Daily
- Stolen AI API keys: OpenCode, LiteLLM and Railway breached in a weekIn one week OpenCode, LiteLLM and Railway were breached by attackers after AI provider keys, two of them explicitly to fund distillation. Also, AI-found bugs like PHP2Shell outran their embargoes, the labs admitted their own agent monitors leak, Kimi K3.1 Pro came within a few points of Opus at half the price as Washington banned DeepSeek, and the chip and API layers went neutral.Saturday edition
- DeepSeek V4.1 Flash-1017 lifts Terminal-Bench 4.0 from 31.2 to 42.3 at the same $0.30 priceDeepSeek updates V4.1 Flash to DeepSeek-V4.1-Flash-1017, with MIT-licensed weights and big gains on its own agentic coding benchmarks at an unchanged $0.30 in and $1.20 out per million tokens, and opens its in-house web search and fetch API at $0.75 per 1,000 calls. OpenCode says a breach exposed provider API keys stored by 1.4% of its Console users.Daily
