securitylab_nJuly 16, 2026🇷🇺Translated from Russian

Former OpenAI CTO Mira Murati Launches Thinking Machines' Inkling: Open-Weights Multimodal AI Model with 975 Billion Parameters and Self-Training Demo

Releasing yet another powerful language model is no longer enough to stand out. Thinking Machines, the startup founded by former OpenAI technical director Mira Murati, has chosen a different approach to attract developers. The company unveiled Inkling, its first open-weights model that can be freely used and adapted for specific tasks.

Inkling is a multimodal model capable of processing text, images, and audio without separate processing modules for each modality. It is built on a mixture-of-experts architecture containing 975 billion parameters, of which only 41 billion are active at any given time. This design significantly reduces computational costs. The model supports a maximum context length of 1 million tokens and was trained on a dataset of 45 trillion tokens that included text, images, audio, and video. Alongside the main model, the company released a preliminary Inkling Small version with 12 billion active parameters optimized for lower-cost and faster deployment.

One of Inkling’s standout features is the ability to regulate reasoning depth. Developers can choose how many computational resources the model should allocate to solving a problem. For simple queries the system responds faster and consumes fewer tokens, while for complex tasks it can increase internal computation. According to the company, in certain programming scenarios Inkling uses approximately three times fewer tokens than several other open models while maintaining comparable quality.

Thinking Machines acknowledges that Inkling does not yet aim to be the strongest model on the market. Closed models from OpenAI, Anthropic, and Google continue to lead most comprehensive benchmarks, while Chinese models remain ahead in certain disciplines. Instead of competing for top rankings, the company focused on creating a versatile foundation for subsequent training and customization for enterprise use cases.

To support further development, Thinking Machines offers its own Tinker platform. Through this platform, developers can fine-tune Inkling on their own data without building complex infrastructure themselves. To demonstrate the platform’s capabilities, the company conducted an unusual experiment: Inkling was tasked with training itself. The model autonomously created a training task, executed the process via Tinker, evaluated the results, and switched to the updated version. In the demonstration, it was given the unusual objective of learning to answer questions while completely avoiding the use of one letter of the English alphabet.

The company has also made the model weights available on Hugging Face and added support for popular inference frameworks including Transformers, vLLM, SGLang, and llama.cpp. Inkling is designed not only for cloud services but also for continued training, creation of specialized assistants, and development of autonomous agents capable of executing complex sequences of actions.

The release of Inkling represents an important development for the Western open-weights AI community. After Meta reduced its activity in this area and many organizations began turning to Chinese models, developers now have another major Western-origin solution that can be freely run, modified, and adapted to their own tasks thanks to its open weights.

Related articles

HabrOther

Simple Bridge Panel Offers Self-Hosted Management for Xray and AmneziaWG Connections

A developer frustrated with shared-IP VPN services and growing configuration management overhead has released Simple Bridge Panel (SBP), a lightweight self-hosted interface for administering Xray and AmneziaWG on personal VPS instances. The panel installs on fresh Ubuntu 24.04 servers via a single command and provides one-click deployment of Xray TCP with REALITY, Xray XHTTP, and AmneziaWG, along with group-based access expiration and traffic accounting. It separates the web UI from a privileged local agent that communicates over a Unix socket, allowing controlled management of Docker containers, systemd services, and network routes without granting the interface full root access. Fixed versions of Xray 26.3.27, v2rayN 7.20.4, and v2rayNG 2.2.6 are bundled to avoid compatibility issues encountered with newer releases. Additional features include Whitelist Bypass routes, monthly traffic tracking stored only in SQLite, automatic rollback on failed updates, and QR-code or subscription link generation for clients. The project is published under Apache 2.0 and deliberately targets clean servers to minimize risk of interfering with existing configurations.

HabrOther

Avito Details Security Gates Implementation to Enforce Vulnerability Remediation Without Disrupting Developers

Alexander Trifanov, head of Application Security at Avito, shares a detailed case study on building security gates that block risky deployments while preserving developer experience. The approach relies on asynchronous scanning pipelines using SAST, SCA, secret detection, and YAML Security tools aggregated in ASOC or SOAR systems. Gates are placed at multiple lifecycle points including pre-receive hooks, CI/CD deployment stages, and manual unit-level overrides via a red-button mechanism. Strict false-positive management, deduplication, and emergency bypass controls are highlighted as essential for scalability across thousands of developers. The article covers pre-receive gating limited to ten-second scans, separate library update flows, and Kubernetes integration attempts with Kyverno. Avito reports that even unused red-button capabilities significantly improve SLA compliance without frequent enforcement actions.

AntiMalwareOther

SafeTech Lab Expands SafeTech CA with CDM Module for Automated Certificate Delivery and Renewal

SafeTech Lab has released a new module called CDM (Certificate Delivery Management) for its SafeTech CA platform. The update allows the certificate authority to not only issue digital certificates but also deliver them to endpoints, install them in required stores, and automatically renew them before expiration. Administrators can now manage agents centrally, eliminating the need for custom scripts or separate heavy PKI solutions. The system supports GOST algorithms and operates independently of domain infrastructure, functioning in isolated network segments without LDAP. Additional improvements include root and subordinate CA certificate rotation without breaking trust chains, web-based configuration management, and integration with HashiCorp Vault for centralized credential storage and rotation. Future plans focus on increasing agent autonomy through the web interface.

HabrOther

InfotecsTech Builds Custom Kubernetes-Based Traffic Generator for NGFW RnD and Performance Testing

InfotecsTech developed an in-house traffic generator to support development and testing of its high-performance NGFW cluster in active-active mode. The team rejected commercial solutions from IXIA and Xinertel due to high cost, insufficient flexibility for complex NGFW functions, and geopolitical restrictions. The resulting platform runs on Kubernetes with a master node managing Registry, Discovery, and Crux components while worker nodes host containerized generators. Supported generators include Cisco TRex for throughput and connection testing, SIPp for VoIP scenarios, pyftpdlib-based FTP generator, Yandex Tank with Nginx for live TLS traffic, and Selenium-based legitimate clients against OWASP Juice Shop. Practical scenarios cover VoIP call storms, maximum concurrent connections, 400 Gbit/s UDP throughput, 5 million CPS, and IMIX traffic at 300 Gbit/s with packet loss analysis. The system integrates Camunda for full automation of test scenarios and device configuration.