Future Technology[Weekly Roundup] Nvidia just bought the open AI commons
Nvidia buys Hugging Face, AI agents run their own attacks, and one flash a mile underground.
Morning. Five stories worth your Friday coffee, plus one to watch next week.
AI
Nvidia is buying Hugging Face for 12.9 billion dollars
Nvidia has agreed to acquire the site that hosts more than a million open AI models, and the library that half of production AI code imports on line one. Reported price: around 12.9 billion dollars. The company selling the shovels now owns the map of where everyone digs.
Why it matters: open source AI has leaned on a neutral commons for five years, and that neutrality was never protected by anything except Hugging Face staying independent. Defaults are how platforms exert power, and Nvidia sets them now. Pin your model versions and keep local copies of anything you would struggle to reproduce.
Security
AI agents are running cyberattacks with barely any human in the loop
The UK AI Security Institute published an incident report on its own test agents taking actions nobody sanctioned. Separately, researchers documented a China-linked campaign against Taiwanese targets where agents handled most of the intrusion chain. CISA says the exploits aimed at more than 100 US water systems in July showed signs of AI assistance.
Why it matters: the constraint on offensive operations has always been skilled human hours. Agents remove it. The techniques are the same ones from every incident report of the past decade, the tempo is not, and the gap between a patch shipping and being attacked is now measured in hours.
A CVSS 10.0 SonicWall flaw is being exploited right now
CISA added it to the Known Exploited Vulnerabilities catalogue alongside five other actively attacked bugs. Maximum severity means remotely reachable, no authentication needed, full compromise on success. Edge appliances have dominated that catalogue for three years running, because they sit outside everything that watches your network.
Why it matters: a high CVSS score is a theory about how bad something could be. A KEV listing is a statement that somebody is already doing it. If you cannot patch this week, get the management interface off the public internet and rotate anything stored on the device.
Science
The LZ dark matter detector saw one event it cannot explain
LUX-ZEPLIN is seven tonnes of liquid xenon sitting 1.5 kilometres under South Dakota, built so that almost nothing happens inside it. Across years of running, the collaboration now has a single interaction its background model does not predict. One event is a puzzle with a very small denominator, not a discovery.
Why it matters: the interesting part is the sensitivity that makes one flash worth discussing at all. LZ is closing in on the neutrino fog, the point where solar and atmospheric neutrinos become indistinguishable from dark matter and adding more xenon stops helping.
Hardware
RAM and SSD prices are still climbing, and nothing is coming to save you
No factory burned down. Manufacturers looked at what high bandwidth memory earns when it is bolted to an AI accelerator, and moved wafer capacity toward it. New fab capacity takes roughly three years from decision to volume output, so the decisions being made now land in 2028.
Why it matters: waiting out a memory spike is usually the right instinct, and probably is not this time. If an upgrade is already on your list, a 6000MHz CL30 kit like the Corsair Vengeance RGB DDR5 32GB or a Samsung 990 PRO 2TB is worth pricing now rather than in spring.
One to watch next week
Apple holds its first keynote under John Ternus on Wednesday 9 September at 10:00 PDT, which is 18:00 BST, 17:00 UTC and 02:00 on Thursday in Tokyo. The foldable is expected, and the price is the real story: a tier sitting above the Pro would reset what an expensive phone means for everyone else. We will cover it properly.
Forwarded this? Get your own free briefing at futuretechnologyhq.com/newsletter
Reply and tell me what you want more of.
Nath, Future Technology
Some links in this newsletter may be affiliate links. We only recommend products we genuinely think are worth your time.