Good evening. Here is what matters in AI today, and how to put it to work.
We see AI supply-chain risk, recursive self-improvement, and cybersecurity fragility converging into a single hard question: who is actually in control?
~3 min read · last 12 hours
In today's issue
01
Anthropic is using AI to build AI, and the pace is doubling
02
AI broke cybersecurity. What comes next?
03
Nvidia H200 chips reached a Chinese shell company with an empty office
04
China's MSS allegedly recruited an exec to spy on Nvidia's CEO
05
Post-midterms, Elon Musk and data centers face a rockier road
Main story
Anthropic is using AI to build AI, and the pace is doubling
A new report says Anthropic's models are improving roughly twice as fast as a year ago because the company is using AI to automate AI development itself, with no sign of slowing down.
Why it matters: If recursive self-improvement is already compressing capability timelines, every roadmap assumption your team made six months ago is worth revisiting now.
What to watch next: Watch for whether other frontier labs disclose similar recursive development pipelines, and whether regulators treat AI-accelerated AI development as a distinct risk category requiring new governance frameworks.
We are watching the gap between AI capability and human oversight widen in real time: Anthropic's recursive development loop is accelerating model improvement while cybersecurity experts warn the entire sector is struggling to keep up with what that unleashes.
Ask the Experts: Dory Looped Transformer Model | Nemotron Labs
NVIDIA Developer
The Signal
Three threads ran through today's news and they all point at the same underlying tension: the humans nominally overseeing AI systems are losing ground. Anthropic's models are reportedly improving twice as fast as a year ago because AI is now doing much of the development work itself. Meanwhile, US export controls on Nvidia chips are being undermined by sham entities, and a Chinese intelligence operation allegedly targeted Nvidia's CEO directly. Add a cybersecurity expert calling the whole sector a "mess" and the picture is clear: the governance and oversight infrastructure around AI is not keeping pace with the technology or the adversaries trying to exploit it.
All the best, the KYFEX team
Quick hits
AI self-improvement and the oversight gap
AI broke cybersecurity. What comes next?
Cognition CSO Alex Stamos argues that AI has fundamentally destabilized the cybersecurity world, calling the current state a serious mess in a new interview series on AI in real life.
Why it matters: Security leaders should treat this as a prompt to audit whether their threat models still reflect an AI-augmented attacker, not the pre-2023 baseline.
Chip supply-chain security and export-control failures
Two stories this week expose the same structural weakness: US export controls on advanced AI chips are only as strong as the vetting process behind them, and that process appears to have serious holes.
Nvidia H200 chips reached a Chinese shell company with an empty office
Neither the Commerce Department nor Nvidia appear to have done adequate due diligence before clearing a Chinese firm called New Matrix to receive H200 AI chips, according to The New York Times.
Why it matters: If your AI infrastructure relies on chip supply chains that touch export-controlled hardware, this is a signal to pressure-test your own vendor verification practices before regulators do it for you.
China's MSS allegedly recruited an exec to spy on Nvidia's CEO
A US intelligence memo reportedly claims China's Ministry of State Security recruited a female technology executive at Megaspeed to gather intelligence on Nvidia CEO Jensen Huang.
Why it matters: State-level targeting of semiconductor executives is a direct indicator of how strategically important AI chip access has become, and a reminder that supply-chain risk is not just a compliance issue.
Post-midterms, Elon Musk and data centers face a rockier road
The midterm results are creating new political headwinds for the tech industry, with implications for data center expansion and Musk-linked ventures in particular.
Why it matters: Political risk is now a first-order variable in data center siting and AI infrastructure investment, and teams planning multi-year capacity builds should model it explicitly.
Explore Mistral's open-source and commercial models, and leverage Mistral's JSON mode to generate structured LLM responses. Use Mistral's API to call user-defined functions for enhanced LLM...
Learn about 3D ML with libraries from the HF ecosystem
Hugging Face · Free
Put it to work
Try this today
Audit your AI vendor and supply-chain risk assumptions
You are a risk analyst. I will describe an AI vendor or hardware supplier we rely on. Identify the top five supply-chain, geopolitical, or export-control risks that could disrupt our access to this vendor's products or services within the next 12 months. For each risk, rate its likelihood (low/medium/high), its potential impact on our operations, and suggest one concrete mitigation step. Vendor description: [paste your vendor details here].
Why it helps: Today's chip export-control failures show that supply-chain risk in AI is no longer theoretical, and a structured prompt like this forces your team to surface gaps before an incident does.
Before you ship it
The risk
Recursive AI development, where models help build the next generation of models, compresses the timeline between capability jumps and safety validation, leaving less time to catch alignment or reliability regressions before deployment.
Do this
Establish a mandatory human-review checkpoint after every AI-assisted development cycle, with explicit sign-off required before any model trained or improved with AI tooling is promoted to production.
Ready to ship AI, not just read about it?
KYFEX designs and builds production AI for teams that need it working, not just demoed. Tell us what you're working on and we'll bring the engineering.