Reading

China's leading artificial intelligence lab Moonshot AI is seeking access to advanced Nvidia chips through data centers located in Europe, aiming to navigate around U.S. export restrictions. According to a CNBC report published Thursday, four people familiar with the matter stated that discussions took place this year regarding Moonshot renting capacity from neocloud providers hosting Nvidia graphics processing units (GPUs) at European facilities. The sources requested anonymity due to the private nature of the information.

Nvidia's effective monopoly over the most powerful chips has made U.S. export controls a key instrument in Washington's effort to maintain its advantage over China in the AI race. American AI labs such as OpenAI and Anthropic are engaged in training and pricing battles with Chinese developers, including Moonshot AI, which produces the Kimi family of models. While U.S. law restricts the shipment of Nvidia's most advanced chips to China, remote access via overseas data centers offers a loophole, as current regulations do not grant authorities broad power to control corporate access to these chips through cloud services hosted abroad.

Moonshot was interested in leasing capacity powered by Nvidia's Blackwell systems, which are currently subject to export controls banning their import into China. Two sources indicated that Moonshot focused on clusters for inference—serving models to end users—in Europe, while another source noted interest in training clusters as well. One source described talks about arrangements where Moonshot would rent access to clusters of 8,000 or more Blackwell GPUs hosted in the region, characterizing the Chinese AI lab as "very aggressive" in its pursuit of computing power.

To lease Nvidia computing power in Europe, a Chinese AI company typically rents capacity from non-Chinese neoclouds or data center operators capable of purchasing advanced chips. One source mentioned a proposal for Moonshot to pay 30% to 50% more upfront than a non-Chinese offtaker would. Arrangements with Chinese customers can be more lucrative upfront, as neoclouds and financing firms look to hedge against a potential future ban on remote access agreements.

This development follows a July statement by the White House alleging that Moonshot had accessed Nvidia's Blackwell chips via a facility in Thailand, a claim Moonshot did not comment on at the time. Additionally, the Financial Times reported on Tuesday that Nvidia told cloud providers they must sell at least 51% of their services to non-Chinese customers. An Nvidia spokesperson responded: "America cannot win the AI race unless America's AI infrastructure wins worldwide—if the world's clouds rely on foreign-made chips, the model and application layers will be foreign-built as well."

As enterprises move AI agents from experimental phases into production workflows, governance often becomes the weakest link. At the 2026 ASUG Tech Connect event, SAP cybersecurity and compliance advisor Srinivas Nandiwada presented a layered agent governance framework during a panel discussion, attempting to answer a practical question: after an agent goes live, who is responsible for managing it, how should it be managed, and what exactly needs to be managed.

Nandiwada’s approach breaks governance down into several layers, each with an escalation path to the next, aligned with current regulations such as the EU AI Act. The specific artifacts he outlined include: maintaining an active agent registry in LeanIX; requiring a deployment manifest for each agent, where any change to the agent's scope must undergo re-approval; completing a system card for every agent that defines all its risk exposure areas and operational boundaries; establishing a monitoring framework for each agent after it goes live; and retaining audit logs of all agent behaviors.

A guiding principle runs through this framework: security and governance are not obstacles, but enablers. Nandiwada specifically advised starting by validating the highest-risk agents within the framework, rather than beginning with the safest tasks. He also proposed a guideline consistent with the EU AI Act but potentially controversial: fully autonomous agents should only be used for low-risk, bounded tasks and never for decisions affecting people.

The article also recorded the real-world status of attendees' organizations. Nandiwada noted that currently, only a minority of organizations possess post-launch monitoring capabilities for agents. One customer suggested using LeanIX to begin cataloging agents, including those you may not currently have control over in your area of the business. Another customer expressed confusion about how to secure internal support for safe governance when not subject to the EU AI Act. During the discussion, it was suggested that security cases could be built around other emerging regulations or current liability exposures from potentially affected parties.

