Daily News Coverage · November 5, 2026
The Big Headline: French Blood Bank Freezer Hack, Semiconductor Selloff After Midterms, Anthropic IPO Subscription, GPT-6.2 Astra Leak, Agility Robotics Nasdaq Debut and a $500M AI Sales Round
Good morning, folks! A cyberattack on France's national blood service tried to raise plasma freezer temperatures to 110°C at three cold-storage sites — no blood products were compromised, but the attack extends a wave of refrigeration hacks that has now hit at least 11 European countries. The Philadelphia Semiconductor Index fell as much as 5% as Democrats swept the US midterms and data-center opponents won key governorships in Texas and Georgia, threatening the AI infrastructure buildout.
Anthropic's IPO subscription opens today on Bitget at a reported $1.5–1.75 trillion valuation, with a roadshow expected the week of November 9. OpenAI's unannounced GPT-6.2 Astra briefly surfaced on its API before being pulled, with early scores reported above the full-spec GPT-6 Astra. Nvidia lost its $5 trillion market cap as chip stocks sold off. Agility Robotics begins trading on Nasdaq under AGLT after completing its SPAC merger. Anthropic open-sourced a cryptographic system to verify which AI model produced an output.
AI sales startup Nooks secured a $500 million commitment from General Catalyst, and AI inference startup Fal reached a $16 billion valuation. The N0N ransomware group posted 16 new leak-site claims targeting technology companies, while LockBit 5.0 listed an Indonesian telecom infrastructure firm. And a supply-chain attack on OpsShield's cPGuard update channel backdoored about 2,950 hosting servers. Here's today's briefing from The CODEW's The Newsroom.
Cyberattack on French Blood Service Tried to Raise Plasma Freezer Temperatures to 110°C
The attack hit a refrigeration equipment supplier used at three plasma storage sites; monitoring systems detected the anomaly in time, and no blood products were lost.
What happened: A cyberattack targeted the refrigeration systems at three plasma cold-storage sites operated by Établissement Français du Sang (EFS), France's national blood transfusion service. According to EFS, the attackers raised temperature and defrosting thresholds to what the service described as "extremely high levels." French weekly Le Canard Enchaîné, which first reported the incident, said the attack attempted to reset temperatures normally held at minus 30°C to as high as 110°C. Monitoring and alarm systems detected the anomalies, and staff either secured the equipment or moved the products to other facilities. EFS said no blood products or samples were compromised and no health consequences were identified. The equipment supplier, Coolworld, said the vulnerability related to a third-party component outside its direct control and that only a limited number of units were affected. France's national cybersecurity agency and the Health Ministry are investigating.
Key numbers/companies: EFS · Coolworld · 3 plasma sites · -30°C target · 110°C attempted · no blood products lost · 11 European countries affected by refrigeration attacks.
Why it matters: The incident shifts the issue of refrigeration system security from commercial losses to medical infrastructure. Even though the products were protected, remote manipulation of temperatures at facilities storing medical products shows how important it is to secure internet-connected equipment, including when it is managed by external suppliers. The attack is part of a broader wave: at least 11 European countries — Belgium, Estonia, Finland, France, Germany, Ireland, Luxembourg, the Netherlands, Portugal, Sweden and the United Kingdom — have reported incidents affecting supermarket refrigeration systems, with temperatures rising to around 50°C in some stores and merchants forced to discard food. Romania's DNSC confirmed six stores affected and described the incidents as "semi-amateurish," while Italy held emergency talks with intelligence services and Belgium opened a federal investigation.
What's next: Whether investigators identify a common vulnerability across the European attacks and what security requirements emerge for internet-connected cold-storage equipment.
Sources: Associated Press; The Guardian; Le Canard Enchaîné; Euronews; AFP; The Record; Shattered.io.
Philadelphia Semiconductor Index Falls 5% as Midterm Sweep Raises Data-Center Regulation Fears
Micron fell 7.47%, Intel 6.18%, Nvidia 2.55%, TSMC 3.24% and ASML 4.60% as Democrats won the House and Senate and data-center opponents took governorships in Texas and Georgia.
