Top stories
Reddit Announces Upcoming Changes to Old Reddit to Combat Scraping and Spam
Reddit plans to implement unspecified "changes" to Old Reddit, its 21-year-old desktop interface, to address abusive scraping and spamming, particularly from AI. The company previously began requiring users to be logged in to access Old Reddit, citing its logged-out experience as a source of automated traffic. These changes affect long-time users and moderators who prefer the legacy interface.
Anthropic's Claude Mythos AI Identifies Weaknesses in HAWK and Round-Reduced AES
Anthropic's Claude Mythos Preview AI model discovered new attack methods against the HAWK digital signature scheme and a faster attack on seven-round AES-128. The HAWK scheme, a candidate for post-quantum standardization, was subsequently withdrawn from NIST consideration by its developer. These findings demonstrate AI's capability in cryptanalysis, though neither attack affects current production systems.
Nikita Bier Steps Down as X's Head of Product After One Year
Nikita Bier has resigned as X's head of product after serving for just over a year, transitioning to an advisory role. During his tenure, Bier oversaw the launch of 30 new products and significant rebuilds across the platform, including the timeline, Android app, chat, and notifications, as well as the recent launch of X Money.
OpenAI Settles DOJ Discrimination Claims for $3.2 Million Over Hiring Practices
OpenAI and its subsidiary Statsig will pay $3.2 million to settle allegations from the U.S. Department of Justice that they discriminated against U.S. workers by favoring temporary visa holders. The settlement addresses claims that the companies used specific tactics to deter U.S. applicants for certain roles and includes changes to hiring practices and a fund for affected individuals.
Uber and Waymo Clash Over Proposed Robotaxi Bill in Washington, D.C.
Uber and Waymo are in conflict over proposed legislation in Washington, D.C. affecting autonomous vehicle operations. Uber argues the bill could monopolize the market for Waymo while threatening existing human driver jobs. Waymo supports the bill, which aligns with their operational goals. This disagreement underscores the intense competition between the two companies in the robotaxi sector.
Open Secure AI Alliance Proposes SAFE Guidelines for AI Cybersecurity Incident Sharing
The Open Secure AI Alliance (OSAA), comprising over 120 organizations including NVIDIA, Cisco, CrowdStrike, Hugging Face, and Red Hat, has proposed Shared AI Findings Exchange (SAFE) guidelines. These guidelines, released for public comment by the Linux Foundation at the Black Hat conference, aim to standardize the confidential collection, analysis, and sharing of agentic AI cybersecurity incidents to reduce systemic risks across the industry.
AMD's Q2 Revenue Jumps 50% to $11.5 Billion Driven by Data Center Growth
AMD reported a 50% year-over-year increase in second-quarter revenue, reaching $11.5 billion, primarily due to a 107% surge in data center sales to $6.7 billion. This growth was attributed to demand for AI capacity and sales of Epyc CPUs and Instinct GPUs, while gaming revenue declined by 31% to $779 million.
Samsung's Galaxy Z Fold 8 Series Debuts With Enhanced Designs and Features
Leaks reveal Samsung's latest devices, including the Galaxy Z Flip 8 and Z Fold 8 series with minimal design changes from previous models, and significant battery and display upgrades. New colors and a shift to Qualcomm chips for Galaxy smartwatches mark smaller-scale updates ahead of the July 22 launch.
Lenovo and Asus Googlebook Devices Leak, Revealing Hardware and "Aluminium OS"
Images of upcoming Googlebook devices from Lenovo and Asus have leaked, showcasing two Lenovo laptop sizes, a 2-in-1 tablet, and an Asus laptop. These leaks provide the first look at hardware for Google's new Android-based platform, which is expected to replace ChromeOS and integrate Gemini AI, with one leak identifying the operating system as "Aluminium OS."
