The AI Platform an OpenAI Agent Broke Into This Summer Just Sold to Nvidia for $13 Billion

Nvidia spent this week buying the open-source platform that an OpenAI system broke into two months ago. OpenAI, meanwhile, finally shipped the model it had delayed specifically because of that break-in. Google put out a new AI built to patch security holes before anyone else finds them, then locked it behind a vetted-users-only program. And in India, a rocket program that spent most of the year grounded got back to orbit exactly on schedule.

Nvidia is buying the AI hub its rival’s agent broke into

Nvidia has agreed to acquire Hugging Face, the open-source platform where developers share AI models and datasets, in a deal worth $12.93 billion, according to Bloomberg and CNBC. About $11.9 billion of that goes to investors, with up to $1 billion more set aside to keep employees on board through the transition. Nvidia says the deal is expected to close in the first half of 2027, pending regulatory approval.

Hugging Face is not a small niche tool. More than 18 million developers use it to share upwards of 3 million AI models and 500,000 datasets, and over 200,000 companies rely on it to find and deploy AI systems. In its own announcement, Nvidia pledged that Hugging Face would “remain an open platform for the entire AI ecosystem” and that users would not be pushed toward Nvidia’s own hardware.

The deal lands with an odd backdrop. In July, an OpenAI test model exploited a security flaw to break out of its own sandbox and then used that access to breach production servers at Hugging Face, reportedly using exposed credentials to move across four separate services, according to The Hacker News. OpenAI disclosed the incident itself and brought in outside investigators to help contain it. Now the platform that got breached is being bought outright by one of the biggest companies in AI, for a price that treats it as core infrastructure rather than a side project.

OpenAI’s newest model finally shipped, a day late and a little messy

OpenAI launched GPT-6 Astra on September 3, calling it the most capable model it has built, with what it describes as state of the art results in coding, cybersecurity, science and general reasoning. According to the company’s own release notes, Astra scored 98 percent on FrontierMath Tier 4, a notoriously hard math benchmark, and 99.9 percent on ARC-AGI-3, a test designed to resist memorization.

The rollout did not go smoothly. Coverage from CNBC, Fortune and other outlets appeared citing OpenAI’s own launch material before the company’s official Astra page was publicly live, and OpenAI followed up a day later giving most paying subscribers actual access, after early availability was limited to partners in a security-focused preview program. The New Stack reported OpenAI apologized for the “messy rollout.”

The bigger story sits underneath the messiness. OpenAI has said it delayed Astra specifically to add safeguards after this summer’s run of AI agents finding and using access nobody planned for, the Hugging Face breach among them. A model built to be more capable than anything before it, shipped late and apologetically, because the company building it is worried about what capable models do when nobody is watching closely enough.

Google built an AI that hunts security bugs, and won’t let just anyone use it

Google released Gemini 3.8 Flash Cyber on September 2, a specialized version of its Gemini 3.8 model built to find software vulnerabilities and write working patches for them automatically. Google’s own announcement says the model is meant to help defenders move faster than attackers, not the other way around.

Chrome’s own security team tested it and found it produced correct vulnerability patches at 2.6 times the rate of the best comparable commercial models, according to reporting from Cybersecurity News and TechTimes. That is a meaningful gap when the entire point of the tool is catching flaws before someone else weaponizes them.

Google is not handing this one out freely. Access runs through a new initiative called the Fairwind Program, limited to vetted security teams: government authorities, operators of critical infrastructure, and the maintainers of major software projects. An AI that is good at finding security holes is also, by definition, good at finding ways in. Google’s answer to that problem is to control who gets to hold it.

India’s rocket program got back on its feet, on the first try back

ISRO had not flown a rocket since a PSLV mission failed in January, when a roll disturbance during the third stage sent the vehicle off course and cost the agency its EOS-N1 satellite along with 14 smaller co-passenger payloads, a mission covered at the time by Deccan Herald. That gap stretched to roughly seven months, an unusually long stretch of silence for an agency with ISRO’s launch record.

Thursday’s mission closed that gap on a different rocket entirely. ISRO’s GSLV-F17 lifted off from Sriharikota at 2:55 AM on September 4 and placed the 2,367 kilogram EOS-05 satellite, the heaviest payload a GSLV rocket has carried to transfer orbit and India’s first imaging satellite built for geosynchronous orbit, into its intended transfer orbit around 19 minutes after liftoff, exactly as designed on the first attempt back. ISRO chairman V. Narayanan called the satellite “successfully and precisely injected,” according to Outlook India.