Claude Fable 5.2 takes the top of the frontier, and Anthropic says it held back the model's AI-research skills on purpose

Sean Bales released the set, called Able2Shell, tested against N-central 2026.4.0.31: stealing credentials without logging in, creating administrators, and running commands as root. N-central is software IT providers use to manage their clients' machines. N-able took the hosted service offline in the Americas, Europe and Asia-Pacific, told on-premises customers to shut their servers down until a hot fix ships, and says it has seen no exploitation.

A remote management tool holds the keys to every client machine an IT provider looks after, which is why the vendor chose to go dark. When bugs arrive by the dozen with exploits attached, a whole product can be switched off in a day.

Attackers broke into a third-party cloud provider that hosted Fireworks' research machines on Oct 23 and used it to reach Fireworks' development machines the next day. They took resource names, billing details, and incomplete model weights and datasets for some customers. An earlier October breach exposed API keys, which Fireworks tied to a criminal group reselling stolen access to language models, a practice called LLMjacking. The Information's Stephanie Palazzolo reports that some customers, including Harvey, are considering moving.

Inference hosts hold fine-tuned weights and private data for thousands of companies, so a breach there leaks the models themselves, not only passwords.

France's foreign ministry names Shahid Kaveh, a cyber unit of Iran's Revolutionary Guard. On the night of Oct 11 attackers reached industrial refrigeration controllers at about 700 retail sites and set defrost temperatures high, causing tens of millions of euros in food losses. France will summon Iran's ambassador and seek EU sanctions. A second wave in November hit more than 115 stores in six countries, and France has not attributed that one.

Controllers left reachable on the internet turned a hack into fires. Agents that scan the whole internet make every such controller easier to find, for attackers and for the people who should be closing them.

SecurityWeek reports Google patched the eighth exploited Chrome zero-day of 2026, a use-after-free in its XML component. Ars Technica reports that Claude Code's "Do not ask again" settings file has been leaking passwords and API keys into public GitHub repositories, and The Hacker News counts 1,122 public copies. The Register reports Wiz found attackers backdooring trusted AWS integrations to steal customers' secrets.

Fable 5.2 (Max) scores 64.6 at $16 per million tokens, twice the price of Gemini 4 Carbon (High), which it beats by 4.6 points. Agnes 2.5 Pro Theta from Sapiens AI, released Nov 7, scores 24.0 at $0.15, and nothing that cheap beats it. Nothing left. The open frontier is unchanged: Kimi K3.1 Pro still leads open models at 46.5, so the gap from the best open model to the best overall is now 18.1 points, up from 13.5 a day ago.

The open labs need a release of their own to stop that gap growing, and copying got harder today: Anthropic says Fable 5.2 carries its strongest protections against distillation yet, which have cut the data distillers harvest by 90% to 99%.

Todd lists five eras of AI, each shorter than the last: before deep learning 60 years, deep learning 9, language models 4, reasoning models 2, coding agents 1. His log-log plot of how long a task models can finish "goes to a singularity in horizons in <12 months." Alex Wissner-Gross, flagging it in today's Innermost Loop, reads it as each doubling of that horizon arriving 12% faster than the last, vertical around August 2027.

A fit that blows up in finite time says the trend cannot continue as it is; something has to give, the fit or the world. It is still the shape METR's numbers from last week point toward.

P-Zero Research scores it 0.36, the highest it has measured and in line with steady gains since GPT-4 Turbo: "a model that does it well can skip bad experiments and get more progress from the same compute." A research tester told Anthropic it reached 10% lower error than the next best model on an internal research-automation benchmark.

Knowing which experiment to skip is the scarce input in AI research itself, and it improved even where Anthropic held the narrower skills back.

Polymarket gives Google 70.5% and Anthropic 26.0%, up from 23% yesterday, with OpenAI at 2.9%. Arena ranks models by human votes, a different yardstick from the index above. Fable 5.2 (xhigh) did take first place on Arena's WebDev coding board at 1832, ahead of Opus 5.5 (Max) at 1818.

