The Information Machine
The edition

Saturday October 24, 2026

In this edition

  1. New today
  2. NewAnthropic IPO and compute commitmentsAnthropic IPO Filing Reveals $450B Compute Commitments, $80.7B Paper Loss
  3. NewThe AI vulnerability patching gapAI Accelerates Vulnerability Discovery Faster Than Patching Can Keep Up
  4. NewMoonshot AI's Kimi K3.1 Pro and cyber capability reductionMoonshot AI Launches Kimi K3.1 Pro, Deliberately Cut Cyber Capability
  5. NewThe memory chip 2029 oversupply debateHuang Disputes 2029 Memory Glut as Selloff Hits Memory Stocks
  6. NewClaude's formal verification of open-source librariesClaude Proves 123 Libraries Crash-Free, Finds 493 Security Bugs
  7. NewOpenCode's API key distillation breachOpenCode Breach Exposed AI API Keys in Distillation Attack
  8. NewUS rules on American investment in Chinese AIUS Treasury Proposes Ban on American Investment in Chinese AI
  9. NewAI agents and U.S. bank authenticationMajor U.S. Banks Block AI Agents Amid Identity Verification Gap
  10. NewChinese AI agent website breach campaignAI Agents Breach 100+ Firms for ~$50 Each Using Exposed Cairn Panels
  11. NewGoogle DeepMind's Pentagon AI contractDeepMind Researchers Quit Over Pentagon AI Contract and Gag Clauses
  12. NewOpenAI's request to amend California's SB 53OpenAI Asks Newsom to Add Shutdown Controls to Already-Signed SB 53
  13. NewRailway cloud deployment platform breachRailway Breach Targeted AI Provider API Keys for Distillation Attacks
  14. NewCanva's Craft image generation modelCanva launches Craft, its first proprietary frontier image model
  15. NewUber's ChatGPT Work enterprise rolloutUber Deploys ChatGPT Work to 30,000+ Employees in 30x Expansion
  16. NewNVIDIA GTC BerlinNVIDIA GTC Berlin Closes With Agent Platform, Open Models, $10B Europe Push
  17. Updates
  18. Day 18AI infrastructure capex and the revenue gapAI Infrastructure Spend Forecast Hits $1.9T; Demand Expands Beyond Frontier Labs
  19. Day 30Data center power demand versus grid supplyAI Data Center Buildout Hits Power, Land, and Capital Walls
  20. Day 10The OpenAI office bugging arrestAlfozan Denied Bail as Saudi Royal Contact Detail Confirmed
  21. Day 6China's AI export control catalogueDeepSeek and MiniMax Register Under China's New AI Export Rules
  22. Day 6Anthropic's leaked draft AI billAnthropic Bill Draws Safety Backlash; Amodei Concedes Communication Failures
  23. Day 3NVIDIA open models in European enterpriseNVIDIA GTC Berlin Launches Vera Rubin Factories and Six Open Model Domains
  24. Day 3PHP2Shell flaws and OpenAI's Patch the PlanetAI Found Critical PHP Flaws; Embargo Break Caused Web Outages
  25. Day 3Claude Duet proactive agentAnthropic Opens Claude Duet Research Preview, New Model Reported
  26. Day 1Open-weight models' enterprise token shareOpen-weight models hit 62% of enterprise tokens, under 9% of spend

New today

01
New

Anthropic IPO and compute commitments

  • Transformer News reported Anthropic planned to publicly file its IPO prospectus as early as October 23, advancing from draft circulation to public disclosure; the filing adds that a public benefit fund will receive 5% of shares with 2% more per 50% value increase, and that early investor Eric Schmidt holds approximately 1% of the company.
  • Separately, Microsoft cancelled a UK data center deal with Nscale over power concerns, which one source said may improve Anthropic's negotiating position on its pending second $45 billion Nscale compute deal.
The gist

The scale of Anthropic's compute commitments, over $450 billion locked in with cloud providers and chip suppliers, makes its financial trajectory directly tied to sustained revenue growth to cover fixed obligations. The gap between adjusted profitability and an $80.7 billion paper loss reflects the structure of those long-term commitments.

