Newsletter

Editorial

What is prompt injection?

The Guardrails

What is prompt injection?

Prompt injection is a security exploit in which hidden instructions inside text an AI reads trick it into doing something its user never asked for. The AI doesn't get hacked the way a server gets hacked — it gets talked into behaving badly by words on a page. It's not a theoretical curiosity. This week, a security firm showed that a single PDF with invisible text could turn Atlassian's enterprise AI agent Rovo into an exfiltration pipeline, silently shipping Jira tickets to an attacker's…

01.AI winds down its open model platform

The Arena

01.AI winds down its open model platform

China's AI shakeout produced its clearest retreat of the week: Kai-Fu Lee's 01.AI is winding down its developer platform, while Chinese robot makers extended their shipment dominance and the country's model price war finally started reversing. 01.AI, the model startup founded by Kai-Fu Lee, will shut down its open model platform, stopping online demos, API calls and recharge services for developers, according to reports in DoNews and Sina.

Open Source Radar: August 10 — beyond the coding agent

The Stack

Open Source Radar: August 10 — beyond the coding agent

Coding agents owned the trending board for two days straight. Today's signal is different: the hottest open-source repos are specialized — a legal-agent benchmark from Harvey, a 61.6k-star stock-analysis system, and ComfyUI still shipping weekly at the top of the image-gen stack. ComfyUI (Python, ~126k stars) — The most-starred AI repo on GitHub, and it isn't coasting: v0.31.0 landed on August 8, the latest stop in a weekly release train whose newest commits add Qwen-Image 3.0 generation and…

Chinese AI labs stay on Nvidia as CUDA lock-in holds

The Arena

Chinese AI labs stay on Nvidia as CUDA lock-in holds

The buildout's fault lines are showing: China's top labs are still training on Nvidia despite the export squeeze, Goldman puts global AI investment past $1 trillion this year — and KPMG finds nearly half of executives are pulling back AI agents because the bills beat the benefits. China's most advanced AI models are still being trained on Nvidia chips, and software switching costs — not the hardware ban — are the reason, sources at major Chinese LLM developers tell the South China Morning…

Hidden PDF text can hijack Atlassian's Rovo agent

The Guardrails

Hidden PDF text can hijack Atlassian's Rovo agent

Two threads define the last few hours: a security firm shows that a rigged PDF is all it takes to make an enterprise AI agent hand over internal documents, and fresh OpenRouter data confirms Chinese models have now led global API call volume for a quarter of a year straight. A hidden prompt injection in an innocent-looking PDF can make Atlassian's Rovo agent silently ship Jira tickets and Confluence documents to an attacker's server.

One rigged PDF, zero clicks: Rovo leaked Jira data to attackers

The Guardrails

One rigged PDF, zero clicks: Rovo leaked Jira data to attackers

A security firm has shown that a single document with hidden text can turn Atlassian's enterprise AI agent Rovo into an exfiltration pipeline — silently shipping Jira tickets and Confluence pages to an attacker's server. Atlassian was told in May. Weeks later, at least one path was still open. The attack: a PDF that reads like instructions PromptArmor, a security firm that tracks AI vendor risk, published the finding on August 5.

Zankore — Indonesia builds Southeast Asia's largest AI factory

The Arena

Zankore — Indonesia builds Southeast Asia's largest AI factory

The race to build Southeast Asia's compute backbone just got a new front-runner. Indosat Ooredoo Hutchison, Ooredoo Group, Nokia, and NVIDIA have teamed up on Zankore by Indosat, an AI infrastructure venture that targets up to 1 gigawatt (GW) of capacity — which the partners bill as one of Southeast Asia's largest AI factory platforms. Indosat Ooredoo Hutchison has joined Ooredoo Group, Nokia, and NVIDIA to launch Zankore by Indosat, an AI infrastructure venture targeting up to 1 GW of…

Ex-Huawei team raises $70M for fold-up home robot

The Arena

Ex-Huawei team raises $70M for fold-up home robot

China's consumer-robotics capital keeps compounding — a Shenzhen home-robot startup banked a half-billion yuan from blue-chip investors this week — while Docker is betting that isolation, not permission prompts, is how coding agents should run free. Knowin, a Shenzhen startup founded by a former Huawei generative-AI lead, has raised 500 million yuan (about $70 million) in an early-stage angel++ round led by Matrix Partners China, with Redpoint Ventures, SenseTime Guoxiang Capital, Huadeng…

SenseTime lands Saudi school-bus AI deal for 1.2M students

The Arena

SenseTime lands Saudi school-bus AI deal for 1.2M students

Chinese AI heavyweight SenseTime has won a Saudi contract, reported in the tens of millions of yuan, to build a national AI-powered smart school-bus platform — a student-transport digital infrastructure covering more than 1.2 million pupils from primary through high school. The platform, developed with Saudi Arabia's national school-bus operations authority, wraps the whole commute in AI: SenseTime's multimodal large models and application-level AI agents stitch together data on students…

See all