We just published our podcast with Reed Jobs, who is incredibly thoughtful and has spent years now immersed in oncology and cancer research funding. If you want a crash course on where cancer treatment is headed, you’ll enjoy this. | Also! Quick mention that we're teaming up with Collaborative Fund for a StrictlyVC night in New York on Thursday, September 10, at the very charming Ideal Glass Studios in the West Village. We’ll have food, drinks, and great conversation. We’re still finalizing the lineup, but so far it includes Walker & Company founder Tristan Walker and D.C. United CEO Jason Levien. Space is limited; grab a spot here. | | Top News | Reddit, USA Today, Politico, Reuters, and other publishers are reconsidering whether to let Google access their content as AI search erodes referral traffic, with some weighing outright blocks despite the risk of disappearing from traditional search results. The Wall Street Journal has more here. | White House science adviser Michael Kratsios directly accused Chinese startup Moonshot AI of stealing from Anthropic by covertly distilling its Fable model to build Kimi K3, escalating Washington’s confrontation with Chinese AI developers. Business Insider has more here. | AMD agreed to supply Anthropic with up to two gigawatts of AI chips worth tens of billions of dollars beginning in 2027 and invest as much as $5 billion in the company as deployment milestones are met. The Wall Street Journal has more here. | A 15-year-old Florida teenager dropped a bellwether lawsuit accusing Meta of designing addictive social media features after settling with TikTok, Snap, and YouTube, giving Meta a reprieve amid thousands of similar cases and recent jury losses. TechCrunch has more here. | | |
Struggling with AI workflows? It’s not your prompts. | Even expert prompting hits a ceiling when your portfolio data is buried in messy, inconsistent documents. PortfolioIQ extracts and standardizes every figure, then has a human verify it against the source. Clean numbers make AI instantly more effective. | Get clean data for your agents → PortfolioIQ. | | How OpenAI’s Human Mistake Led to the AI-Powered Hack on Hugging Face |  | Image Credits: Samuel Boivin / NurPhoto and Samuel Boivin / NurPhoto / Getty Images |
| By Lorenzo Franceschi-Bicchierai | On Tuesday, OpenAI revealed that one of its models went rogue during a test and hacked the systems of AI dataset platform Hugging Face in a fully AI-enabled attack, a dramatic example of the dangers posed by advanced AI models. | But, according to some cybersecurity experts, at the heart of this unprecedented AI-powered breach there was a very human mistake: OpenAI failed to properly configure what it called a “highly isolated environment,” allowing a testing sandbox that should have been completely secluded from the internet to actually connect to the internet. | Dan Guido, the founder of cybersecurity research startup Trail of Bits, called the mistake “a containment failure with the safeties turned off.” | In its blog post detailing the incident, OpenAI said that the test that led to the Hugging Face breach was set up to run in “a highly isolated environment, with network access constrained to the ability to install packages through an internally hosted third-party software that acts as a proxy and cache for package registries.” | The model was able to escape the sandboxed testing environment thanks to a previously undisclosed vulnerability in the package-installation system, a critical first step in the eventual hack on Hugging Face, according to OpenAI. | In response, the company “responsibly disclosed the identified zero-day vulnerability in the internally-hosted third-party software and are working with them to patch.” | But to most cybersecurity professionals, software vulnerabilities are to be expected — and the real fault lies with the decision to maintain the third-party software in the first place. Ultimately, the value of a “sandbox” system lies in its full and total isolation. Including a package-installation system is asking for trouble. | | | Massive Fundings | Atoms, an eight-year-old Los Angeles startup founded and led by Travis Kalanick that is building robotics and automation systems for food, mining, transportation, and other industrial sectors, raised a $1.7 billion round led by Andreessen Horowitz, with Bain Capital, Uber, Fifth Wall, Chemistry, A*, K5 Global, Abstract, SV Angel, and Alpha Square Group also digging in. TechCrunch has more here. | Candid Health, a seven-year-old San Francisco startup that automates billing, claims processing, collections, and denied-payment resolution for healthcare providers seeking reimbursement from insurers, raised a $120 million Series D round led by Sixth Street Growth, with Oak HC/FT, 8VC, and Y Combinator also chipping in. Pulse 2.0 has more here. | Cashea, a four-year-old