Cisco's Talos group has released critical security updates for ClamAV, a widely used open-source antivirus engine integrated into mail gateways and endpoint security tools. The patches address seven distinct vulnerabilities found in versions 1.5.3 and 1.4.5 of the software. Several of these flaws have existed within the codebase for nearly two decades, highlighting long-standing risks in legacy parsing logic.

Source

Z.ai has released ZCode, a free desktop application designed as an "Agentic Development Environment" to compete with established AI coding tools like Cursor and GitHub Copilot. Unlike traditional editors that use AI sidebars, ZCode is built around an autonomous agent that plans, executes, and iterates on complex software tasks across entire repositories. The application is available for macOS, Windows, and Linux, and it uniquely allows developers to monitor and steer long-running tasks via mobile messaging apps like Telegram and WeChat.

Source

Microsoft researchers recently discovered that upgrading to newer AI models like Claude Sonnet 5 can lead to unexpected financial and technical regressions. Although the newer model offers a 33% lower price per token, it consumed up to 12 times more tokens than its predecessor during architecture and design tasks. This increased consumption often negated the per-token discount, resulting in significantly higher total costs for specific workloads.

Source

Microsoft Intune now allows administrators to manage security settings for Microsoft Defender for Endpoint on devices that are not fully enrolled in Intune. This capability extends endpoint security management to various platforms, including Windows, Windows Server, macOS, and Linux distributions. The solution works by creating a synthetic device identity in Microsoft Entra ID for devices that lack a traditional management presence.

Source

Memory prices for DRAM and NAND Flash are projected to continue rising in the third quarter of 2026, though at a slower pace than previous quarters. TrendForce forecasts conventional DRAM contract prices to increase by 13% to 18% quarter-over-quarter, while NAND Flash prices are expected to rise by 10% to 15%. This moderation is primarily driven by consumer electronics manufacturers reaching their affordability limits rather than an improvement in the overall supply.

Source

Alibaba Cloud researchers have introduced SkillWeaver, a research framework that routes AI agent subtasks to relevant tools rather than loading an entire tool library into every prompt. The framework operates in three stages—Decompose, Retrieve, and Compose—breaking complex queries into atomic sub-tasks, retrieving candidate tools via a FAISS-backed embedding index, and assembling a directed acyclic graph for ordered or parallel execution. A key innovation called Skill-Aware Decomposition (SAD) uses an iterative feedback loop, feeding retrieved tool hints back into the LLM to refine task breakdowns so vocabulary and granularity align with actual available skills.

Source

Mistral CEO Arthur Mensch is cautioning businesses against relying on proprietary AI models, warning that such dependence gives AI labs a front-row seat to their internal business processes. He argues that companies selling closed models are accumulating customer data and have a track record of using that information to compete against their own successful clients. Instead, Mensch advises organizations to store data in open systems, establish their own access rules, and develop custom training models to maintain control over their growth.

Source

Microsoft has released KB5095189, a cumulative update targeting the Out-of-Box Experience (OOBE) for Windows 11 versions 24H2 and 25H2. The OOBE is the guided setup sequence users encounter when configuring a new or freshly reset device, covering region selection, account configuration, privacy settings, and network access. Unlike standard cumulative updates that patch broader OS functionality, this update is scoped exclusively to the Windows OOBE process and does not touch core operating system components.

Source

Microsoft has resolved a year-old bug in Windows 11 24H2 and 25H2 that caused major shell components to break on provisioned enterprise PCs. The issue affected XAML-dependent elements such as the Start menu, Taskbar, File Explorer, Search, and Settings, rendering the devices practically unusable despite the system technically booting. The problem occurred when Windows updates were installed before the first user logon on persistent OS installations or during every logon in non-persistent environments like virtual desktop infrastructure.

Source

Microsoft has rolled out the Quick Parts feature to the New Outlook for Windows, bringing a popular capability from Outlook Classic. This feature allows users to save snippets of text, such as frequently used phrases or directions, and reuse them in future emails. While the rollout began in February 2026, it became widely available to all users by the first week of July 2026.

Source

The `CapabilityAccessManager.db-wal` file in Windows 11 is experiencing a bug that causes it to grow uncontrollably, consuming up to 500GB of system drive space. This database file logs app permissions for privacy controls like camera and microphone access, but it is silently filling up storage for affected users. The issue is difficult to diagnose because Windows Storage settings only show the bloat under generic "System & reserved" categories without identifying the specific file.

Source

Developers frequently utilize multiple coding agents to handle different programming tasks. Tools like Claude Code, Codex, and Cursor are often kept close at hand for various development needs. However, each of these tools operates with its own unique command line and credential handling methods.

Source

Microsoft is proposing a redesigned flyout for the PowerToys Awake utility to provide faster controls and a more flexible user experience. Awake is a tool within the official PowerToys suite that allows advanced Windows users to prevent their PC from going to sleep without altering core system power settings. The new design concept aims to replace the basic tray menu with a more capable interface featuring one-click modes and customizable timers.

Source

Microsoft has resolved a serious Windows Shell bug that could break core operating system components, including the Start menu, Search, Settings, the Taskbar, and File Explorer. The fix is included in KB5095093, the June 2026 preview update for Windows 11. This update also addresses a separate storage bug that could consume several gigabytes of disk space.

Source

Displaying a verified brand logo next to emails in recipient inboxes has traditionally required organizations to engage two separate vendors. One partner handles DMARC and BIMI configuration, while a trusted Certificate Authority (CA) issues the Mark Certificate that verifies logo ownership. This dual-vendor approach forces security and branding teams to source and coordinate with multiple trusted parties, creating unnecessary project delays.

Source

Nvidia's next-generation Kyber rack-scale AI system, designed to house 144 Rubin Ultra chips, has been delayed by more than a year to 2028. The setback stems from manufacturing difficulties with a complex 78-layer printed circuit board (PCB) midplane that connects the electronic modules within the system. This specialized board is highly prone to defects, pushing the boundaries of what is currently physically possible for semiconductor manufacturing partners.

Source

Microsoft Purview Data Loss Prevention (DLP) now offers a move to quarantine action for policy rules scoped to SharePoint Online and OneDrive for Business. Instead of simply blocking access to a file that violates a policy, the system automatically moves the file to a secure SharePoint site for investigation. A text-based "tombstone file" replaces the original file to inform users, including external recipients, that the content has been quarantined.

Source

LLM coding agents increasingly rely on third-party agent skills from public marketplaces, which execute with the agent's privileges and create a software supply-chain attack surface. A malicious skill can steal credentials, exfiltrate source code, or install backdoors. Existing defenses use static skill scanners based on pattern matching or LLM-as-judge analysis, but it remains unclear whether they withstand adaptive evasions.

Source

Linus Torvalds has released the second release candidate for Linux 7.2, describing the update as very normal and comparable in size to recent kernel releases. About half of the changes involve driver updates, while the remaining patches focus on file systems, networking, and core kernel components. The smooth progression suggests the final kernel will likely be released on schedule without the need for an additional eighth release candidate.

Source