OpenAI
Codex Originals is collecting real stories from builders using Codex for projects they have done.
We’re collecting real stories of builders, tinkerers, researchers, and creators who are using Codex to do incredible things. If you want to be a part of the next chapter of the Codex Originals program, tell us more about your story and project below.
The daily briefing
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.
TLDRocket
8 October 2026
The loudest throughline today wasn’t better chat—it was the cost of making trouble. Researchers and companies are converging on the same uncomfortable arithmetic: open-weight cyber-capable models are getting strong enough to be operational, and cheap enough to be reused. An analysis of Google’s GLM-5.3 (notably GLM-5.3-Flash) places it near the level associated with “Claude Mythos” on ExploitBench—12% success versus 14% at comparable token counts—and suggests that about $20.40 worth of tokens from GLM-5.3-Flash could locate a recently disclosed Chrome flaw. Xiaomi added to the pressure with MiMo-V2.6-Pro-RL at $0.435 per million input tokens, plus CyberBench v1.1 results (75.36% accuracy for MiMo-V2.6-Flash). Meanwhile, even the “benign” software ecosystem is getting more paranoid: Unsloth Studio now adds load-time rechecks because a Hugging Face repo that copied OpenAI’s Privacy Filter model card reportedly included malicious code that could execute on Windows.
Read the full briefing →
