1. OpenAI's Astra Is the First Model Flagged at 'Critical' Cyber Risk
OpenAI released GPT-6 Astra on September 3 and said it is the first model to cross the critical threshold on the company's cyber preparedness scale. Astra scored a perfect result on ExploitBench and autonomously found and exploited two zero-day vulnerabilities during evaluation. Access to its strongest offensive capabilities is being limited, with chain-of-thought monitoring and jailbreak detection layered on top. The benchmark picture is already contested: Epoch AI rates Astra at 169 points, while Artificial Analysis says it is no better than its predecessor outside of a standout ARC-AGI-3 result.
2. Google Ships Gemini 3.8 Flash Cyber to Vetted Defenders Only
Google launched a security-specialised variant of Gemini 3.8 Flash, available exclusively through a new invite-only Fairwind Program for trusted defenders. Google reports 70%+ on internal vulnerability-discovery evaluations across 20 languages, and 2.6x more correct patches to Chrome vulnerabilities than leading commercial models. It lands the same week as Astra, putting two gated offensive-security models in the field at once.
3. Moonshot AI Files Confidentially for a Hong Kong IPO at a $50B Valuation
Beijing-based Moonshot AI filed confidentially on September 3 and is now said to be seeking up to $5 billion, up from an initial $3 billion target. The company is valued at $50 billion in an ongoing round, driven by a reported $300M revenue run rate on Kimi K3. Bank of America joined as overall coordinator alongside CICC, Deutsche Bank and Goldman Sachs.
4. South Korea Commits $919 Billion to an 18.4 GW AI Datacenter Buildout
Korea's sovereign AI program targets 8.4 gigawatts of AI datacenter capacity by 2029 and 18.4 gigawatts by 2035. The $919 billion figure spans power generation, compute infrastructure and domestic foundation-model development, delivered through partnerships with SK Group, GS Group and Naver. It is one of the largest single national compute commitments announced to date.
5. Thailand Suspends Construction of 49 Datacenters
Thailand paused construction on 49 datacenter projects while it develops a regulatory framework for the sector. The freeze is the sharpest example yet of governments tightening oversight of AI compute buildouts — a striking counterpoint to Korea's simultaneous nine-figure expansion. Power availability and grid impact are the recurring pressure points in both directions.
6. ChatGPT Health Plugs Directly Into Epic Patient Charts
OpenAI connected ChatGPT Health to Epic's electronic health record system, which covers more than 325 million patients. Clinicians get read-only access to notes, lab results, medications and specialist documentation from inside the chart, and a separate plugin searches ClinicalTrials.gov and PubMed. Read-only scoping is the safety boundary here — the model reads the record but cannot write to it.
7. Sony and Warner Chappell Sue Anthropic, Naming Founders Personally
Sony Music Publishing and Warner Chappell filed a 48-page complaint against Anthropic that names the company's founders as individual defendants. The suit seeks statutory damages of up to $150,000 per song. Naming founders personally is the escalation to watch — most prior training-data suits have stayed at the corporate level.
8. A 4.5-Billion-Record TikTok Dataset Landed on Hugging Face
An independent researcher uploaded a 289 GB dataset of 4.5 billion video records scraped from TikTok's private API. The uploader acknowledged the scrape violates TikTok's terms of service and attached a license prohibiting identity profiling and targeting. It is a live test of how public model hubs handle large-scale scraped personal data.
9. Nvidia's Equity Portfolio Hits $99 Billion, Up 10x Year-Over-Year
Nvidia's holdings in other companies reached $99 billion, a tenfold increase from a year ago. The chipmaker has become one of the sector's largest strategic backers, taking stakes across the customer base that buys its hardware. The circularity — supplier equity flowing into buyers of that supplier's product — is drawing increasing scrutiny.
// KEY TAKEAWAYS
Two frontier labs shipped gated offensive-security models in the same week, and OpenAI classified its own release as critical-risk for cyber — the safety framework triggering on a shipped product rather than a hypothetical one. The compute story split in two directions at once: Korea committed $919B to an 18.4 GW buildout while Thailand froze 49 datacenter projects pending regulation. And the money keeps concentrating — Moonshot is chasing a $5B raise at a $50B valuation, and Nvidia's equity book grew 10x to $99B, while the copyright fight escalated to naming Anthropic's founders personally.