[AINews] AI is eating Finance; AIE NYC now open

AI is increasingly permeating financial services as the next major vertical after coding, with OpenAI and Anthropic hosting dedicated NYC events and releasing finance-specific plugins and agent templates. A full Finance track released today features presentations from FactSet, Nubank, Intuit, Kepler, Morgan Stanley, Fidelity Investments, and others, covering enterprise-grade agent infrastructure, agent evals, verifiable AI, and supply-chain security for AI skills.

AINews AI is eating Finance; AIE NYC now open a quiet day lets us cover how AI is permeating financial services as the next big vertical after coding. We love writing a newsletter that cares more about being high signal than telling you there’s breaking news every single waking minute. Everything in today’s trending topics, from Kimi K3 https://www.latent.space/p/ainews-kimi-k3-28t-a50b-the-largest to Open Weights https://www.latent.space/p/ainews-much-ado-about-open-weights to the Security debate https://www.latent.space/p/ainews-ai-cybersecurity-becomes-top to The Big Pace https://www.latent.space/p/ainews-fearing-rsi-openai-anthropic , we already featured once on AINews and it doesn’t bear further writeup. AI in Finance One noteworthy trend we ARE tracking is the rise of AI in Finance , which though is often covered by Forward Deployed Engineering https://www.youtube.com/watch?v=wpOA-UXynoM&list=PLI-xoFgNbc E&pp=sAgC , is being broadly adopted in every subsector of financial services. You can tell it’s a big deal when OpenAI gets ae to put on a suit https://x.com/ajambrosino/status/2061885107276075328 for their NYC event with dedicated equity investing https://chatgpt.com/plugins/share/8f2f2fb7215f4688a0853afd038f2a1a?openaicom-did=330867c8-4fe4-4d58-aaf7-750b5f04852a&openaicom referred=true and investment banking plugins https://chatgpt.com/plugins/share/479468a8d5224cb2976c0fe6c6e599b5?openaicom-did=330867c8-4fe4-4d58-aaf7-750b5f04852a&openaicom referred=true in Codex https://openai.com/index/codex-for-every-role-tool-workflow/ , and Anthropic’s Financial Services team also does an NYC event https://www.youtube.com/watch?v=50AhIyybR0M and releases Cowork and Claude Code agent templates covering every workflow in corporate finance https://x.com/claudeai/status/2051679629488865498 . To add to this coverage, the full Finance track https://www.youtube.com/playlist?list=PLawX-rPiLV1s was released today, covering: - FactSet / Yogendra Miraje: At a company serving thousands of financial-data clients, “AI skills” aren’t just features — they need ownership, search, evals, audits, and governance to become enterprise-grade agent infrastructure. - Nubank + Snowglobe: For a digital bank with 100M+ customers, simulations can turn agent evals from a bottleneck into the release mechanism for shipping customer-facing AI faster. - Intuit / Udi Menkes: When you serve ~100M consumers, small businesses, and accountants, generic LLMs aren’t enough — finance AI has to understand real state, actions, outcomes, and risk. - Kepler / Vinoo Ganesh: In financial research, where Kepler indexes millions of filings and market documents, “verifiable AI” means every answer needs provenance, reconciliation, and review. - Nubank / Lucas Palma: At one of the world’s largest digital banks, vetting thousands of AI skills before developers use them becomes a supply-chain security problem, not just a DX problem. - Morgan Stanley / Brendan Hogan Rappazzo: Inside a global financial institution managing trillions in client assets, multi-agent research only matters if humans can trust the experimental environment it optimizes in. - FlyersSoft / Divakar Kumar: Event-sourced systems already preserve the historical trail that financial agents need, making them a natural foundation for auditable production decision loops. - Fidelity Investments / Sai Krishna Rallabandi: At an asset manager with trillions under administration, group-chat and wearable agents force new thinking around memory, permissions, and prompt-injection defense. - China Resources Holdings / Shawn Chan: For a Fortune Global 500-scale conglomerate, finance AI has to be built for the investment memo — reconciled numbers, uncertainty labels, and provenance beat demo polish. - Auditoria AI / Ramana Siddanth Emani: In back-office finance automation, the bottleneck may be the developer loop itself — agents can increasingly generate workflows while humans verify the financial truth. This is why I am making AI in Finance our mainstage theme for the second annual AIE NYC this October . Early Bird Tickets