iCreatAI News
Back to main site
Skip to content
Only Industry#DeepSeek
  1. TechCrunch · AI78

    Export-banned Nvidia chips are behind China’s most powerful AI models — uh-oh, Jensen!

    Unemployment Labs researcher Will DePue analyzed the weights of openly released models from DeepSeek, Moonshot AI, MiniMax and Ant Group and found evidence that models including Moonshot's Kimi K3 releases and DeepSeek's V4 bear fingerprints of training on export-banned Blackwell chips. Epoch AI estimates about two million advanced chips entered China in 2024 and 2025 through schemes hiding their final destination, though the chips could have been in offshore data centers such as those in Malaysia, which imported an estimated 275,000 Nvidia AI accelerators in that period. The article also reports that Nvidia CEO Jensen Huang left the company this week after admitting an affair with Alice Huang, an executive of Megaspeed, a company implicated in smuggling Nvidia chips into China.

    Why it matters: The piece is useful for readers tracking how researchers infer training hardware from model weights and how export-control debates are colliding with Nvidia's corporate and leadership turmoil.

  1. The Decoder80

    Former OpenAI researcher says he found Nvidia Blackwell fingerprints hidden inside six Chinese AI models

    Will DePue says weight-initialization patterns in six Chinese models released since April 2026 match Nvidia's Blackwell core counts (148 or 152), while earlier models like DeepSeek-V3 and Kimi K2.5 show Hopper signatures; he says OpenAI and Anthropic researchers independently confirmed the findings and has published verification code on GitHub. He maps DeepSeek-V4-Flash and MiniMax-M3 to B200/B300 chips and DeepSeek-V4-Pro, Kimi K3, Kimi K3.1-Pro and Ant Group's Ling-3.1-flash to GB200/GB300, estimating the five training runs used about 12,000 Blackwell GPUs costing over half a billion dollars. The report notes the fingerprint shows only which hardware initialized the weights and does not by itself prove smuggling or a violation of US export law, since capacity can be rented outside China.

    Why it matters: It offers a concrete, code-backed method for inferring which GPUs trained a model, plus caveats on what such evidence can and cannot establish.

  1. Hacker News AI78

    Phala Confidential AI Compromised

    Phala published preliminary findings on a security incident in which an attacker chained a legacy internet-facing service with management interfaces that trusted loopback access, creating unauthorized CVMs and obtaining application credentials, and also took control of an inference VM serving DeepSeek V4 Flash 0731, exposing in-flight request data. Requests routed to Phala by OpenRouter between October 21, 2026 00:00 UTC and November 8, 2026 05:35 UTC should be treated as exposed, and affected CVM owners were contacted directly with rotation guidance. Phala contained the incident on November 8, rotated its KMS root key on November 6, restored the model service with added protections, and says a full root cause analysis is still in progress.

    Why it matters: The report gives a detailed operational timeline and concrete credential-rotation guidance for users of a confidential AI provider, useful for anyone assessing exposure or third-party AI infrastructure risk.

  1. Hacker News AI81

    AI agents stole 190k gaming credentials for under $400 in model costs

    Check Point Research analyzed operator-console artifacts from 10 misconfigured ARTEX agentic hacking instances, finding attacks ran almost fully autonomously with Chinese models, especially DeepSeek Flash, dominating usage. One operator's fleet recovered over 190,000 Honor of Kings credential sets (about 3.3% still valid) for an estimated $180–$360 in model costs, while another spent roughly $700–$1,500 over two weeks to obtain more than 300 iOS code-signing certificates. Researchers counted 2,557 systems hosting ARTEX panels, 1,608 of them live and public, and observed agents chaining RCE, IDOR and SSTI flaws into supply chain compromises.

    Why it matters: It offers rare operator-side evidence of how cheaply and autonomously LLM agent fleets now conduct opportunistic cybercrime at scale.

  1. Wiz Research78

    “Black October” for AI Developer Platforms

    At least nine AI developer platforms disclosed incidents during October, with Fireworks, OpenCode and Warp reporting indications of an “agent swarm” attack and OpenCode and CommandCode attributing theirs to attempted “distillation.” Wiz describes downstream abuse of enterprise credentials tied to one vendor breach, including two keys used for roughly 800k and 1.7 million Bedrock calls respectively, likely over $100k in usage at list price. Wiz also links the keys to resale operations at llm-routing.com and xingjiabiapi.org, and publishes IOCs including 23.106.46.239 and 38.246.114.118.

    Why it matters: Provides Wiz's technical account of LLMJacking follow-on activity and IOCs from the October platform breaches.

  1. Latent Space88

    [AINews] Anthropic files for $2T IPO in 2 weeks: 1400% growth rate, 48% of revenue through cloud partners, 85% margin, $1B op profit in Q2, $134B cash in bank and $10B lifetime burn

    Anthropic publicly filed its S-1 to list on Nasdaq under the ticker "ANT," reporting revenue growth from $41M in 2023 to $16.3B in H1 2026, with Q2 revenue of $11.6B (up 1,368% YoY) and Q2 operating profit of $974M. The filing shows an 85% gross margin in H1 2026, 48% of H1 2026 revenue flowing through cloud marketplaces, $112.4B in cash plus $19.3B in short-term investments against roughly $9.7B in implied lifetime burn, and non-cancelable compute commitments extending into the next decade. It also discloses a recent delay in pre-training a new frontier model and describes "Virtual Collaborators" as the forward pitch for over a billion knowledge workers by 2028.

    Why it matters: The piece condenses a 350-plus-page S-1 into the key financials, compute commitments and strategic claims, making it a useful map of Anthropic's economics and open questions.

You have reached the end