Friday, November 6, 2026
The Department of War's Office of Strategic Capital has issued a conditional commitment for up to $1.5 billion in long-term financing to Wolfspeed, a silicon carbide and gallium nitride chipmaker that emerged from bankruptcy a year ago. Nothing has been signed.
TSMC's Arizona Fab 21 is producing 4-nanometer chips at 24,000 wafers per month. Intel's Ohio campus has shipped revenue wafers. Samsung's Texas facility is running. Combined, the three facilities represent roughly 8 percent of global advanced-node capacity. The gap between what is producing and what the full domestic supply chain requires is measured in years.
Marvell Technology raised its fiscal 2028 revenue forecast to about $20 billion at its investor day on Tuesday, above the $18.2 billion analysts expected, and introduced a first-ever fiscal 2031 revenue range of $70 billion to $90 billion. From fiscal 2026 revenue of $8.2 billion, the targets imply compound annual growth above 50 percent for five straight years, powered by custom AI chips, networking and optical interconnects for data centers.
Micron Technology reported fiscal fourth-quarter revenue of $54.23 billion, up 379 percent from a year earlier, with a non-GAAP gross margin of 87 percent as AI demand pushed memory prices higher. The shares swung both ways the next day and a week later sat slightly below where they were before the report.
Microsoft folded chat, an agent, a code builder and native Word, Excel and PowerPoint into a single Copilot application on 25 September, and split the bill in two: a flat per-user subscription for everyday use, and a usage meter denominated in Copilot Credits for everything agentic. Thirty million paid seats out of a commercial base above 450 million is the number the launch is aimed at.
A Git setting called core.fsmonitor holds a command, and Git runs it whenever the index refreshes — on git status, on git diff. Read it out of a cloned repository's own config and the repository executes code. On some coding agents the payload fires before the workspace-trust prompt is shown.
Contracts obtained through litigation describe four frontier labs each holding Defense Department agreements worth up to $200m, with bidirectional data exchange including model benchmarks and engineers embedded with the military. Procurement usually buys a product. This buys a relationship in both directions.
PwC puts annual data centre capital expenditure at roughly $800bn in 2026, rising toward $1.8 trillion a year by 2050. A boom has a peak somewhere in it. A run rate that roughly doubles over 24 years is a description of infrastructure, and infrastructure is financed, sited and regulated differently.
CrowdStrike has started intercepting npm install and pip install at the endpoint, blocking a package before its embedded scripts can run. That the defence has moved to the last moment before execution is an admission about everything upstream of it.
A flaw in JFrog Artifactory rated 9.8 lets an unauthenticated attacker on the network take administrative control under default configuration — minting admin tokens, forging credentials, reading the whole access topology. Disclosed on 28 August, observed being exploited in the wild by 1 September.
Buyers have stopped asking whether a supplier's software is secure, because they cannot find out. They have started asking who owns the supplier, where it builds, and what it would have to disclose.
Procurement has learned to ask what open-source components a vendor ships. It still rarely asks what is running on the controller beneath the operating system, where the code is older, the provenance is thinner and the update path frequently does not exist.
Incident communication began as courtesy and has become evidence. The wording of a status update now determines credits, contract remedies and whether anyone believes the next one.
Engineering organisations are building the same abstraction over the same infrastructure, independently, because the alternative is asking every team to learn all of it.
Authentication requirements that were optional for years are enforced, and organisations that never thought about their sending domain are discovering their mail has quietly stopped arriving.
Industrial equipment outlives its control software by decades. Patching it means stopping production, and the vendor that wrote it may no longer exist.
Companies used to satisfy data residency with a paragraph and a regional bucket. The requirements have grown teeth, and satisfying them is now a question about how the software is built.
Work moved into the browser years ago and the security stack did not follow. Enterprises are now treating the tab, rather than the device or the network, as the place controls belong.
Software companies spent a decade giving away a usable product to build a funnel. The economics of that giveaway changed when the marginal cost of a free user stopped rounding to zero.
Companies have always known their software sits on components maintained by volunteers. Insurers, auditors and regulators are now asking which ones, who maintains them, and what happens when that person stops.