Top stories
Russian hackers identified as responsible for $2.5B Jaguar Land Rover breach
A cyberattack on Jaguar Land Rover (JLR) last year has been traced to Russian hackers. The breach caused production delays and significant economic losses, prompting a £1.5 billion government bailout.
Linux pedit COW Exploit Allows Root Access via Cached Binary Poisoning
A critical flaw in the Linux kernel's traffic-control subsystem allows unprivileged users to gain root access on vulnerable systems. The exploit targets the memory cache of setuid binaries, enabling attackers to inject and execute malicious code while bypassing file integrity checks.
CISA Warns of Exploited Flaws in Lantronix EDS5000 and PTC Windchill
The CISA has issued alerts concerning the exploitation of critical vulnerabilities in Lantronix EDS5000 and PTC Windchill systems. The Lantronix flaw allows code execution with escalated privileges, while the Windchill vulnerability enables remote code execution. Both alerts urge immediate patching to mitigate risks posed by these active threats.
Miasma Malware Compromises npm Packages and GitHub Actions
Researchers identified a supply chain attack involving Miasma malware targeting multiple npm packages and GitHub Actions. The attack compromises developer credentials to propagate malware across various software ecosystems, posing significant security risks.
Popular Chrome Ad Blocker Can Execute Arbitrary JavaScript Code
The Chrome ad blocker 'Adblock for YouTube,' with over 10 million installs, has been found to contain functionality for executing arbitrary JavaScript code remotely. This could potentially allow for significant privacy risks, including data theft, although no malicious activity has been reported to date.
New Mistic Backdoor Discovered Linked to KongTuke in Cyber Attack Campaigns
A new backdoor named Mistic has emerged in attacks directed at various sectors, linked to the KongTuke group. The stealthy malware is designed for long-term access, employing sophisticated evasion techniques such as memory-based execution and DLL side-loading, marking a significant threat to targeted organizations.
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited for Root Access
A zero-day vulnerability in Cisco Catalyst SD-WAN, tracked as CVE-2026-20245, has been exploited to gain root access by an unknown threat actor. This flaw, identified by Mandiant, allows an authenticated attacker to execute commands by manipulating user input, raising serious security concerns for affected systems.
Law Enforcement Disrupts Amadey and StealC Malware Networks, Reclaims 27M Credentials
A law enforcement operation disrupted the Amadey and StealC malware networks, recovering 27 million stolen credentials and restricting over $47 million in criminal cryptocurrency assets. This takedown involved 326 servers and 142 domains and highlights the effectiveness of public and private sector collaboration in combating cybercrime.
Emergence of AI Threat Models Marks a New Era in Cybersecurity
The rise of frontier agentic AI models has drastically reduced the time from threat discovery to execution in cybersecurity. This shift poses a significant risk as AI can exploit vulnerabilities faster than human defenders can respond.
Google I/O 2026: Launch of Gemini 3.5 and Gemini Omni Models
At Google I/O 2026, Google announced advancements in AI technology with the introduction of Gemini 3.5 Flash for enhanced coding efficiency and Gemini Omni for multimodal video creation. These innovations reflect a significant surge in AI token processing to 3.2 quadrillion monthly, underscoring growing demand and adoption of AI capabilities.
Apple Announces 2026 Sales Tax Holidays for Select Products in 10 U.S. States
Apple shared its 2026 sales tax holiday schedule, allowing tax-free purchases of specific products in 10 U.S. states between July and August. The initiative will include popular devices such as Macs and iPads, with varying dates and price limits depending on the state. This move provides financial relief for consumers amidst rising product prices.
CuspAI Raises $450 Million with Investments from Jeff Bezos and UK Government
CuspAI, a Cambridge-based AI startup, raised $450 million in funding, valued at $2.6 billion, with contributions from Jeff Bezos and the UK government. CuspAI aims to accelerate material discovery for chipmakers using AI, reducing reliance on rare metals and potentially advancing technology in clean energy and semiconductors. This collaboration involves notable tech firms like Nvidia, marking a significant step in AI-driven material science.
