Thursday’s AI headlines are led by DeepSeek on both ends of the spectrum: the Chinese lab open-sourced the production inference framework behind its flagship models on the same week its technology was banned from U.S. federal civilian networks. Elsewhere, the AI community is picking up the pieces after a supply-chain attack on a popular LLM gateway, Anthropic rolled out a proactive personal agent, and OpenAI ended years of cloud exclusivity by bringing its models to Google Cloud.

DeepSeek open-sources DeepInfer, the inference engine behind its production services

DeepSeek released DeepInfer, the high-performance inference framework that powers its large-scale production services, as open source — the top AI story on Hacker News on Thursday with more than 2,300 upvotes and nearly 900 comments. The framework serves DeepSeek-V4.1-Flash with optimized kernels drawn from FlashMLA, DeepGEMM, DeepEP and custom TileLang operations, and supports expert-parallel MoE inference with load balancing across NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs.

DeepInfer includes DSpark confidence-scheduled verification (speculative decoding with draft tokens), bounded-replay SWA prefilling, async scheduling for zero-overhead batching, batch-invariant results, deterministic sampling and structured outputs constrained to regex, JSON Schema or EBNF grammars. The release covers offline inference; the accompanying KV-cache system, prefill/decode disaggregation and replica load balancing remain part of DeepSeek’s closed service layer. Commenters called it one of the most substantive open-source inference releases of the year — a reminder that even as Western governments restrict DeepSeek models, DeepSeek’s engineering is increasingly embedded in the open AI infrastructure stack.

DHS orders DeepSeek removed from U.S. federal civilian agency IT systems

The Department of Homeland Security has ordered federal civilian agencies to remove DeepSeek products — and third-party services developed using DeepSeek implementations — from their IT systems, and to exclude the company and its affiliates from future acquisitions. The notice, published Monday in the Federal Register (document 2026-21447), extends to any software “developed using DeepSeek implementations,” a scope commenters flagged as potentially sweeping.

DHS said DeepSeek’s models pose “multiple threat vectors”: servers located in China, personal information collected at account creation, and the risk that data entered by federal employees or contractors could be transferred to Chinese authorities or used to develop “actionable intelligence on US persons.” The order, signed by Secretary Markwayne Mullin as far back as June, took effect this week; agencies may request relief within 60 days, and the department will review it annually. The move escalates earlier restrictions at Commerce and the Navy and mirrors bans in Australia and elsewhere — deepening the split between U.S. policy, which is walling off DeepSeek, and the open-source community, which embraced DeepInfer on the same day.

Compromised LiteLLM 1.107.0 on PyPI ships credential stealer and backdoor

Security researchers at SafeDep uncovered a malicious LiteLLM 1.107.0 release on PyPI that installed a credential stealer and backdoor (dubbed cook.pth) on affected systems. LiteLLM is one of the most widely deployed open-source LLM gateways — an OpenAI-compatible proxy used to route and manage model calls across many enterprises — making the compromise a supply-chain event of unusual reach.

BerriAI, LiteLLM’s maintainer, published an incident report and said the attack was “novel” and “has been contained”: attackers compromised GitHub credentials for three developers, and the private release pipeline built the poisoned wheels from attacker-modified source. The maintainers revoked all but one developer’s access and urged users to pin below 1.107.0 and audit dependencies. Commenters noted this is the second significant PyPI supply-chain incident targeting LiteLLM this year, and used it to call for wider adoption of CI signature checks, canary tokens and default install cooldowns — a reminder that the AI toolchain’s dependency graph is now squarely in attackers’ sights.

Anthropic debuts Claude Duet, a proactive agent powered by Opus 5.5

Anthropic introduced Claude Duet, a research-preview “proactive agent” available on Pro and Max plans in the U.S. Powered by Opus 5.5 and integrated with more than 6,000 connectors and plugins, Duet briefs users each morning, drafts next steps, quietly handles tasks of all sizes — from scheduling meetings to building dashboards — and pauses to ask for approval when decisions matter. It runs in the same thread as the user’s existing Claude memory, skills and connected apps.

