Mistral tests China’s open-model advantage
October 30, 2026

Welcome back. The PHP vulnerabilities uncovered last week had been dismissed as unexploitable for years, until AI changed the math. AI putting an end to security-by-obscurity puts smaller, less-resourced organizations most at risk. Meanwhile, Amazon unveiled a new lineup of Echo devices and an upgraded AI-powered Alexa, but its real edge may be the habits it has built in millions of homes since 2014. Finally, Mistral released the open weights of its trillion-parameter Large 4 model, pitching enterprises frontier performance without lock-in and taking aim at China’s open-model lead. —Jason Hiner
IN TODAY’S NEWSLETTER
1. Mistral tests China’s open-model advantage
2. Why small firms face the most AI cyber risk
3. Amazon’s AI bet runs on a decade of home habits
PRODUCT
Mistral pitches frontier power without lock-in
Open-source AI models are gaining traction for their control, lower costs, and optimization options. Though China leads the way in this market, Mistral is mounting a challenge.
On Thursday, Mistral released the open weights of Mistral Large 4, its flagship, 1-trillion-parameter Le Chonk model. When the company first announced the model in October, it was in public preview. In the three weeks since, Mistral kept improving it with reinforcement learning and customer feedback. Through those improvements, Mistral pushed the model to benchmark breakthroughs, including claiming it's the "best open agentic coding model in the world" and "state-of-the-art in cyber defense capabilities among open models."
To support those claims, the company shared some of its benchmark breakthroughs:
ML4 ranks as the top open model in the world for agentic coding on Artificial Analysis’ Coding Agent Index.
On Terminal-Bench 4.0, a benchmark that measures how well agents can complete real-world technical tasks using a computer terminal, ML4 climbed from 28% to 41%, tying GLM-5.3 as the best model for coding agents.
It also tied MiMo V2 6-Pro and surpassed DeepSeek-V4.1-Flash 1017 and GLM-5.3 Flash on the Artificial Analysis Cyber Index, or CyberGym-E2E, a cybersecurity benchmark that tests AI agents.
But ML4's advanced capabilities aren't the only thing that make it attractive to enterprises, Marjorie Janiewicz, Mistral's chief revenue officer, told The Deep View. Its open-source nature offers several perks, having control over when to stop using your model (as opposed to it being sunset), being able to build defenses that are more deeply integrated into your database, and often being able to save on costs.
"Before, you had to compromise between performance and control," said Janiewicz. "With this release, you can have access to frontier performance and then control that AI. It's the best of both worlds."
While other labs also use reinforcement learning to improve their models, Mistral said it invests more heavily in it than its open-weight competitors, creating increasingly difficult cyber and coding problems in-house for this training, thereby making it especially proficient at the tasks that matter most to enterprises. The company said "end-to-end control of (its) own infrastructure and scientific innovations" also allows it to deliver these results at a fraction of the compute and capital of the closed model labs.