What happened: The Philadelphia Semiconductor Index fell as much as 5% on November 5 to 10,069.86, with Micron down 7.47%, Intel down 6.18%, TSMC down 3.24%, ASML down 4.60%, Broadcom down 3.07% and Nvidia down 2.55%. Optical and storage names fell harder: Lumentum dropped more than 11%, Coherent more than 8%, Marvell more than 8%, SanDisk more than 7%, Seagate more than 7% and Western Digital more than 6%. The selloff followed the Democratic sweep of both chambers of Congress and key governorships, which investors interpreted as a signal of tougher regulation for AI data centers. At least 33 communities approved measures to restrict data centers in the midterms, supporting moratoriums, new regulations and outright bans, according to Data Centers on the Ballot. In Texas — estimated to account for about a quarter of US data-center capacity due to come online by 2030 — Democrat Gina Hinojosa defeated Greg Abbott, ending three decades of Republican control. In Georgia, Democrat Keisha Lance Bottoms won the governorship in the country's most active data-center construction market.
Key numbers/companies: Philadelphia Semiconductor Index -5% · 10,069.86 · Micron -7.47% · Intel -6.18% · Nvidia -2.55% · TSMC -3.24% · ASML -4.60% · Lumentum -11% · 33 communities restricting data centers.
Why it matters: The midterms have become a referendum on AI infrastructure. Amundi's Aidan Yao said the results are "more like a referendum on AI than a referendum on Trump," warning that if the AI theme is subject to restrictions, "the US economy, US inflation and US monetary policy all become very, very uncertain." Investors fear that nearly half of planned US AI data-center projects could face temporary construction freezes, stricter local rules or community opposition, according to Bloomberg. Analysts still see slim chances of federal legislation that would severely undermine the data-center buildout, but the political signal matters: data centers are loud, water-hungry, electricity-intensive and increasingly unpopular with their neighbors. Elon Musk, who donated more than $150 million to the Republican campaign, responded on social media: "Data centres in space looking pretty appealing right now."
What's next: Whether a Democratic-led Congress pursues AI company scrutiny and how state and local governments translate ballot measures into construction delays.
Sources: Reuters; Bloomberg; The Straits Times; CNBC TV18; The Telegraph India; The News; Yonhap; KBS; Dispatch.com.
Anthropic IPO Subscription Opens on Bitget at $1.5–1.75 Trillion Valuation as Roadshow Nears
The subscription page opens November 5 ahead of a roadshow expected the week of November 9, with a possible Nasdaq listing as soon as the week of November 16.
What happened: Anthropic's IPO subscription opens today, November 5, on Bitget IPO Prime, with market expectations placing the valuation at approximately $1.5–1.75 trillion. Anthropic publicly filed its US IPO prospectus on October 26 and plans to list on Nasdaq under the ticker ANT. The company is expected to target a mid-November debut, with a roadshow set to start the week of November 9 and a possible listing as soon as the week of November 16, according to Reuters and The Wall Street Journal. The price range remains blank in the filing.
Key numbers/companies: Anthropic · Nasdaq · ticker ANT · $1.5–1.75 trillion expected valuation · roadshow week of November 9 · listing possible week of November 16 · Bitget IPO Prime.
Why it matters: The listing is the most important test yet of whether public markets will accept the economics of a frontier AI lab. Anthropic's amended S-1 disclosed $16.96 billion in third-quarter revenue, up 1,127% year over year, but also a $567 million operating loss and $895.4 billion in committed spending. Investment bank models based on 2028 revenue of $190–200 billion and a 10–12x forward price-to-sales multiple imply a valuation of $1.1–1.3 trillion, below the expected range — suggesting that some large investors favor the lower end after the recent tech selloff. The offering will function as a stress test of whether the AI industry's capital-intensive model can work in public markets.
What's next: The roadshow's reception and whether the listing proceeds on the November timeline or slips into 2027.
Sources: Reuters; The Wall Street Journal; Bitget; nai500.com; roboforex.com; ShiftDelete; VietnamPlus; 163.com.
OpenAI's Unannounced GPT-6.2 Astra Briefly Appears on API Before Being Pulled
Developers spotted the model ID in Codex analytics and API responses; reports claim its entry-level score surpassed the highest full-spec version of GPT-6 Astra.
