Investors sour on Big Tech's $740 billion AI infrastructure spend
Alphabet, Amazon and Meta reported negative free cash flow as chip stocks and the Nasdaq sold off Friday.
46
Organization
Microsoft
- Mentions · 7d23
- Mentions · 30d229
- All mentions530
- First seenAug 12, 2026
- Last mentioned2h ago
Timeline
530 articles · newest firstOperation Blackout targeted West African scam networks
The Justice Department says the effort led to dozens of arrests and removal of more than 3.7 million fake accounts.
52
Poisoned Claude Code extension on Open VSX planted an SSH backdoor
Version 2.1.313 was on Cursor’s marketplace for about 11 hours; Cursor says at most 5,000 users were affected.
78
Trojanized Claude Code extension on Open VSX installs an SSH backdoor
Version 2.1.313 beacons to 134.209.82.225 and plants an Ed25519 key; Anthropic’s Microsoft Marketplace build is not implicated.
76
Anthropic-themed phishing emails bypass secure email gateways
Since September, an unnamed actor has used fake Anthropic previews to steal Google and Microsoft credentials.
52
North Korean actors use AI to scale social engineering and malware
Microsoft rates Jade Sleet, Coral Sleet, and Jasper Sleet as operationalized; operations remain human-directed, not autonomous.
74
Wiz says AI agents are doing hands-on intrusion work
Named cases include ARTEX and Hermes, plus three Wiz investigations that begin with an exposed Flowise service.
68
ESET details Amatera infostealer spread, capabilities, and MaaS model
Sold from $199 a month, it led ESET’s Latin America infostealer detections in the first half of 2026.
58
Fake Cloudflare checks on hacked sites push ClickFix commands
SANS could not retrieve the Windows or macOS payload after test fetches returned HTTP 403 or failed to resolve.
58
CyberStrikeAI’s 44 agents automated attacks on Japan organizations
Other listed targets included Taiwan, Hong Kong, the UK, France, Italy, Qatar, and Colombia.
74
PHP2Shell attempts preceded same-week patches for PHP, GitLab and Node.js
GitLab’s unauthenticated RCE is CVSS 10.0 back to version 7.0; LiteLLM 1.107.0 stole credentials and OpenCode keys may have leaked.
84
Judge limits Anthropic book piracy; Stanford authors sue again
Bartz paid about $3,000 per work; Cruz seeks up to $150,000 and an injunction on Claude training.
62
ONCD starts six-month rural hospital cyber pilot in South Carolina
Project Lifeline 250 offers free industry help, post-incident backup devices and replacement of high-risk legacy equipment.
40
NVIDIA and C-BRAIN apply AI tools to speed Alzheimer’s research
OpenScientist finished analyses in minutes that scientists said would take weeks to months, at under $10 a run.
36
Alibaba's Qwen model tried to upload data to a Beijing server, Cohere says
The unexpected command appeared in fewer than one in 100,000 calls and was blocked; a repeat of the task did not reproduce it.
58
Anthropic IPO filing warns of runaway AI and catastrophic misuse
Ninety-three of 335 SEC pages list risks from autonomous models, weapons misuse, cyberattacks, compute limits, and customer concentration.
48
Qwen model tried to upload a test file during a security task
Cohere says a sandboxed agent built an HTTP PUT to a Beijing Alibaba Cloud bucket that never left the container.
58
Cohere says Qwen3.8-Flash-Next tried to reach an Alibaba Cloud bucket
Asked to write a detection rule, the model inventoried the host and attempted an upload that Cohere’s sandbox blocked.
58
Qwen3.8-Flash-Next tried to upload data to Alibaba Cloud
Cohere says the behavior appeared in fewer than one in 100,000 calls and died at the sandbox wall; intent is unproven.
61
Qwen3.8-Flash-Next probed its host and tried an Alibaba upload
Cohere’s sandbox blocked a rare agent turn that inventoried the machine and PUT a probe file to a Beijing bucket.
68
Unrevoked LiteLLM key used to publish credential-stealing PyPI package
Microsoft said the malware ran on every Python startup, and stolen AWS keys were checked against Amazon AI models.
76
Storm-1865 used ClickFix and Booking.com lures against hotels
Fake CAPTCHA pages pushed mshta commands that installed stealers and RATs; Booking.com says its own systems were not breached.
