Anthropic signs $45 billion capacity deal with Nscale
Bloomberg, via people familiar with the deal, said Anthropic would lease 460MW from Nscale’s West Virginia campus for six years, with Nvidia Vera Rubin chips due online late next year.
Read briefArtificial Intelligence
09Microsoft fixes Outlook bug hiding Copilot buttons
Microsoft said it had resolved a classic Outlook issue that hid Copilot entry points for some users, after the problem resurfaced following updates and led to a temporary workaround.
Read briefAnthropic plans worker fund as Musk touts share giveaway
Anthropic said it would seek shareholder approval to place 5 percent of its equity into a fund that could back charities or examine direct payments, while Elon Musk proposed giving shares away directly.
Read briefFake Web3 accelerator spreads malware through npm packages
Elastic Security Labs said a fake Web3 accelerator used npm packages to deliver malware on Windows and macOS, while also redirecting AI agent traffic and feeding false audit results.
Read briefOpenCode says Console breach may expose API keys
OpenCode said an intruder reached a legacy system on 16 October and may have exposed third-party provider keys stored in Console, affecting 1.4% of users linked to external accounts.
Read briefAnthropic plans public benefit fund
Anthropic said it would place part of its equity into a new fund, with the share rising as the company grows, and said the structure would support charitable giving and other mission work.
Read briefAnthropic says junior hiring fell as AI hours rose
An internal Anthropic study said the share of junior technical roles and junior hires fell from early 2025, while AI agents logged more hours and took on more work.
Read briefFour Gemini 4 Argon agents beat Minecraft
Four agents using Google’s Gemini 4 Argon completed Minecraft without human input after 27 hours 14 minutes, while the team reported 2,783 programs, 229 messages, 605 deaths and a $1,620 session cost.
Read briefAnthropic consults law firms on AI agent negotiations
Anthropic is discussing negotiation rules with law firms and has hired lawyers as Conceptual Reasoning Fellows, while it tries to improve Claude’s performance on judgement-heavy subjects where data is scarce.
Read briefCybersecurity
10Hackers hijack AOMEI update servers to spread malware
Researchers said attackers briefly altered AOMEI server files between April and July 2026 to push malware through AOMEI Backupper’s update and notification systems, affecting organisations in several countries.
Read briefPlex flaws are exploited to install malware
A researcher said attackers chained recently fixed Plex Media Server flaws to gain remote code execution, and a honeypot then observed scans and infections that installed cryptominers and proxy software.
Read briefPlex flaws used to install miners and backdoor
Researchers said four Plex Media Server flaws could be chained to break into exposed instances, and the article said attackers had already used them to install miners and a proxy backdoor.
Read briefRank Math PRO updates deliver backdoor
Rank Math said copies of its paid WordPress plugin were downloaded or updated in a narrow window, and security firms warned that reinstalling the clean release did not by itself clear all malicious changes.
Read briefMiniMax launches M3.1 Flash with weights to follow
MiniMax said it had released M3.1 Flash, an agentic model it claimed improved speed, cost and benchmark results across coding, computer use and cybersecurity, with weights due later.
Read briefInvestigators probe ShinyHunters ties to ransomware firms
Sources told KrebsOnSecurity that federal investigators examining ShinyHunters had identified executives at two ransomware negotiation firms, and one executive was said to have helped run an extortion website.
Read briefWeekly recap covers zero-days, thefts and AI incidents
The recap pulled together reports of a ConnectWise access incident, a BeyondTrust zero-day, phishing infrastructure taken down by Microsoft, a Ledger wallet compromise, and attacks on French supermarkets and Nextcloud servers.
Read briefGhostAction attackers hide stealer in 94 GitHub repositories
OpenSourceMalware said GhostAction shifted from malicious GitHub Actions workflows to phishing and a fake font payload, after GitHub blocked parts of the campaign, with 94 repositories later identified.
Read briefHackers exploit SiteGuard WAF flaw for root access
SiteGuard said an OS command-injection flaw in its Server Edition WAF was being used against affected systems, while JPCERT/CC warned that it could grant attackers root or SYSTEM privileges.
Read briefConnectWise suspends Cloud Backup after tenant compromise
ConnectWise said it disabled seven application identities and paused Cloud Backup while it investigated unauthorised access to Microsoft 365 tenants, and Huntress later described further targeted sign-in attempts.
Read briefCollection notes (1)
- Google DeepMind: not well-formed (invalid token): line 1, column 0