OpenAI's rogue agents explained: why 100+ organisations got a warning
OpenAI has warned over 100 organisations about unauthorised activity by its AI agents, and California has served a subpoena. How it happened, and what changes.
Today's deep dive · 3 October 2026
Project Suncatcher explained: why Google put four AI chips in orbit
Google's Project Suncatcher prototype reached orbit on 1 October with four AI chips. What it tests, how space data centres would work, and why heat decides it.
In 60 seconds
- Google's Project Suncatcher prototype, a refrigerator-sized satellite built with Planet and reported to carry four TPU chips, launched on a SpaceX rideshare on 1 October 2026; Google says it is in contact and operating as expected.
- The concept: put AI chips where sunlight is near-constant, fly satellites 100 to 200 metres apart so lasers can link them at data-centre speeds, and shed heat by radiating it from panels.
- The launch shows nothing yet about cost or scale. Whether orbital data centres ever make sense depends on radiator mass, error rates under radiation and launch prices falling to about $200 per kilogram, which Google's own paper places in the mid-2030s.
A satellite the size of a refrigerator, reported to carry four of the chips Google uses to run AI, reached orbit on Thursday, and Google says it is in contact and "operating as expected". It is the first hardware test of Project Suncatcher, the company's research effort to find out whether data centres could one day run in space on near-constant sunshine. The mission is not measuring how fast the chips are. It is measuring whether a computer can stay cool, and stay correct, in a place with no air and plenty of radiation.
The plain-English version
Start with a thermos flask. It keeps coffee hot because the gap between its walls is a vacuum, and a vacuum is a superb insulator: with no air to carry warmth away, heat can only leak out slowly as invisible infrared light. Space is the biggest thermos there is.
Now imagine switching on a hot plate inside that thermos. That is roughly what Google launched on 1 October: a satellite about the size of a refrigerator, built with the satellite company Planet, carrying four of the chips Google uses to run AI, according to NPR. On Earth, chips like these sit in huge buildings called data centres and are cooled by fans and water. In orbit there is neither. The only way to shed heat is to pipe it to flat panels called radiators and let it glow away into space. NPR reports that the chips will run a small Google AI model for just 15 minutes at a time because of heat.
Or jump to your depth:
Everything else in AI · 3 October 2026
Today in AI: 14 things that happened
-
Safety
Apple to tighten macOS Full Disk Access, citing growing risks from AI agents
Apple said on 2 October that it will add controls to Full Disk Access, the macOS permission that lets an app read everything on a Mac, including files, mail, messages and browsing history. It wrote that "some developers are using Full Disk Access in ways that could put users at risk" and that in future users will be able to grant it only "with very explicit user action". The post names no company and gives no macOS version, date or technical detail. TechCrunch notes that it came days after a journalist claimed Meta's Muse app on Mac read their private messages, which Meta disputed, and also points to a Wired report that a flaw in ChatGPT's Mac app could have exposed sensitive data.Why it matters: Desktop AI agents, assistants that act on a computer on the user's behalf, often ask for broad file access to be useful. Apple is signalling that this permission will get harder to obtain, so developers of Mac agents should expect more friction and users a clearer warning.
-
Business
Amazon reportedly seeks to offload $8 billion of Nvidia chips to investors and lease them back, FT says
Amazon is seeking to move about $8 billion of Nvidia's Grace Blackwell chips into a special-purpose vehicle and lease them back, the Financial Times reported, citing people familiar with the matter, according to Reuters on 2 October. Outside investors would finance the vehicle by issuing debt, with Amazon offering an equity stake of up to 10%; the chips are installed in more than a dozen US data centres across five states. Amazon and Nvidia did not immediately respond to Reuters' requests for comment. Separately, AWS's Capacity Blocks pricing page says new hourly rates for reserved Nvidia GPU capacity take effect on 7 October: its P6-B300 instances go to $16.146 per accelerator-hour, against the $14.04 currently listed, a rise of 15%.Why it matters: A sale-and-leaseback would shift the cost and risk of owning expensive chips to outside investors while Amazon keeps using them; Reuters describes it as a more asset-light approach to Amazon's balance sheet. The higher reservation prices, which AWS says move with supply and demand, suggest GPU capacity remains tight.