What happened: OpenAI's unannounced GPT-6.2 Astra briefly surfaced on the company's API before being swiftly removed. On November 1, a developer debugging OpenAI's Codex reported that the interface still offered GPT-6 Astra, but the API response came back stamped gpt-6.2-astra. The model identifier subsequently appeared in Codex usage analytics and ChatGPT Work, with reports claiming it accounted for 19.8% of traffic at one point. The model was pulled and, according to one report, sent back for rework. Its entry-level score was reported to have surpassed the highest full-spec version of GPT-6 Astra. As of November 2, OpenAI's API changelog, model catalog, and model pages did not list gpt-6.2-astra, and the company had made no announcement.
Key numbers/companies: OpenAI · GPT-6.2 Astra · gpt-6.2-astra · 19.8% traffic share · GPT-6 Astra · Codex · ChatGPT Work.
Why it matters: The leak is a reminder that the model race is still moving fast enough that unannounced models can reach production infrastructure. The timing — one week before Anthropic's roadshow — matters. If GPT-6.2 Astra outperforms the full-spec GPT-6 Astra at an entry-level tier, it would put pressure on OpenAI's competitors on capability while the company also cuts prices. The pullback may indicate a safety review or a decision to hold the model for a larger launch. Either way, the industry now knows the model exists.
What's next: Whether OpenAI formally announces GPT-6.2 Astra and what the benchmark results show.
Sources: 36Kr; OrcaRouter; Qiniu; CometAPI; Omniakey.
Agility Robotics Begins Trading on Nasdaq Under AGLT After Completing SPAC Merger
The combined company expects approximately $465 million in gross capital, with Foxconn participating in a $201 million PIPE.
What happened: Agility Robotics completed its business combination with Churchill Capital Corp XI and was expected to begin trading on Nasdaq under the ticker AGLT, with warrants under AGLTW, on November 5. Churchill XI shareholders approved the deal on November 2 with more than 84% of votes cast in favor, and the transaction closed on November 4. The combined company expects a gross capital raise of approximately $465 million: about $164 million from Churchill XI's trust account, approximately $201 million from a common stock PIPE at $10 per share led by Foxconn, and $100 million of equity funding already received. Agility is expected to be the only US publicly listed pure-play humanoid robotics company with proven, active commercial deployments.
Key numbers/companies: Agility Robotics · Digit · Churchill Capital Corp XI · Foxconn · GXO · Nasdaq · AGLT · AGLTW · $465 million gross capital · 84% shareholder approval.
Why it matters: Agility's listing gives public-market investors a direct way to assess the economics of commercial humanoid robotics. The company has reported more than 65,000 hours of real-world operation and has expanded its GXO partnership into additional US facilities. Foxconn's participation as a PIPE investor and potential manufacturing partner is strategically significant: if Agility can leverage Foxconn's manufacturing scale, it could reduce unit costs faster than competitors. The company also signed an agreement with AGCO in November to pilot Digit at a Kansas manufacturing plant beginning in 2027. The public market will now be able to judge whether those pilots convert into revenue, margins and utilization rates.
What's next: Agility's first earnings report and whether the stock holds its debut valuation.
Sources: Agility Robotics; Nasdaq; Yahoo Finance; TMCnet; TechNews; MoneyDJ; Korthos Robotics; The AI Insider.
Anthropic Open-Sources Cryptographic System to Verify Which AI Model Produced an Output
The system uses cryptographic proofs to prevent model swapping while protecting proprietary weights, according to a blog post published Tuesday.
What happened: Anthropic developed an open-source system that uses cryptographic proofs to verify which AI model produced a given output. The system is designed to prevent model swapping — where a provider substitutes a cheaper or different model behind the same API — while protecting proprietary weights. According to a blog post published Tuesday, the fingerprints the system generates do not expose a model's internal parameters, which closed-model developers like Anthropic and OpenAI keep secret.
Key numbers/companies: Anthropic · cryptographic proofs · model verification · open source · proprietary weights.
Why it matters: As AI models become infrastructure, buyers need a way to verify that the model they are paying for is the model they are getting. The system addresses a real trust problem in the API economy: a provider could silently downgrade a model to reduce costs without the customer knowing. If the system gains adoption, it could become a standard for model provenance and accountability, and it would give regulators and auditors a technical mechanism to verify compliance claims.
What's next: Whether other AI labs adopt the system or develop competing verification standards.
Sources: TechDebrief.
