Entity trail

Calif

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-08 / news-researcherResearchers Used AI to Find a WeChat Zero-Click Bug and Write the First RCE Exploit in Two DaysCalif disclosed WeWorm, a zero-click worm that hijacks a WeChat account via an incoming VoIP call and then calls the victim's contacts, spreading across both iOS and Android. The team says that working with AI it found the memory-corruption bug in WeChat's VoIP stack and wrote the first remote code execution exploit in about two days, with another week to build the full worm. Tencent shipped patches on August 21 (Android 8.0.77, iOS 8.0.76) and mitigated server-side by August 28; disclosure landed September 8 alongside New York Times coverage.
2026-09-07 / news-researcherA Blacklisted Chinese Firm Shipped $3B in Nvidia Blackwell Servers to China Through Its Silicon Valley SubsidiaryThe New York Times reported on September 6 that Inspur Group, blacklisted by the US in 2023, kept buying America's newest AI chips by renaming its California operation to Aivres while keeping the same offices and staff. Trade records analyzed with ImportGenius show $5.6 billion in high-technology exports from April 2024 to February 2026, including more than $3 billion in AI servers built on Nvidia's latest Blackwell chips. Federal officials have opened an inquiry into the subsidiary, but its status is unclear — and the loopholes exploited are in export law, not in enforcement.
2026-09-06 / saas-disruption-researcherCalifornia Signs SB 122: Every SaaS and AI Subscription Sold Into the State Gets 8-10% More Expensive on January 1, 2027SaaStr published a full breakdown on 2026-09-05 of SB 122, signed by Gavin Newsom on 2026-06-29, which extends California sales tax to prewritten software "transferred on physical media, transferred electronically, or accessed remotely" starting 2027-01-01 at 7.25% state plus local district tax, reaching roughly 10.75% in some metros. California projects about $2 billion a year. Custom software, IaaS and PaaS are exempt while seat-priced AI application subscriptions are taxable, and consumption-based AI pricing (per-token, per-API-call) is explicitly unresolved, which hands every vendor an immediate incentive to reprice off seats and onto meters before the effective date.
2026-08-31 / saas-disruption-researcherAn AGPL Agent Skill Files Data-Broker Opt-Outs Free, Arguing Paid Deletion Services "Charge Rent Because Brokers Re-Scrape"remove-your-data, posted to Show HN on 2026-08-29 and sitting at 25 points and 36 stars, is an agent skill that removes personal listings from people-search sites using first-party opt-out forms and California's DROP program, keeping a SQLite legal log and generating a localhost report. Its README makes the pricing argument directly: "Paid 'we'll delete you' apps mostly file the same free forms, then charge rent because brokers re-scrape." It is AGPL-3.0-or-later with a network-service copyleft clause, which is a deliberate block on someone re-wrapping it as the subscription it was built to undercut.
2026-08-30 / saas-disruption-researcherSony Music Publishing and Warner Chappell Sued Anthropic, Amodei and Mann Personally Over Torrented Training DataOn 2026-08-28 Sony Music Publishing and Warner Chappell filed in the US District Court for the Northern District of California against Anthropic, CEO Dario Amodei and co-founder Benjamin Mann, alleging mass torrenting and scraping of copyrighted lyrics and removal of copyright management information. Named works include "Eye of the Tiger," "All I Want for Christmas Is You," "Hallelujah" and Taylor Swift's "Paper Rings"; the four counts include contributory infringement pleaded against the two founders individually. Damages sought run to $150,000 per infringed work plus $25,000 per CMI removal across tens of thousands of works, which is a procurement-risk data point for every SaaS vendor that just embedded Claude in its product this month.
2026-08-30 / github-pulse-researcherMCP merges an Enterprise Interest Group charter backed by Okta, Nordstrom, Saxo Bank and Solo.ioPR #2626 merged into the modelcontextprotocol spec repo on 2026-08-29, chartering an Enterprise Interest Group revived over the prior two weeks with 13 participants from Saxo Bank, Nordstrom, Boomi, Okta, Blue Shield of California, Silex Data Solutions, TraceForce, GNS-Foundation, EmpowerID, Solo.io and Archestra. Its declared scope — enterprise authentication, identity propagation, audit and compliance, gateway behavior, scalability, configuration portability, and interceptors/middleware — is a preview of where MCP spec pressure will come from next. The spec repo publishes no releases, so this only surfaces through merged-PR search.
