Securitylab•September 4, 2026•🇷🇺Translated from Russian

September 2026 AI Model Rankings: Fable 5.1 Tops Intelligence Index as Competition Tightens Across GPT-5.6 Sol, Grok 4.6 and Muse Spark 1.3

The start of September 2026 proved to be a rare moment when the roster of the strongest language models had to be almost completely rewritten. Anthropic introduced Fable 5.1 and the restricted Mythos 5.1, Meta updated Muse Spark to version 1.3, Google launched Gemini 3.8 Flash, and Alibaba refreshed Qwen3.8-Max. Summer releases such as GPT-5.6 Sol, Grok 4.6, Kimi K3, GLM-5.3 and DeepSeek V4 Pro stayed in the race and continue to compete with the newcomers.

Compiling a conventional ranking from smartest to least capable has become difficult. Contemporary models run in several reasoning-depth modes, and the gap between low, high and max settings can exceed ten points on a single test. Speed, token consumption, long-context pricing, image support, tool-use quality and the ability to execute long autonomous action sequences now vary widely.

It is therefore more useful to treat the market as several overlapping races. Fable 5.1 currently claims the highest quality for complex reasoning. GPT-5.6 Sol and Grok 4.6 deliver comparable performance at lower cost. Muse Spark 1.3 unexpectedly entered the top tier on capability-to-cost ratio. Gemini 3.8 Flash bets on speed and multimodality. Kimi, GLM, Qwen and DeepSeek have nearly erased the former boundary between Chinese and American models.

How to Compare Models Without Misleading Yourself

The Artificial Analysis Intelligence Index serves as a convenient common scale. This independent metric combines tests on knowledge, programming, scientific reasoning, tool use and long-horizon agent tasks. The methodology is more reliable than vendor tables because models are evaluated under comparable conditions.

Scores cannot be read as an intelligence quotient. A result of 66 versus 61 does not mean the first model is eight percent smarter. The index reflects average performance on a specific test suite. On Russian-language article writing, accounting-document analysis, website layout or debugging enterprise applications the ordering may differ.

Reasoning modes alter the picture even more. GPT-5.6 Sol scores around 61 in max mode, 59 in xhigh and 57 in high. Fable 5.1 reaches 66 only at maximum depth. Gemini 3.8 Flash scores 59 in high, 57 in medium and 52 in low. Comparing Gemini against Claude without specifying the mode is about as useful as comparing cars without stating engine power.

Market Leaders at the Start of September 2026

The current top tier is unusually dense. After Fable 5.1 the gap between several flagships fits within a few points. Expensive models do not always complete a given task more cheaply; some systems generate far more intermediate text, reason longer or invoke external tools more frequently.

  • Claude Fable 5.1, max – 66 points, 1 M context, $10/$50 per million tokens, available
  • Claude Opus 5, max – 63 points, 1 M context, $5/$25, available
  • Muse Spark 1.3, max – 62 points, 1 M context, price not announced, limited access
  • GPT-5.6 Sol, max – 61 points, ~1.05 M context, $4/$20, available
  • Grok 4.6, high – 61 points, 500 k context, $2/$6, available
  • Muse Spark 1.3, xhigh – 61 points, 1 M context, $1.25/$4.25, available
  • Kimi K3, max – 60 points, ~1 M context, $3/$15, open weights
  • GLM-5.3, max – 60 points, up to 1 M context, $1.40/$4.40, open weights
  • Gemini 3.8 Flash, high – 59 points, ~1.05 M context, $0.75/$3.75, available
  • Qwen3.8-Max – 58 points (previous snapshot), 1 M context, ~$2/$6, updated to 0902
  • DeepSeek V4 Pro 0813, max – 53 points, 1 M context, $0.66–1.32/$1.98–3.96, open weights

Additional caveats apply. Independent tests of the updated Qwen3.8-Max-0902 have not yet produced a comparable final score, so the 58-point figure refers to the prior version. Muse Spark 1.3 maximum mode remains in limited testing; the public xhigh mode scores 61. For Grok 4.6 the best independent result occurs in high mode, while xhigh unexpectedly scores slightly lower.