Enterprises have driven most of the profit for AI companies for a long time, but it's more evident than ever after Anthropic's IPO filing this week. Enterprises could benefit from open weights for many reasons, but perhaps the most interesting is that these models are being tailored to specific enterprise tasks, such as coding in ML4's case. When talking to Janiewicz, she highlighted the difference between simply improving productivity, as a chatbot can do for employees, and actual workload transformation: "We think there's a very vast and bright future for open-weight models that are focused on enterprise transformation and ROI rather than productivity."
TOGETHER WITH STACKAI
Build No-Code AI Agents With Enterprise-Grade Governance
Anyone can build an AI agent. Almost nobody can get one past IT. StackAI is built for both.
Your builders get:
Drag-and-drop across SharePoint, Slack, Teams, databases and 4,000+ systems
Chat assistants, forms, Slack apps and API endpoints in minutes
Your IT team gets:
Deployment anywhere, whether that's our cloud, your VPC or fully on-premise
Built-in review and rollback on every release
Granular RBAC, SSO and audit logs
SOC 2 Type II, ISO 27001, HIPAA and GDPR compliance
Agents in production in weeks. Trusted by Morgan & Morgan, BAE Systems, City of Santa Monica, LifeMD + more.
CYBERSECURITY
Why AI has ended security by obscurity
Last week's discovery of the widespread PHP vulnerabilities may only be the beginning of a new class of exploits.
OpenAI's discovery of critical vulnerabilities in PHP, the open-source programming language used by an estimated 70% of websites, sent shockwaves throughout the AI and cybersecurity communities, resulting in the FBI stepping in to encourage organizations to quickly patch their sites. However, these vulnerabilities aren't new exploits, but holes that existed for more than a decade.
What's concerning about this incident isn't that these vulnerabilities existed in the first place, but rather the fact that they can now actually be taken advantage of, Rich Campagna, SVP of Network Security Products at Palo Alto Networks, told The Deep View. To put it plainly, AI's cyber capabilities have opened up a door that allows previously overlooked vulnerabilities to be exploited, he said.
"In this particular case, these were vulnerabilities that apparently have been known for more than two decades, but were deemed unexploitable," said Campagna. "We can no longer have this situation where weaknesses that are known to exist can be assumed to be non-exploitable."
Given that PHP extends to nearly "every internet-facing web asset on the planet," Campagna said, these vulnerabilities were a "shock to the system" for organizations that AI may force many to take security more seriously. That shift can be seen in two ways:
For one, vulnerabilities can no longer be dismissed or deemed non-exploitable, no matter the size of your organization. Security by obscurity, or assuming that you aren't going to be a target because of your organization's small scale, isn't an option anymore. "If a [hacker] is just after the profit motive … automatically everyone becomes a target," he said.
Additionally, the window to fix vulnerabilities is rapidly shrinking, he said. This is what OpenAI has called the "defender's window," or the amount of time that an organization has to find and fix vulnerabilities before bad actors do. Time is a luxury that enterprises no longer have, said Campagna. Crowdstrike has reported that exploit time has shrunk to hours and is advocating that the patch window shrink from 30 days to 30 minutes.
Though the rapidly advancing nature of AI may leave organizations struggling to play catch-up, Campagna said that the advantage could eventually shift back to cyber defenders. In order for that to happen, however, enterprises and organizations need to embed AI into the software development lifecycle (SDLC) from the jump, limiting as many vulnerabilities as possible from making it into the hands of the customer.
"You're using the same tool the attacker could potentially use to find and then fix vulnerabilities before the attacker even has their hands on the software that previously had that vulnerability," said Campagna. "Look for these things before they ship, and get the leg up on the attacker."

Though AI presents both the problem and the solution, the issue isn't about the technology itself, but rather with the organizations that are being forced to reckon with it. Though large scale enterprises in critical industries like finance, healthcare and infrastructure are more likely to take these kinds of risks seriously, the PHP vulnerabilities revealed the sheer scale of the problem, impacting any organization with an internet presence. And with AI driving down the cost curve for hackers, smaller, less resourced organizations and businesses may be the most vulnerable simply because they don't understand the gravity of the risks, or may not have the resources or expertise to properly defend themselves.
TOGETHER WITH AMD
AMD Helion™ Agentic AI Rack
AMD Helion™ Agentic AI Rack is an open, rack-scale reference design purpose-built for agentic AI and powered by AMD EPYC™ 9006 Series Server CPUs.
Configurations built for your agentic needs, from a CPU-only rack designed for hyperscale deployments to an integrated CPU and GPU rack for enterprise environments, both built on OCP standards.
HARDWARE
Amazon’s AI strategy has a home-field advantage
Amazon Alexa devices dominate the smart home segment, capturing as much as two-thirds of the US market. Now, with an upgraded Alexa and new devices, the company is pushing to extend that lead.
On Wednesday, Amazon launched its newest product lineup, including next-generation Echo Show, Echo Dot, and Echo Studio models with design upgrades, as well as new devices such as the Alexa Photo Frame and Echo Time. Underlying all of these products is the latest version of Alexa+, with a new look and feel designed to make interactions more seamless and to provide better assistance.
Amazon says Alexa can now hold more natural conversations, reason more deeply, ask clarifying questions, and even handle complex multi-step requests. Ultimately, this should help Alexa provide near-instantaneous, real-time assistance when needed, while also helping it discern when larger tasks require longer thinking.
“She [Alexa] can do three, four, or five things at the same time," Panos Panay, Amazon's SVP of Devices, Alexa, and Leo, told the media at its New York launch event. "She looks up the flight, she checks my calendar, she creates a notification, she sets a packing schedule, she moves the conflict, she then puts a notification when I need to leave the house, and then she tells me the weather in New York, all of it in one moment."
The products have also been optimized to take advantage of these new capabilities. For instance, when you interact with Alexa on the new Echo Show 16, instead of showing a transcript, Alexa composes interactive content in real time to show relevant visuals, videos, calendar events, and more. Your conversations are now organized into Cards that make it easier to revisit prior conversations.
While Alexa is the powerhouse of the new devices, the new products themselves are impressive in their own right:
Echo Show 16: Redesigned to have a 16-inch HD screen, available in the standard and Nanomatte displays, and has a sleek, slim design.
Echo Dot: The most capable portable speaker yet, featuring the AZ3 chipset for better conversations with Alexa+, a smart home hub, an eero WiFi extender, and Omnisense to sense its surroundings.
Echo Studio with Home Camera: The speaker now includes a camera to give Alexa visual intelligence and let users check in on the room when away.
Alexa Photo Frame: A smart frame with a 10-inch high-definition anti-glare touchscreen, Alexa+ access, and photo-specific Alexa features.
Echo Time: A smart clock with a customizable display that has sleep sensing technology and wakes you up when you’re in light sleep for easier wake-ups.

