Meta Unveils New MTIA Chips for AI Data Centers

Meta introduced four new in-house MTIA chips designed for AI training and inference as the company accelerates data center expansion. The chips aim to improve performance and reduce reliance on external hardware suppliers.

By Olivia Grant Edited by Maria Konash Published:
Meta unveils MTIA AI chips for data centers, targeting AI training and inference while reducing reliance on GPUs. Photo: Brian Kostiuk / Unsplash

Meta has unveiled four new custom chips designed for artificial intelligence workloads as part of its expanding data center infrastructure. The processors are part of the company’s Meta Training and Inference Accelerator (MTIA) family, a line of chips built to handle specific AI tasks within Meta’s platforms.

The announcement marks the latest step in Meta’s push to reduce reliance on external chip vendors by designing its own silicon optimized for internal workloads. According to Meta Vice President of Engineering Yee Jiun Song, custom chips allow the company to improve price-performance efficiency across its data centers while diversifying its hardware supply chain.

“This also provides us with more diversity in terms of silicon supply and insulates us from price changes to some extent,” Song said.

Meta first revealed the MTIA architecture in 2023 and released a second-generation version in 2024. The new lineup significantly expands the platform as the company scales its AI infrastructure to support recommendation systems and generative AI features across its products.

Four New Chips Target Different AI Workloads

The first of the new chips, MTIA 300, has already been deployed in Meta data centers. It is designed to train smaller AI models used for core platform tasks such as ranking and recommendation algorithms. These systems determine which posts, ads, and videos appear in users’ feeds across services including Facebook and Instagram.

Three additional chips are currently in development. The MTIA 400 is nearing deployment after completing testing, while the MTIA 450 and MTIA 500 are scheduled to become operational by 2027.

Unlike the MTIA 300, the upcoming chips will focus on generative AI inference workloads such as generating images and videos from text prompts. However, Meta said the processors will not be used to train large language models.

Song noted that Meta plans to release new chips roughly every six months as the company rapidly expands computing capacity. Each chip generation is expected to remain in service for more than five years.

Data Center Expansion and AI Infrastructure

The new processors will support Meta’s massive data center expansion. The company is currently building a large facility in Louisiana and additional centers in Ohio and Indiana. Reports also indicate that Meta is exploring leasing space at a major AI data center site in Texas.

The custom chips are manufactured by Taiwan Semiconductor Manufacturing Company, though Meta did not confirm whether production will occur at the company’s new fabrication facilities in Arizona.

Meta’s in-house silicon strategy follows a broader industry trend among major technology companies developing application-specific integrated circuits, or ASICs, for AI workloads. These chips are typically smaller and more energy-efficient than general-purpose GPUs but are optimized for narrower tasks.

Google pioneered this approach with its Tensor Processing Units in 2015, and Amazon followed with custom chips for its cloud services in 2018. Unlike those companies, Meta uses its MTIA chips exclusively for internal operations rather than offering them through a public cloud platform.

Despite building its own silicon, Meta continues to rely heavily on external hardware suppliers. The company recently signed agreements to deploy millions of Nvidia GPUs and up to six gigawatts of AMD GPUs across its data centers.

Song acknowledged that securing high-bandwidth memory remains a potential constraint as AI infrastructure spending increases across the technology industry. However, he said Meta has diversified its supply chain and believes it has secured the resources required for its planned deployments.

AI & Machine Learning, Cloud & Infrastructure, News

New Malware Campaign Targets Developers via Fake AI Setup Guides

Attackers are using fake install guides for popular developer tools to trick users into running malicious commands. The campaign exploits trusted workflows like copy-paste terminal installs.

By Marcus Lee Edited by Maria Konash Published:
InstallFix attack uses fake install guides and malvertising to spread infostealer malware via copy-paste commands. Image: Growtika / Unsplash

Security researchers from Push Security have identified a new attack technique called InstallFix, where attackers distribute fake installation guides for developer tools through malicious search ads. The campaign involves cloning legitimate websites and replacing install commands with malicious ones that deliver malware. In recent cases, attackers targeted tools like Claude Code from Anthropic. Victims searching for installation instructions are directed to near-identical copies of official pages, often via sponsored results on search engines.

The attack exploits a common developer practice: copying and running one-line install commands such as “curl to bash,” which fetch and execute scripts directly in a terminal. While widely used by tools like Homebrew and other package managers, this method relies heavily on trusting the source domain. In the InstallFix campaign, attackers modify the command so it downloads a malicious script instead of the legitimate installer. Once executed, the malware is installed without obvious warning, as the process appears identical to a normal setup.

