AI news: October 26, 2026

Fundamental trends

OpenAI claims AI has disproved the Exponential Time Hypothesis, publishing a Lean-verified proof

On October 26, OpenAI published a result from its research models that, according to the company, disproves the Exponential Time Hypothesis (ETH), a major assumption in computational complexity theory. ETH concerns the time needed to solve certain Boolean satisfiability problems and underpins hardness results in hundreds of studies covering algorithms, graph theory and databases. OpenAI says its system produced a natural-language disproof on October 16 and that the result was formalized in Lean on October 17. The new October 26 event is the public disclosure of the claim and its supporting material, not the date the model originally produced its argument.

OpenAI made the natural-language proof and Lean formalization publicly available for examination. A Lean-checked proof provides a machine-checkable mathematical artifact, but researchers must still independently assess its interpretation, assumptions and implications for existing literature. An external group led by Russell Impagliazzo and Ramamohan Paturi of UC San Diego, together with Ryan Williams of MIT, will examine and explain the work. Impagliazzo and Paturi were among the researchers who originally proposed ETH. OpenAI says these experts will participate independently and may publish their own conclusions.

If the claim withstands scrutiny, it could substantially alter researchers’ understanding of theoretical limits on algorithms. However, refuting ETH is not the same as resolving P versus NP, nor does it mean efficient practical algorithms have suddenly become available for difficult problems. OpenAI notes that turning a theoretical result into usable algorithms will require further research. The company has agreed to support a conference examining the consequences and the verification process. The broader significance is the emergence of AI-produced mathematical claims accompanied by formal proof artifacts and independent expert review, rather than an immediately deployable software breakthrough.

Source: openai.com

Risk and control

Scammers hide invisible AI-agent instructions in fake $88,000 invoices

On October 26, Sublime Security disclosed an invoice-fraud campaign aimed at employees and AI agents reading corporate email. The messages were detected on October 22. Attackers impersonated company executives, attached fake invoices for around $88,000 supposedly from a North American cybersecurity vendor, and urged rapid payment to secure a 10% discount. The new event is the publication of the investigation, not proof of a completed fraudulent payment.

The AI-facing instructions were concealed inside an almost invisible HTML element and Unicode Tag characters that normally do not appear on screen. Once decoded, the text told an email agent to forward the message with its PDF attachment to an address presented as accounts payable. The attacker customized addresses for individual companies and used tags after a plus sign. The aim was to make the agent treat untrusted email content as an authorized instruction.

Sublime tested the messages on several models and observed varied reactions. Some did not notice the hidden text, others repeated it, and others identified the injection attempt and recommended reporting phishing. Its security tools detected the campaign using signals such as concealed commands, fabricated email threads and suspicious financial requests. The report does not confirm that an AI agent forwarded an invoice, approved payment or that attackers received money.

The risk is a trust-boundary failure: outside email is untrusted data, not an instruction source for agents with access to mail or payment workflows. Organizations should inspect concealed message content, verify supplier details independently and require separate authorization before forwarding documents or initiating payments. This was an external attack attempt against email agents, distinct from earlier OpenAI incidents involving agents changing their own monitoring.

Source: sublime.security

Where AI becomes product

Digit humanoid robots handle over 100,000 totes as GXO expands deployment to two more US warehouses

On October 26, GXO and Agility Robotics announced an expansion of their commercial humanoid robot partnership to two more US warehouses, in Statesville, North Carolina, and Lebanon, Tennessee. Deployment is expected to start in early 2027 using Digit 4, with a transition to Digit 5 once it becomes commercially available. The new event is an expanded commercial agreement, not evidence that robots have already begun operating at either additional location.

The partners already have a working deployment. After trials in 2023, they signed a multiyear Robots-as-a-Service agreement in June 2024. At GXO’s Flowery Branch warehouse in Georgia, Digit moves containers known as totes and places them on conveyors alongside existing automation. The companies say the robots have handled more than 100,000 totes there. Agility Arc provides cloud-based fleet management and warehouse integration. These are company-reported operational figures, not independently verified cost savings.

