Profound closed a $180M Series D at a $1.8B valuation, just seven months after its Series C. This round signals that optimizing brand visibility in AI answers like ChatGPT and Perplexity has moved from a fringe marketing tactic to a budget line enterprises are willing to fund fast.
OpenAI announced on 2026-09-14 that GPT-5.5 will retire from ChatGPT, ChatGPT Work, and Codex on 2026-10-14 — but calling `gpt-5.5` directly through the OpenAI API is unaffected. This is a product-surface retirement, not an API sunset. On the official pricing page, gpt-5.5's short-context input/output is $5.00/$30.00 per million tokens; the officially recommended Codex replacement, GPT-5.6 Sol, is $4.00/$20.00 — cheaper on both input (↓20%) and output (↓33%). The gap between announcement and shutdown is one month, far shorter than OpenAI's own documented minimum of six months' notice for GA models.
The most common way to lose points on an AI Product Design question is treating human-in-the-loop as a single on/off switch — either the model runs free or a human reviews everything. Today's practice question is a real Sierra PM interview prompt: an enterprise customer wants full control over agent replies, the ML team says over-restricting hurts model quality and containment rate, how do you resolve it? The framework is an autonomy ladder (suggest → confirm → execute) paired with risk-based granular consent, not a blanket restriction. The case study is Gemini's Gmail draft card — the AI can draft, but 'send' is always the human's button to press.
On 2026-09-15, Spain's Data Protection Agency (AEPD) publicly disclosed the first formal notification it has received describing a breach allegedly carried out by an AI agent built on a well-known LLM. The agent reportedly logged into a system, searched for an application-level vulnerability, modified personal data, and accessed invoices — a four-stage chain completed with minimal human steering. AEPD has not verified the details and has not named the model or the affected organization, but frames the filing as a signal that AI-assisted attacks have moved from theoretical risk into real personal-data incidents. Defenses center on writing AI-adversarial risk explicitly into risk assessments, shortening incident-response windows, tightening credential and identity controls, and adopting tooling that can detect agent behavior at machine speed.
Forever Security researcher Gal Weizman found that a browser's built-in AI agent has a 'brain' (the cloud AI) and a 'body' (the browser itself, which can see the screen, read files, and use the camera) that trust instructions from exactly one origin. Browser extensions can't run code on that origin directly, but two permissions nearly every extension already has — content scripts and declarativeNetRequest — are enough to hijack that trusted channel and impersonate the brain. This isn't prompt injection; it's what the researcher calls 'Prompt-Forcing': crafting and sending the entire instruction stream directly. Chrome (CVE-2026-0628, CVSS 8.8) and Edge (CVE-2026-55945, CVSS 4.2) are patched; Comet, Opera Neon, and Claude in Chrome received bounties but no public patch timeline. Defense means treating extensions as high-risk assets and adding runtime monitoring of what agents actually do, since no code here is malicious.
symfony/ai-mcp-tool is Symfony AI's official MCP client bridge, letting a Symfony Agent mount tools from any remote MCP server. Install: composer require symfony/ai-mcp-tool. It removes the need for PHP agent developers to hand-write a tool-schema-to-framework-Tool adapter and to resolve name collisions across multiple servers.
Today's ML System Design rotation covers the six dimensions interviewers are actually probing (problem framing, data/features, model choice, evaluation, serving, monitoring/iteration), what a feature store actually solves (training/serving skew), the latency tradeoffs between real-time and batch inference, how data drift differs from model drift and how each gets monitored, and how offline metrics need to line up with online A/B tests. The practice question asks you to design a video recommendation system — interviewers want to see whether you can chain candidate generation, ranking, serving, and monitoring into one coherent technical story with defensible tradeoffs, rather than reciting one company's architecture diagram.
AlphaPai closed a $50M Series B backed by Chinese insurance and brokerage private-equity capital, bringing total funding to $92M in just one year. This round signals AI agents moving from meeting summaries into the core workflow of institutional investment research.
Jack & Jill closed a $40M Series A led by Air Street Capital, bringing total funding to $60M. This round signals that hiring's next step isn't a better resume search — it's putting an agent on both sides of the table to negotiate a match.
When the underlying technology gets matched by open-weight models, the interviewer isn't checking whether you can name a moat candidate — they're checking whether you can first use Porter's Five Forces to locate where the pressure is actually coming from, then use TAM-SAM-SOM to size whether a vertical pivot is worth betting on. Today's practice question is an original case built on 2026's model-commoditization pressure: how should an AI application company sequence its roadmap. The case study is Anthropic's acquisition of biotech AI company Coefficient Bio, which moved its defensibility from "which model you use" to "which vertical's data and workflow integration you own."
edgar-mcp is an MCP server for SEC EDGAR with six tools covering company lookup, filing lists, section extraction, financial facts, and full-text search. Install: pip install -e . then set EDGAR_MCP_USER_AGENT — no API key needed. It addresses the problem of agents being forced to swallow an entire 10-K when the context window gets eaten by tables of contents and legal boilerplate.
