113 stories from 23 sources
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to…
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation,…
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen…
Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.
Lessons Learned from CISA’s Recent GitHub Leak The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- in…
zkSTAR: A zero knowledge system for time series attack detection enforcing regulatory compliance in critical infrastructure networks arXiv:2510.23060v4 Announce Type: replace Abstract: Industrial control systems (ICS) f…
Azure IaaS: How to design, build, and optimize cloud infrastructure for long-term cost efficiency As organizations modernize infrastructure, migrate mission-critical workloads, build cloud-native applications, and scale…
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructio…
Trustworthy AI LLM Scalability Risk Index (LSRI): A Cybersecurity Framework Assessing Agentic-AI Security & Software Model Supply Chain Safety Boosting AI-Generated Malware Defense & Explainability Mitigating Emerging R…
GTI-mSEMP Framework : A Proposed Framework to Simulate Malware Propagation with Inclusion of Attacker-Defender Strategy arXiv:2606.28079v3 Announce Type: replace Abstract: The rapid proliferation of automated, multi-vec…
The cleanup trap: Stop asking RAG to fix bad data The enterprise technology ecosystem is caught in a costly cycle. Over the past two years, millions of dollars have been funneled into generative AI pilots, yet many of t…
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a devel…
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tok…
AI Can Find Bugs, But Human Knowledge Still Proves Them Artificial intelligence (AI) is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes us…
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums acro…
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS…
Atlassian: Research shows organizations should approach AI at the team level, not the individual level, to achieve true ROI Presented by Atlassian Most companies are approaching AI adoption backwards by optimizing how i…
Masked Diffusion Language Models are Strong and Steerable Text-Based World Models for Agentic RL arXiv:2607.16204v1 Announce Type: new Abstract: Recent growth in reinforcement learning (RL) has surfaced a need for diver…
Generalist AI Control: Towards Multi-purpose Adaptive Algorithms arXiv:2607.16313v1 Announce Type: new Abstract: Traditional controllers are designed for specific systems and do not transfer across different system orde…
Exact Network Surgery: Functional Invariance and Gradient Plasticity in Reactive Computational Graphs arXiv:2607.16568v1 Announce Type: new Abstract: Function-preserving network growth techniques such as Net2Net and pro…
DS@GT ARC at eRisk 2026: Hybrid Multi-Agent LLM System with Structured Algorithmic Guidance for Conversational Depression Screening arXiv:2607.16712v1 Announce Type: new Abstract: We describe DS@GT's submission to the e…
Fourier Geometric Wind Power Forecasting with Numerical Weather Prediction arXiv:2607.17095v1 Announce Type: new Abstract: Accurate short-term wind power forecasting is essential for grid stability and operational plann…
Is Your Model Thinking or Just Stagnating? PUMA: Diagnosing Reasoning Pathology via Phase-Momentum Alignment arXiv:2607.17188v1 Announce Type: new Abstract: Test-time scaling empowers Large Reasoning Models (LRMs) to ta…
Learning-Driven Adaptive Audit Scheduling: A Sequential Decision Approach to Off-Chain Data Integrity arXiv:2607.17305v1 Announce Type: new Abstract: We model cryptographic auditing of off-chain data as a Constrained MD…
The Curvature Shadow: An Apparent Failure of Maximum-Entropy Equilibrium Selection is a Removable Artifact arXiv:2607.17543v1 Announce Type: new Abstract: In two-player zero-sum games whose Nash equilibria form a convex…
ST-Veto: Spatio-Temporal Token Veto for Diffusion MLLMs via Taylor Prediction and Visual Grounding arXiv:2607.17884v1 Announce Type: new Abstract: Vision Language Models (VLMs) achieve strong reasoning with Chain-of-Tho…
SAGE: Subgoal-Conditioned Action Generation for Latent World Model Planning arXiv:2607.17973v1 Announce Type: new Abstract: Latent world models have emerged as a powerful planning paradigm by learning action-conditioned…
Can We Break LLMs Out of Self-Loops? Fine-Grained Reasoning Control with Activation Steering arXiv:2607.18100v1 Announce Type: new Abstract: Extended reasoning has become standard for frontier Large Language Models (LLM…
SOS-LoRA: Static Orthogonal-Subspace Low-Rank Adaptation with Fixed Multi-Scale Scaling arXiv:2607.16252v1 Announce Type: cross Abstract: Low-Rank Adaptation (LoRA) is a widely used parameter-efficient fine-tuning (PEFT…
Neural Controlled Differential Equations for EMT-Level Surrogate Modeling of Grid-Forming Inverters arXiv:2607.16258v1 Announce Type: cross Abstract: The application of artificial intelligence methods in power electroni…
Back to the museum: Investigation of the acceptance of Android Andrea with and without emotion simulation in a museum arXiv:2607.16428v1 Announce Type: cross Abstract: For a second time, the android robot Andrea was set…
Building2Building: A Large Scale Benchmark for Generalizable Real-World Reinforcement Learning arXiv:2607.16534v1 Announce Type: cross Abstract: Reinforcement learning (RL) has achieved strong results in control, yet le…
Learning from World Feedback: Why Model Uncertainty Fails as a Risk Signal in Model-Based RL arXiv:2607.16591v1 Announce Type: cross Abstract: The RLxF programme argues that learning signals should come from world feedb…
(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure arXiv:2607.17550v1 Announce Type: new Abstract: Modern machine learning (ML) pipelines depend heavily on third party libraries for graph compilation and har…
Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation arXiv:2607.15434v2 Announce Type: replace-cross Abstract: Multi-agent systems routinely place one AI agent in authority over a…
Writer's AI harness cuts token spend nearly 40% — without sacrificing accuracy Enterprise AI is facing an ROI paradox. While throwing more compute at the strongest foundation model works well in product experiments, the…
A single AI agent conversation can look perfect and still be broken, leaders from LangChain, Conviva and CoreWeave said at VB Transform 2026 A single AI agent conversation can look flawless scored on its own and still p…
At VB Transform 2026, Zillow's engineering chief said AI ROI numbers only hold up if you measure before you build Zillow, the real estate technology company, doesn't get one conversation with its customers. They move fr…
AWS
·
21h ago
AWS Weekly Roundup: One-click Lambda setup prompt, OpenAI GPT-5.6 models on Bedrock, and more (July 20, 2026) Last week, my team visited Seoul to meet AWS Korea User Group (AWSKRUG) leaders. AWSKRUG is the largest cloud…
Microsoft expands Azure AI and HPC infrastructure with AMD AI workloads are scaling faster than any single infrastructure approach can support — with more models, new agent-driven workloads and surging compute demand dr…
Cribl Adds Agentic Detection Engineering & Boosts SecOps With CardinalOps Deal CardinalOps will give Cribl customers the ability to map detection rules and security controls to the MITRE ATT&CK framework. SecOps teams c…
Universal gates from braiding and fusing anyons on quantum hardware Nature, Published online: 15 July 2026; doi:10.1038/s41586-026-10709-y A 54-qubit realization of non-Abelian S3 topological order demonstrates that com…
Metabolite glues as a means of purine sensing and chemotherapeutic response Nature, Published online: 15 July 2026; doi:10.1038/s41586-026-10790-3 Purines can act as endogenous molecular glues in human cells by anchorin…
Nucleotides act as ‘molecular glue’ and can sense their own abundance Nature, Published online: 15 July 2026; doi:10.1038/d41586-026-01945-3 Some nucleotides have been shown to control metabolism by ‘gluing’ proteins to…
European Court: Apple Can Not Shirk Off its Interoperability Requirements One of the best bulwarks against monopoly is interoperability—that is making a new product or service work with an existing product or service. I…
Operating AI/ML Workloads on Kubernetes: A Headlamp Plugin for Kubeflow Kubernetes has quietly become the default platform for AI and machine learning. Whether you run notebook servers for data scientists, schedule dist…
AWS
·
7d ago
AWS Weekly Roundup: AWS Builder Center at 1 year, Network Scanning in Security Hub, Loom for AWS, and more (July 13, 2026) AWS Builder Center turned one year old last week. Launched on July 9, 2025, the platform has gro…
RiskX interview video featuring Colin Mahony and Mastercard's Aditi Sawhney Recorded Future CEO Colin Mahony and Mastercard’s Aditi Sawhney discuss the convergence of cyber and financial crime. Explore how Payment Fraud…
External key management for Azure Managed HSM is now in public preview Azure Key Vault Managed Hardware Security Module (HSM) provides strong sovereignty over your encryption keys. Keys are generated and stored in a sin…
AWS
·
2w ago
Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks Learn how Kubernetes version rollbacks for Amazon EKS let you reverse cluster upgrades within seven days. This new feature provides a safety…
AWS
·
2w ago
Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode AWS CloudFormation speeds up infrastructure deployment with Express mode, enabling AI agents and developers to receive deployme…
AWS
·
2w ago
Amazon EC2 C9g and C9gd instances powered by AWS Graviton5 processors are now available Amazon EC2 C9g and C9gd instances, powered by AWS Graviton5, are now generally available. They deliver up to 25% better compute per…
AWS
·
2w ago
Automate public TLS certificate issuance with ACME support in AWS Certificate Manager AWS Certificate Manager now supports the ACME protocol for public TLS certificates, enabling automated issuance and renewal through a…
Discover, govern, and scale Azure infrastructure in the AI era Learn how Terraform helps teams discover unmanaged Azure resources, reduce infrastructure drift, and establish governance as cloud and AI environments scale.
AWS
·
3w ago
AWS Weekly Roundup: Agentic CX designer for Amazon Connect Customer, EC2 AMI Watermarks, Open Governance for MySQL, and more (June 29, 2026) It has been a busy stretch on the AWS Summit circuit. At the New York City Sum…
Accelerate modern Linux workloads with Azure Files Azure Files combines familiar file access with built-in performance, data protection, security, and Azure service integration. The post Accelerate modern Linux workload…
Introducing the Cluster API plugin for Headlamp Headlamp is an open-source, extensible Kubernetes SIG UI project designed to let you explore, manage, and debug cluster resources directly from a browser. Cluster API (CAP…
Inspect Volcano workloads faster with Headlamp Volcano is a cloud native batch scheduler for Kubernetes, built for high-performance computing, AI/ML, and other batch workloads. Headlamp is an extensible Kubernetes web U…
See your serverless: introducing the Headlamp plugin for Knative Headlamp is an open-source, extensible Kubernetes SIG UI project designed to let you explore, manage, and debug cluster resources. Knative brings serverle…
HCP Vault Dedicated introduces cluster disaster recovery (public preview) Cluster DR for HCP Vault Dedicated (public preview) enables DR drills at the cluster level, so teams can simulate cluster failures and prove fail…