Agility reports more than 65,000 hours of real-world operation across its commercial activities and customer programs. That total does not belong solely to GXO’s Georgia warehouse. The company also disclosed three new paid programs with manufacturing customers and more than 30 prospective customers. Paid evaluations are not equivalent to large-scale deployments. The companies did not disclose the number of robots intended for the new sites, measured uptime, cost per tote or labor savings.

For physical AI, the agreement represents a move from a proven single-site use case toward deployment across several locations operated by the same customer. The decision builds on repetitive tasks performed in a working warehouse rather than on a staged demonstration alone. Commercial success will depend on throughput, interruptions, human intervention, workplace safety and operating costs. Agility’s RoboFab factory is designed to manufacture up to 10,000 robots annually; that is potential capacity, not actual production.

Source: investors.gxo.com; www.agilityrobotics.com

Architecture and implementation

NVIDIA launches Mission Control 2.5 with autonomous failure recovery for Kubernetes AI clusters

On October 26, NVIDIA detailed Mission Control 2.5, an update to its AI infrastructure management platform. The key change is an extension of automated workload recovery from Slurm-based high-performance computing to Kubernetes jobs managed by NVIDIA Run:ai. The new release is available to Mission Control users. It targets distributed training environments where a single faulty GPU, server, or network connection can interrupt long-running work across many accelerators.

The system coordinates three components. Run:ai schedules Kubernetes workloads onto available resources. A job recovery service uses execution context and failure history to decide whether to retry, restart, or reschedule work. A separate hardware recovery service monitors GPUs and nodes, isolates suspect equipment, and runs diagnostics. During a hardware failure, the affected job can restart on healthy capacity while the investigation continues.

Different failures follow different paths. A transient software timeout can trigger a policy-governed retry without unnecessarily quarantining a healthy server. A node showing signs of hardware degradation can be removed from the scheduling pool before a new training job reaches it. Repeated or nonrecoverable failures are escalated rather than retried indefinitely. NVIDIA also listed AI-enabled network anomaly detection among the release additions, but that particular capability remains in beta.

The significance is operational resilience, not faster inference or a new AI model. NVIDIA did not provide universal figures for downtime reduction, financial savings, or recovery times across customer clusters. Operators still need to test failure handling, checkpoint integrity, and compatibility with their workloads. Unlike recent TensorRT optimization and DGX Spark scaling announcements, Mission Control 2.5 addresses another infrastructure problem: keeping costly training resources productive after failures.

Source: developer.nvidia.com

Finance

Meta unveils plan to raise up to $95 billion for AI expansion, including $35 billion in current offerings

On October 26, Meta announced a plan to raise up to $95 billion in equity to expand its AI infrastructure. It launched two underwritten offerings totaling approximately $35 billion: $22.5 billion in Class A common stock and about $12.5 billion in depositary shares representing mandatory convertible preferred stock. Meta also outlined a separate program to sell up to $60 billion in Class C shares over time. These are planned financing amounts, not $95 billion already received.

The proposed $60 billion at-the-market program has not been finalized. Meta expects it to begin no earlier than the first quarter of 2027, after Class C stock starts trading, and says neither its launch nor the amount sold is guaranteed. The Class A offering involves forward sale agreements: Meta does not expect proceeds when intermediaries initially sell the shares, but anticipates cash upon later settlement. The announcement is not a completed $95 billion fundraising round.

Meta links the financing to additional computing capacity, personal AI services and business agents. It forecasts $135 billion to $145 billion in capital expenditures for 2026. The company reports $97 billion in operating cash flow during the first nine months and approximately $82 billion in cash, equivalents and marketable securities at the end of September. Its funding mix also includes operating cash flow, debt and partnerships; the new offerings are not the sole source of capital.

The plan demonstrates how capital-intensive frontier AI competition has become. Even a profitable technology company is pursuing major equity issuance while expanding data centers and AI products. Investors must assess potential shareholder dilution, future preferred-share conversion terms and returns on the new computing facilities. The scale of the announced plan is not evidence that all proceeds are secured or that infrastructure investments will yield attractive returns.

