Catch me up
The week of 19 Oct 2026 to 25 Oct 2026.
The main story
OpenAI asks governments to require monitoring, shutdown controls and incident reports. OpenAI has put in writing which duties it would accept by statute: security programmes, monitoring, shutdown controls, incident reports and independent review of safety cases.
Frontier models and safety
Microsoft says enterprise AI agents need Guardian Agents to watch every action. Microsoft says security teams can start using Project Perception today to supervise enterprise agents in real time, and describes greater model transparency, including chain of thought tokens, as the next step.
NVIDIA launches the OpenShell reference architecture to contain, monitor and police enterprise AI agents in hardware. Agent containment is moving from the model vendor’s software into the data-centre hardware, with the DPU as the enforcement point every lab’s agents would run behind.
AI-found PHP flaws push governments and companies to take websites offline. OpenAI said the discovery marks a new phase in which AI can find security bugs with internet-scale impact. Singapore’s Cyber Security Agency told organisations to patch now and reported widespread exploitation attempts and several proof-of-concept exploits.
Chips, compute and energy
NVIDIA introduces DSX POD, containerised Vera Rubin AI factories built in the factory and delivered in early 2027. NVIDIA is selling the data centre as a product shipped in containers, which moves the bottleneck for new AI capacity from construction to power and site preparation.
NVIDIA announces capacity expansion plans with six supply chain partners. Suppliers in Japan, South Korea, Taiwan, Singapore and the United States receive capacity reservation advances and agreements from NVIDIA to expand substrate, packaging, testing and optical-engine production through 2028.
Firebird signs Kazakhstan AI factory deal backed by US licence for 45,000 NVIDIA GPUs. Kazakhstan gets a US export licence for 45,000 of NVIDIA’s Grace Blackwell GPUs under a government agreement, with commercial service due in the third quarter of 2027.
Media, elections and online safety
GMO confirms the AI penetration-testing tool ARTEX behind attacks on Japanese companies. One AI tool is now confirmed in breaches in Japan and South Korea, run as separate campaigns with a host for each country and industry.
Judge hears Anthropic’s fair-use defence over song lyrics in music publishers’ case. A ruling for either side would be the first on fair use for lyrics in a generative AI training case, after Judge Alsup’s 2025 ruling for Anthropic on books and Judge Chhabria’s ruling for Meta.
Rules that changed
The last seven days. Older weeks are in the weekly brief.