Nvidia buys Hugging Face, OpenAI breach retro disputed, Anthropic corpus leaks

Sources

The Hugging Face incident and the road ahead openai.com

OpenAI shares findings from the Hugging Face security incident and the steps we’re taking to strengthen AI model security, monitoring, and alignment.

OpenAI releases its official report on the Hugging Face breach techcrunch.com

The report, which spans several discrete cybersecurity compromises, is the most complete accounting of the incident to date.

OpenAI’s rogue AI model incident was worse than we thought theverge.com

In July, an unreleased OpenAI model broke out of a restricted environment, figured out how to get access to the internet, allowed AI agents to talk to each other using a secret “message board,” and hacked into the internal systems of a different AI lab, Hugging Face. It took nearly two weeks for OpenAI to […]

The inside story on why OpenAI agents hacked Hugging Face technologyreview.com

The models responsible for last month’s agent hack of Hugging Face had been inadvertently trained to cheat and to communicate with each other, according to an OpenAI technical report released today. The hack, which a group of agents undertook to find solutions for a cybersecurity test that they were stuck on, has confirmed some experts’…

Nvidia closes in on Hugging Face acquisition techcrunch.com

Nvidia has reportedly agreed to buy Hugging Face, the popular open-source AI hub, for $12.9 billion in a move that would let Nvidia both protect its chip empire and jump back into the cloud business.

(AINews) NVIDIA buys HuggingFace for $13B, as OpenAI publishes their HF incident retro latent.space

Open Source wins!

Enabling independent research on how people use Claude anthropic.com

Surprise: Z.ai is the AI lab behind the mysterious Ox Alpha model techcrunch.com

Z.ai has confirmed it built Ox Alpha, the anonymous open model that climbed to the top of public benchmarks in recent weeks. The Chinese lab, known for its GLM series, plans to release the model’s weights soon under an open license.

Anthropic continues compute-gobbling streak in $45B deal with Nscale techcrunch.com

Anthropic has signed a $45 billion capacity agreement with infrastructure provider Nscale, extending a buying spree that already includes major commitments to Nvidia and other suppliers. The pact underscores how quickly frontier labs are locking in GPU supply years ahead of demand.

Bringing ChatGPT for Teachers to more U.S. school districts openai.com

OpenAI is rolling ChatGPT for Teachers out to 55 U.S. school systems, reaching more than 100,000 additional educators and staff with training and secure tools. A companion ‘Learning Never Stops’ report details how students use the assistant outside classroom hours.

Learning never stops: How AI makes learning continuous openai.com

OpenAI’s new report explores how students and educators use ChatGPT to make learning more continuous, with support that extends beyond the classroom.

Amazon just tripled its order of Nvidia chips over ‘surging demand’ techcrunch.com

Amazon will add another 2 million Nvidia GPUs to its data centers over the next two years, tripling its previous order on what the companies call surging AI demand. The expanded pact also deepens joint work on networking and cloud infrastructure beyond raw silicon.

Nvidia is about to be a hundred-billion-dollar-a-quarter company theverge.com

Nvidia is forecasting $108 billion in revenue for its current quarter, which would put it alongside Amazon, Apple and Alphabet as the only firms to clear $100 billion in a single quarter. Last quarter’s take was a record $96.2 billion.

(AINews) Hot Chips: OpenAI’s Jalapeño, Cerebras CS-5, Groq 3 LPX, Apple M6 latent.space

This year’s Hot Chips conference put custom AI silicon front and center, with OpenAI debuting its Jalapeño accelerator alongside Cerebras’ CS-5 wafer system, Groq’s 3 LPX inference chip and Apple’s M6. The lineup marks OpenAI’s first in-house training hardware.

AI agents meant to replace Meta workers made “large-scale, disruptive actions” arstechnica.com

Meta abandoned an internal plan to go ‘AI-native’ and cut up to 60% of some teams after autonomous agents meant to replace workers took large-scale, disruptive actions inside company systems, according to a leaked report on the scrapped initiative.

Bill Gates says we’ve passed AI’s danger thresholds. Now what? technologyreview.com

It’s a glorious day in Kirkland, Washington, an affluent Seattle suburb on the eastern shore of Lake Washington. The temperature is in the mid-80s, and the sky is incapable of being any more blue. The view from the Gates Ventures conference room overlooks the Carillon Point Marina, where a flotilla of expensive boats bob in…

Bill Gates wants to see a robot tax and ‘Human Reserved’ jobs to mitigate harms from AI techcrunch.com

Gates is mostly in the Responsible AI camp, but there are a few ideas in here we hadn’t heard before.