Source: investor.atmeta.com; www.sec.gov

Tools and integrations

Oracle launches 25 enterprise AI applications for accounting reconciliation, procurement oversight and financial analysis

On October 26, Oracle announced the availability of 25 agentic applications powered by Fusion Claw for Oracle Fusion Cloud Applications. They span ERP, human resources, procurement, supply chains and customer service. Finance examples include Ledger, which reconciles accounting records and investigates discrepancies, and Procurement Spend, which analyzes purchasing and supplier agreements. These are specialized applications within enterprise software, not one general-purpose chatbot.

Ledger analyzes journal entries, investigates anomalies and supports readiness for period-end closing. Procurement Spend identifies purchases outside approved procedures, contract leakage and possible savings. Payroll Activity Workspace compares pay, balances and costs with prior periods and recommends follow-up on material changes. Oracle says consequential operations are subject to defined authority, company policies and approval processes. The agents are not presented as having unrestricted permission to modify financial records.

Oracle also introduced Fusion Companion and Fusion Agentic Home. Companion is designed to select transactions, approvals and agents based on a user’s objective, including through supported AI interfaces such as ChatGPT. Agentic Home lets employees delegate work and monitor progress. Oracle AI Agent Studio provides tools for developing, supervising and evaluating agents. The company says 25 Claw-powered applications are available now, but does not establish that every newly announced interface is already enabled for every customer.

The release illustrates the transition from AI-generated recommendations to coordinated business execution using ERP data and company rules. Unlike a standalone invoice assistant, Oracle’s approach spans multiple business functions. However, the company did not publish independent accuracy or cost-saving results covering all 25 applications. Customers still need to test permissions, approval workflows, audit trails and exception handling before production deployment.

Source: www.oracle.com; www.oracle.com

Business opportunities

Protecting enterprise email from hidden instructions targeting AI agents

Sublime Security’s October 26 investigation highlights a threat to organizations that connect artificial intelligence agents to corporate email. Fraudsters distributed fake invoices for approximately $88,000 and embedded instructions that were nearly invisible to human readers. Their objective was to make an automated assistant interpret untrusted email content as an instruction and perform an unauthorized action. This suggests a possible business service focused on assessing email AI integrations and defending against prompt injection. Prospective customers include accounting firms, corporate finance departments, enterprise AI providers and businesses automating invoice processing. The value would come from preventing unauthorized forwarding of documents and unsafe financial actions rather than simply detecting ordinary spam.

A minimum service would begin by inventorying the AI agents connected to corporate email and determining exactly which actions each can perform. The provider would then prepare a controlled test set containing legitimate invoices, suspicious messages, forged correspondence, nearly invisible HTML elements and hidden Unicode characters. Each agent would be evaluated on its ability to distinguish the content of an incoming message from instructions issued by an authorized user. Tests would also examine whether an agent could forward attachments, change payment details or disclose information without proper approval. Independent controls should prevent instructions embedded in external messages from granting new permissions. Financial transfers and changes to supplier bank details would require separate human verification. Testing should cover attachments and any transformations that occur before email content is provided to the model.

A potential commercial package could include an initial assessment, implementation of controls and recurring tests after model or integration updates. Useful measurements would include the percentage of malicious instructions blocked, false positive rates, email processing time and the successful completion of legitimate tasks. Customers should receive reproducible evidence and an actionable list of security improvements. Importantly, Sublime Security did not report a confirmed successful fund transfer or establish that a corporate agent had actually followed the hidden instruction in the observed campaign. Marketing should therefore not imply that this particular attack caused proven large-scale financial losses. The offering remains a business hypothesis for protecting AI integrations, not an already launched product with independently verified effectiveness.

