Author: Staff Reporter

Nvidia and AMD are now required to prioritize American customers over Chinese buyers in a significant shift in U.S. semiconductor trade policy.

New legislation from the U.S. Senate mandates that chipmakers Nvidia Corp. and Advanced Micro Devices Inc. (AMD) prioritize American customers before supplying products to China. This development represents a notable setback for the semiconductor industry, which has been working to block such measures.

In August, Nvidia and AMD entered into a landmark agreement with the U.S. government, committing to share 15% of their revenues from advanced AI chip sales to China. This revenue-sharing arrangement is tied to the companies obtaining export licenses for key products, including Nvidia’s H20 and AMD’s MI308. It marks a significant shift in U.S. trade policy, as the government seeks to exert greater control over the flow of critical AI technology to China, a key geopolitical competitor.

The revenue-sharing deal has sparked legal and constitutional debates, with critics arguing that it may violate U.S. laws prohibiting export taxes. Despite these concerns, the arrangement has progressed, with the Department of Commerce establishing a legal framework to enforce it.

For Nvidia and AMD, this agreement opens the door to China’s lucrative market but comes at the cost of sharing a substantial portion of their revenue. This raises questions about the long-term impacts on their profitability and shareholder value. The precedent set by this move could reshape future technology trade negotiations, highlighting how governments may increasingly use financial mechanisms to influence the global distribution of critical tech resources.

The recent legislation aims to bolster U.S. competitiveness in cutting-edge industries while curbing exports to China and other foreign adversaries. Senator Jim Banks, a Republican from Indiana and lead co-sponsor of the bill, emphasized the importance of this initiative in maintaining U.S. dominance in semiconductor and chip manufacturing.

The accompanying measures that mandate prioritization of U.S. customers over foreign buyers, particularly those in China, complicate the supply chains and market strategies for Nvidia and AMD. These developments underscore a tightening regulatory environment where business decisions are increasingly influenced by national security and political considerations rather than solely by market forces.

This shift in policy reflects a broader trend in U.S. trade relations, as the government seeks to ensure that American technology remains competitive and secure in the face of global challenges.

Source: Original article

Venture capital firm Andreessen Horowitz has refuted claims of opening an office in India, labeling the reports as “fake news” while shifting its focus back to U.S. investments and artificial intelligence growth.

Andreessen Horowitz, commonly known as a16z, has publicly denied reports suggesting that it plans to establish an office in India. The firm characterized these claims as “fake news,” following a wave of speculation from several Indian media outlets.

Reports surfaced on Thursday, citing unnamed sources, that a16z was preparing to set up a physical presence in India, specifically in Bengaluru. These reports also indicated that the firm was in the process of hiring a local partner to facilitate its operations in the region.

Anish Acharya, a general partner at a16z based in the Bay Area, took to social media platform X to dismiss the rumors. He stated, “As much as I adore India and the many impressive founders and investors in the region, this is entirely fake news!”

This denial comes as a16z is scaling back its international ambitions. Earlier this year, the firm announced the closure of its London office, which had opened in 2023. The decision was attributed to a strategic shift and more favorable regulatory conditions in the United States. Despite this, a16z has indicated that it will continue to invest internationally through remote teams and local networks, with reports suggesting that several of its scouts remain active across Europe.

Historically, India has not been a primary focus for a16z, especially when compared to other U.S. venture capital firms like Accel, General Catalyst, and Lightspeed Venture Partners. The firm’s most notable investment in India has been in the cryptocurrency exchange CoinSwitch, which it backed during a $260 million funding round in 2021. Although there were discussions about a potential $500 million investment in Indian startups, a16z has not made any further investments in the country since that time.

In a previous discussion at Stanford Graduate School of Business, Marc Andreessen, co-founder of a16z, acknowledged the allure of investing in startups within emerging markets. However, he also pointed out the challenges that come with expanding a venture fund’s reach into multiple countries. He emphasized that venture capital is a “very hands-on process” that requires a deep understanding of the people involved, both for evaluating companies and for working alongside them.

Earlier this year, a16z sought to capitalize on the growing momentum in artificial intelligence by aiming to raise approximately $20 billion. The firm communicated to its limited partners that this fund would focus on growth-stage investments in AI companies, appealing to global investors interested in American enterprises.

