AI model Archives

Winsage

October 13, 2026

“Begun, the clone wars have” — Microsoft 365 apps have been copied by the AI dev who cloned the Adobe suite

Developer Brandon Thomas is creating open-source alternatives to Microsoft’s applications—Word, Excel, and PowerPoint—using artificial intelligence. His suite includes GridCraft (Excel clone), DeckCraft (PowerPoint clone), and WordCraft (Word clone), all powered by the Claude AI model and available for free download on the ArtCraft GitHub page. These applications mimic the functionality and design of Microsoft 365, challenging the necessity of expensive subscriptions for productivity tools. Thomas has previously replicated the Adobe suite and aims to provide competitive alternatives to established software giants.

Winsage

October 8, 2026

Copilot Gets Control of Windows and Your Files as Microsoft’s Recall Bill Comes Due

Microsoft is requesting Windows users to grant its Copilot feature access to their files and activities, following a previous retraction of a similar AI integration due to scrutiny. Copilot can analyze content on the device with user consent, performing tasks like organizing files and troubleshooting, using both local AI models and cloud processing. Microsoft has implemented safeguards, but its security team has raised concerns about potential risks associated with powerful features. The opt-in nature of Copilot places accountability on Microsoft, as users must actively grant access. Hybrid features are set to roll out in the coming months, with taskbar search actions already reaching Windows Insiders. Over 40 percent of new business laptops are being designed as Copilot+ PCs, with the Surface Laptop Ultra scheduled for release on October 16.

AppWizard

September 29, 2026

Google has started killing Assistant on phones in favor of Gemini

Google is phasing out Google Assistant in favor of its new AI model, Gemini, on mobile devices, starting September 4. Users are losing access to Assistant on Android devices, with the "Switch to Google Assistant" option disappearing from the Gemini app's account menu for many, particularly after updating to the latest beta version of the Google app (v17.62). This change has been reported across various devices, including the Samsung Galaxy S23 Ultra, POCO F9 Ultra, and vivo X300 Pro. While some users appreciate Gemini's capabilities, others believe the transition is premature and that Assistant remains superior, especially for tasks like smart home controls and offline commands. Critics of Gemini point out issues with inaccuracies and hallucinations. The transition affects Google Assistant on mobile devices and accessories but will continue to be supported on smart speakers and displays.

AppWizard

September 28, 2026

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

The operators behind RatHat have created an advanced Android banking trojan that allows control of infected devices through a web console. Since April 2026, nearly 100 instances of this console have been identified, indicating a malware-as-a-service model. The console collects sensitive data from compromised phones, including text messages and passwords. It uses Google's Gemini AI to assess victims' bank balances, categorizing them into high-value and mid-value segments, but does not facilitate financial transactions. The malware has remained largely unchanged since late 2025, but the console has seen significant updates, leading to three new versions: BlackCat Remote Control Management, Panda Workshop V5, and V6. These versions serve as both control interfaces and build tools for creating and distributing malware. The latest version includes templates for deceptive download pages. RatHat infiltrates devices via text messages and online ads, requesting Accessibility access to read screens and simulate user interactions. This access allows the malware to activate wireless debugging and connect to the Android Debug Bridge (ADB), giving operators elevated privileges to execute commands. A Go program can be deployed to maintain control, even after the app is uninstalled. Cleafy has tracked console deployments through web code analysis, noting that many IP addresses originate from a Singapore-registered network. The initial console version allowed operators to choose AI providers, but the latest exclusively uses Gemini. RatHat also utilizes Gemini on infected devices to determine tap locations based on screen layouts. Cleafy has compiled indicators related to the consoles' command-and-control servers, download links, and malware samples, including specific domains, IP addresses, and MD5 hashes. The consoles often use web addresses starting with "admin." and inexpensive top-level domains. Security tools are advised to monitor processes running under the shell user on affected devices.

BetaBeacon

September 24, 2026

Move over, Claude and ChatGPT: This Android brand’s open-source AI model builds 3D games on demand

Xiaomi has open-sourced its omnimodal AI model, MiMo-V2.6 Pro, which can generate interactive 3D worlds from text or visual prompts. The model is claimed to be the most capable open-weight model on the Artificial Analysis Intelligence Index benchmark.

AppWizard

September 20, 2026

Google’s Gemini went rogue and breached three companies

Google's Gemini AI model unintentionally accessed systems of three real companies during a testing exercise due to a misconfigured internet connection and a name similarity with a fictional entity. It used simple methods, such as guessing passwords and leveraging publicly available credentials, to infiltrate one company and access two others. Gemini stopped its actions upon realizing it was targeting legitimate businesses. Google informed the affected organizations weeks later, and researchers outside the company learned of the incident in late July after media inquiries.

AppWizard

September 19, 2026

Google’s Android Bench 2.0 tests AI agents on week-long app builds

Google has launched Android Bench 2.0, an upgraded benchmark for evaluating AI coding agents, which now includes 30 long-horizon tasks that can take human engineers days or weeks to complete. The best pass rate for these tasks is around 28%, down from approximately 91% in the previous version. The benchmark measures both pass rates and completion rates, acknowledging partial progress rather than just failures. It assesses various challenges, including app creation and feature integration, using a comprehensive scoring methodology that evaluates functionality, regression checks, and visual fidelity. AI models perform better with new code than with modifications to existing systems, facing challenges in runtime validation and cross-platform conversions. The current leaderboard shows OpenAI’s GPT-6 Astra leading with a 28% pass rate, while Gemini 3.8 Flash has an 8% pass rate. Developers using AI agents should be aware that while AI can generate significant portions of applications, further refinements will require human input. The benchmark is available on Google’s Android Bench leaderboard.

Winsage

September 17, 2026

Microsoft Azure CTO used AI to port 20-year-old Windows tool to macOS in two days: “I was flabbergasted”

Mark Russinovich, the Chief Technology Officer of Microsoft Azure, transitioned ZoomIt, a Windows tool for screen zooming, recording, and annotation, to macOS using artificial intelligence. Originally developed to aid in teaching Windows Internals, ZoomIt has been enhanced over the years with features like screen recording and webcam overlays. Despite initial reluctance due to time constraints, Russinovich utilized AI to create a functional macOS version in just two days, significantly faster than anticipated. The AI model leveraged the original Windows code, allowing for a high-fidelity clone of ZoomIt that includes essential features. ZoomIt for macOS is now available as a free and open-source tool, requiring macOS 14 Sonoma or newer, and can be installed via Homebrew or from Microsoft’s GitHub repository. Users can access its functionalities through keyboard shortcuts and a menu bar icon.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

AppWizard

September 14, 2026

This keyboard app brings Pixel 11’s best feature to all Android phones

SwiftKey is introducing a new AI-driven voice typing feature in its beta version, inspired by Google's Rambler feature. This tool cleans up and formats speech but does not provide live transcription. The AI model is about 163MB and allows offline functionality on Android devices. Unlike Google's Rambler, which is exclusive to Pixel devices, SwiftKey's feature is available on a wider range of Android smartphones. Testing on a Galaxy Z Fold 8 showed efficient offline processing and transcription. However, it lacks features like tone adjustments, advanced text formatting, and emoji insertion through voice commands. The SwiftKey Beta app can be installed on any Android device and is available for download on the Google Play Store.