The boundaries of this framework are also worth noting. It stems from statements made by a single compliance advisor at SAP during one customer event, and the article itself provides no evidence that this framework has been independently validated for effectiveness. Nandiwada’s methodological value lies in translating abstract governance principles into an actionable list of artifacts, but whether enterprises can truly implement it depends on their own data foundations, process maturity, and personnel skills—as the article repeatedly emphasizes, customers must own their own strategy and data.

US semiconductor manufacturer Micron Technology has halted construction on its Fab 11E site in Taoyuan, Taiwan. According to Bloomberg, activity on the site has all but stopped, except for minor safety work, as the company and its Taoyuan labor union have failed to reach an agreement regarding clearer profit-sharing terms.

Micron has not released a formal statement about the suspension but has informed local officials. The company stated, "Taiwan plays an important role in Micron’s global footprint, and our operations today continue as normal," expressing confidence in maintaining business continuity for customers.

The halt comes at a critical time for negotiations. Micron recently announced bonuses potentially reaching five times annual salary for some eligible workers and reached a deal with the larger Taichung union, though some members expressed dissatisfaction. However, the Taoyuan union continues to hold out for better terms, with both parties set to meet again on November 6. Last month, the union launched a one-day strike to demonstrate resolve and highlight potential operational disruptions.

Workers at the big three memory chip manufacturers—Micron, Samsung, and SK hynix—have been protesting to demand a larger share of the massive profits generated by the AI memory chip boom. SK hynix agreed to pay staff $50,000 apiece, with employees receiving $477,000 in bonuses this year and up to $900,000 next year. Samsung Foundry workers secured an average $340,000 bonus, averting a massive strike.

While Micron is developing other sites globally, including an HBM fab in Japan and a $24 billion project in Singapore, the Taoyuan shutdown underscores how rising labor costs and tense industrial relations could impact the expansion speed of the AI hardware supply chain.

On November 5, 2026, Chinese technology company Alibaba released its "Alibaba AI for Good Action Report 2026." This is the second consecutive year the company has published such a report, emphasizing that in the era of AI agents, technological development must meet three conditions: "socially acceptable, environmentally sustainable, and economically viable."

Regarding environmental capacity, Wang Chaoyang, General Manager of Global Data Centers at Alibaba Cloud Intelligence Group, disclosed key operational data. The compute density of Alibaba Cloud's self-built data centers has increased from approximately 0.8 kW/m² two years ago to 4.5 kW/m², with a projected target of 9 kW/m² by the end of March 2027. Over the past year, the proportion of clean electricity used in its self-built data centers reached 73.6%. In terms of water resource utilization, the average WUE (Water Usage Effectiveness) for self-built data centers this year was 1.198 liters/kWh, dropping to 0.205 liters/kWh in air-cooling-dominated parks. Additionally, modular construction has compressed the project delivery cycle for data centers to 100 days.

The report also showcased specific cases of medical AI moving from risk screening to clinical assistance. Zhang Ling, Senior Algorithm Expert at DAMO Academy, stated that Alibaba's cancer screening model coverage has expanded from single cancers to high-incidence digestive system cancers such as pancreatic and gastric cancer. In a prospective colorectal cancer trial, AI analysis of 29,783 CT images identified 597 positive cases; after clinical review, 17 lesions were confirmed, including some cases not identified by standard procedures. The model re-analyzes existing CT images without requiring additional scans or radiation exposure.

Another application is the "Hydrogen Ion" medical AI assistant, led by Wang Xiangzhi, CTO of Ali Health. The platform integrates medical literature, clinical guidelines, and evidence grading systems into the model workflow. Currently, an expert team of approximately 300 doctors participates in reviewing results, and the platform generates hundreds of thousands of queries daily. Furthermore, Liu Sizhe, CEO of Shouyi Technology, shared an AI voice-based cognitive impairment early screening project. By supplementing training data with synthetic speech, the model's experimental accuracy on real samples improved from 81.67% to 85.83%, successfully identifying multiple potential risk individuals in community screenings.

