The Stack — October 21, 2026

DHS orders federal civilian agencies to remove DeepSeek. Agencies must stop buying DeepSeek products and services and strip existing deployments from government IT systems.

• Scope: The order covers third-party products built on DeepSeek technology, not just DeepSeek's own apps and API. Agencies can request exceptions.
• Why this matters for developers: Vendors selling to federal customers will need to audit their stacks for DeepSeek-derived components. That includes fine-tunes or distillations of DeepSeek's open-weight models embedded in their products.
• Stated rationale: US government user data could be reachable by Chinese authorities under Chinese law.
• What's new: A December 2025 law already barred DeepSeek from intelligence-related national security systems. This order extends that restriction to the civilian side of government.
• Beijing's response: The Foreign Ministry said it opposes "overstretching the concept of national security and politicizing technology and trade issues." It pledged to protect Chinese firms' interests.
• Escalation context:
• China is reportedly weighing export restrictions on 23 AI-related technologies, including chip designs and certain advanced models.
• A US report in September accused DeepSeek and five other Chinese AI firms, including Alibaba and Moonshot AI, of large-scale distillation from American models.
• OpenAI and Anthropic have made similar distillation claims about DeepSeek.
• All of these remain allegations.

A supply-chain breach of VMmanager hits Russian hosting providers. Attackers exploited a flaw in VMmanager 6, the virtualization management platform from ISPsystem. ISPsystem is 70% owned by Russia's Astra Group, which bought the stake in 2022 for 2.5B rubles.

• Attack mechanics:
• Malware ran on hypervisor hosts, mounted guest VM disks and copied files directly.
• Because this happens below the guest OS, in-VM security controls would not see it.
• Timeline (provider estimates):
• Management systems were compromised between October 11 and 16.
• Bulk exfiltration happened overnight from October 16 to 17.
• FirstVDS notified customers on October 18.
• Confirmed victims: FirstVDS, ForestNet Cloud, MHost, HSH Network and YaColo.
• VMmanager has roughly 30 known organizational customers, including hosting providers, cloud companies and medical institutions.
• More disclosures are likely, and medical-sector exposure is the most sensitive.
• Data at risk:
• passwords and SSH keys
• cloud access tokens and configuration files
• crypto wallets
• personal documents
• Vendor status: Astra says it is investigating. It has not yet published technical details, IoCs or a patch.
• Wider significance: The breach is a setback for Russia's domestic-software import-substitution push. It also shows the textbook supply-chain pattern, where one management-plane bug fans out to every downstream tenant.
• What affected customers should do:
• Treat every secret stored on affected VMs as burned.
• Rotate credentials, SSH keys and cloud tokens.
• Move crypto assets to freshly generated wallets.

Plex Media Server is being actively exploited through a four-bug chain. A security researcher reports that attackers are chaining four vulnerabilities to compromise unpatched self-hosted Plex servers.

• Action: Update to the latest release now.
• Why it matters: Plex boxes are often internet-exposed home servers sitting on the same network as NAS storage and other devices. That makes a compromised Plex instance a convenient pivot point.

Shared Meta Muse conversations are publicly discoverable. When users share a Muse chat, it becomes indexable.

• Scale: A single search query reportedly surfaces thousands of shared conversations by title. Some contain personal or business-sensitive details.
• Pattern: This repeats earlier "share link becomes public web page" incidents with other AI chatbots. The UX doesn't make the visibility consequence clear.
• Timing: It comes days after Meta's Muse Spark Open launch and its contested commercial ToS rewrite, adding to scrutiny of how Meta handles user content.
• Action:
• Audit your shared Muse links and revoke any that contain sensitive information.
• Keep confidential data out of any chat you intend to share.

Eka Robotics raises a $150M Series A at a $1.45B post-money valuation. a16z and F-Prime co-led the round. The founders are MIT professor Pulkit Agrawal and ex-DeepMind researcher Tuomas Haarnoja.

• Technical angle: Eka pairs a force-sensitive gripper with a "vision-force-action" model.
• The model treats touch and force as first-class inputs, unlike the vision-language-action models common in the field.
• It is trained mainly through large-scale RL in physics simulation rather than human teleoperation data. The company claims it can generate thousands of robot-hours in minutes.
• Claimed numbers (company-reported, unverified):
• about 1,500 picks per hour for objects up to 1 kg, versus roughly 600 for a human
• over 95% pick reliability
• gripper hardware under $1,000
• Reality check:
• The "superhuman" framing comes from the lead investor.
• Independent reactions are positive but based on demos:
• UIUC's Kris Hauser praised generalization across objects without retraining.
• An anonymous frontier-lab roboticist likened it to the arrival of reliable legged locomotion.
• Industrial pilots in pick-and-place and wire handling are undisclosed.
• Open gaps:
• Year-long reliability on real assembly lines is unproven.
• Generalization beyond pick-and-place is unproven.
• The gripper is rated for 5M duty cycles, against the 20M industrial standard Eka is targeting.
• Correction note: Some coverage refers to "Astra, ChatGPT's latest LLM" operating robots. Astra is a Google project name, not an OpenAI model, so disregard that comparison.

New detail in the espionage case against an ex-OpenAI engineer. According to the FBI, the former OpenAI engineer charged with spying had a folder labeled "Saudi Gov Docs."

• US authorities say they worry the Saudi government could help the defendant flee.
• These are prosecutors' allegations and are unproven in court.
• Neither the defense's position nor any Saudi response has been detailed.

Blackwall raises a $100M Series C at a $2.2B valuation. AVP led, with Dawn Capital, MMC Ventures and Tera Ventures participating. The Estonia-based company says its valuation is roughly 4x its 2025 round.

• Model: Blackwall sells white-label security tooling through hosting, cloud and managed-service providers.
• Providers rebrand it, set their own pricing and share revenue with Blackwall.
• A free tier offers traffic and threat visibility, and protection features are paid.
• Stack:
• DDoS protection, threat intelligence, certificate management and traffic routing
• bot-versus-human-versus-AI-agent classification using fingerprinting and on-endpoint models that score request intent
• Bet: Blackwall expects demand for agent access governance, meaning which AI agents may access a site, on what terms, and how they are authorized to pay.
• Competition: This puts it against Cloudflare's AI Crawl Control. Blackwall's pitch is that hosting providers keep the customer relationship rather than ceding it to Cloudflare.
• Use of funds: Expansion across North America, Europe, APAC and the Middle East, plus more provider tooling.

Otter.ai takes $320M from General Catalyst's Customer Value Fund. Otter is a nearly decade-old transcription company. The money is non-dilutive.

• Structure: Returns are tied to marketing-spend performance rather than equity, so there is no valuation attached.
• For scale, Otter had raised about $50M total before this, with its last round in 2021.
• Metrics:
• Otter passed $100M ARR last year and gave no update since.
• It reports 40M cumulative users, up from 25M. That is an "ever used" count, with no MAU or churn figures.
• Product direction:
• pre-meeting briefs built from prior conversations
• "Live Assist" for asking the AI questions during meetings
• integrations that turn meeting data into workflow automation
• Market: The space is crowded, including Fireflies, Granola, Read AI, Superhuman (which now owns Fathom), Circleback and others. Retention is the real question.
• Leadership: New CMO Alex Gay joins from Superhuman.