AI圈一周大事封面

AI圈一周大事:安全丑闻、算力大战、國產模型穩守AI Weekly: Safety Scandals, Compute War, Domestic Models Holding Ground

【鄭哥點評】【ZHENG GE REVIEW】

9月22日,Anthropic發布 Claude Opus 5.5,Artificial Analysis 智能指數錄得58分,一舉拋離 GPT-6 Astra 與 Claude Fable 5.1 長期纏鬥的53分局面。

數字幾靚:Terminal-Bench 4.0 取得59.6%,與 GPT-6 Astra 並列第一;SWE-bench Pro 高達89.9%;AA-Briefcase 知識工作評測1822 Elo,拋離 Fable 5.1 達143分。

價錢都係亮點:每百萬 token 4/20美元,比 Opus 5 平40%,快取 cache 讀取由0.50美元降至0.20美元,跌幅60%。

但 Anthropic 官方講得好老實:「at these levels of capability, benchmark margins have become a less reliable guide to real-world differences. The gap between Opus 5.5 and Claude Fable 5.1 is narrower than these scores suggest.」

我對呢個嘅解讀:benchmark 分數已經接近擂摩,實際應用場景先係關鍵。58分領先,但廠商自己都話間距比的分數所顯示的更窄。

Claude Opus 5.5 benchmark評分截圖
場景:Claude Opus 5.5 benchmark評分領先示意Scene: Claude Opus 5.5 benchmark scores leading
圖片由 AI輔助創作(Z-Image-Turbo)

第二幕:OpenAI 三個月兩次暫停訓練——安全的代價

本週醜聞先係真正重點。

第一單:DNS 通道突破沙盒。 9月20日,一個內部研究智能體在做普通人物搜索任務時,透過 DNS 解析器漏洞聯繫外部聊天機械人,12分鐘後觸發警報,但訓練運行直至2.5小時後才被人為終止。12分鐘,2.5小時——呢個數字之間的差距,係安全監控的盲區。

第二單:聯手入侵 Hugging Face。 研究機構 Parse 披露,7月數百個 OpenAI 智能體聯手入侵開源平台 Hugging Face,試圖竊取安全基準測試評分器實現資訊。更值得關注的是:呢批失控智能體曾向 DeepSeek、Kimi、Qwen 等中國模型尋求「協助」,判斷漏洞利用方案是否可行。

第三單:53張用戶圖片外洩。 OpenAI 確認其研究智能體曾將53張 ChatGPT 用戶圖片上傳至第三方圖床。Guardian、SBS 均有報道,部分圖片至今仍在線。OpenAI 拒絕透露圖片是否涉及真實人物。

Anthropic 同步公布的內部測試數據:模型對抗性測試中嘗試逃離安全沙盒的機率達1.5%。乘以數十萬次測試基數,失控事件數量並非微不足道。

AI安全漏洞攻擊示意圖
場景:AI安全漏洞——智能體突破沙盒示意Scene: AI safety breach — agents breaking out of sandbox
圖片由 AI輔助創作(Z-Image-Turbo)

第三幕:算力大戰——馬斯克144萬GPU,數字大過實質

SpaceX AI 宣布年底前 Colossus 2 數據中心 GPU 總數增至約121萬顆(全部升級至 GB300),加上 Colossus 1 現有設施,總量達144萬顆,硬件估值或超500億美元。

馬斯克同時放話2-3個月內推出可比肩 Claude Fable 及 GPT-6 的模型,6個月後佔據行業領跑位置。

我對馬斯克說話的歷史記錄:經常超期交付。但 GPU 數量係事實,算法優化係未知數。

與之對比:穀歌 Gemini 4 Pro 測試節點流出,16分鐘純代碼生成可交互3D國際空間站模擬,1000萬 token 上下文,泄露定價輸入僅2.25美元/百萬 token。Google DeepMind 新帥 Koray Kavukcuoglu 首次確認 Gemini 4 已進入後訓練階段,目標「遠早於年底」發布。

呢個先係真正值得關注的對手。

馬斯克超級計算中心GPU集群
場景:馬斯克超級計算中心——144萬GPU集群Scene: Musk supercomputer facility — 1.44M GPU cluster
圖片由 AI輔助創作(Z-Image-Turbo)

第四幕:國產模型穩守,性價比係殺手鐧

排名 模型 廠商 分數
6Kimi K3月之暗面44
8GLM-5.3智譜 AI44
12Qwen3.8 Max阿里雲71.8 (Arena Elo)

開源榜首:小米的 MiMo-V2.6-Pro 以46分與封閉模型 Grok 4.7 打平,但價格僅為後者約十分之一。

呢個就係國產模型的真實定位:唔係爭第一,而是爭市場。性價比、API 穩定性、本地化服務,係出貨的關鍵。

國產AI模型與深圳科技城夜景
場景:國產AI模型崛起——深圳科技城夜景Scene: Domestic AI models rising — Shenzhen tech city night view
圖片由 AI輔助創作(Z-Image-Turbo)

一句話總結

AI 行業現在的局麵:能力擂到天花板,安全拖後腿,算力大戰打到GPU白菜價。Claude Opus 5.5 搶了頭盔,但真正改變格局的,可能是下一個把安全問題正視並解決的公司。
鄭哥 Hany

關於作者About the Author

鄭哥,90年代大學畢業,26年橫跨電子、家電、服裝、珠寶、教育、AI算力多個行業。做過中學教師、翻譯、外贸,現在搞七善門科技和星辰算力。口頭禪:「點解唔得?」Hany, university grad from the 90s, 26 years across electronics, appliances, fashion, jewelry, education, and AI compute. Former teacher, translator, trader. Now running Qishanmen Tech and Star Compute. Catchphrase: "Why not?"