Yuriy Nazarenko lived off cigarettes, chips, and beer in his grandfather’s apartment on the outskirts of Odesa, Ukraine, forging passports pixel by pixel across four screens. One screen displayed Telegram, while another showed a passport scan filling the entire monitor in Photoshop. He edited MRZ codes, superimposed other people’s faces, and adjusted the dimensions and printing characteristics of each passport type. A high-quality fake document took a week to craft, and he would sometimes sit at his computer for more than twelve hours straight.

This manual craftsmanship did not scale. Nazarenko created templates to speed up the process, but bottlenecks remained. His next step was building a website that allowed customers to input personal information, which would then automatically populate the fake ID templates. Later, when generative AI became mainstream, he integrated it as well. OnlyFake thus came into existence.

OnlyFake produced more than just scans of documents; it generated realistic-looking photos simulating real-world shooting scenarios—fake IDs lying on sofas, carpets, or desks, as if someone had taken them out of their wallet and snapped a picture with their phone. Need a photo of a California driver’s license to open a cryptocurrency account? A British passport to register a company overseas? A Social Security card? All were available. The result was photos of non-existent people and non-existent documents that could still deceive verification personnel and automated scanning systems.

The U.S. Department of Justice stated in its announcement regarding Nazarenko’s guilty plea that OnlyFake sold over ten thousand fake IDs at $15 each, generating revenue exceeding one million dollars. Anyone without Nazarenko’s manual skills could now churn out hundreds or even thousands of fake IDs in bulk. This directly threatened the Know Your Customer (KYC) frameworks of financial institutions—if anyone can obtain a photo for a few dollars in Bitcoin, does the premise of identity verification still hold?

Nazarenko said in interviews that fake IT workers from North Korea had used his website. When 404 Media first exposed OnlyFake in April 2024, he panicked, destroying his laptop and emails and buying a new phone, paranoid that authorities were about to break down his door. The pressure of running a fraud empire pushed him toward drug use. Ultimately, the FBI arrested him; he served one year in prison and was subsequently detained for several months by U.S. Immigration and Customs Enforcement (ICE).

At 28 years old, he is currently living in Asia and is recounting his experience publicly for the first time. His reflection is this: OnlyFake showed him for the first time how quickly a small internet project could become a global phenomenon, and it taught him in a very painful way what happens when the scale of something grows faster than your understanding of its consequences.

Fernando Alvarez, Chief Strategy and Development Officer at Capgemini Group, has made a specific assertion: the challenge of enterprise agentic AI systems lies not in the models, but in the operating model. By this, he means that even if model capabilities are sufficiently strong, demonstrations will remain stuck in the demo phase if teams cannot control which systems agents can access, cannot observe what happens at each step of execution, and cannot evaluate the impact of changes using their own data.

This assertion is not isolated. Julien Smadja, Vice President of AI at shipping company CMA CGM, noted that their AI system, built in collaboration with Mistral engineers, covers critical processes such as cargo release, customer assistance, and logistics orders; for each new automated process, the time from development to production readiness has been shortened from months to weeks. Gualtiero Bazzana (Member of the Executive Committee and Chief AI Officer) pointed out that most industrial AI projects are still stalled at the pilot stage; his team plans to build agents and workflows on Mistral Studio for clients' engineering and R&D departments to move pilots into production.

The 'operating model' described by Alvarez has corresponding technical infrastructure in Studio’s latest update. OpenTelemetry tracing displays every step of each run, including model calls, tool usage, and approval nodes, allowing teams to see where processes slow down or fail; the evaluation feature allows testing changes to prompts, models, or tools against proprietary datasets before release; and access boundaries restrict agents so they can only reach systems actively connected by the enterprise.