Today's Deep Learning & NLP rotation covers the Q/K/V computation behind self-attention and where its O(n²) complexity comes from, why positional encoding is a Transformer necessity (from sinusoidal encodings to RoPE/ALiBi), the architectural and training-objective split between BERT (encoder, bidirectional) and GPT (decoder, causal), the real difference between static word embeddings like Word2Vec/GloVe and contextual ones from BERT/GPT, and how to pick between full fine-tuning, freezing upper layers, and LoRA. The practice question asks how you'd scale a Transformer from a 2K-token to a 100K-token context window — interviewers want to see whether you can connect complexity analysis, positional extrapolation, and production cost tradeoffs in one answer.
Temporal closed a $550M Series E co-led by Lightspeed, with its valuation climbing from $5B at Series D seven months ago to $12.55B — a 2.5x jump. The round signals that the market now treats durable execution as required infrastructure for putting agents into production, not an optional engineering nicety.
Nex-N2.5-Pro (`nex-agi/Nex-N2.5-Pro`) keeps the prior Nex-N2-Pro's 397B-total, ~17B-active MoE footprint (built on Qwen3.5-397B-A17B), a 262,144-token context window, Apache-2.0 licensing, and a free OpenRouter tier. Nex reports Terminal-Bench 2.1 rising from 75.3 for N2-Pro to 82.7, and an OSWorld-G grounding score of 87.4 that tops every model in its own comparison table, including Claude Opus 5's 76.8.
The easiest way to lose points on a Metrics question isn't failing to name a cause — it's naming one cause and stopping, instead of systematically ruling possibilities out. Today we use the six-category root-cause taxonomy Google's own interviewers have publicly described — production bug, UI/UX change, rollout issue, user behavior shift, seasonality, external factor — on a real Google PM interview question: "YouTube comment engagement dropped in the last 24 hours, what's your next step," paired with AARRR to first locate where in the funnel this metric sits. The case study is Airbnb's S-1 disclosure explaining why its core operating metric is Nights and Experiences Booked, not visitor count or listing count — because that number can't be inflated from just one side of the marketplace; it only moves when a guest and a host both actually got value.
Anthropic's threat intelligence report, published on 2026-09-14, exposes GTG-50014, a financially motivated group using Claude and other AI agents to automate credential theft and supply-chain intrusions. One affiliate breached a SaaS vendor and, in roughly 34 hours, dumped over 2,100 Azure AD tokens spanning 40+ corporate tenants; a separate intrusion escalated from a single stolen developer token to full administrative control of a cloud environment in about 3 hours. The root cause is credential hygiene (hardcoded secrets, long-lived tokens) failing to keep pace with AI collapsing the labor cost of attacks toward zero. Defenses center on short-lived credentials, velocity-anomaly detection, and AI agent risk-governance platforms.
DearAgent is an open-source email inbox API that runs on Cloudflare Workers, with a built-in MCP server so an agent can create an inbox, wait for a verification code, search, and reply. Install: git clone then npm run setup for an interactive deploy, or just try the live demo at dearagent.sh. It solves the problem of agents that need a real inbox for signup flows without wanting to depend on a third-party hosted service.
Today's ML Fundamentals rotation covers the bias-variance tradeoff, the difference between L1 (Lasso), L2 (Ridge), and Elastic Net regularization, how to detect and fix overfitting versus underfitting, when to reach for K-fold, stratified, or time-series cross-validation, and which of precision, recall, F1, or AUC-ROC to prioritize under different business costs. The practice question is a classic: a model performs well offline but regresses after deployment — interviewers want to see a systematic debugging framework, not a guess.
Edge0-35B-A3B-preview (Edge0/Edge0-35B-A3B-preview): open-sourced by Edge0-AI on 2026-09-08. 4-bit quantized, 256 experts with 4 active per token (base model: Qwen3.5-MoE 35B-A3B). Three mechanisms — SSD expert offload, prerouter predictive routing, and Recover-LoRA distillation — let it run on a Mac mini M4 Pro (24GB) with just 2.9 GiB peak memory and 15 tok/s decode, averaging only a 3.9-point loss across 5 benchmarks versus the fp16 base. Fully open under Apache-2.0; also ships an 8B-A1B tier (built on Ling 3.0 Tiny). Agentic capability is currently weak — officially positioned as a preview release.
The most common way to fumble a Product Sense question isn't running out of feature ideas — it's skipping past "who is this user and what are they actually stuck on" and jumping straight to a feature list. Today we use the CIRCLES framework on a real Google PM interview question — "You're the PM for Waymo, design a new feature" — with the focus on the Comprehend and Identify steps: asking the right questions before proposing anything. The case study is how Slack grew out of an internal tool the team couldn't live without while building a failed game called Glitch — a demonstration that watching what users actually keep using beats asking them what they want.