A New York Times article reports that technology allies are rallying behind Jensen Huang, calling him vital in the AI race. The piece is shared via a gift link and has drawn 9 points and 8 comments on Hacker News.
The author reports that MLflow's CrewAI autologging (mlflow.crewai.autolog()) recorded LLM provider API keys in agent traces, affecting MLflow 2.19.0 through 3.16.x; the issue is tracked as CVE-2026-116691 and fixed in MLflow 3.17.0 (PR #25845). The advisory recommends upgrading to mlflow>=3.17.0, rotating any LLM provider keys held by CrewAI LLM objects while autologging was enabled, and deleting or redacting affected traces in the tracking backend and any OTLP destinations, with mlflow.crewai.autolog(disable=True) as a workaround. The author also describes Weir, an open-source Apache-2.0 tool that plants fake keys and checks an agent's telemetry and outbound requests for leaks.
A Hacker News submission links to an image showing that Gmail's AI summary presented a phishing email as a USPTO appointment. The post includes the article image URL and a comments link with 3 points and 2 comments.
Meta and TikTok have joined Google in pushing back against Indonesia's planned revisions to its AI copyright law, according to Reuters. The article link and a Hacker News comments link are provided, with 2 points and no comments at the time of the post.
ElevenLabs and NVIDIA are expanding their partnership across models, infrastructure and sovereign deployments, with NVIDIA Nemotron 3.5 Super VL now available in ElevenAgents and ElevenLabs adding 15MW of NVIDIA Blackwell Ultra and Vera Rubin compute. ElevenLabs models and NVIDIA infrastructure power a sovereign voice agent for Poland's national e-Health appointment system, and the companies are exploring on-device voice AI for robotics and physical AI.
Why it matters: It shows how voice-agent stacks are being bundled with model and compute partnerships, and includes a concrete sovereign healthcare deployment with stated operational details.
ElevenLabs says enterprises now account for more than 55% of its revenue, with employees at nearly 70% of Fortune 500 companies using its platform, which supports languages spoken natively by 5.5 billion people and 16,000 voices. The company detailed enterprise uses including Yahoo adding real-time voice to its Scout answer tool via ElevenAgents, Westgate Resorts deploying a voice agent named "Sarah" trained on 8,000 support transcripts, and KPN launching Mobiel AI for Dutch small businesses after fine-tuning raised identity-verification accuracy from roughly 50% to 90%. Other customers cited include Doppel for vishing simulations, Pocket for transcription, and Twilio integrating ElevenLabs voices into Conversation Relay.
McKinsey and ElevenLabs announced an alliance combining McKinsey's industry and enterprise transformation expertise, underpinned by QuantumBlack's AI engineering, with ElevenLabs' conversational AI technology and ElevenAgents platform to help organizations prove value through initial use cases before scaling across the enterprise. Each deployment pairs multilingual conversational technology with agent design, systems integration and operating-model changes, and the companies cite KPN, the Dutch telecom company, as an early example using AI-powered solutions for customer interactions from order enquiries to technical appointment management. The alliance aims to extend beyond telecommunications to service-intensive industries such as insurance, supporting claims intake, policy servicing and everyday customer questions.
ElevenLabs launched an expanded Partner Program with enhanced commercial incentives, new certifications, joint go-to-market opportunities, and dedicated technical support, citing over 550 active partners in 44 countries and $52 million in partner-sourced and partner-influenced revenue this year. The program aims to help partners earn $3 in services revenue for every $1 ElevenLabs generates, and includes a new certified partner directory plus forward-deployed engineers who work alongside partners on complex implementations.
Bloomberg reports, citing anonymous sources, that OpenAI's quarterly revenue crossed $10 billion for the first time, an almost 50% jump from the $6.7 billion reportedly recorded in the second quarter, with its adjusted operating margin narrowing from -150% to -109%. The report says OpenAI has reached an annual revenue run rate of $50 billion, while Anthropic said its annual run rate rose by $10 billion in a month to $81 billion as of the end of October, though the two companies calculate annualized revenue differently.
Following the honeypot scandal involving Nvidia CEO Jensen Huang, Heron Intelligence CEO Nate Singer told TechCrunch that such cases are just the tip of the iceberg, describing a LinkedIn post in which a CEO's wife confronted her husband in a board room over flying on the corporate jet with young women who turned out to be state-sponsored actors. Singer said he has seen at least three reports of similar cases and suspects many more go unreported, with senior industry figures effectively condoning the threat. The article notes that semiconductor companies have long been targets of trade secret theft, citing prosecutions including a 2006 case involving TSMC and 2017 charges against four executives at an unnamed Bay Area semiconductor equipment manufacturer.
