Monday, 9 November 2026
Nvidia's Board Opens an Investigation Into Whether Jensen Huang Was Targeted by Foreign Intelligence
Nvidia’s Board Opens an Investigation Into Whether Jensen Huang Was Targeted by Foreign Intelligence
On Sunday, Nvidia’s board said a committee of independent directors, with outside counsel, will investigate reports that its CEO was the target of a foreign intelligence effort. The same day Jensen Huang told staff by email that he had an affair with Alice Huang, a businesswoman U.S. intelligence agencies reportedly believe passes information to Beijing. “I was unfaithful to my wife,” he wrote. “There is no excuse for what I did.” She is linked to Megaspeed, an Nvidia customer accused of helping restricted Chinese firms get its AI chips, which Nvidia says was already investigated for evading export controls. The board says it has no reason to believe national security or company secrets were compromised, that it has “confidence in Jensen”, and that he stays CEO. The timing is rough: three House committee chairs had already asked him on November 5 to brief lawmakers behind closed doors on November 18, and Nvidia reports quarterly earnings on November 17. The world’s most valuable chipmaker sells its best chips to everyone except China — and now has to show that is still true of its secrets.
Source: NVIDIA, November 8, 2026
Claude Code’s “Don’t Ask Again” Left 2,539 Secrets in Public GitHub Repositories
When a developer approves a command in Claude Code with “Yes, and don’t ask again”, the tool saves that exact command as a rule in a project file, .claude/settings.local.json — passwords and tokens typed into it included. The security firm Apiiro searched public GitHub and found 104,185 copies of that file; 1,122 of them held at least one secret, 1,379 distinct ones, including 379 database passwords, 42 GitHub, GitLab and npm tokens and 23 AWS keys. Counting the shared settings file, older versions and saved agent chat logs, the total reaches 2,539 secrets in 1,994 repositories. Every file with a secret was still on its repo’s main branch, half of them for at least 217 days. Claude Code adds the file to the user’s global git ignore list, but not to the project’s own .gitignore. Of 16 coding agents reviewed, it was the only one found to save the full approved command in a project file by default. A bug report about it from August 2025 was auto-closed as “not planned”; no fix is reported. Anyone who uses it should search their repos and history for the file and rotate every key it ever held. The button saved you a question — and kept the answer for everyone else.
Anthropic Reportedly Commits $3.4 Billion to Gas Generators for Its Data Centers
Anthropic has committed about $3.4 billion for 1.7 gigawatts of heavy-duty gas-fired generators from OnePWR Solutions, a San Antonio equipment supplier, the Financial Times reported on Sunday. The commitments were made in late September and include the engineering and construction work to install the machines; Anthropic is not buying the company. Neither company commented, and Reuters could not immediately verify the report. Reuters reported in September that Anthropic expects to spend more than $500 billion on AI infrastructure over the next ten years. When the grid can’t keep up, the AI industry brings its own power station.