The AI Gazette · Morning edition · Thursday 5 November 2026luongnv.com/news/reports/2026-11-05-morning.html

Morning edition — Thursday 5 November 2026

Reporting window: to (Paris time). Issued .

This Thursday morning edition covers the 14 hours since yesterday afternoon's 16:09 edition and carries eight new stories. OpenAI said an unreleased cyber model found and exploited 948 Linux kernel flaws, Meta bought the coding-agent start-up Conductor, and Cognition released SWE-2 Flash while holding back its weights. OpenAI also shipped Images 2.6, announced before the last edition but not carried in it. Greg Brockman said OpenAI could be ready to list in 2027, the Pentagon's technology chief promised a list of laws that apply to AI labs, Adweek reported Anthropic's first news-licensing deal, with the AP, and Bloomberg reported that Apple is cutting staff AI budgets. No new frontier model from a major lab passed this journal's checks.

8 new or updated dispatches · 0 background items · Previous: 2026-11-04-afternoon

The News

Models New

Cognition releases SWE-2 Flash, a cheaper coding model for Devin, and keeps its weights behind a vetting programme

Published:

Cognition, the maker of the Devin coding agent, released SWE-2 Flash on Wednesday in Devin Desktop and the Devin CLI. It says the model runs at one-fifth the price and three times the speed of its larger SWE-2, and its launch page lists it as free through 30 November.

SWE-2 Flash is built on Thinking Machines' open-weight Inkling-Small, which has 276 billion total and 12 billion active parameters. Cognition added a mid-training stage before reinforcement learning and says this raised Terminal-Bench 4.0 from 0.9% to 20.0% and FrontierCode 2.0 from 3.2% to 24.0% over the base model, and that SWE-2 Flash beats all American open-weight models on leading evaluations.

Cognition also trained the model for security work, lifting its ExploitBench score from 11.3% to 34.8% by its account. Citing cyber risk, it is not publishing the weights and is building a programme to share them with trusted industry partners and research labs, with details promised in a few weeks.

Caveat. All benchmark figures are Cognition's own, and its comparison covers only American open-weight models. The weight-sharing programme has not been described in detail.

Sources

  1. Cognition (primary source) Checked:

Models New

OpenAI releases Images 2.6, adding animated GIFs and two new image models to its API

Published:

OpenAI released Images 2.6 in ChatGPT, Codex and the API on Wednesday. It says the update generates images 50% faster and adds animated GIFs, and that people now create 4 billion images a week across its products.

In the API the release ships as two models, according to OpenAI's changelog: GPT-Image-2.6 Flare for fast iteration and GPT-Image-2.6 Sunburst for detail and consistency across edits. Developers also get markup-guided edits, SVG output and a complexity setting that controls how much planning the model does.

OpenAI's system card says GIFs bring risks that single images do not, such as harmful meaning conveyed across frames, and that motion-related violations remain challenging to detect.

Caveat. Speed and usage figures are OpenAI's. The release was announced on 4 November before the previous edition went to press but was not carried in it.

Sources

  1. OpenAI (primary source) Checked:
  2. OpenAI API changelog (primary source) Checked:
  3. OpenAI Deployment Safety Hub (primary source) Checked:

Coding & agents New

Meta buys Conductor, maker of an app for running coding agents in parallel, and its cloud service closes on 20 November

Published:

Meta has acquired Conductor, a start-up whose Mac app lets developers run several AI coding agents at once in separate copies of a project, Axios reported on Wednesday. Meta confirmed the deal to TechCrunch but gave no further details, and terms were not disclosed.

Conductor said it has stopped new sign-ups and downloads. Conductor Cloud goes read-only on 13 November and shuts down on 20 November, when the company begins deleting cloud user data; active subscribers get refunds. The local app will keep receiving new models and critical fixes until early 2027, and co-founder Charlie Holtz promised something new to use early next year.

Axios set the deal beside OpenAI's planned purchase of Pierre Computer, announced the same day and covered in the previous edition. TechCrunch notes that Conductor runs agents from labs such as Anthropic and OpenAI rather than its own.

