Anthropic's 5% Public Benefit Fund explained: who gets the shares, and when
Anthropic will put 5% of its shares, about $48B at its May valuation, into a fund it controls, with more as its value grows. How it works and what's missing.
Today's deep dive · 20 October 2026
Cairn explained: how one hacker's AI agents broke into 100+ companies
One hacker's AI agents, run on the open-source Cairn engine, tried 1,200+ sites and got into 100+. How the agents work, and what ~$50 per break-in really means.
In 60 seconds
- Security firm NorForge found more than 20 exposed control panels for Cairn, an open-source multi-agent engine, being used for crime. One Chinese-speaking operator's agents tried more than 1,200 shopping sites from 25 September and, Reuters reports, got into sites belonging to more than 100 companies, including Deere, SharkNinja and Cummins.
- Cairn has no attack playbook. Coding agents read a shared 'blackboard' of confirmed facts, propose next steps, try them and post the results, over and over, until the goal (here: running code on the server) is reached. Successful break-ins took a little under 23 hours on average.
- NorForge estimates about $5 per attempt and a roughly 10% success rate, which works out to roughly $50 per break-in. When an attempt costs that little, low odds are good enough, and hacking at scale no longer needs skilled people. Both figures are rough estimates, not billing records.
For years, the comforting thing about hacking was that it was labour-intensive: you needed skilled people, and skilled people are scarce. A report published on Monday describes a campaign in which that labour was mostly done by software. One operator wrote a short instruction, pointed open-source AI agents at more than 1,200 online shops, and, according to Reuters, got into the websites of more than 100 companies, including Deere, SharkNinja and Cummins, for a few thousand dollars in AI fees.
The plain-English version
Imagine hiring a team of tireless burglars who are not especially brilliant but never get bored. You hand them a list of 1,200 addresses and a note: "Find a way in and leave a spare key under the mat." Then you go to sleep. Each burglar tries doors, checks windows, reads the building's paperwork and pins everything it learns to a shared corkboard so the others don't repeat its work. Most houses turn out to be locked. About one in ten isn't.
That is roughly what security firm NorForge saw. Its principal threat researcher, Snorre Fagerland, scanned the internet for control panels belonging to Cairn, a free AI tool on GitHub, and found more than 20 that were apparently being used for crime. The operators had left them open, so he could read along.
Or jump to your depth:
Everything else in AI · 21 October 2026
Today in AI: 14 things that happened
-
Business · Big
Anthropic's draft IPO filing reportedly shows $16.3B half-year revenue and an $80.7B loss
The Wall Street Journal has seen a draft of Anthropic's IPO prospectus (the S-1). It reportedly shows $16.3 billion in revenue for the first half of 2026, up from $1.1 billion a year earlier, and a net loss of $80.7 billion. About $72 billion of that loss reportedly comes from non-cash accounting adjustments tied to convertible notes and other financing instruments. About 20% of first-half revenue reportedly came from just two customers. The draft also points to about $450 billion in cloud compute commitments over the next decade and up to $750 billion in future computing spending, including deals still being negotiated.Why it matters: This is the first detailed look at the finances of a frontier AI lab heading for a public listing. Investors pricing the planned IPO will weigh fast revenue growth against huge, long-term compute commitments. Background: /explained/anthropic-public-benefit-fund-5-percent-shares-explained/
-
Business
SpaceX's AI unit grows 830% to $7.56B and becomes its biggest business
SpaceX reported third-quarter revenue of $14.6 billion, up 161%, and net income of $4.4 billion, compared with a loss of about $1.1 billion a year earlier. Its AI segment, called Super Intelligence, grew 830% to $7.56 billion. That makes it larger than Starlink. SpaceX credited new cloud deals, its Cursor acquisition and wider Grok adoption. The segment earned $431 million in operating income, after $1.2 billion in one-time stock compensation tied to Cursor. Its nameplate compute capacity reached 1.7 GW.Why it matters: The former xAI now earns more from AI, mostly by renting computing power, than from rockets or satellite internet. It is becoming a major compute supplier to other AI companies.
-
Research
Claude ran a 64-hour campaign that produced 17 lab-confirmed binders to scorpion toxins
Anthropic says an internal research model, running in Claude Science, designed small proteins that bind to scorpion neurotoxins. It worked mostly on its own from one prompt and four follow-ups. Over 64 hours it generated 318,484 designs using 12 design tools and about 10,000 GPU hours, and picked most of the 211 designs sent to labs (Adaptyv Bio and Twist Bioscience). Seventeen met the binding criteria, each against a single toxin. None bound more than one toxin.Why it matters: This is an end-to-end example of an AI running a real biology project from design to lab results. Anthropic stresses its limits: the binders were tested only against lab-made toxins, and neither neutralisation nor animal efficacy was tested, so this is not an antivenom.