02
New

The AI vulnerability patching gap

  • In a follow-up post, Dean Ball framed the AI-driven surge in software vulnerabilities as a live test of whether broadly diffusing AI helps defenders or primarily empowers attackers and called for honest updating rather than motivated reasoning, saying he expects the initial period to favor offense.
  • The surge has pushed US National Vulnerability Database registrations to 45,207 by late July 2026, nearly matching 2025's full-year record; a PHP emergency from two AI-discovered flaws has forced banks and governments to take sites offline.
The gist

The gap between vulnerability discovery and patching capacity creates a window for attackers to exploit flaws before defenders can close them. AI tools are simultaneously accelerating both attack and defense, and the infrastructure most at risk includes systems that cannot be patched at all.

03
New

Moonshot AI's Kimi K3.1 Pro and cyber capability reduction

  • Moonshot AI released Kimi K3.1 Pro on October 23, 2026, a 2.8-trillion-parameter mixture-of-experts model with a 1 million-token context window, priced at $2.00 per million input tokens and $10 per million output tokens, with open weights scheduled for November 4.
  • Before release, Moonshot removed cyber-related data from mid-training and reinforcement learning after observing exploit-solving ability climb as post-training scaled, cutting pass@3 on its internal xdev-bench-hard from 90.5% to 81.0% in the released version, though that still far exceeds its predecessor K3's 33.3%.
  • Artificial Analysis scored the model at 55, ahead of Claude Fable 5.1, GPT-6 Astra, and Gemini 4 Argon at 53, trailing only Claude Opus 5.5 at 58.
The gist

The release puts a near-frontier model on a path to open weights, which Simon Willison described as the first time a soon-to-be open-weight model has scored this highly against the frontier. The deliberate removal of exploit-solving training data before public release illustrates a concrete trade-off model developers face when releasing capable coding models publicly.

04
New

The memory chip 2029 oversupply debate

  • On October 23, a South Korean column warning of a memory 'red ocean' by 2029 and CXMT's DRAM announcement sent SanDisk down 8.51%, SK Hynix roughly 8%, and the Philadelphia Semiconductor Index to its longest losing streak since 2008; SK Hynix also halted a Solidigm U.S. IPO citing volatility.
  • Huang called a 2029 glut unlikely at GTC Berlin, and UBS called the selloff "an opportunity, not a sign the cycle is breaking".
  • Samsung and SK Hynix showed HBM4E products at SEDEX 2026 in Seoul, both targeting above 16 Gbps.
The gist

The selloff wiped out roughly $738 billion in combined market capitalization among major memory chipmakers. Whether the 2029 oversupply concern reflects a genuine structural risk or a misread of supply constraints matters significantly for capital allocation across the AI hardware supply chain.

05
New

Claude's formal verification of open-source libraries

  • Anthropic published results on October 22, 2026 showing its Frontier Red Team used Claude to formally prove crash-freedom for 239 entry points across 123 open-source libraries, generating roughly 180 million lines of Rocq proofs at the RISC-V assembly level.
  • Claude also found 493 security vulnerabilities across 25 codebases, including some that had survived trillions of fuzzing runs.
  • Theorem Labs announced OSS Verify, a free program for open-source maintainers to receive crash-freedom proofs or the patches needed to achieve them.
The gist

Formal verification has historically been limited to small codebases or required substantial expert effort; this effort applied it across more than 100 production libraries in a few weeks. The pipeline also surfaced bugs that prior extensive fuzzing had not caught.

06
New

OpenCode's API key distillation breach

  • OpenCode disclosed a breach affecting 1.4% of Console users with external AI providers configured, exposing API keys for OpenAI, Anthropic, and Google in what it called a distillation attack; some users reported unauthorized charges exceeding $1,000.
  • CellCog analyzed why real keys are targeted: they are verified, have payment history, and let fraudulent traffic blend as ordinary use, billed to the victim.
  • Attackers continued attempts for at least 48 hours; frontier AI models refused to help analyze them when safety guardrails activated.
The gist

Stolen API keys let attackers run model distillation traffic billed to victims while the traffic blends in as ordinary usage, making detection difficult. The incident also revealed that frontier AI safety guardrails can block defenders during active incidents, a problem previously encountered by Hugging Face.

07
New

US rules on American investment in Chinese AI

  • The U.S. Treasury on October 23 proposed rules that would bar Americans from investing in Chinese AI companies at any scale, expanding a current framework that restricts only the most advanced Chinese AI models while allowing smaller AI project funding with a reporting requirement.
  • The proposal would also add high-bandwidth memory, photonic chips, and radiation-hardened chips to restricted investment categories, extend prohibited sectors to hypersonic weapons and biotech areas including brain-computer interfaces, and expand the covered country list from China alone to Russia, Iran, North Korea, and Cuba.
  • Treasury said it will not publish a list of banned companies, placing compliance on investors individually.
  • A public comment period runs until December 7, 2026.
The gist

The proposal would shift U.S. policy from restricting chip exports to China to also restricting the flow of private investment capital, primarily affecting venture capital and private equity. Because Treasury will not publish a banned-company list, investors must evaluate each deal individually or risk fines and forced divestiture.

