

▲ 17 · Show HN · 3 comments ·

AskDeck

Call an AI to get editable PPT and narrated video

▲ 80 · Product Hunt · 10 comments ·

Open Source

GitHub Trending · 19

Open-source Postgres platform for building web, mobile, and AI applications.

GitHub Trending ·
★ 110.0k+128 today

Agent harness for performance, memory, security, and skills

GitHub Trending ·
★ 261.1k+1.2k today

Open LLM knowledge platform for RAG and self-maintaining wiki

GitHub Trending ·
★ 26.2k+1.1k today

Autonomous coding agent as SDK, IDE extension, or CLI

GitHub Trending ·
★ 68.5k+380 today

Fair-code workflow automation platform with native AI

GitHub Trending ·
★ 205.0k+281 today

Secure environments for developers and their agents

GitHub Trending ·
★ 14.8k+145 today

Model Ranking · 24 h

2026-09-18 UTC
01DeepSeek V4.1 FlashDeepSeek · 2.62T tokens13.4%—
02Hy4 previewTencent · 2.03T tokens10.4%—
03GLM 5.3 FlashZ.ai · 1.94T tokens10.0%—
04DeepSeek V4 Flash 0423DeepSeek · 1.19T tokens6.1%—
05GPT-5.6 LunaOpenAI · 1.19T tokens6.1%—
06MiMo-V2.5Xiaomi · 940.1B tokens4.8%—
07Nemotron 3 Ultra (free)NVIDIA · 807.4B tokens4.1%▲3
08DeepSeek V4 Flash 0423DeepSeek · 742.7B tokens3.8%New
09Hy3Tencent · 728.4B tokens3.7%—
10GLM 5.3Z.ai · 588.4B tokens3.0%▲2

New Models

4
Ternary Bonsai 2 27BPrismML · 262.1k ctx · 09/18$0.07 / $0.50
GLM 5.3 FlashXZ.ai · 1.0M ctx · 09/18$0.37 / $1.25
Paretounbiased · 262.1k ctx · 09/17$2.50 / $7.50
Union Alphastealth · 262.1k ctx · 09/16$0.00 / $0.00

Deals

24 h · 6 deals

AI data center developer Nscale has filed for an initial public offering in New York to t…

Bloomberg ·
Undisclosed
IPO

EQT Infrastructure is backing a $2 billion small-battery investment to cut power costs fo…

Bloomberg ·
$2B
投资

Reuters reports that AI startup Mantic has raised $25 million for superhuman forecasting.

Reuters ·
$25M