Top stories
Multiple Healthcare Data Breaches Impact Over 30 Million Individuals
Several healthcare organizations, including DentaQuest, Unlimited Technology Systems, MCBS, CareCloud, and Brown Health Medical Group-MA, have reported data breaches impacting over 30 million individuals. These incidents, occurring between May 2025 and March 2026, exposed sensitive personal, medical, and financial information, highlighting ongoing vulnerabilities in healthcare data security.
Unpatched Magento and Adobe Commerce Zero-Day Actively Exploited to Backdoor Online Stores
A new unpatched zero-day vulnerability, named StyleSmuggler, in Magento Open Source and Adobe Commerce is being actively exploited to install backdoors on online store servers. The flaw allows attackers to execute malicious code without authentication, affecting all current versions including 2.4.9. Adobe has not yet released a patch or advisory, leaving stores vulnerable to compromise.
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws, Linked to Lazarus Group
The Gunra ransomware group is exploiting vulnerabilities in Fortinet firewall products and Schneider Electric PowerLogic P5 appliances to target critical infrastructure globally. South Korean agencies also warn that North Korea's Lazarus Group is sharing tools and infrastructure with Gunra, with both groups exploiting vulnerabilities in mandatory Korean financial security software.
Critical Rails Active Storage Flaw Allows Arbitrary File Read, Potential RCE
Ruby on Rails has patched a critical vulnerability, CVE-2026-66066, in its Active Storage framework that allows unauthenticated attackers to read arbitrary files from application servers. This flaw, with a CVSS score of 9.5, affects applications using libvips for image processing and accepting untrusted image uploads, potentially exposing sensitive data and leading to remote code execution.
Iranian missiles reportedly destroy Amazon's Bahrain data center amid conflict escalation
Iranian state media claims that the IRGC struck and destroyed Amazon's Bahrain data center with cruise missiles. This attack is stated to be retaliation against U.S. strikes on an Iranian nuclear facility, highlighting ongoing threats to American tech infrastructure in the region.
South Korea's AI Chip Boom Spurs Massive Profits and Wealth Divide
South Korea's boom in AI memory chip production, led by Samsung and SK Hynix, is driving exponential profit increases, with Samsung forecasting a 1,800% profit surge for one quarter. This economic growth is largely concentrated, heightening discussions on income inequality. The impact is significant as it positions Samsung to surpass Nvidia as the most profitable tech company globally.
US Suspends Microsoft, Adobe, and Other Tech Firms from Green Card Program
The US government has suspended Microsoft, Adobe, Capgemini, Cognizant, HCL, Infosys, Tata, and Wipro from the Permanent Labor Certification (PERM) program. This action, announced by Vice President JD Vance and Secretary of Labor Keith Sonderling, prevents these companies from submitting new or processing pending permanent labor certification applications, impacting their ability to secure permanent residency for some foreign employees. The suspension is due to alleged fraud and abuse within the H-1B visa program and ongoing federal investigations.
DHS Bans DeepSeek AI Use Across US Federal Civilian Agencies
The US Department of Homeland Security (DHS) has prohibited the use of DeepSeek AI products and models across all federal civilian agencies and their IT systems. This ban, effective since late July, stems from concerns that DeepSeek models could facilitate the transfer of sensitive US government data to the Chinese government and may contain malware or security vulnerabilities. The order also disallows DeepSeek from participating in federal government contracts.
OpenAI CEO Sam Altman to Attend Trump-Xi State Dinner in Washington
OpenAI CEO Sam Altman will attend President Trump's state dinner for Chinese President Xi Jinping's visit. His attendance occurs amidst ongoing discussions in Washington and Silicon Valley regarding AI regulation and the risks associated with advanced AI models.
Alibaba Releases Qwen3.8-Max and Qwen3.8-27B AI Models, Including Open Weights
Alibaba has released its Qwen3.8-Max and Qwen3.8-27B AI models. Qwen3.8-Max is a multimodal model with 2.4 trillion parameters and a 1 million token context window, while Qwen3.8-27B is a 27-billion-parameter version with native vision-language understanding. The company plans to release open weights for both models, making Qwen-Max-class capabilities available to the open-source community.
OpenAI Introduces "Dots" Persistent AI Agents Powered by GPT-6 Astra
OpenAI launched "Dots" at its DevDay event, which are persistent AI agents built on GPT-6 Astra. These agents operate on their own cloud computers, use their own browsers, and can interact with over 4,000 applications through OpenAI's plugin ecosystem. Dots are designed to perform continuous tasks and automate workflows, available to ChatGPT Pro and Business Premium users.
Apple tightens macOS Full Disk Access controls due to AI agent risks
Apple is introducing new controls for macOS Full Disk Access settings, citing increased risks from AI agents. This change follows reports of AI apps potentially accessing private user data without explicit consent, aiming to ensure users understand the implications of granting such broad permissions.
Trump Administration Supports OpenAI in NYT Copyright Lawsuit, Citing Fair Use for AI Training
The Trump administration has filed a statement of interest in The New York Times' copyright lawsuit against OpenAI, arguing that training AI models on copyrighted text constitutes fair use. This intervention supports OpenAI's defense, stating that restricting AI development based on a narrow interpretation of fair use would hinder scientific progress and American economic prosperity. The lawsuit, filed in December 2023, alleges OpenAI unlawfully trained its AI systems on NYT articles and seeks billions in damages.
Samsung Unveils Galaxy Z Fold 8 Series and Watch 9 at Unpacked Event
Samsung announced its latest devices at the Galaxy Unpacked event held on July 22 in London. The event debuted the Galaxy Z Fold 8 series, including a new Ultra model, and the Galaxy Watch 9. The Z Fold 8 series introduces wider designs and improved displays featuring 'Flex Titanium' technology to reduce crease visibility. Samsung also announced preorder incentives and pricing, reflecting higher component costs and competition from Apple's potential foldable devices.
Apple to Launch Redesigned Entry-Level MacBook Pro with Touchscreen in 2027
Apple is reportedly planning to redesign its entry-level MacBook Pro, targeting a release in the first half of 2027. The update will align the model with higher-end versions by introducing a touchscreen and potentially a thinner form factor. The move is part of a broader strategy to integrate advanced features and chips across Apple's device lineup.
Google releases Gemini 3.8 Flash AI model with improved benchmarks
Google has released Gemini 3.8 Flash, the third Flash update in three months, which shows improved performance in benchmarks compared to its predecessor. This model is designed for software engineering, autonomous agents, and complex enterprise workflows, and is available with an introductory pricing offer.
Reddit Deploys AI to Combat AI-Generated Spam
Reddit has implemented new AI-powered tools to combat spam on its platform, much of which is AI-generated. The large language model (LLM) tools have resulted in a 20% decrease in spam exposure and catch 25,000 spam posts daily, blocking 23 million spam views per day. This development is part of a broader trend of AI content impacting the quality of information on social media platforms.
Google Pixel 11 Series Leaks Reveal New Colors, Pixel Glow Feature and Pricing
Ahead of its August 12 launch, Google's Pixel 11 series leaks reveal new color options like 'Pine' and 'Fuchsia' and introduce the 'Pixel Glow' feature, a multi-colored LED light integrated in the camera bar. The leaks include design changes for the Pixel 11 Pro Fold with a narrower camera bar and price increases of approximately €100. This matters as Google shifts its strategy in the competitive smartphone market.
Apple Plans 'Apple Upgrade' Device Leasing Program Launch on July 28
Apple is reportedly launching 'Apple Upgrade,' a new leasing program for iPhones, iPads, Macs, and Apple Watches, starting July 28. Partnering with Klarna, the program offers 24- to 36-month leases with lower monthly payments but excludes certain budget-friendly models. Existing programs like the iPhone Upgrade Program will be phased out.
