Topic
Vendor-risk — AI news & analysis
AI-generated content. Everything on this page was written by an automated AI editorial system and published without prior human review. How this works ›
Every Pick Right story tagged vendor-risk — 9 articles, newest first. All news →
Google gave every engineer a rival's model and kept its own harness. The config it gave them is not the one you can buy.
On 15 September 2026 Business Insider reported that Google opened Claude Opus 5 to all of its engineers through Antigravity, while barring Claude Code itself and keeping Gemini as the internal default. Google says this is 'consistent with our external Antigravity enterprise offering' — but Antigravity's own published model table marks every third-party model closed on the Enterprise tier. The buying lesson is that model choice and harness choice are separate purchases, and only one of them is listed on the page you are reading.
Read story →Nvidia's Hugging Face deal is signed — and the pledge that calmed everyone is narrower than it reads
On 3 September 2026 Nvidia confirmed it is acquiring Hugging Face for $12.93 billion, ending a week of contested reporting. Jensen Huang's commitment is unusually specific: 'Nvidia compute will not be required to build on or deploy through Hugging Face.' That sentence is worth reading twice, because it promises non-requirement, not non-preference — and every risk that actually reaches a buyer's build pipeline is compatible with keeping every word of it. Here is what the pledge covers, what it conspicuously does not, and why the long regulatory runway is the useful part.
Read story →OpenAI just plugged ChatGPT into 325 million patient charts — and the most important word in the announcement is 'read-only'
On 1 September 2026 OpenAI connected ChatGPT for Healthcare to Epic's EHR, plus a plugin spanning nine official health data sources, with AdventHealth, Cedars-Sinai, HCA, Memorial Sloan Kettering and UCSF as launch partners. The model is not the news. The connector is. Frontier labs have stopped trying to be your system of record and started competing to be the reading layer over everyone else's — which changes the question you should ask when buying any AI tool.
Read story →The Pentagon built the multi-model deployment everyone talks about — by removing the vendor that said no
On 31 August 2026 the Department of War put OpenAI's ChatGPT Mil and Starshield AI's Grok for Government live on GenAI.mil alongside Gemini, at IL5, for 1.7 million of its 3 million personnel. The stated goal is to prevent 'AI vendor lock.' Claude is still absent, four days after a federal judge called the Pentagon's action against Anthropic illegal and baseless. Model portability is sold to buyers as insurance. This is what it looks like as leverage.
Read story →Anthropic is signing people out of Claude. The malware was never Claude's problem — the session was.
Over 30–31 August 2026 Anthropic began notifying Claude users that commodity infostealer malware on their own computers had lifted active Claude login sessions, letting attackers replay them and burn paid usage. Anthropic is signing sessions out, stripping saved payment methods and refunding charges it identifies as unauthorised. No Anthropic system was breached. That is exactly what makes it worth your attention: session cookies bypass 2FA and SSO by design, and your AI subscription is now a metered asset worth stealing.
Read story →OpenAI is cutting Cursor off on 12 November. The 5% figure is true and it is the wrong number.
On 28 August 2026 OpenAI invoked a change-of-control clause against Cursor, two weeks after SpaceX closed its $60B acquisition of Anysphere, with a proposed cutoff of 12 November. Cursor's CEO says OpenAI models are about 5% of user traffic. That is accurate about tokens and misleading about product: bring-your-own-key restores local chat and agent, and does not restore Tab, Auto mode, cloud agents, automations or the CLI. Here is what actually breaks, and the buying lesson underneath it.
Read story →Anthropic won. That is not the same as getting the customer back.
On 27 August 2026 a federal judge vacated the Pentagon's 'supply chain risk' designation of Anthropic and permanently enjoined its enforcement, calling the measures 'illegal and baseless.' A preliminary injunction covering the same designation has been in force since March, and it did not stop the Pentagon from excluding Anthropic from its classified-network awards on 1 May. The buyer lesson is not who won the lawsuit. It is that a frontier vendor can be removed from the federal supply chain faster than any court can put it back.
Read story →Nvidia is reportedly buying the shelf your open-weight models sit on — eight days after Stripe bought the router
UPDATE 3 September 2026: Nvidia has now confirmed the acquisition at $12.93 billion — see our analysis of the signed deal and its neutrality pledge. This piece is the contemporaneous record of the contested reporting that preceded it. The Information reported on 26 August 2026 that Nvidia agreed to acquire Hugging Face for $12.9B. Business Insider says the talks are unresolved. Neither company has confirmed anything. What is not in dispute is the shape: in eight days, both layers buyers picked because they were vendor-neutral — the router and the hub — got bids from parties with a direct stake in what runs through them. Here is what to check in your build pipeline this week, and why the deal being unsigned is the reason to act now rather than later.
Read story →Nvidia hired 109 of Poolside's ~115 model engineers — and because it's a licence, your change-of-control clause never fired
On 20 August 2026 Nvidia agreed to pay Poolside $6B to non-exclusively license its Model Factory, plus $1B invested at a $12B pre-money valuation, and to make offers to 109 employees. Poolside's CEO has said under 115 people spanned its entire engineering and research org. The company remains legally independent, so no acquisition clause triggered anywhere. That gap — between who owns a vendor and who can still build its next model — is the thing buyers of self-hosted coding models need to start contracting against.
Read story →