This Week's Headlines

Listen & Watch

The AI Upload VIDEO
BRIEFING
This week in AI & Law
— video edition
The AI Upload
Podcast
Edition
EPISODE 24
EPISODE 24
This week in AI & Law
00:00 00:00

Section 01

Enterprise AI

AI Returns Materialize in Q3 Earnings After Record Corporate Investment

Read the article: CNBC

Corporate AI investment hit $581.7 billion in 2025, a 130% year-over-year increase according to the Stanford HAI 2026 AI Index report, and third-quarter earnings are now offering some of the first concrete financial data on returns. Santander reported 194 million euros ($216 million) in AI-generated business value through the first nine months of 2026, while Novartis CEO Vas Narasimhan described the third quarter as the first in which AI produced a "tangible" improvement to the company's profit and loss statement. Standard Chartered linked 14% operating income growth in part to AI tools that allowed the bank to scale core processes without proportional cost increases.

Not every company is reporting gains at scale. Carlsberg acknowledged AI has touched internal processes, cost efficiency, and supply chain operations, but said benefits have not yet materialized broadly. On the tech side, Meta reported AI investments generated "substantial incremental advertising revenue" alongside 26% total revenue growth, while Google Cloud revenue more than doubled to nearly $31 billion. With hyperscalers projected to spend $700 billion combined on AI infrastructure this year, legal and compliance professionals tracking AI governance, vendor contracts, and liability frameworks may find these earnings disclosures a useful data point on how firms are beginning to account for AI value.

Section 03

Security

LLMjacking Attacks Costing Enterprises Up to $1 Million in Cloud Charges, Google Warns

Read the article: The Hacker News

Google's Threat Intelligence Group and Mandiant have published findings on a rapidly maturing threat called LLMjacking, in which attackers steal or expose cloud API keys to hijack enterprise access to large language models and run up fraudulent computing charges. Unlike cryptojacking, which drains resources gradually, LLMjacking can generate fraudulent charges exceeding $100,000 in a single day, with some organizations sustaining cumulative losses reaching $1 million before the compromise is detected. Affected sectors include financial services, retail, technology, and transportation across North America, South America, and Asia Pacific.

The report documents a division of labor within the emerging criminal ecosystem. A new class of actors called LLM Mixers aggregate stolen access and resell it through underground storefronts, with one service offering unlimited token access to a frontier model for roughly $60 per month. A separate grey market relay service, documented by Symantec and Carbon Black, installs legitimate OpenAI Codex and Anthropic Claude Code tools on enterprise systems and then silently reconfigures them to route all requests through third-party infrastructure, primarily affecting organizations in regions where those vendors do not operate.

Google predicts that LLMjacking will increasingly displace traditional resource theft as enterprises adopt higher-tier models and agentic workflows, making exposed API tokens and vulnerabilities in model routing software prime targets.

Section 04

Policy

OpenAI Plans Post-Midterm Policy Push to Shape AI Regulation

Read the article: Axios

OpenAI is preparing a major policy and public relations push timed to launch immediately after Tuesday's midterm elections, according to Axios. The company plans to roll out a series of proposals during the congressional lame-duck session beginning November 9, including new mandatory safeguards for powerful AI systems, community agreements around data center development, and economic opportunity initiatives. As part of the effort, OpenAI will advocate rebranding data centers as "AI compute campuses" and push for state legislation giving communities more input on how those projects are built and what local benefits they provide.

The campaign is designed to position OpenAI ahead of what the company expects will be a more regulatory-minded Congress following an anticipated Democratic House win. OpenAI Chief Global Affairs Officer Chris Lehane told Axios the effort is also aimed at shaping the AI policy debate for the emerging field of 2028 presidential candidates. Other major tech companies, including Meta, are undertaking similar repositioning efforts as the political landscape shifts.

New York Enacts Law Restricting AI Chatbot Features for Minors

Read the article: Naturalnews.com

New York Governor Kathy Hochul has signed legislation banning certain AI chatbot features for users under 18, with the law set to take effect January 1, 2027. The statute prohibits companion chatbots from posing as human, fostering dependency, encouraging self-harm, discouraging minors from seeking help from licensed professionals, or engaging in sexual conversation with minors. Tech:NYC criticized the bill as "deeply flawed," while Common Sense Media's Jim Steyer called it a model for other states.

The law arrives amid a wave of related activity. Florida filed suit against OpenAI in June 2026 alleging concealed risks to children, a bipartisan Senate bill targeting chatbot risks to minors was introduced in May 2026, and California Governor Gavin Newsom signed 13 bills in September 2026 addressing minors' access to social media and AI chatbots. The Trump administration has also signaled interest in federal preemption of state AI laws, warning against a regulatory patchwork.

For legal professionals, the collision between state mandates, potential federal preemption, and ongoing litigation makes New York's implementation worth watching closely.

Section 05

AI Sustainability

Facing Grid Delays, AI Data Centers Turn to Repurposed Jet Engines for Power

Read the article: TechCrunch

Some AI data center operators are bypassing years-long waits for grid connections by generating their own electricity with converted jet engines pulled from retired aircraft and rebuilt to run on natural gas. The appeal is speed: while connecting 100 megawatts to the grid in Northern Virginia takes roughly seven years according to the International Energy Agency, jet-powered units can have a data center operational in 24 months, Rystad Energy analyst Audun Martinsen told the New York Times. The Trump administration has added momentum by encouraging data centers to generate their own power.

Several major players are already committed. Elon Musk's xAI has installed eight converted turbines in Mississippi to support its Colossus 2 data center in Memphis, and OpenAI used gas turbines at its first Stargate site in Abilene, Texas. The engines used by both come from ProEnergy, which rebuilds a GE engine common on Boeing aircraft. The arrangement carries real trade-offs, however: converted jet engines are less efficient, more polluting, and require more units to match the output of conventional gas plant turbines, suggesting experts view them as a short-term workaround rather than a lasting infrastructure solution.

Bay Area Cities Pass Data Centre Moratoriums as Midterm Elections Near

Read the article: Al Jazeera English

Seven Bay Area cities, including San Francisco and Oakland, have passed temporary moratoriums on data centre construction in the weeks leading up to Tuesday's U.S. midterm elections. The bans reflect growing public concern over data centres' demands on the energy grid, water supplies, and household electricity costs. An October CNBC poll found that 63 percent of registered U.S. voters oppose building data centres within 10 miles of their homes.

The issue has become a focal point in the race to fill Nancy Pelosi's congressional seat, where San Francisco Supervisor Connie Chan is calling for a nationwide moratorium on data centres pending AI regulation, while state Senator Scott Wiener warns that blanket bans could undermine AI oversight. A University of Southern California poll showed Wiener leading Chan 47 to 41 percent as of mid-October.

Legal and regulatory complications add another layer of difficulty. San Francisco's planning code still defines data centres using 2001 language, making it difficult for city officials to count or monitor existing facilities. Critics also note that the 45-day moratoriums may be too short for meaningful environmental review, particularly given nondisclosure agreements that can limit what even local air quality boards are permitted to know.