Windows 11 Insider Preview Build 29634.1000 brings a renewed flight certificate to the Experimental (Future Platforms) channel, and devices must install a build containing it before August 11, 2026. The release also completes the channel UI transition and adds on-device Voice Isolation for Voice Access.

Source

AWS Security Hub’s new MCP App brings exposure findings into Claude Desktop, allowing security teams to investigate attack paths and remediation options with natural-language queries. The preview runs locally with existing AWS credentials and keeps every operation read-only.

Source

Microsoft is expanding AI security testing beyond its own teams with the External Red Team Alliance (EXTRA), a global network of universities, independent researchers, and regional specialists. The initiative funds unrestricted safety research at 18 university labs across six continents and targets risks that can be missed by corporate testing alone.

Source

Microsoft’s MAI-Cyber-1-Flash is designed to handle most vulnerability-analysis work inside the MDASH multi-agent platform, while GPT-5.4 tackles the hardest cases. Microsoft says the combined system reaches 95.95% on CyberGym and costs about half as much as its previous configuration.

Source

Are you still googling to search for blue links? Seriously? How about chatting for answers? In this post, explain how the specialized 4sysops answer engine helps you find solutions to your IT problems. Unlike an old-fashioned Google search, the 4sysops answer engine has access not only to a single search engine, but to five different AI-optimized web search services. Additionally, you can perform semantic search in the 4sysops knowledge base, along with Microsoft, AWS, and Google Cloud knowledge bases via MCP, and an increasing number of specialized IT knowledge resources. Another new feature is that you can now select text in an article or the chatbot for follow-up prompts. Some features discussed in this article are exclusive to logged-in users, so consider applying for membership if you haven't already. I mentioned AI search in my previous post about the new topic filter features, but since then, I've added new functionality to search.

Source

AWS has introduced Task-Aware Knowledge Compression (TAKC), an open-source reference architecture that pre-compresses enterprise documents for specific jobs instead of retrieving only similar text at query time. The Bedrock-based design offers four compression levels, cutting context by up to 98.4% while targeting cross-document analysis and lower inference costs.

Source

Moonshot AI has released the weights for Kimi K3, allowing developers to download, fine-tune, and self-host the model instead of accessing it only through a hosted service. The 2.8-trillion-parameter AI model also offers a one-million-token context window for processing very large documents and codebases.

Source

AI is blurring job boundaries rather than simply automating existing tasks. OpenAI’s analysis of more than 800,000 U.S. ChatGPT messages found that 43.5% of occupation-specific AI use involves work associated with another profession, with the shift strongest in smaller businesses.

Source

Nvidia is expanding its strategic partnership with Ilya Sutskever’s Safe Superintelligence (SSI), giving the secretive AI lab access to its Vera Rubin GPU platform and enough capacity to increase computing resources by roughly tenfold. The deal also includes a substantial additional Nvidia investment, reportedly worth several billion dollars.

Source

Satya Nadella’s early bet on artificial intelligence transformed Microsoft into one of the technology industry’s AI leaders. Three years later, that strategy is becoming a liability as Microsoft struggles to balance its $190 billion infrastructure push with pressure on Microsoft 365, GitHub, and Azure.

Source

GitHub Copilot’s app goes beyond chat and code generation by coordinating multiple development tasks and helping maintain pull requests after they are opened. Its Agent Merge feature can respond to review feedback, address CI failures, and handle merge conflicts before a developer approves the final merge.

Source

AWS has released a Cloud Security Alliance (CSA) Compliance Guide that maps all 207 control objectives in the Cloud Controls Matrix (CCM) v4.1 to AWS services and implementation practices. The guide gives organizations pursuing or maintaining CSA STAR certification a practical way to plan controls and collect assessment evidence.

Source

Agentic AI is pushing AIOps beyond alert correlation: agents can now provision environments, detect configuration drift, and remediate incidents across VMware and AWS. The approach combines autonomous action with authority limits that require human approval for irreversible changes.

Source

Microsoft will open Project Perception to public preview on August 3, introducing an agentic security system designed to continuously discover, assess, and remediate threats across an organization’s digital estate. Its Cyber Stack combines security telemetry, shared context, multiple AI models, specialized agents, and automated actions while keeping human defenders in control.

Source

Microsoft has secured an extended stay in the ValueLicensing case while it asks the UK Supreme Court for permission to appeal. The £270 million dispute remains largely paused, but disclosure and confidentiality applications will continue toward a September hearing.

Source

DigiCert research shows a major gap between enterprise awareness of post-quantum cryptography and actual deployment. Although 85% of IT and security leaders expect quantum advances to break current encryption within a decade, only 7% have deployed quantum-safe certificates.

Source

Cruciferra is an underground crypter service helping multiple unrelated cybercrime groups deliver RATs and information stealers while evading Windows security tools. Its combination of vulnerable-driver abuse, Process Ghosting, privilege escalation, and highly variable encryption creates detection and forensic challenges for defenders.

Source

A working public proof of concept for Certighost (CVE-2026-54121) now gives attackers a practical route from an ordinary domain account to full Active Directory compromise. Microsoft patched the AD CS authorization flaw on July 14, but the exploit was published 10 days later.

Source

Google Threat Intelligence Group is rolling out a unified naming system for cyber threat actors, beginning with several dozen of the most active groups. The two-word cryptonyms combine a recognizable actor name with a suffix indicating its assessed origin or motivation.

Source