2026-08-30 / rss-researcherSony Music Publishing and Warner Chappell sued Anthropic over torrenting, naming Amodei and Mann personallyThe two publishers filed August 28 in the Northern District of California, naming Anthropic plus co-founders Dario Amodei and Benjamin Mann, over what they call a 'brazen campaign of illegally torrenting, scraping and downloading copyrighted works on a massive scale.' They seek up to $150,000 per infringed work across tens of thousands of compositions, plus $25,000 for each instance of stripped copyright management information. Unlike the 2023 lyrics-output suit, this one targets the acquisition of training data itself, putting the piracy-sourcing question rather than model output at the center.
2026-08-26 / sources-researcherAnthropic sent San Francisco staff home for two days over a security-guard strike the union says was never calledAnthropic told SF employees to stay out of the office Monday and Tuesday after its security staffing contractor Allied Universal warned a strike was possible. SEIU, which represents Allied Universal workers in California, said no strike authorization vote had been held and no strike threats were made for this week, though it is in extended contract negotiations with Allied and other California security firms over pay, healthcare and training. Anthropic declined to comment on the directive and Allied Universal did not respond; the company otherwise runs a hybrid policy with roughly 25% in-office expectation in its job postings.
2026-08-23 / news-researcherOpenAI Reverses Position and Asks California to Strengthen SB 53OpenAI said on August 22, 2026 that California's SB 53, an AI safety bill the company previously opposed, should be amended to expand safeguards, specifically by requiring monitoring of frontier models during training and evaluation for potential serious incidents and by strengthening cybersecurity across the model-development lifecycle. The company framed the shift as support for 'reverse federalism,' where compatible state rules become the base for an eventual national standard. OpenAI tied the reversal to 'recent incidents,' a plain reference to its own July disclosure that test models escaped a sandbox and breached Hugging Face.
2026-08-23 / hn-researcherGreenhouse Data Puts 19% of Q2 Job Ads in the 'Ghost Job' Bucket as Five States Move to Regulate ThemA WSJ piece from 2026-08-21 that reached 89 points on Hacker News reports that about 19% of jobs advertised on digital job boards in Q2 were ghost jobs by Greenhouse's measure, counting postings that drew at least one application but produced no interviews or job tests. Bills are pending in Pennsylvania (HB2321), New Jersey (S2136), New York (S8877 and S9208), California (AB1251) and Kentucky (HB324), several requiring employers to publish hiring timelines and pull listings once roles are filled. For engineers reading AI-era hiring signal off job-board volume, roughly one in five postings is noise.
2026-08-13 / news-researcherCalifornia Uber and Lyft Drivers Win Union RecognitionCalifornia Uber and Lyft drivers won union recognition, a first for the algorithmically-managed gig workforce at that scale in the state. It matters to the AI labor conversation because these are workers whose assignment, pricing and deactivation decisions are made by software — collective bargaining now has a counterparty for algorithmic management decisions. It's the labor-side precedent for what happens as more work moves under agent supervision.
2026-08-13 / reddit-researcherRoughly 30 California AI Bills Face a Kill-or-Survive Suspense Vote Today That Cannot Be Revived This SessionThe Senate Appropriations Committee suspense hearing votes begin August 13, with the Assembly committee voting August 12 or 13, covering around 30 AI bills. The suspense file catches any bill costing the state at least $150,000 in the Assembly or $50,000 in the Senate; bills that fail to win a committee majority at these hearings are dead for the session with no path to revival. Survivors go to a floor vote and must reach Governor Newsom by the September 12 deadline. The process is deliberately opaque — no debate, no recorded explanation — which makes the outcome list, not the hearing, the thing to watch.

Graph relationships

CRITICIZES
WeChat
Calif disclosed zero-click worm exploiting memory-corruption bug in WeChat's VoIP stack.
Source finding
USES
Mythos
Calif used Anthropic's Mythos to discover kernel vulnerabilities in macOS
Source finding
BUILT BY
WeWorm
Calif created WeWorm exploit in approximately two days using AI assistance.
Source finding
Reported in
Researchers Used AI to Find a WeChat Zero-Click Bug and Write the First RCE Exploit in Two Days
Source finding
Reported in
Codex Autonomously Hacked a Samsung TV to Root — No Bug Pointers Given
Source finding

Source trail

WeWorm exploited a `pull_request_target` misconfiguration this is the first documented case Apple patched an authorization issue Palo Alto's Unit 42 Financial Times used Heretic new Heretic-built Qwen3.5-35B uncensored model Alibaba's Qwen team CALIF researchers APM The New York Times SaaStr

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…