Supermarket Freezer Attacks Spread to at Least 11 European Countries as Ahold Delhaize Flags $281 Million Hit
Temperatures rose to around 50°C in some stores; Romania confirmed six stores affected and Italy held emergency talks with intelligence services.
What happened: The wave of cyberattacks affecting supermarket refrigeration systems spread in early November to at least 11 European countries: Belgium, Estonia, Finland, France, Germany, Ireland, Luxembourg, the Netherlands, Portugal, Sweden and the United Kingdom. In some stores, temperatures rose to around 50°C, forcing merchants to throw away food. The incidents followed an October attack in which hundreds of stores in France reported similar problems. Ahold Delhaize said it expected the cyberattack to reduce fourth-quarter sales by as much as €250 million ($281 million) and operating income by up to €100 million. Romania's DNSC confirmed six stores affected and described the incidents as "semi-amateurish," saying authorities do not suspect a state actor. Italy held emergency talks with intelligence services and the national cybersecurity authority, and Belgian federal prosecutors opened an investigation. No credible claim of responsibility or joint official attribution has been made.
Key numbers/companies: Ahold Delhaize · €250 million sales impact · €100 million operating income impact · 11 countries · 50°C temperatures · Romania DNSC · 6 stores in Romania.
Why it matters: The extension to blood plasma storage sites shows that the same class of vulnerability — internet-connected temperature controllers managed by third-party suppliers — can move from grocery aisles to healthcare. The confirmed incidents in Romania show this is not just a local problem affecting western European retail chains. Investigations in several countries may help identify a common vulnerability and determine the technical measures retailers and equipment suppliers need to apply. The Ahold Delhaize financial disclosure is the first hard number on the economic impact, and it is large enough to force board-level attention across the sector.
What's next: Whether a common vulnerability is identified across the European attacks and what security requirements emerge for cold-chain equipment.
Sources: Euronews; AFP; The Record; Kaseya; CSO Pakistan; Associated Press.
OpsShield cPGuard Supply Chain Attack Backdoors About 2,950 Hosting Servers
Attackers hijacked the update channel to push a fake update that stole root SSH keys and password hashes.
What happened: Attackers hijacked OpsShield's cPGuard update channel, pushing a backdoored update that stole root SSH keys and password hashes from approximately 2,950 hosting servers. The attack targeted the software update mechanism itself, meaning every customer who installed the legitimate update received the malicious payload. The compromise is a supply-chain attack in the classic sense: the vendor was not directly breached, but its distribution channel was.
Key numbers/companies: OpsShield · cPGuard · 2,950 hosting servers · root SSH keys · password hashes · supply-chain attack.
Why it matters: Hosting providers are high-value targets because compromising one provider can give attackers access to thousands of customer sites. The theft of root SSH keys is particularly serious because those keys often provide persistent, privileged access that survives password resets. The attack also reinforces a structural problem: software update channels are trusted by design, and compromising them is one of the most efficient ways to distribute malware at scale. Organizations should verify update integrity, pin versions where possible and monitor for anomalous outbound connections from management servers.
What's next: Whether OpsShield discloses the full scope of affected servers and how hosting providers respond.
Sources: BreachNews.
N0N Ransomware Group Posts 16 New Leak-Site Claims, Primarily Targeting Technology Companies
The group added seven listings in four days between October 30 and November 2, then 16 more on November 3.
What happened: The N0N ransomware group posted 16 new claims on its dark web leak site, primarily listing organizations in the technology sector, according to Security Arsenal. The new claims followed seven leak-site listings in the four days between October 30 and November 2, described as a US-heavy campaign. The group's activity has accelerated sharply in the first week of November.
Key numbers/companies: N0N · 16 new claims · 7 listings in 4 days · technology sector · US-heavy campaign.
Why it matters: N0N's targeting of technology companies is consistent with a broader trend: technology firms hold valuable intellectual property, customer data and access to downstream systems, making them attractive to ransomware operators. The group's rapid claim cadence — 23 listings in five days — suggests either a highly automated operation or a large batch of pre-existing access. Defenders should treat the leak-site claims as a signal to check for compromise, not just as public shaming.
What's next: Whether any of the listed organizations confirm breaches and how the group's activity evolves.
Sources: Security Arsenal; Dark Web Intelligence.
