iCreatAI News
Back to main site
Skip to content
Only Industry#Data / training
  1. Hacker News AI76

    Amazon Threat Intelligence observes threat actor campaigns with ARTEX AI agents

    Amazon Threat Intelligence reports that between Oct. 3 and Nov. 5, 2026, its MadPot decoy sensors captured requests from ARTEX agentic AI penetration-testing agents that carried their own campaign records, including a large-scale AI credential theft operation in which stolen keys paid for the LLM inference used to hunt more keys, and a campaign against two cryptocurrency exchanges using real-time deepfake injection to bypass KYC checks. Amazon assesses with moderate confidence that ARTEX was used and that the activity comes from disparate Chinese-nexus threat groups, based on simplified Chinese prompts, China time-zone configurations, targeting and tooling. The post shares IOCs and argues that while the techniques were not new, agents change attacker speed and persistence, making basic hygiene such as removing default credentials and exposed secrets the most effective defense.

    Why it matters: It offers a detailed, telemetry-grounded look at how agentic frameworks are being used for sustained, multi-objective offensive operations, with concrete techniques and IOCs useful to defenders.

  1. TechCrunch · AI78

    Export-banned Nvidia chips are behind China’s most powerful AI models — uh-oh, Jensen!

    Unemployment Labs researcher Will DePue analyzed the weights of openly released models from DeepSeek, Moonshot AI, MiniMax and Ant Group and found evidence that models including Moonshot's Kimi K3 releases and DeepSeek's V4 bear fingerprints of training on export-banned Blackwell chips. Epoch AI estimates about two million advanced chips entered China in 2024 and 2025 through schemes hiding their final destination, though the chips could have been in offshore data centers such as those in Malaysia, which imported an estimated 275,000 Nvidia AI accelerators in that period. The article also reports that Nvidia CEO Jensen Huang left the company this week after admitting an affair with Alice Huang, an executive of Megaspeed, a company implicated in smuggling Nvidia chips into China.

    Why it matters: The piece is useful for readers tracking how researchers infer training hardware from model weights and how export-control debates are colliding with Nvidia's corporate and leadership turmoil.

  1. The Decoder80

    Former OpenAI researcher says he found Nvidia Blackwell fingerprints hidden inside six Chinese AI models

    Will DePue says weight-initialization patterns in six Chinese models released since April 2026 match Nvidia's Blackwell core counts (148 or 152), while earlier models like DeepSeek-V3 and Kimi K2.5 show Hopper signatures; he says OpenAI and Anthropic researchers independently confirmed the findings and has published verification code on GitHub. He maps DeepSeek-V4-Flash and MiniMax-M3 to B200/B300 chips and DeepSeek-V4-Pro, Kimi K3, Kimi K3.1-Pro and Ant Group's Ling-3.1-flash to GB200/GB300, estimating the five training runs used about 12,000 Blackwell GPUs costing over half a billion dollars. The report notes the fingerprint shows only which hardware initialized the weights and does not by itself prove smuggling or a violation of US export law, since capacity can be rented outside China.

    Why it matters: It offers a concrete, code-backed method for inferring which GPUs trained a model, plus caveats on what such evidence can and cannot establish.

  1. Hacker News AI78

    Vercel Data Shows AI Models Have Six-Week Half-Life in Production

    Vercel's November 2026 AI Gateway Production Index reports that production AI models have an effective half-life of about six weeks, with more than half of October's language-model requests going to models under 60 days old and most teams abandoning a model within four weeks of its peak. Decision models reached 26% of gateway requests in October at just 0.53% of spend, voice usage rose from 4% of paid teams in July to 11% in October, and Anthropic and OpenAI were nearly level at 54 and 55 of every 100 paid teams. Image and video spending hit records, with OpenAI's GPT-Image-2.5 Sunburst leading image spend and ByteDance's Seedance 2.5 leading video spend for a third month.

    Why it matters: The index offers a rare production-usage view of model churn, spend shifts and emerging decision and voice workloads, useful for teams planning model-swappable pipelines.

  1. Hacker News AI78

    Tell HN: Notion AI chat sessions have been exposed via Fireworks AI hack

    A Notion email to affected customers says a security incident at vendor Fireworks AI may have exposed data, and that Notion shut down all connections to Fireworks' systems as a precaution. On November 6 Fireworks notified Notion that malicious actors may have accessed potential customer data, and on November 8 confirmed a new dataset that included unattributable Notion AI chat transcripts used for the Insights feature, without labels identifying the author or workspace and without tool call results. Notion says the Insights feature has been disabled during the investigation and that it no longer serves open-weight models through Fireworks.

    Why it matters: The post shares a vendor-breach notification email, offering a first-hand look at how an AI infrastructure provider incident can reach downstream customer data.

