독서

Researchers from Purdue University and the University of Illinois Urbana-Champaign have found that when Large Language Models (LLMs) are deployed as automated code vulnerability detectors, their judgments are significantly influenced by non-code context, including author prestige, task description framing, and prior analysis results. This cognitive bias can lead to contradictory security verdicts on identical code.

The study presents the first systematic exploration of cognitive heuristics in LLM-driven security detection. Through controlled experiments evaluating eight mainstream LLMs across three programming languages, the team demonstrated that all tested models were susceptible. The 'framing effect' (how task objectives or consequences are described) had the highest impact, with a cross-model average susceptibility of 33.2%. This was followed by the 'anchoring effect' (influence of prior results) at 23.5%, and the 'halo effect' (influence of author identity) at 18.4%.

To highlight practical implications, the team demonstrated a proof-of-concept black-box cognitive attack. By forging commit metadata and fabricating prior scan results, the attack suppressed up to 97% of previously detected vulnerabilities in a simulated CI/CD pipeline. This suggests that enterprises relying on LLMs as security gatekeepers face significant blind spots if they do not isolate these non-code signals.

The paper has been accepted at IEEE Symposium on Security and Privacy (S&P) 2027. It is currently a preprint (version 2 updated October 15, 2026). The data reflects author-run benchmarks, and independent third-party reproduction has not yet been reported.

According to TechCrunch, new data from Vercel’s AI gateway shows that Jev, a “decision model” developed by TypeSafe AI, has become the fastest-adopted AI model on the platform. Within two weeks of its limited release on September 15, Jev was being used by 35% of Vercel’s paid teams, with nearly double the reach of the second most popular model, Sonnet 5.5.

Unlike general-purpose large language models, Jev is designed as a lightweight tool for choosing between predetermined outputs. This architecture allows it to run cheaper and faster than alternatives like Sonnet when classifying large quantities of data. Vercel itself was an early adopter, using Jev to replace GPT-6 Luna for classifying harmful commands. The trend has already inspired competing offerings from OpenAI and Amazon.

The report also highlights continuing momentum for open-source models, which now account for more than 70% of the tokens processed through Vercel’s gateway and nearly 25% of total spend. While spending on frontier labs has grown tenfold, their share of overall spend is decreasing, suggesting that frontier models and open-source alternatives may be complementary rather than competitive. Note that these figures reflect only usage via Vercel’s unified API service and may undercount direct API calls to major labs like OpenAI or Anthropic.

Reflection AI released the weights for Beam, its first open-source model, on October 16, 2026, under the Apache 2.0 license. The model features 501 billion total parameters and 23 billion active parameters, targeting coding, reasoning, and long-horizon agentic tasks.

Unlike models that prioritize maximum capability, Reflection AI positions Beam as an efficiency-focused alternative. The company states it used large-scale reinforcement learning during training, applying a penalty whenever the model generated unnecessary tokens. According to VentureBeat, Reflection AI CTO Ioannis Antonoglou explained that this mechanism forces the model to solve tasks while remaining concise, thereby reducing the number of tokens required to finish each job.

This strategy aims to compete with Chinese open models like DeepSeek on cost. While Beam's absolute performance on benchmarks such as Terminal-Bench 2.1 does not yet surpass top Chinese models, Reflection AI argues that enterprises care more about the total cost of completing a task (price per token multiplied by tokens used) than just the per-token price or peak capability.

Beam's weights are now available on Hugging Face in BF16, FP8, and NVFP4 formats, with day-zero support from major inference frameworks including vLLM, SGLang, and Ollama.

Vinci4D Inc., an AI-driven chip design simulation company, has announced the completion of a $250 million Series B funding round at a $1.5 billion valuation. The round was co-led by Advent International, Temasek, and Xora.

Vinci4D provides simulation software that uses pretrained physics models to accelerate multi-physics analysis, offering an alternative to traditional finite element analysis (FEA). The company stated that the new capital will be used to expand its go-to-market team and technology reach, with plans to extend its business beyond semiconductors into broader hardware industries including automotive and aerospace.

Frontier AI models excel at generating hypotheses and designing molecules in silico, but they struggle to reason reliably about three-dimensional geometry and physical state. This gap creates a bottleneck in biology research: while agents can propose thousands of candidate sequences, validating them requires repeated cycles of real-world wet-lab experiments. Google Research has developed a set of building blocks to bridge this divide, enabling AI agents to navigate complex biological landscapes by grounding their reasoning in physical lab robotics.