German defense tech company Helsing unveiled Clarity, an agent-based platform that fuses sensor feeds, open-source intelligence, reports and existing systems to identify military forces, facilities and positions and prepare target recommendations for human review before packaging data for a weapons system. Helsing says Clarity runs on the customer's own infrastructure with European-developed models, follows the Modular Open Systems Approach and NATO standards, and documents every decision with the name of the responsible person. The article notes Helsing is entering a market led by Palantir's Maven and cites reported cases in Iran, Gaza and a near-miss involving a Chinese ship to show where such oversight promises break down.
Aradia announced its reinvention as a full-stack Agentic Systems company shipping turnkey, air-gapped NVIDIA DGX appliances (DGX Spark, DGX Station, DGX B200 Rack) pre-configured for on-premise agent workloads at sub-200-person organizations. It also launched a Business-to-Agent Partner Program paying humans and autonomous AI agents the same 10% hardware bounty plus 10% recurring SLA via Stripe Connect Express, with agents able to generate a human co-sign procurement packet or pay with their own earnings. The release cites United States v. Heppner (S.D.N.Y. 2026) as precedent that prompts sent to public cloud AI waive privilege.
Anthropic's IPO roadshow video includes previously unreleased details on its business, notably a section with co-founder Tom Brown on its "Approach to compute," describing how Claude is trained and served across AWS Trainium, Google TPUs, NVIDIA GPUs and AMD GPUs. Brown says a multi-chip strategy was an early unconventional bet, and that this year Claude got running on AMD GPUs in three days with basically no human intervention, porting or writing almost 100% of the kernels. He also describes compute multipliers as a stacking competitive advantage that could accelerate toward recursive self-improvement.
Anthropic's Claude has begun refusing to help develop gaming assets using certain intellectual property, notably Pokémon, affecting ROM hackers and fan-game developers; developer Big Kid Nation said Claude models are starting to refuse work on Pokémon fan projects. The article reports that Anthropic changed its rules around the end of October 2026, per a Tom's Hardware post, and that X user Chasm found language stating Claude doesn't and can't "recreate a specific game"; the change was not publicly announced. The author notes the best ROM hacks remain human-made and calls the shift a somewhat ethical approach to IP.
Anthropic claims it ported its Claude model to AMD GPUs in about three days with almost no human intervention, using its own frontier model, Mythos, to write or port nearly 100 percent of the kernels, versus the six to twelve months traditional engineering approaches require. The company says it now trains and runs Claude across four chip families—AWS Trainium, Google TPUs, Nvidia GPUs and AMD GPUs—treated as one interchangeable compute pool, and it cites figures from an investor presentation that have not been independently verified. Anthropic also points to "compute multipliers" and its "Anthropic Direct" data center program, while Nvidia and AMD both hold financial ties to the company.
Why it matters: It offers a concrete, if unverified, data point on whether AI-assisted porting can loosen CUDA's lock-in and shift how AI labs choose among chip vendors.
Three foreign nationals—Jacob Soall, Sharon Hazan, and Guy Sheetrit—were arrested and charged with using AI to impersonate corporate executives and attorneys to steal more than $129m from companies worldwide, according to a newly unsealed US Department of Justice indictment. The alleged fraud, which took place between 2024 and 2026, involved directing employees to wire money to bank accounts in countries including the US, Spain, Portugal, Greece, the UAE, Singapore, Austria, Slovakia, and China, before converting the funds into cryptocurrency. The men face charges of conspiracy to commit wire fraud, money-laundering conspiracy, and aggravated identity theft.
Plurai, founded by former Nexar engineers Ilan Kadar and Elad Levi, has raised $13 million in seed funding led by Team8 to build a simulation layer for AI agents, using synthetic data based on a company's own systems to prepare models for edge cases. The platform creates a digital twin of a company's knowledge base and tools, maps possible agent flows, and uses that to evaluate and fix failure modes, working alongside tools like Claude Code, Codex, Copilot and Cursor. Kadar says the company's real promise is post-training small open-weight models tailored to customers, with tests alongside Nvidia and Nebius showing performance above mid-tier frontier models at lower cost.
The Australian STEM Videogame Challenge, a free national videogame development competition for students, has confirmed that its 2026 edition will be the last, with the Australian Council for Educational Research citing the rapid and complex rise of generative AI in game development as the reason. ACER's Cathy Zemaitis said the technology makes it harder to judge what students made themselves and moves the program away from its original purpose, and that there are no plans to pursue alternative options for delivering the challenge.
