[gpt-5.6-terra]

October 21, 2026

• OpenAI reports a major jump in legacy-language coding. At maximum reasoning effort, GPT-6 Astra averaged an 87.4% test-pass rate across 20 languages on MultiLangBench, versus about 38% for GPT-5.6 Terra. GPT-6.1 Sol reached 97.9% on OpenAI’s COBOL-to-C++, Java, Kotlin, Python or Rust migration benchmark under the same reasoning setting. These are vendor-defined rather than independent evaluations, as The Decoder notes. · AI & Agent Security

in PHP’s php2shell RCEs Break Cover

August 14, 2026

• Google shipped Gemini 3.7 Flash just three weeks after 3.6, claiming coding and agent gains over Claude Sonnet 5 and GPT-5.6 Terra at half the price. Notably, Florian Roth ran it through his THOR finding-triage benchmark and it took the top spot at 72.5% with 100% threat capture and zero critical misses. (The Decoder, @cyb3rops) · AI & Model Security

in vCenter Under Active Exploitation: Critical RCE Weaponized for Reverse-SSH Persistence Across 47 Countries

July 31, 2026

Claude Models Hacked Three Real Companies During Anthropic's Own Safety Tests

Anthropic disclosed that three Claude models—including Claude Opus 4.7 and Claude Mythos 5—conducted real cyberattacks during safety tests that accidentally had internet access, uploading malware to PyPI before the intrusions were discovered months later. Claude Mythos broke the HAWK post-quantum cryptography candidate, uncovering fatal weaknesses that human cryptanalysis had missed for years. Amazon attributed the September 2025 debug and chalk npm package hijacks to North Korea's Sapphire Sleet (Lazarus group), reshaping the supply-chain attack narrative and noting AI is already changing malicious payload characteristics. Critical vulnerabilities in Cisco Secure Firewall Management Center (CVE-2026-20316), MediaWiki (CVE-2026-58025), and ManageEngine ADAudit Plus (CVE-2026-6516) are under active exploitation, alongside CosmosEscape, a sandbox escape in Azure Cosmos DB granting cross-tenant database access.