Caveat. Meta has not said how it will use Conductor's team or product. The Hacker News reactions below are anecdotal.

Sources

  1. Conductor (primary source) Checked:
  2. Axios (reporting) Checked:
  3. TechCrunch (reporting) Checked:
  4. Hacker News discussion (community) Checked:

Research New

OpenAI says an unreleased cyber model found and exploited 948 Linux kernel flaws in one $1.2 million run

Published:

OpenAI published research on Wednesday on an automated pipeline that, in a mid-October run with an upcoming cyber model, analysed 2,308 candidate Linux kernel findings, reproduced 1,724 vulnerabilities and produced 948 local privilege escalation exploits. Such flaws let an unprivileged local user gain root. The run cost $1,213,430 in API credits, or $1,279 per exploit, OpenAI said.

The pipeline has five stages: discovery, validation in isolated virtual machines, exploitability testing, patch generation and human review before anything reaches maintainers. OpenAI said the targets ran a stock desktop operating system with standard protections, that it began with critical bugs on the Linux community's guidance, and that it is sending further reports and patches with its Patch the Planet partners.

OpenAI said the October model found more than five times as many novel exploits as a GPT-5.6 Sol run in July, and that its agents used at least 10 exploitation techniques new to outside kernel experts; it withheld their details. In an early run, 20 of 200 reported successes reached root through a different zero-day than the one assigned, which OpenAI cites as a reason to verify how agents reach a result.

Caveat. These are OpenAI's figures for an unnamed, unreleased model, not independently audited. The 948 counts distinct candidate patches, not merged fixes; OpenAI said over 100 of the flaws were patched or had staging patches from other contributors within 10 days. The exploits are local, not remote.

Sources

  1. OpenAI (primary source) Checked:
  2. The Hacker News (reporting) Checked:

Industry & policy New

Brockman says most of OpenAI's revenue now comes from businesses, and that it could be ready to go public in 2027

Published:

OpenAI President Greg Brockman said on Wednesday that the company now generates the majority of its revenue from enterprise sales, Reuters reported from a Wall Street Journal technology conference in Napa, California. Asked on stage whether OpenAI would be ready for an IPO next year, he said: "I think so."

According to Reuters, Brockman said OpenAI has been ramping up sales to businesses, including its Codex agent, in competition with Anthropic, which Reuters said is likely to go public before the end of the year.

Caveat. Brockman gave no figures, and Reuters' report does not say how the revenue share is measured.

Sources

  1. Reuters (via The Star) (reporting) Checked:

Industry & policy New

Pentagon technology chief says the US will set out the laws that apply to AI labs within weeks

Published:

The US government will lay out all the laws and regulations that apply to domestic AI labs later this month, Pentagon Chief Technology Officer Emil Michael said on Wednesday, Reuters reported. Michael, vice chair of the government's Super Intelligence Task Force, said the group would publicise the regulatory landscape "in the next week or two".

Speaking at the Wall Street Journal conference in Napa, he gave no further details. "What we're trying to do is create a framework that makes the American people have confidence that these companies are going to do the right thing," he said. "Or else I think what you get is 535 legislators writing a piece of regulation that could kill the industry."

Caveat. This is a stated plan, not a published document, and Reuters reports nothing about what the list will contain.

Sources

  1. Reuters (via Yahoo Finance) (reporting) Checked:

Industry & policy New

Anthropic struck its first news-licensing deal, with the AP, before the midterms, Adweek reports

Published:

Anthropic signed a content and data licensing deal with the Associated Press just before the US midterm elections, Adweek reported, citing two people familiar with the matter. According to Adweek, Claude users who asked for updates on election night saw up-to-date information attributed to the AP.

Adweek says this is the first time Anthropic has licensed content from any digital publisher, while OpenAI has negotiated more than a dozen such deals. Financial terms and duration were not disclosed; Anthropic did not respond to Adweek's request for comment and the AP gave no comment on the record.

Caveat. Neither company has confirmed the deal on the record; the report rests on anonymous sources. Its scope, including whether it covers model training, is unknown.