The common logic behind these mechanisms is to shift trust from abstract confidence in models to checkable evidence of specific execution paths. When an agent investigates a production incident on behalf of engineers, it must follow the team’s operational manuals, request human approval before taking sensitive actions, and post findings to Slack—leaving an auditable trail at every step. Engineers picking up the investigation already have context, rather than starting from scratch.

However, it is important to note that these quotes and cases come from Mistral’s own product launch blog, where partner selection and narrative framing are controlled by the vendor. Alvarez’s argument itself holds independent explanatory power—it points to a widely observed phenomenon: the gap between enterprise agentic AI pilots and production is often not a model issue, but an engineering one. Yet, framing the solution as features of a specific platform is a natural extension of vendor storytelling. The value of the 'operating model' concept lies in its naming of a real constraint; its limitation is that the namer is also the provider of the solution to that constraint.

Digital intelligence can already write code, perform mathematics, and generate videos, yet physical intelligence still stumbles when attempting to grasp a simple cup. This gap is one of the most frequently cited structural challenges in the current AI landscape. At the Second International Conference on Engineering Intelligence held during the 2026 World's Top Scientists Forum in November, Mei Tao, founder and CEO of the AI company HiDream.ai, offered a concrete architectural response: the three technology routes—large language models, multimodal models, and embodied large models—are not isolated from one another but will ultimately converge in the long term toward what he terms the Agentic Omnimodal World Model.

Mei Tao breaks this architecture down into three functional components. First is the LLM, which serves as the agent's decision-making brain, responsible for understanding intent, generating reasoning, and formulating task plans. Second is the Omni-Model, or general world model, which acts as a world simulator: based on the intent provided by the LLM, it simulates the operation of the physical world, deduces the consequences of actions, and anticipates next steps. Third is the Embodied Context, which interfaces with the real physical environment, executes embodied actions, and feeds back real-world observational data to calibrate the world model.

The key proposition for their synergy is 'One Token Space, One World'—achieving unity between the mental world and the physical world within the same Token space. This means that all modalities, including text, images, video, spatial data, pose, force/touch, and sensor inputs, share a single representation rather than operating independently. HiDream's proprietary native omni-modal (Unified Transformer) architecture serves as the engineering foundation for this proposition.

It must be clarified that this is an architectural vision statement presented by a company at an industry conference, not an independently verified research result. Mei Tao has not publicly released any benchmark comparison data or third-party reproductions to demonstrate that this three-component scheme outperforms other world model pathways. The background data he cites—such as OpenRouter statistics showing China's weekly Token call volume reaching 93 trillion, and OpenAI's public release of 377 mathematical achievements—constitute media-reported industry context, not experimental evidence for this specific architecture.

Richard Horne, head of the UK's National Cyber Security Centre (NCSC), warned on Tuesday that the United Kingdom could face targeted cyberattacks on its critical infrastructure powered by artificial intelligence by 2028. He noted that criminals and state actors are increasingly leveraging AI to scale and enhance their cyber operations.

Horne specifically cited recent incidents where hackers raised temperatures in supermarket freezers across Europe, causing food to thaw. These attacks exposed significant risks in Operational Technology (OT). While not directly initiated by complex AI, they exploited outdated control systems and default passwords. However, AI tools can now automatically scan for and discover these "long-tolerated vulnerabilities," exploiting them at a previously unimaginable scale.

The report highlighted that Chinese cyber activity remains the most complex and persistent threat to the UK, with both Russia and China routinely using AI to pursue geopolitical goals. Beyond digital systems, AI is being used to augment existing tactics such as ransomware. Horne urged companies to stop relying on cheap, obsolete technology and demanded explanations for why they continue operating without adequate cybersecurity investment, warning of potential service disruptions or bankruptcy.

The UK government plans to enhance AI applications in emergency response following a summer of extreme heat that triggered widespread wildfires. According to TechRadar, UK Prime Minister Andy Burnham is expected to reveal these plans at a resilience summit hosted at the National Situation Centre on Friday.