  1. Hacker News AI82

    China's First Frontier AI Export Controls: Mofcom Announcement No. 48

    On October 16, 2026, MOFCOM and MOST issued Announcement No. 48, proposing to add 40 technologies to China's export catalogue—23 of them in AI, covering frontier model weights, agent architectures, and offensive cyber capability—while an interim pre-export registration requirement is already in effect. The catalogue additions are a draft open for comment until November 15, 2026, whereas registration applies now, including to exports already started but not yet complete, and is triggered by licensing for overseas use or changes of ownership or control. MOFCOM says API, app, web, SaaS, and lightweight on-device use do not count as exporting a large model, but local deployment of a restricted model outside China does, and open-sourcing a new restricted model requires reporting under automatic licensing.

    Why it matters: It maps a new Chinese outbound control regime onto concrete enterprise exposure points—self-hosted deployments, intra-group code sharing, and M&A—making it useful for compliance and security teams tracking frontier AI supply-chain risk.

  1. Wiz Research78

    “Black October” for AI Developer Platforms

    At least nine AI developer platforms disclosed incidents during October, with Fireworks, OpenCode and Warp reporting indications of an “agent swarm” attack and OpenCode and CommandCode attributing theirs to attempted “distillation.” Wiz describes downstream abuse of enterprise credentials tied to one vendor breach, including two keys used for roughly 800k and 1.7 million Bedrock calls respectively, likely over $100k in usage at list price. Wiz also links the keys to resale operations at llm-routing.com and xingjiabiapi.org, and publishes IOCs including 23.106.46.239 and 38.246.114.118.

    Why it matters: Provides Wiz's technical account of LLMJacking follow-on activity and IOCs from the October platform breaches.

  1. Hacker News AI78

    Google value plunges by $500B as AI fears rattle Wall Street

    Alphabet lost just over $500bn in market value on Thursday, with its stock hitting a six-month low, after its quarterly update showed AI summaries on Search were affecting ad revenue and profits fell 25% even as total revenue grew 25% to $127.6bn. Microsoft and Amazon also reported this week, with Amazon shares falling 6% after hours on negative free cash flow of $42bn, while Microsoft's shares fell less than 1%. Analysts quoted said the results highlight the challenge of funding massive AI investments while sustaining established businesses, and where AI value will ultimately be captured.

    Why it matters: It captures a major market reaction to AI spending across three tech giants and the analyst debate over whether AI investments are paying off.

  1. The Verge · AI80

    Anthropic is asking Wall Street to believe in AGI

    In a Decoder interview, SemiAnalysis analyst Joey Brookhart discusses Anthropic's S-1 filing for a Nasdaq IPO, which could begin trading as soon as next month at a valuation between $1.5 trillion and $2 trillion. He describes a company that scaled quickly to $70 billion-plus in ARR with strong gross margins, while noting that reaching $1 trillion in revenue would require moving beyond coding into white-collar work and other verticals. The conversation also covers the $80 billion non-cash charge tied to rising valuation, roughly $800 billion in long-term compute commitments, and Anthropic's stated intent to keep pushing training toward AGI.

    Why it matters: It offers a detailed analyst read on the first public financial disclosure from a frontier AI lab and the assumptions behind its valuation.

  2. Hacker News AI78

    Installing claude-mem uploads your last 30 days of prompts to cmem.ai, no opt-in

    The claude-mem installer (v15.2.0+, latest v15.5.0) automatically opens a setup page that reads local chat histories from Claude Code, Codex, Gemini CLI, Antigravity CLI and OpenCode and uploads the full text of prompts typed in the last 30 days—with session IDs, project names, folder paths and timestamps—to cmem.ai as soon as the page loads, with no way to stop it. The only checkbox, ticked by default and disabled during upload, does not prevent the upload when unticked, and cmem.ai confirmed the prompts were sent to a DeepSeek model via OpenRouter routed to the cheapest provider without blocking providers that retain or train on prompts. This contradicts the privacy policy's claim that nothing leaves the device without cloud sync and that memory content is not used for training; the article recommends blocking cmem.ai before running the installer.

    Why it matters: It documents a concrete, reproducible privacy failure in a widely used AI tool installer, with source-code references and vendor confirmation.

  1. The Decoder85

    Anthropic opens its books for Wall Street, showing record revenue and mounting obligations

    Anthropic filed an S-1 with the SEC to list on Nasdaq under the ticker "ANT," with Goldman Sachs and Morgan Stanley leading the offering and Wall Street expecting a valuation of roughly $2 trillion. Revenue rose from $376 million in Q1 2025 to $11.6 billion in Q2 2026, totaling $16.3 billion for the first half of 2026, and the company posted its first positive GAAP operating profit of $974 million in Q2 2026. Compute capacity contracts with Broadcom, Google, Amazon, Microsoft and other providers total roughly $780 to $810 billion in largely fixed, long-term obligations against variable, usage-dependent revenue.

    Why it matters: The filing offers a rare public look at an AI lab's financials, including a roughly 900 percent net revenue retention rate and large fixed compute commitments set against usage-based revenue.

You have reached the end