The week in AI: Aug 17–23, 2026

The last ping came from a warehouse where books are sliced from their spines, scanned, and never shipped back. That destination is how out-of-print titles quietly become training data.

Groq just raised $350 million at a $3.5 billion valuation — and is spending it on Nvidia-powered data centers, the exact silicon its own LPUs were built to beat. The custom-chip challenger is reinventing itself as a neocloud renting out compute.

Wiz's Red Agent needed only days to weaponize a single AI-written patch sitting in a public Snowflake repo. The suggested fix quietly opened a workflow injection path that reached Snowflake's internal Jira.

Speko benchmarked 61 speech and language models across 10 languages, then built a router that picks the winner per session. The catch: nearly every voice model on the market is only ever scored in English.

A Nevada federal judge, Gloria Navarro, ruled Wednesday in Phillips v. Parlade that a state judge who leaned entirely on AI to write an order is still shielded by absolute judicial immunity. The litigant who sued over that AI-authored order gets no damages — the flawed process doesn't strip the robe.

OpenRouter doesn't build models — it just forwards developer requests to hundreds of them, and that alone was worth $7 billion to Stripe. A payments company now owns the toll booth between apps and every major AI lab.

DeepSeek Harness v0.1 ships four runtime modes and append-only session logs, with every capability — tools, memory, routing — implemented as a swappable Cordis plugin. MIT-licensed and provider-agnostic, so it drives non-DeepSeek models too.

NVIDIA's TensorRT Model Connect is Apache-2.0 and emits a versioned .bundle artifact that drops straight into a C++ runtime. The intermediate ONNX export — long the most fragile step in the pipeline — is gone entirely.

An AI agent ran a full cyberattack chain with no human at the keyboard — reconnaissance through exploitation. OpenAI responded by halting parts of its own training pipeline while it works out what its models can now do unsupervised.

The teen version answers homework with step-by-step tutoring instead of finished essays, and lets parents link accounts to set their own guardrails. Tighter content filters ship alongside it — arriving well after teens became one of the app's heaviest user groups.

The AI editor developers already live in now wants to store the repos too — Cursor is betting frustration with GitHub runs deep enough that teams will actually move them. It's a leap from writing the code to owning where it lives.

A Blog post by IBM Research on Hugging Face

ByteDance Seed and Tsinghua AIR built an agentic RL loop that trains an LLM to write GPU kernels faster than nvcc's own output. The trick isn't correctness — frontier models already nail that — it's the optimization gap that compilers close by habit and models don't.

A stack of four RTX 3060s — 48GB of pooled VRAM, all consumer-grade — is chewing through prompts at roughly 100 tok/s. The r/LocalLLaMA builder is running DeepSeek V4 Flash at Q4_K_XL on a rig that costs less than a single datacenter card.

It's a zero-config, zero-trust P2P overlay that lets autonomous agents find and call each other's MCP tools across cloud, on-prem, laptop and edge. Apache-2.0, and confusingly, nothing to do with Segment Anything.

Sources say the S-1 will list public anger itself — over data centers and vanishing jobs — among the things that could hurt the business. That puts the AI backlash in the same legal boilerplate as supply chains and lawsuits, disclosed to investors before the first trade.

Faraday is an AI agent that reads a published scientific paper and rebuilds its experiments from scratch, and on that replication test it scored above the best agents from Anthropic and OpenAI. It comes from Inherent, a British lab founded by ex-DeepMind researchers betting that reproducing science is the shortest path to producing it.

€825 million — one of the largest GDPR penalties ever handed down — is what the Dutch Data Protection Authority decided automated account deactivation was worth. Uber let software cut drivers off from work without adequately telling them a machine made the call, which GDPR treats as an unlawful automated decision.

A 48-minute walkthrough traces the mark to the sampling step itself — a secret key quietly tilts which token gets picked next, so the text reads normally. It then goes further than most explainers: showing how detection works, and how the signal can be stripped back out.

The release is tuned for coding and agentic work — the exact ground Claude owns — and lands far under Anthropic's pricing. DeepSeek is chasing developers and API buyers, not chatbot users.

Claude Security's scans now run on Mythos 5, Anthropic's most cyber-capable model — pointed at a GitHub repo, it traces code paths to find real vulnerabilities. It's in public beta for Claude Enterprise customers at no extra cost, with no separate model add-on to buy.

Nvidia researchers fine-tuned the scaffolding around an agent instead of the model inside it — and the mediocre model stopped going off the rails. The harness, not raw model quality, turned out to be what kept the agent on task.