Sunday, September 6, 2026HotTea archive editionVerified 3:37 AM PDT

The lead

Federal regulators opened a Cybercab audit hours after its public debut

Tesla says its robotaxi without a steering wheel follows existing safety rules. NHTSA is asking which rules Tesla decided did not apply.

Read the full story →Listen to the edition

National Highway Traffic Safety Administration ↗The Verge ↗Wired ↗

Listen to this edition

Prefer audio? The briefing has chapters and a full transcript.

Follow on Apple Podcasts Follow on Spotify Transcript All episodes →

The briefing

The rest of the morning

4 more stories

War and securityHot

128 states agreed on a path toward autonomous-weapons rules, but not on the rules

The 128 members of the Convention on Certain Conventional Weapons reached consensus on a non-binding document in Geneva. Reuters reported that the text could open a path to formal treaty talks after more than a decade of debate. The weapons under discussion can identify and engage targets with varying degrees of autonomy. The United States and Russia have favored national guidelines over binding international rules.

Consensus does not create a treaty or restrict a weapon today. Stop Killer Robots told Reuters that negotiators diluted the definition and civilian protections in the final hours. The official UN meeting record confirms the 2026 process, while Reuters supplies the reported overnight outcome and dispute over the text.

Reuters ↗United Nations Office for Disarmament Affairs ↗

Read article →

Courts and product safetyHot

A judge kept Minnesota's nudification ban alive, and xAI will appeal

U.S. District Judge Donovan Frank denied xAI's request for a preliminary injunction. Minnesota's law therefore remains in effect while xAI's First Amendment challenge proceeds. The law bars website operators, software developers and others from letting users create realistic fake nude images of identifiable people. It took effect on August 1. xAI said in a court filing that it would appeal to the Eighth Circuit.

The ruling does not settle whether the law is constitutional. Frank said the issues are complex and deserve full review. At this stage, he found that xAI had not shown the harm needed for an injunction. Minnesota's law regulates access to a category of tool. That means the final case can reach beyond a rule aimed only at distributing nonconsensual images.

Reuters ↗Minnesota Office of the Revisor of Statutes ↗

Read article →

SecurityHot

A trick built to fool AI agents spread into millions of phishing emails

Microsoft researchers found a phishing campaign using invisible Unicode tag characters inside finance words. A recipient still saw words such as "funding," while some filters saw broken-up tokens. Microsoft built the detector while studying hidden prompt injection in email. Its signature jumped from about 21,000 messages on February 8 to more than 1.3 million the next day. It later peaked at 2.37 million messages on one weekday.

The counts come from Microsoft Defender telemetry, so they are a company claim about one vendor's view of the campaign. Microsoft said layered defenses caught most messages. The technique did not invent invisible-character spam. The new part was the Unicode Tags block, which security researchers had recently made prominent through AI red-team work.

Microsoft Security Research ↗Ars Technica ↗

Read article →

Models and company economicsWarm

DeepSeek made a 75 percent model discount permanent

DeepSeek will keep prices for its flagship V4-Pro model at one quarter of their original level. The company said that in a statement reported by Reuters on Saturday. That turns a temporary discount into the normal price. DeepSeek's API pricing page says prices vary by peak and off-peak hours and warns that product prices can change.

The permanence and 75 percent figure are company claims reported by Reuters. A posted token price does not show service capacity, model quality or the full cost of using the system. DeepSeek's pricing page also reserves the right to adjust prices again.

Reuters ↗DeepSeek ↗

Read article →

Analysis

A missing steering wheel turns rule reading into policy

Tesla's Cybercab audit shows what happens when software changes a vehicle faster than safety rules change.

Self-certification moves the first decision inside the company

Automakers decide whether their vehicles meet each applicable federal standard. NHTSA reviews that judgment after questions arise. A novel design therefore reaches the road before every disputed rule has a public answer.

Old hardware rules can still protect new systems

A driverless car does not need a pedal for a human driver, but removing controls does not remove the need for braking evidence. The policy task is to replace a familiar part with an equally testable safety requirement.

An audit is a demand for the missing proof

NHTSA has not declared the Cybercab unsafe. It has asked Tesla to show why the current rules permit the design. The answer will shape how later autonomous vehicles enter public service.

The watchlist

Signals that could change the read

NHTSA publishes Tesla's certification logic, requests an exemption, limits public rides or closes the audit.

CCW members publish the final text and authorize formal negotiations with a clear rule for human judgment.

The Eighth Circuit grants or denies a pause while xAI's constitutional case continues.

A major rival cuts API prices or DeepSeek changes rate limits after the V4-Pro move.

Across the desks Proof burden

Companies moved AI systems into public use while regulators and security teams asked whether old controls still fit.

Texas Cybercabs45 registeredThe Verge found 45 Cybercabs in the Texas vehicle database while NHTSA's audit covered an estimated 1,000 vehicles.

Weapons talks128 statesMembers of the Convention on Certain Conventional Weapons agreed on a non-binding text after more than a decade of talks.

Hidden-character spike2.37M messagesMicrosoft said its ASCII-smuggling signature peaked at 2.37 million messages on one weekday in February.

DeepSeek cut75 percentReuters reported that DeepSeek made the V4-Pro discount permanent, leaving prices at one quarter of their prior level.

Editorial direction, not a financial index. Each signal is tied to this edition’s reporting.

Edition validated · 5 stories · 11 unique sources

About HotTea & our sources →