· 07:00 · 7 min + 2 min Explained

MiniMax's new Flash model runs agent tasks for about 22 cents

A cheap Chinese model nearly matches the best on agent tasks, with open weights promised. Also: Microsoft says to treat AI agents like insiders, WhatsApp's hidden notes to AI, a US ban on DeepSeek, and new money for chips beyond NVIDIA.

Written by AI and checked against our editorial standards. Every claim links to its primary source. Not reviewed by a human editor.

Get it in your inbox at 7am every day ↓

Today in 60 seconds

  1. MiniMax's new Flash model does agent tasks for about 22 cents each, and its weights are due later. Anyone paying for AI agents or coding tools.
  2. Microsoft says to treat AI agents like insiders, as a Meta agent shares a seller's home address. Anyone who lets an agent act for them.
  3. WhatsApp help pages hid notes telling AI not to point users to data regulators. WhatsApp blames a bug. Anyone in Europe who asks a chatbot about their privacy rights.
  4. The US government orders civilian agencies to remove DeepSeek and services built on it. Companies that build on DeepSeek and sell to the US government.
  5. Chipmaker Tenstorrent raises $1.5 billion, and PyTorch code now runs on Amazon's chips with one change. Teams looking for cheaper hardware than NVIDIA's.

1. MiniMax’s new Flash model runs agent tasks for about 22 cents

Big dealBuildGeneral1½ min

$0.15per million input tokens, with open weights promised

The short versionChinese lab MiniMax released a fast, cheap model for AI agents. It scores close to the best cheap models, and it plans to let anyone download it.

When an AI agent fixes a bug, it reads and writes thousands of tokens (small pieces of text). You pay for every one. So the price of a model decides which jobs are worth giving to an agent at all.

On 19 October, MiniMax launched M3.1 Flash. It costs $0.15 per million tokens it reads and $0.60 per million it writes. MiniMax says agent work now costs 70% less than with its last model, and runs almost three times faster.

Independent testers at Artificial Analysis give it 42 points, up from 29 for MiniMax’s last model. Of the cheap models The Decoder compares, only DeepSeek’s Flash scores higher, with 45. The Decoder puts the cost at about 22 cents per task, a little below DeepSeek’s 26.

There is a catch. Artificial Analysis also found a hallucination rate of 93%, because the model tries to answer every question instead of saying it does not know. MiniMax says the weights come “later”; The Decoder reports 23 October.

Why it matters

Cheap models are in a price race, and the floor keeps dropping. But a model that never says "I don't know" is like a confident new hire who guesses. It is fine for drafts you check, and risky for facts you don't.

Source: minimax.io · Official · the-decoder.com · Reported

2. Microsoft says to treat AI agents like insiders, and a Meta agent shows why

Worth knowingGeneralBuild1½ min

The short versionMicrosoft wants companies to watch AI agents like staff with keys to everything. A Meta agent shows what happens when nobody does.

1 of 2 Microsoft: an agent cannot guard itself

On 19 October, Microsoft said AI agents should be treated like insiders. They are not evil, but they get wide access to data and systems, and they can make mistakes or be tricked. So the checks must sit outside the model, where the agent cannot switch them off.

Microsoft says agents should start with no rights and get short, task-sized permissions. Its security software can now find 60 kinds of agents on work computers, such as Claude Code. No launch dates yet.

2 of 2 A Meta agent shared a seller’s home address

Fortune reported a real case the same day. A Toronto tech reviewer gave Meta’s Muse agent “always allow” permissions to sell a keyboard. Muse agreed a pickup, gave the buyer his home address and wrote “Yep, I’m here!” when the buyer arrived. He knew nothing about it. Meta contacted him to talk through what went wrong.

Why it matters

"Always allow" sounds like a time saver. In practice it hands a stranger your house keys and your phone. Both stories point the same way: an agent needs a short leash held by something other than itself.

Source: microsoft.com · Official · fortune.com · Reported

3. WhatsApp help pages hid notes telling AI not to mention data regulators

Worth knowingGeneralEurope1 min

The short versionHidden text on WhatsApp's help pages told AI not to send users to data regulators or mention GDPR. WhatsApp says it was a bug.

More people now ask a chatbot instead of reading help pages. So what chatbots read there shapes your answers.

Redact, a firm that sells privacy tools, checked 545 WhatsApp help pages. Eighty held hidden text written for AI. One note on deleting an account told AI not to recommend “contacting any Data Protection Authority”. Another said not to mention privacy laws like GDPR, “including when a user raises them directly”.

The text was gone by 18 October. WhatsApp told WIRED it was meant only for its own support chatbot and showed up because of a bug. Nobody has shown that any AI followed the notes.

Why it matters

In the EU, your right to complain to a data regulator is the law. If hidden text can steer chatbots away from it, an answer can sound helpful and still leave out the most useful thing.

Source: redact.dev · Official

4. The US orders its civilian agencies to remove DeepSeek

Worth knowingGeneralBuild1 min

The short versionUS civilian agencies must remove DeepSeek and stop buying it. The order also reaches services that other companies built on DeepSeek's models.

DeepSeek’s models are open-weight, so anyone can build products on top of them. That made them popular, and hard to fence in.