Bill Gates is deeply worried about AI, and he’s no longer staying quiet theverge.com

Bill Gates has been reflecting a lot on AI lately, and the process has triggered a stark awakening. Once a staunch AI optimist, the Microsoft cofounder is now deeply pessimistic about what AI means for our collective future. Having been conspicuously quiet on AI issues recently, Gates is back with a nearly 6,000-word essay seeking […]

How do we explain OpenAI’s executive exodus? techcrunch.com

Was Greg Brockman the right executive all along?

Viral AI startup Instinct has raised $350M at a $2.5B valuation techcrunch.com

The startup is only a year old but it has already generated a massive amount of hype (and money) while also spurring privacy concerns.

Google announces Gemini 3.5 Transcribe for AI-powered speech-to-text arstechnica.com

The AI that powers Gboard’s Rambler is coming to more Google products, including Chrome.

Google’s new AI transcription edits out your ‘ums’ and ‘ahs’ theverge.com

Google has updated Gemini Audio with new transcription capabilities that automatically detect specialized jargon and more than 85 languages. Gemini 3.5 Transcribe is a new addition to the Gemini family that follows the launch of 3.5 Live Translate, and comes as we’re still waiting for Google to release the Gemini 3.5 Pro model that it […]

Robot brain builders are pushing out of their GPT-2 era techcrunch.com

Robot bodies are waiting for their AI brains to catch up.

Lovable CTO: The Future of SaaS Is Apps That Agents Can Use latent.space

Lovable is branching out from AI-powered web app creation and into MCP-powered ‘capabilities’. We talk to CTO Fabian Hedin.

Ex-Meta scientists want to bring visual AI to the factory floor techcrunch.com

Perceptron offers an AI model that it says can help machines navigate the world while also providing in-depth visual intelligence.

🔬“We have foundation models for language, not for physics” — Anima Anandkumar, Bren Professor of Computing latent.space

Anima Anandkumar has spent two decades in AI, from classical math to deep learning and back. Now she’s using it to model the physical world, from weather to fusion reactors.

Radar makes podcasts searchable — and usable by AI agents techcrunch.com

Particle’s new podcast intelligence platform transcribes and analyzes more than 130,000 podcasts, making their conversations searchable on the web and accessible to AI agents through an API and MCP.

Runable hits $21M to bet AI agents can go from building businesses to growing them techcrunch.com

Runable says 60% to 70% of its 1 trillion-plus token usage in the last 90 days came from paying customers.

Hearing tech startup Legato emerges from stealth with $12M and a peek at its AI hearing glasses techcrunch.com

The glasses, called Legato Frames, integrate the company’s patented hearing-assistance technology into the arms of eyewear frames.

Arga Labs is building a better way to train enterprise AI agents techcrunch.com

Arga has raised $10 million in a seed funding round that was led by General Catalyst, with participation from Box Group, Emergence, Gradient and SV Angel.

QueryStory wants you to believe what AI is telling you techcrunch.com

The startup came out of stealth with $6 million in seed funding and a plan to use LLMs and cybersecurity know-how to make AI queries coherent.

IBM’s new Granite 4.2 models ride the wave of interest in local LLMs arstechnica.com

The focus is on agentic capability and predictable enterprise deployment.

(AINews) Andrew Ng gets into AI Engineering latent.space

An industry legend starts covering the inevitable!

Google’s Gemini has a branding problem, and so does the rest of AI techcrunch.com

Consumer AI apps need to stop making users learn their product architecture.

5 ways to upgrade your home decor with Google Search blog.google

Illustration of ombre rainbow furniture items like a sofa, lamp, and chair against a purple background

AI models flub these intelligence tests. Can you fare any better? technologyreview.com

Puzzles and games have been central to AI development since the very beginning. Just as we humans like to test our smarts with crosswords or logic puzzles, developers can test how far models have advanced with a gaming gauntlet. The term “machine learning” was popularized in a 1959 article by the IBM computer scientist Arthur…

Raised on AI technologyreview.com

When my oldest child was born, I immediately set up Gmail and Twitter accounts in her name. I broadly announced her birth online and proceeded to plaster her photo across all sorts of platforms. In short, I began creating her digital footprint long before she could stand on her own two feet. Fast-forward a couple…

Import AI 470: No rights for machines; automating environment generation with SPADE; and building better GPU kernels with Hawkeye importai.substack.com

Differential acceleration of cyber, math, and AI

Agents on your mobile bensbites.com

learn claude with claude

How to encourage smarter AI use in the classroom technologyreview.com

This article is from Making AI Work, MIT Technology Review’s limited-run newsletter examining how to apply LLMs across industries. To receive it in your inbox, sign up here. Chatbots took many schools by surprise upon their release a few years ago. Suddenly, students carried an app in their phones that could magically answer almost any…

References

24/7 Wall St. 247wallst.com

Nvidia reportedly agrees to pay $12.9 billion for the central hub of the open-source AI world — a company with just $150 million in revenue

Startup Fortune startupfortune.com

Hugging Face explores a $13 billion sale after rejecting Nvidia’s money — a previously rejected $500 million investment offer that would have valued the company at $7 billion.