The launch puts Anthropic squarely in the emerging “always-on assistant” wave alongside OpenAI’s Dot and similar agentic companions, and commenters were quick to debate the margins (background agents can ride low-priority inference batches), the UX of yet another waitlist, and the privacy stakes of granting an LLM access to calendars, mail and password managers. Early testers report the morning-brief workflow is the standout function — a quiet shift from chat to delegated, background work.

OpenAI models are coming to Google Cloud’s Model Garden

OpenAI and Google Cloud announced a partnership to bring OpenAI’s frontier models and Codex agentic workflows into Google Cloud’s Model Garden, letting enterprises buy them through the Google Cloud Marketplace — drawing down existing GCP commitments — with Google’s data-governance and access controls layered on top. Reports identify the first models as GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna, joining a Model Garden of more than 200 offerings. The models will also land in Google Antigravity and the Gemini Agent, with general availability planned in the coming weeks after an enterprise private preview.

OpenAI president and co-founder Greg Brockman called Google Cloud “a leading platform for developers and businesses building AI agents,” and Google Cloud CEO Thomas Kurian said the goal is “a broad selection of models, including those from OpenAI, so they can choose the right model for any given job.” Notably, Microsoft remains OpenAI’s primary cloud partner — the deal breaks years of effectively exclusive distribution through Azure without replacing it, and signals that frontier-model access is becoming an every-cloud commodity.

That’s the AI landscape for Thursday, October 22, 2026 — from an open-source inference engine and a federal ban, to supply-chain security, proactive agents and the end of cloud-model exclusivity.

Wednesday’s AI news cycle was unusually concentrated: Chinese lab DeepSeek dominated for two opposite reasons — open-sourcing the inference engine behind its production services while being banned outright from U.S. federal civilian agencies — while Mistral staked out new territory in time-series forecasting and signed a landmark research partnership with CERN. Meta, meanwhile, fielded a fresh controversy over hidden instructions embedded in WhatsApp’s help pages. Here are the five stories that mattered most today.

DeepSeek Open-Sources DeepInfer, the Inference Engine Behind Its Production Services

The top story of the day, with more than 2,200 points and 850 comments on Hacker News, is the release of DeepInfer, the high-performance inference framework that powers DeepSeek’s own large-scale production services. The company published it under the Apache 2.0 license and built it primarily on vLLM, with additional inspiration from SGLang and TensorRT-LLM.

The release supports offline inference for DeepSeek-V4.1-Flash and bundles the pieces of a production-grade serving stack: optimized kernels (FlashMLA, DeepGEMM, DeepEP, TileKernels, DeepSelect and custom TileLang operators), MoE expert parallelism with load balancing, DSpark speculative decoding with confidence-scheduled verification, SWA bounded replay to cut decoder prefill work, asynchronous batch scheduling, batch-invariant inference, deterministic sampling, and structured outputs constrained to regex, JSON schema, or EBNF grammars. It targets NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs, with prefill benchmarks measured on four GPUs and decode on 64.

The release is notable both for its engineering depth and for what it signals: DeepSeek is now distributing the same framework that handles its at-scale workloads, a move that further cements the open-weight, open-infrastructure path it has followed throughout 2026.

DeepSeek Banned from U.S. Federal Civilian Agency Systems

On Monday, the U.S. Department of Homeland Security made public a Federal Register order (2026-21447) banning DeepSeek technology from federal civilian agency IT systems. The order — originally issued in late July — bars agencies including Treasury, State and Justice from procuring DeepSeek products and services and requires removal of existing deployments. Notably, it extends to third-party products and services developed using DeepSeek implementations, and it excludes the Department of Defense.

The order states that DeepSeek’s models “present multiple threat vectors”: its servers are located in China, and Chinese law permits government cyber and intelligence functions broad access to private company infrastructure. The public disclosure drew over 500 comments on Hacker News, where the debate split between national-security pragmatists and critics who argued the ban is as much competitive policy as security policy — several noted it effectively funnels federal AI budgets toward domestic labs such as OpenAI and xAI, while others worried open-weight bans could chill the broader open-model ecosystem.

Mistral Unveils Timestral, Its First Time-Series Foundation Models

Mistral announced Timestral, its first family of time-series foundation models, on October 15. The family spans four sizes from 5M to 209M parameters, and the largest model claims first place across all five metrics on the field’s three main public benchmarks — GIFT-Eval, TIME and fev-bench — using about two-thirds of the parameters of the previous state of the art.