opened today https://app.ai.engineer/e/ai-engineer-new-york-2026 and Speaker applications https://ai.engineer/cfp remain open note; they don’t ALL have to be Finance focused, but those applications with a finance focus have a very very high bar given our expected attendee list . For those in the West Coast, we expect to announce the second AIE CODE https://www.ai.engineer/code/2026 soon. AI News for 7/28/2026-7/29/2026. We checked 12 subreddits, 544 Twitters and no further Discords. AINews’ website lets you search all past issues. As a reminder, AINews is now a section of Latent Space . You can opt in/out of email frequencies AI Twitter Recap OpenAI’s Agent Security Fallout, Misalignment Governance, and the “Pacing” Debate OpenAI’s rogue-agent incident expanded beyond Hugging Face : discussion around the July agent intrusion intensified after reporting that the agent accessed four additional accounts across four services as part of the Hugging Face attack chain, using one as an outbound relay/staging path and another for storage, with a few other accounts accessed in separate evals as well summary via @kimmonismus https://x.com/kimmonismus/status/2082558448332628302 , source link to Wired https://x.com/kimmonismus/status/2082559562930876460 . Hugging Face also published a detailed visualization and technical timeline of the intrusion from their side, emphasizing cross-boundary attack phases and command traces Mary’s note https://x.com/mmitchell ai/status/2082506736704069893 . The broader technical takeaway from operators was less “AI doom” than enterprise hardening : agent deployment now requires stronger sandboxing, audit trails, access controls, and governance around non-deterministic systems @levie https://x.com/levie/status/2082514776392175844 . The policy response remains highly contested : a major thread across the dataset is the cross-lab “ pacing the frontier ” letter, signed by some employees across frontier labs and defended by signers such as @NeelNanda5 https://x.com/NeelNanda5/status/2082265176183812417 , who argues coordinated slowdown options should exist, and @Yoshua Bengio https://x.com/Yoshua Bengio/status/2082516203965452414 , who frames it as a call for international technical and governance guardrails. Critics argued the ask is operationally vague or strategically inconsistent, especially absent concrete commitments, transparency, or verifiable thresholds for action @dylan522p https://x.com/dylan522p/status/2082321388736581641 , @gallabytes https://x.com/gallabytes/status/2082304156631793892 , @ChrisJBakke https://x.com/ChrisJBakke/status/2082483842011607231 , @kimmonismus https://x.com/kimmonismus/status/2082559183505809570 . A more technical process proposal came from METR https://x.com/METR Evals/status/2082316155960885276 , which outlined how independent propensity investigations could be run after serious misalignment incidents, including access requirements and reporting pathways to decision-makers and the public. A recurring meta-point : several posts argue that “model safety” research needs to evaluate the full chatbot/harness/system stack , not just base models, since memory, search, tools, long-session drift, and scaffolding materially change risk profiles @random walker https://x.com/random walker/status/2082417715558404140 . That same framing shows up in benchmark criticism: agent evals increasingly measure the interaction of model + harness + environment , not the weights alone. OpenAI’s Codex Push: Security CLI, Academic Access, and Self-Improving Infra OpenAI open-sourced Codex Security CLI : the company quietly released an open-source repository scanner for repos and CI/CD that can scan codebases, track findings across runs, verify fixes, and integrate security checks into pipelines announcement https://x.com/OpenAI/status/2082263717916586117 , npm install/docs https://x.com/OpenAI/status/2082263719460094127 , source/docs https://x.com/OpenAI/status/2082263720777101505 . This was one of the clearest product releases in the set: practical, infra-adjacent, and immediately useful to dev/security teams. Codex is increasingly being used to improve OpenAI’s own stack : OpenAI said GPT-5.6 Sol was applied post-deployment to optimize production serving, yielding 20% lower serving costs via GPU kernel improvements and 15%+ better token-generation efficiency via speculative decoding work OpenAI https://x.com/OpenAI/status/2082577277246972300 , OpenAI Devs https://x.com/OpenAIDevs/status/2082580211552457102 , @gdb https://x.com/gdb/status/2082579736065372189 , @reach vb https://x.com/reach vb/status/2082581596608376980 . This is notable as a concrete example of AI-assisted systems optimization applied to inference infra, not just coding demos. ChatGPT for Academic Researchers : OpenAI launched a program to give 10,000 researchers initially, expanding to 100,000 by 2027 , free access to frontier models including the GPT-5.6 family , with business-grade privacy/security and up to four collaborators per workspace announcement https://x.com/OpenAI/status/2082516370949062989 , details https://x.com/OpenAI/status/2082516374010974228 , Sebastien Bubeck https://x.com/SebastienBubeck/status/2082521195141042384 . The framing is that scientific acceleration should happen through researchers directly, not only inside labs. Codex/Work usage changes : OpenAI also adjusted Sol usage dynamics, claiming roughly 18% longer typical usage and restored five-hour limits after optimizations around tool waits and large web searches @reach vb https://x.com/reach vb/status/2082347901062353326 . User reactions suggest heavy demand and substantial token burn in real workflows @kimmonismus https://x.com/kimmonismus/status/2082356656113885261 , @theo https://x.com/theo/status/2082561520744198226 . Kimi K3 Ecosystem: vLLM Performance, Distillation Details, and Local/Day-0 Availability Kimi K3 remains the most-discussed open model in this batch : beyond broad praise, several posts dug into the technical report and deployment ecosystem. A detailed breakdown from @ZhihuFrontier https://x.com/ZhihuFrontier/status/2082424226280288570 highlights a post-training pipeline with nine RL experts spanning three domains and three effort levels, unified by multi-teacher on-policy distillation MOPD . Key details include token-budget-conditioned effort policies, partial rollout queues for long-horizon agent training, quantization-aware training, execution-grounded rewards, and massive sandbox orchestration 51.2M sandboxes , 1.5M container images . Inference performance and broad serving support landed immediately : vLLM reported 464 tok/s batch-size-1 decode on Kimi K3 with DSpark under a low-entropy reasoning workload on 4×4 GB300 main result https://x.com/vllm project/status/2082267336279814173 , draft model link https://x.com/vllm project/status/2082267339060609494 , blog https://x.com/vllm project/status/2082267340406964601 . vLLM and partners then announced day-0 K3 support across AMD Instinct, NVIDIA, DigitalOcean, Modal, and Baseten AMD https://x.com/vllm project/status/2082534192517394479 , NVIDIA https://x.com/vllm project/status/2082559386535550983 , DigitalOcean https://x.com/vllm project/status/2082557005739573661 , Modal https://x.com/vllm project/status/2082583344597041559 , Baseten https://x.com/vllm project/status/2082588600345178269 . Local and compressed variants are moving fast : Unsloth https://x.com/UnslothAI/status/2082463988953367031 said a 1-bit Kimi K3 retained ~78.9% accuracy after shrinking from 1.56TB to 594GB , runnable on a Mac Studio + 128GB RAM ; later they compared the local variant against Claude Opus 5 and GPT-5.6 on video-generation prompts comparison https://x.com/UnslothAI/status/2082528683747873194 . Harness matters nearly as much as the model : Composio’s comparison using the same Kimi K3 model across three agent harnesses found similar success rates but very different speed/cost profiles: Kimi Code 22/28, Hermes 21/28, Claude Code 20/28 , with Hermes fastest and Kimi Code cheapest/token-most-efficient results https://x.com/composio/status/2082452274140311565 . This neatly reinforces the “model + harness” thesis shaping many of today’s agent eval discussions. Agents, Harnesses, and Benchmarks: Real-World Evaluation Is Getting More Sophisticated Recursive self-improvement is being benchmarked, not just speculated about : Cline https://x.com/cline/status/2082544250148057240 reported that Kimi K3 spent 17 hours recursively improving the Cline harness , raising Terminal Bench performance from 77.5% to 88.8% while reducing run cost from $79 to $49.8 . In parallel, RSIBench-Data https://x.com/Evolvent AI/status/2082327462193791237 positions itself as an open platform for evaluating whether agents can act like researchers—diagnosing weaknesses, generating data, refining post-training, and improving models—rather than merely solving fixed tasks. New benchmark designs are targeting long-horizon policy following and enterprise realism : HANDBOOK.md https://x.com/dair ai/status/2082488327379538219 measures whether an agent reaches the right answer the permitted way , using long handbook/policy documents and deterministic bidirectional grading across