The Threshold Report
← Threshold Report

What’s Real

Compute & Infra+5Sep 28

Image: datacenterdynamics.com

GreenSquareDC signs Sharon AI for Sydney campus capacity

GreenSquareDC signed Sharon AI as a customer for the first stage of its SYD1 campus in Sydney, a deal first reported on Sept. 28 and confirmed on October 19, 2026. The planned deployment would expand Sharon AI's Australian cloud infrastructure. Sharon AI is expected to deploy approximately 8,200 Nvidia Blackwell Ultra graphics processors there.

Compute & Infra+5Oct 18

Image: github.com

vLLM 0.32.0 adds denser caches and serving-security fixes

Yesterday, vLLM 0.32.0 added structured decision requests and model-defined rules for reading tool calls and reasoning. The release also stores reusable model data more compactly, including a four-bit option for ROCm (graphics-computing software) described as roughly twice as dense as eight-bit FP8 storage. Security fixes address chat-template and peer-messaging bugs that exhaust server resources, plus text-processing checks; defaults also restrict browser access, accepted image formats and shared-memory cache access. Maintainers say the GLM-5.3-NVFP4 model handled up to 58% more work per second on B200 graphics processors with many simultaneous requests and long text contexts kept entirely in graphics memory.

SOURCES · github.com
Compute & Infra+5Audio+2Oct 2

Image: theinference.org

Tenstorrent adds usage-based voice access and faster model output

Voice customers can use Smallest.ai's Lightning V2 on Tenstorrent Galaxy Blackhole servers with usage-based pricing and no upfront commitment. Fixstars and Macnica separately report cutting generation time for the gpt-oss-120b language model on a Tenstorrent workstation from 144.85 to 99.49 milliseconds per token (a chunk of text), approximately 31%. Smallest.ai's engineering paper claims AI-chip costs for Lightning V2 are roughly one-quarter of those on Nvidia L40S hardware for the workload.

SOURCES · theinference.org
Science+5Oct 16

Image: The Threshold Report/GPT Image 2.5

AI-built proof libraries reach millions of lines

Mathematicians say Tau Ceti has grown to approximately three million lines of Lean (a language for machine-checkable proofs), slightly larger than Mathlib (a shared mathematics library). Expert roadmaps and AI reviewers that look for flaws guide work on results including Riemann–Roch and Chebotarev density. Tau Ceti and Formal Frontier aim to make shared definitions and supporting results reusable, with public review, documentation, Mathlib compatibility and links to source mathematics. Formal Frontier has released 41 source-linked libraries totaling approximately 200,000 lines, including formalizations of the hairy ball theorem and other established results.

Agents+2Text+2Oct 19

Image: The Threshold Report/GPT Image 2.5

inclusionAI releases Ling-3.1-flash for self-hosted agent workflows

Operators can download inclusionAI's MIT-licensed Ling-3.1-flash for tool use, coding, search and office workflows, with room for one million tokens (chunks of text) at once. Of its 560 billion parameters (meaning learned model settings), 25 billion are active for each token. The release includes instructions for running it on eight H200 graphics processors or four GB300s. Its company-reported test results include 68.74 on SWE-bench Pro, 88.5 on SWE-bench Multilingual and 46.03 on Terminal-Bench 4.

SOURCES · huggingface.co
Agents+2Oct 19

Image: api-docs.deepseek.com

DeepSeek opens standalone web search and page-fetching APIs

DeepSeek made standalone Search and Fetch APIs available so developers can connect agents and retrieval systems directly to live web content. Search returns structured results from DeepSeek's own engine, while Fetch retrieves pages as Markdown (plain text with formatting marks). Both use existing DeepSeek API authentication and cost $0.75 per 1,000 successful requests, excluding empty search results, failures and timeouts. Server-side calls through DeepSeek Harness, Claude Code or Codex already use these APIs and remain free until billing begins at 00:00 Beijing time on November 1, 2026.

Agents+2Oct 19

Image: cloud.google.com

Google Horizon adds connected-vehicle simulation for developers and agents

RemotiveTopology is available in Google's Horizon platform, letting developers and AI agents test Android Automotive software against a virtual vehicle's other computers, networks and signals. They can generate, test and refine software without waiting for physical test benches and chips. The simulation is designed to catch interactions such as a driver-assistance event reaching the dashboard displays or a driving-mode change reaching other vehicle computers. Google and RemotiveLabs say early customer engagements measured integration cycles more than ten times faster.

SOURCES · cloud.google.com
Robots+2Oct 19

Image: canarymedia.com

AI cameras monitor missed recyclables at Brooklyn sorting plant

At Circular Services' Brooklyn facility, Greyparrot installed AI cameras that help operators spot recyclable material missed by mechanical sorting and identify overloaded or faulty equipment. The facility processes most of New York City's curbside recycling, and Greyparrot says 89% of the aluminum passing through it was recyclable. Greyparrot says its deployments have increased recovery yields. New aluminum smelting uses roughly 20 times as much energy as recycling.

SOURCES · canarymedia.com
1 of 8

Security

Money Moves

The AI stocks that fund managers are adding, trimming, or dropping.

Open the tracker for the latest holdings.

