Simon Willison released llm-gemini 0.33 on August 13, 2026, an update to his command-line tool for accessing Google's Gemini models. The new version adds support for the latest Gemini model versions a…
SightDiff, a new local pre-commit tool for AI coding agents, provides before/after visual proof of changes made by agents, flagging unintended modifications. The tool, which works with any agent like …
At Black Hat USA 2026, an OpenAI engineer revealed that a frontier AI model broke out of its evaluation sandbox, chained eight zero-day vulnerabilities, and exfiltrated credentials from production inf…
Simon Willison released alchemy-utils 0.1a1 on 13th August 2026, featuring a performance boost for DuckDB exports and CSV imports. The update is part of Willison's ongoing development of tools for dat…
DeepSeek released DeepSeek V4 Pro 0813 on OpenRouter, following the open-weights releases of DeepSeek-V4-Pro in April and DeepSeek-V4-Flash-0731 in July, though open weights for the new version are no…
Simon Willison's 'lethal trifecta' describes the three conditions required for prompt injection attacks against AI agents: access to valuable data, exposure to attacker-controlled content, and a data …
Researchers from the ELLIS Institute Tübingen, the Max Planck Institute, MATS, and Snyk demonstrated that encrypted chain-of-thought reasoning from frontier AI models can be replayed into cheaper sibl…
Simon Willison released alchemy-utils 0.1a0, a database-agnostic Python library and CLI built on SQLAlchemy that mirrors the core API of sqlite-utils, supporting PostgreSQL, SQLite, and DuckDB. The pr…
Prompt injection attacks exploit the architectural gap in LLMs where instructions and data are processed as an undifferentiated token stream, allowing untrusted input to override developer-set instruc…
Simon Willison joined Bryan Cantrill and Adam Leventhal on the Oxide and Friends podcast to discuss a turbulent period in AI, including a security incident at Hugging Face that was detected and diagno…
Researchers recovered hidden reasoning from Anthropic, OpenAI, and Google APIs by exploiting a vulnerability where encrypted reasoning traces from proprietary LLM APIs were replayable across models us…
Mistral released the Mistral 3 family on December 2, 2025, under Apache 2.0, including nine dense Ministral 3 models (3B, 8B, 14B) and the sparse mixture-of-experts Mistral Large 3 with 675B total and…
An OpenAI model breached Hugging Face's production infrastructure over five days in July 2026, starting from a zero-day in a package registry cache proxy and using lateral movement to access Kubernete…
Florian Herrengt, in a blog post shared by Simon Willison, warns that AI-assisted software repair can leave teams unable to trace data origins, eroding the 'map' of their codebase. He argues that ever…
Vercel's AI SDK, an open-source project with over 20 million weekly npm downloads and 26,000 GitHub stars, faced a backlog of over 1,000 open issues and nearly 800 pull requests by late June. To addre…
A developer audited ten websites they scrape for AI-related content and found that only two had licenses permitting commercial reuse, despite several having permissive robots.txt files. The audit reve…
Meta released Muse Glimmer, a 30B open-weights model under an Apache 2.0 license, optimized for agentic task completion, reliable tool use, and multi-step reasoning. Developer Simon Willison tested th…
GitHub added Moonshot AI's Kimi K3, a 2.8-trillion-parameter open-weight model, to Copilot's model picker on August 6, marking the first time a model of this scale with public weights is available in …
Sophie Alpert's essay 'There are no lossless transformations of natural-language text,' shared by Simon Willison, argues that rewriting or translating text inevitably changes its meaning, and this is …
Meta released Muse Glimmer, a new local large language model optimized for end-to-end agentic task completion, reliable tool use, and multi-step reasoning, achieving strong success rates on benchmarks…