Donald Trump says the FBI is investigating Nvidia chief executive Jensen Huang’s relationship with Alice Huang, a Singapore-based business executive whom US intelligence officials reportedly suspect of working for Beijing. Alice Huang, who is not related to Jensen Huang, led Megaspeed, a company that has dealt with Nvidia. Trump said he asked Huang whether he knew she was a spy; Huang denied knowing of any espionage ties, and Trump said he believed him. China has rejected the allegations as baseless. The FBI has not commented, and Trump gave no details about the investigation or when it began. Jensen Huang has acknowledged being unfaithful to his wife and apologised to his family.
Nvidia has launched an independent investigation and says it has no reason to believe company secrets or US national security were compromised. Huang says he will cooperate and is committed to protecting the company and US security. The allegations have intensified scrutiny because Nvidia’s advanced chips are central to the AI competition between the US and China, and Washington restricts some exports over security concerns. Nvidia’s shares fell more than 4% on Monday, wiping about $250bn from its market value. A proposed shareholder class action accuses Huang and Nvidia of concealing his relationship and misleading investors; the company has also been asked to brief congressional committees on its security safeguards and contacts with Alice Huang.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
The US Commerce Department has delayed adding Singapore-based Megaspeed to a trade blacklist, despite concerns it helped smuggle Nvidia chips into China. Other agencies pushed for the listing, while Commerce said it needed more information about some companies under review. (ft.com)
Wyndham’s Android app contained a password that gave access to an internal database holding customer details, login tokens, and company files. Wyndham revoked the credential after a researcher reported it, but the company has not said how many records were exposed or whether customers will be notified. (techcrunch.com)
Seven months into Project Glasswing, Anthropic has logged 37,966 security findings but made only 217 fixes, while adding nearly 12,000 findings and just 15 fixes since September. Maintainers are also disputing many scanner reports, raising questions about the project’s claimed accuracy and the burden placed on open-source teams. (vulncheck.com)
rVPN is an open-source VPN protocol that disguises encrypted traffic as ordinary HTTPS to work around VPN blocking. It uses a Rust core, rotating encryption keys, and probe-resistant decoy responses, with code and builds available for verification. (rvpn.org)
CVE-2026-116928 is a remote code execution vulnerability in Windows Search. The provided information does not specify its cause, impact, or affected versions. (msrc.microsoft.com)
A flaw in OpenSSH on Alpine Linux and other musl-based systems can let attackers bypass password authentication with a single SSH connection. Install the security patch and restart OpenSSH; systems with password authentication enabled and no PAM are affected. (zdnet.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.