7-Zip Version 26.02 Fixes High-Severity RCE Flaw in XZ Archive Processing
7-Zip released version 26.02 to address a remote code execution (RCE) vulnerability linked to XZ-compressed data. Discovered by Lunbun researcher Landon Peng, the flaw could be exploited if a user opened a specially crafted archive. This highlights the need for manual updates due to 7-Zip's lack of an automatic update feature, emphasizing user awareness and action.
VaultSort's Guardian feature uses local AI to identify sensitive files on Mac
VaultSort introduced Guardian, a new feature that scans Mac computers for sensitive files such as identity documents, financial records, and credentials. This tool operates entirely on-device using AI, ensuring no user data is uploaded to external servers or cloud APIs, which addresses privacy concerns for sensitive information.
Axiom Biosciences to List in Hong Kong Before U.S. by 2029
Axiom Biosciences plans to go public in Hong Kong in 2027, followed by a U.S. listing in 2029. This decision reflects the growing appeal of Hong Kong for biotech financing amid challenging fundraising environments in the U.S.
Range Rover introduces the GT, a new non-SUV electric vehicle
Range Rover is developing the GT, its first non-SUV model, using the new EMA flexible platform. The GT will launch as a battery-electric vehicle with plans for a hybrid variant to follow.
SIHOO Doro C300 Pro V2 Chair Offers Ergonomic Features Under $500
The SIHOO Doro C300 Pro V2 ergonomic office chair features advanced support systems for enhanced comfort and adaptation to users. It includes a weight-responsive lumbar support that adjusts automatically, accommodating different body shapes and preferences, making it suitable for home or shared workplace environments.
Furtex Toolkit Launches for Post-exploitation Research on Linux
The Furtex toolkit has been released, offering tools for post-exploitation and evasion research on Linux using io_uring and eBPF. It includes 75 EDR evasion tools and various utilities designed for authorized red team operations, emphasizing its use on owned systems only.
Neill Blomkamp launches AI-generated short film 'Nightborne'
Neill Blomkamp released a 13-minute AI-generated short film titled Nightborne via his startup Barley Studios. The film utilizes ByteDance's Seedance 2.0 for production, demonstrating the potential of generative AI in film.
Fugitive hiding as biotech exec arrested after 20 years on the run
Ronald Fischer, a fugitive for over 20 years, was arrested in New York after being discovered as a biotech executive. He initially fled during his 2005 trial for sexual assault, and has been a wanted criminal since then.
Google updates Gemini for macOS with Neural Expressive design and AI Mode on Android
Google has updated its Gemini app for macOS to include the Neural Expressive design language, previously seen in Android. The redesign enhances the app's interface with new icons and navigation elements aimed at creating a consistent user experience across platforms.
Poolside launches Laguna S 2.1, an efficient 118B-parameter coding model
Poolside released Laguna S 2.1, a 118-billion-parameter open-weight coding model that activates 8 billion parameters per token. The model demonstrates competitive performance against larger models, addressing the growing demand for transparent open-weight AI solutions in the West.
Computable Enables Flexible GPU Hour Buying and Selling
Computable has launched a platform allowing users to buy, sell, and redeem GPU hours by the week. This offers unprecedented flexibility to secure computational resources while eliminating unused capacity through a buyback option.
Multiple AI Models Compared in App-Building Challenge
Grok 4.5, GPT-5.5, Claude Opus 4.8, and Claude Fable 5 were tested for app-building capabilities using the same prompt. Grok 4.5 was launched by xAI for coding tasks. The results show differences in model performance, highlighting strengths such as GPT-5.5's visualization and Claude's 3D rendering.
Counterexample to the Jacobian conjecture confirmed in three dimensions
A recent theorem demonstrates the Jacobian conjecture is false in three dimensions, confirming a polynomial with a non-zero constant Jacobian that is not globally invertible. This finding also implies the conjecture's inapplicability in higher dimensions, while its validity remains an open question in two dimensions.
Google Chrome Releases Major Stable Updates Fixing Crucial Vulnerabilities
Google's Chrome Stable channel has been updated to version 150.0.7871.181/.182, with previous versions being released incrementally. These updates address numerous critical and high-severity security vulnerabilities, ensuring improved security posture across Windows, Mac, and Linux platforms.
