☀️ Tekin Morning | Sunday Aug 9: Amazon's Massive Polluter & Metabase Zero-Day

Amazon Building America's Biggest Climate Polluter in Texas

You might think old coal plants are the worst pollution sources, but in 2026, there's a new player in town: Amazon. The tech giant is investing in a private natural gas power plant in Pecos County, Texas, that's set to break records for greenhouse gas emissions. This plant, designed to power Amazon's AI data center, is permitted to emit 33 million tons of carbon dioxide annually - more than any other single source in the entire United States.

The project, being developed by Pacifico Energy, includes 35 natural gas turbines with a combined capacity of 7.65 gigawatts. To put that in perspective, the largest coal plant in America emits around 20-25 million tons of CO2 per year, meaning this Amazon project would be even worse. It's worth noting that this figure represents the permitted ceiling, not necessarily actual future emissions, but even if it reaches half that level, it would still be one of the nation's largest pollution sources.

The Climate Pledge Contradiction

Here's the bitter irony: Amazon was one of the founding members of the Climate Pledge - a commitment to reach net-zero carbon by 2040. But according to recent reports, Amazon's carbon emissions haven't decreased in recent years; they've actually increased. The company explains this rise is due to rapid demand growth for AI infrastructure and data centers. But is that reason enough to build the country's biggest single pollution source?

A report from Cleanview, which tracks data centers and their associated power projects, reveals that the Texas Commission on Environmental Quality recently issued an air permit for this project. This permit allows Amazon to transform its recently acquired GW Ranch site into a massive data center complex.

Metabase Zero-Day: Dangerous Security Breach Hits Framework and Tally

If you use Framework's modular laptops or Tally accounting software, there's bad news: your data has likely been exposed. A critical zero-day vulnerability in Metabase - a popular Business Intelligence tool - was actively exploited in real attacks, leading to unauthorized access to customer information from both companies.

This vulnerability, which scored a critical 10.0 out of 10 on the CVSS scale, is a SQL Injection that allows attackers to gain administrator access without any authentication. Yes, you read that right - no password needed, no user account required, just exploiting the specific /api/session/reset_password endpoint.

Attack Details

Metabase announced in an official statement that versions 1.58 and above were vulnerable to this flaw. The company immediately blocked the exploited endpoints and released patched versions after discovering the attack. Unfortunately, this happened after attackers had already gained access to the data.

Framework sent an email to customers stating that the attack occurred on August 3, 2026. Fortunately, payment information like credit cards and order details were not accessible to the attackers, but contact information and addresses are sufficient for fraudsters to use in phishing or social engineering attacks.

Metabase's Response

Metabase released patched versions for all vulnerable releases and advised all Metabase Cloud customers to update as quickly as possible. The company also said it's working with security teams to conduct a thorough review of the attack's scope. Unfortunately, this vulnerability hasn't yet received a CVE ID, making it somewhat more difficult to track and manage.

Google Revamps Hacking Group Naming System

Forget APT41 or APT1 - Google has decided to completely overhaul its hacking group naming system. If you've dealt with terms like APT (Advanced Persistent Threat) before, you should know that Google is ditching these dry, soulless numbering schemes. Instead, it's introduced a new two-word system that's both more memorable and more transparent.

The new system is simple: each hacking group gets a two-word name. The first word is a unique, memorable term representing that specific group, and the second word indicates the country of origin. For example:

• Castle for Chinese hacking groups (China)
• Ion for Iranian hacking groups (Iran)
• Neptune for North Korean hacking groups (North Korea)
• Relic for Russian hacking groups (Russia)
• Comet for financially motivated non-state hackers (Criminals)

How Are These Names Chosen?

If a hacking group is already known by a name in public reports, Google keeps that name. But if no public name exists, a word is randomly generated to avoid any bias. After that, analysts review the name to ensure it's not inappropriate or misleading.

This change began rolling out in July 2026, and Google is gradually implementing it across all platforms and public reports. Google's goal is to make cyber threat tracking and reporting simpler for everyone - from security researchers to corporate IT teams.

OpenAI Acquires Presentation Startup NextSlide

OpenAI is back to buying small companies. This time it's NextSlide - a startup that built an AI tool for converting prompts, notes, and documents into editable presentations. The deal closed earlier in 2026 but was only officially announced on August 8. Financial details weren't disclosed, but the entire NextSlide team has joined ChatGPT development.