Amazon has several advantages in this space. For one, it was an early entrant into the smart home market, starting as early as 2014. As a result, many people will likely stick to what they know, expanding and upgrading their ecosystem accordingly. It also has insights it's collected from users over the years about what they prefer in a product, and can apply those insights when building new ones. For instance, I was a huge Amazon Halo fan before it was discontinued, and when I spoke with the product manager, I learned that some of the underlying technology in that product now powers the Echo Time. Finally, Amazon's extensive product ecosystem has been around so long that many third parties have also created smart home products compatible with Alexa. That enables really creative new experiences, such as the new Alexa Home Map, an interactive 3D map that lets users see and control their home, showing every Echo device and any others linked.
LINKS

Nvidia CEO Jensen Huang reportedly targeted in Chinese spy plot
Google expands AI search ads to international markets to create new revenue streams
Samsung Galaxy Buds On debuts as $229 cuff-style open-ear earbuds, loaded with AI
Circuit Mind raises $25 million to automate electronics design with AI
Apple MacBook Pro debuts OLED display, touch input, with M5 Pro and Max chips
Alphabet shares fall 13% on weak search and ad sales

ChatGPT Dots: Users can now text their dot
Claude for Legal: new gallery of ready-made artifacts for contract review, and more
ChatGPT: iCloud Mail and Calendar plugins are now available
Gemini Notebook: You can record up to 1 hour of live audio directly in the mobile app
Granola voice typing: The meeting summary app now has a Wispr Flow-like feature

Anthropic: Applied AI Demo Engineer
OpenAI: Applied AI Engineer, Startups
SharpAtoms: Generative AI Engineer
IBM: Applied AI Specialist-Application Operations
A QUICK POLL BEFORE YOU GO
Do you own an AI smart home assistant? |
The Deep View is written by Nat Rubio-Licht, Sabrina Ortiz, Jason Hiner, Faris Kojok and The Deep View crew. Please reply with any feedback.

Thanks for reading today’s edition of The Deep View! We’ll see you in the next one.

“Sun rays more realistic. Sparse flowering flora more likely.” “Light diffusion looks more natural.” “The tails in motion is not what I would expect AI to add to the picture.” “The glare to mid-left, along with the blurred motion of the cows' tails in the middle of the picture and the randomness of the fencing, told me this was the real one.” |
“Too many flowers, plus the animals were not anatomically correct.” “The fake image has the hallmark AI vibrant color use and an exaggeration that gives it away.” “Cows tend to crush the grass where they walk, AI seems to think they float down from above.” “No lens flare on the fake one.” |


If you want to get in front of an audience of 750,000+ developers, business leaders and tech enthusiasts, get in touch with us here.













