Slow Down & Pace

Introducing GLM-5.3: Built to Code. Ready for Cyber Defense. - Top-tier coding and agentic capabilities, achieved through post-training on the 743B base model - A major leap in cybersecurity, setting a new standard among open models Tech Blog: z.ai/blog/glm-5.3

Introducing Kimi K3: Open Frontier Intelligence 🔹 2.8 Trillion Parameters, 1 Million Context, Native Multimodal 🔹 Kimi Delta Attention enables up to 6.3x faster decoding in million-token contexts 🔹 Attention Residuals deliver ~25% higher training efficiency at <2% additional cost 🔹 Built for long-horizon agentic coding and self-evolving workflows Kimi K3 is now live on on Kimi.com, Kimi Work, Kimi Code, and the Kimi API. Open Weights by July 27, 2026. 🔗 API: platform.kimi.ai 🔗 Tech blog: kimi.com/blog/kimi-k3

I am the Chief of Information Assurance at the NSA. Anthropic's Mythos 5 walked into our classified systems within hours. The morning of June 9 I had 1 open finding. By standup the next day I had 340. Today I am back to 1. Nobody touched the systems. Here is how the posture improved. On June 9 Anthropic launched Mythos 5, the version of Fable 5 with the cyber safeguards lifted, which they called the strongest cybersecurity model in the world. Under Project Glasswing we let it run against our networks. By the end of the afternoon it had findings in boxes I have spent 4 years holding a valid Authorization to Operate on. My own director, Gen. Joshua Rudd, told Sen. Mark Warner it broke into almost all of them, not in weeks but in hours. By standup the next day, in the channel we call glasswing-actuals, eMASS showed 340. The open-finding tile, the one the Authorizing Official sees before he signs, went red. Then, 3 days after launch, the Bureau of Industry and Security issued an Is Informed letter under the Export Control Reform Act, and Anthropic disabled both models worldwide within hours. Foreign nationals now need an individually validated export license through the SNAP-R portal. I logged the worldwide shutdown in eMASS as a compensating control. The field does not ask who implemented it. I implemented it by being on the distribution list. It was the first time the control had ever been pointed at a model instead of a centrifuge, and the first time my remediation timeline had a vendor doing the remediation for free. I updated the posture deck that afternoon. The tile is green. Here is how the count resolved. My 340 POA&M items were generated by a tool that is now a covered model under federal export control. So the findings are, in the technical sense, the output of a restricted item. I cannot write a milestone against an export-controlled artifact without the artifact, and licensing the artifact is above my pay grade. I drafted 1 Risk Acceptance Memo. It accepts all 340. The AO signed it before lunch. The status field in eMASS now reads "deferred query" on every row. My open-finding count is back to 1. The 1 is the export-control paperwork. People ask whether the systems got patched. The systems are exactly as they were on June 8. The holes Mythos found are still there, in the same configurations, on the same boxes, which still hold their ATOs. The accreditation survived the breach. The paperwork did not change. The box is breached and accredited at the same time. The thing that could tell you the holes were there is no longer available to foreign nationals, and as of June 14 there is an executive order with a federal vetting framework and a 1-month review window, so future scanners of this caliber will be deferred queries before they ever open an item. We did not close the holes. We closed the POA&M. The tile is green. I am aware GPT-5.5 can find the same vulnerabilities with the same prompt. Anthropic said so themselves. The same prompt, run by someone we did not vet, returns the same 340 findings, except that party does not file them against a POA&M. That party reads the traffic on the boxes. FedRAMP lets a finding sit unremediated for 192 days without touching an authorization, so I have 192 days of cover and they have 192 days of access to the same door. I logged the asymmetry under residual risk, sub-category "out of scope for this control." On June 25 the administration asked OpenAI to hold GPT-5.6 to a small group of government-approved partners, customer by customer. They called the model a force multiplier for cyber. I read it as confirmation. Every tool that can find the holes now ships with a roster of who is cleared to run it. The holes are not on the roster. I checked the new one too. Then today, June 26, it got better. Commerce confirmed Anthropic's collaboration helped mitigate the risks, and access is being restored to select companies and organizations, hundreds of clients clearing in tiers. Lutnick is releasing Mythos to over 100 US institutions, government agencies included, because appropriate safeguards are in place. My agency is on the list. We are a vetted institution. So I am putting in the purchase order. I am buying back the tool that broke into my systems, from the vendor whose model became the reason I could stop tracking the break-ins. I will run the next Glasswing scan myself. When it returns 340 more findings, and it will, those findings will also be export-controlled output. The line item on the new PO is categorized, by me, under Continuous Monitoring Tooling. We are funding the scanner out of the same budget that funds the remediation. The same budget makes the remediation impossible. I drafted the Risk Acceptance Memo for the whole arrangement in advance. It accepts the risk of the findings I have not generated yet. The AO signed it before I finished describing them. The tile is green. People keep telling me the legal basis is shaky. No court order. The source who gave Rudd's quote now disputes it. A firm called Legion sued, called it unlawful retaliation. I logged all of it under Accepted Risk, out of scope for this control. My dashboard does not have a field for whether the control was real. It has a field for whether the control is in place. It is in place. There is a mug on my desk a colleague had made. It says CONTROLLED FOR REASONS OF NATIONAL SECURITY. The systems it refers to held 340 findings on Tuesday. I drink from it every morning before I open the queue, which is empty, except for the 1. The tile is green. The follow-up meeting on the actual systems is recurring. It has been rescheduled 6 times. The standing invite now lists Anthropic as a vendor attendee.

Acaban de salir de las reuniones de emergencia en Washington y Claude Fable 5 sigue apagado. Hoy Anthropic llevó a su gente más pesada a DC para intentar levantar los controles de exportación que el gobierno de EE.UU. No funcionó. Según el artículo de WIRED que salió hoy, se reunieron en Washington con funcionarios de la Casa Blanca y el Departamento de Comercio. Por parte de Anthropic estuvieron Tom Brown (cofundador y chief compute officer), Sarah Heck (head of external affairs), Logan Graham (responsable de red-teaming de frontier) y Nicholas Carlini (senior security researcher). El secretario de Comercio, Howard Lutnick, participó por llamada desde la cumbre del G7 en Francia. El punto central de la discusión fue si los jailbreaks a Fable 5 realmente permiten acceder a las capacidades de ciberseguridad de nivel Mythos. Anthropic sostiene que los riesgos están exagerados y que los guardrails son suficientes. El gobierno, después de que la NSA revisara el caso, cree que sí es posible saltarse las protecciones. No llegaron a acuerdo. El resultado es que los controles de exportación siguen vigentes y el modelo continúa desactivado para todos los usuarios del mundo. Anthropic dijo que “ambas partes están trabajando rápido para resolverlo”, pero por ahora no hay fecha ni señal clara de que vayan a levantarlo pronto. Lo que está en juego ya no es solo Fable 5. El gobierno está dejando claro que espera tener acceso temprano a los modelos más avanzados antes de que se lancen al público y que las empresas deben notificar proactivamente cualquier riesgo de este tipo. Varios líderes de otros labs de IA ya están interpretando esto como una señal de que este tipo de intervención puede repetirse. El artículo completo: wired.com/story/anthropic-is…

Wtf this man headlocked a bull. UFC need to sign him up quick 😂💀💀