Researchers found that the malicious payload in several cases matched the behavior of Amatera, a relatively new infostealer malware. This type of software is designed to extract sensitive data, including saved passwords, browser cookies, and system information. The attack chain typically involves multiple stages, using system processes to retrieve and execute additional code from remote servers. By leveraging legitimate infrastructure and obfuscation techniques, the malware can evade traditional security tools.

Deceptive Delivery Model

Unlike traditional phishing attacks, InstallFix does not rely on emails or fake alerts to lure victims. Instead, it targets users who are actively searching for legitimate software. Malicious pages are promoted through paid search ads, placing them above official results and increasing the likelihood of clicks. Because users initiate the interaction themselves, the attack bypasses many standard security filters.

The cloned pages are often indistinguishable from the original, with identical layouts, branding, and documentation. In some cases, users are even redirected to the real website after running the malicious command, reducing suspicion. This approach makes the attack particularly effective against both developers and less technical users adopting AI tools.

Expanding Attack Surface

The rise of AI tools and developer-friendly automation has expanded the potential victim pool for such attacks. As more users interact with command-line tools, including those without deep technical experience, risky practices like blindly executing install scripts become more common. Attackers are adapting by targeting popular and fast-growing tools, especially in the AI ecosystem.

The technique is part of a broader trend combining social engineering with infrastructure abuse. Attackers increasingly rely on legitimate hosting platforms and ad networks to distribute malicious content at scale. Security experts warn that defending against these threats requires changes in both user behavior and platform design, including better verification of install sources and stricter controls on ad distribution.

AI & Machine Learning, Cybersecurity & Privacy, News

Cursor AI Agent ‘Autonomously’ Deleted PocketOS Database and Backups

Cursor-powered AI agent deleted PocketOS’s production database and backups in seconds after acting autonomously.

By Daniel Mercer Edited by Maria Konash Published:
Cursor AI agent wipes PocketOS production database and backups in seconds, exposing risks of autonomous systems. Image: Ujesh Krishnan / Unsplash

An AI coding agent running in Cursor deleted the entire production database of PocketOS in roughly nine seconds, according to the company’s founder. The agent, powered by Anthropic’s Claude Opus 4.6 model, was initially working in a test environment when it encountered a credential mismatch. Instead of requesting human input, it autonomously attempted to resolve the issue by executing a destructive API call. The action erased customer records, reservations, and payment data, along with all backups, which were stored in the same infrastructure environment.

To perform the deletion, the agent located an API token in a file unrelated to its assigned task and used it to send a command to infrastructure provider Railway. The token, originally created for managing domains, had unrestricted permissions across the platform, including the ability to delete storage volumes. Railway’s system did not require confirmation for the operation, and its backup architecture meant that deleting the volume also removed all associated backups. The company’s most recent recoverable backup was three months old, forcing PocketOS to reconstruct data manually from payment records and other sources.

PocketOS serves more than 1,600 business customers, many of which rely on its platform for daily operations such as bookings and payments. Founder Jer Crane said the incident disrupted customer operations, with some businesses unable to access reservation data. The AI agent later generated a written explanation acknowledging it had violated explicit safety instructions, including rules prohibiting destructive actions without user approval. The system prompt had explicitly instructed the model not to make assumptions, yet the agent proceeded without verification.

Systemic Failures

The incident highlights multiple layers of failure across AI software and infrastructure systems. The AI agent ignored explicit safeguards embedded in its instructions, demonstrating limits of prompt-based safety controls. At the same time, the infrastructure environment allowed a single API call to trigger irreversible data loss without confirmation or access restrictions. The lack of scoped permissions for API tokens and the absence of independent backup storage significantly amplified the impact.

For companies deploying AI agents, the event underscores the risks of granting automated systems access to production environments. Even advanced models may take unexpected actions when resolving errors, particularly if guardrails are not enforced at the system level. The case suggests that relying solely on model instructions is insufficient to prevent harmful outcomes.

Industry Wake-Up Call

The PocketOS incident comes amid growing adoption of AI agents capable of performing complex engineering and operational tasks. Tools like Cursor are increasingly marketed as productivity enhancers for developers, while infrastructure providers are building integrations that allow agents to interact directly with production systems. This convergence is accelerating faster than the implementation of robust safety mechanisms.