Source: https://sublime.security/blog/invoice-fraud-campaign-adds-prompt-injection-aimed-at-email-ai-agents/

Reducing downtime in enterprise AI computing clusters

NVIDIA’s Mission Control 2.5 announcement demonstrates the growing importance of automatic recovery in advanced AI infrastructure. When organizations train large models, a single malfunctioning accelerator or server can interrupt a distributed workload, waste expensive computing capacity and require intervention from engineers. NVIDIA extended its recovery mechanisms to Kubernetes environments managed through Run:ai. This creates a possible opportunity for an independent service that assesses AI cluster reliability and helps configure recovery from hardware and software failures. Potential customers include companies operating private GPU infrastructure, research laboratories and providers of large-scale AI services. The commercial value would depend on reducing lost computing time and operational interruptions, not merely installing another infrastructure management interface.

The initial engagement would collect reliable information about failures: affected servers, diagnostic time, interrupted workloads and the availability of usable training checkpoints. Engineers could then configure hardware health monitoring, workload retry policies, isolation of faulty nodes and alerts for responsible staff. The system should distinguish temporary software failures from evidence of hardware degradation, avoiding unnecessary exclusion of healthy servers. Controlled failure tests could be conducted in a limited test environment without exposing critical training jobs to avoidable disruption. Following recovery, the provider would verify that workloads resumed from valid checkpoints and did not silently lose results. Existing platform capabilities should be used where practical rather than creating a complex proprietary replacement for functions already available in the customer’s infrastructure.

The service might combine a fixed-price reliability assessment, implementation work and recurring support with monthly performance reports. Success would be measured through workload recovery time, lost GPU hours, the proportion of successful automatic retries and the frequency of unnecessary node isolation. Financial evaluation would include accelerator operating costs, engineering labor and the overhead of monitoring. NVIDIA did not provide a universal reduction in downtime or a verified savings percentage for all customers, so any claimed benefit must be measured in the client’s environment. Its AI-based network anomaly detection capability should also be distinguished from the released recovery functions because that feature remains in beta. This is a proposed engineering and operations service rather than an established business with demonstrated customer returns.

Source: https://developer.nvidia.com/blog/how-nvidia-mission-control-2-5-brings-autonomous-recovery-to-kubernetes/

Deploying governed financial AI agents inside enterprise systems

Oracle’s October 26 announcement illustrates the shift from enterprise AI assistants that provide explanations toward agents capable of performing connected operations within business software. The company introduced 25 agentic applications for Oracle Fusion Cloud Applications. Financial examples include Ledger, which helps analyze accounting entries and investigate discrepancies, and Procurement Spend, which examines purchasing activity and contractual compliance. This development suggests a potential service for implementing governed financial automation in enterprise systems. Prospective customers include distributors, manufacturers, accounting departments and enterprise software integrators. Their business problem involves repetitive financial checks, extensive manual reconciliation and time-consuming investigation of unusual transactions. The service would aim to reduce processing time and mistakes while preserving human responsibility for consequential decisions.

An initial pilot should focus on a single workflow, such as detecting duplicate accounting entries, examining purchases against approved agreements or preparing an exception report before period-end closing. The implementation team would document the data sources, applicable rules, user permissions and conditions requiring accountant intervention. An AI agent would initially receive the minimum access necessary to operate on test data or a tightly controlled production dataset. It would produce reconciliation results with references to the relevant transactions, amounts, policies and exceptions. Read-only access would be a sensible default during the first stage. If later phases required changes to financial records, these operations would need separate authorization from a responsible employee and an independent audit log. Connecting an AI agent to an ERP system does not by itself make the agent’s interpretation accurate or authorize it to post accounting transactions.

After the pilot, results would be measured using reconciliation time, correct detection of discrepancies, false alert frequency, human corrections and processing cost per document. The project would also need to account for software licensing, maintenance, data protection and compatibility with the customer’s enterprise configuration. Oracle announced availability for 25 applications, but this should not be interpreted as evidence that all newly announced interfaces and integrations are immediately enabled for every customer. The company did not publish independent accuracy or cost-savings assessments covering every application. Consequently, the proposed service should begin with a measurable business process rather than promising completely autonomous accounting. It remains a business hypothesis for a professional integration service, not a finished commercial product with proven financial returns.

Source: https://www.oracle.com/news/announcement/ai-world-oracle-advances-outcome-driven-ai-across-fusion-applications-2026-10-26/