Investors sour on Big Tech's $740 billion AI infrastructure spend
Alphabet, Amazon and Meta reported negative free cash flow as chip stocks and the Nasdaq sold off Friday.
46
- Mentions · 7d11
- Mentions · 30d60
- All mentions91
- First seenAug 13, 2026
- Last mentioned2h ago
Timeline
91 articles · newest firstDoorDash says AI agents placed only several hundred orders
The company averages 3 million deliveries a day and still sees most orders through its own app.
28
Microsoft reports Azure revenue of $33.2 billion for July–September
The total is 48% above a year earlier and about $850 million over the $32.3 billion analysts expected.
36
PHP2Shell flaws exploited in the wild; OffSec ships free lab
CISA listed both flaws on October 26; fixed PHP builds are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
86
PHP2Shell flaws exploited in the wild; OffSec ships free lab
CISA listed both flaws on October 26; fixed PHP builds are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
86
PHP2Shell cleanup will lag exploitation; Token Security argues identity limits matter more than CVSS
Censys counted 32.5 million internet-facing PHP services on vulnerable versions a week after patching, and CISA added both flaws to its KEV list on October 26.
30
Amazon engineering leader says unused AI tooling is a finding
Terk Terkowitz urged engineers to document where current AI tools do not help and raise those limits with peers and managers.
18
Amazon may profit more than VCs from Anthropic’s planned IPO
Amazon’s convertible notes were valued at $97.9 billion as of June 30, capped at 12% of partially diluted shares.
64
PHP2Shell attempts preceded same-week patches for PHP, GitLab and Node.js
GitLab’s unauthenticated RCE is CVSS 10.0 back to version 7.0; LiteLLM 1.107.0 stole credentials and OpenCode keys may have leaked.
84
Anthropic files S-1 to list on Nasdaq under ticker ANT
The filing reports $16.3 billion in H1 2026 revenue, an 85% gross margin, and disputed cash and burn totals.
80
Researcher exploits PHP2Shell flaws, wins Bitcoin challenge and releases PoC
CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2, were fixed October 21; Amazon saw attempts from October 17.
84
SANS drops Infocon to green after coordinated PHP patches
No reliable public exploit is known, though firms claim private code and scanners report many attempts.
64
Public PHP2Shell exploit code used in failed Potassium botnet attempts
Sophos found scanning and failed attempts, not a confirmed compromise; PHP fixed the flaws on October 21.
78
PHP2Shell exploit attempts rise, but experts doubt they succeed
Amazon and others report scans since October 17, while researchers say public PoCs fail on typical PHP setups.
74
Attackers probed PHP2Shell flaws days before the October 21 patches
Amazon honeypots logged attempts against CVE-2026-109618 and CVE-2026-109619 from October 17; AWS later said exploitation was widespread.
84
Amazon says PHP2Shell exploitation began four days before patches
CVE-2026-109618 and CVE-2026-109619 allow remote code execution; Amazon now calls them broadly exploited.
91
Call of Duty: Modern Warfare 4 arrives on GeForce NOW
Ultimate members get RTX 5080-class ray tracing, and supported Fire TV Stick users can buy memberships through Amazon.
5
PHP2Shell flaws drew millions of exploit attempts, some before disclosure
Amazon saw a honeypot hit on October 17, four days before patches, and Cloudflare has since logged millions of attempts.
86
Amazon saw PHP2Shell exploitation on October 17, before disclosure
MadPot recorded attempts four days before CVE-2026-109618 and CVE-2026-109619 were disclosed, and Amazon says exploitation is now broad.
Hacker News · securityupdated · 8d agofirst · 8d agoExploit / PoCExploited2 sourcesHN 21 points · 1 commentsCVE-2026-109618CVE-2026-1096194 · 3 reads90
PHP2Shell exploitation began days before the patches
Amazon says probing started October 17; CISA urges PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35.
92
PHP2Shell exploit attempt hit Amazon honeypot before disclosure
CVE-2026-109618 and CVE-2026-109619 allow pre-auth code execution on PHP 7.x and 8.x, both scored 9.2.
