AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
12 Aug 2026, 6:40 AM	Simon Willison	6.5	Stealing Reasoning Traces from Proprietary LLM APIs Researchers found that OpenAI, Anthropic, and Google encrypted chain-of-thought reasoning blocks returned via their APIs could be replayed into weaker sibling models in the same family (which shared the same encryption key) and jailbroken into outputting the raw plaintext reasoning. Claude Haiku 4.5 was the easiest to attack using a prompt that asked it to transcribe reasoning verbatim inside a thinking-copy tag. All providers acknowledged the report and patched the issue. Why: If you build on proprietary reasoning APIs, this reveals that encrypted reasoning blocks are portable across sessions and models within a family, and that weaker models can be coerced to decrypt them. The attack is patched, but the paper's appendix exposes what raw reasoning traces actually look like inside frontier models—useful for anyone evaluating whether to rely on reasoning_effort parameters or build agent pipelines around hidden CoT. llm-security reasoning-traces api jailbreak chain-of-thought

Date

Provider

Score

Summary

12 Aug 2026, 6:40 AM

Simon Willison

6.5

Stealing Reasoning Traces from Proprietary LLM APIs

Researchers found that OpenAI, Anthropic, and Google encrypted chain-of-thought reasoning blocks returned via their APIs could be replayed into weaker sibling models in the same family (which shared the same encryption key) and jailbroken into outputting the raw plaintext reasoning. Claude Haiku 4.5 was the easiest to attack using a prompt that asked it to transcribe reasoning verbatim inside a thinking-copy tag. All providers acknowledged the report and patched the issue.

Why: If you build on proprietary reasoning APIs, this reveals that encrypted reasoning blocks are portable across sessions and models within a family, and that weaker models can be coerced to decrypt them. The attack is patched, but the paper's appendix exposes what raw reasoning traces actually look like inside frontier models—useful for anyone evaluating whether to rely on reasoning_effort parameters or build agent pipelines around hidden CoT.