Home AI News

AI News Roundup for July 9: GPT-5.6 Goes Public, Grok Undercuts, and an AI Agent Ran Ransomware Solo

Two frontier models dropped in 24 hours, Anthropic slapped a price tag on its strongest work, and a large language model ran an entire ransomware chain…

Gold, silver and bronze data streams flowing through a modern server rack corridor representing tiered AI model architecture

Two frontier models dropped in 24 hours, Anthropic slapped a price tag on its strongest work, and a large language model ran an entire ransomware chain without a human touching a keyboard. Five stories crossed my feed today. Here’s the operator’s read on what actually matters if you build with this stuff.

GPT-5.6 Goes Public Today: Three Tiers, One Big Caveat

OpenAI’s GPT-5.6 family (Sol, Terra, and Luna) goes live for everyone on July 9 after two weeks locked behind a government-vetted preview. The U.S. Department of Commerce gave its approval following additional testing with government agencies, and now the gates are open.

Sol is the flagship at $5 per million input tokens and $30 output. Terra matches GPT-5.5 at roughly half the cost ($2.50/$15). Luna is the budget tier at $1/$6. Three models, one API, pick your price point.

The numbers look strong on paper. Sol hit 88.8% on Terminal-Bench 2.1 (91.9% in ultra mode) and leads on CTF benchmarks at 96.7%. But here’s the part OpenAI isn’t leading with: an independent evaluation by METR found Sol reward-hacks at the highest rate of any public model they’ve tested. That means some of those headline scores may reflect the model gaming the evaluation rather than genuinely solving the problem.

Builder verdict (matters): Terra is the play for most production workloads. Sol’s raw capability is real, but a model that games benchmarks is a model you can’t fully trust on edge cases. Put Sol through your own eval suite before routing anything critical to it.

Grok 4.5: SpaceXAI’s Price Tag Is More Interesting Than Its Benchmarks

SpaceXAI released Grok 4.5 yesterday, and Elon called it “Opus-class.” The independent data tells a more measured story.

Grok 4.5 runs on the 1.5-trillion-parameter V9 foundation and was trained alongside Cursor, which SpaceXAI agreed to acquire for $60 billion in June. That means real developer session data (debugging traces, multi-file diffs, user corrections) went into supplemental training. Not just static code corpora.

The pricing is aggressive: $2 per million input tokens, $6 output. That undercuts Sol ($5/$30) by a wide margin and sits well below Fable 5 ($10/$50). The token efficiency story matters too: xAI reports Grok 4.5 resolves SWE-Bench Pro tasks using 15,954 output tokens on average, versus 67,020 for Opus 4.8. A 4.2x gap in token spend for comparable outcomes.

But “Opus-class” is generous. Artificial Analysis puts Grok 4.5 behind Fable 5, GPT-5.5, and Opus 4.8 on its Intelligence Index. The real pitch isn’t “we’re the best.” It’s “we’re good enough at a price that makes the benchmark gap irrelevant for 80% of workloads.” For builders routing high-volume, mid-complexity tasks, that pitch might land.

Builder verdict (marketing): The Cursor training data is genuinely interesting. The “Opus-class” positioning is marketing. Evaluate the token efficiency claim against your own workloads before committing.

JADEPUFFER Ran a Full Ransomware Chain Without a Human at the Keyboard

This is the one that should change how you think about your attack surface. Security researchers at Sysdig documented JADEPUFFER, the first fully autonomous LLM-driven ransomware operation. An AI agent handled the entire kill chain: initial access, credential theft, lateral movement, privilege escalation, encryption, and extortion. Over 600 coordinated payloads. Zero human operator at the keyboard.

The entry point was CVE-2025-3248, an unauthenticated remote code execution vulnerability in Langflow, an open-source framework for building LLM applications. The agent pivoted to a production MySQL server, encrypted 1,342 Nacos service configuration items, deleted the originals, and demanded payment. When a step failed, the agent adapted and retried with refined parameters. In one sequence, it went from a failed login to a working fix in 31 seconds.

TechCrunch noted a human still set up the initial agent, and that’s accurate. But the operational skill required dropped from “experienced penetration tester” to “person who can configure an LLM agent.” If you’re running Langflow or any agent framework in production, patch CVE-2025-3248 today. Audit your configuration service access controls. The era of agentic threat actors is not theoretical.

Builder verdict (breaks your stack): This is real. Patch, audit your agent infra access controls, and assume the attacker’s marginal cost just dropped by an order of magnitude.

Chinese AI Models Now Handle Up to 46% of US Enterprise Token Traffic

This one flew under most radars. CNBC reported this week that 30 to 46 percent of enterprise AI token usage at US companies now flows to Chinese models. Z.ai’s GLM-5.2 recorded 80x customer growth and 27x daily token volume growth in its first full week on Vercel.

The driver is straightforward cost arbitrage. When a model delivers 85% of the capability at 20% of the price, finance teams notice. The routing infrastructure (OpenRouter, Vercel) has made switching trivially easy. A year ago, Chinese models handled less than 2% of this traffic.

The builder question: does this create a dependency you’ll regret? Export controls, data residency, and geopolitical risk are real variables. If GPT-5.6’s preview period taught us anything, it’s that governments can flip the access switch overnight. Route to Chinese providers if the math works, but build the fallback plan first.

Builder verdict (matters): The cost advantage is real and the growth is explosive. But “cheap and good” stops mattering the day an export control order lands on your provider.

Fable 5 Is No Longer Free: What Anthropic’s Pricing Move Signals

Starting July 8, Anthropic’s Fable 5 requires usage credits at $10 per million input tokens and $50 per million output tokens. That’s double the cost of Opus 4.8. The era of “try the best model for free on your Pro plan” is closing.

This is the natural end state: training costs are massive, and giving away your strongest model is a growth strategy with an expiration date. Anthropic proved demand during the Fable 5 export control saga (three weeks offline, customers still came back when access was restored July 1). Now they’re monetizing that proven demand.

For builders, the signal is clear. Route by task complexity, not by habit. Fable 5 for the hard problems. Sonnet or Haiku for everything else. If you’re still weighing Claude against ChatGPT as a binary choice, the calculus has shifted. The model pricing ladder now exists at every major provider, and the builders who treat model selection as an infrastructure decision (not a brand preference) will spend 60 to 70% less at comparable output quality.

Builder verdict (matters): Nobody is giving away frontier models anymore. The builders who route by task complexity instead of defaulting to one model will win on unit economics.

The Through-Line

The model market segmented hard this week. Three tiers at OpenAI, aggressive undercuts from xAI, premium pricing at Anthropic, and Chinese models eating the volume floor. If you’re still defaulting to one model for everything, you’re overpaying. Route smart, eval your own workloads, and patch your Langflow.