The new AI unit will operate as an arm of the cabinet's crisis-management committee, COBRA. It aims to combine satellite imagery, early detection systems, and military aircraft to accelerate response times for fires in hard-to-reach areas. Royal Air Force (RAF) Chinook helicopters and A400M aircraft will be equipped with new specialist firefighting equipment to tackle wildfires from the skies for the first time.

Tech and aerospace companies including Google, Airbus, and VodafoneThree are expected to attend the announcement. The government stated the AI unit will help 'spot and fight fires faster.' This follows previous UK initiatives such as plans for a £100 million AI Biosecurity Lab and efforts to become a global AI powerhouse.

The move comes after the UK faced an unprecedented number of wildfires during its hottest summer on record, destroying thousands of acres of wildlands, triggering nationwide emergency alerts, and seeing a fire burn kilometers away from the Sizewell B nuclear power station.

Zhidx reported on November 5 that Shanghai-based video generation foundation model startup Sand.ai has completed a $200 million (approx. 1.334 billion yuan) A+ funding round. This is the company's third financing event in 2026, bringing its cumulative fundraising to $300 million (approx. 2.001 billion yuan) over 10 months. While Sand.ai did not disclose its post-money valuation, the company stated it has officially joined the ranks of unicorns following this round.

The round was co-led by Cornerstone Capital and Wangsu Science & Technology. Other participants include Era Capital, Panlin Capital, Dongzheng Capital, Tianchuang Capital (along with Shandong Railway Industrial Investment and Shandong Railway Fund), as well as Shanghai state-backed entities like Pudong Venture Capital and Shanghai Guofang. Existing investors such as Matrix China, Huaye Tiancheng, and CAS Star continued to add capital. Sand.ai noted that the funds will primarily be used for video foundation model R&D, training and inference infrastructure, product iteration, and global market expansion.

Founded in January 2024 and headquartered in Shanghai, Sand.ai focuses on video generation foundation models and application products. Its founder and CEO, Cao Yue, holds a Ph.D. in Software Engineering from Tsinghua University and previously served as a principal researcher at Microsoft Research Asia and head of the Visual Model Research Center at Beijing Academy of Artificial Intelligence (BAAI). He was also a co-founder of Light Year, an AI large model company acquired by Meituan. Cao contributed to visual model research including Swin Transformer, which won the ICCV 2021 Marr Prize.

Technically, Sand.ai has evolved its architecture from autoregressive generation and joint audio-video modeling to hundred-billion-parameter MoE models. In August 2026, the company released and open-sourced MAGI-2 Preview, becoming the first team globally to scale a video generation model to 100 billion parameters while releasing model weights. The model uses an ultra-fine-grained MoE architecture with approximately 114B total parameters, activating only about 6B per forward pass. Additionally, Sand.ai's video generation product VidMuse surpassed $10 million in Annual Recurring Revenue (ARR) two months after launch.

Following this funding, Sand.ai plans to continue advancing next-generation large-scale video models, accelerating the deployment of open-source foundation models and applications, and expanding its global developer ecosystem. Amid intensifying competition in video generation, the company's ability to convert model capabilities into stable product revenue and overseas market share remains a key focus for the next phase.

In its latest quarterly earnings call, HubSpot CEO Yamini Rangan articulated a clear strategic trade-off: eliminating pricing friction, packaging friction, and AI adoption friction for customers, even at the cost of extended buying cycles and near-term revenue pressure. Her core argument is that enterprise customers are evaluating AI differently—they demand to see it operate effectively with their own data and in their specific environments, seeking proof before purchase. HubSpot has chosen to align with this shift by introducing free trials and pricing tied to value and outcomes, rather than attempting to lock customers into traditional subscription models.