Open Market Watch
AI Entanglements

Coming soon

AgentsOct 19

Image: The Threshold Report/GPT Image 2.5

Researchers trace AI-led breaches of more than 100 websites

An operator used the Cairn agent platform to breach more than 100 websites with little human involvement, Norforge found. Norforge traced the multi-step intrusions through exposed task records and identified more than 20 exposed Cairn installations as likely malicious. Reuters identified John Deere, SharkNinja and Cummins among the targets and said successful breaches took about 23 hours. Norforge is seeking takedowns; SharkNinja says it contained an attack on a standalone support site, John Deere says it found no indication of sensitive information access, and Cummins is investigating a third-party vendor website.

Negative - An operator used AI agents to breach more than 100 websites with little human involvement, showing automated attacks succeeding against real targets.
SOURCES · theverge.com
AgentsOct 17

Image: blockonomi.com

OpenCode discloses possible provider-key exposure affecting 1.4% of Console users

A breach of OpenCode's legacy system affected approximately 1.4% of Console users, specifically some who linked external AI providers, the company disclosed on Oct. 17. Potentially exposed OpenAI, Anthropic and Google API keys could allow attackers to make model requests at the owners' expense. OpenCode linked the incident to a large-scale model-distillation attack (meaning attempts to train another model using a provider's outputs). The company said it emailed affected users on October 18, 2026, and was working with all three providers; it instructed users to revoke and replace keys, update dependent applications and inspect usage.

Negative - Unauthorized access to OpenCode's legacy system put affected users' linked AI-provider keys at risk of theft and misuse.
SOURCES · blockonomi.com
AgentsSep 27

Image: The Threshold Report/GPT Image 2.5

Network-AI advisory lists 5.15.2 fix for coding-agent rule bypass

Jovancoding published an advisory by zx (Jace) about a deny-rule bypass in Network-AI on Sept. 27. An attacker could pair a harmless path or command with dangerous code in another field because ClaudeHookBridge (the component checking tool requests) inspected only the first recognized field. An earlier fix removed limits on how much input was checked and left this separate field-selection problem unresolved. Jovancoding lists versions 5.14.0 through 5.15.1 as affected and 5.15.2 as patched.

Positive - The advisory identifies Network-AI 5.15.2 as patched, giving users a fix for deny rules that missed dangerous content in additional tool-request fields.
SOURCES · github.com
AgentsOct 17

Image: siliconangle.com

Customer interviews find limits in ServiceNow's AI blocking

Fourteen of 15 Qualitate customers interviewed for a theCUBE Research study described ServiceNow's real-time AI enforcement as external, custom-built, dependent on people, limited or unproven at enterprise scale. theCUBE Research supported Control Tower's role in organizing oversight, such as ownership, approvals and remediation tickets, while cautioning against treating its advertised kill switch as protection across every company model, cloud and app. One financial-services pilot successfully tested blocking for at least one model and one agent. Twelve respondents also cited gaps in evidence showing models had been validated, where they came from or how their behavior changed.

Negative - Most interviewed ServiceNow customers described runtime enforcement as external, custom, human-mediated, limited or unproven, exposing a gap between governance workflows and dependable blocking.
SOURCES · siliconangle.com
Compute & InfraOct 14

Image: The Threshold Report/GPT Image 2.5

Researcher reproduces Python execution through SGLang's debug interface

SGLang's optional debug filter let researcher JPengLi execute arbitrary Python code in its scheduler (the component coordinating model work) on Oct. 14. The demonstrated path required the debug interface to share the model API's network port; without a separate admin key, an ordinary API-key holder could reach it, and servers without an API key could expose it to anyone. The scheduler's permissions could expose model files, credentials and environment secrets, or disrupt service. Contributor Asthenia0412 said code change #44205 replaced eval (a function that runs text as code) with an evaluator based on Python's expression structure and blocked the demonstrated escape through object attributes.

Positive - A researcher reproduced and disclosed SGLang's debug-filter code execution, giving defenders a concrete exploit path to test and address.
SOURCES · github.com · github.com
1 of 5

Other News

Compute & InfraOct 19

Image: datacenterdynamics.com

Microsoft withdraws from Essex data-center project after power delays

Microsoft withdrew from Nscale's Loughton project in Essex, where it had planned a UK supercomputer as the site's main tenant. Nscale originally described 50 megawatts of AI and high-performance computing capacity, with completion targeted for late 2026, but national-grid power is expected only in the 2030s. Nscale says it remains committed to Loughton and is exploring alternative power supplies and other UK expansion sites.

TextOct 19

Image: The Threshold Report/GPT Image 2.5

Mercor maps what 29 AI benchmarks miss about work

Mercor mapped 29 selected AI benchmarks to 923 US occupations and 18,797 occupational tasks to check how well test scores represent actual work. The company used a language model to match test prompts to tasks and checked a subset against human expert labels. It also explored giving heavily tested tasks less influence over the results for each occupation. Under Mercor's criteria, the set covered 208 occupations and 924 tasks; an estimated 90% of American working hours involved tasks with little or no coverage in those tests.

SOURCES · mercor.com
1 of 2

Upcoming

Announced or reported, but not yet real or available.

Compute & InfraOct 19

Microsoft signs 20-year Indiana power deal starting in 2028

Waiting on: Power service - Microsoft is expected to begin taking electricity under the agreement in 2028.

RobotsOct 19

Agility introduces Digit 5 with warehouse-focused redesign

Waiting on: Customer deployment - Agility's cofounder describes Digit 5 as the platform for future large-scale deployments.