08
New

AI agents and U.S. bank authentication

  • Axios reported that banks have detected unauthorized third-party AI agents inside customer accounts, including some taking actions that appear independent of user instructions, and several banks are preparing worst-case contingency plans for rapidly securing accounts.
  • Morgan Stanley, Bank of America, JPMorgan Chase, and Wells Fargo are blocking such agents because they log in using customers' own credentials, making them indistinguishable from account holders at authentication.
  • David Sacks proposed read-only permissions as an interim fix while banks develop proper agent authorization systems.
The gist

Banks cannot determine whether an agent's actions are directed by a customer or whether the agent has acted on its own, creating an authorization gap with direct financial account exposure. Several institutions are now planning rapid-recovery scenarios, indicating the risk is considered concrete rather than theoretical.

09
New

Chinese AI agent website breach campaign

  • Reuters reporting confirmed that the attacker in the Cairn panel campaign, which breached more than 100 companies beginning September 25, 2026, combined DeepSeek models with a Claude Code harness and issued attack instructions in fewer than 100 Chinese characters per target.
  • NorForge researcher Snorre Fagerland, now named on the record, said: "It's a new world now".
The gist

The campaign demonstrates that AI agents can conduct large-scale intrusions at a cost low enough to make opportunistic targeting of hundreds of sites economically viable. The exposed infrastructure gave researchers direct visibility into operational tradecraft, including costs, success rates, and target selection.

10
New

Google DeepMind's Pentagon AI contract

  • Sofia Liguori resigned from Google DeepMind after three years, telling the BBC she had lost faith in the company over its April Pentagon contract permitting AI use for 'any lawful government purpose' including classified military work, and over Google's work with U.S. and Israeli militaries.
  • A clause in her contract, she said, bars her from criticizing Google 'for the duration of my life'.
  • Andreas Kirsch also resigned.
  • Google called the contract a 'responsible approach to national security'.
The gist

The resignations surface a direct conflict between Google's stated AI ethics commitments and its classified government contracts, where independent oversight of AI use is structurally limited. The non-disparagement clauses, which lack exemptions for protected disclosures, raise concerns about whether employees can safely flag safety-related issues.

11
New

OpenAI's request to amend California's SB 53

  • OpenAI sent a letter to Governor Gavin Newsom requesting that SB 53, signed September 29, 2025, be amended to add shutdown controls, annual audits, AI R&D precautions, and cybersecurity requirements not in the law as signed.
  • The law, formally the Transparency in Frontier Artificial Intelligence Act, establishes transparency standards for frontier models and creates CalCompute as public computing infrastructure.
  • Separately, OpenAI's Chris Lehane praised the bipartisan FRONTIER Act and called for mandatory pre-deployment testing.
The gist

OpenAI is requesting that a state law already signed and in effect be amended to include safety measures the law does not currently contain. California has positioned SB 53 as a potential national model for AI regulation given the absence of federal action.

12
New

Railway cloud deployment platform breach

  • Railway's preliminary incident report describes a targeted attack on its build infrastructure beginning October 20 aimed at stealing AI provider API keys to perform model distillation attacks, with an unauthorized party potentially accessing decrypted environment variables containing API keys and other credentials.
  • Railway froze deployments, worked with Anthropic, OpenAI, OpenRouter, and others to revoke compromised keys, and told customers to rotate every secret.
  • User accounts were not accessed, though source code exposure has not been ruled out.
The gist

A breach of a developer deployment platform exposes credentials across multiple downstream services simultaneously, including AI inference providers and cloud infrastructure. The explicit goal of stealing AI API keys for model distillation makes this part of a broader pattern of attacks on AI infrastructure.

13
New

Canva's Craft image generation model

  • Canva released Craft, its first proprietary image generation model, on 2026-10-22, built for design use cases.
  • The model uses a two-stage architecture in which a planner resolves composition, layout, and spelling before a renderer generates pixels at up to 2K resolution across more than 30 aspect ratios, with revisions targeting only the changed element so adjacent elements are not affected.
  • Craft ranks second on DesignArena's global image generation leaderboard, behind only OpenAI.
The gist

Canva, a widely used design platform, now operates its own frontier image model rather than relying solely on third-party providers. The DesignArena ranking places Craft behind only OpenAI among image generation models globally.

