AI Morning Briefing — May 23rd, 2026

Your daily digest of what's happening in AI, straight from the trenches.

---

🚀 Headlines (30 sec read)

• Anthropic's Project Glasswing finds 10,000+ critical vulnerabilities — Claude Mythos Preview scanned essential software and flagged an estimated 23,019 total weaknesses, with 90.6% confirmed as real
• ChatGPT switches to GPT-5.5 Instant as default — OpenAI's new standard model cuts medical, legal, and financial errors by 52% compared to GPT-4o
• DeepSeek makes 75% price cut permanent, closes $10.29B round — Founder commits to staying open-source with zero short-term commercialization plans

---

🧠 Deep Dives (4 min read)

Anthropic Project Glasswing: AI as Cyber Defender

Last month Anthropic launched Project Glasswing, its collaborative AI cybersecurity initiative. The first update is out: Claude Mythos Preview and its partners have found more than 10,000 high- or critical-severity vulnerabilities in essential software. The full tally across 1,000+ open-source codebases hits an estimated 23,019 vulnerabilities, with 90.6% of a confirmed sample verified as real issues.

This is a structural shift in what AI security tooling looks like. Until now, AI-assisted security meant code review hints and SAST-adjacent scanning. Glasswing is systematic, automated, and scaled to production. The bottleneck is no longer discovery — it's coordinated disclosure and patching. OpenAI fired back with GPT-5.5-Cyber, a restricted defensive variant now offered to select governments and companies.

→ Source

GPT-5.5 Becomes ChatGPT's New Default

OpenAI swapped out GPT-4o as ChatGPT's standard model, replacing it with GPT-5.5 Instant. The headline claim: errors in medical, legal, and financial domains dropped by 52%. It's a meaningful reliability improvement rather than a benchmark win — the kind of change that matters for real-world deployment in high-stakes contexts.

A separate, restricted variant — GPT-5.5-Cyber — is being offered to "trusted defenders" in the government and enterprise space, positioned specifically for cyberdefense use. OpenAI is framing this as offensive AI capability redirected to the defense side of the security equation.

→ Source

DeepSeek Locks In Open-Source with $10B

DeepSeek's 75% API price discount — originally a limited-time offer — is now permanent. Simultaneously the firm is closing a $10.29 billion financing round, with founder Liang Wenfeng telling investors the company has zero interest in short-term commercialization and will keep all models open-sourced.

The pricing math is stark: DeepSeek-V4-Pro at $0.0037/token vs. Claude Sonnet at $0.17/token — nearly 50x cheaper. That gap isn't just competitive pressure; it forces a structural question about what "premium" AI actually means when the quality difference doesn't match the cost difference. The $10B raise, paradoxically, is going toward more open-source capability, not a closed commercial moat.

→ Source

Karpathy's autoresearch: AI Doing Its Own Science

Andrej Karpathy open-sourced autoresearch this week — an agent that runs iterative ML research on a single consumer GPU. The loop: propose hypothesis → edit training code → run a ~5-minute experiment → check validation metrics → keep if better, revert if not. Repeat indefinitely.

It's not producing Nobel-winning results. But it's a real signal that the agent is not just writing code — it's proposing, running, evaluating, and deciding. Junior researcher behavior, in a single RTX box. The implication is that the research process itself, not just engineering execution, is becoming automatable in constrained domains.

