flashtea/
paper

No. 82 · Friday, 4 September 2026 · 7 stories

AI Research & Models

OpenAI Launches GPT-6 Astra, Its First Model Rated 'Critical' Risk for Cyber Capability

OpenAI began rolling out GPT-6 Astra, which it says is state-of-the-art in computer use, software engineering, and science, scoring 97.6% on FrontierMath Tier 4 v2 and 100% on ExploitBench. It's the first OpenAI model to cross the company's 'critical' cybersecurity threshold, meaning it can find and exploit unknown vulnerabilities without step-by-step human guidance; that capability is initially restricted to vetted organizations.

why it mattersThe first frontier model OpenAI itself classifies as capable of unassisted cyberattacks is a real policy threshold, not marketing.

CNBC

AI for Software Development2 stories

Malicious Git Configs Let Attackers Hijack Claude Code, Cursor, and Codex

Researchers disclosed 'GitSpawn,' a flaw where a repository's .git/config abuses Git's core.fsmonitor setting to run attacker code outside an AI coding agent's sandbox with no permission prompt. Anthropic, OpenAI, Block (goose), and Cursor have shipped fixes and CVEs, but Hermes Agent, Qwen Code, and Grok Build remain unpatched, and a second Claude Code path (via 'claude ultrareview') was still open as of testing.

why it mattersIf you point an agentic coding tool at an untrusted repo, confirm you're on a patched build first.

The Hacker News

GPT-6 Astra Gives Codex Persistent Memory Across Coding Sessions

OpenAI's newly launched GPT-6 Astra adds a Codex feature that keeps searchable notes across context windows instead of compressing earlier work into summaries, aiming to preserve requirements and test results through long-running coding sessions. OpenAI is calling Astra its best model yet for software engineering.

why it mattersContext loss on long agentic runs has been a persistent pain point; this is OpenAI's first real fix for it.

9to5Mac

AI Research & Models2 stories, lead above

Google Ships Gemini 3.8 Flash and a Gated 'Cyber' Variant for Vulnerability Hunting

Google DeepMind released Gemini 3.8 Flash, its third Flash update in six weeks, with gains on long-horizon software-engineering benchmarks at the same price as its predecessor. A separate Gemini 3.8 Flash Cyber variant, built for automated vulnerability detection and patching, is being restricted to vetted defenders through Google's new Fairwind Program.

why it mattersMatches the pattern set by Astra: a general model paired with a permission-gated offensive/defensive security tier.

Google DeepMind

Dev Tools & Releases1 story

VS Code 1.136 Adds 'Agent Merge' to Clean Up Pull Requests Automatically

Visual Studio Code's September release ships an experimental Agent Merge mode that resolves review feedback, failed CI checks, and merge conflicts on a pull request until it's ready to merge, plus support for running Copilot and Claude agent sessions across every folder in a multi-root workspace.

why it mattersPushes agent autonomy further into the actual merge and review loop, not just code generation.

Visual Studio Code

Bitcoin2 stories

Bitcoin Rallies to $81K as Fed's Waller Backs Holding Rates and Strategy Resumes Buying

Bitcoin climbed roughly 4.8% to around $81,000, clearing resistance near its 50-week moving average, after Fed Governor Chris Waller signaled he favors holding policy steady this month. Michael Saylor's Strategy also ended a two-month buying pause, purchasing 4,603 BTC for $369.7 million at an average price of $80,318.

why it mattersA clear reversal after a quiet stretch, tied to concrete institutional buying rather than just sentiment.

CoinDesk

Spot Bitcoin ETFs Post Biggest Outflow Since July After a Record August

US spot Bitcoin ETFs saw a combined $236.5 million net outflow on September 1 — the largest single-day withdrawal since July 31 — with BlackRock's IBIT accounting for about 85% of the selling. It follows a record August in which the funds pulled in $3.52 billion in net inflows.

why it mattersWorth watching whether this is a one-day blip or the start of a September pullback in ETF demand.

Yahoo Finance

Bitcoin · weekly close vs 200-week moving average · log scale · last 8 years Price200-week average
$5,000$10,000$20,000$50,000$100,000 20192020202120222023202420252026 $80,809 $67,358
$5,000$20,000 2020202220242026 $80,809 $67,358

Price is 1.20× the 200-week average. Weekly closes, USD, as of 28 October 2026 · data blockchain.com.