NextSlide was founded by Ahmed Beshry - the same person who previously developed Canvas (another design tool). NextSlide's goal was to make visual communication more accessible and help people express their ideas more clearly. Now this team at OpenAI is continuing that same mission: building AI products that help people create, communicate, and turn their ideas into meaningful work.

What's Coming to ChatGPT?

This acquisition shows OpenAI is seriously investing in ChatGPT's visual capabilities. Currently, ChatGPT can generate text, write code, and even create images, but the ability to create professional presentations directly is a major step forward. Imagine being able to create a complete 20-slide presentation with charts, images, and organized text with just a simple prompt.

This is one of several small acquisitions OpenAI has made in recent months. The company has a clear strategy: instead of hiring from scratch, it acquires small teams with specific expertise and integrates them directly into its products. This approach is faster and more effective than hiring and training a new team from the beginning.

Bitcoin and Ethereum ETFs: $1 Billion Inflow

The crypto market is breathing again. Bitcoin and Ethereum ETFs in America pulled in over $1 billion in inflows last week - the strongest performance since April. This means institutional investors are returning to this market.

Bitcoin ETFs alone attracted $853.5 million, while Ethereum ETFs saw $244.9 million in inflows. But the real star of the week was BlackRock. The IBIT fund (BlackRock's Bitcoin ETF) alone captured 80% of the total cash flow - about $479 million over 5 trading days.

Why This Inflow Matters

After a period of stagnation and capital outflow in the first half of 2026, this inflow signals a shift in market sentiment. Institutional investors typically enter the market through ETFs rather than buying crypto directly, because it carries less risk and more oversight. When we see $1 billion flowing into these funds in one week, it means financial institutions' confidence in crypto's future is returning.

Bitcoin closed the week trading around $65,092, up 0.8% on the final day. Ethereum was in the $1,872 range. Both currencies are recovering from summer crashes.

Doom Developer Blasts Xbox: "They Don't Understand Art"

Chris Hays, lead services programmer at the legendary id Software, had bitter words about Xbox after the July layoffs: "They fundamentally don't understand art. They don't understand games." These comments came in response to the layoff of approximately 136 Doom developers - roughly half of the studio's entire staff.

id Software, the studio that created legendary games like Doom, Quake, and Wolfenstein, experienced one of the biggest layoffs in its history in July 2026. Of these 136 people, 96 worked at the Richardson, Texas office and 40 were remote workers. Many of these individuals were Doom 2016 veterans who had worked on the franchise for years.

Part of Microsoft's 3,200 Layoffs

These layoffs were part of a larger restructuring program at Xbox. Microsoft announced in July that it planned to lay off 3,200 people from the Xbox division and game development studios - 1,600 immediately and another 1,600 over the next 12 months. This is considered the biggest layoff wave in Xbox history. Besides id Software, four other studios were also separated from Xbox Game Studios.

Chris Hays explained in his tweet that entire departments were "gutted" and making an AAA game like Doom with half a studio has become "impossible." His sharp reaction reflects the anger and despair of developers who spent years of their lives building beloved games, but now witness the destruction of their teams.

Reactions and Criticism

Marty Stratton, id Software's creative director, later tried to refute claims of "complete studio destruction," saying these claims were untrue. But the numbers speak for themselves: when half a studio is laid off, you can't claim everything is normal. Many game industry developers also criticized these layoffs, saying Microsoft only thinks about short-term profit, not the long-term value of studios and valuable IPs.

id Software is currently working on Doom: The Dark Ages, which is set to release in the future. But the question is whether this game with a halved team can maintain the same level of quality.

Tekin Analysis: Why These 6 Stories Matter Today

Three Key Lessons from Today's News

First, rapid tech growth - especially in AI - has heavy environmental costs. Amazon's 33-million-ton power plant is a bitter reminder that computational resources aren't limitless and everything has a price.

Second, cybersecurity remains one of the industry's biggest challenges. The Metabase vulnerability showed that even popular companies like Framework and Tally are at risk. This is a reminder that everyone - from startups to tech giants - must take security seriously.

Third, real value lies in human talent, not just technology. When Xbox lays off half of id Software, it's destroying years of experience and embedded knowledge - something money can't replace.

Wrap-Up: An Eventful Sunday Morning in Tech