Apple is exploring a partnership with PrismML, a Caltech spinout, to integrate extreme model-compression technology into future iPhone hardware. The startup utilizes ultra-low-bit weight architectures, such as 1-bit and ternary representations, to drastically reduce the memory footprint of large language models. This mathematical approach allows a 27-billion-parameter model like Alibaba’s Qwen 3.6 to shrink from 54 GB to under 4 GB, making it compatible with the 8 GB of RAM found in current Pro-tier iPhones.

Source

New York Governor Kathy Hochul has signed an executive order establishing a one-year moratorium on the construction of large-scale data centers. This first-in-the-nation freeze specifically targets "hyperscale" facilities, which are defined as projects requiring 50 megawatts of power or more. The state will halt the issuance of new discretionary environmental permits while officials develop a comprehensive regulatory framework to manage the industry's growth.

Source

Nvidia is transitioning from a GPU manufacturer to a comprehensive AI infrastructure provider by launching the Vera CPU platform. This new processor is specifically engineered to handle agentic AI systems and intensive data center workloads. By moving beyond graphics accelerators, the company aims to capture a larger share of the traditional server market currently held by x86 competitors.

Source

Windows Server Insider Build 29621 introduces Trusted Launch for Generation 2 virtual machines to bolster security during the boot process. This feature automatically enables Secure Boot and provisions a virtual Trusted Platform Module (vTPM) to defend against firmware-level attacks. The vTPM state is specifically protected at rest, ensuring that sensitive cryptographic data remains secure even when the virtual machine is not running.

Source

Microsoft has revoked 11 legacy, Microsoft-signed UEFI shim bootloaders that allowed attackers to bypass Secure Boot protections. These outdated binaries, primarily version 0.9 and earlier, remained trusted by the "Microsoft Corporation UEFI CA 2011" certificate despite containing long-known vulnerabilities. By utilizing a "Bring Your Own Vulnerable Bootloader" (BYOVB) attack, threat actors could execute unauthorized code during the early boot phase before the operating system initializes.

Source

George Lucas has publicly supported the integration of artificial intelligence within the creative industry, describing the technology as an essential tool for simplifying complex production workflows. The creator of Star Wars calls AI skeptics Luddites by comparing current resistance to the historical transition from horse-drawn carriages to automobiles. This perspective frames the shift toward automated tools not as a choice, but as an unavoidable progression of technological development.

Source

Nokia and Nvidia have announced a commercial AI-native radio access network (AI-RAN) platform designed to significantly increase data transmission capacity. The solution integrates Nokia’s AirScale base-station architecture with Nvidia’s accelerated computing silicon and CUDA-based AI libraries. This partnership aims to transform traditional wireless networks into software-defined environments capable of processing data closer to the end user.

Source

Apple has released the iOS 27 public beta, introducing a rebuilt Siri AI that functions as a dedicated chatbot app powered by Apple Intelligence. This update enables the assistant to leverage a semantic index of local data, including emails, messages, and photos, to provide personalized context for user queries. Unlike third-party chatbots, the new Siri can execute complex in-app actions and process multiple simultaneous commands while maintaining a straightforward, task-oriented tone.

Source

ClickFix has evolved from a simple social engineering trick into a sophisticated Malware-as-a-Service ecosystem that bypasses traditional antivirus defenses. The attack convinces users to manually execute malicious code by presenting fake CAPTCHAs, browser crashes, or software update errors. Victims are instructed to copy a hidden command and paste it directly into the Windows Run dialog or a terminal window, which triggers a payload via trusted system tools.

Source

The Cursor AI development environment contains a critical vulnerability on Windows that executes malicious code when a user opens a poisoned repository. The flaw stems from the IDE's search logic, which prioritizes the local workspace directory when looking for the Git binary. If an attacker places a malicious file named git.exe in the root of a repository, Cursor runs it automatically with the user's full privileges.

Source

Red Hat OpenShift 4.22 introduces a hardened foundation by migrating core components to a minimal Universal Base Image to reduce the attack surface. The platform now utilizes a zero-trust workload identity manager and SPIRE to replace static credentials with dynamic, cryptographic tokens. These architectural changes aim to automate compliance and minimize the manual effort required for risk mitigation across hybrid cloud environments.

Source

The release of Debian 12.15 marks the final point update for the "Bookworm" series as it transitions to long-term support. This milestone signifies the end of mainstream support for the native 32-bit x86 (i386) architecture within the Debian ecosystem. While Debian 12 will receive security maintenance until mid-2028, no further point releases are planned for this version.

Source

Microsoft’s July 2026 Patch Tuesday has set a new record by addressing 570 vulnerabilities, nearly tripling the volume of previous monthly releases. This massive surge is attributed to the implementation of a new AI-powered vulnerability discovery system designed to scan the Windows codebase for flaws. The release includes 60 critical vulnerabilities, primarily focusing on remote code execution and elevation of privilege issues across Windows, Office, and SharePoint.

Source

A security researcher has released a proof-of-concept exploit named LegacyHive that targets the Windows User Profile Service (ProfSvc). This vulnerability allows for local elevation of privileges by forcing the system-level service to load arbitrary registry hives. The exploit remains functional on all currently supported versions of Windows desktop and server, even after applying the July 2026 Patch Tuesday updates.

Source

KB5101650 et KB5099414 : les mises à jour Windows 11 de juillet 2026 sont là. Découvrez les nouveautés et attention au blocage sur certains PC Dell.

Le post Windows 11 KB5101650 : la mise à jour de juillet 2026 est là et elle est bloquée sur certains PC Dell a été publié sur IT-Connect.

Mardi 14 juillet 2026, Microsoft a publié la KB5099539 pour Windows 10. Correctif OLE Automation, durcissement TDI et RDP : ce que les admins doivent vérifier.

Le post Windows 10 KB5099539 : le point sur la mise à jour ESU de juillet 2026 a été publié sur IT-Connect.

Microsoft signe le plus gros lot de correctifs de son histoire, avec trois failles zero-day dont deux exploitées, et au total 570 vulnérabilités patchées.

Le post Microsoft dévoile son plus gros Patch Tuesday de l’histoire avec 570 failles et 3 zero-day a été publié sur IT-Connect.

Microsoft has launched its July 2026 security updates for Exchange Server, providing critical fixes for the Subscription Edition (SE) and legacy on-premises versions. The release addresses several high-severity vulnerabilities, including a critical spoofing flaw (CVE-2026-55008) with a CVSS score of 9.6 and a remote code execution bug. While the update for Exchange SE is publicly available, updates for Exchange 2016 and 2019 are restricted to organizations enrolled in the Period 2 Extended Security Update (ESU) program.

Source

A group of 26 former Meta employees has filed a federal lawsuit alleging the company used automated systems to identify workers for a massive workforce reduction. The plaintiffs claim that Meta relied on a suite of internal AI tools and productivity metrics to generate a termination list for a layoff affecting 10% of its staff. This legal action marks one of the first significant challenges against a major technology firm for using algorithmic decision-making in human resources.

Source