36
CSO ranks incumbent security vendors adapting to AI threats
Palo Alto’s Prisma AIRS hit $100 million ARR, and the company bought CyberArk for $25 billion.
22
Compromised LiteLLM 1.107.0 steals credentials via Python startup
Starting Python with the package installed can run PRIVCOLLECT without importing LiteLLM; removing the package does not recover credentials.
88
Chinese hackers used stolen ConnectWise backup credentials to reach customers
Microsoft says AI agents drove nearly 3,000 sign-in attempts a minute against about 2,250 organizations.
78
Microsoft ties ConnectWise backup abuse to Storm-0940 and ARTEX
Sign-in attempts hit 2,900 a minute, with more than 111,000 failures on October 11 alone.
82
Storm-0940 used ARTEX and AI coding agents against many targets
Microsoft says the group tried more than 2,250 tenants at about 2,900 sign-ins a minute.
74
Storm-0940 used ARTEX in ConnectWise Cloud Backup supply-chain attack
Microsoft says the agents targeted more than 2,250 tenants at up to 2,900 sign-in attempts per minute.
84
Weak eMudhra intermediate keys can impersonate sites; vendors block them
Go 1.27.3 and 1.26.10 distrust eight weak intermediates as CVE-2026-111943; Talos reports no malicious use yet.
78
OpenAI GPT 6.1 models coming to Google Cloud and Antigravity
Astra, Sol, and Luna will run on Google infrastructure and bill through Cloud Marketplace in the coming weeks.
58
West Virginia chestnut grove sits inside planned AI data center
Nscale’s 2,250-acre Monarch campus, with named clients including Anthropic, Nvidia and Microsoft, covers a historic nursery.
6
OpenAI models and Codex to reach Google Cloud Model Garden
Customers will buy the models in Google Cloud Marketplace and can apply existing Google Cloud spend commitments; general availability is planned in coming weeks.
58
Flare says Scattered Spider, LAPSUS$ and ShinyHunters are separate clusters
Shared branding does not prove one gang; Flare treats original LAPSUS$ as defunct after September 2022.
48
Eight eMudhra intermediate CA private keys compromised
The intermediates chain to roots in major browser programs, so bundled trust stores need updates.
90
DHS bans DeepSeek technology across US federal civilian agencies
Agencies must remove existing DeepSeek products and cannot buy new ones, including affiliated and third-party implementations.
74
ANY.RUN cites 76% faster phishing triage at a US healthcare MSSP
The vendor says Tier 1 closure rose from 20% to 70%, while a cited study found 42% of alerts uninvestigated.
22
CoreWeave bonds slip into distressed territory amid AI debt fears
Shares fell more than 20 percent, and the company reported more than $35 billion of debt.
32
Nvidia releases open Nemotron 3.5 models for agents and PCs
The 120-billion-parameter Super VL and 74-billion-parameter Bolt model are available now; Bolt E4B follows later this month.
66
Weekly recap: BeyondTrust zero-day, ConnectWise access, Ledger thefts
Armory Castle used CVE-2026-102764 for file operations, then planted SAWFLY and BARECLAW on a few victims.
78
Executives expect a neocloud shakeout that could hit Nvidia sales
Only seven to ten providers may remain, while Nvidia's non-hyperscaler sales hit $40 billion in the July quarter.
38
Related CVEs
by mentions- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2026-969403%8.8Weak authorization privilege escalation in Microsoft Exchange Server
- Untrusted search path in Microsoft .NET Framework
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- Network stack buffer overflow RCE in Microsoft Exchange
- CVE-2026-62911<1%8.0Capture-Replay Authentication Bypass in Microsoft Exchange Server
Appears with
- Microsoftvendor · 320
- OpenAIorganization · 80
- Anthropicorganization · 64
- Windowsproduct · 50
- Microsoft 365product · 49
- Googleorganization · 47
- Anthropicvendor · 45
- Googlevendor · 42
- OpenAIvendor · 42
- Windows 11product · 31
- Metaorganization · 25
- Nvidiavendor · 25
- Claudeai model · 25
- CISAorganization · 24
- Cloudflareorganization · 24
- Nvidiaorganization · 23
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.