We’re Tracking the Future of Security

Author: Osiris

  • Google Announces General Availability of TPU v7 “Ironwood”

    Google Announces General Availability of TPU v7 “Ironwood”

    April 22, 2026 — Google announced general availability of its seventh-generation Tensor Processing Unit, Ironwood, at Google Cloud Next 2026, its first TPU designed specifically for inference workloads.

    What happened

    Google said Ironwood delivers roughly ten times the peak performance of its TPU v5p and about four times the per-chip performance of the prior TPU v6e (Trillium) generation, scaling up to superpods of thousands of chips. Anthropic disclosed a commitment to use up to one million TPU chips, including an initial 400,000 Ironwood units, extending its compute plans into 2027.

    Why it matters

    A major AI lab the size of Anthropic committing to Google’s custom silicon at this scale, alongside its existing Nvidia and Azure relationships, reinforces that frontier AI companies are deliberately spreading compute dependency across multiple hardware ecosystems rather than standardizing on one.

    Security and infrastructure impact

    For enterprise buyers, the diversification of underlying AI hardware across Nvidia, custom hyperscaler silicon like Ironwood, and vendor-specific chips such as OpenAI’s Titan means that performance, cost and security characteristics increasingly vary by which cloud and chip a given AI service actually runs on.

    Sources

    ← Back to Technology News

  • Anthropic Launches Project Glasswing to Share AI Vulnerability-Finding With Industry

    Anthropic Launches Project Glasswing to Share AI Vulnerability-Finding With Industry

    April 9, 2026 — Anthropic announced Project Glasswing, giving a group of major technology and finance companies early access to Claude Mythos Preview, a model it says can find and exploit software vulnerabilities at a level that rivals skilled human researchers.

    What happened

    Partners in the program included Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, Nvidia and Palo Alto Networks. Anthropic said Mythos Preview had already identified thousands of high-severity vulnerabilities across every major operating system and web browser, and it kept the model unreleased to the public, citing misuse concerns.

    Why it matters

    An AI model capable of automated, human-competitive vulnerability discovery is a double-edged development: it can dramatically accelerate defensive patching, but the same capability could eventually be misused for offensive exploit development if it reaches less careful actors.

    Security and infrastructure impact

    Critical-infrastructure operators and software vendors should watch how programs like Glasswing scale, since AI-assisted vulnerability research at this level will likely change both the speed of patch cycles and the sophistication expected of future exploit attempts.

    Sources

    ← Back to Technology News

  • Ransomware Attack on Dutch Health-IT Vendor ChipSoft Disrupts Hospitals

    Ransomware Attack on Dutch Health-IT Vendor ChipSoft Disrupts Hospitals

    April 7, 2026 — A ransomware attack on ChipSoft, a software vendor used by roughly 80 percent of hospitals in the Netherlands, forced parts of its digital infrastructure offline and disrupted hospital operations.

    What happened

    The Embargo ransomware group was linked to the attack, which took ChipSoft’s public website and several patient-facing platforms — including Zorgportaal and HiX Mobile — offline. Eleven hospitals took their ChipSoft-dependent systems offline as a precaution, and the company later confirmed that medical personal data had been stolen, though it said the stolen data was subsequently destroyed.

    Why it matters

    The incident illustrates concentration risk in healthcare IT: a single software vendor’s compromise can simultaneously disrupt patient care across a large share of a country’s hospital system, a pattern increasingly common as healthcare consolidates around a small number of electronic health-record platforms.

    Security and infrastructure impact

    Hospital IT and physical-security teams should treat vendor-concentration risk as a resilience planning priority, including tested downtime procedures for core clinical software, not only for ransomware directly targeting the hospital’s own network.

