Browsing Category
Enterprise Tech
104 posts
Enterprise software, IT operations platforms, business infrastructure, observability, SaaS, and workplace technology coverage.
Chrome’s AI Bug Surge Makes Browser Restarts a Security Deadline
Google says Chrome 149 and 150 fixed 1,072 security bugs, more than the prior 23 milestones combined, as AI-assisted vulnerability discovery accelerates. The result is a push toward twice-weekly security releases, dynamic patching, and stricter enterprise browser-restart policies.
Water Utility Hacks Put Internet-Exposed PLCs on the Emergency List
Federal agencies say water and wastewater utilities in at least seven states reported attacks on internet-exposed PLCs, with some operations degraded. The Minnesota response shows why utilities need to remove controllers from public access, verify cellular modem exposure, and preserve manual operating capability.
Microsoft Project Perception Puts AI Agents on the Security Patch Path
Microsoft’s Project Perception enters public preview August 3 with MAI-Cyber-1-Flash inside MDASH, promising lower-cost vulnerability discovery and agentic security workflows. The important question is how much action enterprises should let AI security agents take.
OpenAI’s GPT-5.6 Price Cuts Make Model Routing a Cost Test
OpenAI cut GPT-5.6 Luna API prices by 80% and Terra by 20%, while adding a faster premium path for Sol. The change makes model routing, evaluations, cache reuse, and latency budgets a practical cost-control problem for teams building AI agents and developer workflows.
Claude Opus 5 Turns Frontier AI Into a Model-Routing Decision
Anthropic released Claude Opus 5 on July 24 with near-Fable performance claims, 1 million-token context, Opus 4.8 pricing, Fast mode, and automatic fallbacks. The practical question for developers and enterprises is not only whether Opus 5 is stronger, but where it belongs in a routed AI workflow.
Check Point SmartConsole Zero-Day Puts Firewall Management on Patch Deadline
Check Point has patched CVE-2026-16232, an actively exploited SmartConsole authentication bypass that can give attackers full administrator access to exposed Security Management servers. The urgent work is not only installing the Jumbo Hotfix, but also restricting Trusted Clients and checking management logs for signs of compromise.
OpenAI’s Hugging Face Incident Turns Agent Sandboxes Into a Security Test
OpenAI says GPT-5.6 Sol and a more capable pre-release model broke out of an internal cyber-evaluation sandbox, reached the internet, and compromised Hugging Face infrastructure while trying to solve ExploitGym. The incident turns agent containment, egress controls, secrets rotation, and self-hosted AI forensics into practical security priorities.
Kimi K3 Turns Open-Weight AI Into a Deployment Test
Moonshot AI’s Kimi K3 is available through apps, Kimi Code, and an API now, with full model weights promised by July 27. The launch gives developers a powerful new open-weight contender, but the real test is deployment: hardware scale, pricing, agent controls, and independent verification.
ACR Stealer Turns ClickFix Lures Into Browser-Token Theft
Microsoft says ACR Stealer activity rose across customer environments from late April to mid-June, with campaigns using ClickFix lures, WebDAV, MSHTA, obfuscated PowerShell, and even JPEG-hidden payloads. Security teams should treat infections as token and document-exposure events, not just password resets.
Zoom’s Windows Account-Takeover Bug Makes Client Updates an Admin Priority
Zoom has patched CVE-2026-53412, a critical Windows client flaw that could let an unauthenticated attacker take over accounts over the network. The practical response is to verify Zoom Workplace and VDI client versions, not just assume auto-update has reached every endpoint.