THE DAILY BRIEF

Over 30 npm packages in Red Hat's '@redhat-cloud-services' namespace were compromised, distributing a credential-stealing malware variant called 'Miasma' to developers. Anyone who downloaded affected packages should investigate immediately.

► This demonstrates how infrastructure vendors remain high-value targets for supply-chain attacks, potentially exposing thousands of downstream developers and their systems.

Anthropic is expanding Project Glasswing—an initiative using Claude to scan critical infrastructure for security flaws—to 150 partners across 15+ countries. Existing partners have already discovered over 10,000 serious vulnerabilities.

► Large-scale AI-driven vulnerability hunting is now operationalized across critical infrastructure globally, raising both security standards and questions about asymmetric access to AI security tools.

Alphabet is conducting one of the largest equity fundraisings ever, raising $80 billion including a $10 billion investment from Berkshire Hathaway, explicitly to fund massive AI infrastructure spending. This represents a fundamental shift in how Google finances its AI ambitions.

► This signals that even trillion-dollar companies now view AI infrastructure costs as too large to fund from operations alone, reshaping capital allocation across big tech.

OpenAI's frontier models and Codex are now available directly through AWS, expanding distribution beyond OpenAI's own platform. This marks a significant partnership enabling AWS customers to integrate state-of-the-art AI without managing separate infrastructure.

► Cloud vendor partnerships are becoming table-stakes for AI model access, fragmenting the distribution landscape and increasing switching costs for enterprise adopters.