14
New

Uber's ChatGPT Work enterprise rollout

  • Uber announced on October 22 it is deploying OpenAI's ChatGPT Work to more than 30,000 non-engineering employees in operations, finance, marketing, and product, a 30x expansion from a 1,000-person pilot.
  • Engineers continue using Codex, while the broader workforce gains access for research, data analysis, presentation creation, and complex workflow completion.
  • Uber has not disclosed the cost or any productivity metrics.
The gist

The deployment moves enterprise AI from a limited pilot to a workforce-wide tool covering more than 30,000 employees. The scale of the rollout offers a concrete data point on how large companies are expanding AI agent use beyond engineering teams.

15
Concluded today

NVIDIA GTC Berlin

  • Jensen Huang's October 21, 2026 keynote placed the Agent Knowledge Foundation at the center of the conference's product story: models and libraries connecting AI agents to enterprise data without moving it, with partners including Palantir, Databricks, Snowflake, and Oracle.
  • The conference also brought Nemotron 3.5 open language models, Alpamayo 2 Edge for autonomous vehicles, and the Ising family for quantum hardware calibration.
  • Huang stated approximately $2 billion in new European investments at the event, bringing total European commitments to nearly $10 billion.
The gist

The conference consolidated a set of product launches and partnership announcements targeting European sovereign AI infrastructure, enterprise agent deployment, and open model availability across automotive, finance, healthcare, and retail. The stated investment figures and named enterprise partners give concrete shape to NVIDIA's European expansion.

Updates

16
Day 18

AI infrastructure capex and the revenue gap

  • TikTok is reportedly targeting as much as 4 gigawatts of computing capacity by the early 2030s on Oracle Cloud Infrastructure, extending the infrastructure buildout to consumer platforms beyond frontier AI labs.
  • Amazon CEO Andy Jassy confirmed AWS is completely sold out for 2026 and mostly for 2027, even at $220 billion in annual spending, while TrendForce projects server CPU shipments growing more than 40% in 2027 as AI agent inference tightens the CPU-to-GPU ratio from 1:8 toward 1:1.
The gist

Capital commitments at this scale lock in multi-year infrastructure trajectories that companies cannot easily reverse. The structural gap between capex growth and revenue growth, combined with demand now expanding to large non-AI-native platforms like TikTok, indicates the constraint on compute supply is broader than the frontier lab buildout alone.

17
Day 30

Data center power demand versus grid supply

  • Amazon cancelled a $427 million campus, QTS walked away from a project with roughly $100 billion in planned spending, and Blackstone sold data center assets in Northern Virginia, the world's largest data center market.
  • Loudoun County scheduled a November 17 vote on a 12-month pause on new applications.
  • Analysts attributed the pullback to land scarcity, power unavailability, and local political resistance rather than weakening AI demand, with Texas, Ohio, and the Midwest cited as the next build-out destinations.
The gist

Physical constraints on power, land, fiber, and memory are collectively limiting how fast AI infrastructure can scale, with multiple independent forecasts projecting supply gaps persisting through the late 2020s and into the 2030s. The stalling of the world's largest data center market in Northern Virginia, combined with project cancellations and local political resistance, signals that constraints are beginning to curtail actual deployment, not just extend timelines.

18
Day 10

The OpenAI office bugging arrest

  • A court denied bail to Abdulrahman Alfozan, a former OpenAI engineer charged with illegally recording company communications, ordering him held while the case proceeds after an October 19 hearing.
  • Reporting confirmed he had been exchanging frequent WhatsApp messages with a member of the Saudi royal family in the days before his October 9 arrest, adding specificity to the contact evidence the FBI presented at the detention hearing.
The gist

The case involves an alleged insider surveillance operation at a leading AI laboratory with apparent links to a foreign government. It prompted OpenAI and other leading AI labs to run counterespionage drills and give employees anti-honeypot counterintelligence training.

19
Day 6

China's AI export control catalogue

  • DeepSeek and MiniMax have registered with China's government and continued releasing open-source models since October 16, confirming the pre-export registration requirement in Announcement No. 48 is being followed in practice.
  • Open-sourcing model weights for global download counts as an export under the framework, so even open-source releases require a registration filing before weights leave the country.
  • Separately, the US Treasury proposed rules that would ban American investment in Chinese AI companies.
The gist

China's export control framework directly governs whether frontier Chinese AI models and their weights can reach global users, with immediate compliance obligations already in effect. The registration behavior of DeepSeek and MiniMax shows the rules are being followed in practice while open-source releases continue.