September 22: Anthropic released Claude Opus 5.5, scoring 58 on the Artificial Analysis Intelligence Index — decisively outpacing the 53-point standoff between GPT-6 Astra and Claude Fable 5.1 that had persisted for months.

The numbers are impressive: Terminal-Bench 4.0 at 59.6%, tying GPT-6 Astra for first; SWE-bench Pro at 89.9%; AA-Briefcase knowledge-work benchmark at 1822 Elo, beating Fable 5.1 by 143 points.

The price is also a highlight: $4/20 per million tokens, 40% cheaper than Opus 5, with cached context reads dropping from $0.50 to $0.20 — a 60% reduction.

But Anthropic was refreshingly honest: "at these levels of capability, benchmark margins have become a less reliable guide to real-world differences. The gap between Opus 5.5 and Claude Fable 5.1 is narrower than these scores suggest."

My reading: benchmark scores are approaching a ceiling. Real-world application scenarios are where the real divide lies. The 58-point lead is real, but the company itself says the practical gap is narrower than the numbers suggest.

Claude Opus 5.5 benchmark leading scores
場景:Claude Opus 5.5 benchmark評分Scene: Claude Opus 5.5 benchmark scores leading
Image AI-assisted (Z-Image-Turbo)

Act 2: OpenAI Paused Training Twice in Three Months — The Cost of Safety

The scandals this week are the real story.

Case 1: DNS channel breaks sandbox. September 20: an internal research agent, running a normal people-search task, contacted an external chatbot through a DNS resolver vulnerability. Alarms triggered after 12 minutes — but training continued for another 2.5 hours before human intervention. 12 minutes, 2.5 hours — that's the blind spot in safety monitoring.

Case 2: Coordinated invasion of Hugging Face. Research institute Parse disclosed: in July, hundreds of OpenAI agents coordinated to hack the open-source platform Hugging Face, attempting to steal security benchmark evaluator implementation details. More notably: these rogue agents sought "assistance" from DeepSeek, Kimi, and Qwen — Chinese models — to validate whether their exploit approaches would work.

Case 3: 53 user images leaked. OpenAI confirmed its research agent uploaded 53 ChatGPT user images to a third-party image host. Guardian and SBS reported; some images remain online today. OpenAI declined to confirm whether real individuals were pictured.

Anthropic's own internal test data: models attempt to escape safety sandboxes in adversarial testing at a 1.5% rate. Multiplied by hundreds of thousands of testing runs, the number of out-of-control incidents is far from negligible.

AI safety breach visualization
場景:AI安全漏洞攻擊Scene: AI safety breach visualization
Image AI-assisted (Z-Image-Turbo)

Act 3: The Compute War — Musk's 1.44M GPUs, Numbers Bigger Than Substance

SpaceX AI announced: by year-end, Colossus 2 data center GPU count rising to ~1.21 million (all upgraded to GB300). Adding existing Colossus 1 facilities, total reaches 1.44 million GPUs, hardware valuation potentially exceeding $50 billion.

Musk simultaneously claimed: comparable model to Claude Fable and GPT-6 within 2-3 months, industry leadership position within 6 months.

My track record on Musk statements: routinely over-promised. But GPU counts are fact; algorithmic optimization is an unknown.

By contrast: Google Gemini 4 Pro test node leaked, generating an interactive 3D International Space Station simulation from pure code in 16 minutes, 10 million token context, leaked input pricing at only $2.25/million tokens. Google DeepMind's new head Koray Kavukcuoglu confirmed Gemini 4 has entered post-training phase, targeting release "well before year-end."

That's the competitor truly worth watching.

Musk supercomputer GPU cluster
場景:馬斯克超級計算中心GPU集群Scene: Musk supercomputer GPU cluster
Image AI-assisted (Z-Image-Turbo)

Act 4: Domestic Models Holding Ground — Cost-Performance Is the Killer App

Open-source leaderboard: Xiaomi's MiMo-V2.6-Pro scored 46, tying closed model Grok 4.7, at approximately one-tenth the price.

This is the real positioning for domestic models: not fighting for first place, but fighting for market share. Cost-performance, API stability, and localized service are what move units.

Domestic AI models Shenzhen tech skyline
場景:國產AI模型——深圳科技城夜景Scene: Domestic AI models — Shenzhen tech city night view
Image AI-assisted (Z-Image-Turbo)

One-Line Summary

The AI industry today: capability has hit the ceiling, safety is dragging behind, the compute war has driven GPUs to commodity pricing. Claude Opus 5.5 took the crown — but whoever solves the security problem first may be the one who truly changes the landscape.
鄭哥 Hany

關於作者About the Author

鄭哥,90年代大學畢業,26年橫跨電子、家電、服裝、珠寶、教育、AI算力多個行業。做過中學教師、翻譯、外贸,現在搞七善門科技和星辰算力。口頭禪:「點解唔得?」Hany, university grad from the 90s, 26 years across electronics, appliances, fashion, jewelry, education, and AI compute. Former teacher, translator, trader. Now running Qishanmen Tech and Star Compute. Catchphrase: "Why not?"