The Weekly Brief #010: Reflection AI at $25B, Apple’s 6 Incoming Launches, TELUS Breach

WSJ and Reuters reported on March 25 that Reflection AI — an NVIDIA-backed AI startup with no public model or announced product — is in talks to raise $2.5 billion at a $25 billion pre-money valuation (post-money approximately $27.5 billion). The company’s stated mission: “seeking to counter Chinese AI.” That’s the entire publicly available thesis.

It didn’t stop there. Periodic Labs, an AI company focused on chemistry and materials science, went from a $1.3 billion seed valuation to $7 billion in under six months — one of the fastest repricing events in startup history. Granola, the AI meeting notetaker, closed a $125 million Series C at a $1.5 billion valuation — notable because Granola has a product, users, and revenue, making it a refreshing counterpoint to the pre-product mega-rounds.

9to5Mac reported on March 23 that Apple has six more products in the pipeline for release before summer 2026. This is on top of the nine products Apple launched in the week of March 11: iPhone 17e, iPad Air M4, MacBook Neo, MacBook Air M5, MacBook Pro M5/Pro/Max, Studio Display, and Studio Display XDR.

The six incoming products: HomePod mini 2 (S9, ~$99), HomePod 3 (A18, ~$299–$349), Apple TV 4K 4th generation (A18, 4K 120fps, Wi-Fi 7, ~$99–$149), M5 Mac Studio (M5/M5 Ultra, ~$1,999+), updated Mac mini with M5 Pro (~$599+), and a new base iPad with A18 chip and Apple Intelligence support (~$349–$399).

ShinyHunters — the same threat group responsible for the 2024 Snowflake wave that compromised AT&T, Ticketmaster, and dozens of enterprise customers — confirmed they stole 700 terabytes of data from TELUS Digital, the digital services arm of Canadian telecommunications giant TELUS. TELUS confirmed the breach on March 16.

The vector was not ransomware — it was cloud credential theft at scale. CSO Online described ShinyHunters’ methodology as “disciplined and optimized for maximum leverage.” The attackers exfiltrated 700TB using stolen cloud access keys, moving data systematically without triggering intrusion detection systems until the breach was already complete.

Aura — a consumer identity protection service that charges subscribers $12–$25/month to protect their identity — had 900,000 customer records stolen in a breach confirmed March 19. The attack vector: a vishing (voice phishing) call targeting a third-party marketing platform vendor that Aura uses for email marketing and customer communications. Aura’s core infrastructure was not compromised — just the 900,000-person customer contact database.

Beyond the 900,000 records (names and emails), 35,000 customers had more detailed personal data stolen. The secondary risk is profound: the stolen data tells attackers “this person is specifically worried about identity theft and has a paid subscription to protect against it” — making Aura’s customer list a premium social engineering target list.

The post-GTC 2026 period is seeing rapid OpenClaw ecosystem growth as NVIDIA’s agentic AI framework adoption data begins to emerge. NemoClaw enterprise deployments are beginning at major cloud providers, and the Nemotron Coalition — comprising Cursor, Langchain, Mistral, Perplexity, Sarvam, and Black Forest Labs — is working on Nemotron 4, the next-generation model underlying NemoClaw’s agent orchestration capabilities.

Jensen Huang’s GTC forecast has become a widely cited framing: “every engineer will carry a token budget alongside their salary.” The implication: AI agent compute consumption becomes a line item on organizational budgets as predictable and routine as salary, cloud infrastructure, or software licensing.