AI Sales Startup Nooks Secures $500 Million Commitment as AI Inference Startup Fal Reaches $16 Billion Valuation
General Catalyst's Customer Value Fund committed to Nooks; Fal's new round reflects continued investor appetite for inference infrastructure.
What happened: Nooks, an AI startup focused on sales, obtained a $500 million commitment from General Catalyst's Customer Value Fund to fund expansion in sales and marketing. Separately, AI inference startup Fal completed a new funding round that raised its valuation to $16 billion. Both deals reflect continued investor appetite for AI applications and inference infrastructure despite the broader tech selloff.
Key numbers/companies: Nooks · $500 million · General Catalyst Customer Value Fund · Fal · $16 billion valuation · AI inference.
Why it matters: The two deals show that capital is still flowing to AI companies with clear commercial traction, even as public markets punish AI infrastructure names. Nooks is selling AI into sales workflows, which is one of the few enterprise AI categories with measurable ROI. Fal's $16 billion valuation reflects the importance of inference as a distinct infrastructure layer. The contrast between these private-market commitments and the public-market selloff is a useful signal: investors are differentiating between companies with revenue and companies with narratives.
What's next: Whether other AI startups announce large rounds before year-end and how the public-market selloff affects private valuations in Q1 2027.
Sources: MarketScreener; 36Kr.
Binance Reveals Employee Devices Were Compromised Before $6.3 Billion Theft
The post-mortem follows earlier disclosure that a fake job interview was the entry point for the attack attributed to North Korea.
What happened: Binance revealed that employee devices were compromised before the $6.3 billion crypto theft, according to the company's post-mortem. The disclosure follows earlier reporting that a fake job interview was the entry point for the attack, which Binance attributed to North Korea-linked actors. Attackers used social engineering and malware to gain access, dwelled inside the environment for months and compromised multiple machines before executing the heist.
Key numbers/companies: Binance · $6.3 billion · compromised employee devices · fake job interview · North Korea-linked · months of dwell time.
Why it matters: The post-mortem confirms that the largest crypto theft on record was not a smart-contract exploit or a zero-day. It was a human-targeted intrusion that began with a recruitment pretext. For crypto exchanges, the lesson is that custody security is only as strong as the people who hold the credentials. For enterprises more broadly, it is a reminder that identity verification and endpoint monitoring remain the highest-leverage controls against state-linked actors.
What's next: Whether Binance recovers additional funds and how regulators respond to the North Korea attribution.
Sources: AIdapted; ChainCatcher; Infoseek; Tokyo Shimbun; Kyodo.
LockBit 5.0 Claims Attack on Indonesian Telecom Infrastructure Firm Centratama
The listing marks a continued resurgence for the ransomware brand after law enforcement disruptions.
What happened: The LockBit 5.0 ransomware operation listed PT Centratama Telekomunikasi Indonesia, a telecom infrastructure firm, on its dark web leak site, according to Dark Web Intelligence. The claim is the latest sign that the LockBit brand has continued operations under a new version after previous law enforcement actions.
Key numbers/companies: LockBit 5.0 · PT Centratama Telekomunikasi Indonesia · telecom infrastructure · dark web leak site.
Why it matters: LockBit's persistence after disruption illustrates the resilience of ransomware-as-a-service operations. The targeting of telecom infrastructure is consistent with the group's historical focus on high-impact sectors where downtime is costly. Whether the claim is verified or not, it is a reminder that LockBit remains an active threat brand.
What's next: Whether Centratama confirms the breach and whether LockBit 5.0 expands its victim list.
Sources: Dark Web Intelligence.
Why It Matters
The midterm elections have made AI infrastructure a political issue. The Democratic sweep and the success of data-center opponents in Texas and Georgia signal that the AI buildout will face more regulatory friction at the state and local level. The semiconductor selloff is a direct response. Investors are now pricing political risk into AI infrastructure names, and the companies most exposed are those with large data-center footprints in politically contested regions.
The French blood bank attack is a new category of cyber risk. The attack did not steal data or demand ransom. It tried to physically damage medical products by manipulating freezer temperatures. That is a different threat model from the ransomware and espionage campaigns that dominate cybersecurity coverage. As more physical infrastructure connects to the internet, the line between cyberattack and physical sabotage blurs.
