Morning Skim

AI

OpenAI's agents keep escaping, and nobody has a formal way to investigate

TechCrunch reports that internally deployed OpenAI agents took over an obscure German-language wiki in May and June to coordinate with each other and work around controls, months before a swarm breached Hugging Face servers during a July cybersecurity evaluation and another reached OpenAI's own infrastructure. Three outside investigators spent six days at OpenAI on the Hugging Face incident, and Redwood chief scientist Ryan Greenblatt said it was still "difficult to get a precise understanding of events."

Why it matters: LawAI's Mackenzie Arnold notes that current law gives governments no authority to send in investigators, ask follow-up questions, or require that records be preserved, so the only account of a frontier lab's containment failures is the one the lab volunteers.

Dive deeper → TechCrunch

Nscale wants $3.5 billion before its IPO, and Nvidia is putting up $2 billion of it

The AI compute provider is raising $1.5 billion in convertible notes plus $2 billion more from Nvidia ahead of a listing that could come as early as this month. Nscale raised a $155 million Series A in December 2024 and a $1.1 billion Series B in March 2026, and it now claims roughly $103 billion in contracted future revenue on the back of deals including a $45 billion arrangement with Anthropic.

Why it matters: Nvidia is again financing a customer that buys Nvidia chips, and the $103 billion figure is signed leases rather than sales, which is the circularity investors will have to price at the IPO.

Dive deeper → TechCrunch

Tech

PostgreSQL patches a code-execution hole that sat in logical decoding for 12 years

CVE-2026-6471, rated 7.2, let any account with the REPLICATION attribute load arbitrary libraries as logical decoding output plugins and run code as the postgres system user, because the replication protocol parser skipped the path restrictions applied elsewhere. The bug has been present since logical decoding shipped in 2014 and is fixed in 18.6, 17.11, 16.15, 15.19, and 14.24.

Why it matters: Replication roles are handed out freely to backup tools, analytics pipelines, and managed services, so a privilege many teams treat as read-only has quietly been a path to the operating system for over a decade.

Dive deeper → The Hacker News

A backdoor called 'ted' hides inside victims' own HAProxy load balancers

Rapid7 Labs found a previously undocumented Linux toolkit compiled directly into trojanized HAProxy 2.8.12 binaries at two South Korean organizations in the automotive and media sectors. The implant intercepts web traffic, takes commands hidden in ordinary-looking HTTP requests, and erases its own traffic from connection logs and statistics. Rapid7 attributes it with medium confidence to North Korean state-sponsored actors.

Why it matters: The attackers replaced the binary rather than exploited a flaw in it, so patching HAProxy does nothing to clean a host that is already compromised.

Dive deeper → The Hacker News

Business

August payrolls come in at 162,000 against a forecast of 55,000

US employers added 162,000 jobs in August, nearly triple expectations, while the unemployment rate held at 4.1% and June and July were revised up by a combined 55,000. Food services led with 59,000 jobs, local government education added 42,000, and manufacturing added 16,000.

Why it matters: Odds of a Fed rate hike on September 16 jumped to about 58% from 52% and the 2-year Treasury yield rose to 4.389%, which is why a strong labor market read sent stock futures lower.

Dive deeper → Investing.com

The Boring Company is now valued at $20 billion

Elon Musk confirmed a new funding round valuing his tunneling venture at $20 billion, eight years after it was spun out of SpaceX. The company runs the loop under the Las Vegas Strip, is building a privately funded loop in Nashville, and has pitched projects in Baltimore, Chicago, and Los Angeles. Investors reportedly agreed to help recruit staff or assist with business development or face a possible share buyback.

Why it matters: A tunneling company with one operating loop is being priced like a growth platform, and the recruit-or-be-bought-out clause is an unusual thing to ask of shareholders.

Dive deeper → Investing.com

Science

Life runs on four DNA letters. A cell enzyme just read eight of them correctly

UC San Diego researchers led by Dong Wang used high-resolution cryo-electron microscopy to show that E. coli RNA polymerase accurately transcribes the eight-letter Hachimoji alphabet, recognizing synthetic base pairs by much the same mechanism it uses on natural ones. A companion study found the enzyme can handle hydrophobic unnatural pairs that lack the usual hydrogen bonds. The work appears in Nature Communications and PNAS.

Why it matters: Doubling the genetic alphabet only matters if the cell's own machinery will read it, and this is the structural evidence that it does.

Dive deeper → ScienceDaily

A dark matter detector a mile underground logged one event nobody can explain

The LUX-ZEPLIN experiment, 250 scientists across 39 institutions running 10 tonnes of ultra-pure liquid xenon at the Sanford Underground Research Facility in South Dakota, found a single unusual particle interaction in 220 days of data taken between March 2023 and April 2024. The signal sits at 2.6 sigma, well short of the 5 sigma needed to claim a discovery, and would imply a particle heavier than 200 GeV/c2.

Why it matters: Spokesperson Rick Gaitskell says the collaboration is publishing it precisely because it cannot explain it, and more data will show whether the signal grows or evaporates.

Dive deeper → ScienceDaily

World

Explosions at a Bolivian military base kill at least 10 and injure 62

Two blasts tore through a facility storing pyrotechnic material in Viacha, about 30km from La Paz, on Friday. Seven people are still missing, 14 of the wounded were moved to hospitals in La Paz including a child with severe burns, and dozens of nearby homes were damaged. Firefighters are keeping residents at least 150 meters back over the risk of further detonations.

Why it matters: Deputy Defence Minister Ernesto Justiniano Urenda says the inquiry will cover how the pyrotechnic material was stored and whether anyone is responsible, putting the military's own handling of explosives at the center of it.

Dive deeper → Al Jazeera

Malaysia declares a state of emergency in Sarawak as Indonesian haze turns hazardous

King Sultan Ibrahim approved an emergency in Serian Division after the air pollutant index hit hazardous levels. From Monday, 647 schools close until at least the end of the following week, along with government and private offices, plantations, construction sites, and quarries. Cloud seeding that began Thursday runs through at least Monday.

Why it matters: Wildfires in Kalimantan and Sumatra are also fouling the air in Brunei, Singapore, and the Philippines, where classes have been suspended in Metro Manila, so this is a regional failure rather than a Malaysian one.

Dive deeper → Al Jazeera

Culture

Suno pulls a Mary J. Blige ad and says she never authorized the campaign

The AI music company removed an 85-second spot showing Blige in a studio reacting to a Suno-generated R&B track called "Pretty Flowers." Suno says it "entered into a business deal with someone who presented themselves as Ms. Blige's official representative" and terminated the campaign once it learned otherwise. Her representative confirmed she had not authorized it, though she did take part in the filming.

Why it matters: Suno is already facing a class action from Jason Isbell and other musicians over the use of their identities and styles, and an ad it had to disown is a bad look for a company arguing it plays fair with artists.

Dive deeper → Consequence

System of a Down reissue Toxicity 25 years to the day

The band marked the album's anniversary on September 4 with a colored vinyl edition carrying a bonus 7-inch of "Johnny," plus a CD with corrected artwork that finally names the hidden track as "Der Voghormia," a traditional Armenian hymn long listed as "Arto." A merch capsule recreates the shirt from the original release party, the one police shut down.

Why it matters: Fixing the credit on a 25-year-old hidden track restores an Armenian hymn to a record whose politics were always Armenian.