CISA has added two critical vulnerabilities affecting FortiSandbox to its Known Exploited Vulnerabilities catalog following reports of active exploitation. The flaws, identified as CVE-2026-39808 and CVE-2026-25089, allow unauthenticated attackers to execute arbitrary operating system commands. These vulnerabilities impact the FortiSandbox threat detection platform, which organizations use to analyze suspicious files and URLs in isolated environments.

Source

Amazon Web Services experienced a significant service disruption on July 16, 2026, primarily affecting the CloudFront content delivery network. The outage specifically targeted the VPC Origins feature, which allows private back-end resources to connect to the public edge without exposure to the open internet. Users attempting to access affected applications encountered widespread 5xx server errors and generic connectivity failure messages.

Source

Zoom has issued an urgent security advisory regarding a critical vulnerability in its Windows-based applications that could lead to full account hijacking. Tracked as CVE-2026-53412, the flaw carries a near-maximum CVSS score of 9.8 due to its high impact and ease of exploitation. The security hole stems from improper input validation, which allows an unauthenticated attacker to gain unauthorized access via the network.

Source

Nvidia is transitioning from a GPU manufacturer to a comprehensive AI infrastructure provider by launching the Vera CPU platform. This new processor is specifically engineered to handle agentic AI systems and intensive data center workloads. By moving beyond graphics accelerators, the company aims to capture a larger share of the traditional server market currently held by x86 competitors.

Source

Nokia and Nvidia have announced a commercial AI-native radio access network (AI-RAN) platform designed to significantly increase data transmission capacity. The solution integrates Nokia’s AirScale base-station architecture with Nvidia’s accelerated computing silicon and CUDA-based AI libraries. This partnership aims to transform traditional wireless networks into software-defined environments capable of processing data closer to the end user.

Source

A recent configuration update by Google Cloud triggered a significant outage for Google Cloud VMware Engine (GCVE) customers utilizing stretched clusters. The disruption began on July 14 and lasted nearly twelve hours, primarily impacting inter-zone network connectivity across multiple global regions. While virtual machines remained operational, the underlying network failure prevented synchronization between availability zones and isolated critical workloads.

Source

A newly discovered Rust-based remote access trojan named LabubaRAT is targeting Windows environments by impersonating legitimate NVIDIA system components. The malware uses the filename nvidia-sysruntime.exe and includes NVIDIA-themed metadata to evade detection by administrators and security tools. This implant functions as a comprehensive framework for persistent access, allowing attackers to profile hosts and identify installed security products.

Source

Microsoft has released the July 2026 Patch Tuesday cumulative updates for Windows 11 versions 23H2 through 25H2. These mandatory security patches address 571 vulnerabilities, including three zero-day exploits currently being tracked by researchers. Administrators can deploy KB5101650 for the latest versions or KB5099414 for 23H2 via Windows Update and the Microsoft Update Catalog.

Source

Researchers at Peking University have developed an all-optical interconnect system that links standard electronic chips to significantly accelerate artificial intelligence processing. This breakthrough utilizes specialized hardware to replace traditional electrical connections between chips with high-speed optical "joints." By integrating these optical links with custom algorithms, the system achieves AI inference speeds up to 100 times faster than conventional methods.

Source

RDP Multipath is a feature for Azure Virtual Desktop and Windows 365 Cloud PCs that keeps multiple network transport paths active simultaneously and automatically switches them when one degrades. Microsoft has made RDP Multipath with redundant TCP support generally available for both services. The feature activates automatically when the prerequisites are met, requiring no server-side configuration. This article explains how the feature works, what to prepare, and what to verify.

Source

Cybersecurity agencies from the United States and eight allied nations have issued a joint advisory regarding Russian state-sponsored hacking activity. The warning identifies hackers from the Russian Federal Security Service (FSB) who are actively targeting vulnerable and poorly configured routers. These actors focus on infiltrating critical infrastructure sectors, including energy, healthcare, and financial services, to facilitate long-term espionage and sabotage.

Source

Deutsche Telekom is undergoing a fundamental transformation to become an AI-native telecommunications provider by embedding generative AI into its core infrastructure. The company has moved beyond simple productivity tools, instead redesigning its entire operating model to automate decision-making and service delivery. This strategy involves a massive scale-up of AI tool usage among employees and the integration of advanced models into daily customer interactions.

Source

Citrix has updated its NetScaler platform to include Model Context Protocol (MCP) Gateway functionality for enterprise environments. The Model Context Protocol is an emerging standard that allows AI agents to connect seamlessly to various applications and data sources. This new gateway provides a centralized entry point to manage how AI agents interact with backend servers and sensitive systems of record.

Source