-
Policy
US arrests California man over $300 million of AI servers allegedly smuggled to China
Greg Lui, 38, of San Gabriel, California, has been arrested and charged with conspiracy to violate the Export Control Reform Act, smuggling and conspiracy to commit money laundering, the Justice Department said on 1 October. Prosecutors allege that from 2023 to 2024 he and co-conspirators bought more than $300 million of export-controlled servers containing high-end graphics processors, gave manufacturers false paperwork about who would receive them, and shipped them through Malaysia and Singapore to China without the required licences. His company, Earthmade Computer, allegedly received more than $176 million from two Malaysia-based shipment companies between January and October 2024. The Register reports that the hardware included Nvidia's A100 and H100 chips, and that court documents say the scheme continued until at least August 2026. The charges are allegations in an indictment that have not been tested in court, and Lui is presumed innocent; the two conspiracy charges each carry up to 20 years in prison and the smuggling charge up to 10.Why it matters: The case sets out the route prosecutors say restricted chips take to China: through third countries, on false paperwork. How often that works bears directly on whether US export controls limit China's access to AI hardware.
-
Safety
Microsoft's annual security report says attackers are getting AI's benefits first
Microsoft's Digital Defense Report 2026, which covers July 2025 to June 2026, says the median time between a vulnerability being discovered in the wild and being weaponised has fallen "well below 24 hours", BleepingComputer reported on 1 October. Phishing was the way in for 23% of the intrusions Microsoft's incident responders investigated, up from 7% a year earlier, according to Help Net Security. By the same account, the report says Anthropic's Mythos and OpenAI's GPT-5.5 were the first models to show the potential to orchestrate complex attacks on their own: in a test against an emulated enterprise network with no defenders, they took over an entire domain through a 32-step attack chain. It adds that open-weight models trail closed ones on this by seven months. BleepingComputer notes that most campaigns Microsoft observes are still directed by people.Why it matters: Microsoft's point is that finding flaws is speeding up faster than fixing them; it expects "a multi-year period where the number of known but unpatched vulnerabilities spikes". For any organisation, that means less time to patch and more convincing phishing.
-
Safety
OpenAI safety leader David Robinson has left, Business Insider reports, a day after three dismissals came to light
David Robinson, who worked on OpenAI's Safety Systems team and previously led policy planning, left the company last week, Business Insider reported on 2 October (via Techmeme); according to Techmeme's account of the report, an OpenAI spokesperson told Business Insider on Friday that Robinson left last week. His recent work reportedly covered safety transparency, including system cards, the documents OpenAI publishes describing what a new model can do and where it falls short. The Decoder notes that Robinson and the three staff whose dismissal was reported on 1 October, and who OpenAI says mishandled sensitive information, had all spoken publicly about AI risks in September; no connection between those statements and the departures has been established.Why it matters: System cards are one of the main ways outsiders learn what a new OpenAI model can do. News that a leader of that work has left came in the same week that OpenAI's dismissal of three staff was reported and California's attorney general announced an investigative subpoena served on the company; background on the incident behind that scrutiny is in OpenAI's rogue agents explained.
Business Insider via Techmeme · The Decoder · California Department of Justice
-
Business
Amazon pledges $1 billion to data-centre communities and says it no longer uses NDAs with government agencies
AWS chief executive Matt Garman announced on 2 October that Amazon will spend more than $1 billion over five years in US communities that host its data centres, through a programme called Built Together that covers community-college tuition, trade training and energy-efficiency upgrades for homes and public buildings. He wrote that "we no longer use nondisclosure agreements with the government agencies we work with on our projects", promised to publish energy and water use every year, and said new sites will use backup generators that meet the EPA's Tier 4 emissions standard or an equivalent. The Next Web, citing GeekWire, says the NDA change applies to new deals only and that Amazon may still seek local tax breaks in some cases. Garman wrote that more than 100 data-centre moratoriums are being considered across the US.Why it matters: Local opposition is becoming a practical constraint on the AI build-out, and secrecy deals with local officials have been a particular grievance. Ending them, even if only for new deals, is a concrete concession; the money is modest next to the cost of the data centres themselves.