91
PHP RCE flaws probed four days before public patches
Amazon’s MadPot saw attempts from October 17; PHP2Shell was later called broadly exploited.
86
Walmart will let shoppers’ AI agents buy with limits
Next month, Agent Profiles on Walmart and Sam’s Club default to approving every purchase and connect agents through an MCP Agent Gateway.
58
Walmart launches Agent Gateway for AI shopping agents
Any Walmart account can link agents next month; no Walmart+ plan is required, and returns still apply if an agent misbehaves.
58
Amazon uses union-busting AI surveillance to monitor union risk in UK warehouses
Documents say Amazon’s Atlas AI scores UK, US and Canadian warehouses for union-organizing risk.
52
The tech backlash is now in theaters
Hollywood’s 2026 films portray Zuckerberg, Musk, Holmes, and Altman critically as public views of Big Tech sour.
6
Amazon devices chief Panos Panay sees a future where AI devices replace the need to use apps
Amazon’s Panos Panay says ambient Bee wearables could reduce users’ need to open apps.
40
Muse Spark Open, the Most Capable US Open‑Weight Model to Date
Meta released Muse Spark Open, an 816B multimodal open-weight model with 42B active parameters and a 1M-token context.
91
Google’s Universal Cart shopping tool launches in the US
Google opened Universal Cart to U.S. shoppers, saving Search and Gemini finds and tracking prices.
28
Amazon’s always-listening Bee wearable can now help you buy stuff
Amazon launched always-listening Bee Frontier and Eclipse devices that can suggest purchases.
44
Amazon’s Bee launches two new personal AI devices, starting at $75
Amazon’s Bee launched two personal AI wearables, the $75 Frontier and $100 Eclipse, that summarize conversations and sync with Alexa.
44
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Hirudo uninstalls real Android banking apps and installs patched copies to steal credentials and bypass security checks.
74
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Flock’s CEO says its microphones detect only gunshots, while company materials describe broader ambient-audio detection.
34
Banks are now trying to offload the AI data center debt they just underwrote
Major banks are trying to shed AI data-center loans, including $38 billion tied to Oracle sites.
48
Save 50% on your TechCrunch Disrupt 2026 ticket and join the last 2 days in San Francisco’s Moscone West
TechCrunch is selling remaining Disrupt 2026 passes at half price for two days in San Francisco.
4
Passkey Authentications Double but Adoption Remains Slow
Dashlane says monthly passkey authentications nearly doubled to 2.5 million, while major-site adoption stays low.
32
What agents mean for Rust (and vice versa)
Niko Matsakis argues Rust's guardrails and performance controls suit agentic coding and can be strengthened further.
8
Crypto thieves sell hardware wallets with secret eSIM
Tampered Ledger Nano X wallets with hidden LTE modems stole seed phrases, draining about $93 million.
74
Inside Amazon’s robotic arms race and what it means for the future of human work
Amazon runs more than one million warehouse robots and is expanding AI-coordinated fleets and arms.
30
Can the AI industry persuade data center opponents by getting rid of NDAs?
Amazon will stop using NDAs for local data-center deals, following Microsoft amid community moratoriums.
36
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-1039562%10.0Missing authentication in Loom for AWS control plane
- CVE-2026-1102641%10.0Unauthenticated RCE in GitLab CE/EE via regex integer overflow
- CVE-2026-12530<1%8.4Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1 might allow a…
- CVE-2026-16796<1%8.4Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote…
- Authenticated SSRF in Loom for AWS before 1.7.0
- CVE-2026-25725<1%7.7Claude Code: Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did…
Appears with
- Amazonvendor · 26
- Metaorganization · 20
- Museai model · 12
- Anthropicorganization · 11
- Googleorganization · 11
- OpenAIorganization · 11
- PHPvendor · 10
- Microsoftorganization · 8
- Metavendor · 7
- CISAorganization · 6
- Cloudflareorganization · 5
- Googlevendor · 5
- Museproduct · 5
- PHPproduct · 5
- Anthropicvendor · 4
- Alphabetorganization · 4
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.