Adform Ad Platform Compromised to Steal Cryptocurrency via Malicious JavaScript
Online advertising firm Adform experienced a supply-chain attack where its JavaScript tracking script, 'trackpoint-async.js' served from 's2.adform.net', was compromised. The malicious code replaced Bitcoin, Ethereum, or TRON wallet addresses copied to users' clipboards or entered into form fields with attacker-controlled addresses, potentially redirecting cryptocurrency payments. Adform detected the incident on July 27, 2026, removed the code, and notified clients.
UK Police and Education Data Breached by ExfilSquad, Ransom Demanded
The UK's Police National Legal Database (PNLD) and Department for Education (DfE) experienced separate data breaches, with the ExfilSquad extortion group claiming responsibility. The PNLD breach exposed contact information for over 100,000 police officers and criminal justice professionals, while the DfE incident involved over 600,000 lines of data from two portals. ExfilSquad is demanding a ransom for the data.
Apple CEO hints at paid iCloud+ tiers for increased Siri AI usage
Apple CEO Tim Cook indicated that the company may introduce paid upgrade options within iCloud Plus to allow users to increase their usage limits for Siri AI. This suggests a monetization strategy for Apple's upcoming AI features, which rely on server models and have daily usage limits. The new Siri AI, launching with iOS 27, will offer features like on-screen interaction and a standalone AI app.
Apple Aims for Late 2027 Smart Glasses Launch, Prioritizing Privacy and Developer Tools
Apple is reportedly planning to unveil its first smart glasses at WWDC in June 2027, with a public release by the end of that year. The company is focusing on privacy features, including on-device processing and the absence of facial recognition, and will likely provide developers with tools to create third-party applications for the device.
SpaceX to Remove Unpermitted xAI Data Center Turbines by July 2027
SpaceX announced it will remove 69 unpermitted gas turbines powering its xAI data centers near Memphis by July 2027. This follows lawsuits from groups like the NAACP and Southern Environmental Law Center regarding the turbines' operation without federal permits, and the company will transition to a permanent 1.2 gigawatt natural gas power plant.
Wikimedia Foundation Declines Voluntary Union Recognition for US Workers
The Wikimedia Foundation has declined to voluntarily recognize Wiki Workers United, a union representing its U.S. employees, despite the union claiming a supermajority of signed authorization cards. The Foundation stated it prefers a secret-ballot election overseen by the National Labor Relations Board to ensure all eligible employees have an equal voice. This decision follows a request for voluntary recognition from the union and has drawn criticism from some Wikipedia editors and the union itself.
Katalyst Space's LINK Satellite Experiences Failures, Jeopardizing NASA Swift Observatory Reboost
The Katalyst Space LINK satellite, launched on July 3 to reboost NASA's Neil Gehrels Swift Observatory, is tumbling out of control due to the failure of two of its three reaction wheels and partial loss of its cold gas thruster system. This incident jeopardizes NASA's first mission to contract a private company for orbital reboosting services, which aimed to extend the Swift Observatory's operational lifespan.
Amazon Attributes Multiple npm Package Hijacks to North Korea's Sapphire Sleet
Amazon Threat Intelligence has attributed the September 2025 hijacks of the npm packages debug and chalk, along with the March 2026 axios compromise and an earlier typo-crypto incident, to North Korea's Sapphire Sleet group. This attribution connects previously separate incidents of crypto theft and package compromise under a single threat actor, highlighting a consistent pattern of social engineering and supply chain attacks affecting widely used JavaScript libraries.
Ernst & Young Discloses Data Breach: Client Tax Information Compromised
Ernst & Young experienced a data breach via a third-party support system, compromising clients' personal and financial data. The breach, spanning March 28 to April 12, included sensitive tax information, with notifications sent to affected clients and state regulators. The incident underscores the vulnerabilities associated with third-party IT services.
Apple Reclaims Most Valuable Company Title, Surpassing Nvidia
Apple has overtaken Nvidia as the world's most valuable company with a market cap of $4.88 trillion during Friday's trading. This shift in ranking reflects changing investor sentiment towards AI and product innovation. Apple's stock rise follows a growth of 22% this year.