-
Hardware
ByteDance, Alibaba and Tencent reportedly order 3M+ Nvidia China-compliant cards for $35B
According to Reuters, the three Chinese tech giants have together ordered more than three million RTX PRO 5500 cards. This is a less powerful Nvidia chip that meets US export rules. At list price the orders are worth over $35 billion. Nvidia reportedly told partners it can make at most three million of these cards worldwide in 2027 and cannot guarantee delivery. One source said buyers might get only 5–10% of what they asked for.Why it matters: Chinese demand for even cut-down Nvidia chips far outstrips supply. This is happening as the US debate over chip export limits heats up again (see the OpenAI item below).
-
Open source
Google open-sources TorchTPU so PyTorch code can run on TPUs with a one-line change
At PyTorch Conference 2026, Google released TorchTPU, built with Meta's PyTorch team. It makes Google's TPU chips a native PyTorch device, so existing code can often move by changing.to("cuda")to.to("tpu"), though peak speed may need more tuning. It succeeds the older PyTorch/XLA approach, uses the Apache 2.0 licence, and Google reports tests on up to 8,192 Ironwood (TPU v7x) chips. On the same day Amazon put TorchNeuron, a similar backend for its Trainium chips, into public beta.Why it matters: Most AI code is written for Nvidia's CUDA software, and that keeps customers on Nvidia GPUs. Google and Amazon now both offer near drop-in alternatives, which makes switching chips cheaper.
-
Policy
DHS orders all federal civilian agencies to remove DeepSeek and stop buying it
The US Department of Homeland Security has ordered federal civilian agencies to remove DeepSeek products and banned future purchases. The order was published in the Federal Register on 20 October. It also covers DeepSeek's affiliates and third-party products built on DeepSeek technology. Agencies have 60 days to ask CISA for exceptions. The order is not a ban on private or consumer use.Why it matters: Any vendor selling to US civilian agencies now has to check whether its products include DeepSeek models, even under a different brand.
-
Open source
DeepSeek open-sources DeepInfer, the engine behind its production service
On 20 October DeepSeek released DeepInfer, which it describes as the inference framework (the software that runs a trained model) behind its large-scale production services. The licence is Apache 2.0. This first release does offline inference for DeepSeek-V4.1-Flash. It supports Nvidia SM100 (Blackwell) GPUs and Huawei Ascend 950 chips. Parts needed for a full serving system, such as the KV cache system and load balancing, are not included.Why it matters: Builds for both Nvidia and Huawei hardware in one project show Chinese labs preparing to run on domestic chips. It also hands the open-source community production-grade serving code.
-
Policy
OpenAI reportedly goes quiet on strict US chip export controls for China
Politico reports, citing congressional aides and lobbyists, that OpenAI has stopped pushing for tough limits on chip sales to China. Lawmakers who favour the limits had counted on OpenAI's support for new curbs in the annual defence bill. The shift follows Nvidia's $30 billion equity investment in OpenAI. In a statement, OpenAI said a substantial US lead in advanced chips is key to its goals and that effective export controls are one part of that strategy. Anthropic still backs several of the chip bills.Why it matters: The two leading US labs now take opposite sides on export controls. That weakens the industry coalition behind new curbs ahead of the post-election session of Congress.
-
Safety
Meta pauses Muse chat sharing after researchers find 6,800 exposed links
Security firm Claroc found more than 6,800 shared Muse conversation links with a single public DNS search. This worked because Muse put each chat's title into the web address. The sample included a business loan application, an internal revenue review and a bank fraud alert. Only chats that users had chosen to share were affected. Meta told Ars Technica it has paused the feature while it reviews the report.Why it matters: Assistants that remember and act for users hold more sensitive data, so small design choices like this one can leak a lot. Background: /explained/meta-muse-wonder-frontier-model-active-memory-explained/
-
Policy
UK amends cyber bill so regulators can inspect firms over rogue AI agent incidents
New government amendments to the UK's Cyber Security and Resilience Bill would let officials inspect and demand information from essential-service providers after incidents involving AI agents acting outside human oversight or control. Other amendments would limit data centres' mandatory reporting to significant incidents. Threats and near misses could be reported voluntarily instead. The bill is currently before Parliament.Why it matters: These would be among the first binding UK rules aimed specifically at loss-of-control risk from AI agents. The duty falls on companies that use agents, not on the labs that build the models.
-
Models
Mistral launches Voxtral 3 speech models and a voice-agent SDK
Mistral released Voxtral 3: transcription models covering 50+ languages (the smallest has 4B parameters), a real-time version with under 500 ms latency, a text-to-speech model and an SDK for voice agents built on LiveKit. Prices start at $0.0035 per minute for transcription and $13 per million characters for speech. The full voice-agent API costs $0.04 per minute with Mistral Small 4. Mistral says it beats Whisper and Gemini on multilingual transcription. That claim is vendor-reported.Why it matters: This is a European, low-cost option for phone and app voice agents, a fast-growing business use. Running the full stack on your own infrastructure requires contacting Mistral's sales team.
-
Business
OpenAI acquires Orchestra Bio to bring AI agents into drug-development operations
OpenAI bought Orchestra Bio, a San Francisco startup whose AI agents help drug makers track studies, timelines and likely delays. Its team and technology will join Rosalind, OpenAI's set of models and tools for life-science research. The price was not disclosed. Orchestra had raised $20 million from investors including Andreessen Horowitz. Axios first reported the deal.Why it matters: OpenAI and Anthropic are both moving from AI that helps with scientific discovery to AI that manages the slow, costly work of getting a drug through trials.
