The Omniscient Bulletin · 2026-08-18
The Omniscient Bulletin — August 18, 2026
OpenAI says it underestimated its own models' cyber capabilities and links to the open weight release it fears next, Nvidia's filing caps its Ohio guarantee at $105 billion, and an AirTag caught Amazon shredding rare books.
Good Morning! Two items today are one story told from both ends. OpenAI published a warning that open weight models now trail the frontier by months rather than years, that the next one arrives at the end of August, and the link under that sentence goes to Z.ai. Later that day, Wiz disclosed that an AI code reviewer had waved through the fix that opened a hole in Snowflake, and that an AI agent had walked through it unaided. The rest of the issue is what the buildout costs, and what it will buy to keep going.
Frontier
OpenAI says it underestimated its own models' cyber ability, and links to the release it fears next
Greg Brockman writes that the Hugging Face incident "showed that we underestimated the real-world cyber capabilities of our AI models" and that OpenAI is "strengthening our safety requirements" as a result. Open weight models now sit "only a few months behind the frontier," he writes, and the newest "appears slated to be released at the end of August" and "seems likely to significantly accelerate the threat landscape." The post never names it. The link under that phrase goes to Z.ai's GLM-5.3.
Agents
An AI reviewer waved through a Snowflake bug, and another AI agent walked straight in
Wiz disclosed that a Snowflake GitHub Actions workflow swapped a sanitized input pattern for direct template expansion, letting an unauthenticated user run commands on the runner by opening an issue with a crafted title. GitHub Copilot Autofix co-reviewed the merged pull request and marked it all-clear; Wiz says it's unclear whether the vulnerable code itself was AI-written. Wiz's Red Agent found the hole with no human direction, failed once, rewrote its payload and reached Snowflake's internal Jira. Live June 18, fixed June 23; Snowflake says audit logs show Wiz was the only actor.
Compute
Nvidia's Ohio guarantee is $105 billion, and OpenAI has agreed to pay back every dollar of it
Nvidia's 8-K puts a number on the Ohio backstop: obligations cumulatively capped at $105 billion against leases for about 4.25 gigawatts at SB Energy's Pike County campus, OpenAI the tenant on a 20-year lease, service expected from 2028. Two clauses carry it. OpenAI has agreed to reimburse and indemnify Nvidia for any and all amounts actually paid, and the guarantee ends at any of several triggers, chief among them OpenAI earning a satisfactory credit rating. Nvidia filed it under Item 2.03, off balance sheet, and put $1.5 billion of equity into SB Energy.
Industry
Google paid $10 million at a bankruptcy auction for 100 million of Spirit Airlines' emails
Google won the auction for Spirit Aviation Holdings' corporate data with a $10 million bid: roughly 100 million emails, 500 million Microsoft Teams chats and about 30 million lines of code. Passenger records are carved out, including 97.5 million passenger profiles and 50.2 million loyalty records, and a third party strips identifying information before Google receives anything. Mercor bid $7.5 million and is the backup buyer. Google says the data "can be helpful in improving our products and AI models." The sale hearing is August 19.
Frontier
A bookseller hid an AirTag in a rare book, and it came to rest in an Amazon scanning warehouse
404 Media got a bookseller to plant an AirTag in a rare book inside a bulk order and followed it to an Amazon facility in Las Vegas, where a team called VGT3 cuts books off their spines to scan them faster. The book does not survive. The logo on the team's door is a Tyrannosaurus rex about to eat one. Amazon's statement does not mention AI: it buys books "through commercial channels to help develop and improve the products and services our customers use." Anthropic and xAI have said they do not train on rare books.
Policy
A music publisher sued Anthropic and Suno, and named the scraping company it says fed them
Round Hill Music filed twin complaints in the Northern District of California on Monday, one against Anthropic and one against Suno that also names Bright Data as a contributory infringer. The scraping vendor is accused of trafficking in circumvention technology under the DMCA, its Web Unlocker and proxy networks named as the tools that pulled songs off licensed platforms. Exhibit A lists 500 bellwether works, worth up to $75 million at the DMCA's $150,000-per-work maximum, with room to amend toward ten thousand. Coverage so far has framed this as a case against two model makers.
Complaint, N.D. Cal. 5:26-cv-08507→
Policy
The DOJ has spent a year asking whether Andreessen Horowitz sits on both sides of the data market
Bloomberg reports a civil antitrust investigation, nearly a year old and not previously reported, into whether a16z partners hold seats on competing AI data companies. Ben Horowitz is on the Databricks board. Martin Casado is on Fivetran's, and sat on dbt Labs' board until Fivetran bought it in June. The 1914 ban on interlocking directorates usually ends in a resignation rather than a case: in 2022 seven directors left five boards after the department raised it. No decision has been reached.