Salesforce Buys Braze, Google and Amazon Target Nvidia's Moat

Full transcript

Alex: Welcome to Daily Tech News. I am Alex, and today we have a big enterprise deal, a direct attack on Nvidia's software moat, a proposed A I safety law with a very high bar, and two security stories that should make every team check its credentials.

Jordan: And I am Jordan. Let us start with the deal, because Salesforce is paying five point six six billion dollars for Braze, a customer engagement platform based in New York.

Alex: Salesforce announced on Tuesday that it signed a definitive agreement to acquire Braze for forty seven dollars and fifty cents a share in cash. That is a premium of roughly fifty eight percent over Monday's close, and Braze shares jumped about fifty two percent on the news.

Jordan: Braze helps brands react to customer behavior in real time. It sends personalized messages across mobile apps, websites, email, text messages, and WhatsApp, and it serves roughly two thousand eight hundred customers, including Canva, Dairy Queen, Instacart, and Venmo.

Alex: Salesforce says Braze will plug into its Marketing Cloud, its Data three sixty platform, and Agentforce, its A I agent platform. The pitch is simple to state and hard to build. You watch what a customer does, you decide the right response in the moment, and an agent helps send it on the right channel.

Jordan: The caveat is timing. The deal should close in Salesforce's fiscal year twenty twenty eight, it needs shareholder and regulatory approval, and Braze had not yet reached profitability. Salesforce is buying a real time decisioning engine it would have taken years to build.

Alex: Story two is that same moat attack through software. Google and Amazon both released tools this week to loosen Nvidia's hold on A I developers, through PyTorch.

Jordan: PyTorch is the open source toolkit most A I developers use, by some accounts around eighty five percent of A I applications. It was created at Meta when Nvidia's chips were already the default, so many features were built around Nvidia hardware first. That history is a big part of Nvidia's advantage.

Alex: On Tuesday, at the PyTorch Conference, Google open sourced Torch T P U. It lets developers run PyTorch applications on Google's Tensor Processing Units, and Google says moving an existing application can be a simple configuration change, with no rewrite.

Jordan: Amazon moved a day earlier with Torch Neuron, which does the same job for its Trainium chips. Amazon is also contributing code to the main PyTorch project that separates features from Nvidia's chips, making the default toolkit more hardware neutral.

Alex: None of that means developers abandon Nvidia overnight, because performance and cost must prove out workload by workload. But lock in is no longer just about the fastest chip. It is about who removes the friction of leaving.

Jordan: Story three is policy, and its numbers are striking. Anthropic has been circulating a draft federal A I safety bill on Capitol Hill, and reporting this week laid out its threshold for blocking a model.

Alex: Under the draft, the government could seek to halt a model only when there is a foreseeable and imminent risk it could kill or seriously injure more than fifty people, or cause more than one billion dollars in property damage. The risk would have to come from a biological weapon, a cyberattack, or the model evading its developer's controls.

Jordan: Independent evaluators, registered with the U S Commerce Department, would assess frontier models and report an imminent risk within seventy two hours. Commerce could then ask a federal judge to suspend the model, and no agency could stop a model on its own.

Alex: Critics point at two soft spots. Evaluators could be paid by the labs themselves, if payment does not depend on the result, and everything below that high threshold, including large scale fraud, sits outside this blocking power. Supporters say the threshold mirrors California's new law. Either way, this is a draft being pitched, not a bill that has passed.

Jordan: Story four is shorter. Open A I has acquired Orchestra Bio, a platform that helps biopharma teams coordinate drug development.

Alex: Open A I will combine Orchestra Bio with Rosalind, its life sciences models and tools. Finding a promising molecule is only the first problem. Studies, evidence, timelines, and regulatory work stretch over years, and that coordination is what Orchestra Bio was built to manage.

Jordan: So the test is whether A I inside the workflow can shorten the path from research to a treatment reaching patients. No purchase price was disclosed, so we will judge it on products, not a headline number.

Alex: Now the security block. The developer hosting platform Zeabur says it is shutting down after its second breach in two months.

Jordan: Zeabur says that on October fourteenth and fifteenth, an attacker used leaked internal credentials to enter its shared cluster, some dedicated servers, and its internal systems, and eventually read the platform database. The exposure covers about three hundred twenty one thousand eight hundred ten accounts and more than three point two million environment variable records.

Alex: Environment variables are where applications store secrets, so those records can include passwords and A P I keys. Zeabur confirmed root sign ins on one hundred one customer servers, with attacker S S H keys added to fifty of them. It says the credentials used this time may have been taken during its August breach, when its clean up missed keys that should have been rotated.

Jordan: That is the lesson in plain language. After a breach, saying we rotated everything is a claim, not a result. If one old key survives, the second breach is already scheduled. Zeabur says its services end by December thirty first, so customers must migrate and rotate every secret the platform ever held.

Alex: Our second security story is a joint warning about the SafePay ransomware group. The U S Cybersecurity and Infrastructure Security Agency, with the F B I, the U S Secret Service, and partners in Germany and the United Kingdom, issued an advisory on Tuesday saying SafePay has hit more than six hundred victims since August twenty twenty four.

Jordan: SafePay does not use affiliates, so it is a single disciplined operation rather than a franchise. It gets in through stolen credentials, brute force attacks, phished accounts, and flaws in virtual private network services and edge devices, then steals data before encrypting systems.

Alex: The advice is unglamorous and right. Patch edge devices, hunt for exposed credentials, and protect backups, because this group deletes shadow copies and resets network storage holding recovery data. The agencies are explicit that paying a ransom does not guarantee recovery.

Jordan: Pulling it together, Salesforce paid billions for real time customer decisions, Google and Amazon want chip choice to become a configuration change, and Anthropic wants the line for stopping a model drawn at catastrophic harm, judged in court. Zeabur and SafePay are the same warning from two directions.

Alex: Your homework is concrete. Inventory the secrets your platforms hold, verify old keys really are dead, and check your edge devices and backups before someone else does. We will be back tomorrow. Thanks for listening.