The core innovation is VERID (VERified Infrastructure for Discovery Laboratories), a semantic digital twin of the laboratory workcell. VERID tracks everything from robotic arm geometry to individual well volumes and reagent identities in real time. Before an agent sends a command to a liquid-handling robot, it simulates the action within this digital twin. This prevents physically impossible actions, such as lowering a pipette into a trough that is too short, or logistically invalid ones, like aspirating from a depleted well. The system provides live 3D state tracking, fast virtual dry runs, hardware safety checks, and synchronized video logs, allowing agents to refine experiments across multiple cycles without wasting reagents or damaging equipment.

With this safety infrastructure in place, researchers demonstrated closed-loop agentic scientific discovery using DNA aptamers. Aptamers are single-stranded DNA molecules that bind to specific target proteins. In a series of three design-test-iteration cycles targeting myoglobin and α-thrombin, AI agents designed candidate sequences, which were screened on magnetic beads and sequenced to return quantitative data. The agents learned from the wet-lab readouts to overcome failure modes. For example, when initial designs for myoglobin resulted in non-specific "sticky" binders due to G-quadruplex motifs, the agents autonomously revised their design rules in the next round, capping promiscuous motifs and pivoting to different structural scaffolds. This adaptive process raised confirmed on-target hit rates to 33.5% for myoglobin and 42.1% for α-thrombin.

The team also applied this workflow to de novo protein binder design, a more complex task because proteins must be biologically expressed rather than chemically synthesized. Using fibroblast activation protein alpha (FAP) as a target, they introduced a technique called surgical epitope excision. By computationally removing just the local binding pocket during folding simulations, they accelerated structure prediction by 8.6 times. This allowed a human-agent hybrid pipeline to nearly double the in-silico hit rate compared to a scientist working alone. The resulting designs yielded binders with single-digit nanomolar affinity, a level of tightness typically achieved only after extensive rounds of laboratory optimization.

These efforts highlight a shift toward human-directed autonomous discovery. While the current systems operate on well-controlled, non-infectious testbeds with strict biosecurity screening and human oversight, they demonstrate that AI agents can effectively learn from experimental noise and physical constraints. By combining VERID’s traceable automation with closed-loop learning, Google Research is laying the groundwork for agents to directly navigate rugged biological search spaces, potentially accelerating the pace of molecular discovery in the life sciences.

Cybersecurity firm Cheq, which verifies AI shopping agents, reported a 100x surge in agentic traffic over a 45-day period following the release of consumer AI agents such as Instinct and Meta’s Muse. While the absolute baseline remains undisclosed and the data is vendor-self-reported, Cheq CEO Guy Tytunovich noted that this traffic is growing rapidly amid a steady stream of new agent releases.

However, not all platforms are welcoming these agents. Amazon and eBay have reportedly blocked them to reinforce control over their advertising businesses and checkout experiences. Meanwhile, consumers remain hesitant: Morning Consult finds that while shoppers are increasingly swayed by agent recommendations, few are comfortable letting AI make purchases on their behalf. This holiday season serves as the first true test of how brands can display products in ways that appeal to AI agents.

NVIDIA researchers have published an open recipe for "midtraining" on arXiv, addressing the data gap between pretraining and post-training (specifically Supervised Fine-Tuning or SFT) in frontier models. The study notes that pretraining typically uses short contexts with little agent interaction, while SFT relies mostly on synthetic data and can harm later RL trainability if too long. Midtraining fills this gap by training at 256K context length on a mixture of natural software-engineering data (repositories, PRs, commit histories) and a small share of agentic traces.

According to the paper's abstract, on the Nemotron 3.5 Lightning model, 500 billion midtraining tokens improved the SWE-bench Verified score from 60.7 to 64.5, and SWE-bench Multilingual from 55.8 to 62.8. On the larger Nemotron 3.5 Super, 280 billion tokens improved DeepSWE from 11.7 to 15.7. These results were achieved after identical full SFT runs.

The authors also report an evaluation protocol based on short fixed SFT runs, noting that base-model proxy metrics did not reliably correlate with post-training results. These are first-party benchmark claims by NVIDIA and have not yet been independently reproduced; the findings are specific to the Nemotron model family.

