Etched’s $1B Sohu Backlog Turns AI Inference Into the Next Chip Fight
Etched says it has raised $800 million, signed more than $1 billion in customer contracts, and started production of its Sohu-based inference racks. The startup’s transformer-specialized chip is a serious bet that AI’s next hardware fight will be won on serving models, not just training them.
UK CMA Pushes Apple and Google Toward Outside App Payments
The UK Competition and Markets Authority is consulting on steering rules that would let app developers point users to payment options outside Apple’s App Store and Google Play. The proposal gives developers a July deadline to weigh in and could turn app-store payment links into the UK’s next major platform-policy fight.
Apple’s Early Security Updates Show AI Is Shrinking Patch Windows
Apple pushed iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2 out before the broader 26.6 release cycle, citing AI-driven security concerns. The update is a practical reminder that patch timing now matters as much as patch content.
Daktronics Controller Flaws Put Public Digital Signs on Patch Watch
CISA is warning that flaws in Daktronics DMP-5000, VFC-DMP-5000, and DMP-8000 controller firmware could expose public display systems to root-level compromise. Operators of billboards, highway signs, venues, hospitals, and other connected displays should patch firmware, change default credentials, and verify that controllers are not reachable from the open internet.
Cursor’s iOS App Moves AI Coding Agents Off the Desktop
Cursor for iOS lets paid users launch cloud coding agents, steer desktop agents remotely, review diffs, and merge pull requests from a phone. The useful question for teams is not whether coding can happen on mobile, but where review, permissions, and production guardrails belong.
SimpleHelp Exploit Turns Remote Support Into a Credential Theft Pipeline
Attackers are exploiting CVE-2026-48558 in SimpleHelp to turn remote support access into a malware delivery path. Teams should patch, hunt for forged technician sessions, and rotate credentials exposed on managed endpoints.
Booz Allen Gives OpenAI a Government AI Deployment Channel
Booz Allen and OpenAI are partnering to deploy frontier AI for defense, intelligence, critical infrastructure, and commercial operations. The deal shows how OpenAI’s government push is moving from model access and pilots toward implementation through mission contractors.
AI Pentesting Is Finding Bugs Faster Than Teams Fix Them
Cobalt’s latest AI pentesting research shows security teams are testing AI apps more often, but serious LLM vulnerabilities still have the lowest fix rate of any category. The useful lesson is not to abandon automation, but to connect AI security tests to ownership, triage, and retesting.
Google Play Billing Changes Start June 30: What Android Developers Should Check
Google Play's lower service fees and expanded billing choice start June 30 in the US, UK, and EEA. Android developers should review install-date rules, billing fees, external-payment flows, subscription support, and reporting obligations before switching.
Oracle E-Business Suite Exploit Puts Payments Systems on Patch Watch
Attackers are exploiting CVE-2026-46817, a critical Oracle E-Business Suite flaw affecting Oracle Payments, while Shadowserver is tracking roughly 950 internet-facing EBS instances associated with exposure. Teams should verify May 2026 patches, review iPayment endpoint access, and check logs for suspicious file-transmission activity.