Don’t swing at everything
Brief
Welcome to this week’s edition of the Threat Source newsletter.
Lately I've found myself thinking a lot about the Australian TV series Mr. Inbetween (IMDb 8. 7/10) — not because I'm a hitman for hire, but because I literally feel in-between. Specifically, in-between what I'd call the "pre-Mythos" and “post-Mythos” eras. We've crossed a capability threshold, and it's not just one model family driving that — Codex 5. 3 and GPT-5.
5 deliver comparable or better performance , and Tulongfeng or GLM-5. 2 (an incredibly powerful open-weight model, MIT-licensed) show the frontier isn't limited to closed models anymore.
On the other side of that line, real-world impact hasn't caught up yet and we're living in an artificial buffer zone. For me, defining the “pre-” and “post-” status comes down to the gap between "vulnerability discovery" and "vulnerability publication."