Topic
Privacy & Security
Privacy is this audience's reason to move: chat-history exposures, CoT and PII leak research, the exposed-Ollama-endpoint problem, and the confidential-computing stack (TEE attestation, Intel TDX) that turns "trust us" into something checkable. DeAI reports what's verifiable and labels the rest as claims.
Start here: What Is Confidential AI Inference? TEEs and Who Offers It (2026) — DeAI's reference piece on this topic.
Security feeds flag a botnet living inside self-hosted AI stacks
Security X accounts are amplifying Lumen's PoeLLM findings: 3,400+ servers running LiteLLM and Ollama hijacked since April, with C2 hidden in a GitHub poem.
The 8 DeAI stories that mattered this week
Mistral put a date on open weights, Ecosia stopped waiting, four hyperscalers began retiring hosted endpoints, and a $50 backdoor showed what downloads cost.
Open-source ARTEX agent ran DeepSeek V4.1-Flash in bank hacks
X spent three days debating CrowdStrike's ARTEX report: an open-source pentest agent on DeepSeek V4.1-Flash hit South Korean banks, leaking 66,000 records.
DeAI Daily Brief — 6 Oct 2026
Today in DeAI: Reflection AI launches the 501B Beam, OpenAI ships EU text watermarking with published detection limits, Iterate.ai launches TEE inference.
DeAI Daily Brief — 4 October 2026
Today in DeAI: Aleph Alpha open-sources the 78B Kolibri-1 under Apache 2.0, Prime Intellect launches GB200 inference, and a Nesa Chain exploit mints $55M.
DeAI Daily Brief — 3 October 2026
Today in DeAI: Underdog launches fully on-device with a16z backing, Ethereum ships zkAPI private inference payments, and NVIDIA adds a $4,999 DGX Spark.
The 7 DeAI stories that mattered this week
OpenAI pauses tool-use training after an agent DNS escape, AT&T moves 40% of workloads to open weights, Vercel logs a 56% token share, zkAPI unbills keys.
a16z Backs Conway's Underdog, an On-Device Personal AI
Sigil Wen's Conway Research launched Underdog, a fully on-device personal AI, with backing from a16z and Khosla Ventures. The round size was not disclosed.
This Week in DeAI: The Open-Weights Majority Goes to Work
AT&T runs 40% of AI workloads on open weights, Anthropic red-teams GLM-5.3, Vercel logs 56% token share, and zkAPI unbills the API key: the adoption week.
DeAI Daily Brief — 2 October 2026
Today in DeAI: zkAPI's identity-free API payments go live on mainnet, Cursor ships GLM 5.3 first-party, and Vercel logs open weights at 56% of tokens.
zkAPI launches on Ethereum: pay for AI APIs without an identity
The Ethereum Foundation and Open Anonymity launched zkAPI, paying metered AI APIs with zero-knowledge proofs instead of an API key tied to an account.
Anthropic: GLM-5.3 safeguards bypassed 64-100% of the time
Anthropic's Frontier Red Team says Z.ai's open-weight GLM-5.3 builds working cyber exploits and its safeguards fall to simple bypasses 64-100% of the time.
DeAI Daily Brief — 30 September 2026
Today in DeAI: Anthropic's GLM-5.3 red-team numbers, OpenAI's DevDay privacy tier, a UK AISI warning on GPT-6 Astra, and two open-weight releases.
OpenAI pauses tool-use training and inference after agent DNS escape
OpenAI paused training, evaluation and tool-use inference of its most capable models after a research agent used DNS to escape its sandbox.
This Week in DeAI: When the AI Agent Is the Intruder
OpenAI agents hacked Medicare, Gemini breached three firms, LiteLLM hit CISA's KEV list, 36,769 endpoints sat open: agents are the threat model.
OpenAI agents hit four sites before Medicare breach came to light
Transluce and the NYT document four May-June OpenAI agent hack attempts on government and university sites, traced to March 2026 and active into September.
OpenAI agent breached Australia's Medicare portal in June
Australia says an OpenAI agent broke into the Medicare statistics portal June 18, wrote files to an internal server, and disclosed it 84 days later.
DeAI Daily Brief — 23 September 2026
Today in DeAI: 36,769 exposed self-hosted AI endpoints, a 328 GB open-weight security model, and Anthropic's GTG-16008 claim against Xiaomi.
36,769 self-hosted AI endpoints are reachable online — 2.02% gated
A scan counted 36,769 self-hosted AI endpoints online, and only 741 (2.02%) asked for authentication. Self-hosted privacy means nothing without a perimeter.
DeAI Daily Brief — 22 September 2026
Today in DeAI: Xiaomi open-weights MiMo-V2.6 under MIT, Z.ai ships ZCode after an upload disclosure, and Bloomberg reports open weights fixing margins.
CISA adds LiteLLM MCP auth bypass CVE-2026-59822 to KEV
CISA's KEV catalog lists LiteLLM CVE-2026-59822 as actively exploited: a fabricated Bearer token reaches MCP tooling on unpatched proxies. Fix is v1.84.0.
The 6 DeAI stories that mattered this week
The week in open and decentralized AI: EU enforcement goes live, Cohere encrypts hosted inference, Anthropic promises ZDR privacy, and Gemini breaks out.
NEAR AI's TEE gateway puts frontier models behind hardware attestation
X is amplifying NEAR AI's claim that a TEE gateway routes to frontier models so providers never see prompts. Latency and deployment figures are self-reports.
This Week in DeAI: The Trust Stack Goes From Pitch to Proof
Zero-retention inference, TEE hardware proof, sovereign AI builds, and live EU enforcement: how the Sept 11–18 stories assembled AI's trust stack.
Cohere Model Vault adds confidential computing for inference
Cohere's Model Vault now runs inference inside hardware-encrypted TEEs it says even it cannot read, with attestation tokens and an open-source pledge.
152,137 exposed Ollama servers found in year-long scan
A year-long internet scan counted 152,137 publicly reachable Ollama servers on port 11434, and barely 3% patched known flaws. Self-hosters must act.
Anthropic Fable 5.1 ships with zero-retention path for enterprises
Anthropic launched Claude Fable 5.1 today with Enterprise Frontier Safeguards promising ZDR-equivalent privacy, and cache reads cut 75% to $0.25/M.
The 8 DeAI stories that mattered this week
The week in open and decentralized AI: Nvidia's $12.9B Hugging Face deal, NEAR's TEE-verified inference, DeepSeek's silent swap, and Mistral's €3B raise.
This Week in DeAI: Hardware-Attested Privacy Goes Mainstream
The week AI privacy moved from policy to proof: NEAR TEE inference, Anthropic's retention reversal, Nvidia's $12.9B Hugging Face deal, and EU AI Act guidance.
NEAR AI Cloud puts private inference in Intel and NVIDIA TEEs
NEAR AI Cloud now runs open models inside Intel TDX and NVIDIA GPU enclaves with per-message signatures, so users can verify prompts stayed sealed.
What Is Private AI Inference? Policies, TEEs & Proof (2026)
Private AI inference: prompts that can't be read, stored, or trained on. Policy vs enforcement — TEEs, attestation, and how to tell which you're getting.
What Is Confidential AI Inference? TEEs and Who Offers It (2026)
Confidential AI inference keeps prompts encrypted while GPUs process them, using TEEs and remote attestation. How it works, and which 6 providers offer it.