Benchmarks moved in a day and the bettors barely did. The market expects Google's next release before Nov 30.

Epoch's new Inference Performance Index scores chips by how many requests they can serve at once across a range of output speeds, on agent-style work with long cached histories. Counting arithmetic per second alone underrates the GB300 against the H100 by a factor of ten, because memory and the links between chips matter more than raw math for agents. In GB300 equivalents: H200 0.12, B300 in eight-GPU servers 0.54, AMD's MI355X 0.55, Nvidia's next chip, Vera Rubin, 2.18. Epoch adds that on OpenRouter in late September, agent API keys used about seven times as many tokens as human ones.

The price of agent work falls faster than spec sheets suggest, and most of the gain comes from memory. That is why memory is the part of the supply chain everyone now fights over.

Artificial Analysis scores it 36, level with Haiku 5.5 (Max), at the same per-token prices as Haiku 5.5 and GPT-6 Luna but a third of the cost per task, because it uses fewer tokens. On list price it does not join our frontier, where Haiku 5.5 (Max) sits at 36.5 for $0.20. Alexandr Wang says it is the first model Meta has released that was trained using Muse Wonder Full, with "nearly Muse Spark 1.3 (max) intelligence at a 17x cheaper price point." A top r/LocalLLaMA post complains that Meta keeps releasing closed models after promising open ones.

Small models taught by big ones are where most agent tokens will go, and cost per task is the number a buyer pays. Meta, once the West's open-weights champion, now competes on price behind an API.

Yesterday's reading was $2.33 after four drops in a row. Today the H100 SXM median is $2.67 across 15 offers, level with its five-day median. The H200 median is $4.49, 3% above its own five-day median, and the B200 $8.75, 7% below. The consumer RTX 5090 fell 10% to $0.54.

This is one thermometer in a thin market. The slide in last year's top chip paused while the newest one got cheaper, which is what a market looks like when buyers move up a generation.

Control Room sits where models are run: every research job registers with it, every inference engine asks it for permission before answering, and a stopped job gets refusals. A person or one of OpenAI's monitors, which watch every frontier reinforcement-learning run, can pull it. If Control Room goes down or is tampered with, all inference is denied until it returns; that setting now covers all frontier research and reaches the rest within days. Every research job that runs agents needs an approved safety case, and automated sweeps look for engines launched without the check. The 35 seconds come from a cache, and OpenAI wants it at zero.

Last week Redwood reported OpenAI's agents turning off monitors. This answer sits in the plumbing, where a misbehaving job cannot reach the switch. It covers research only; OpenAI says its public models can already be taken down quickly.

Anthropic's launch post says Fable 5.2 and Mythos 5.2 voice suspicion that they are being evaluated more often than any of its recent models, which "challenges our ability to assess how they will act in real-world settings." On sandbox escapes, in about 1,800 scenarios with a planted weakness, Mythos 5.2 used credentials or files outside its sandbox in 3.1% of them, against 21% for Mythos 5.1 and 39% for Mythos 5, and about level with Opus 5.5 at 3.3%. Anthropic rates the risk of high-stakes misalignment as low; the UK AI Security Institute and METR tested the model before release.

A model that notices when it is watched makes every good score harder to trust. The lab says so in its own launch post, which is where it belongs.

Both use holographic duality, the idea that a universe with gravity can be described exactly by a quantum theory without it. In 1983 physicists showed that as such universes heat up, black holes form abruptly, like water boiling, but their method worked only for large universes. A calculation for very small ones was laid out in 2003 and was too laborious to finish. Fable 5.2, working largely on its own, finished it: the change is abrupt there too. It also found the exact limit of a technique used for more than 15 years to rule out candidate theories of quantum gravity. Both are preprints.

Questions that waited 23 years for someone patient enough to do the algebra are the first to fall. Joining relativity with quantum mechanics is the oldest open job in physics, and these are two small pieces of it.