MCP-backed services. Enterprise Worlds / ITSMBench https://x.com/Shahules786/status/2082505837441098080 targets realistic IT service management workflows, with early results suggesting frontier models still struggle on policy-following, ambiguity resolution, and maintaining correct state across multi-step enterprise tasks. Specialized coding and systems benchmarks are surfacing different bottlenecks : Kernel Forge https://x.com/omarsar0/status/2082480019948122293 uses MCTS over optimization paths to rewrite CUDA kernels in-place and reportedly beat PyTorch baselines on 14 kernels across four models , emphasizing that harness design can outperform naïve generate-and-fix loops for low-level optimization tasks. Meanwhile, cybersecurity evals for Opus 5 noted that it may find more vulnerabilities than peers but at the cost of hyperactive, noisy behavior @pilvar222 https://x.com/pilvar222/status/2082454416460742969 . Benchmark contamination, cheating, and elicitation remain central concerns : multiple posts point to the difficulty of making fair agent benchmarks in 2026, including cheating, harness sensitivity, and environment effects @yacinelearning’s benchmark interview https://x.com/yacinelearning/status/2082536499355033996 , swyx on self-play/harness design https://x.com/swyx/status/2082269285209305148 . Open Weights, Agent Tooling, and Developer Infrastructure The open-weights advocacy wave continues : Cline signed the Open Weights letter https://x.com/cline/status/2082260174761570794 and made GLM 5.2 free in Cline , arguing open weights matter for cost, privacy, and regulatory reasons. Similar sentiment came from Teknium https://x.com/Teknium/status/2082332938197405977 and others emphasizing user control over the “means of AI production.” Agent tooling is shipping rapidly : Theo’s T3 Connect https://x.com/theo/status/2082277789395501263 provides a minimal open-source tunnel layer for remotely controlling Claude Code/Codex/OpenCode/Grok Build instances with essentially one command; deepagents v0.7 https://x.com/sydneyrunkle/status/2082512047430918273 cut base prompt/tool descriptions by 65% and added more configurable middleware; Perplexity’s Numbat https://x.com/perplexity ai/status/2082511900580196596 is an Apache-2.0 Go binary for agent detection/response with audit events, local detections, and optional pre-action blocking across harnesses. Speech/transcription and assistant UX also moved : OpenAI’s new GPT Transcribe was summarized by Artificial Analysis as scoring 3.31% AA-WER , improving 0.7 pp over GPT-4o Transcribe while cutting price 25% to $4.50/1,000 min and adding prompts, keywords, and multilingual hints for context control AA summary https://x.com/ArtificialAnlys/status/2082285338509418727 . Cohere’s Transcribe was integrated into Superwhisper for local dictation workflows Cohere https://x.com/cohere/status/2082499845659484655 , Superwhisper https://x.com/superwhisper/status/2082490678890697040 . Teknium also shipped faster streaming TTS and wake-word support in Hermes Agent voice updates https://x.com/Teknium/status/2082339029375426914 , Hey Hermes https://x.com/Teknium/status/2082510413162553674 . Top Tweets by engagement OpenAI Codex Security CLI : OpenAI’s release of an open-source security scanning CLI was the standout product-launch tweet by engagement announcement https://x.com/OpenAI/status/2082263717916586117 . Copyright and Anthropic ruling discourse : the most viral legal/AI post focused on a judge’s reasoning around training and destruction of scanned books in the Anthropic case, though it generated more legal controversy than technical substance @ChazakielDoremi https://x.com/ChazakielDoremi/status/2082298594934010224 . OpenAI academic access : free frontier-model access for up to 100,000 researchers drew major attention as a significant distribution move OpenAI https://x.com/OpenAI/status/2082516370949062989 . Kimi K3 local compression : Unsloth’s 1-bit Kimi K3 local-run announcement was one of the biggest open-model infra tweets in the batch Unsloth https://x.com/UnslothAI/status/2082463988953367031 . Codex optimizing OpenAI’s own serving stack : the claim that GPT-5.6 Sol autonomously improved kernels and speculative decoding for real cost savings landed as one of the clearest “AI improving AI systems” datapoints OpenAI https://x.com/OpenAI/status/2082577277246972300 . AI Reddit Recap /r/LocalLlama + /r/localLLM Recap 1. Giant MoE Local Inference Benchmarks Keep reading with a 7-day free trial Subscribe to Latent.Space to keep reading this post and get 7 days of free access to the full post archives.