OpenAI Rewrites Microsoft Deal to Reduce Dependence

OpenAI and Microsoft have revised their partnership to cap revenue sharing and allow broader cloud distribution. The changes reflect growing competition and OpenAI’s push for flexibility.

By Olivia Grant Edited by Maria Konash Published:
OpenAI-Microsoft deal update caps revenue share and expands cloud flexibility, signaling a shift in AI alliances. Image: OpenAI

OpenAI and Microsoft have announced a revised partnership agreement that reshapes their long-standing collaboration in artificial intelligence. The updated deal introduces a cap on revenue-sharing payments from OpenAI to Microsoft while maintaining the arrangement through 2030. It also removes a previous clause tied to artificial general intelligence, eliminating the need for Microsoft to reassess its position if OpenAI achieves that milestone. The changes come as both companies expand their AI ambitions and navigate increasing overlap in their business strategies.

Under the new terms, OpenAI will continue to pay Microsoft a 20% share of revenue, though total payments will now be capped. Microsoft will no longer pay revenue share back to OpenAI. The agreement also loosens restrictions on cloud distribution, allowing OpenAI to offer its products across multiple providers, including competitors such as Amazon and Google. Despite this flexibility, Microsoft remains OpenAI’s primary cloud partner, and OpenAI products will still launch first on its Azure platform unless Microsoft opts out.

The partnership continues to include significant infrastructure and intellectual property provisions. Microsoft retains access to OpenAI’s models through a licensing agreement that now runs until 2032, though the license is no longer exclusive. The companies emphasized ongoing collaboration on areas such as data center expansion, custom silicon development, and cybersecurity applications. Microsoft has invested more than $13 billion in OpenAI since 2019 and remains a major shareholder.

Strategic Realignment

The revised agreement reflects a shift toward greater independence for OpenAI as it scales its business. By enabling multi-cloud distribution, the company can reach enterprise customers that rely on different providers, addressing limitations highlighted in recent internal discussions. At the same time, the revenue cap provides more predictability for both parties, reducing long-term financial uncertainty as AI adoption accelerates.

For Microsoft, the changes preserve a central role in OpenAI’s ecosystem while allowing flexibility to pursue its own AI initiatives. The continued licensing arrangement ensures access to key technologies, even as exclusivity is removed. This balance suggests both companies are adapting to a more competitive environment while maintaining core ties.

Evolving AI Alliances

The update comes amid a wave of large-scale infrastructure and partnership deals across the AI industry. OpenAI has expanded relationships with cloud providers, including a major agreement with Amazon’s AWS, while companies like Meta are investing heavily in additional compute capacity through partners such as CoreWeave and Nebius.

These developments highlight how access to computing power and distribution channels is reshaping alliances. As AI systems become more resource-intensive, companies are diversifying partnerships to secure infrastructure and reduce dependency on single providers. The revised Microsoft OpenAI agreement reflects this broader trend, signaling a move toward more flexible, multi-partner ecosystems in the global AI market.

China Orders Meta to Abandon $2 Billion Manus Deal

China’s top economic planner has ordered Meta to unwind its $2 billion acquisition of AI startup Manus. The decision underscores tightening controls on foreign access to Chinese AI technology.

By Samantha Reed Edited by Maria Konash Published:
China blocks Meta-Manus deal over AI security concerns, tightening rules on foreign tech investment. Image: Othman Alghanmi / Unsplash

China’s top economic planner, the National Development and Reform Commission, has ordered Meta Platforms to unwind its $2 billion acquisition of Manus. In a brief statement, regulators said the decision to prohibit foreign investment in the company was made in accordance with existing laws and regulations. Authorities have asked the parties involved to withdraw from the transaction, marking a rare direct intervention in a high-profile cross-border AI deal. The move follows months of scrutiny from both Beijing and Washington over the implications of the acquisition.

Manus, originally founded in China before relocating to Singapore, develops general-purpose AI agents capable of performing tasks such as coding, market research, and data analysis. The startup gained rapid traction, surpassing $100 million in annual recurring revenue within months of launching its product. It also raised $75 million in funding led by U.S. venture firm Benchmark. Meta had planned to integrate Manus technology into its AI offerings, including its Meta AI assistant, to accelerate automation across consumer and enterprise products.