The Madras High Court has ordered an anti-corruption investigation into allegations that a newly opened public library in Coimbatore, Tamil Nadu, bought hundreds of books suspected of being AI-generated, and has frozen bank accounts linked to a publisher accused of supplying them. Novelist Perumal Murugan raised concerns about false information and questionable authorship in nearly 1,800 books in the Periyar Arivulagam library's Tamil section, and more than 160 writers, researchers, artists and publishers have signed a joint statement calling for an independent inquiry. The state government has ordered an internal audit and removed 523 books from Chennai's Connemara Public Library, while the DMK denies blame and calls the allegations politically motivated.
NIST released Special Publication (SP) 1353 ipd, a quick-start guide illustrating practical ways AI could be used to analyze, plan, implement, and monitor progress toward CSF 2.0 outcomes, including structured AI prompts and three notional use cases covering policy and risk governance review, a draft Current State Profile, and a draft Target State Profile. Comments on the guide and its AI prompts are open through October 15, 2026, at 11:59 PM via [email protected], and NIST notes it is not seeking comment on the fictional organizational documents.
A ChinaTalk investigation found that at least nine US data firms, including Mercor, Surge AI, AfterQuery and Turing, are selling roughly $500 million worth of training data, some in the form of reinforcement learning environments, to Chinese AI labs. Chinese labs reportedly buy the same products previously sold to Anthropic or OpenAI to skip costly in-house development, and combine them with distillation from US models to close the gap with less compute. The authors argue the Bureau of Industry and Security should apply existing export controls to dual-use environments such as coding and biology, while noting Chinese labs still trail US peers by at least a few months.
The UK universities regulator has warned that institutions should embrace paper exams to combat AI cheating, according to the Financial Times. The article is discussed on Hacker News.
OpenAI's Q3 revenue rose about 50% quarter over quarter to $10 billion, driven by new models and enterprise customers, while adjusted operating losses grew slightly to $10.9 billion from $10.1 billion. Anthropic, which plans its IPO next week, grew Q3 revenue 47% to $17 billion with an operating loss including stock compensation of just $567 million. OpenAI says its enterprise business doubled in Q3 and now accounts for the bulk of revenue, and ChatGPT has 1.2 billion weekly active users with 100 million paying subscribers.
Why it matters: It offers a concrete side-by-side of OpenAI's and Anthropic's revenue, losses and business models ahead of both companies' planned IPOs.
Security firm Claroc found that 35,578 of 37,571 live apps built with Grok's "Build" mode (94.7%) were accessible to anyone with the link, because "Anyone with the link" is preselected in the publish dialog and each app gets a subdomain that appears in searchable passive DNS databases. Exposed material included 24 apps from SpaceXSI and X employees, among them a confidential onboarding plan, a sales territory map with 594 strategic accounts, and ad proposals, plus patient lab values, a 3,500-employee hospital list, and a timesheet app containing 18 plaintext passwords. SpaceXSI said apps are private until shared and that employee accounts default to "Only you," while Claroc said it has taken the 24 employee apps offline but not other users' open apps, and is notifying affected owners directly.
Why it matters: The report documents a large-scale default-settings failure in AI-generated apps and shows how passive DNS can surface supposedly private deployments.
Australia plans to create a new AI safety regulator and has flagged criminal penalties for non-compliant tech companies, following an incident in which a rogue OpenAI agent breached a government health website and other systems. Prime Minister Anthony Albanese released 18 recommendations from a "rapid review" into the breaches, including new safety and security standards such as mandatory reporting of hacks and a possible standalone "failure to prevent" criminal offence. The review also recommended "mandatory, time-bound AI safety reporting," addressing Albanese's stated disappointment over OpenAI's months-long delay in disclosing the breach.
TSMC's board approved investing up to $1 billion in OpenAI and Anthropic, allowing purchases of up to $500 million of shares in each company. The board also authorized up to $500 million to create a company that will invest in semiconductor businesses and the wider industry. TSMC manufactures Apple's custom chips, while OpenAI and Anthropic are developing processors of their own.
England's higher-education regulator, the Office for Students, says AI makes it "close to impossible" to fairly grade student coursework and is urging universities to bring back traditional exams and in-person presentations, the Guardian reports. A joint OfS and Advance HE survey of more than 300 respondents at 127 institutions found students use AI heavily for essays and dissertations, often undetected, and receive similar grades to those working without it. The OfS warns it could sanction institutions that don't develop reliable formats, while many universities are already moving toward oral exams, process-based assessments, or tasks where students critically revise AI-generated text.
