Long form

Deep Dives

The longer read: reporting that follows the evidence past the first turn of the story.

Illustration: A plain black server cabinet stands on a grey raised-floor tile in a dim equipment room. Its front perforated mesh door is shut tight with a bare metal handle. The rear door hangs a few inches ajar, and one unmarked blue network cable runs out through the gap, down the side and across the floor. Overhead fluorescent light, scuffed paint, nothing printed anywhere.

Security

US seizes Integrity Tech hacking-tool domains and charges MonsterCloud founder with ransomware recovery fraud

US authorities seized the domains behind two Chinese hacking tools a day after charging MonsterCloud's owner with secretly paying over $8 million in ransoms. In our view neither action reaches access attackers already hold, such as VPN implants on breached hosts or intrusions the recovery firm allegedly never cleaned up.

Confirmed7 publishers

Invest

Waymo borrows $5 billion in the same week Firmus abandons a $5 billion IPO at a $30 billion valuation

Waymo closed a $5 billion term loan, its first debt, a day before Firmus pulled an IPO that would have valued the Nvidia-backed firm near $30 billion. Lenders took 5.25 points over the benchmark from a company selling paid rides; IPO buyers would not pay about 590 times revenue for data centers that are 5% built.

Confirmed5 publishers

Illustration: In a data hall aisle, a server rack's locked mesh front door has a plain card-reader handle. Through the mesh, one server has been freshly re-cabled with new patch leads beside older dusty ones. On the perforated floor tile below the door lies a single worn, blank white access card, left behind and no longer able to open it. Cool overhead fluorescent light.

Build

Account-bound CAA records stop hijackers reusing cached validation after DNS is restored

Attackers who hijacked the .gh, .sl and .as ccTLDs obtained unauthorized HTTPS certificates for Google domains, Google said on October 6. A CAA record could not stop issuance while they held DNS, but restored afterwards and bound to the owner's account, it stops them reusing cached validation.

Confirmed4 publishers

Illustration: A long seminar-room table in a university maths department, covered end to end with tall binder-clipped stacks of printed manuscripts, seen edge-on so no print shows. At the far end, a cleared patch under a desk lamp holds one short, squared-off pile, a red pen, reading glasses and an empty wooden chair. Chalk dust on the tray behind, the blackboard wiped blank. Afternoon window light.

Product

OpenAI's 700-manuscript proof release stalls where mathematicians have to check it

OpenAI released more than 700 AI-generated math manuscripts on October 6, claiming solutions to hundreds of open problems. Only about 42 percent were formalized in Lean, The Verge reported, so specialists trust what they can verify and wait on the rest.

Confirmed8 publishers

Illustration: On a scuffed steel workbench in a small validator server room, an unbranded hardware signing wallet with a dark screen sits plugged into a coiled USB cable. Right beside it rests an identical second device, still sealed in a plain clear anti-static tamper bag, ready as a spare. Out of focus behind them are racked node servers with green status lights and bundled network cables, lit by cool

Security

AI cryptanalysis warnings push blockchains toward hash-based backup signatures

Haseeb Qureshi answered Justin Drake's worst-case warning that AI could break ECDSA in months with a hash-based backup signature plan for blockchains. That hedge covers signing keys, while Matthew Green puts a 15% chance on functionally losing confidence in public-key encryption, where NIST's key-establishment standard is lattice-based.

Confirmed6 publishers

Leadership

Washington's green-card freeze singles out six IT outsourcers alongside Microsoft and Adobe

US Labor Secretary Keith Sonderling suspended Microsoft, Adobe and six IT outsourcers from PERM, blocking new green-card filings and halting pending cases. Current H-1B status is untouched, so the cost falls later, on staff approaching the six-year H-1B limit and, through them, on clients of the six outsourcers.

Confirmed7 publishers

Invest

AI-assisted cryptanalysis puts a premium on crypto networks that can switch signature schemes

Charles Hoskinson rejected Vitalik Buterin's warning that AI could undercut lattice-based post-quantum cryptography, defending NIST's 2024 standards. People who disagree about the alarm are still drafting backup signature schemes, so a network's ability to switch fast is what holders should price.

Confirmed6 publishers

Illustration: In a data hall aisle, an older, scuffed 1U rack server sits on a steel equipment cart, lid off, memory DIMMs and fans exposed, its unplugged power and network cables drooping to the floor. Behind it, a rack of newer servers stands densely filled except for one empty slot at cart height, rails pulled out and bare. No markings anywhere.

Build

Kubernetes v1.35 refuses to start the kubelet on cgroup v1 nodes

Kubernetes v1.35 defaults failCgroupV1 to true, so the kubelet will not start on a cgroup v1 node unless an operator sets a temporary override. Nodes that make the move get GA swap, worth up to 3x pod density in published tests until active memory spills to disk.

Confirmed2 publishers

Product

Agent failures this cycle shared a theme of excess access, but causes ranged from platform flaws to misconfiguration and misuse

Zenity Labs took over every Amazon Bedrock AgentCore agent in one AWS account and region with a single prompt to a public agent. The same design error ran through Anthropic's own test failures and an agent used against South Korean banks, and the standard fixes are now published.

Confirmed7 publishers

Science

Standard Bots keeps its robot AI small and its motion logic in code

Standard Bots keeps its largest model in the low billions of parameters and leaves motion to conventional code, its executives told Latent Space. We think the split carries over to software agents, though Jentoft's claim that a few dozen examples can fix an edge case needs a success rate behind it.

Confirmed2 publishers

Illustration: A data hall aisle of server racks under an overhead yellow fiber tray. Further down the row, every rack is fed by fiber dropping from the tray. The nearest rack has no feed: its uplink fiber is unplugged, loosely coiled on the rack's top panel with dust caps on the connectors. Inside, its short internal patch cables still glow with green port lights between switch and servers.

Leadership

Anthropic pulls its agent evaluations offline as labs rehearse for an AI disaster

AI labs including Anthropic and OpenAI are rehearsing for a catastrophic AI incident that insiders told Axios they expect within six to 12 months. TechCrunch reports that Anthropic has answered its own agents' break-ins by cutting live internet access from all its internal evaluations, a public set of containment terms that covers only the lab's tests.

Confirmed3 publishers

Illustration: In a data-centre aisle, a closed developer laptop rests on a steel crash cart. A single blue network cable runs from it into a rack-mounted network switch. From the switch, short grey patch cords lead to several identical server racks standing side by side. Only one cord is plugged into a rack. The others hang loose, unplugged, waiting to be chosen.

Invest

GitHub gives Copilot CLI users a 10% credit discount for letting Auto choose the model

GitHub's Copilot CLI Auto mode now picks the model for each task and bills 10% fewer AI credits than running that model directly. In exchange GitHub holds the routing decision, and models sold through Copilot now compete task by task on availability, reliability and fit.

One report1 publisher