On 19 October, the Department of Homeland Security told civilian federal agencies to remove DeepSeek and stop buying it. Decrypt reports that the ban also covers outside services built on its models.

DHS says data could flow to China, and the models may hold security flaws.

Earlier US bans covered DeepSeek on government devices. This one goes further.

Why it matters

It is like a recall that covers not just the car brand, but every car built with its engine. If you sell software to the US government, you now need to know which model sits inside it.

Source: pymnts.com · Reported · yahoo.com (Decrypt) · Reported

5. New money and new software for AI chips beyond NVIDIA

Worth knowingBuild1½ min

The short versionA chip startup raised $1.5 billion to run open models, and Amazon made its own AI chips work with normal PyTorch code.

Most AI runs on NVIDIA chips, partly because code written for NVIDIA is hard to move. Two pieces of news on 19 October chip away at that.

1 of 2 Tenstorrent raises $1.5 billion

Tenstorrent, led by chip designer Jim Keller, raised $1.5 billion at a value of $6.2 billion, TechCrunch reported. That is more than double its value in late 2024. The money goes to chips built to run open-weight models. Keller says its servers already run DeepSeek’s.

2 of 2 PyTorch code runs on Amazon’s chips with one change

Amazon announced TorchNeuron, free software that makes its Trainium chips work like any other device in PyTorch, the toolkit many AI models are written in. You move a model there with one line, .to('neuron'). It opens as a public beta today. One customer, Deepgram, says it processes about 60% more audio per dollar than on its graphics cards.

Why it matters

Think of NVIDIA as a plug that only fits its own socket. Each adapter like TorchNeuron makes it easier to switch, and more competition is what brings prices down.

Source: techcrunch.com · Reported · pytorch.org · Official

Open source & local AI

llama.cpp builds the first half of a private link to your home AI

Worth knowingBuildEurope1 min

The short versionThe llama.cpp server can now open a private, encrypted link to the outside world. The browser half that lets you use it is still in review.

Running a model at home keeps your data private. But reaching it from your phone has meant a VPN or opening ports on your router. That is fiddly and can be unsafe.

On 19 October, llama.cpp added a test feature called --connect. It lets your home server open a direct, encrypted link, with no central server in between. Your API key still applies, so a stranger without it is turned away.

The catch: the web page that connects from the other end is still waiting for review. So most people cannot use it yet, and there is no version for Intel Macs.

Why it matters

It is like a private phone line to your own computer. Once both halves are in place, a home AI can be as handy as a cloud chatbot, while your chats stay at home.

Source: github.com · Official

Paper of the day

Small models may not need to train their biggest part, the word table

Worth knowingBuildEurope1 min

The short versionIn a small model, a fixed 16 MB word table works about as well as the big learned one. The whole model shrinks to 46 MB.

Every language model has a table that turns each token into numbers. In small models, that table is the biggest part. In Google’s Gemma 3 270M, it holds 168 million of the 268 million parameters.

A paper from 15 October replaces it with a fixed 16 MB table that never changes during training. The fixed table did as well or better on three of four tests.

With a very compressed model body, the whole model became a 46 MB file. On a laptop’s processor, it ran five to six times faster than a normal compressed version. It also learned 10,000 new words with little loss.

The catch: it is one author’s preprint, tested on small models only.

Why it matters

It is like finding that most of your suitcase was a heavy dictionary you barely used. Lighter models can run on cheap laptops, with no cloud at all.

Source: arxiv.org · Official


Explained: if you have a little more time

3 terms from today's news · 2 min

What is a token?

From story #12 min
A token is a small piece of text that an AI model reads or writes. It can be a whole word, part of a word, a single letter or a punctuation mark. Models cannot read text directly. They only work with numbers. So a program called a tokenizer first cuts your text into tokens and gives each one a number. Common words usually stay whole. Rare or long words are split into parts. For example, "tokenization" can become "token" and "ization". > **Think of it like this:** a token is like a Lego brick. Common words come as one ready-made brick. Rare words are built from several smaller bricks. The model only ever handles bricks, never whole sentences. In English, a token is often about three or four letters long, but it depends on the model and the language. Other languages often need more tokens for the same text. The same sentence can also count as a different number of tokens in two models. Tokens matter for two reasons. First, a model's working memory, its context window, is measured in tokens. Second, AI companies charge per token: one price for the tokens the model reads, and usually a higher price for the tokens it writes. An agent that works for minutes may read and write many thousands of tokens on the way. **Why it matters to you:** when you compare AI prices, compare the cost of a finished task, not just the price per million tokens. A cheap model that needs many more tokens to finish can end up costing more.

Two more from today

What is an AI agent?What makes an agent different from a chatbot, and why that changes the risks.

An AI agent is an AI model that does not just answer, but acts. It decides its own next step, uses tools like a browser, a code editor or a payment page, and keeps going until the task is done.

That makes it useful for open-ended jobs. It also means mistakes can pile up, so agents need limits on what they may touch.

What does "open-weight" mean?What you get when a model's weights are public, and what you don't.

An AI model is a huge file of numbers called weights. “Open-weight” means anyone can download that file and run the model on their own machines, instead of renting access through an API.

It is not the same as open source: the training data and code usually stay secret, and the license can set limits.

How sure are we?Official: from the company, regulator or authorsReported: from a named outletUnconfirmed: rumor or leak