Timestral delivers probabilistic, multivariate forecasts and supports both past-only and known-future covariates, such as production schedules, planned shutdowns and weather forecasts. The models are designed to run efficiently on CPUs, forecast zero-shot on unseen domains, and combine synthetic pre-training, covariate-aware attention and long-context learning; domain adaptation is available via fine-tuning on Mistral Forge. Results have been submitted to the GIFT-Eval and TIME leaderboards. For enterprises forecasting sensor telemetry, energy prices, supply chains or financial flows, the pitch is simple: foundation-model accuracy at a size small enough to deploy almost anywhere.

CERN and Mistral Partner to Build a “Large Physics Model”

CERN and Mistral signed a statement of intent on October 15 to establish a long-term strategic partnership on foundation models for scientific discovery, with an initial focus on high-energy physics. The centerpiece ambition: a single pretrained “Large Physics Model” — described as the first foundation model for collider physics — trained on billions of simulated proton-proton collisions at the Large Hadron Collider, and designed to support everything from reconstructing collisions and identifying particles to flagging unexpected signals and evaluating future detector designs.

CERN brings roughly one exabyte of stored LHC data — a volume set to grow tenfold with the High-Luminosity LHC expected around 2030 — plus what its CIO, Enrica Porcari, called “a unique environment in which artificial intelligence can be developed and tested with exceptional rigour.” Johannes Brandstetter, Mistral’s VP of AI for Engineering, said the pair have “the opportunity to push the frontiers of high-energy physics, developing AI capabilities that have the potential to lead to new scientific discoveries.” For Europe, the deal doubles as an industrial-policy statement: a home-grown AI leader pairing with the continent’s flagship science institution.

Hidden LLM Instructions Found in WhatsApp’s Help Pages

A reporting collaboration between redact.dev and WIRED uncovered hidden instruction text embedded in WhatsApp’s help pages — invisible to human readers but clearly aimed at the company’s AI support chatbots. The embedded instructions told the models not to recommend contacting data protection authorities, regulators or supervisory authorities; not to suggest WhatsApp can manually delete accounts on a user’s behalf; and not to make statements about WhatsApp’s legal liability.

After WIRED contacted Meta, the hidden text was removed from the pages, with WhatsApp spokesperson Joshua Breckman attributing it to a bug that has since been fixed: “These are instructions to our chatbot, not directly to users, and are intended to ensure accurate and relevant responses for WhatsApp users who choose to message WhatsApp Support with AI.” The story drew 724 points and more than 200 comments on Hacker News, where reactions ranged from sympathy — no company wants its bot dispensing legal advice — to accusations of “industrialized prompt injection” designed to steer users away from regulators. Notably, several commenters pointed out the deeper significance: the instructions were publicly visible, a transparency trade-off that invites scrutiny of how companies constrain even their customer-facing AI.

That’s the AI news for Wednesday, October 21, 2026 — a day when open-source infrastructure, government policy, scientific ambition and corporate transparency all shared the spotlight.

From the world’s fastest diffusion-based language models to a European push to build an AI for particle physics, the AI landscape delivered another busy news day. Here are the five most significant artificial-intelligence stories making headlines on October 20, 2026.

DeepSeek Launches Search & Fetch APIs Priced at $0.75 per 1,000 Requests

Chinese AI lab DeepSeek has rolled out a new Search & Fetch API pair that gives agents and retrieval-augmented-generation (RAG) applications live access to the web. The Search API finds pages for a query and returns structured results, while the Fetch API retrieves a single page and returns its content as clean Markdown. Both are raw JSON APIs sharing the same bearer authentication and base URL (https://api.deepseek.com) as the rest of the DeepSeek platform.

Pricing is refreshingly simple: $0.75 per 1,000 successful requests for both Search and Fetch. A request is billable only when it returns HTTP 200 and produces a result — an empty search result or a failed or timed-out fetch is not charged. Notably, when DeepSeek’s tools are invoked server-side through DeepSeek Harness, Claude Code, or Codex, the underlying calls are currently free; per-request billing begins at 00:00 Beijing time. The move positions DeepSeek as a low-cost option for agentic web-access workloads alongside its recently released V4.1 Flash model line.