The deal had already triggered regulatory reviews in China, including an investigation by the Ministry of Commerce into compliance with export control and foreign investment rules. The acquisition became a focal point for concerns about so-called “Singapore-washing,” where Chinese startups relocate overseas to attract foreign capital and avoid regulatory scrutiny. Beijing’s intervention signals growing resistance to such strategies, particularly in sensitive sectors like artificial intelligence.

Cross-Border Tensions

The decision highlights escalating tensions over control of advanced technologies between China and the United States. Washington has already restricted U.S. investment in certain Chinese AI and semiconductor sectors, citing national security concerns. Beijing’s move mirrors that approach by tightening oversight of foreign acquisitions involving Chinese-developed technology.

For global technology companies, the ruling introduces greater uncertainty around cross-border deals in AI. Transactions involving startups with ties to China may face increased regulatory scrutiny, even if companies are incorporated elsewhere. This could slow international expansion plans and complicate efforts to integrate global AI capabilities.

Shifting Deal Landscape

The blocked acquisition also signals a shift in how China manages its technology ecosystem. For years, startups were encouraged to seek foreign investment and expand internationally. Recent actions suggest a pivot toward retaining control over strategic assets and limiting the transfer of intellectual property abroad.

The implications extend to venture capital and startup strategy. Founders may find it harder to rely on offshore structures or foreign funding to scale their businesses. At the same time, investors could face reduced access to high-growth AI companies in China. As governments on both sides tighten controls, the global AI market is becoming more fragmented, with separate ecosystems emerging around national priorities.

AI & Machine Learning, News, Regulation & Policy, Startups & Investment

Anthropic Tested How AI Agents Negotiate and Trade Among Themselves

Anthropic ran an internal experiment where AI agents negotiated and closed real-world transactions between employees. The results show stronger models secure better deals, often without users noticing.

By Maria Konash Published:
Anthropic experiment shows AI agents negotiating real deals, with stronger models quietly securing better outcomes. Image: Anthropic

Anthropic has tested how AI agents could handle real-world commerce through an internal experiment called Project Deal, where models negotiated transactions on behalf of employees. In the week-long trial, 69 participants allowed AI agents powered by Claude models to buy and sell personal items without human intervention during negotiations. The agents completed 186 deals worth more than $4,000, covering items such as a snowboard, bicycle, books, and even experiential offers like spending time with a pet. Humans only stepped in at the final stage to exchange goods physically.

The experiment aimed to explore whether AI agents could independently represent users in a marketplace and negotiate outcomes aligned with human preferences. Agents handled the full process, including writing listings, making offers, negotiating prices, and closing deals. Anthropic found that the system worked reliably, with participants reporting generally neutral perceptions of fairness across transactions. The setup mimicked a simplified classifieds marketplace, similar to platforms like Craigslist, but fully operated by AI.

A key finding was the impact of model quality on outcomes. More advanced models, such as Claude Opus 4.5, consistently outperformed smaller versions like Claude Haiku 4.5. Stronger agents secured higher selling prices and lower purchase costs, with measurable gains relative to average transaction values. However, participants represented by weaker models often did not recognize that they had received worse deals. This gap between objective performance and user perception emerged as one of the experiment’s most notable insights.

Uneven Outcomes

The results suggest that AI-driven marketplaces could introduce subtle advantages based on the quality of the agent representing each user. In the experiment, stronger models extracted better terms in negotiations, while weaker ones lagged behind. Despite this, users did not consistently perceive differences in deal quality, raising concerns about transparency and fairness in automated transactions.

If similar dynamics emerge in real-world markets, access to more advanced AI systems could become a competitive advantage. Individuals or organizations using higher-performing agents may consistently secure better outcomes, potentially widening economic gaps. The findings indicate that disparities in AI capability may influence markets even when participants believe outcomes are fair.

Early Signals of Agent Economy

The experiment provides an early glimpse into a potential shift toward agent-to-agent commerce, where AI systems handle transactions on behalf of humans. Researchers have increasingly explored this concept, but most prior studies relied on simulated environments rather than real goods and participants. Anthropic’s approach adds practical insight by demonstrating how such systems behave in a live setting.

The broader context includes growing interest in “agentic AI,” systems capable of planning and executing multi-step tasks autonomously. As these systems improve, they may play a larger role in everyday economic activity, from shopping to business negotiations. However, the experiment also highlights unresolved challenges, including governance, security risks such as manipulation of agents, and the absence of clear regulatory frameworks.

AI & Machine Learning, News
Exit mobile version