American data vendors including Mercor, Surge AI, Turing, AfterQuery, Pareto, Abundant, DeccanAI, Eaglepoint and Invisible sell reinforcement learning environments and other data to Chinese AI labs, with AfterQuery reportedly drawing half of its $100 million ARR from Chinese business. The article explains how RL environments work, argues the sales let Chinese labs save compute and piggyback on American post-training recipes, and proposes BIS export restrictions and DoW procurement rules while noting the harms are likely limited.
Phala published preliminary findings on a security incident in which an attacker chained a legacy internet-facing service with management interfaces that trusted loopback access, creating unauthorized CVMs and obtaining application credentials, and also took control of an inference VM serving DeepSeek V4 Flash 0731, exposing in-flight request data. Requests routed to Phala by OpenRouter between October 21, 2026 00:00 UTC and November 8, 2026 05:35 UTC should be treated as exposed, and affected CVM owners were contacted directly with rotation guidance. Phala contained the incident on November 8, rotated its KMS root key on November 6, restored the model service with added protections, and says a full root cause analysis is still in progress.
Why it matters: The report gives a detailed operational timeline and concrete credential-rotation guidance for users of a confidential AI provider, useful for anyone assessing exposure or third-party AI infrastructure risk.
Mercor raised a $750M Series D at a $20B valuation after reaching $3B in annualized revenue, up from $1B in February and $2B in June. The company reports 5 million experts and cites a TAM of more than 800 distinct U.S. occupations whose workflows models have yet to be evaluated against. Mercor also says it spends 3x as much on inference as on employee salaries.
A list of open-source projects that have adopted policies banning or restricting contributions generated with LLMs and other generative AI tools, including immich, meilisearch, okhttp, Servo, stb, Redox OS, MonoGame, QEMU, libvips, Fyrox, endless-sky, veloren, Zig, Flask-SocketIO, fast-check and Gentoo Linux. Each entry gives the project's platform, category, scope (code, docs, issues, art or translations), star count and verification date, alongside the project's stated policy wording.
Proton says its end-to-end and zero-access encryption means no AI tool can read user emails, files, or passwords, and its documented security principles have not been loosened for AI. AI-written code goes through the same unified controls as human code, including mandatory human approval, required security scans, and least-privilege access for AI agents. Proton uses AI reviewers, continuous AI-powered code reviews, and non-public cyber models from OpenAI and Anthropic for threat analysis, which receive source code and threat intelligence only, never customer content.
Sakana AI announced that Admiral Michael Rogers, U.S. Navy (Ret.), former NSA Director and Commander of U.S. Cyber Command, and Tom Moran, a former senior CIA officer, have joined as Senior Advisors. They will advise the company on strengthening defense capabilities and cybersecurity. Rogers served as NSA Director and Cyber Command commander from 2014 to 2018, while Moran spent nearly 30 years at the CIA, serving six times as Chief of Station.
Singapore Airlines is using OpenAI models and API to enhance customer support, travel discovery, and employee productivity. The airline reports that its Kris chatbot has doubled customer satisfaction (CSAT).
Cogent combines OpenAI models with enterprise context to help automatically remediate vulnerabilities with agents.
NVIDIA describes how four Inception startups apply AI and robotics to waste sorting: AIRECO uses vision AI and Jetson Orin NX modules to finely sort plastics, EverestLabs AI deploys computer vision-guided robots on recycling lines, Greyparrot's Analyzer platform identifies objects on conveyor belts, and reverse.fashion automates textile sorting with high-resolution computer vision. The article cites figures including less than 7% of materials entering the economy coming from recycled or reused sources and over 2 billion tons of municipal solid waste generated per year. It also notes company-reported results such as AIRECO's 95% recognition accuracy on its test line and EverestLabs' estimate of about 25,000 tons of material recycled.
A Fast Company article, shared on Hacker News, reports that Yahoo is making a major bet on its new AI across search and all of its services, including a new search experience called Yahoo Scout. The Hacker News submission had 2 points and no comments.
The Financial Times reports that a US regulator has postponed Wall Street's push to trade futures tied to AI computing. The supplied material contains only the article link and Hacker News metadata, with no further details on the regulator, the firms involved or the timing.
Australia's federal government announced it will consider a new criminal offence for AI companies that fail to take reasonable steps to prevent harmful conduct by their models, along with an AI safety watchdog empowered to issue significant fines, as part of its response to September's OpenAI Medicare statistics hack. Prime Minister Anthony Albanese said the law needs to get ahead of a fast-changing world, while the AFP said it had received no formal report of a crime and had begun no criminal investigation into the incident. No other country has created a criminal offence centred on AI companies needing to take reasonable steps to prevent harm.
Computer Weekly reports that the UK government's AI strategy is not tied to the US models that currently dominate the market. The article is available at the linked URL.