Additionally, a16z has garnered attention for its significant spending on federal lobbying, reportedly investing $1.49 million this year alone. Records indicate that the firm has outspent its own industry trade group, the National Venture Capital Association, as well as other venture capital firms.

As the venture capital landscape continues to evolve, a16z’s recent statements underscore its commitment to focusing on U.S. investments while navigating the complexities of international markets.

Source: Original article

Stellantis, the parent company of Jeep and Chrysler, has confirmed a data breach affecting customer contact information, part of a larger trend of Salesforce-related cyberattacks.

Automotive giant Stellantis has confirmed that it has fallen victim to a data breach, which has exposed customer contact details. This incident occurred after attackers infiltrated a third-party platform utilized for North American customer services. The announcement comes amid a series of large-scale attacks on cloud customer relationship management (CRM) systems that have already impacted notable companies, including Google, Cisco, and Adidas.

Earlier breaches have led to the exposure of names, emails, and phone numbers, providing attackers with enough information to initiate phishing campaigns or extortion attempts. Stellantis’s breach is part of a troubling trend affecting Salesforce clients, with companies like Allianz and Dior also reporting similar security incidents.

Stellantis was formed in 2021 through the merger of the PSA Group and Fiat Chrysler Automobiles. It ranks among the world’s largest automakers by revenue and is the fifth largest by volume globally. The company oversees 14 well-known brands, including Jeep, Dodge, Peugeot, Maserati, and Vauxhall, and operates manufacturing facilities in over 130 countries. This extensive global presence makes Stellantis an appealing target for cybercriminals.

In its public statement, Stellantis clarified that only contact information was compromised in the breach. The company emphasized that the third-party platform involved does not store financial or highly sensitive personal data. As a result, Social Security numbers, payment details, and health records were not accessible to the attackers. In response to the breach, Stellantis activated its incident response protocols, initiated a full investigation, contained the breach, notified authorities, and began alerting affected customers. The company also issued warnings about potential phishing attempts and urged customers to avoid clicking on suspicious links.

While Stellantis has not disclosed the number of customers affected by the breach, it has not specified which contact details—such as email addresses, phone numbers, or physical addresses—were accessed by the attackers. Although the company has not named the specific hacker group responsible for the breach, multiple sources have linked this incident to the ShinyHunters extortion campaign. ShinyHunters has been active in a series of data thefts targeting Salesforce this year, claiming to have stolen over 18 million records from Stellantis’s Salesforce instance, which includes names and contact details, according to reports from Bleeping Computer.

The methods employed by attackers in these incidents are notably sophisticated. They exploit OAuth tokens associated with integrations, such as Salesloft’s Drift AI chat tool, to gain access to Salesforce environments. Once inside, they can harvest valuable metadata, credentials, AWS keys, Snowflake tokens, and more. Recently, the FBI issued a Flash alert highlighting numerous indicators of compromise linked to these Salesforce attacks, urging organizations to strengthen their defenses. The cumulative impact of these breaches is staggering, with ShinyHunters claiming to have stolen over 1.5 billion Salesforce records across approximately 760 companies.

Even though only contact details were exposed in the Stellantis breach, this information can be leveraged by attackers for targeted phishing attempts. Basic contact information can be scraped from breaches and sold on data broker platforms, where it is often used for spam, scams, and other malicious activities. To mitigate long-term exposure, individuals are encouraged to consider data removal services that can help track down and request the deletion of their information from these databases.

While no service can guarantee complete removal of personal data from the internet, utilizing a data removal service can be a prudent choice. These services actively monitor and systematically erase personal information from numerous websites, providing peace of mind and reducing the risk of scammers cross-referencing data from breaches with information available on the dark web.

The most immediate risk following a breach like this is targeted phishing. Attackers now possess legitimate contact details, making their emails and texts appear convincingly authentic. Consumers are advised to be skeptical of any messages claiming to be from Stellantis or related services, particularly those that urge recipients to click links, download attachments, or share personal information.

To safeguard against malicious links, it is advisable to have antivirus software installed on all devices. This protection can alert users to phishing emails and ransomware scams, helping to keep personal information and digital assets secure. Additionally, individuals should consider using a password manager to create strong, unique passwords for every account, reducing the risk of credential stuffing attacks.