Ransomware Payment Dilemma Intensifies Amid Sophisticated Threat Landscape
Ransomware attacks have surged, with nearly half of victims opting to pay attackers. Many jurisdictions, including the UK, are proposing bans on public sector ransom payments due to the inefficacy of negotiations and the risk of repeated attacks. Advanced AI tools and strategic targeting increase the threat level, complicating response strategies.
Fastjson 1.x RCE Vulnerability Actively Exploited, No Patch Available
Attackers are targeting a critical remote code execution (RCE) vulnerability in Alibaba's Fastjson 1.x library, affecting Spring Boot applications. The flaw, CVE-2026-16723, allows unauthenticated code execution and currently has no official patch from Alibaba for the 1.x branch. This impacts organizations using Fastjson 1.x in specific Spring Boot configurations, requiring immediate mitigation or migration to Fastjson2.
Apple Sued for $1.8M After Fake Crypto Wallet App Appears on App Store
Three individuals are suing Apple, alleging that a fraudulent Sparrow Wallet application downloaded from the App Store led to the theft of approximately $1.8 million in Bitcoin. The lawsuit, filed on July 24 in California, claims Apple failed to adequately review and monitor applications, despite promoting the App Store as a secure source for software.
Clop Ransomware Exploits PTC Windchill and FlexPLM Vulnerability for Data Theft
The Clop ransomware group is exploiting a critical vulnerability (CVE-2026-12569) in PTC Windchill and FlexPLM to exfiltrate data from targeted companies. This exploitation has led to extortion campaigns and prompted urgent warnings from cybersecurity agencies and authorities.
HP OmniBook Ultra 14 Review: Powerful Snapdragon Performance at a High Price
The HP OmniBook Ultra 14 laptop leverages the Snapdragon X2 Elite processor, providing strong performance and battery life but with some drawbacks. Despite its premium build and innovative design, the $2,900 price, bloatware, and lack of certain ports may deter potential buyers.
White House Accuses Chinese AI Firm Moonshot of Siphoning Anthropic's Fable 5 Data
White House official Michael Kratsios accused Chinese AI startup Moonshot of deceptively extracting data from Anthropic's Fable 5 model to train its Kimi K3 system. This accusation signals a potential shift in US policy, framing large-scale model distillation as theft of American technology, which could lead to tighter API restrictions and expanded export controls on AI chips. Treasury Secretary Scott Bessent warned of sanctions against Chinese AI companies for intellectual property theft.
OpenAI Sued Over ChatGPT's Allegedly Dangerous Health Advice
OpenAI faces a lawsuit from a pastor who alleges ChatGPT provided dangerous medical advice regarding a pulmonary embolism, leading to delayed treatment. The suit claims negligence and the unauthorized practice of medicine, seeking financial damages and stricter guardrails for AI health recommendations.
WhatsApp Introduces Multitude of New Features Including iPad Sign-Up and CarPlay Integration
WhatsApp has released several updates, allowing iPad users to sign up without a phone number, enhancing integration with Apple CarPlay and Android Auto, and enabling music sharing from Apple Music and Spotify. These changes improve multi-device usability and align WhatsApp more closely with social media features.
TSMC to Invest Additional $100 Billion for 2nm Chip Fabs in Arizona
TSMC is set to expand its U.S. operations by investing an additional $100 billion in building at least four new advanced chip fabs in Arizona. This move aims to increase domestic production capacity amid rising U.S. demand and government support. However, challenges remain regarding the production of advanced chips and the economic impact on TSMC's margins.
SpaceX Launches Starlink V5 Dish with Smaller, Lighter Design
SpaceX unveiled its Starlink V5 residential dish, featuring a reduced size and improved energy efficiency, available in select regions. It allows for maximum speeds of up to 375 Mbps, slightly lower than the V4's 400 Mbps, making it suitable for home internet use. The dish is not for in-motion usage, unlike the upcoming Starlink Mini. This release may lower user costs due to its energy efficiency.