    Sources

    ← Back to Technology News

  • CISA Adds Six Actively Exploited Fortinet, Microsoft and Adobe Flaws to KEV

    CISA Adds Six Actively Exploited Fortinet, Microsoft and Adobe Flaws to KEV

    April 6, 2026 — CISA added six actively exploited vulnerabilities spanning Fortinet, Microsoft and Adobe products to its Known Exploited Vulnerabilities catalog in a single batch update.

    What happened

    The additions included Fortinet FortiClient EMS and FortiSandbox flaws that allow improper access control and unauthenticated OS command injection respectively, alongside vulnerabilities in Microsoft and Adobe software. CISA’s catalog entries require affected federal agencies to remediate on a defined schedule.

    Why it matters

    Batch KEV updates spanning multiple, unrelated vendors in the same week illustrate how broadly distributed exploitation activity has become across common enterprise software rather than concentrated in a single product line.

    Security and infrastructure impact

    Security teams should treat multi-vendor KEV batches as a prompt to review patch status across their full software inventory, not just the specific products named, since KEV additions often reflect exploitation trends that spread quickly to adjacent, similarly configured systems.

    Sources

    ← Back to Technology News

  • OpenAI Closes $122 Billion Funding Round at $852 Billion Valuation

    OpenAI Closes $122 Billion Funding Round at $852 Billion Valuation

    March 31, 2026 — OpenAI closed a funding round totaling $122 billion in committed capital at an $852 billion post-money valuation, expanding on the $110 billion round it had announced in February.

    What happened

    The round followed a $110 billion raise closed on February 27, 2026 at an $840 billion valuation, with SoftBank, Nvidia and Amazon among the largest contributors. OpenAI described the additional capital as funding for its next phase of AI infrastructure and research.

    Why it matters

    Funding rounds of this size, arriving within weeks of one another, show how capital-intensive frontier AI development has become and how deeply intertwined AI labs’ finances now are with their chip and cloud suppliers, several of whom are also investors.

    Security and infrastructure impact

    The scale of committed capital gives a sense of the infrastructure build-out still to come, reinforcing the case for security and safety planning to be built into new AI data-center projects from the design stage rather than retrofitted later.

    Sources

    ← Back to Technology News

  • Samsung Reported to Win Exclusive HBM4 Supply Deal for OpenAI’s Titan Chip

    Samsung Reported to Win Exclusive HBM4 Supply Deal for OpenAI’s Titan Chip

    March 2026 — Samsung was reported to have secured an exclusive deal to supply HBM4 memory for OpenAI’s first custom AI chip, internally known as Titan, with shipments planned for the second half of 2026.

    What happened

    Multiple industry outlets reported that Samsung agreed to supply up to roughly 800 million gigabits of 12-layer HBM4 memory for OpenAI’s Titan processor. Samsung separately showcased its next-generation HBM4E memory, aimed at Nvidia’s Vera Rubin platform, at Nvidia’s GTC 2026 conference in March.

    Why it matters

    Because neither company has issued a joint press release confirming exact volumes or terms, the specifics should be treated as reported rather than officially confirmed; the broader trend — OpenAI building its own silicon supply chain alongside its Broadcom and Nvidia partnerships — is well corroborated across sources.

    Security and infrastructure impact

    OpenAI’s parallel hardware partnerships with Broadcom, Samsung and Nvidia show a deliberate strategy of diversifying AI chip supply across multiple vendors, a resilience approach that mirrors what physical-security integrators increasingly recommend for critical camera, sensor and access-control hardware supply chains.

    Sources

    ← Back to Technology News

  • NVIDIA Expands AI-Powered Cybersecurity Partnerships for OT and ICS

    NVIDIA Expands AI-Powered Cybersecurity Partnerships for OT and ICS

    February 23, 2026 — NVIDIA detailed integrations with Akamai, Forescout, Palo Alto Networks, Siemens and Xage Security for operational technology and industrial control security.

    What happened

    NVIDIA announced that several security and industrial vendors were integrating its accelerated computing, AI and BlueField technology into OT and ICS security offerings. The company described architectures for visibility, policy enforcement and threat response at the infrastructure edge. Capabilities will vary by partner product and deployment, so the announcement should not be read as a single universally available solution.