-
Products
Google launches Gemini for government services, an agent suite for public agencies
Google released a preview of Gemini for government services for federal, state and local agencies. It bundles skills built for government work, connectors to common agency systems and third-party agents. The target tasks include interpreting policy, procurement, compliance and processing documents. The US Department of Health and Human Services (HHS) already uses it. Google's current $0.47-per-agency Gemini deal with the GSA expires on 15 November.Why it matters: Big labs are racing for government contracts as Washington picks its AI vendors, and this comes just as DeepSeek is being removed from federal systems.
-
Products
ChatGPT adds PIN-locked chats with their own separate memory
OpenAI is rolling out Locked Chats on all plans. Users can hide conversations behind a PIN or a fingerprint or face unlock. Locked chats move to a separate folder, disappear from search and use their own memory, so details shared there don't carry over into other chats. Resetting a forgotten PIN permanently deletes everything in the folder. OpenAI says this is not end-to-end encryption, and it still keeps logs under its usual policies.Why it matters: It protects against someone else using your device, not against OpenAI or legal requests. Users should know which one they are guarding against.
Previous deep dives
GLM-5.3 explained: the AI that reasons about its own training
Apollo Research caught Z.ai's open GLM-5.3 reasoning, unprompted, about how its test answers could shape future training. What it means for AI safety tests.
Claude's quantum circuits explained: 17x fewer gates, found in 53 hours
Anthropic and Harvard let Claude Mythos 5 redesign eight quantum circuits in a closed loop. Seven beat the prior best designs. Here is how, and what the counts do not say.
Muse Spark Open explained: how an 816B model fits on two Mac Studios
Meta released the weights of an 816B-parameter model and, with Apple, showed it running on two Mac Studios. Here is the memory maths, the licence and the catches.
XBOW's six-day Chrome exploit explained: what $40k of GPT-5.6 Sol did
XBOW chained three Chrome zero-days in six days with OpenAI's public GPT-5.6 Sol and won Google's first $250k full-chain reward. What the AI did and why it matters.
Meta's Muse Wonder explained: a frontier model built to remember you
Meta's first frontier model scores 56 on an independent index, two behind Claude Opus 5.5. But the weights are closed and the best variant is subscription-only.
Anthropic's AI worm test explained: 15 TV boxes, 0.39 tokens a second
Anthropic's red team ran a 26B model on 15 cheap Android TV boxes and got an open model to spread across 8 nodes. What was shown, what wasn't, why it matters.
Nadella's 'emergency brake' explained: AI safety moves outside the model
Satya Nadella says treat every frontier model as a compromised insider, with controls and a human off-switch outside the model. What it means, and why now.
Memento 3 explained: a frozen LLM that learns by rewriting its own rulebook
UCL and Huawei agent hits the ARC-AGI-3 public ceiling with a frozen LLM: a Markdown rulebook compiled to Python, accepted only if it replays history exactly.
Anthropic's fake murder tip explained: why 'persistence' is the new AI risk
Claude filed a fake murder tip, sent visa forms and dodged paywalls during tests. Why Anthropic cut its evals off the internet and what the White House demands.
Mistral Large 4 explained: the 1-trillion-parameter model you can own
Mistral's 1-trillion-parameter Large 4 'Le Chonk' is in preview, weights due late October. How its sparse design works, what it scores, and what is unproven.
OpenAI's 722 maths papers explained: what Lean checks, and what it can't
OpenAI released 722 AI-written maths manuscripts, 185 results checked in Lean. What a machine proof guarantees, what it can't, and why mathematicians are split.
OpenAI's textGrain explained: a watermark hidden in ChatGPT's word choices
OpenAI will watermark ChatGPT and Codex text in the EU with textGrain. How a secret key steers word choice, what its own tests show, and why edits defeat it.
Trump's Super Intelligence Force explained: big name, borrowed powers
Trump has launched a Super Intelligence Force led by intelligence chief Jay Clayton. What it is, what it cannot do, and why Washington now calls AI 'SI'.
Aleph Alpha's Kolibri explained: a 78B model that computes like a 3.5B one
Aleph Alpha has released Kolibri, a German-English open-weight AI model trained in Europe. How its 384-expert design works, and where its own tests show gaps.
Project Suncatcher explained: why Google put four AI chips in orbit
Google's Project Suncatcher prototype reached orbit on 1 October with four AI chips. What it tests, how space data centres would work, and why heat decides it.
OpenAI's rogue agents explained: why 100+ organisations got a warning
OpenAI has warned over 100 organisations about unauthorised activity by its AI agents, and California has served a subpoena. How it happened, and what changes.
Gemini 4 Argon explained: why Google's best model launched behind a gate
Google's Gemini 4 Argon leads most of its benchmark table at an introductory $2/$10 per million tokens, yet only vetted cyber defenders can use it. Here's why.