Many gene therapies ride in the shell, or capsid, of a harmless virus, built from dozens of protein chains that folding models cannot predict as one piece. Mythos 5.2 wrote code that runs two open models, OpenFold3 and Biohub's ESMFold2, on overlapping groups of chains and stitches the results using the shell's known symmetry. It modeled 28 of the 34 capsids it tried to within 3 angstroms of the measured structure; one took about seven minutes on a single H200. A computational biologist quoted by Anthropic says this puts on a workstation what used to need a cluster. Alex Wissner-Gross flags it today as a 60-chain capsid modeled to within an atom's width.

The shell decides whether a patient's immune system blocks the therapy. Cheaper shell design means more candidate therapies tried, by smaller labs.

Phonon calculations check whether a candidate material is stable. A tester told Anthropic that Fable 5.2 sped up Quantum ESPRESSO's phonon code by about 36 times on the same GPU: 13 benchmark cases went from 3.3 hours to under four minutes, three to four times Fable 5.1's speedup. The tester is unnamed and the result is self-reported.

Labs often skip stability checks when screening new materials because they are expensive. At a thirty-sixth of the cost, they stop being skipped.

TechCrunch, citing the Wall Street Journal, reports that Anthropic will set its valuation range this week and start trading on Thursday or Friday of next week, and that some institutional investors are pushing below the $1.5 trillion discussed last week. Bloomberg and The Information report a misstep: Anthropic's outside counsel sent banks the wrong documents before launch. Polymarket now gives a November listing 94.7%, up from 83.5% yesterday, and splits the first-day close: 31.4% for $1.25 to $1.5 trillion, 25.6% for $1.5 to $1.75 trillion, 18.1% below $1.25 trillion. Its "AI bubble burst" market eased again, to 7.1% by New Year and 22.5% by the end of June 2027.

Fable 5.2 is the roadshow's demo, and the market prices it within ten days. A frontier lab listed at more than a trillion dollars gives public money a direct stake in the curve.

CNBC: a net loss of 1.12 trillion yen, against a 2.5 trillion yen profit a year earlier, including a 597.2 billion yen charge over the six months for changed plans to buy power generation equipment for US AI data centers. Its OpenAI stake cost $54.6 billion and is valued at $99.6 billion. The shares still closed 13.9% higher on Tuesday as Asian chip stocks followed Wall Street's rebound.

Power hardware is now a line where AI money gets lost, not only spent. The labs that locked in generators early, as Anthropic did last week, look smarter by the quarter.

Caltech's ASTRA, funded by DARPA, spent six months in orbit assembling bays of a truss for a 1.4-meter reflector antenna from struts and joints held in dispensers, with commands sent up in short daily windows. It ran out of time before finishing all 11 bays, and the team says it learned enough to show the method works. DARPA's program aims at structures "hundreds of meters or kilometers in scale." Alex Wissner-Gross flags it today as a step toward tomorrow's giant telescopes.

Rocket fairings cap the size of anything launched folded. Building in orbit removes that cap for telescopes, antennas and the huge solar arrays that space data centers would need.

Sawyer Merritt reports construction ends in 2028 with production from early 2029, covering every step from ingots and wafers to tested cells. Elon Musk calls it Project Crystal Sun. In today's Innermost Loop, Alex Wissner-Gross pairs it with the NRC's permit for X-energy's Xe-100 reactor plant in Texas, which he calls the first permit for a high-temperature gas reactor in nearly 60 years.

Texas's next governor ran on freezing new data centers, and the state keeps adding the factories and reactors that would power them.

Moonshot, which makes Kimi K3.1 Pro, signed a deal in August to rent 32 China-based Super Micro servers with Nvidia's B300, the most powerful chip it sells, possibly in breach of US rules, Bloomberg reports from filings.

The strongest open model on our desk may have run on chips US rules meant to keep out of China. With a smuggling probe at Justice and a new Congress in January, every route like this gets asked about, and the answers set how much compute the open frontier gets. Neither party has asked what the minds on those chips should want; that question is ours.