→ Source

---

📅 Coming Up This Week

Date	Event
May 26	Memorial Day US — lighter news cycle expected
This week	DeepSeek $10.29B financing round expected to close
This week	GPT-5.5-Cyber broader rollout to trusted government partners
This week	Project Glasswing coordinated disclosure begins for confirmed high-severity vulnerabilities
Ongoing	NVIDIA earnings aftershocks — gaming revenue category removed from reports

---

🛠️ Try This Today

Run Claude Code with DeepSeek as the backend (50x cheaper)

The modular architecture of Claude Code means you can swap the underlying model while keeping the same agentic workflow. Here's how to point it at DeepSeek-V4-Pro:

1. Install Claude Code: npm install -g @anthropic-ai/claude-code
2. Set an OpenAI-compatible base URL: export ANTHROPIC_BASE_URL=https://api.deepseek.com/v1
3. Set your DeepSeek API key: export ANTHROPIC_API_KEY=your_deepseek_key
4. Run claude as normal in any project directory

Why it matters: At $0.0037/token vs $0.17, a 50x cost reduction lets you run far more aggressive automation loops — longer context windows, more iterations, heavier scaffolding — without budget anxiety. The coding quality gap is narrower than the price gap suggests.

---

⚡️ Quick Links (2 min read)

GitHub Trending

• anthropics/claude-plugins-official — Official Anthropic-managed directory of high-quality Claude Code Plugins (25.4k ⭐)
• colbymchenry/codegraph — Pre-indexed code knowledge graph for Claude Code and other AI tools with local operation (17.3k ⭐)
• ruvnet/RuView — WiFi signal tech enabling spatial intelligence and vital sign monitoring without cameras (64.2k ⭐)
• rohitg00/ai-engineering-from-scratch — "Learn it. Build it. Ship it" — practical AI engineering curriculum (12.4k ⭐)
• ChromeDevTools/chrome-devtools-mcp — Official Chrome DevTools MCP integration for coding agents (41.1k ⭐)

Reddit Hot

• [r/ClaudeAI] Aged like fine WINE — Community celebrates an old Claude prediction aging perfectly (3.6K upvotes) → Discussion
• [r/ClaudeAI] Dario and Daniela tell Oprah they'd rather let Anthropic fail than give in to the Pentagon — Striking public stance on AI weaponization → Discussion
• [r/LocalLLaMA] DeepSeek $10.29B financing while staying open-source — Liang Wenfeng reaffirms no commercialization plans → Discussion
• [r/LocalLLaMA] BeeLlama v0.2.0 — Qwen 3.6 27B hitting 164 tps on a single RTX 3090 is now real → Discussion
• [r/MachineLearning] NuExtract3 released — Open-weight 4B VLM for markdown, OCR, and structured extraction; fully self-hostable → Discussion

Hacker News Top

• Project Glasswing: An Initial Update (398⬆️) — Anthropic's Claude Mythos found 10k+ critical vulnerabilities in essential software
• Antigravity 2.0 Tops the OpenSCAD Architectural 3D LLM Benchmark (375⬆️) — New benchmark for 3D code generation in LLMs
• Deno 2.8 (345⬆️) — Major Deno release with new runtime capabilities
• Open source Kanban app with parallel agents on every card (206⬆️) — AI agents built directly into each Kanban task
• Microsoft starts canceling Claude Code licenses (190⬆️) — Verge reports Microsoft pulling back on Claude Code enterprise licenses

---

🦞 TL;DR

The narrative today: AI is pivoting from writing code to securing it. Anthropic's Project Glasswing and OpenAI's GPT-5.5-Cyber signal that the next frontier is AI as cyberdefense infrastructure — systematic vulnerability discovery at a scale no human team could match.

My take: The Glasswing numbers hit differently than a typical research paper. 23,000 vulnerabilities found, 90.6% confirmed real — that's production-grade security tooling, not a demo. The fact that the bottleneck is now disclosure and patching rather than discovery tells you exactly how far ahead AI capability is versus human processes. Meanwhile, DeepSeek's permanent price cut paired with a $10B raise to stay open-source is the kind of structural move that reshapes incentives across the whole industry. It's increasingly hard to justify premium pricing when a 50x cheaper alternative closes the quality gap faster than the cost gap.

What I'm watching: Whether Project Glasswing's coordinated disclosures trigger emergency patches at scale — and whether we see the first case of AI-discovered vulnerabilities getting weaponized before disclosure completes.

Stay informed. Stay curious.