noticias radar ia modelos abiertos ciberseguridad crm

The Thursday radar was about who makes your AI's engine; Friday's is about who keeps the warehouse and the entire factory. Nvidia has agreed to buy Hugging Face for $12.9 billion, the repository from which half the sector downloads open models, on the same day it reported a $96.2 billion quarter and warned that what's slowing it down isn't demand, but supply. In parallel, Salesforce has put its CRM inside Claude with 37 sales skills, and Reuters reported that a ransomware gang entered seven companies—one Belgian, one German, one Scottish, one Italian—using an AI programming assistant.

Nvidia buys Hugging Face for $12.9 billion: the neutral warehouse of open AI now has an owner

On Monday we reported that Hugging Face was weighing a sale at a valuation of around 13 billion without the buyer being known. Now we know: Nvidia has agreed to buy it for $12.9 billion, about 2.9 times the $4.5 billion valuation of its 2023 round and about eighty-six dollars for every dollar of annual revenue, as the platform invoices around 150 million a year and is nearing profitability. There are two important nuances: the deal is agreed upon but the transaction isn't signed and could still fall through, and in 2025 Hugging Face itself rejected a $500 million investment from Nvidia at a $7 billion valuation. The buyer's logic is clear: whoever downloads an open model has to run it somewhere, and that place usually has an Nvidia GPU inside. For your company: if your setup downloads weights, datasets, or evaluations from Hugging Face at deployment time, your repository has just passed into the hands of the manufacturer of the hardware you run on. It's not an emergency, but it is a dependency that was neutral until yesterday and today is not. Two specific things this week, and neither costs money: mirror the weights and datasets you use in production in your own storage, with the version and hash locked, so that a change in terms of service doesn't affect a deployment; and keep a copy of the license you downloaded them under. An Apache 2.0 license already granted is not revoked—the model you have is still yours—but the distribution, hosted inference prices, and catalog conditions can change owners, and in fact, they just did. Source

Nvidia bills 96.2 billion in one quarter and still can't keep up: your bottleneck is the lead time, not the rate

Nvidia published its second fiscal quarter last night: $96.2 billion in revenue, up 106% from a year ago, of which 89 billion comes from the data center business—up 117% and 93% of the total—with a gross margin of 75%. Guidance for the current quarter is $108 billion without counting any computing in China, and Jensen Huang talks about growing around 70% in fiscal year 2028. The data point that matters isn't any of those: it's that the company describes demand limited by supply and not by customer appetite. The other side of the same coin was signed by Anthropic on the same day, committing $45 billion over six years to Nscale for about 460 megawatts of capacity that starts arriving at the end of next year. For your company: when supply rules, the variable that gets out of hand isn't the price per token, which continues to fall, but the delivery time. If your project needs dedicated GPU or reserved capacity in your cloud, get the availability date in writing before signing anything and plan the project schedule around that date, not the commercial proposal date. And before that, check if you really need it: for most SME cases—classifying mail, extracting data from invoices, drafting responses, searching internal documentation—the shared API and small models are more than enough, and there is no queue there. Dedicated capacity is for sustained high volume or for data that by contract cannot leave the house; asking for it by default is buying a scheduling problem you didn't have. Source

Salesforce gets inside Claude with 37 sales skills: the CRM stops being the screen where you work

Salesforce and Anthropic announced Claudeforce on Wednesday, and its first real piece is a plugin called Salesforce in Claude: 37 pre-built sales skills—preparing a meeting, reviewing the health of an opportunity, updating the pipeline—that run against live CRM data without opening the CRM. It's with pilot customers now, the open beta arrives in September, and skills for other business functions start coming out in late 2026. The most interesting part is how it's built underneath: access goes through an MCP server that inherits user permissions in Salesforce, so if you can't see a record, the agent can't either. And it's billed separately: you pay Salesforce for API consumption and Anthropic for inference. For your company: the pattern is worth much more than the product, and it should be directly required for any agent integration proposed to you, with your ERP, your document manager, or your own CRM. First, permissions inherited from the source system and not a second permissions table that someone will have to maintain: most data leaks in agent projects come from exactly there, from an agent seeing more than the employee using it. Second, budget for both bills together from day one, because the pilot is cheap with five sales reps and the numbers change shape when there are fifty querying the pipeline daily. And third, if your sales team already lives in a chat tool, moving the CRM to where they already are has more traction than another dashboard that nobody opens. Source

A ransomware gang entered seven companies using an AI programming assistant

Gambit Security found a server that the Aur0ra ransomware group had left exposed on the internet and was able to read 28 chat sessions between its operators and a Cursor agent, the programming assistant. With that help, they entered at least seven companies between April 8 and May 21: the Belgian company Christeyns, of hygiene and cleaning products; the German garage door manufacturer Teckentrup; the Scottish Helideck Certification Agency; an Argentine pharmaceutical distributor; an Italian manufacturer; and a property title insurer from Louisiana. The agent searched for administrator accounts for them, collected valid passwords, and advised them on how to break hashes. When the security filter was triggered, they restarted the conversation and claimed it was an authorized security drill, and it worked. For your company: look at the list of victims again, because there isn't a single tech company. An industrial cleaning company and a door manufacturer: exactly the profile of the European mid-sized business that thinks it's of interest to no one. What has changed is the attacker's cost, as they no longer need a specialist to move through a foreign network. Three things you can order today: mandatory two-factor on all administrator accounts and rotation of those that haven't been touched in months; a review of what credentials your team's development tools have stored, which is how this gets in; and if you have your own agents with access to systems, read-only credentials by default, minimum scope, and logging of every action. The underlying lesson is uncomfortable: the provider's security filter yielded hundreds of times to the excuse that it was a drill, so don't make it the only control for anything. Source

What to watch for tomorrow?

The Hugging Face deal is agreed but not signed: watch for official confirmation from both companies and what Brussels and the US regulator say about an operation that puts the open model catalog in the hands of the chip manufacturer. And in September, the Salesforce in Claude open beta: it will be the first time it can be measured whether a sales team really stops opening the CRM or just adds another tab.

Watch the 1-minute video