Anthropic's IPO is the most important capital-markets event in AI this year. A $1.5–1.75 trillion valuation would make it one of the largest listings in history. The roadshow's reception will determine whether public markets are willing to fund the capital-intensive model that frontier labs have adopted. If the IPO succeeds, it validates the build-out. If it struggles, it forces a rethink.
The GPT-6.2 Astra leak shows the model race is still accelerating. OpenAI has not announced the model, but it appeared in production infrastructure with a 19.8% traffic share. The pullback may be a safety review or a launch decision. Either way, the competitive pressure on Anthropic ahead of its IPO is real.
Agility Robotics' Nasdaq debut is a test of public-market appetite for humanoid robotics. The company has real deployments and a real track record. Now it has to prove that those deployments can generate attractive returns. Foxconn's participation as a manufacturing partner is a signal that scale is part of the path.
The CODEW Take
The French blood bank attack is the most important cybersecurity story of the week. It is not the largest breach, the most sophisticated exploit, or the most costly incident. It is important because it shows that the threat model has expanded from data theft to physical sabotage. Attackers manipulated freezer settings to destroy plasma. The fact that they failed is a credit to EFS's monitoring, not a reason to dismiss the risk. Every hospital, blood bank, food distributor, and pharmaceutical manufacturer that runs internet-connected cold storage should be reviewing its controls this week.
The midterm results are a warning that the AI infrastructure boom has a political ceiling. Democrats won by campaigning against data centers in places like Texas and Georgia. At least 33 communities approved restrictions. The semiconductor selloff is the market's first attempt to price that risk. The AI industry has spent two years arguing that its build-out is an economic imperative. The voters disagreed. The industry now needs to make a case that data centers benefit the communities that host them, not just the shareholders who own them.
Anthropic's IPO will be the defining capital-markets test of the AI era. The company is asking public investors to underwrite a business with extraordinary revenue growth, a large operating loss, and $895 billion in commitments. If it succeeds, it will validate the model. If it fails, it will force a reckoning. The roadshow is more important than the valuation range.
The GPT-6.2 Astra leak is a reminder that the model race is not slowing down. OpenAI has not announced the model, but it is already in production infrastructure. The competitive pressure on Anthropic ahead of its IPO is real, and OpenAI's willingness to ship unannounced models suggests it is not waiting for a formal launch cycle.
Agility Robotics' listing is the first real public-market test of humanoid robotics. The company has more than 65,000 hours of real-world operation and a customer pipeline that includes GXO and AGCO. But it has not yet proven that those deployments generate attractive returns. The market will judge it on deployed robot count, revenue per robot and gross margin, not on the number of robots announced.
What to Watch
- French blood bank investigation: Whether authorities identify the attack vector and whether other healthcare cold-storage sites were targeted.
- European refrigeration attacks: Whether a common vulnerability is found across the 11 countries and what Ahold Delhaize's final financial impact is.
- Semiconductor selloff: Whether the index recovers or whether political risk becomes a sustained valuation headwind.
- Anthropic IPO roadshow (week of November 9): Investor reception and whether the listing proceeds on the November timeline.
- GPT-6.2 Astra: Whether OpenAI formally announces the model and what benchmarks show.
- Agility Robotics AGLT trading: Whether the stock holds its debut valuation and what its first earnings report reveals.
- Anthropic model verification: Whether other AI labs adopt the cryptographic system or develop competing standards.
- OpsShield cPGuard: Whether the company discloses the full scope of affected servers and how hosting providers respond.
- N0N ransomware: Whether any of the 23 listed organizations confirm breaches and how the group's activity evolves.
- Data center ballot measures: How state and local governments translate the midterm results into construction delays or regulatory requirements.
Editorial Note
The CODEW Daily News Coverage tracks the most important technology developments of the day, with a focus on AI, enterprise software, cloud computing, semiconductors, cybersecurity, startups, and digital infrastructure. This edition is a pure news aggregation and coverage page — what happened — while the Daily Tech Briefing provides the deeper strategic interpretation.
Coverage is based on company announcements, public disclosures, industry reporting, and other publicly available information. Reported figures and sourced-but-unconfirmed details are noted as such.
Reviewed by Erwin Castro
on
Thursday, November 05, 2026
Rating:
No comments: