ServiceNow is expanding Autonomous Security with AI Specialists that can investigate and remediate security issues with limited human intervention. The new framework unifies six security areas, including vulnerability management, identity governance, incident response, and compliance, within the ServiceNow AI Control Tower.

Source

Microsoft is pushing the new OneDrive Photos app onto Windows 11 enterprise PCs, including Intune-managed devices, even though it only supports personal Microsoft accounts. Removing its shortcut is temporary because the app returns with OneDrive updates, leaving administrators with an ongoing cleanup problem.

Source

A multi-wave campaign is disguising ConnectWise ScreenConnect as Adobe and Zoom updates, using spear-phishing emails and fake document portals to install persistent remote access on Windows systems. The SMOKE#SCREEN operation uses anti-analysis checks, security-control tampering, and multiple attacker-controlled relay servers to make legitimate RMM software blend into enterprise environments.

Source

A fast-moving Keyv-linked npm worm has spread far beyond its original namespaces, poisoning hundreds of package names while stealing credentials from developer and CI environments. Its repository payload also uses Claude Code and VS Code project hooks to trigger when developers open or trust affected workspaces.

Source

Cybercriminals have shifted from ClickFix lures to cloned GitHub repositories that impersonate popular AI tools and developer resources. The campaign uses SmartLoader to hide an infostealer capable of stealing API keys, cloud credentials, browser secrets, and CI/CD access tokens.

Source

Uptime Kuma 2.5.0 delays npm dependency updates for 14 days, reducing the chance that a hijacked package reaches deployments before it is detected and removed. The release also adds direct NTP monitoring, rootless Docker support, and longer monitoring intervals.

Source

DOUBLECUP is using fake CRM pages and ClickFix instructions to hide malware inside PNG files cached by browsers. The loader delivers CountLoader or the newly documented DeviceManager RAT, which decrypts payloads in memory and can use blockchain-resolved command-and-control infrastructure.

Source

Microsoft is extending its Windows 11 modernization effort beyond consumer-facing apps and into long-standing administrative tools. Microsoft executive Marcus Ash confirmed that Registry Editor and other utilities are being evaluated for WinUI 3 updates, with compatibility for established administrator workflows remaining a central challenge.

Source

Red Hat has launched asago, an open-source project designed to convert corporate and regulatory AI policies into production controls. The workflow connects risk mapping, testing, mitigation, deployment, and auditing, with the goal of reducing governance work from months to days.

Source

Cloudflare’s new CI SDK lets platforms run build, test, and deployment pipelines as durable Workflows instead of managing separate queues, consumers, and state. The TypeScript-based pipelines can trigger directly from Artifacts repository pushes, run checks in isolated environments, and use an AI agent to create fixes when a build fails.

Source

Cloudflare is launching Cloudflare Agents with agent-specific observability rather than treating AI workloads like ordinary applications. The new dashboard traces model calls, tool use, subagents, approvals, token consumption, and underlying Workers activity, while session replay shows the context behind each decision.

Source

Cloudflare Wallets is moving AI agents closer to autonomous online purchases. The new service lets account owners create agent-controlled Virtual Wallets with spending caps, allow lists, and transaction limits, while Cloudflare Wallet handles provide a persistent identity for machine-driven transactions.

Source

Microsoft’s July 2026 Windows updates add passkeys as the default phishing-resistant authentication method in Microsoft Entra ID, free Arc-enabled hotpatching for Windows Server 2025, and more resilient remote desktop networking. The optional Windows 11 preview also improves virtualization networking, Secure Boot certificate deployment, Voice Access, Widgets, and peripheral fingerprint sign-in.

Source

A new Azure operations assistant demonstrates a safer pattern for agentic IT automation: read-only diagnostics run immediately, while incident creation remains pending until the authenticated requester explicitly confirms it. The reference implementation also exposes a production concern many AI demos hide—its approval state is in memory and cannot safely scale beyond one Container Apps replica.

Source

OpenAI is challenging Apple’s trade-secrets lawsuit, saying Apple’s lawyers contacted the wrong person, misrepresented the follow-up, and waited five months before filing. It also argues that Apple’s own offboarding failures left former employees with access to confidential files.

Source

Palantir CEO Alex Karp is warning enterprises that some AI labs could absorb their data, expertise, and intellectual property while building competing businesses. He made the unusually sharp “Marxist” comparison as Palantir reported $1.9 billion in second-quarter revenue and $1.1 billion in profit.

Source

AI-powered security tools are turning vulnerability discovery into a flood, leaving security teams with more reports than they can validate, prioritize, and patch. The result is a growing need for continuous, risk-based vulnerability management rather than periodic patch cycles.

Source

AI data centers could require the annual power consumption of India and the drinking water use of the United States by 2030, according to Christophe Beck, CEO of Eolab, a global water-technology company that develops cooling and water-reuse systems for data centers and other industries. Yet Beck argues that newer direct-to-chip cooling systems can recirculate treated water in a closed loop, potentially reducing a facility’s incremental direct water use to roughly that of a car wash.

Source

Alibaba’s Quen 3.8 Max is a 2.4-trillion-parameter open-weight model that reportedly matches leading closed-source AI systems on several benchmarks. Its ability to reproduce research, test its own improvements, and complete silicon-design workflows highlights both the practical value and geopolitical significance of Chinese open-source AI.

Source