AI Coding Live News

OpenAI announced a critical coordinated vulnerability disclosure in the core PHP runtime discovered by cybersecurity firm Calif utilizing GPT-5.6 Sol, alongside independent verification by Wiz. Because PHP powers roughly 70% of all websites globally, the vulnerability represented an existential risk to internet infrastructure. Following coordinated patching, OpenAI committed $1B in subsidized Daybreak security access and open-sourced openai/php2shell-checker, an automated Codex inspection tool enabling site administrators worldwide to audit their deployments.

Zoom

On Oct 21, PHP published a security advisory fixing two critical unauthenticated remote code execution flaws (CVE-2026-109618, CVE-2026-109619) affecting every PHP install serving web requests, with mod_php at highest risk. OpenAI disclosed the same day that Calif found a flaw using GPT-5.6 Sol under its Patch the Planet initiative, with Wiz independently finding and reporting both; OpenAI coordinated a two-month disclosure and committed $1B in subsidized Daybreak access for under-resourced defenders.

Zoom

On October 19 OpenAI said its latest models are much better at low-resource languages such as COBOL, Fortran, Visual Basic and OCaml, and open-sourced MultiLangBench, which asks a model to build a SQLite-compatible database engine from scratch in each of 20 languages. GPT-6 Astra averages an 87.4% test pass rate (GPT-5.6 Sol: 26.8%), above 83% in 19 of 20 languages, with COBOL hardest at 72.1%. On a separate COBOL migration eval requiring byte-for-byte output parity after porting to C++, Java, Kotlin, Python or Rust, GPT-6.1 Sol scores 86.6% at low effort (GPT-5.6 Sol: 5.4%) and 97.9% at higher effort. All figures are OpenAI's own.

Zoom

Can LLMs reliably maintain spatial state representations across sequential operations? USC, UCLA, and CMU introduced Grid-Bench (arXiv:2610.22312, GitHub: grid-bench/Grid-Bench), an executable benchmark with 8,928 instances testing 2D/3D/4D grid state transitions across history lengths up to T=64. Evaluations across 6 frontier models show steep degradation: while GPT-5.6 Sol and Claude 5 Sonnet retain strong cell accuracy, open-weight and mid-tier models collapse to near-zero exact world reconstruction over long trajectories.

Zoom

While reinforcement learning from unit tests raises code pass rates, researchers discover it inadvertently teaches models to over-edit and hallucinate bugs in already-correct code. PreciseCoder augments unit-test rewards with a semantically verified localized edit signal. Across 4B, 9B, and 27B models, PreciseCoder slashes average edit lines from 7–15 down to 3 at equal pass rates, generalizes from single-line training to repository-level repair, and transfers 9B reasoning traces to boost GPT-5.6 Sol and Qwen3.8-Max edit precision by 4.6–12.4 points without retraining.

Zoom

Theo (T3) open-sourced ts-rust (npm: tsc-rs), a Rust port of Microsoft's Go-native TypeScript compiler, checker and language server. Months of GPT-5.6 Sol / GPT 6 Astra runs cost over $400K in API-priced tokens and stalled near 84% compatibility; Claude Opus 5.5 restarted from scratch, reached a working v0 in 10 hours and finished in two weeks for about $24,047. All 181,711 ported Go tests pass, it type-checks 1.61x faster than tsc 7 (geometric mean over six open-source apps), ships Effect diagnostics built in and has a WASM build.

Zoom

OpenAI's first vertical-SaaS computer-use collaboration: with Ironclad it defined 11 legal, procurement and commercial tasks, let models practice in hosted Ironclad environments, and used RL on synthetic tasks. GPT-6 Astra scores 55.0% mean rubric vs 41.6% for GPT-5.6 Sol, with estimated time per attempt down from 37.0 to 19.2 minutes; an internal model reaches 63.7%. OpenAI is inviting more software companies to partner.

Zoom

While general-purpose agents exhibit strong long-horizon reasoning, enterprise workflows require manipulating seven distinct artifact modalities: text, images, audio, video, structured documents, 3D meshes, and code. Pretraining native omni-foundation models from scratch is economically prohibitive, while haphazard multi-tool integration triggers state desynchronization and intermediate asset sprawl across turns. Researchers from the National University of Singapore (NUS) and S-Lab introduce Omni-IO Skills (arXiv:2609.31847, ~300 upvotes on Hugging Face). As a modular agent harness, it organizes multimodal operations into Declarative Execution Graphs paired with a persistent Asset Registry, orchestrating 27 hierarchical skills across 38 tasks. Evaluated on UniM-90, the harness elevates input-support rates for GPT-5.6 Sol and Claude Sonnet 5 from ~40% to 100%, and lifts semantic quality scores from ~27 to over 77.

Zoom

Terminal agents operate through stochastic model generations, but a single errant command can irreversibly degrade sandbox environments. Mid-Harness introduces test-time compute scaling at the boundary between model and harness. By sampling and verifying candidate actions before terminal dispatch without modifying the underlying generator or harness, Mid-Harness boosts Pass@1 on TerminalBench-Lite from 50.00% to 68.03% under a GPT-5.6 Sol verifier, outperforming whole-trajectory scaling at lower token expenditure.

Zoom

While general-purpose LLM agents exhibit strong long-horizon reasoning, their production utility remains heavily fragmented across seven heterogeneous artifact modalities: text, images, audio, video, documents, 3D assets, and code. Training unified native omni-modal foundation models incurs prohibitive compute, while naive tool chaining fails to coordinate asset dependencies and multi-turn revisions. Researchers from the National University of Singapore (NUS) introduce Omni-IO Skills, a plug-and-play agent harness transforming existing text/vision LLMs into omni-native agents. Using hierarchical skill abstractions, standardized I/O interfaces, a persistent Asset Registry, and Declare Execution Graphs, Omni-IO coordinates complex multi-asset workflows concurrently. Evaluated on the UniM-90 multimodal benchmark, Omni-IO boosts input-support rates for frontier models from ~40% to 100%, and nearly triples semantic quality coupling scores without modifying foundational model weights.

Zoom