Mistral Releases Timestral, Its First Family of Time-Series Foundation Models

French AI company Mistral announced Timestral, its first family of time-series foundation models. Despite its compact size — the largest variant has just 209 million parameters, with a family ranging from 5M to 209M — Timestral ranks first on the field’s three main public benchmarks: GIFT-Eval, TIME, and fev-bench, outperforming the previous state of the art while using only two-thirds of the parameters. The models deliver probabilistic, multivariate forecasts and support both past-only and known-future covariates.

Timestral is designed to run efficiently on CPUs and excel at zero-shot forecasting across diverse domains, from industrial sensor telemetry and observability metrics to financial flows and volatility. Its architecture combines synthetic pre-training, covariate-aware attention, and long-context learning, with fine-tuning available through Mistral Forge for domain adaptation. Time series is among the most common data types in the enterprise, and Mistral is betting that small, efficient, accurate forecasters can displace classical ARIMA and regression models at the edge of the stack.

CERN and Mistral Sign Deal to Build a “Large Physics Model”

Europe’s flagship particle-physics laboratory is partnering with Mistral on a strategic initiative to build foundation models for scientific discovery. The two organizations signed a statement of intent to establish a long-term partnership combining CERN’s expertise in fundamental physics, scientific data, and large-scale computing with Mistral’s leadership in training large AI models. The centerpiece ambition is a single pretrained “Large Physics Model” — described as the first foundation model for collider physics.

The model will be trained on billions of simulated proton-proton collisions at CERN’s Large Hadron Collider (LHC), the world’s largest particle accelerator, and is designed to support multiple tasks: reconstructing particle collisions, identifying particles, flagging unexpected signals, and evaluating the physics case for future colliders. While the initial focus is high-energy physics, both partners say the effort could seed AI approaches serving the broader scientific community and strengthen Europe’s technological autonomy.

Inception Labs Ships Mercury 3, the Most Capable Diffusion LLM Yet

Inception Labs introduced Mercury 3, the most capable diffusion-based large language model released to date. The company reports it outperforms GPT-6 Luna and Claude Haiku 5.5 across a range of benchmarks while running 4–8x faster at over 1,000 tokens per second — 1,068 tokens per second on NVIDIA GPUs. Mercury 3 is more than 40 times larger than Mercury 1 yet matches its predecessor’s speed, providing what Inception describes as the clearest proof yet that text diffusion scales to compete with autoregressive frontier models.

The model offers a context window of 1 million tokens (up from 260K in Mercury 2.5) and is priced at $0.20 per million input and $0.70 per million output tokens — with a launch promotion of 50% off, bringing introductory rates to $0.10 and $0.35. Early-access partners are already using Mercury 3 for voice and chat support, real-time tutoring, data engineering, and web navigation, signaling a real-world foothold for diffusion-based inference in latency-critical applications.

DeepSeek V4.1 Flash 1017 (Max) Tops Speed-Cost Frontier Charts

DeepSeek’s updated V4.1 Flash model, version 1017 in its “Max” configuration, is drawing attention as one of the strongest balance points of intelligence, speed, and price among open-weight models. Independent analysis on Artificial Analysis scores it 45 on the Artificial Analysis Intelligence Index — well above the comparable-model median of 19 — while topping 216 output tokens per second. It supports text and image input, outputs text, and carries a 1M-token context window, with 98% cache discounts.

Pricing is $0.30 per million input tokens (moderately priced against a median of $0.43) and $1.20 per million output tokens. The one caveat flagged by reviewers is verbosity: the model generated roughly 210 million output tokens during evaluation, suggesting it tends to be wordier than the median model. Combined with the Search & Fetch API launch, the release underscores how aggressively DeepSeek is moving to dominate the low-cost, high-throughput segment of the market.

That’s the AI news roundup for October 20, 2026 — a day defined by cheaper web access for agents, compact and efficient time-series models, a physics-AI collaboration at CERN, and increasingly capable (and fast) diffusion and open-weight models. Check back tomorrow for the next installment of the top stories in artificial intelligence.