Still
Crunchy.

YESTERDAY, STILL WORTH KNOWING

Anthropic files for a Nasdaq listing with huge compute commitments, Meta lines up a $95bn share sale, Cloudflare and Microsoft patch security flaws, and Apple refreshes hardware.

AI money on the move

Anthropic, the company behind the Claude AI assistant, has filed its S-1 prospectus with the US Securities and Exchange Commission to list on Nasdaq under the ticker ANT, potentially beating rival OpenAI to a public listing. It reported an $80.7 billion net loss on $16.3 billion of first-half revenue, though $72.4 billion of that was a non-cash valuation adjustment tied to its soaring valuation; the actual operating loss was $693 million. The filing discloses compute commitments approaching $390 billion across SpaceX, Microsoft, Google and Amazon, and its seven co-founders, including Dario and Daniela Amodei, will retain 50.1% of voting power via a 'Founder LLC', which Anthropic frames as protecting its AI safety mission. The risk factors are unusually candid, ranging from unresolved copyright disputes to the prospect of its models developing 'forms of sentience' and 'catastrophic' AI incidents that the company warns the insurance industry may not be able to underwrite in aggregate.

Meta has announced plans to raise $95 billion (£71 billion) for its AI spending through a $35 billion underwritten public offering, with chipmakers Nvidia, AMD and Broadcom potentially buying up to $5 billion as cornerstone investors, plus a $60 billion at-the-market offering of non-voting class C shares that avoid diluting Mark Zuckerberg's control. The news lifted Meta's shares but came as shares in debt-laden 'neocloud' computing providers such as CoreWeave, which reportedly owes about $35 billion, fell before recovering. Elon Musk wrote on X that more than 200 such providers would see 'guppy-level death and consolidation'.

Security fixes and public money

Cloudflare has fixed a flaw in the GLM-5.3 AI model on its Workers AI platform that affected 155 responses between August 27 and September 9, 2026, after researcher Gadi Evron of Knostic reported it. The leak stemmed from a cache pool smaller than the model's context window plus an SGLang bug that let rejected requests transfer stale GPU cache pages holding earlier requests' data; Cloudflare found no evidence of deliberate exploitation.

Microsoft has released emergency updates for .NET versions 8 through 11 to patch a buffer overflow in Google's Brotli compression library, tracked as CVE-2026-111497 and rated 8.1, which could let unauthenticated attackers read or corrupt process memory. The flaw, disclosed by the Node.js team on October 21 after discovery by OpenAI's Codex Security researchers, was fixed in Brotli's source in February but never released; patches have also shipped for Node.js, Python, Bun, Envoy and Istio, and Microsoft says working exploits exist though no criminal use is known. Wiz threat researcher Merav Bar said 91 percent of cloud environments rely on vulnerable components. OpenAI recommends blocking untrusted Brotli-compressed data until patches are applied and rebuilding affected deployments so fixes take effect.

Apple's hardware week

Apple has acknowledged an inner display issue affecting a 'small number' of iPhone Duo units, its first foldable phone launched in September under new CEO John Ternus, after owners reported cracked screens with a bright line running from centre to right. Apple says affected owners should contact AppleCare for a replacement, and iFixit's teardown suggests the foldable screen may be pushing against a centre bar where damage occurs.

Apple has also announced a new iPad mini with an 8.5-inch OLED display, the A20 Pro chip from the iPhone 18 Pro, and a first-for-Apple 'Acoustic Display' with speakers embedded in the panel, though the screen remains capped at 60Hz without ProMotion. The Wi-Fi model starts at $699, $200 more than the 2024 version's launch price, with pre-orders opening on 28 October and availability from 6 November.

BRIEF INDEX

7 briefs behind this edition