Thursday, 27 August 2026
Nvidia acquires Hugging Face for $13B; Amazon Mechanical Turk shuts down September 30; Australian police arrest two TeamPCP supply-chain hackers.
Today's Lead
EngineeringLatent Space
Nvidia Acquires Hugging Face for $13 Billion
Nvidia acquires Hugging Face for thirteen billion dollars in a deal that recognizes the value of open-source AI development. Hugging Face operates a platform where developers share, find, and deploy machine learning models from a central hub. This deal reflects Nvidia's strategic move to control the open-source AI ecosystem as competitors advance efficient model architectures. Hugging Face doubled its customer base in 2026, demonstrating strong growth that justifies the thirteen billion dollar price. The acquisition validates that open-source approaches to AI development have become critical to commercial success in the industry.
Amazon
Amazon Mechanical Turk to Shut Down September 30, 2026
Amazon will close Mechanical Turk on September 30, 2026, after it assessed its programs and services. The platform connected workers with businesses for small tasks, such as label data, answer surveys, and moderate content. MTurk was foundational to AI training: millions of businesses used it to label data for AI systems. Workers and requesters have until September 30 to plan their next steps.
Read →Krebs on Security
Two Alleged TeamPCP Hackers Arrested in Australia
Australian police arrested two men, ages 21 and 23, for membership in TeamPCP, a peer community that conducts software supply chain attacks. The group embedded malicious code in hundreds of open-source tools on GitHub and NPM. TeamPCP compromised LiteLLM software in March 2026, stole data from automobile makers, and used a self-propagating worm called Shai-Hulud. The 21-year-old suspect, identified as Ruben Thomson of Perth, left a trail of OPSEC failures including registering a company under a handle tied to TeamPCP activity.
Read →Trail of Bits
VMs Won't Contain Cyber-Capable Agents
AI agents can find and use security holes to escape from virtual machines. A test with GPT 5.6-Cyber showed that the AI broke out three times by exploiting kernel bugs and unknown security holes. Standard virtual machines do not provide enough protection from advanced AI agents. Organizations must patch systems faster, limit what agents can do, and watch for escape attempts. Specialized virtualization tools like Firecracker offer better protection but remain breakable.
Read →Asahi Linux
Asahi Linux Progress Report: Linux 7.2
Asahi Linux 7.2 implements a PSCI conduit using m1n1 firmware to enable proper CPU power management on Apple Silicon. The M3 series now has full hardware support including webcams, microphones, USB 3.0, and Thunderbolt via the ACE3 controller. M4 and M5 series are in early bringup where NVMe and PCIe enumeration work. Video decoder support matured with AVC, HEVC, and VP9 decoding that works reliably through a VA-API translation layer. Sven identified how SPRR and GXF security features work, which restored the m1n1 hypervisor for M4+ machines.
Read →JSTOR Daily
How Kudzu Was Supposed to Save the South
The federal government promoted kudzu in the 1930s as a solution to the soil erosion left behind by plantation agriculture. Nurseries distributed over 85 million seedlings and paid farmers up to $8 per acre to plant it. After World War Two, new agricultural technology made kudzu unnecessary and federal support collapsed. Public perception greatly exaggerates kudzu's spread — actual data shows only about 227,000 acres affected, not the millions often claimed. Kudzu's reputation says as much about how Southerners understand environmental threats as it does about the plant itself.
Read →