CVE-2026-53359, named Januscape, is a 16-year-old flaw that lets a rented virtual machine break out and seize the physical host it shares with other tenants. Closing it needs two separate patches, not one, and patched Linux kernels only shipped on 4 July.
The 2026 AI Act delay pushed the high-risk deadlines to 2027 and 2028, but it left the enforcement clock on general-purpose AI providers untouched. From 2 August 2026 the European Commission can fine any GPAI model maker up to 3 percent of global turnover. Here is what that reaches on your desk.
On 6 July 2026 NVIDIA and Hugging Face put Isaac GR00T 1.7, an open and commercially usable robot foundation model, into LeRobot, along with a tool to collect demonstration data. When the model is free, the edge moves to whoever owns the task data.
On 6 July 2026 Xbox began cutting 3,200 jobs and letting five studios go. Double Fine and Compulsion returned to their founders with their IP, Ninja Theory and Undead Labs were sold, and Arkane weighs its options. The rare un-acquisition shows what an owner keeps when a deal fails.
On 7 July 2026 Nothing launched the Phone 4b at 329 euros and 299 pounds, with three years of Android upgrades and six years of security patches. In a year of rising memory prices, the update window outlasts most pricier mid-range phones and reshapes fleet cost math.
On 7 July 2026 the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. It adds no new law and leans on NIS2, the Cyber Resilience Act and the AI Act, while building an EU capacity to test frontier models instead of trusting vendor claims. From 2 August the Commission can enforce against general-purpose AI.
DeepSeek V4 launches in mid-July with peak-hour pricing that doubles token rates from 14:00 to 18:00 Beijing time. That window is 08:00 to 12:00 in Frankfurt and 07:00 to 11:00 in London, so European teams pay the surcharge during their own working morning. The deepseek-chat and deepseek-reasoner names retire on 24 July.
Munich fusion startup Proxima Fusion raised 411 million euros at a 2.4 billion valuation, with Google and the utility RWE as strategic backers. When a data-centre power buyer and a grid operator co-fund a plant a decade out, they are pre-buying firm power before it exists, and a retired Bavarian reactor site is where it will be built.
Nintendo will stop selling the original Switch, Switch Lite and Switch OLED in Europe from mid-February 2027 while keeping them on sale everywhere else. The trigger is the EU Batteries Regulation, which from 18 February 2027 requires user-replaceable cells. It is the first console pulled from a market by a battery rule.
Meta's Muse Video generates clips with synchronized native audio and xAI shipped Grok Imagine. For operators the risk is no longer making video, it is proving yours is real.
Since 1 July 2026 every newly commissioned German data centre must run at PUE 1.2 or better and reuse at least 10 percent of its waste heat, rising to 20 percent by 2028. A site with no nearby heat buyer is now hard to permit, whatever the land costs. Here is what changes for operators.
CVE-2026-8451 turns a Citrix NetScaler configured as a SAML identity provider into a memory leak that hands attackers live session tokens. Citrix patched it on 30 June 2026 and attacks landed within a day. If your remote access runs on NetScaler, patch and rotate sessions now.
Page 20 / 36
One considered note on infrastructure, governance, and measurement, most mornings. No theory.