Arch Linux has temporarily frozen package adoptions in the Arch User Repository (AUR) after attackers used maintainer takeovers and orphaned packages to push malicious updates. The campaign reportedly affects dozens of packages and delivers a Linux infostealer with remote access and SSH-worm capabilities.

Source

Microsoft’s FY26 customer results point to a sharp shift from AI pilots to production deployments embedded in business operations. Across healthcare, finance, manufacturing, retail, and professional services, organizations are using Copilot, Microsoft Foundry, Azure OpenAI Service, Copilot Studio, and Agent 365 to build governed AI systems that automate workflows, support employees, and deliver measurable business outcomes.

Source

Attackers are using compromised hotel and conference-center Wi-Fi gateways to redirect guests to fake browser or operating-system updates. The campaign delivers CornFlake, a surveillance-focused remote access trojan attributed by Microsoft to Storm-2945, a sub-cluster of Russia-linked Midnight Blizzard.

Source

OpenAI has officially named Astra, its upcoming long-running AI model family. Unlike chatbots designed for short requests, Astra is intended to coordinate multiple AI agents over hours or days to complete complex projects such as research, analysis, software development, and other multistep business workflows. OpenAI is testing whether the system can avoid errors, keep work on track, and deliver reliable results as tasks become longer and more complicated.

Source

Snehal Antani, CEO of Horizon3.ai, a cybersecurity firm that uses AI to autonomously probe organizations for real-world vulnerabilities, argues that claims of AI models hacking companies on their own are overstated. Currently, these systems perform well in controlled cyber range tests but face challenges against defended and deceptive production networks. Their limitations include greedy decision-making, poor adaptation in protected environments, overdependence on limited training data, and a tendency to interact with suspicious decoys even after recognizing them as traps. Nonetheless, the threat continues to grow as human hackers have access to virtually unlimited "AI interns" for uncovering vulnerabilities. Additionally, the rapid rise of vibe-coded applications and AI agents is expanding the pool of insecure systems vulnerable to attack.

Source

Terraform AzureRM provider 5.0 is a generally available major release that changes Azure Resource Provider registration, adds optional Azure preflight validation, and removes previously deprecated configuration surfaces. The upgrade can reduce unexpected subscription changes, but it can also break existing configurations and modules. Before adopting it, test a pinned version against a non-production Azure subscription and review the plan output.

Source

Windows 11 Insider devices must move to a build with renewed Windows Insider flight certificates before the current certificate expires on August 11, 2026. The July 31 Beta and Experimental releases also expand Taskbar customization and refine battery behavior in Experimental.

Source

DeepSeek V4 Flash “0731” raises its Artificial Analysis Intelligence Index score to 50, just one point behind OpenAI’s GPT-5.6 Luna. The open-weight model reportedly delivers comparable task performance at about 60% lower cost, even after OpenAI cut Luna’s API prices by 80%.

Source

Microsoft is expanding its Windows 11 quality push with a four-part roadmap covering 8GB memory optimization, faster PC setup, Family features, and more natural voice input. The memory work is intended to keep Windows 11 responsive on lower-memory systems, although Microsoft has not published benchmarks or a release schedule.

Source

Thinking Machines has released Inkling Small, a 276-billion-parameter open-weights model that activates only 12 billion parameters per token. The smaller Mixture-of-Experts model nearly matches its 975-billion-parameter sibling while exceeding it on several reasoning and coding benchmarks.

Source

Microsoft Teams’ July 2026 update adds a centralized Meeting Recaps app, clearer approval workflows for apps and agents, and several Teams Rooms management improvements. Microsoft has also stopped plans for inline search in the compose box, removing a feature previously scheduled for September.

Source

Moonshot AI is using roughly 20,000 Nvidia chips supplied through Alibaba to run its Kimi models, revealing the scale of computing behind China’s latest frontier AI effort. The arrangement also highlights China’s continued dependence on Western semiconductor hardware despite efforts to build a domestic alternative.

Source

Oracle is bringing Google Gemini into Oracle AI Agent Studio, Fusion Cloud Applications, and NetSuite, giving enterprise customers another model family for building AI agents and automating business workflows. The integration adds model choice inside Oracle’s business software, including lower-cost high-volume processing and multimodal tasks such as video and presentation creation.

Source

Microsoft has acknowledged that Windows 10’s approaching end of support was the main force behind recent Windows 11 PC sales, not the AI PC boom. With Windows 10 support extended through October 2027 and around 30% of PCs still running it, Microsoft and hardware makers face a slower upgrade cycle.

Source

Microsoft has made native CIS Benchmark auditing generally available for Linux virtual machines, eliminating the need for separate compliance tools. Azure Machine Configuration now continuously checks Azure and Azure Arc-enabled Linux systems against CIS-certified benchmarks and surfaces the results through Azure management services.

Source

OpenAI has endorsed the EU’s voluntary GPAI Code of Practice and its transparency code for AI-generated content, while detailing how its internal governance frameworks map to those requirements. The company is also expanding provenance measures beyond images as European AI Act implementation advances.

Source

DeepSeek has released the DeepSeek-V4-Flash API in public beta with a post-trained build that reportedly outperforms the higher-tier V4-Pro-Preview on key coding-agent benchmarks. The API keeps the same architecture and parameter count while adding native Responses API support and lower-cost access for developers.

Source

Google says AI-assisted security tools helped Chrome 149 and Chrome 150 fix 1,072 vulnerabilities—more than the 1,036 fixed across the previous 23 stable releases combined. The company is now using AI across Chrome’s vulnerability workflow and plans more frequent security updates, including a pilot for twice-weekly releases.

Source

Elastic says its expanded collaboration with OpenAI can reduce AI input-token consumption by up to 75% while increasing benchmark accuracy from 60% to 92%. The partnership uses Elasticsearch as a governed context layer for AI agents working with unstructured enterprise data, including documents, tickets, logs, metrics, traces, and security alerts.

Source