Researchers from Princeton University and Microsoft Research have introduced AbridgeKV, a method for compressing the KV cache during long chain-of-thought (CoT) generation. Instead of relying on traditional cache eviction strategies, AbridgeKV trains the model to compress each block of generated text into the KV entries of a few "learned pause tokens." These are extra input tokens with trained embeddings that produce no output but encode the information of the preceding block. Once encoded, the original block's cache is freed, and subsequent tokens attend to the pause tokens' KV entries instead.

In tests involving 446 competition math problems (from AIME, HMMT, etc.) with a 32K-token generation limit, AbridgeKV matched the accuracy and output length of an identically trained full-KV model while keeping only a quarter of the generated cache. In contrast, the strongest published evictor resulted in significantly longer generations at the same budget, and the closest trained compressor, LightThinker, lost 10 points in accuracy.

Regarding deployment, the study reports that served in the vLLM engine, AbridgeKV reduced the cache size per sequence by 3.5 times and achieved a 3.2 times faster completion time per problem on a saturated H100 GPU compared to full KV. These results are based on fine-tuning the Qwen3-4B-Base model on the OpenMathReasoning dataset and represent first-party benchmarks, with no independent reproduction reported yet.

The arXiv preprint "System1-Arena: Which Decisions Can Be Left to System 1?" introduces System1-Arena, a new benchmark designed to evaluate large language models (LLMs) on discrete decision tasks and distinguish which decisions can be handled by System-1 models returning probabilities versus System-2 methods generating reasoning steps. The benchmark contains 92k questions from 268 public sources across four categories: text classification, applied decisions, evaluation/control, and agent/action, plus 138 closed-loop environments.

The team evaluated 30 models, including 7 closed LLMs, 13 open LLMs, and 10 System-1 models. Results show that the largest System-1 models match or exceed fast closed LLMs in non-agentic accuracy, with better-calibrated probabilities at one-quarter of the latency. In contrast, reasoning LLMs are the most accurate but cost about 70x more than fast LLMs. In closed loops, large open LLMs succeed most often (up to 32.9%), while small System-1 models rarely succeed.

A research team from KAIST (Yumin Choi et al.) updated their paper "PREPING: Zero-Task Agent Memory Construction via Self-Practice" on October 14, 2026, proposing a framework to build procedural memory for LLM agents without observing target-environment tasks. The study addresses the "cold-start" problem where agents lack task-specific experience upon entering new environments.

The core mechanism of Preping is "proposer-guided memory construction." It uses a structured control state (proposer memory) to guide the generation, execution, and validation of synthetic tasks, filtering out redundant and infeasible trajectories. Experiments show that this method achieves performance competitive with strong baseline methods relying on offline or online experience across AppWorld, BFCL v3, and MCP-Universe benchmarks.

Key metrics come from author-run tests: On AppWorld, Preping's deployment cost is 2.99x lower than online memory construction methods; on BFCL v3, it is 2.23x lower. This cost advantage stems primarily from active control over feasibility, redundancy, and coverage, rather than simply increasing synthetic data volume. Results have not yet been independently reproduced and represent first-party benchmark data from a preprint stage.

A new benchmark called GUISE demonstrates that merely changing the framing of a prompt can significantly weaken Large Language Model (LLM) safety defenses in real-world criminal scenarios. Proposed by Mohsinul Kabir et al., the study's core finding is that when users ask for 'correction' rather than making direct requests, the mean unsafe compliance rate spikes from 28.9% to 66.4%, peaking at 97.3%.

Existing safety benchmarks largely rely on synthetic prompts with loosely grounded taxonomies, lacking focused analysis of severe crime categories. GUISE addresses this gap by building criminal-assistance scenarios sourced from real-world cases, organized under the UNODC International Classification of Crime for Statistical Purposes (ICCS). Each scenario is rendered under three linguistic framings and evaluated across five distinct cultures.

Beyond framing effects, the research finds that culturally adapted prompts elicit significantly more unsafe compliance than literal translations of the same requests, exceeding them by 7 to 18 points across all four non-English languages. This is a risk missed by traditional translation-based benchmarks. Additionally, unsafe responses from the least-safe models carry strong Anglocentric registers, with leakage increasing monotonically with response harmfulness.

The paper is currently under review, and the authors have published their code and data to facilitate future research. As a preprint, its results have not yet been independently reproduced, but it offers fine-grained diagnostics for strengthening refusal alignment across languages and cultures.