Reading time: 6 minutes

🗞️ In this edition

  • China Locked 23 AI Technologies Behind Its Border

  • Meta Gave Away Its Biggest Open Model

  • India Says Test Agents Broke Into Live Systems

  • 🔌 MCP CORNER Three servers worth wiring up this week.

  • ⚡ YOUR MOVE For people building the life they want, now.

  • In other AI news:

    • The FTC Subpoenaed OpenAI And Anthropic

    • Proofpoint Is Buying Varonis For $6.3 Billion

    • Microsoft Finished Training A 2.8 Trillion Parameter Model

  • 4 must-try AI tools

Beijing wants to know before anything leaves. Meta gave away a model that runs on two desktop computers. And India's government says agents under test broke into live company systems.

Keep reading.

FROM OUR SPONSOR

Upwork

Everything that slipped in Q3 is still sitting there.

The fastest way to clear it is to hand it off. Connect the Upwork MCP Server to your AI agent, describe the project, and have proposals from vetted freelancers by tomorrow. Your agent does the searching. You make the call.

Spend $250, get $500 in Upwork credit. Available until December 31, so there is time to pick the right project.

Free to connect. Standard fees only when you hire. Every action confirmed by you.

Source: SCMP

WHAT HAPPENED

China's commerce and science ministries opened a public consultation on restricting the export of 23 artificial intelligence technologies, alongside items in biomedicine and solar power. The list covers large models, AI agents and computing clusters, and it reaches model weights and source code once a product passes a set performance level. A registration requirement took effect the same day, so anyone moving one of these technologies abroad now has to file with the ministry first, including deals already under way. Comments close in November.

WHY IT MATTERS

Export control has been something the United States did to China. This is the same instrument pointed the other way, and it lands on the part of the stack everyone assumed was loose: the weights themselves. If a model counts as a controlled technology, then every company outside China building on a Chinese open model is building on something a ministry can turn off.

OUR TAKE

The obvious read is retaliation, a mirror of Washington's chip rules. We think the target is closer to home, and the giveaway is that the registration desk opened before the rules did. You do not stand up a filing system to punish a foreign government. You stand one up because you want to see, deal by deal, what your own companies have been shipping out.

Watch the final catalogue after comments close. If weights and source code are still on it, Beijing has decided its open models were a strategic leak, and freely downloadable Chinese frontier weights are finished. If weights come off and only hardware and clusters stay, this was an audit with a loud announcement attached.

Hundreds of billions of parameters, and it will run in a spare room.

Meta released Muse Spark Open, a model whose weights anyone can download, and says it is the strongest open-weights model built in America. It reads text, images, video and audio, and a compressed build runs on two Mac Studios wired together instead of a rack of server chips. The licence puts limits on commercial use, and the weights are already hosted across most of the big clouds.

If you could only keep one, which would you want?

We are changing how much we write per story this week. One tap tells us which direction to take it.

Login or Subscribe to participate

Source: Digit.in

Nobody at the companies noticed. The model providers had to tell them.

India's national cyber agency warned that AI agents went past the tasks they were given and reached systems they had no permission to touch, reading business records that held personal and confidential material. The companies affected did not spot it for days, and only learned of it when the model providers disclosed the incidents after their own internal reviews. The agents got in through settings left exposed in app configurations, public code repositories and loose cloud permissions.

🔌 MCP CORNER

THREE SERVERS WORTH WIRING UP THIS WEEK.

An MCP server plugs your assistant into another app, so it stops describing the work and starts doing it.

  1. Discord MCP: Lets your assistant read and post in your own server, so community questions get answered while you sleep.

  2. Cloud Run MCP: Hands your agent your deployments, so it ships the fix and reads the logs without you opening a dashboard.

  3. Kubernetes MCP Server: Opens your live cluster to your assistant, so it tells you which part is actually failing.

⚡️ YOUR MOVE

FOR PEOPLE BUILDING THE LIFE THEY WANT, NOW.

  • 💸 Accenture is now centrally funding only $29 a month of Claude use per person, after some staff ran up bills near $1,000. Anyone who goes over has to find a project or a team willing to cover the rest. If your employer has not set a number yet, it is coming. → See how the cap works

  • 🚨 A critical flaw in the Archon coding agent, scored 9.8 out of 10, leaves its control API with no authentication and listening on every network interface by default, while the agent itself runs with permissions bypassed. Versions 0.2.13 through 0.11.1 are affected and there is no patch yet. → Check your exposure

  • 🎨 Black Forest Labs put out an open-weights image model at 5.6 billion parameters that runs on a consumer graphics card with 8GB of memory, keeping the 4K output, pixel-perfect editing and bounding box placement of the full version. → Pull the weights

  • ✅ GitHub's AI Scan for pull requests is now generally available and covers the languages its older scanner does not, including PHP, Bash, Terraform and Dockerfiles. It suggests fixes and explains the risk, but it cannot block a merge, and it bills against your security AI credits. → Turn it on

  • The FTC Subpoenaed OpenAI And Anthropic – Civil investigative demands went to both companies seeking records on safety incidents, privacy policies and safeguards, two weeks after the agency disclosed the probe and a fortnight after the White House hosted a voluntary pledge signing.

  • Proofpoint Is Buying Varonis For $6.3 Billion – The deal pairs Proofpoint's view of what people are doing with Varonis's control over what can reach sensitive data, with both companies naming AI agents reaching that data at scale as the reason, and closing expected in early 2027.

  • Microsoft Finished Training A 2.8 Trillion Parameter Model – MAI-Base-2 ran on 16,000 Nvidia chips over 38 days, and Microsoft claims it beat every open-weight model it tested while needing several times less computing power, with the tuning stage still under way and no public release announced.

  1. HeyGen Video Translator: Dubs your video into the language your customers speak, in your own voice.

  2. Rytr: Gets the first draft out of the way so you can fix it instead of starting it.

  3. Slidesgo: Hands you a deck that looks designed before you have written a word.

  4. Fireflies AI: Sits in the meeting so you can stop taking notes and start talking.

Three stories about who is allowed to hold the thing. Beijing decided a set of weights is a controlled technology and opened a desk to watch them leave. Meta decided its own weights are worth more given away than kept. And in India nobody decided anything, because agents nobody had authorised were already inside, and the companies found out from somebody else.

Decide who holds yours.

Interested in featuring your services with us? Email us at [email protected]