Welcome to the DailyAI Briefing, the day’s five biggest AI stories. Nvidia shares fell 5% as the board opened a probe into whether Jensen Huang was targeted by foreign intelligence. An AI agent copied Azure Key Vault data in five minutes, DeepSeek’s Harness hit 1.54 million daily users, the best coding agent fully cleared only 26.4% of real tasks, and from Thursday Claude-driven machines must stop if the human link drops.
Let’s dig in.
Nvidia’s board probes Huang after an affair
5%. That is how far Nvidia shares fell on Monday, CNBC reported, after the board said it would investigate whether chief executive Jensen Huang was the target of a foreign intelligence effort. The inquiry was announced on Sunday, shortly after Huang told staff he had been unfaithful to his wife.
Nvidia stock fell 5% on Monday after the tech giant launched an investigation into CEO Jensen Huang’s relationship with a businesswoman who intelligence agencies say is a Chinese spy.
— CNBC November 9, 2026
“I was unfaithful to my wife. My actions hurt her and our children. There is no excuse for what I did. I am deeply sorry,” he wrote. The New York Times and the Financial Times identify the woman as Alice Huang, also reported as Huang Le, a Chinese citizen linked to Megaspeed, a Singapore cloud firm that buys Nvidia chips. They are not related. Those reports say US officials concluded she was a Chinese intelligence asset; Reuters said it could not independently verify the claims.
Independent directors, with outside counsel, will run the review. The board said it has “no reason to believe that either national security or NVIDIA secrets were compromised,” in a statement carried by CNBC, and Huang stays in post. China called the allegations “pure groundless speculation and slander,” foreign ministry spokesperson Guo Jiakun said, according to ABC News. Trade records cited by the Times show a Malaysian Megaspeed affiliate bought at least $4.8 billion of AI equipment containing Nvidia technology between June 2024 and February 2026. Three Republican House chairs have asked Huang for a closed-door briefing on 18 November, a day after earnings. We set out the inquiry here.
An AI agent emptied a Key Vault in five minutes
Five minutes. That is how long it took an AI agent to go from scanning public GitHub for leaked secrets to copying data out of an Azure Key Vault, Microsoft Threat Intelligence said in a 5 November report. Attackers used an agentic offensive framework called ARTEX to hunt credentials, application logins and AI API keys, then use them against Azure and Microsoft Entra.
The scans began as early as August 2026. From about 28 October, Microsoft saw leaked but still-valid application credentials used to sign in across multiple tenants, including vendor-owned logins that opened the door to downstream customers. Deleting a secret from a repository does not revoke it. Microsoft says organisations should treat anything found in public code as already compromised. We wrote up the five-minute case here. The leaked secrets were a doorway into Azure itself.
Want AI to save you hours a week? Our free playbook shows you how.Get the free guide →
DeepSeek Harness hits 1.54 million daily users
1.54 million. That is how many daily active users DeepSeek says its open-source agent app Harness had as of 4 November, counting people on the company’s official API. Those users burned through about 92 trillion tokens a day, the team said in an 8 November X article. Divided out, that is roughly 60 million tokens per active user per day, far more than a normal chat session.
Growing Together with Our Plugin Community
— DeepSeek Harness November 8, 2026
Harness v0.1 went live on 13 August, with a desktop app on 29 September. DeepSeek counts roughly 35,000 third-party plugins, and about 60% of active users have built or installed at least one. People running Harness on other model providers are not in the 1.54 million figure. A marketplace and token grants for plugin authors are planned, with no date yet. We ran through the company’s numbers here.
The best coding agent fully clears only 26.4% of real tasks
26.4%. That is the share of real user app-edit tasks that the strongest coding agent fully cleared on Alibaba’s Co-Design Bench, according to a paper from Alibaba Token Hub and university co-authors. The same run met 69.9% of each task’s hidden acceptance criteria on average. Most jobs were mostly done and still unfinished.
The benchmark at codesignbench.github.io builds 273 tasks from 26,314 real coding sessions. OpenAI’s GPT-6 Astra led ten model endpoints under a shared Claude Code harness. It fully passed 41.0% of 100 multimodal editing tasks, but only 17.9% of 173 repository edits that stretch across components, routes and state. Older tests are saturating: Claude Opus 4.8 reached 99.4% with agentic execution on a 150-task WebCompass-edit split. We unpacked the paper here.
Claude-driven machines must stop if the link drops
From Thursday, Claude can no longer drive injury-capable machines without a human who can watch and stop them. Anthropic’s rewritten Usage Policy, published on 8 October and effective 12 November, adds High-risk Physical Actions rules for hardware that acts on model output without a person approving each move. The company set out the changes in October, and the full text is now live on its Usage Policy page.
Operators have three duties: a qualified person must be able to observe and stop the equipment at any time; it must stop or hold a safe state when that person intervenes or the connection to Anthropic is lost; and operating limits must sit in the machine or a separate controller, not in the model’s output. Amazon Bedrock customers were told that continued use from 12 November counts as acceptance, according to a write-up of AWS’s notice by Classmethod. We walked through the three duties here. The model is no longer allowed to be the safety system.
Signing off
Monday put a number on the agent stack. One copied a cloud vault in five minutes, another drew 1.54 million people in a day, and the best coding agent still left three in four real jobs unfinished. Anthropic wrote a stop rule for machines that can injure people, while Nvidia’s board opened an inquiry into its chief executive.
See you tomorrow.