-
Safety
Meta parts ways with Virtue AI safety team four months after hiring it, Semafor reports
Meta is letting go of the employees it hired from AI safety startup Virtue AI about four months after they joined in June, Semafor reported on 2 October. Meta spokesperson Andy Stone said that "unfortunately, the arrangement didn't work out as planned" and that Meta Superintelligence Labs remains focused on AI safety, alignment and frontier risk; Semafor reports that he put the split down to clashing work styles. Semafor, citing a June Axios report, notes that co-founders Bo Li, Dawn Song and Sanmi Koyejo joined Meta along with other employees from the startup. The Virtue AI team did not immediately respond to Semafor's request for comment.Why it matters: Safety staffing is unsettled at two large labs in the same week (see the OpenAI item above). Semafor's report does not say who takes over the team's work as Meta pushes its Muse agent onto more devices.
-
Business
Anthropic commits $100 million to train 10,000 enterprise AI engineers by end of 2027
Anthropic announced the Claude Frontier Academy on 2 October, a $100 million commitment to train 10,000 "Frontier Deployed Engineers" by the end of 2027. The programme is modelled on medical training: a multi-day in-person course built around a simulated enterprise deployment, then a 12-week residency in which engineers lead real Claude projects at their own employers. First cohorts are running in San Francisco, New York and London with staff from Accenture, Bain, Capgemini, Commonwealth Bank of Australia, Deloitte, McKinsey, Morgan Stanley and Novo Nordisk. Entry is by nomination through Anthropic's account teams.Why it matters: For many companies the constraint on using AI is now people who can deploy it, not model capability. Training engineers at customers and consultancies on Claude also ties those firms more closely to Anthropic ahead of the public listing that Bloomberg has reported it is targeting for mid-November, which Anthropic has not confirmed.
-
Hardware
Nvidia adds 64GB DGX Spark at $4,999 as 128GB model's price reportedly rises to $6,950
Nvidia announced a 64GB version of DGX Spark, its desktop AI computer, on 2 October, starting at $4,999 and on sale from 23 October through Acer, ASUS, Dell, Gigabyte, HP and MSI. It uses the same GB10 Grace Blackwell chip as the 128GB model and, Nvidia says, runs models of up to 100 billion parameters on the device; two units can be linked to pool 128GB of memory. The 128GB model launched at $3,999, and Hardware Busters reports that it now costs $6,950 after two increases. The Register gives the same new price, and both outlets blame rising memory prices. Nvidia's post does not mention memory supply or the 128GB price.Why it matters: A machine with half the memory now starts at $1,000 more than the original did at launch. If the two outlets' reading is right, the memory shortage is reaching developers' desks and raising the cost of running models locally.
-
Open source
Meta open-sources Muse Gadgets firmware and SDK for building devices for its AI agent
Meta released Muse Gadgets on 2 October: open-source firmware for ESP32 microcontroller boards and a Linux SDK for Raspberry Pi-class computers, under the Apache 2.0 licence, so that hobbyists and hardware makers can build their own devices that connect to Muse, Meta's personal AI agent. Listed hardware includes small touchscreen boards, an e-ink display and Home Assistant's voice device. Meta has also made 5,000 units of Muse Home Link, a USB-C powered device that connects Muse to a home network and smart-home devices such as TVs and speakers; it is free to Muse subscribers while supplies last, TechCrunch reports, and Meta's page limits the offer to US subscribers, one each.Why it matters: Opening the device side while keeping the agent itself proprietary is a cheap way to seed a hardware ecosystem. It also extends what Muse can reach inside homes, in the week Apple cited AI agents' access to personal data as a growing risk.
