Google Project Zero

RAVEN: Retrieval-Augmented Vulnerability Exploration Network for Memory Corruption Analysis in User Code and Binary Programs

arXiv:2604.17948v2 Announce Type: replace Abstract: Large Language Models (LLMs) have demonstrated remarkable capabilities across various cybersecurity tasks, including vulnerability classification, detection, and patching. However, their potential in automated vulnerability report documentation and analysis remains underexplored. We present RAVEN (Retrieval Augmented Vulnerability Exploration Network), a framework leveraging LLM agents and Retrieval Augmented Generation (RAG) to synthesize...

Anyone can build a platform now. Almost nobody can get people to find it

I want to start this post with an admission that's a little uncomfortable, which is that the platform I built specifically to help other people solve their distribution problem is itself struggling with exactly the same distribution problem I built it to solve. ClaudeFolio is live, the submissions feature works, the upvoting works, the design is clean, and the rules are exactly the rules I wanted them to be. The only thing missing is the part where lots of people know it exists.

Anthropic spins a Fable of a tamer, safer Mythos

Anthropic's Mythos model, supposedly too dangerous for public release in April, is now available to wreak havoc or tackle other tasks for a hefty price and with some new guardrails in place. Just make sure you don't mind having Anthropic keep some of your data for a while. The AI biz on Tuesday announced public availability of Claude Fable 5, a Mythos-class model, and private availability of Claude Mythos 5 for Glasswing partners.

AI Is Slowing Down

If you liked this piece, you should subscribe to my premium newsletter. It’s $70 a year, or $7 a month, and in return you get a weekly newsletter that’s usually anywhere from 5,000 to 18,000 words, including vast, detailed analyses of NVIDIA, Anthropic and OpenAI’s finances, and the AI bubble writ large (updated to version 3.0 last week). My Hater's Guides To the SaaSpocalypse, Private Credit and Private Equity are essential to understanding our current financial system, and my guide to how...

Google has seriously leaned into AI enshittification lately

Silurus/ooxml: Pixel-faithful Office documents, rendered in the browser

This entire codebase — Rust parsers, TypeScript renderers, tests, and tooling — was implemented by Claude (Anthropic's AI assistant) through iterative prompting. No human-written application code exists in this repository. A browser-based viewer for Office Open XML documents that renders to an HTML Canvas element.

Microsoft's new quantum chip is 1,000 times more reliable than its predecessor — but why is this new chip so controversial?

Microsoft's new quantum chip is 1,000 times more reliable than its predecessor — but why is this new chip so controversial? The Majorana 2 quantum processor is built from topological qubits, and its creators claim it can sustain quantum coherence for an average of 20 seconds — orders of magnitude longer than the milliseconds that conventional chips last. Microsoft has revealed a new quantum computing chip with quantum bits (qubits) it says are capable of maintaining their quantum state for...

1-Bit Bonsai Image 4B Image Generation for Local Devices

Introducing 1-bit and Ternary Bonsai Image 4B: Image Generation for Local Devices Today we’re releasing Bonsai Image 4B, a family of compact image-generation models designed to run high-quality diffusion inference on local hardware: from laptops to phones. Bonsai Image 4B comes in two variants: - 1-bit Bonsai Image 4B uses binary {−1, +1} transformer weights with an FP16 group-wise scaling factor, giving 1.125 effective bits per weight. It targets maximum compression and is the right fit...

Ask HN: What are tools you have made for yourself since the advent of AI?

I've made a number of ceramic molds for slumping fused glass into bowls. As well as wooden templates for ceramic mugs. I've devised a few carrying tools to move glass frit paintings from my studio down to my barn where the kilns sit without spilling the glass.

How we run untrusted customer code at scale

Nango is a code-first platform for building product API integrations. Customers connect their apps to Salesforce, Google Calendar, Slack, and a few hundred other APIs. Much of the code behind those integrations is written by our customers and deployed to us.