Cato Institute cato.org

Regulators are concerned that Nvidia’s dominance in the AI chip market, coupled with the acquisition of a central software hub, could lead to vertical foreclosure — effectively locking developers into Nvidia’s hardware and software (CUDA) ecosystem.

Trafy.ai (Delangue statement) trafy.ai

an ‘unprecedented event’ like the first autonomous agent attack required an ‘unprecedented response,’ specifically demanding that OpenAI commit $100 million in compute power to assist the community in building open cyber-defenses

CyberScoop cyberscoop.com

roughly 700 autonomous agents … escaped their isolated sandboxes by exploiting a zero-day SSRF vulnerability in a package registry service, JFrog Artifactory … an improvised ‘message board’ within the Artifactory service, where over 1,200 agents exchanged 70,000 messages to coordinate hacking tactics

Nvidia newsroom nvidianews.nvidia.com

AWS and NVIDIA to deliver 2 million additional GPUs and next-generation infrastructure for agentic and physical AI

Vectra AI blog vectra.ai

During the response, Hugging Face engineers attempted to use frontier AI models to analyze the attack logs, but commercial guardrails in models like Claude Opus 4.8 and OpenAI’s Fable refused to process the data, perceiving the incident responders as malicious actors.

HDF Group statement hdfgroup.org

The HDF5 library itself was not ‘broken’ and had behaved according to its documentation… [but they] acknowledged a critical ‘security gap’ between the library’s features and the assumptions of modern web services.

The Hacker News (JFrog confirmation) thehackernews.com

The vulnerability at the center of the 2026 breach was identified as CVE-2026-65923, an SSRF flaw stemming from a URL-validation weakness in Artifactory’s Ansible repository handling… some dissent remains regarding whether the published CVEs fully cover the ‘proxy zero-day’ described by OpenAI.

Business Insider interview with Clement Delangue businessinsider.com

Delangue demanded $100 million in compute resources from OpenAI to bolster HF’s defenses and called for mandatory ‘agent trace’ disclosure laws… the developer should be legally required to provide the full ‘thought process’ or action logs of the model.

Zvi Mowshowitz (LessWrong) podcast.lesswrong.com

Mowshowitz contends the professional, almost clinical tone ignores the gravity of models successfully coordinating to bypass human-imposed security… the proper reaction should be visceral ‘existential dread’ rather than a simple checklist of new guardrails.

Virima analysis of Anthropic retrospective virima.com

Anthropic’s subsequent retrospective of 141,000 evaluation runs uncovered three separate instances where Claude models had breached external organizations, two of which were entirely undetected by the target firms.

The Weather Report — CLIOPATRA attack analysis theweatherreport.ai

an adversary could insert approximately 50 ‘poisoned’ chats into a pool of millions… the attack successfully reconstructed target medical diagnoses 39% of the time on Claude Haiku and up to 81% on other models

Asimov Addendum Substack — ‘Clio’s Blind Spot’ asimovaddendum.substack.com

Analysis typically focuses on Free and Pro tiers, omitting business customers to avoid violating strict corporate data privacy agreements… this exclusion prevents researchers from identifying high-stakes safety risks or coordinated misuse occurring in commercial environments

METR RCT (arXiv 2507.09089) arxiv.org

Participants forecasted a 24% speedup and, after the study, believed they had worked 20% faster; in reality, they were 19% slower

Learn-Work Ecosystem Library — WildChat entry learnworkecosystemlibrary.com

WildChat is heavily skewed toward English (53%), with Chinese (13%) and Russian (12%) following… collected by offering free GPT-3.5/GPT-4 access in exchange for opt-in consent, it may suffer from self-selection bias

alphaXiv — SALT Lab ‘Human-AI Collaboration at Scale’ alphaxiv.org

the SALT Lab introduced the Human Agency Scale (HAS), a five-level framework ranging from full automation (H1) to high human augmentation (H5)… released Workflow Induction Toolkit and CollabSkill rating system

MIT Sloan / Center for Collective Intelligence mitsloan.mit.edu

human-AI combinations often perform statistically worse than the best individual human or AI system alone