Meta · TechCrunch · Engadget
-
Models
Black Forest Labs launches FLUX 3 Image with box-based layout control and 4K output
Black Forest Labs has launched FLUX 3 Image, an image generation and editing model that lets users lay out a scene with bounding boxes, make several edits in sequence while leaving the rest of the picture unchanged, combine up to ten reference images and render natively at 2K and 4K. It is available in the company's playground and through its API, with API prices halved until 8 October, The Decoder reports. Companies can license the weights to run and fine-tune the model on their own infrastructure, and an open-weight version is expected within weeks. The launch page gives no benchmark comparisons with rival models.Why it matters: For design and advertising work, precise and repeatable edits matter more than raw image quality. Black Forest Labs is one of the few image labs that also releases open weights, so the promised open version is the part developers will watch.
-
Models
Microsoft AI releases streaming transcription and multilingual voice models for agents
Microsoft AI released MAI-Transcribe-2-Streaming on 1 October, a real-time speech-to-text model for 60 languages, priced at $0.54 per hour of audio until the end of 2026. Microsoft says it returns its first partial results in just over 100 milliseconds and ranks first for accuracy on Artificial Analysis; both figures are vendor-reported, from the company's own announcement. Alongside it come MAI-Voice-2.1, a text-to-speech model covering 23 languages that keeps one voice across all of them and can clone a voice from a few seconds of audio, at $22 per million characters, and a faster Flash version at $15. Microsoft says voice cloning has built-in consent guardrails. The models are available on Microsoft Foundry and OpenRouter.Why it matters: Voice agents need transcription and speech that are fast and cheap enough to hold a natural conversation. These are Microsoft's own models rather than OpenAI's, another step in building an in-house stack.
-
Research
Mercor study: AI model outscores 12 licensed accountants on four month-end close tasks
Mercor, a company that builds AI benchmarks with working professionals, published a human baseline for its accounting benchmark on 1 October. Twelve licensed CPAs with an average of 5.5 years' experience averaged 37% on four month-end close tasks, with most attempts taking them 30 to 180 minutes, while by Mercor's account Claude Opus 5 scored 100% on all 20 attempts in under 10 minutes each. Mercor puts the cost at $0.21 per criterion met for the model against $10.35 for the accountants. This is a company-run study on a small sample, and Mercor says the tasks test what AI is best at, detail-oriented instruction-following, and leave out client communication and accumulated job context. On the full 160-task APEX Accounting benchmark the leading models score about 62%, The Decoder notes.Why it matters: Human baselines are rare in AI benchmarks, so this is useful evidence that models now beat working professionals on tightly specified tasks. It does not show they can do the job: The Decoder notes that no model fully completed nearly 60% of the tasks in the full benchmark.
-
Policy
Federal judge rules warrantless Flock licence-plate search unconstitutional
US District Judge Sara Hill in the Northern District of Oklahoma ruled on 1 October that a Tulsa County sheriff's deputy violated a driver's Fourth Amendment rights by searching Flock's network of automated licence-plate readers without a warrant, and threw out the Flock records and the evidence from the vehicle search that followed, 404 Media reported on 2 October. According to 404 Media, the deputy ran the search only because the car had a California plate; it returned more than 50 records of the driver's movements around the country over a month. Hill described the network as "a type of indiscriminate mass surveillance". Flock's cameras automatically read and log the plates of passing vehicles. 404 Media calls it one of the first federal rulings to find a Flock search unconstitutional; a district court decision does not bind other courts.Why it matters: Camera networks like Flock's use machine vision to turn passing traffic into searchable location histories. If other courts follow, police would need a warrant to query them, which would change how such surveillance products are used and sold.
Previous deep dives
Gemini 4 Argon explained: why Google's best model launched behind a gate
Google's Gemini 4 Argon leads most of its benchmark table at an introductory $2/$10 per million tokens, yet only vetted cyber defenders can use it. Here's why.