AI engineering, November 5, 2026

Top News · 236 HN points

OpenAI built an autonomous pipeline for Linux kernel security, covering discovery, validation, and patch generation. It found 948 local privilege-escalation vulnerabilities and validated them. The system also generated patches for those same vulnerabilities as part of the autonomous workflow.

Here is what the pipeline does:

• The pipeline found 948 local privilege-escalation vulnerabilities in the Linux kernel.
• Validation covered those same 948 vulnerabilities, making it part of the workflow rather than a separate follow-up task.
• The system generated patches for the vulnerabilities it found and validated, connecting discovery directly to proposed fixes.

Why care? If you build security agents, this pipeline provides an example of autonomous discovery, validation, and patch generation applied together to 948 local privilege-escalation vulnerabilities in the Linux kernel.

Sources: openai.com

Top News

OpenAI released GPT-Image-2.6 Sunburst and GPT-Image-2.6 Flare for image generation and editing. You can use the Images API for both operations, with capabilities that include adjustable complexity, SVG generation, and animated GIF generation.

Here's what you can build with them:

• Image generation and image editing have separate API endpoints, so you can choose the operation your workflow needs.
• Adjustable complexity gives you another control when generating images.
• SVG generation and animated GIF generation extend the output options beyond static images.
• Markup-guided editing works with GPT Image 2.5 and 2.6, so it is not restricted to the newest models.

Try it: Use the Images API endpoints v1/images/generations for generation and v1/images/edits for editing.

Sources: developers.openai.com

Top News · 214 HN points

Hy4 is Tencent's latest model, now available through Tencent Cloud TokenHub, WorkBuddy, CodeBuddy, Yuanbao, WeCom’s AI Assistant (Dayuan), and ima. TokenHub is offering 50% off standard pricing through December 31, 2026.

Here's what you can use:

• Pricing is approximately $0.90 per million input tokens, $2.70 per million output tokens, and $0.045 per million cached input tokens.
• WorkBuddy and CodeBuddy are free November 4 to 15.
• Visual understanding covers images, charts, and mathematical visual reasoning. Hy4 also adds computer use through command-line and graphical interfaces.
• Tencent's internal evaluations put Hy4's hallucination rate at 7.2%, down from 12.95% for Hy4 Preview.

One catch: Model weights and system cards are still pending, with Tencent planning their release in the coming days.

Sources: tencent.com

1. vLLM adds day-zero Kimi K3.1 Pro support across NVIDIA, AMD, TPU and T-Head accelerators
2. Together Compiler boosts open-model inference throughput up to 2.6x in under 24 hours
3. NVIDIA study finds context compaction causes little to no accuracy loss on long-horizon tasks · 9 Upvotes
4. Prime Intellect releases benchmark fixes after uncovering broken graders and reward hacks
5. SpaceX plans roughly 13GW of datacenter capacity in 2027, according to SemiAnalysis · Reported · semianalysis.com
6. GPUWorks ships a 40 MB GPU cluster manager for vLLM and SGLang without Kubernetes · 25 HN points