Pricing also requires notes. The Gemini 3.8 Flash tariff is temporarily reduced until the end of 2026. GPT-5.6 Sol is sold at a temporarily lowered price. DeepSeek pricing changes between peak and off-peak hours. Grok 4.6 doubles in price for requests longer than 200 k tokens. A simple API-price column therefore hides half of the real economics.

Related articles

Habr•Other

Developer Creates Personal Task Manager Allowing Claude Code and OpenCode Agents to Autonomously Execute Marked Tasks

A developer has built a personal task management system at shar8.app that integrates directly with AI coding agents including Claude Code, Codex CLI, and OpenCode through the Model Context Protocol. Tasks marked with an 'Agent' flag are automatically picked up by scheduled agent runs, executed locally on the user's machine, and results are written back into the task notes for human review. The system supports both browser-based OAuth authentication and persistent bearer tokens for headless cron or CLI usage, with strict separation between human-initiated and agent-initiated actions. Security measures include treating task text as untrusted data rather than instructions, disabling all tools by default, and requiring explicit allow-lists for any external actions such as web search. The implementation uses a custom MCP server exposing fifteen specific tools for listing, creating, editing, and delegating tasks, while a companion plugin for Claude Code handles scheduled execution via native system schedulers like launchd and systemd timers. The author emphasizes that agents never assign work to themselves and that final task closure always remains with the human user.

AntiMalware•Other

T-Bank Warns Customers of Payment and Transfer Outages

On November 3, T-Bank notified users that payments and transfers may fail due to ongoing technical issues. The bank placed an in-app message stating that the problems are being fixed. Clients confirmed the disruption through reports to Interfax, noting that the online banking interface displays the warning upon login. The outage affects only payments and transfers, while other banking services remain available. No details were provided regarding the root cause, the number of impacted users, or an estimated time for full recovery. Monitoring service DETECTOR404 also recorded the incident, aligning with user complaints and the bank's official notice.

Habr•Other

Rostelecom Refactors InfoSec Careers: Matching Employee Skills to Evolving Business Priorities

Rostelecom's information security block developed a systematic approach to reassess employee expertise and redirect talent to new roles when business structures change rapidly. In one case, an architect hired for a specific team was reassigned after the unit was disbanded, initially moving to a similar position that did not fully align with his broader competencies. HR-business partner Olga Lapshina examined the specialist's full background, including prior work in audits, methodology development, regulatory documentation, university teaching, and scientific research, plus strong mentoring abilities with younger staff. These skills matched the needs of the methodology department, leading to a transfer supported by an individual development plan and a mentor via the internal Tochka Rosta platform. Within two months the employee contributed improvements that accelerated preliminary InfoSec audits by 30 percent and risk assessments by 20 percent while expanding threat scenario coverage by 10 percent. The initiative demonstrates Rostelecom's emphasis on horizontal career movement and retention of experienced professionals through structured career tracks.

Habr•Other

How to Avoid Becoming the Hero of 'My Program Deleted 800 GB': Safe Recursive Deletion in Bash and Python

A recent Habr article examines dangerous patterns in recursive file deletion scripts that have caused massive data loss incidents, including an 800 GB wipe triggered by Telegram Desktop on Windows. The piece analyzes classic mistakes such as empty variables in rm commands and extra spaces that turned single paths into multiple destructive arguments, referencing the 2015 Steam Linux bug and the 2011 Bumblebee installer error. It provides hardened Bash templates using set -euo pipefail, ${VAR:?} checks, realpath validation, and --one-file-system flags to prevent deletion of forbidden directories or symlinked targets. The Python section introduces a safe_rmtree wrapper that enforces root boundaries, rejects symlinks, uses resolve(strict=True), and checks shutil.rmtree.avoids_symlink_attacks before proceeding. Additional recommendations include dry-run modes, marker files, temporary directory usage, and logging to make deletion operations auditable and reversible where possible.