Furthermore, it is important to check if your email has been exposed in previous breaches. Many password managers include built-in breach scanners that can alert users if their email addresses or passwords have appeared in known leaks. If a match is found, it is crucial to change any reused passwords and secure those accounts with new, unique credentials.

Implementing two-factor authentication (2FA) adds an extra layer of security by requiring a temporary code or approval in addition to a password. This significantly decreases the likelihood of successful account takeover attempts, even if attackers manage to steal a password.

Attackers often combine exposed contact information with other data to create comprehensive identity profiles. Identity theft protection services can monitor for suspicious activities, such as unauthorized credit applications or changes to official records, and alert users early so they can take action before significant damage occurs.

In the wake of this breach, it is advisable for customers to audit their accounts, not only with Stellantis but also with related services such as financing portals, insurance accounts, or loyalty programs. Users should look for unusual sign-ins, unfamiliar devices, or changes to personal details. Most services offer tools to review login history and security events, making this a routine habit.

The vulnerability of even large manufacturing companies highlights the risks associated with cloud platforms and third-party systems in customer workflows. As Stellantis navigates the aftermath of this breach, the broader lesson is clear: organizations must treat the surfaces exposed by their service providers and SaaS integrations with the same vigilance as their core systems.

Source: Original article

U.S. technology companies are hesitant to lease large data centers in India due to recent trade tensions between New Delhi and Washington, D.C.

U.S. technology firms are currently delaying decisions regarding the leasing of large data centers in India, reflecting concerns over the recent deterioration of trade relations between New Delhi and Washington, D.C.

According to Alok Bajpai, managing director of India for NTT Global Data Centers, orders from major tech companies for hyperscale data centers—facilities that require substantial computing power—are still in the pipeline. However, these companies are exercising caution, opting to hold off on finalizing agreements. “They are holding the pen and saying let me not sign it just yet,” Bajpai noted.

The situation has been exacerbated by new U.S. tariffs on Indian exports, which have unsettled global supply chains and complicated the costs associated with equipment and inputs. Jitendra Soni, a partner in the technology and data privacy practice at Argus Partners, remarked on the impact of these tariffs, stating that they have made it increasingly difficult to pin down costs.

Despite these challenges, India’s data center capacity is projected to nearly triple over the next five years, increasing from 1.2 gigawatts to over 3.5 gigawatts by 2030, according to various industry estimates. Soni emphasized that while the underlying appeal of India remains compelling, the pace of deal closures has slowed significantly, with negotiations now requiring more legal scrutiny regarding responsibility for potential global shocks.

Data centers play a crucial role in the digital economy, housing computer systems and related infrastructure necessary for storing, processing, and managing vast amounts of data. They support essential digital services such as cloud computing, social media, online banking, and enterprise applications. Depending on their function, data centers can be privately owned, rented, cloud-based, or strategically located near end users to minimize latency. Essentially, they are vital for the seamless operation of modern digital services.

The current reluctance among U.S. tech giants to finalize data center agreements in India underscores the intricate balance between geopolitical tensions and the long-term potential of the market. While trade friction, particularly the imposition of new tariffs, has introduced short-term uncertainty, it has not fundamentally shaken confidence in India’s ambitions for digital infrastructure.

Global technology firms are adopting a more cautious approach, delaying decisions and seeking stronger legal and commercial protections. This trend indicates a shift towards more risk-aware investment strategies, rather than a diminished interest in the Indian market.

India continues to present strong fundamentals, including a large and expanding internet user base, favorable government policies that support digital infrastructure, and a strategic position within the global IT ecosystem. The anticipated growth in the country’s data center capacity, expected to nearly triple by 2030, suggests that the overall trajectory remains positive, even as timelines extend and negotiations become more complex.

This moment represents both a challenge and an opportunity for India. The country must address investor concerns by establishing clear and stable policy frameworks while enhancing trade diplomacy. Concurrently, India can leverage this period to bolster domestic capacity, encourage local partnerships, and position itself as a more self-reliant digital hub.

Ultimately, how India navigates this phase of cautious optimism will be crucial in determining its ability to fully realize its potential as a global leader in the data infrastructure sector.

Source: Original article