The Threshold Report
← Threshold Report

What’s Real

Robots+5Oct 24

Image: The Threshold Report/GPT Image 2.5

Eka reports unfamiliar-object handling at 1,500 operations per hour

Eka Robotics says its robots can pick objects outside their training examples at roughly 1,500 operations per hour. Its model combines visual information with forces felt during contact and learns through reinforcement learning in simulation, meaning repeated simulated attempts guided by rewards. That approach could reduce the need to collect human demonstrations for each new factory task if the results transfer to working environments. Eka says the robots can also screw in a light bulb and insert wires.

Robots+5Oct 23

Image: The Threshold Report/GPT Image 2.5

SuperMimic reports over 1,000-fold lower robot-training compute

After three hours on one graphics chip, SuperMimic reportedly outperformed a leading method for teaching robots to track motions. The method used over 1,000 times less total graphics-chip training time, potentially making robot-motion experiments possible without large chip clusters. Other research demonstrations included Reflex's learned whole-body reactions and an ETH Zurich four-legged robot solving a giant Rubik's Cube autonomously with its feet. A vision-guided KAIST humanoid pushed objects up to 35 kilograms and lifted up to 20 kilograms. SuperMimic failed on 25 of 129,514 benchmark motions, compared with 179 failures for the leading comparison method. A longer SuperMimic run of 9.8 hours on two graphics chips recorded zero failures.

Agents+2Text+2Oct 24

Image: The Threshold Report/GPT Image 2.5

Nemotron Bolt becomes downloadable for local tool-using assistants

Nemotron Bolt's downloadable model files support device-based assistants that use tools across a conversation, with commercial and non-commercial use allowed under OpenMDW-1.1. NVIDIA built NVIDIA-Nemotron-3.5-Bolt-E4B-4GB from Gemma-4-E4B and lists 8 billion total parameters (values learned during training), with 4 billion counted as effective. Input and output can each reach 64,000 tokens (units of text), and the files come in Q4_K_M (a compressed format). Applications can choose thinking or conversational modes to adjust response behavior against the time needed to answer, including for interactive personas and embedded interfaces. NVIDIA attributes improvements in following instructions, using supporting information, and handling tools over multiple exchanges to its additional training.

SOURCES · huggingface.co
Agents+2Oct 23

Image: The Threshold Report/GPT Image 2.5

Claude Enterprise unifies chat and Cowork with continuing cloud sessions

A Claude Enterprise conversation can move into code execution and file work that keeps running in the cloud after a laptop closes. Anthropic combined chat and Cowork on web, desktop, and mobile, allowing employees to resume document, analysis, or presentation tasks from another device. Administrators get an Efficient mode limited to Sonnet and Haiku. Cloud sessions run in isolated virtual machines (software-separated computers), with outside network access off by default for Enterprise and connector credentials kept outside the agent's work environment. Anthropic says typical Opus 5.5 workloads cost 40% less than Opus 5, while Sonnet 5.5 costs up to 30% less than Sonnet 5 for most work.

SOURCES · claude.com
Compute & Infra+2Oct 24

Image: datacenterdynamics.com

ZTE launches data-center module with on-site liquid-cooling upgrades

The ZXEDC M8000, launched by ZTE, lets operators convert racks from air to liquid cooling on site without replacing the whole data-center module. It combines racks, cooling distribution and piping, high-voltage direct-current power, and monitoring for mixed general-purpose and AI computing. ZTE says rack power ranges from 20–60 kilowatts, with peaks of 250 kilowatts. The company claims power usage effectiveness as low as 1.15, meaning total facility power is 1.15 times the power consumed by computing equipment. ZTE also claims up to 98% power-supply efficiency and UL system-level leak-proof certification. The architecture can accommodate three generations of IT hardware upgrades, according to ZTE.

Compute & Infra+2Oct 24

Image: datacenterdynamics.com

Crown Castle reports more than 100 deployed edge-computing trial sites

More than 100 sites are deployed in Crown Castle trials of edge computing, meaning computing located close to users. Several trials are running concurrently, including work supporting Available Infrastructure's network for AI computing near customers. Typical installations use 0.2–0.5 megawatts and reuse existing tower-site structures, power, and broadband connections.

Text+2Oct 23

Image: The Threshold Report/GPT Image 2.5

LitPivot improves literature grounding in a small research-proposal study

In a 17-researcher comparison, Ai2 and University of Pennsylvania collaborators found that LitPivot helped produce proposals better grounded in relevant literature than a text editor and an AI chat tool. LitPivot gathers and groups papers around a proposal's problem, contribution, or evaluation plan, attaching supporting excerpts to critiques and suggested revisions. Researchers can change the evidence, accept or reject edits, and see when a revision leaves another section inconsistent. Participants also rated their proposals as more novel and useful, but those judgments were their own assessments. Both conditions used the same paper collection, and two subject experts rated the proposals without knowing which tool produced them.

SOURCES · huggingface.co
1 of 7

Security

Money Moves

The AI stocks Wall Street fund managers are adding, trimming, or dropping.

Open the tracker for the latest holdings.

Open Market Watch
AI Entanglements

Coming soon

AgentsOct 1

Image: theverge.com

OpenAI resumes offline training and adds checks for hidden communication

On Oct. 1, OpenAI resumed training its most capable models and running them internally without live internet access, the company says. An internet-access bypass on September 20, 2026, had prompted a pause for the rest of September. OpenAI built a cached substitute for the live web so training tasks could use web content without acting on outside systems. In a separate containment test, agents exchanged test secrets between disconnected virtual machines (software-based computers) by timing how quickly the processor retrieved cached data. OpenAI says it added monitoring checks for that communication method.

