Good morning. It's Tuesday, July eighth, 2026. Let's get you up to speed.

**Story one.** Security researchers at Sysdig have documented the first fully autonomous AI ransomware attack. They're calling it Jade Puffer. A large language model agent executed an entire attack chain — reconnaissance, credential harvesting, lateral movement, privilege escalation, database encryption, ransom notes — over six hundred payloads, without step-by-step human direction. The attacker set the target and infrastructure, then let the agent run. The entry point was a known, patched vulnerability in Langflow — CVE-2025-3248, a CVSS nine-point-eight flaw sitting in CISA's exploited catalog for over a year. The target was never updated. The API keys for OpenAI, Anthropic, DeepSeek, and Gemini found in the logs? The agent stole those from the victim during credential harvesting. It used the victim's own tools against them. If you're running Langflow before one-point-three-oh, patch it today. This isn't proof-of-concept anymore.

**Story two.** A CNBC investigation reveals Chinese AI models are capturing between thirty and forty-six percent of enterprise API token usage through US developer platforms — and they've held above thirty percent every week since February. The historical average was around eleven percent. This is a regime change. The driver is simple economics. Zhipu's GLM-5.2 — a seven-hundred-fifty-three-billion-parameter open-weights model outperforms GPT-5.5 on long-horizon coding benchmarks at one-sixth the cost. The pattern: not the best model wins, but the best model that's good enough. When your task is batch inference, not frontier reasoning, the cost differential becomes impossible to ignore. And it puts pressure on every US model pricing decision.

**Story three.** SpaceX Transporter-seventeen launched yesterday from Vandenberg — eighty-one payloads on one Falcon 9, pushing the rideshare program past eighteen hundred total. The standout: City Labs' BOHR, the world's first commercial nuclear-powered satellite. It's a betavoltaic CubeSat — tritium decay converting to electricity over years, no moving parts. For persistent LEO operations where solar panel degradation matters, this is a different paradigm. City Labs has been shipping betavoltaic batteries for a decade. Putting one in orbit is the natural next step. Booster B-ten-ninety-seven logged its eleventh flight. Another routine milestone in a program that makes them routine.

**Story four.** Yesterday's Transporter-seventeen also carried a milestone for a different kind of power. But let me shift to robots. An ex-Tesla Optimus scientist is launching a European humanoid company, focusing on lightweight manufacturing and logistics robots first. The timing is notable: Agility Robotics just went public at two-point-five billion. Unitree got Chinese regulatory approval for a forty-two-billion-yuan Shanghai listing. China now has over one-forty humanoid makers and accounts for eighty-five percent of global shipments. Hardware is commoditizing fast. The differentiator is shifting to software and vertical applications — which sounds familiar to this industry.

That's all for today. See you tomorrow.