Sony releases final trailer for Spider-Man: Brand New Day ahead of theatrical release
Sony Pictures has released the final trailer for Spider-Man: Brand New Day, set to premiere in two weeks. This film continues the storyline from 2021's No Way Home and aims to launch a new trilogy starring Tom Holland as Spider-Man.
Chrome 150 Update Addresses 27 Vulnerabilities, Enhances Security
Google released Chrome 150, patching 27 security vulnerabilities, including two critical use-after-free flaws in Ozone and Views. This update is part of a broader effort to improve browser security, with most flaws discovered internally by Google. Regular updates are essential due to frequent exploitation of memory safety vulnerabilities in browsers like Chrome.
SIM Swap Attack Highlights Vulnerabilities in Identity Verification
A recent near account takeover incident underscores the inadequacy of current identity verification methods. It reveals the need for organizations to continuously evaluate identity throughout the customer journey rather than relying on one-time authentication.
Apple video shows how Apple Watch aided injured cyclist's rescue
Apple released a video highlighting how the Apple Watch's safety features assisted an injured cyclist. The watch activated emergency services after the cyclist fell unconscious, showcasing its life-saving capabilities during emergencies.
OpenAI appoints David Vélez and Robin Vince to its board of directors
OpenAI has appointed David Vélez, CEO of Nubank, and Robin Vince, CEO of BNY, to its boards as it prepares for a potential IPO. Their expertise in technology and finance is expected to support OpenAI's mission to expand its business and ensure AI benefits all.
Weka launches NeuralMesh 6 to enhance GPU memory via flash storage caching
Weka has unveiled its NeuralMesh 6 platform, which uses affordable flash storage to cache AI model tokens, reducing dependency on expensive GPU memory. This innovation could lower costs and speed up AI deployments, particularly benefiting organizations with high GPU utilization demands.
LG OLED evo TVs introduce Creator Original mode for enhanced streaming control
LG Electronics has announced a new Creator Original picture mode for select 2026 OLED evo TVs, enhancing streaming experiences in partnership with Prime Video. This mode allows studios to customize settings like color balance and motion handling, offering more control compared to the existing Filmmaker Mode.
Super Micro's shares rise 15% on increased margins and orders after SpaceX deal
Super Micro Computer's shares increased by 15% after the company projected higher gross margins for the June quarter, now expected between 15% and 17%. This rise is attributed to a favorable customer mix and a spike in orders for GPUs that support artificial intelligence, notably linked to new collaborations with SpaceX.
Disney and Kraft Heinz Enter Strategic Alliance for Cross-Promotion
Disney and Kraft Heinz have formed a multiyear strategic alliance, allowing Kraft Heinz to use Disney characters across its brands. The deal involves a significant marketing investment from Kraft Heinz, aiming to increase brand visibility and synergy with Disney's media and experiences.
Apple Working on Second-Generation iPhone Air 2
Apple is developing a second-generation iPhone Air, improving camera capabilities and battery life. The device will feature the A20 Pro chip, marking an upgrade from the A19 Pro, and aims to address previous sales disappointments.
Apple TV releases trailer for season two of Women in Blue
Apple TV has released a trailer for the second season of Women in Blue, premiering on August 12. The Spanish-language drama continues to follow four women in Mexico's first female police force as they investigate a murder connected to the 1968 student massacre.
Google Meet launches homepage redesign with meeting agenda view
Google Meet is introducing a redesigned homepage that centralizes meeting agendas and essential artifacts. This update aims to enhance organization and preparation for meetings, making it easier to access relevant information and materials.
OpenAI and Hugging Face Report Security Incident in Model Evaluation
OpenAI and Hugging Face confirmed a security incident during the evaluation of machine learning models. This incident emphasizes the need for robust security measures in AI development environments.
Apple iPhone 18 Pro expected launch in September 2026
Apple is expected to unveil the iPhone 18 Pro in September 2026, following its annual release pattern. Pre-orders are anticipated to open on a Friday following the announcement, with shipping likely starting the following week.