Google Launches Gemini 3.6 Flash Models; Gemini 3.5 Pro Delayed
Google launched the Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber models, focusing on efficiency and cost savings. However, the anticipated Gemini 3.5 Pro has been delayed due to a need to improve coding capabilities. This matters as it impacts Google's competitive position amid rapid advancements by rivals.
Google Introduces Selfie Video for Account Sign-in and Recovery
Google has launched a new selfie video option for account sign-in and recovery, allowing users to regain access by recording a short video of their face. This feature provides an alternative verification method, particularly useful when traditional authentication methods are unavailable, by comparing a live video to a securely stored reference video.
Teens sentenced to 5.5 years for £29M Transport for London cyber attack
Owen Flowers and Thalha Jubair were sentenced to 5.5 years for a 2024 cyberattack on TfL that caused £29 million in damages. The attack severely disrupted services and breached data of millions. Authorities cite this case as a major enforcement action against young cybercriminals.
Tesla and Waymo Expand Robotaxi Services in U.S. Cities
Tesla has expanded its robotaxi service into Miami, Orlando, and Tampa, marking its third city rollout in Florida. Waymo is launching driverless operations in San Diego, Las Vegas, Tampa, and Denver, initially for employees. The expansions reflect ongoing competition in the autonomous vehicle sector.
Micron Reports Strong Q4 2026 Results Driven by AI Memory Demand
Micron reported fiscal Q4 2026 revenue of $54.23 billion and adjusted EPS of $33.42, exceeding analyst expectations. The company anticipates continued strong demand for memory products, particularly High-Bandwidth Memory (HBM) for AI applications, leading to tight supply through 2027 and 2028.
Data Breach Exposes Information of Over 40,000 DHS Employees
A hacker group named "Department of Peace" published personally identifiable information for over 40,000 U.S. Department of Homeland Security (DHS) employees, including staff from U.S. Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE). The data, which includes names, job titles, and work contact details, was reportedly stolen from an Okta single sign-on system used by DHS. Distributed Denial of Secrets (DDoSecrets) published the archive, named "Icepick," stating the goal was to replace "anonymity with accountability."
Microsoft Offers Voluntary Buyouts to 60,000 Employees Amid AI Investment
Microsoft is offering voluntary exit packages to approximately 60,000 employees, representing about 27% of its global workforce, in the U.S., Canada, India, and the UK. This initiative allows the company to reduce headcount and adapt its workforce while balancing significant investments in AI infrastructure with financial efficiency goals.
Laya, an open-source non-autoregressive AI model, released as alternative to Jev
Laya, an open-source, non-autoregressive AI model, has been released as a faster alternative to TypeSafe AI's Jev. Laya offers schema-based decision-making with faster inference times and no API costs, contrasting with Jev's proprietary model.
Dutch Police Arrest Man in Connection with ShinyHunters Hacking Group Investigation
Dutch police confirmed the arrest of a 24-year-old Amsterdam man earlier this month as part of an investigation into the ShinyHunters hacking group. The suspect, identified as Pepijn van der Stap, was previously arrested and sentenced for hacking and blackmailing multiple companies. This arrest is significant as it links a known individual to a prominent hacking group responsible for numerous data breaches.
Meta Releases Muse Spark Open, an 816B Parameter AI Model Optimized for Apple Silicon
Meta has launched Muse Spark Open, an 816-billion-parameter open-weight AI model with 42 billion active parameters, which it states is the most capable US open-weight model to date. The model, designed for coding and agentic work, is optimized to run locally on Apple M5 Ultra-equipped Mac Studios, requiring 1TB of RAM across two machines. This collaboration between Meta and Apple allows developers to run the model on desktops, offering security and cost benefits by avoiding cloud processing.