This assessment is grounded in observations of changing enterprise AI procurement behaviors. Rangan noted that AI decisions are no longer purely technical choices but strategic ones, resulting in larger procurement committees involving CEOs, CTOs, and board members. HubSpot’s response involves engaging senior decision-makers earlier in the sales cycle, bringing in multiple stakeholders, and providing technical expertise. A key metric reported was that in deals with five or more buying committee members, the win rate nearly tripled when HubSpot proactively engaged multiple stakeholders; deals involving C-suite executives also demonstrated higher close rates.

However, trial growth alone does not equate to revenue conversion. Rangan acknowledged that while agentic trials grew 64% over the past three months, customers require hands-on operational support to translate trials into tangible results. Consequently, HubSpot’s strategy is bifurcated across two market segments: the upmarket (enterprise), which relies on partners and solution consultants for manual guidance—checking in a week after trial initiation to confirm clear outcomes and follow up—and the downmarket (SMBs), where significant resources are invested in simplifying the product experience. For SMBs, agentic onboarding allows customers to simply provide an email address to access their calendar and see results quickly, without relying on human intervention.

Regarding pricing models, HubSpot is evolving from Phase One to Phase Two. In 2024, Phase One lowered seat pricing, removed minimum seat requirements for Sales Hub and Service Hub, and introduced core seats. While initial average selling prices (ASPs) declined, this attracted more customers and improved retention. The current Phase Two aims for a hybrid model of seats and credits: seats provide platform AI and data access, while credits scale with AI value and customer outcomes. Specifically, pilots in the Nordics and Benelux have eliminated separate Hub subscriptions, reduced the price jump from Starter to Pro tiers, and unified all usage-based features (email sends, ticket resolution, data enrichment, API calls) into credits. Results show declining ASPs but increased Pro+ customer volume and credit consumption reaching two to three times pre-pilot levels.

This pilot will expand to all new customers across EMEA in Q4, with results determining the pace of global rollout. Rangan summarized that HubSpot’s goal is to make the platform easier to buy and AI easier to adopt, believing now is the time to remove friction, accelerate AI adoption, and capture market share early in the AI platform shift. She explicitly stated this is a deliberate trade-off: accepting longer near-term buying cycles in exchange for stronger long-term growth and profitability.

This paper, 'Towards Deep Learning Models Resistant to Adversarial Attacks,' published in 2018 by Aleksander Madry and colleagues at the Massachusetts Institute of Technology (MIT), delves into enhancing neural network security through robust optimization. The study highlights that deep neural networks have inherent weaknesses, making them highly susceptible to adversarial attacks—inputs that are nearly indistinguishable from original data but cause the model to misclassify. This vulnerability is particularly dangerous in safety-critical systems such as autonomous driving and facial recognition.

To address this issue, the authors propose a unified framework based on saddle-point (min-max) problems. This framework formalizes adversarial training as an optimization problem: the inner layer maximizes to find the adversarial perturbation that maximizes the loss function, while the outer layer minimizes by adjusting model parameters to reduce risk under this worst-case scenario. This approach not only encompasses previous attack and defense mechanisms but also provides a clear objective for safety guarantees, specifically resisting all attackers bounded by certain norms (such as the ℓ∞ norm).

In terms of implementation, the paper proves that Projected Gradient Descent (PGD) serves as a reliable 'first-order adversary' capable of effectively solving the aforementioned optimization problem. Experimental results show that models trained with PGD achieve over 89% accuracy against the strongest white-box attacks on the MNIST dataset and 46% on CIFAR-10. This indicates that by increasing model capacity and adopting correct optimization strategies, the adversarial robustness of deep learning models can be significantly improved, bringing them closer to the security standards required for practical deployment.

For researchers and engineers interested in AI safety, machine learning theory, or those needing to build high-robustness visual systems, this classic 2018 paper, 'Towards Deep Learning Models Resistant to Adversarial Attacks,' provides the foundational framework for understanding the nature of adversarial attacks and designing effective defense mechanisms. It is recommended to start reading from Section 2, 'An Optimization View on Adversarial Robustness,' to grasp the core methodology.