Cybersecurity
A Shared Certificate Is What Lets Qilin In
Qilin ransomware is entering through PAN-OS GlobalProtect. The flaw only fires when one certificate is shared between two features, so your version list cannot answer it.
All news
Decisions
The Break-In Predates the Patch by Eight Weeks
Estee Lauder was breached on 9 August 2025 and determined it on 19 June 2026. Oracle's fix landed 56 days after the intrusion. Why patching was never the variable.
Cybersecurity
The Attacker Was a Vendor Running an Evaluation
Hugging Face logged 17,000 attacker actions and named no adversary. Five days later OpenAI said the agent was its own model under test. What that changes.
Capital
A Robot Maker Sold 34,000 Units Before Shipping
Humanoid raised 152 million dollars at a 1.35 billion dollar valuation. Its two industrial investors are also two of its customers. What that means for a buyer.
Cybersecurity
Three Days to Patch the AI Builder Nobody Logged
CISA added Langflow flaw CVE-2026-0770 on 21 July 2026: CVSS 9.8, unauthenticated code execution as root. Why this is an inventory problem in patch clothing.
Energy
Spain Wrote the Rule That Skips the Grid Queue
Ember found 25 GW of wind and solar can share existing EU hydropower connections. Spain and Portugal already let hybrid projects skip the queue.
AI Policy
Google Built a Bug Hunter It Will Not Sell You
Google DeepMind says Gemini 3.5 Flash Cyber found 55 unique confirmed issues in the V8 engine against 47 for the shipping model, then restricted it to governments and trusted partners. European firms cannot buy it at any budget, which turns access terms into a procurement question.
Gaming
Unity 7 Ships Without the Migration You Budgeted
Unity says Unity 7 continues the Unity 6 architecture and needs zero rebuilding, with beta in December 2026. Compatibility is now the headline feature, and that tells you what it cost last time.
Digital Sovereignty
Three Tiers of Sovereign AI, One Real Independence
Microsoft committed a multibillion dollar sum to Mistral's European compute on 21 July 2026 and took no new equity. The deal ships three deployment tiers, and only one of them stands alone.
Energy
The Megawatt You Booked Is Not the Compute You Get
Hut 8 redesigned one Beacon Point data hall from 224 to 352 megawatts inside the same grid connection. Capacity planned in megawatts is planned in a unit that drifts.
AI Policy
A Court Just Priced a Pirated Book at 3,000 Dollars
On 20 July 2026 a federal judge gave final approval to Anthropic's 1.5 billion dollar copyright settlement: 3,000 dollars per work across roughly 500,000 works. Training data provenance now has a published price.
AI Policy
Twenty-Seven Ministers Named, No Tech Secretary
Twenty-seven ministerial appointments were approved on 20 July 2026 and not one of them runs a technology department. DSIT is gone, and the AI Security Institute, the Sovereign AI Fund, UKRI and the Government Digital Service now sit inside a business department.
Page 108 / 142
The Operator Brief
One considered note on infrastructure, governance, and measurement, most mornings. No theory.