Caracas startup that provides zero-interest installment financing that lets Venezuelan shoppers split online and in-store purchases into bi-weekly payments, raised a $60 million Series B round led by FinSight Ventures, with Spice Expeditions and Endeavor Catalyst also opting in. The company has raised a total of $100 million in debt and equity. Pulse 2.0 has more here. | Cathedral, a recently founded New York startup that aims to expand U.S. military cyber operations using AI, raised a $160 million round at a $1.4 billion post-money valuation. The deal was co-led by Andreessen Horowitz and Sequoia Capital. Reuters has more here. | Glow, a one-year-old Palo Alto startup that helps companies monitor employee devices and block risky software, scripts, and AI tools before they run, raised a $180 million Series A round at a $1.2 billion post-money valuation. The deal was co-led by Sequoia Capital, Cyberstarts, Greenoaks, and Redpoint Ventures, with Index Ventures, Swish Ventures, Lux Capital, Operator Collective, and Holly Ventures also participating. TechCrunch has more here. | Humanoid, a two-year-old London startup that builds wheeled and bipedal humanoid robots that move objects and support logistics tasks in factories, raised a $152 million Series A round at a $1.35 billion post-money valuation. The deal was led by Prime Movers Lab, with Schaeffler, Bosch, Fubon Financial Holding Venture Capital, and Aglaé Ventures also anteing up. SiliconANGLE has more here. | Moonshot, a three-year-old Beijing startup that develops large language models and AI chat tools that developers and businesses use to build and run generative AI applications, is reportedly in the market to raise a follow-on round at up to a $50 billion valuation. It is currently in the process of wrapping up a round at a $31.5 billion valuation from previous investors Meituan, Tencent Holdings, IDG Capital, HSG, ZhenFund, China Mobile, and the Beijing AI Industry Investment Fund. Bloomberg has more here. | | Big-But-Not-Crazy-Big Fundings | Arrakis, a seven-month-old startup based in London and Paris that helps industrial companies automate operational workflows across aerospace, energy, logistics, and manufacturing, raised a $30 million Series A round at a $140 million post-money valuation. The deal was led by Blossom Capital, with Accel, GFC, MainObject, and Rerail also stepping up. The company has raised a total of $38 million. Fortune has more here. | Eurodia Industrie, a 38-year-old company based in Pertuis, France, that builds industrial liquid-treatment systems that help manufacturers recover valuable materials and reduce waste from complex liquid streams, raised a $20.5 million round. Investors included Starquest Capital and Yotta Capital Partners. Zawya has more here. | Genius AI, a 10-year-old New York company that automates bookings, payments, marketing, staffing, and client management for salons, wellness providers, and other in-person service businesses, raised a $44 million Series D round at a $1.15 billion valuation. The deal was led by Lux Capital, with Bessemer Venture Partners, Imaginary Ventures, L Catterton Growth, 2048 Ventures, and StepStone Private Ventures also pitching in. The company has raised a total of $125+ million. Tech Funding News has more here. | Inner Logic, a two-year-old Baltimore startup that helps medical device makers test and validate procedural devices across virtual patients before clinical deployment, raised an $11.5 million seed round co-led by General Catalyst and Bison Ventures, with J2VP, Defined, PTX, Valia Ventures, Page One, Alumni Ventures, and Flare also stepping up. Pulse 2.0 has more here. | Karoo Health, a five-year-old Albuquerque startup that helps health plans and cardiology practices detect cardiovascular risk and coordinate care using clinical, claims, pharmacy, and patient data, raised a $16.2 million Series A round co-led by 7wire Ventures and Allumia Ventures, with First Trust Capital Partners, SpringRock Ventures, and Hyde Park Angels also taking part. More here. | Passionfroot, a four-year-old Berlin startup that connects B2B creators with brands and helps companies manage creator-led marketing campaigns, raised a $15 million Series A round led by Insight Partners, with previous investors Creandum, Supernode Global, and s16vc also opting in. The company has raised a total of $21+ million. TechCrunch has more here. | TYBR Health, a six-year-old Houston startup that develops a flowable hydrogel surgeons apply during orthopedic procedures to protect repaired soft tissue as patients recover, raised a $30 million Series A round co-led by Vensana Capital and Mutual Capital Partners, with Neovate Capital Partners also anteing up. More here. | Yope, a five-year-old London startup that operates a private social network for friends and family to share photos, videos, messages, |
|