AI Alerts — November 8, 2026 (Afternoon — Incremental)
- Anthropic's $3.4B grab of 1.7GW in Caterpillar gas generators from OnePWR marks the largest known AI-lab power buy, jumping the production queue instead of waiting on grid capacity.
- Apiiro found Claude Code's 'don't ask again' setting leaked 2,539 secrets across 1,994 public GitHub repos, including 379 database passwords and 23 AWS keys, by plaintext-saving approved commands outside .gitignore.
- Infrastructure scale and developer-tool security are diverging: frontier labs lock down gigawatts of generation while their own coding agents quietly exfiltrate credentials into public repos.
- The OnePWR deal signals labs are now buying industrial capital-equipment slots directly, treating OEM backlogs as a strategic resource alongside chips and data center sites.
- Practitioners using Claude Code should audit .claude/settings.local.json immediately, add it to .gitignore, and rotate any secrets ever passed through an approved command.
2 stories in this briefing:
-
Anthropic Pays $3.4B for OnePWR's 1.7GW Generator Order
Anthropic paid roughly $3.4 billion for 1.7 gigawatts of Caterpillar gas generators that someone else had ordered first. According to the Financial Times, via CNBC, the AI lab signed the deal in late September with OnePW…
Read the full alert → -
Apiiro: Claude Code 'Don't Ask Again' Leaks Keys in 1,122 Repos
Passwords and API keys developers typed into commands they approved inside Claude Code are sitting in public GitHub repositories, according to a report from software security company Apiiro covered by The Hacker News. Wh…
Read the full alert →