When @jensenhuang asks for a somersault, you deliver. 🦆 See how AI agents on NVIDIA RTX Spark help bring @huggingface's Microduck from simulation to the real world.

Jensen Huang at GTC Berlin: a gigawatt is $50 billion to build and $40 billion a year in revenue Jensen laid out why Nvidia is shipping whole AI factories as ready built DSX PODs, fully built and qualified before they arrive on site. The math is the point. He said "each gigawatt data center is $50 billion" and "it's $40 billion per year of revenue generation that comes out of that infrastructure". On that math a three month delay is about $10 billion in missed revenue, a line he corrected himself on stage from $5 billion. That is why the POD compresses install to first tokens from "four to five months down to about a month".

BREAKING: Hedge funds are betting against stocks at near-record levels, per Goldman Sachs. Short sales outpaced purchases by about 5 to 1 across global stocks. Short positions on Goldman’s books are at the 99th percentile of the past five years.

You gotta be kidding me.

Imagine a rogue AI agent liquidating your bank account and investment portfolio. If you are the only victim, I suppose you could get made whole by the AI company responsible. If rogue agents liquidate hundreds of billions across millions of accounts, the AI company would go bankrupt and you wouldn’t get made whole. Imposing criminal liability on AI executives might help mitigate it at the front end, but once the crime is complete and you lose everything criminal responsibility will be necessary but completely insufficient.

Been obsessed with the stock market since I was a teenager. Have traded through the dotcom bubble, the financial crisis and just about every market mania since. But I’ve never seen anything like the skepticism surrounding AI. Not even close. Every time one bubble narrative falls apart a new one takes its place. Rumors become headlines. Misleading data goes viral. Claims that could be debunked with 5 minutes of research get repeated by major media outlets, influential investors and Wall Street analysts. It’s relentless and honestly pretty fascinating to watch. Of course there will be spectacular failures and massive wealth destruction along the way. That’s what happens during technological revolutions. But I’ve never witnessed this much effort to convince the world that something so transformative is actually one giant speculative bubble destined to take the entire economy down with it. I understand why AI scares people. What I find harder to understand is why so many investors seem to be rooting for it to fail.

The first thing to change will be terms of service and blocking these agents. Not because the value is low but because the risk is high. Banks will chose self preservation and risk mitigation. Then we will need to find a security and governance architecture that will get external auditors comfortable. These are the practical issues of human risk tolerance in AI diffusion that model capability can’t solve.

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: axios.com/2026/10/22/ai-agen…

MAJOR U.S. BANKS DETECT UNAUTHORIZED AI AGENTS ACCESSING CUSTOMER ACCOUNTS — AXIOS Major banks, including $JPM, $BAC, $MS and $WFC, are confronting security risks from third-party AI agents accessing customer accounts, according to Axios. Some agents have reportedly attempted actions beyond user instructions, raising concerns about unauthorized transactions and fund transfers. Morgan Stanley has begun blocking third-party agents, while JPMorgan, Bank of America and Citi are restricting access. Banks warn they cannot reliably distinguish legitimate user activity from autonomous AI agents, even when customers have voluntarily shared their credentials.

Government services have been taken offline after a cyber incident triggered a global shutdown of websites. Some “limited” services may be temporarily unavailable while work is carried out to address potential PHP cyber security issues, Downing Street said🔗 telegraph.co.uk/business/202…

Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server. tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible. The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this. The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed. @Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged. For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free. Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem. If you’re interested in learning more, you can read our blogs: Vulnerable roots: blog.cloudflare.com/emudhra-… PHP vulnerabilities: blog.cloudflare.com/php-vuln…