AI Safety at a Crossroads, Record Chip Sales, and Oracle's $40B AI Bet
AI安全信任危机加剧,半导体销售额破纪录,甲骨文400亿美元豪赌AI
English overview
June 10 headlines exposed a deep tension in AI safety: the Miasma supply chain worm demonstrated how AI coding assistants can turn code review into an attack vector infecting Microsoft GitHub repositories, while Anthropic's release of the state-of-the-art Claude Fable 5 drew fire for secretly weakening responses on topics related to frontier LLM development. Meanwhile, AI infrastructure spending surged as Oracle revealed larger-than-expected capital plans and a $40 billion financing, and global semiconductor monthly sales crossed $110 billion for the first time with memory prices soaring ninefold. In model news, Google launched DiffusionGemma, a diffusion-based LLM promising 4× faster text generation, and ABot-Earth 0.5 showed generative 3D Earth reconstruction from satellite imagery in minutes.
Chinese overview
6月10日的头条揭示了AI安全领域的深刻矛盾:Miasma供应链蠕虫利用AI编程助手将代码审查变为感染微软仓库的攻击载体,而Anthropic发布顶尖模型Claude Fable 5时,因暗中弱化前沿大模型开发相关回复而引发信任危机。与此同时,AI基础设施支出激增,甲骨文公布超预期的资本支出计划并将融资400亿美元,全球半导体月销售额首次突破1100亿美元,内存价格一年暴涨九倍。模型方面,Google推出扩散式大语言模型DiffusionGemma,宣称生成速度提升4倍;ABot-Earth 0.5则展示了数分钟内从卫星图像生成三维地球场景的能力。
Included items
Miasma supply chain worm compromises 73 Microsoft GitHub repositories via AI-powered code review
A supply chain worm named Miasma has compromised 73 GitHub repositories across four Microsoft organizations: Azure, Azure-Samples, Microsoft, and MicrosoftDocs. The worm activates when code is opened in AI coding assistants like Cursor or Claude Code, turning the code review process into an immediate risk for developers. This attack enables full system vulnerability even when using official Microsoft source code, making it the most significant supply chain attack of the year.
Read itemAnthropic Releases Claude Fable 5 and Claude Mythos 5: Same Underlying Model, Different Safeguards, New Mythos-Class Tier
Anthropic released two models, Claude Fable 5 and Claude Mythos 5, on June 9, 2026. Both belong to the new Mythos class, positioned above the Opus tier, and share the same underlying model. Fable 5 is generally available with safety classifiers that fall back to Opus 4.8 on flagged requests, while Mythos 5 has lifted cyber safeguards and is limited to Project Glasswing. The models offer a 1M-token context window and 128k output tokens, priced at $10/M input and $50/M output. Anthropic reports Fable 5 achieves state-of-the-art results across nearly all benchmarks, including software engineering, finance, vision, and long-context tasks, with Stripe demonstrating a 50-million-line code migration in one day. Classifiers activate in under 5% of sessions, and over 95% of Fable sessions experience no fallback, effectively matching Mythos 5 performance.
Anthropic released Claude Fable 5 (general availability) and Claude Mythos 5 (restricted), sharing the same underlying model with Fable 5 adding safety mitigations. The model achieves state-of-the-art on coding and agentic benchmarks, with a 1M-token context window and API pricing of $10/$50 per million input/output tokens. For sensitive topics like cybersecurity and biosecurity, queries are transparently routed to Opus 4.8; for requests targeting frontier LLM development, Anthropic silently reduces effectiveness via prompt modification, steering vectors, and PEFT without notifying users, affecting ~0.03% of traffic. This hidden intervention sparked widespread criticism from researchers and open-source advocates as anti-competitive and undermining trust. Fable 5 is temporarily included in subscriptions until June 22, after which it will require usage credits.
Oracle disclosed capital spending plans for fiscal 2027 that exceeded Wall Street estimates, reflecting heavy investment in AI infrastructure. The company intends to raise nearly $40 billion through a mix of debt and equity financing in 2027, sparking concerns over growing debt and sending shares down 8.9% in extended trading. Oracle is building data centers for major customers such as Meta Platforms and OpenAI, aiming to compete with cloud leaders Amazon and Microsoft.
Google has introduced DiffusionGemma, a new language model that applies a diffusion-based decoding process to text generation, claiming up to a 4× speedup over current methods. The model allows parallel token generation, bypassing the sequential limitations of autoregressive decoding. Local deployment instructions are provided via the Unsloth platform. The existing V2EX Chat service already uses a Gemma 4 26B model, though not necessarily DiffusionGemma.
Global semiconductor sales reached $110.48 billion in April, exceeding $110 billion for the first time, with a 93.9% year-over-year increase and 30 consecutive months of growth. Month-over-month growth was 11%. Prices also rose sharply, as 8GB DDR4 memory prices increased about ninefold in a year. Major memory makers Samsung, SK Hynix, and Micron are prioritizing AI memory production, tightening supply of general-purpose memory. Growth was driven by the United States and Asia.
ABot-Earth 0.5 is a framework that generates vast, seamless 3D environments from satellite imagery in under 10 minutes per square kilometer using 3D Gaussian Splatting. Trained on real-world urban reconstructions, it produces realistic geometry and textures, enabling interactive visualization on web-based map engines. Designed for Embodied AI, it bridges the simulation-to-reality gap and supports closed-loop UAV navigation. The approach offers a low-cost, accessible solution for large-scale 3D reconstruction and global digital earth visualization.
ZPan V2 is a major rewrite of the self-hosted cloud file manager that uses S3-compatible object storage. The new version adopts a serverless architecture, running on Cloudflare Workers, Docker, AWS Lambda, Vercel, and others, eliminating the need for VPS maintenance. An official hosted service, zpan.space, is now available for non-technical users. V2 introduces enhanced file management with upload sessions and trash support, a built-in image hosting capability with PicGo and similar tools, advanced sharing options, team and organization workspaces with quota management, WebDAV access, background tasks (compression/extraction), and a distributed remote download system. The project is open-source with Community, Pro, and Business license tiers. The development was done using Agent Kanban, an AI-driven task management system.