Microsoft Unifies Copilot into Single App with New Home, Code, and Autopilot Tabs
Microsoft has launched a redesigned Copilot app, consolidating AI chat, coding capabilities, and the rebranded Autopilot AI assistant into a single interface. This update aims to provide a comprehensive AI tool for knowledge workers and enterprise users, integrating with Office applications and offering a unified experience for previously fragmented AI tools.
Bitget crypto exchange reports $351.6 million stolen from hot and warm wallets
Cryptocurrency exchange Bitget announced that hackers stole $351.6 million from its hot and warm wallets. The company has suspended withdrawals and is investigating the incident, stating its User Protection Fund will cover all losses.
Google fined over €400m by Irish DPC for manipulating location data consent
Google received a fine exceeding €400 million from Ireland's Data Protection Commission (DPC) for manipulating users into agreeing to location data tracking. The DPC's six-year inquiry found Google lacked a valid legal basis for processing location data, which could reveal sensitive personal information.
Judge Rules Pentagon's Blacklisting of Anthropic as Supply Chain Risk Illegal
A San Francisco federal judge ruled that the Pentagon's designation of AI company Anthropic as a supply chain risk was illegal, citing a violation of the First Amendment. U.S. District Judge Rita Lin found the Department of Defense's actions were not based on an "articulable basis" and constituted "unlawful retaliation." This decision removes a barrier for Anthropic, potentially allowing defense contractors to use its technology.
Rising Memory Prices Hit Budget Smartphones Hard, Driving Market Contraction
Increased memory costs are causing a significant decline in budget smartphone shipments globally. Devices priced under $400 will see shipments drop by over 22% this year as manufacturing costs rise. This contraction could affect company dynamics, potentially benefiting Apple and Samsung.
WhatsApp Enhances Account Security with Stronger 2FA and Multiple Passkeys
WhatsApp has updated its account security features, allowing users to set alphanumeric passwords with special characters for two-step verification, replacing the previous six-digit PINs. The platform also introduced support for adding multiple passkeys to a single account, useful for users across iOS and Android devices, and added more context for calls from unknown numbers on Android.
SpaceX Reports Doubled Revenue Driven by AI Compute Deals and Starlink Growth
SpaceX reported a 92% increase in revenue to $7.8 billion in Q2 2026, largely due to growth in its Starlink satellite internet service and new agreements to rent out computing power to companies like Anthropic and Google. Despite this revenue growth, the company's shares fell after its first public earnings report due to higher-than-expected capital expenditures, primarily for AI infrastructure.
TikTok settles DOJ children's privacy lawsuit for $400 million
TikTok and its parent company, ByteDance, have agreed to pay $400 million to settle a lawsuit filed by the U.S. Department of Justice (DOJ) in 2024. The lawsuit alleged violations of the Children's Online Privacy Protection Act (COPPA) by collecting personal information from underage users without parental consent. The settlement includes new age-related controls and parental oversight measures.
Model Context Protocol (MCP) 2026-07-28 Specification Released, Adopting Stateless Core
The Model Context Protocol (MCP) has released its 2026-07-28 specification, transitioning from a bidirectional stateful protocol to a request/response stateless core. This update, the largest revision since its launch, aims to improve reliability and scalability for MCP servers, addressing a highly requested developer feature. Major SDKs, including TypeScript, Python, and C#, have been updated to support the new specification.
Cyberattack on CEVA Logistics Exposes European Steam Hardware Customer Data
A cyberattack on CEVA Logistics, Valve's European shipping partner, between July 29 and August 1, 2026, compromised personal data of Steam hardware customers in Europe. The breach exposed names, addresses, phone numbers, email addresses, and product details, leading Valve to warn customers about potential phishing attempts. This incident highlights supply chain vulnerabilities and impacts multiple retailers relying on CEVA Logistics.
Dependabot introduces default three-day cooldown for version updates
Dependabot now includes a default three-day cooldown before opening version update pull requests. This change aims to reduce the risk of merging compromised versions immediately after their release, enhancing supply chain security for developers.