HollowGraph Malware Utilizes Microsoft 365 Calendars for C2 Communications
HollowGraph, a new malware, uses Microsoft 365 calendar events dated to 2050 for command-and-control and data exfiltration. This method disguises traffic as legitimate, targeting Israeli entities and linked to Iranian threat actors.
DOJ Seizes Over 1,000 Domains for Illegal World Cup Streaming
The U.S. Department of Justice seized and blocked over 1,000 domains during the World Cup for illegal streaming. This action aims to protect intellectual property and consumers from potential security threats associated with unauthorized streaming sites.
Critical ServiceNow Flaw Exploited Despite Patch Release
A critical remote code execution vulnerability (CVE-2026-6875) in ServiceNow's AI Platform is being actively exploited, allowing attackers to execute code remotely. Despite the July patches, attacks were observed shortly thereafter. This issue highlights the urgency for self-hosted customers to apply updates promptly to prevent system compromise.
Apple iPad Mini's October Release Promises OLED Upgrade Amid Price Concerns
Apple plans to launch an OLED iPad mini by October, featuring a fixed 60Hz refresh rate. Despite missing ProMotion, the upgrade emphasizes display quality and follows recent price increases, influenced by supply chain issues.
OpenSSL HollowByte Flaw Exposes Servers to Memory Exhaustion with Minimal Payload
A vulnerability in OpenSSL, known as HollowByte, allows attackers to trigger a denial-of-service condition by sending an 11-byte payload. The flaw causes vulnerable servers to pre-allocate memory for incomplete TLS handshake messages. Fixed versions without official CVEs or advisories include OpenSSL 4.0.1 and others released on June 9. Upgrading is crucial to prevent potential server freezes.
EU Exempts Smartwatches from User-Replaceable Battery Rule
The European Commission has exempted smartwatches, fitness trackers, and certain other wearables from the EU regulation requiring user-replaceable batteries. This decision responds to safety and design concerns, particularly for devices with compact, sealed designs. The exemption must be reviewed by the European Parliament and the Council of the EU.
Apple Raises Prices for Apple Music and Apple One Subscriptions Amid Licensing Cost Concerns
Apple has increased subscription prices for Apple Music and Apple One in response to rising licensing costs. The individual Apple Music plan now costs $11.99 per month, while the Apple One Family plan has risen to $27.95. This marks the first price hike for these services in nearly four years.
Zoox Recalls Software in Robotaxis Due to Smoke Detection Issues
Zoox recalled software in 105 robotaxis following an incident where a vehicle struggled with heavy smoke at a fire scene in June. No injuries occurred, and a new update has been deployed to address the issue. This highlights ongoing safety challenges in autonomous vehicle operation and regulatory focus on their interaction with emergency situations.
China Joins SpaceX in Rocket Reuse with Long March 10B Recovery
China successfully recovered its Long March 10B rocket booster at sea, becoming the second country to achieve reusable rocket technology after SpaceX. This marks a significant milestone in China's space capabilities, potentially advancing its satellite services and global competitiveness.
Florida Man Arrested for Cryptocurrency Theft via Steam Game Malware
Zyaire Wilkins was arrested for allegedly using malware-laden games on Steam to steal $220,000 in cryptocurrency. The operation infected about 8,000 devices and targeted 80 crypto wallets from May 2024 to February 2026. This highlights security risks in digital distribution platforms like Steam.
Trump's Teleprompter Operator Faces Insider Trading Allegations on Kalshi Market
Gabriel Perez, former President Trump's teleprompter operator, is under investigation for allegedly making over $100,000 in insider trading on Kalshi prediction markets concerning Trump's speeches. The Commodity Futures Trading Commission and federal investigators are involved, with discussions ongoing about the return of the profits.