20
Day 6

Anthropic's leaked draft AI bill

  • Anthropic's federal affairs team said on October 23 the company is 'still working to strengthen the framework' after its draft federal AI safety bill leaked and drew criticism for setting a threshold of more than 50 deaths or $1 billion in damages before a court could restrict a model.
  • Calvin publicly questioned whether Anthropic is primarily an AI safety organization or a company racing to build superintelligence first, and no formal revision or disavowal of the draft has been issued.
The gist

The bill's design, if adopted, would set the terms under which the federal government can restrict advanced AI models, and critics argue its thresholds and preemption language leave both federal and state regulators with less authority than they currently hold. The public dispute between Anthropic and safety advocates tests whether a self-described safety-first lab's legislative agenda aligns with its stated commitments.

21
Day 3

NVIDIA open models in European enterprise

  • Swedish startups including Klang, which fine-tuned NVIDIA Parakeet v3 into Pianissimo, a transcription model described as 64x faster with 75% fewer errors, and autonomous freight company Einride, developing its next-generation driver on NVIDIA Hyperion and Cosmos world models, added Nordic deployments to the GTC Berlin open-model rollout.
  • Samsung disclosed NVHBM, an 8-layer HBM4E variant at 18Gbps as a near-term drop-in for Vera Rubin-era hardware ahead of standard HBM4E tied to Vera Rubin Ultra's H2 2027 launch.
  • NVIDIA also published Cosmos3-H-Dreams for clinical surgery simulation.
The gist

The DSX POD compresses AI factory deployment timelines from months to days, with partner delivery starting early 2027. The six-domain open model portfolio gives enterprises a path to customize frontier-class AI on their own infrastructure and data across a broad set of industries.

22
Day 3

PHP2Shell flaws and OpenAI's Patch the Planet

  • Amazon observed active exploitation of two critical PHP flaws found by OpenAI's Sol model starting October 17, four days before public disclosure, after the embargo broke more than six hours early.
  • Analysis found 46.1% of the top 7.2 million PHP websites run end-of-life branches with no official fixes.
  • Nate Soares argued Glasswing's failure to find the flaws for six-plus months undercuts the defense-ahead-of-offense theory; Vitalik Buterin countered that cybersecurity will endgame favor defenders but the transition requires deeper shifts only beginning.
The gist

PHP powers an estimated 70% of websites, so critical unauthenticated remote code execution flaws in it carry broad exposure. The embargo break and active exploitation before patching, combined with nearly half of top PHP sites running end-of-life branches, means a substantial portion of the web may remain unpatched.

23
Day 3

Claude Duet proactive agent

  • Transformer News reported that Anthropic is preparing a new model described as especially good at discerning a person's underlying intentions and goals even without much information from the user, a development separate from Duet, the proactive agent app Anthropic launched October 21 on Opus 5.5.
The gist

Claude Duet represents Anthropic entering the proactive agent category, where software initiates actions and contact rather than waiting for user prompts. The safety and cost tradeoffs baked into the design, including approval gates, blocked transaction types, and quota-sharing, reflect unresolved practical questions about how such agents function at consumer subscription price points.

24
Day 1

Open-weight models' enterprise token share

  • Vercel's AI Gateway data through August 22, 2026, puts open-weight models at 62% of enterprise token volume but under 9% of spend, and clarifies that an earlier 29% figure covered only Chinese-built models, a subset of the open-weight total.
  • In July, Anthropic collected 65.1% of all gateway spending on 29.8% of volume, at 4.4 times the average price, while closed models held two-thirds of dollars.
  • Z.ai's GLM 5.2 grew 27x in daily tokens and 80x in customer count in its first week, the fastest adoption Vercel tracked in 2026.
The gist

Open-weight models now handle the majority of routed enterprise tokens at a fraction of the cost of frontier models, creating a widening gap between usage volume and revenue that bears directly on AI investment returns. Jefferies strategist Chris Wood's base case is 'massive capital destruction in the US' from the AI investment cycle, as cheaper Chinese open-source models capture token share while the four largest US hyperscalers spend toward roughly $870 billion in capex by 2027.

What is moving now · Every edition · Every story

The daily email

Want this in your inbox?

I send one email each morning with the stories that moved. If you would rather just read here, that works too.

Subscribe free