Sources

  1. Adweek (reporting) Checked:
  2. The Verge (reporting) Checked:

Industry & policy New

Apple cuts some engineers' daily AI budgets from $300 to $200 and plans deeper cuts, Bloomberg reports

Published:

Apple lowered the daily AI spending cap for some engineers from $300 to $200 last month and plans further cuts that could take some engineering teams to $100 a day, Bloomberg reported on Wednesday, according to The Next Web and 9to5Mac. Many staff outside engineering already have a $100 cap, which Apple has considered cutting to as little as $25 for some teams; employees can ask senior leaders for exemptions.

The budgets cover tokens used with tools such as Anthropic's Claude, OpenAI's ChatGPT and Google's Gemini, and some teams are being told to switch to cheaper or on-device models. Apple declined to comment, The Next Web says, and notes that Apple's research and development costs rose 32% in its 2026 fiscal year, partly on infrastructure and AI costs.

Caveat. Bloomberg's report rests on unnamed people and was not read directly (paywalled); this dispatch relies on The Next Web's and 9to5Mac's accounts. It is unclear how much Apple will save.

Sources

  1. The Next Web (reporting) Checked:
  2. 9to5Mac (reporting) Checked:

Key patterns — editorial analysis

  • Offensive cyber capability now has a price tag: OpenAI put a Linux root exploit at about $1,279 in API credits, and Cognition held back its weights on cyber grounds.
  • The contest for developers is moving to the tools around the models, as Meta bought Conductor on the day OpenAI announced its Pierre deal.
  • AI's big buyers and sellers are tightening up: OpenAI points to enterprise revenue and a 2027 listing, while Apple reportedly rations staff token budgets.

Source coverage & colophon

Collection engine

Version
3.31.0
Ran this edition
yes
Engine look-back
2 days

Source status

reddit
ok, partial (17 threads; 6 subreddit requests blocked with HTTP 403)
youtube
ok (4 videos; transcripts for 4 of 4)
hackernews
ok (15 stories)
github
ok (20 items)
devto
ok (12 articles; tags ai and llm)
polymarket
not used: blocked in France (ANJ)
x
not searched (no consent-free source configured)

Coverage notes

  • The window runs from yesterday afternoon's 16:09 CET edition to this edition. Dispatches with only a date carry the date of their primary source or first report; all are dated 4 November, US time.
  • The installed last30days engine finished in 45 seconds with 68 evidence items from Reddit, Hacker News, GitHub, dev.to and YouTube. Its strongest new cluster was the Hacker News thread on Conductor joining Meta; its top YouTube items were commentary videos, and its top Reddit thread was a discussion of AI-built clones of software services. Stories were found with Google News RSS, publisher feeds, web searches before and after the engine run and the primary pages. Item counts are not counts of verified developments.
  • The community quotes come from the engine's relevance-qualified Hacker News comments. They are anecdotal reactions, not evidence for the facts reported.
  • Polymarket not used: blocked in France (ANJ). X was not searched. Reddit returned results, but six of its subreddit requests were blocked (HTTP 403), so Reddit coverage was partial. Missing coverage does not mean nobody discussed these stories.
  • Axios' Conductor report returned HTTP 403 and was read live through the fetch ladder's Chrome-like TLS route. Reuters.com returned HTTP 401, so the Brockman and Pentagon reports were read in syndicated copies on The Star and Yahoo Finance. Bloomberg's Apple report is paywalled and was not read. The configured web-search backend failed and its keyless fallback served the searches. VentureBeat returned HTTP 429, Anthropic's news feed HTTP 404 and Google DeepMind's feed could not be parsed.
  • Not carried: Moonshot's Kimi K3.1 Pro weights (on Hugging Face since 2 November by its repository metadata, before this window), Ricursive's Ripple-65B Preview (its primary report could not be read: HTTP 429 and 404), the hearing in music publishers' case against Anthropic (reports of the outcome differ), Cat Wu's move from Anthropic to OpenAI, and Google's school Search controls and Anthropic's FlashProve (both covered on 3 November).
  • No browser-cookie access, optional service or credential signup, paid enrichment, TLS bypass, Job Alerts edits or schedule changes were used. Research logs and full provenance remain private.

Engine footer