Breaking news and updates from the world of technology.
The coalition of dozens of companies will share open AI models and tools for cyber defense, arriving days after an OpenAI agent breached Hugging Face's systems in what OpenAI called an unprecedented incident.
GitHub's Dependabot now waits 72 hours before adopting new package versions, and PyPI blocks new file uploads to releases older than 14 days — both measures aimed at the wave of malicious package attacks that hit npm and PyPI over the past year.
A critical remote code execution vulnerability in Alibaba's Fastjson 1.x library, tracked as CVE-2026-16723, is being actively exploited against Spring Boot applications, and no official patch exists for the affected 1.x branch as of July 25, 2026.
An autonomous AI agent framework exploited two code-execution vulnerabilities in Hugging Face's data-processing pipeline, harvesting cloud credentials and moving laterally across internal clusters — the first major breach of an AI platform carried out by AI.
Two chained vulnerabilities dubbed wp2shell let unauthenticated attackers run arbitrary code on any default WordPress install. Patches are live and WordPress has pushed forced auto-updates, but in-the-wild exploitation is already confirmed.
Abbott Laboratories confirmed unauthorized access to internal Cancer Diagnostics systems after the ShinyHunters extortion gang claimed to have stolen over 30 million rows of customer data, including doctor-patient notes and Social Security numbers.
CVE-2026-58644, a critical SharePoint remote code execution bug with a 9.8 severity score, was weaponized as a zero-day. CISA gives federal agencies until July 19 to patch.
Coca-Cola's Fairlife subsidiary suspended US production after attackers gained unauthorized access to production systems in a ransomware attack. No group has claimed responsibility, and whether data was stolen remains unknown.
July 2026 Patch Tuesday is the largest in Microsoft history, addressing 570 vulnerabilities across Windows and its products — including two zero-days being actively exploited in the wild.
A Financial Times investigation, drawing on data from the Mobile Surveillance Monitor research project, found that actors linked to Iran exploited SS7 signaling weaknesses and commercial advertising databases to track US personnel and contractors across the Middle East.
A wire-level analysis found that Grok Build, xAI's coding CLI, ships a full git bundle of a developer's workspace to a Google Cloud Storage bucket in the background — including files the AI never read and .env secrets left unredacted, independent of the tool's training opt-out setting.
A working, 97%-stable privilege escalation and container escape exploit is now publicly available for CVE-2026-43499, a use-after-free flaw in the Linux kernel's real-time mutex subsystem that went undetected since 2011.