    Why it matters

    OT environments often combine long-lived equipment, availability constraints and limited maintenance windows. Moving selected security functions closer to industrial workloads may improve visibility and response, but it also adds components that must be engineered and governed correctly.

    Security and infrastructure impact

    Operators should validate passive discovery, segmentation, fail-safe behavior, update procedures and the effect of automated containment on production. AI-generated detections must feed accountable incident workflows rather than making uncontrolled process decisions.

    Sources

    ← Back to Technology News

  • Big Tech AI Infrastructure Spending Is Estimated Near $650 Billion in 2026

    Big Tech AI Infrastructure Spending Is Estimated Near $650 Billion in 2026

    February 23, 2026 — Bridgewater analysis reported by Reuters estimated that Alphabet, Amazon, Meta and Microsoft could invest about $650 billion in AI-related infrastructure during 2026.

    What happened

    Reuters reported a Bridgewater Associates analysis estimating that Alphabet, Amazon, Meta and Microsoft would collectively invest about $650 billion to scale AI-related infrastructure in 2026. The number is an external estimate based on spending plans and should not be presented as a completed expenditure or a single pooled fund.

    Why it matters

    Even as an estimate, the scale shows that AI is driving a major build cycle for servers, networks, data centers and power. It also creates execution risk: capacity can arrive later than expected, demand can shift, and infrastructure decisions may outlast a particular model generation.

    Security and infrastructure impact

    Security planners should be included early in AI-facility programs. Physical protection, supply-chain assurance, identity, OT segmentation, fire protection and incident response need to scale with the compute environment and its concentration of operational value.

    Sources

    ← Back to Technology News

  • Third-Party Involvement in Data Breaches Doubles in Verizon’s 2025 DBIR

    Third-Party Involvement in Data Breaches Doubles in Verizon’s 2025 DBIR

    April 23, 2025 — Verizon’s 2025 Data Breach Investigations Report found that third-party involvement in breaches doubled to 30 percent.

    What happened

    Verizon reported that third-party involvement appeared in 30 percent of breaches analyzed for its 2025 DBIR, double the prior report’s share. The finding covers partners and supply-chain relationships across a large incident dataset; it does not mean every vendor has the same probability of compromise.

    Why it matters

    Organizations increasingly depend on SaaS platforms, managed services, software components and connected contractors. A compromise outside the direct network can still inherit trusted access, shared data or administrative integration and produce a wide blast radius.

    Security and infrastructure impact

    Vendor assessment should extend beyond an annual questionnaire. Security teams need inventories of integrations and service accounts, least-privilege access, contract notification requirements, token revocation procedures and recovery plans for the loss of a critical supplier.

    Sources

    ← Back to Technology News

  • Ransomware Remains a Critical Infrastructure Risk in 2026

    Ransomware Remains a Critical Infrastructure Risk in 2026

    2026 — Government threat assessments continue to identify ransomware as a major threat to critical infrastructure and essential public services.

    What happened

    The Canadian Centre for Cyber Security’s 2025–2026 assessment calls ransomware the leading cybercrime threat to Canadian critical infrastructure. New Jersey’s 2026 assessment likewise expects ransomware groups to continue targeting critical infrastructure and widely deployed enterprise software. These are risk assessments, not a claim that every sector or country experiences the same incident rate.

    Why it matters

    Ransomware becomes a safety and continuity problem when it disrupts hospitals, utilities, municipalities or emergency communications. Restoration priorities, manual workarounds and dependencies on vendors matter as much as endpoint detection.

    Security and infrastructure impact

    Infrastructure operators need tested offline recovery, segmented IT and OT environments, protected identity systems and decision-ready incident playbooks. Exercises should include loss of a shared service and determine which physical operations can continue safely.

    Sources

    ← Back to Technology News