Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

AI Agents Are Learning to Build the Worlds They Train In

Three research projects released this week demonstrate that AI agents can improve by learning to simulate the digital environments they operate in, rather than only learning which actions to take. The flagship, Qwen-AgentWorld from…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Three research projects released this week demonstrate that AI agents can improve by learning to simulate the digital environments they operate in, rather than only learning which actions to take. The flagship, Qwen-AgentWorld from Alibaba's Qwen team, shows that agents trained inside a learned simulation outperform agents trained only in the real environment. Two companion projects, DataClaw0 and OpenThoughts-Agent, tackle the same challenge from the data side.






Key facts





  • What: Three new open research projects point the same way: instead of only learning what to do, agents are learning to simulate the environment itself, so they can practice in their own imagination.


  • When: 2026-06-24


  • Primary source: read the source (arXiv 2606.24597)



The shared idea is straightforward. Most work on AI agents — systems that browse the web, run terminal commands, fix code, or navigate apps — has focused on policy: given the current situation, what action should I take next? That is like training a chess player only on which move to make. Strong players also carry an internal model of the board — if I move here, the opponent will likely move there, and the position becomes this. That internal "if I do X, the world becomes Y" is what researchers call a world model, and these three projects bet it is the missing ingredient for capable agents.



Qwen-AgentWorld is the clearest example. It trains a model from the start to simulate seven kinds of digital environment — a web browser, a terminal, a phone, a coding workspace, and more — by predicting what each environment will do in response to an action. Built on more than ten million real interaction traces, it comes in two sizes that use a committee-of-specialists design to stay fast despite their scale. The team also built AgentWorldBench, a yardstick to score how realistic and consistent those predictions are, and they report their largest version edging out leading proprietary models at this particular task of imagining-the-next-state. The full write-up is on its Hugging Face paper page, with open weights and code on GitHub.



The payoff matters. If a model can faithfully simulate an environment, you can train other agents inside that simulation instead of inside the slow, expensive, sometimes irreversible real thing — the difference between teaching a pilot in a flight simulator versus only in a real plane. The Qwen team reports that letting agents practice in this learned simulation produced bigger gains than training in the real environment alone, because the simulator is faster, safer to fail in, and easy to run a thousand times in parallel. This is a controlled, narrow result, not a guarantee that simulated practice beats reality everywhere, but it is a concrete sign the approach pays off. It also connects to a broader push, since training agents by trial and error is the heart of reinforcement learning after pre-training.



The other two projects attack the same problem from the data side. DataClaw0 treats the messy job of turning raw video, images, and logs into clean training material as a skill an AI can learn, rather than a chore humans do by hand — an agent that tailors its own study material. OpenThoughts-Agent does something quieter but valuable: it openly publishes the full recipe, the data, and the trained model for building a broadly capable agent, so that the secret sauce other labs keep private becomes something anyone can inspect and improve. Taken together, the three projects show that agents are learning to simulate their environments, prepare their own training data, and share the recipes — the machinery of practice is becoming part of the model.



The significance: the bottleneck on agents has been that the real world is a terrible classroom. It is slow, you cannot rewind it, and a mistake can be costly. A model that can convincingly simulate the world gives agents a place to rehearse, and rehearsal at scale is how skills compound. This is the same logic that made simulators central to robotics and self-driving, now arriving for software agents.



The caveat is the whole ballgame. A simulator is only as useful as it is accurate, and the gap between a world model that is mostly right and one that is reliably right is enormous. An agent that practices against a flawed simulation can get very good at a world that does not exist, then fall on its face in the real one — the classic "looks great in the lab, fails in the field" trap. The headline scores come from the teams that built the systems, measured on benchmarks those same teams designed, and "my simulation is realistic" is exactly the kind of claim that needs outside groups to reproduce before anyone treats it as settled. The direction is genuinely exciting. Whether these particular world models are accurate enough to train agents you would actually deploy is the question the next few months will answer.






Originally published on Ground Truth, where every claim is checked against the primary source.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - AI Agents Are Learning to Build the Worlds They Train In
id: a0d38272-fce7-4154-a0be-5c48975a5bed
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "AI Agents Are Learning to Buil" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("AI Agents Are Learning to Build the Worl")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*AI Agents Are Learning to Build the Worl*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "AI Agents Are Learning to Build the Worl"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich AI Agents Are Learning to Build the Worl.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten AI Agents Are Learning to Build the Worlds They Train In

Thematisch verwandte Begriffe: Agents, Learning, Build, Worlds · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100620 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an ove…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag