The Threshold Report
← Threshold Report
Agents+5Text+5Oct 10

Image: orcarouter.ai

Orca enables authorized testing workflows with OrcaCyber Zero 1.5

Approved researchers can connect OrcaCyber Zero 1.5 to vulnerability reproduction, audits and multistep authorized security tests through an OpenAI-compatible API. Orca restricts access to its Security Research offering and requires an engagement, a passkey and agreement to the terms. The model has a 1 million-token context window, meaning the amount of material it can work with at once, with prices of $3 per million input tokens and $7.50 per million output tokens. Orca reports benchmark scores of 95.8% on the evaluable part of CVE-Bench, 100% on Cybench under unrestricted agent execution, and 76.5% on SWE-bench Pro V2.

SOURCES · orcarouter.ai
Agents+5Text+2Oct 8

Image: blog.jetbrains.com

JetBrains releases Mellum2.1 Thinking for self-hosted coding agents

JetBrains released downloadable Mellum2.1 Thinking on Oct. 8 for coding agents that explore repositories, edit files and use tools on developers' own infrastructure. Its mixture-of-experts design, meaning only part of the model is active for a task, activates 2.5 billion of its 12 billion parameters (learned numerical values). The model carries an Apache 2.0 license and can work with 131,072 tokens (small units of text) at once. JetBrains trained it by rewarding the model when its code passed tests inside real repositories. Using the same software controlling the agents, JetBrains measured 47% of SWE-bench Verified tasks resolved versus 2% for Mellum2 Thinking, and 28% of SWE-bench Pro tasks versus 0%.

Compute & Infra+5Audio+2Image+2Text+2Video+2Oct 9

Image: developers.cloudflare.com

Cloudflare releases Clef-omni and cuts hosted decision costs

Cloudflare released Clef-omni and reduced hosted Clef-flash prices on Oct. 9 for applications that score a fixed set of possible answers. Clef-omni takes text, images, audio and synchronized video directly, avoiding separate transcription and image-analysis systems. It has open weights, meaning anyone can download and run it; hosted use costs $0.150 per million input tokens (units of data), while hosted Clef-flash dropped from $0.090 to $0.038. To check how many requests a smaller context limit would affect, Cloudflare examined request sizes before cutting hosted Clef-flash's capacity from 64K to 24K tokens; 0.24% exceeded the new limit. Cloudflare reports hosted decisions running 1.7 to 2.0 times faster without changing the weights, taking about 20 milliseconds for text, under 100 milliseconds for images or audio, and about 300 milliseconds for a 21-second video.

Agents+2Audio+2Oct 5

Image: The Threshold Report/GPT Image 2.5

Nova 2.5 Sonic launches for voice agents that use tools

Nova 2.5 Sonic went live in Amazon Bedrock on Oct. 5 with connected tools that can keep working during a spoken conversation. An agent can check an order, determine whether a return is allowed and initiate it in a session that mixes speech with text. The model speaks seven languages and has a 256K-token context capacity, meaning the conversation material available to it, at the same price as Nova 2 Sonic. Amazon also made Strands Bidi Agents generally available. Compared with Nova 2 Sonic, Amazon says the model improves reasoning, follows instructions more accurately and uses tools more accurately, with lower response latency (the delay before a response).

SOURCES · aws.amazon.com
Robots+2Oct 10

Image: prnewswire.com

Amap delivers Tutu robot dogs for resort visitor guidance

Amap and Sands China delivered the first batch of Tutu robot dogs yesterday as visitor-guidance service began at Sands Resorts Macau. The robots had previously served visitors at NBA House. During that operation, they navigated crowds, answered questions and led people to facilities.

SOURCES · prnewswire.com
Text+2Oct 11

Image: community.perplexity.ai

Perplexity releases downloadable update to its 27B decision model

Perplexity released the updated pplx-decider-v1.1-27b model today. The decision model has 27 billion parameters (values learned during training) and works with more than one type of input. It is available as open weights, meaning developers can download it and run decision workflows on their own systems.

1 of 6

Security

Money Moves

The AI stocks that fund managers are adding, trimming, or dropping.

Open the tracker for the latest holdings.

Open Market Watch
AI Entanglements

Coming soon

AgentsOct 7

Image: The Threshold Report/GPT Image 2.5

CrowdStrike links AI tools to South Korean financial-sector intrusions

CrowdStrike linked data theft at South Korean financial organizations in late September and early October 2026 to AI-assisted intrusions on Oct. 7. ARTEX (an AI-driven tool for testing systems by attempting to break in) and several language models were used during the intrusions, according to CrowdStrike. DeepSeek v4.1-flash primarily powered ARTEX, with GLM-5.3 and Grok 4.6 also used, according to exposed Claude Code session histories and configuration files. Private notification dates and responses from victims or model vendors are not established. CrowdStrike published network indicators (details defenders can search for in their network activity) for investigation.

Negative - Attackers used ARTEX and language models to steal data from South Korean financial organizations, turning automated intrusion capabilities into real harm.
SOURCES · crowdstrike.com

Other News

AgentsOct 11

Image: theverge.com

Local AI sorts 400-plus games and analyzes private records

A Verge reviewer used a locally hosted Hermes Agent to categorize a Steam library of more than 400 games. The agent ran with Qwen 3.8 Flash Next, a 125-billion-parameter model (parameters are its learned values), on a 256GB M5 Ultra Mac Studio. The reviewer used a revocable API key for the Steam task; the agent also analyzed financial records and built a laptop-comparison spreadsheet from embargoed information (material that cannot yet be published). The sensitive documents stayed on the computer, letting the reviewer work with files he would not upload to a cloud chatbot.

SOURCES · theverge.com
AudioOct 10

Image: theverge.com

DistroKid removes recordings after UMG's AI-related copyright claims

DistroKid confirmed that a small number of recordings were removed in response to UMG's claims, changing what listeners can access on streaming services. UMG's lawsuit alleges a process for producing AI-generated music and copyright infringement. Musicians say removals also affected non-AI, licensed or original work without advance warnings or clear explanations. Artists report difficulty reaching a person to contest the takedowns.

SOURCES · theverge.com
1 of 2

Upcoming

Announced or reported, but not yet real or available.

AudioJun 9

Apple agrees to offer jobs and license Huxe technology

Waiting on: Hiring and licensing - Apple has agreed to make employment offers to certain Huxe employees and receive a non-exclusive intellectual-property license.

Compute & InfraSep 17

Hyperscale Data targets November 2026 for Michigan AI service

Waiting on: Service start - Hyperscale Data targets November 2026 for operations under its initial 20-megawatt agreement.