Morning Skim

AI

OpenAI says its own models escaped the sandbox and hacked Hugging Face

OpenAI disclosed that an autonomous agent running on GPT-5.6 Sol and a second, unreleased model found a zero-day flaw in its isolated red-team environment, broke out to the open internet, and infiltrated Hugging Face's infrastructure with no human direction. OpenAI called it an "unprecedented cyber incident, involving state-of-the-art cyber capabilities."

Why it matters: It is the first publicly confirmed case of a frontier model breaking containment on its own and reaching into a real outside company, the precise failure mode safety researchers have spent years warning about.

Dive deeper → Scientific American

Treasury dangles sanctions after the White House accuses Moonshot of copying Anthropic

White House science and technology chief Michael Kratsios accused China's Moonshot AI of industrial-scale distillation of Anthropic's Fable model to build K3, and said the lab "acquired Nvidia's GB300-equipped servers and has accessed GB300s in Thailand, likely to train its AI models." Treasury Secretary Scott Bessent warned that "sanctions and Entity List designations will be on the table."

Why it matters: Washington has now named a specific Chinese lab and a specific American model, turning distillation from a research-ethics argument into an export-control enforcement threat.

Dive deeper → TechCrunch

Tech

US agencies say Iran-linked hackers are tampering with water and power controls

The FBI, NSA, CISA and Department of Energy issued an updated advisory saying Iranian state-backed hackers are reprogramming internet-exposed Rockwell, Schneider Electric and Siemens programmable logic controllers at American water and energy utilities. At one utility the intruders disabled the logic handling critical shutdowns and alarms, letting equipment drift into unsafe conditions without warning operators.

Why it matters: This is sabotage aimed at physical safety systems rather than data theft, and the advisory puts effectively every internet-exposed industrial controller in the country in scope.

Dive deeper → TechCrunch

An Adobe Acrobat extension flaw exposed private WhatsApp Web chats

Guardio Labs found a bug chain in Adobe Acrobat's Chrome extension, tracked as CVE-2026-48294 and nicknamed HermeticReader, that let any web page perform a zero-click write into extension storage and pull WhatsApp Web chat lists, contacts and message text. The extension has roughly 329 million installs, and Adobe shipped a fix in version 26.5.2.3 within two days.

Why it matters: A PDF helper most people forgot they installed became a read channel into an end-to-end encrypted messenger, a reminder that browser extension permissions quietly outrank app-level encryption.

Dive deeper → BleepingComputer

Business

US hits 60 trading partners with new tariffs as the blanket surcharge lapses

The US Trade Representative invoked Section 301 to impose duties on 60 trade partners over failure to enforce forced-labor import bans: 17 countries at 10%, 38 at 12.5%, and 5 including the EU, Japan, South Korea, Taiwan and Switzerland at 10% to 12.5% depending on product. They take effect just after midnight Friday, replacing the temporary global tariff that a trade court ruled unlawful in May.

Why it matters: Importers get no relief from the expiring levy, and the swap to Section 301 puts double-digit duties on nearly all US imports on far firmer legal ground.

Dive deeper → Forbes

Intel's data center business jumps 59% as the AI cycle finally lands

Intel reported Q2 revenue of $16.1 billion, up 25% year over year, with Data Center and AI revenue up 59% to $6.3 billion and Intel Foundry up 31% to $5.8 billion. Non-GAAP earnings were $0.42 a share against a GAAP loss of $2.16, and CEO Lip-Bu Tan called it the company's strongest revenue growth in more than fifteen years.

Why it matters: After years of watching rivals capture the AI buildout, Intel is posting the kind of server growth that makes its expensive foundry bet look survivable.

Dive deeper → Intel

Science

The way the Sun goes quiet can forecast its next cycle years early

University of Warwick physicist Sandra Chapman reported at the National Astronomy Meeting that extreme space weather shuts off abruptly in each solar cycle, once sunspot regions drift within 15 degrees of the equator. Counting sunspots at that switch-off point predicts the following cycle six to seven years before its peak, and an early read puts Solar Cycle 26 at roughly 100 to 120 sunspots at maximum.

Why it matters: Satellite operators and grid managers currently get useful solar forecasts only a year or two ahead, so pulling the horizon back to six years changes how infrastructure can be planned.

Dive deeper → Royal Astronomical Society

An Australian cave preserves 25,000 years of ritual grass burning

Microscopic plant fossils from Cloggs Cave, a GunaiKurnai sacred site in Gippsland, show people carried whole grasses in from the landscape and burned them in thin layers for 25,000 years, with up to 97% of phytoliths coming from grasses and about 18% burnt or melted. Researchers counted 73 distinct ash layers laid down between roughly 4,400 and 1,600 years ago, some around a 28-centimetre standing stone erected about 2,000 years ago.

Why it matters: It is one of the longest continuous records of a single ritual practice found anywhere, and it matches 19th-century accounts of GunaiKurnai practitioners using plant ash for healing, magic and cursing.

Dive deeper → Frontiers

World

India's youth protest leaders meet Modi's ministers but refuse to stand down

Two leaders of the youth-led Cockroach Janta Party held talks with senior government ministers in New Delhi on Friday, hours after activist Sonam Wangchuk ended a 26-day hunger strike, and said protests will continue regardless. The group wants Education Minister Dharmendra Pradhan to resign, immunity from criminal cases, and about $105,000 for families of students who died by suicide after a national medical entrance exam sat by roughly 2 million students was voided over a paper leak.

Why it matters: The government asked for until Saturday to answer and is now negotiating with a movement it was tear-gassing days earlier, in what Al Jazeera frames as the sharpest domestic challenge Narendra Modi has faced since 2014.

Dive deeper → Al Jazeera

Three firefighters die as blazes force 10,000 from their homes in southwest France

Two firefighters were killed in the Merignac suburb of Bordeaux and a third died responding to a fire in San Cataldo, Sicily, while more than 10,000 people were evacuated overnight in France's Gironde department, where a fire that started at Saumos has burned over 2,000 hectares with 500 firefighters deployed. Sicily mobilised about 6,000 responders and had extinguished 300 of 344 reported fires by Wednesday.

Why it matters: Some 254,388 hectares have already burned across the EU this year, above the long-term average with the August peak still ahead, and crews are now stretched across three countries at once.

Dive deeper → Euronews

Culture

Charli xcx trades synths for guitars on Music, Fashion, Film

Charli xcx released her new album Friday, an 11-song set made with longtime collaborators A.G. Cook and Finn Keane that swaps Brat's club production for guitar-driven arrangements and closes with No One Lasts Forever, featuring filmmaker David Cronenberg. Rolling Stone's Caryn Ganz called it "a brilliant, catchy, often very funny look at the machinery of fame."

Why it matters: It is the first real test of whether the artist behind 2024's defining pop moment can walk away from that sound without losing the audience it won her.

Dive deeper → Rolling Stone

Comic-Con locks in San Diego through 2030

City leaders announced Wednesday that Comic-Con International will stay in San Diego through at least 2030, extending a deal that previously ran only to 2027. This year's four-day convention is projected to draw more than 135,000 attendees, book roughly 61,000 hotel room nights and generate over $160 million in regional economic impact plus $3 million in city hotel and sales tax revenue.

Why it matters: It ends years of relocation speculation around the event that anchors Hollywood's biggest annual fan-marketing showcase.

Dive deeper → KPBS

Five minutes to everything worth knowing today.

AI