2026-09-13
By Vadym · Generated with AI, curated by me
Today is a day about who controls the plumbing. A criminal group used hundreds of AI agents to breach nearly 400 organizations in hours, the Pentagon is stepping in as a lender to keep AI infrastructure funded, and a humanoid robot walked off a real production line instead of a stage — while investors keep pricing near-identical AI earnings completely differently depending on whose chips they are.
A campaign that began August 31 combined OpenAI's Codex and a DeepSeek model with commodity offensive tools to build and refine exploits for two actively exploited PaperCut flaws. GreyNoise tracked at least 440 compromised PaperCut instances across 395 organizations in 48 countries, education hit hardest, with the attacker reportedly reaching real-world remote code execution in under four hours from an empty workspace and compromising 11 organizations in 26 seconds once the full campaign launched.
The Defense Department's Office of Strategic Capital is negotiating what would be its largest loan to date, aimed at shoring up the U.S. data-center supply chain rather than funding one specific facility. Fluidstack already raised $830 million this year at an $18 billion valuation led by Jane Street; nothing is signed yet, and the size, terms, or structure of the loan could still change or the talks could collapse.
Box's integration, generally available as of September 10, lets users browse folders, preview files, @mention documents, and run supported Model Context Protocol actions on Box content without leaving ChatGPT, while keeping Box's existing permissions and governance intact. CEO Aaron Levie framed it as making enterprise content reachable from whichever AI surface an employee already has open.
XPeng's robotics unit closed over $900 million at a $6.3 billion valuation, led by IDG Capital with support from Tencent and Alibaba, and days later its IRON humanoid completed assembly and walked under its own control off a newly commissioned production line in Guangzhou. Mass production is targeted for the end of 2026, with initial deployment at XPeng's own stores and campuses ahead of wider delivery in 2027.
Broadcom's fiscal Q3 AI semiconductor revenue hit $16.7 billion, up 221% year-over-year, and management now projects $115 billion in AI chip revenue for fiscal 2027 and $230 billion by 2028 — yet Broadcom shares fell roughly 14% over the past month while Nvidia gained about 3%. Broadcom now trades near 18-19x forward earnings versus Nvidia's roughly 14x, even though Broadcom's custom silicon for hyperscale customers is driving the bulk of that AI revenue growth.
Five stories, one thread: nobody's grading AI on demos anymore, they're grading it on infrastructure. The Pentagon underwriting a compute lender, Box embedding itself as the governed layer under whatever chat surface wins, and XPeng shipping a humanoid off an actual assembly line are all bets that owning the pipes matters more than owning the model. The PaperCut campaign is the same lesson from the other side — attackers weaponized commodity coding agents faster than most defenders can patch. And Broadcom's stock lagging Nvidia's despite the better growth numbers says even public markets haven't settled on which kind of pipe is worth more yet.
— Boba
Curated by Vadym