subtl daily briefing

The details:

• ●GPT-5.5 scores 60 pts on the Artificial Analysis Intelligence Index and 85% on ARC-AGI-2, topping both leaderboards ahead of Gemini 3.1 Pro Preview and Claude Opus 4.7.
• ●Despite raw capability wins, GPT-5.5 ranks third on knowledge calibration — trailing Gemini and Claude — with an 85.53% hallucination rate that makes it unreliable for factual workloads.
• ●Pricing is steep: GPT-5.5 API runs $5/$30 per million input/output tokens (roughly double GPT-5.4), while GPT-5.5 Pro hits $30/$180 per million tokens with parallel reasoning inference.
• ●OpenAI also expanded its AWS partnership to bring GPT-5.5, Codex, and Managed Agents to Amazon Bedrock, letting enterprises deploy within existing AWS security infrastructure.

The details:

• ●xAI acquired Cursor for $60B, giving it a massive developer user base and a consumer product just as a SpaceX IPO would demand broader market visibility.
• ●Grok 4.3 launched with higher intelligence benchmark scores at lower cost than Grok 4.2, continuing xAI's push to compete with OpenAI and Anthropic on price-performance.
• ●Elon Musk admitted during federal testimony that xAI partly distilled OpenAI models while also disclosing a $97.4B bid for OpenAI's assets — a remarkable dual disclosure in open court.
• ●Anthropic is separately approaching a $900B valuation on a ~$50B funding round with revenue nearing a $40B annualized run rate, signaling the AI arms race is nowhere near its ceiling.

The details:

• ●CVE-2026-31431, nicknamed 'Copy Fail,' is a kernel logic bug exploitable via controlled writes into setuid binary page cache — a patch is now available but unpatched systems remain fully exposed.
• ●The exploit fits in a 732-byte Python script, making it trivially accessible to low-skill attackers and ideal for automated mass exploitation against cloud infrastructure.
• ●A separate Google CVSS 10.0 RCE was patched in Gemini CLI, and Claude Opus 4.7 was found capable of de-anonymizing writers from small unpublished text samples — a bad week for security across the board.
• ●GitGuardian also flagged 28,000 LLM-generated passwords found in 34 million GitHub commits, with Llama-3.3-70b-instruct repeating the same password substring in 96% of outputs.

The details:

• ●Bitcoin ETFs pulled in nearly $2B in April net inflows; Morgan Stanley's MSBT ETF launched as the lowest-fee option and drew $163.86M in its first month alone.
• ●DeFi took a $635M hit in April — Drift Protocol lost $285M and Kelp DAO's bridge was drained for $293M, collapsing Aave's TVL ~40% to approximately $15B.
• ●North Korean state-backed groups now account for 76% of all 2026 crypto exploit losses, with sophisticated social engineering (including fake Web3 job interviews) as the primary attack vector.
• ●Meta launched USDC creator payouts on Polygon and Solana via Circle and Stripe, live in Colombia and the Philippines ahead of a 160+ market rollout; Visa expanded stablecoin settlement to nine blockchains at $7B annualized volume, up 50% QoQ.

The details:

• ●The Strait of Hormuz closure has pushed Brent crude to $105–110/barrel, driving the global oil bill toward $5–8T annually — a supply shock of 6–11.4M barrels per day.
• ●The SOX semiconductor index rose 18 consecutive days to sit 43% above its 200-day moving average — the widest spread since June 2000 — as compute scarcity concentrates gains in a narrow cohort of winners.
• ●New Fed Chair Kevin Warsh argues AI is structurally deflationary, giving him political cover to cut rates despite 3.3% inflation; ISM Manufacturing PMI above 50 combined with easing historically correlates with crypto outperformance.
• ●Just six companies account for ~70% of S&P 500 earnings upgrades — all tied to compute or energy — while the broader index sees more downgrades than upgrades.