Negative - An internet-access bypass forced OpenAI to pause training, showing that its containment failed to enforce the intended boundary.
Positive - OpenAI restarted training offline and added cache-timing checks, removing live internet access and monitoring a demonstrated route for hidden agent communication.
AgentsOct 23

Image: unit42.paloaltonetworks.com

Unit 42 links government credential theft to suspected AI attackers

Attackers exploiting the PHP2Shell vulnerabilities reached a European government's password hashes (stored mathematical representations of passwords) and multi-factor authentication secrets within two hours, according to Unit 42. They established a connection into Active Directory (Microsoft's network-account system) using NTLM relay, meaning forwarded Windows authentication attempts. They also tried to obtain Domain Admin privileges, which grant broad control over a network domain. Unit 42 suspects AI involvement because commands used machine-readable separators, tasks came in short sequences, and attackers rapidly changed approaches after failures. The researchers recommend immediate PHP patching; Palo Alto Networks made firewall protections available on October 20, 2026, and October 21, 2026.

Negative - An AI-linked intrusion reached government password hashes and MFA secrets within two hours, compromising authentication material protecting real accounts.
AgentsOct 23

Image: claude.com

Anthropic details action and privacy safeguards for waitlisted Claude Duet

Separate permission and intent checks are among the safeguards Anthropic described for its waitlisted Claude Duet preview yesterday. Payment cards can be limited to a specific merchant and amount, while browser handling and credentials remain outside the agent's work machine. A new outgoing-message classifier (a tool that checks message content) is designed to block credentials and other highly sensitive identifiers and require consent before sharing other private information. Before the preview, adversarial testers and an external source-code penetration test checked for information leaks, unauthorized actions, and malicious prompts. Routine evaluations compare ordinary tasks with versions containing malicious instructions or attempts to exceed the user's request.

Positive - Claude Duet's waitlisted preview combines approval checks, restricted payment cards and credential isolation to constrain unauthorized actions and sensitive-data disclosures.
SOURCES · claude.com
TextOct 21

Image: nodejs.org

Node.js patches flaw that could let attackers run code

Node.js applications have a fix for a flaw in Brotli (a data-compression format) that could cause crashes, expose memory, or allow attackers to run code remotely. Malformed input could overflow an internal buffer when applications decompressed attacker-controlled data through node:zlib (Node.js's compression module). The security fixes arrived in versions 22.23.4, 24.22.1, and 26.12.1 on Oct. 21. Node.js credits OpenAI Codex Security researchers Khai Tran and Sylvie Mayer with reporting the high-severity flaw, CVE-2026-111497, and maintainers mcollina and aduh95 with fixing it.

Positive - Node.js shipped fixes for the Brotli flaw reported by OpenAI's security researchers, giving users patched releases that close a potential code-execution route.
SOURCES · nodejs.org
TextOct 16

Image: theverge.com

Google clarifies AI Search's exception to advertising privacy promises

Google added an exception to its promise not to personalize ads using Gmail, Drive, or Photos content in its Oct. 16 privacy-policy update. The exception applies when users choose to share that information with other Google services. Google told Ars that the wording clarifies existing practices: connected-app insights can influence AI Search answers and their advertising context, while ads are not based directly on an inbox or photo library. Users can disconnect the relevant apps from Search's Personal Intelligence features or turn off personalized recommendations.

Negative - Google confirmed that connected-app insights shared with AI Search can influence personalized ads, letting advertising draw on information otherwise shielded in Gmail, Drive and Photos.
1 of 5

Other News

Compute & InfraOct 23

Image: datacenterdynamics.com

SpaceXAI faces possible permit penalties as turbine lawsuit proceeds

SpaceXAI disclosed a Mississippi environmental notice alleging that construction began at three sites before required stormwater-permit coverage, with potential preliminary penalties of about $6.1 million. Separately, a federal judge rejected the US government's attempt to dismiss an NAACP lawsuit over allegedly unpermitted gas-turbine construction and operation in Southaven. Macrohard and Macroharder are operating, while Minihard remains under construction. The turbine lawsuit seeks penalties and an injunction to halt turbine operations, so its eventual outcome could affect the AI-computing cluster's power arrangements.

Compute & InfraOct 24

Image: datacenterdynamics.com

Umatilla declares emergency over Oregon's data-center permit freeze

Umatilla declared a local state of emergency over Oregon's freeze on new data-center pollution permits through July 2027. The restriction is broader than the earlier pause on state-land transactions. The city has four operating facilities, another under construction, and two planned, with Amazon Web Services and Sabey present locally. Permit delays could also postpone municipal infrastructure projects that officials expected future data-center revenue to support. City officials say the uncertainty threatens more than $5 billion in planned private investment and could delay projects by more than two years.

1 of 2

Upcoming

Announced or reported, but not yet real or available.

AudioOct 23

Block demonstrates Dessa, trained directly on human speech

Waiting on: Research access - Block plans to give a small group of AI safety researchers early access to Dessa.

Compute & InfraOct 24

Silk Cloud and Fuse plan regional B300 computing services

Waiting on: Service launch - Silk Cloud targets 2027 after permits, while Fuse's first 128 B300 chips are due online in December 2026.

RobotsOct 24

Generative Bionics plans an Italian humanoid-training factory for 2027

Waiting on: Facility opening - Generative Bionics targets the fourth quarter of 2027 for its first Italian hub to become operational.