On July 27, China’s Moonshot AI published the full weights of its top-tier chatbot Kimi K3 so any government, company, or individual can run and retrain it locally without licensing fees. While Kimi K3 ranks among the best global models and could cut cloud costs, adoption depends on hardware costs, legal terms, language support, and access to advanced chips beyond China’s chipmaking capacity.

• Moonshot AI released Kimi K3's full weights for free on July 27, letting anyone run and retrain it without licensing fees, yet it still ranks third globally behind Claude Fable 5 and GPT-5.6 Sol Max, beating Llama and DeepSeek.
• Governments already own AI hardware (e.g., India's 64-system G42 supercomputer) but keep paying licensing fees to US firms like Microsoft and Google—Kimi K3 offers a way to cut those costs.
• Despite free Chinese models existing before, none of the 139 tracked sovereign AI projects use one, while 40% use Meta's Llama, suggesting trust and adoption barriers beyond price.
• US export controls on advanced chips remain a key lever since Kimi K3 requires top-tier processors China can't yet mass-produce, meaning open weights alone don't grant full independence.

Apple’s upcoming foldable iPhone Ultra overcame earlier hinge durability and assembly tolerance issues after extensive tests. Supply-chain reports say the 3D-printed hinge module problems are fixed and the device is now in test production ahead of a September launch.

• The hinge noise and tolerance defects that threatened delays have reportedly been fixed, per The Elec's supply-chain sources.
• Apple's foldable iPhone Ultra hinge (supplied by Shinjuxing and Amphenol) has moved into test production, the final step before mass manufacturing.
• This clears the path for a September reveal, contradicting earlier rumors of a delay into late 2026 or 2027.

Novee found a pattern of CI/CD vulnerabilities in GitHub Actions workflows that let any unauthenticated user hijack build pipelines, steal credentials, or push malicious code. They scanned 30,000 repositories and confirmed over 300 fully exploitable cases at Microsoft, Google, Apache, Cloudflare, and others. AI coding agents are accelerating the spread of these insecure YAML patterns, putting millions of projects at risk.

• Novee scanned 30,000 repos, flagged 654 with the vulnerable pattern, and confirmed 300+ fully exploitable chains—including at Microsoft, Google, Apache, and Cloudflare.
• Unauthenticated attackers with just a free GitHub account can trigger workflows via PRs or comments to hijack maintainer permissions, steal tokens, or push malicious code.
• Real exploits included stealing a non-expiring GitHub App key from Azure Sentinel, gaining GCP project owner access via Google's AI Agent Dev Kit, and executing arbitrary commands on Cloudflare's CI runners via a crafted branch name.
• AI coding agents are mass-replicating these insecure YAML patterns, and traditional scanners miss them because they treat workflows as config rather than executable code.

This daily digest covers a mass credential harvest via FortiBleed targeting FortiGate firewalls, new backdoors like ModeloRAT and Mistic tied to ransomware brokers, and critical data-exposure flaws in platforms such as Dify AI. It also highlights supply-chain risks in open-source CI/CD workflows, Anthropic’s Mythos model uncovering classified-system weaknesses, and industry moves on AI-driven SecOps and network-layer virtual patching.

• FortiBleed brute-forced 430,000+ FortiGate firewalls since February, harvesting over 110 million credentials across 24 protocols for resale
• Four critical Dify AI flaws (CVE-2026-41947 to -41950) let any console user read other tenants' chats, files, and internal APIs; patched in 1.14.2
• ModeloRAT and diskless Mistic backdoors tied to the Woodgnat access broker use signed pythonw.exe and DLL sideloading to evade detection
• Cordyceps research found 300 CI/CD exploit chains across 30,000 GitHub Actions workflows letting free-tier accounts steal tokens and taint builds at Microsoft, Google, Apache, and Cloudflare

Researchers at Tenet Security showed how anyone with a public Sentry DSN can inject a fake error report that coding agents like Claude Code, Cursor, and Codex will treat as a fix instruction. The agent fetches the malicious payload via the Model Context Protocol and runs arbitrary commands on the developer’s machine, exposing environment secrets and credentials. Sentry won’t close the write endpoint, leaving the fix to agent runtimes to filter untrusted data.

• A public write-only Sentry DSN lets attackers inject fake error reports that coding agents (Claude Code, Cursor, Codex) blindly treat as trusted fix instructions, leading to arbitrary code execution on developer machines.
• Tenet's tests across 2,388 organizations (including 71 Tranco top-1M sites) got an 85% success rate with 100+ confirmed code executions, hitting even a developer at a $250B Fortune 100 firm.
• The attack is invisible to traditional defenses (firewalls, EDR, WAFs, IAM) since it never touches victim infrastructure or needs passwords, and prompt-level "ignore untrusted data" instructions failed to stop it.
• Sentry isn't closing the vulnerable write endpoint, so the only real fix is runtime-level gating in the agent itself to sandbox or reject commands sourced from external/unauthenticated data.

Starting June 18, 2026, actions/checkout v7 will refuse to fetch code from forked pull requests in pull_request_target and workflow_run events by default, blocking common pwn request attack patterns. This update prevents untrusted fork code from running with full workflow privileges, and applies to all maintained versions by July 16, 2026, unless the “allow-unsafe-pr-checkout” flag is set.

• Starting June 18, 2026, actions/checkout v7 blocks fetching forked PR code in pull_request_target/workflow_run by default, requiring an explicit "allow-unsafe-pr-checkout" opt-in; full rollout across maintained versions completes by July 16, 2026.
• This directly targets "pwn request" attacks where a malicious fork PR exploits pull_request_target's full GITHUB_TOKEN access and secrets to steal credentials or push malicious code.
• Real-world incidents like the s1ngularity Nx package hijack and attacks on PostHog, TanStack, and kubernetes-el prompted the fix.
• The fix only closes the actions/checkout vector—untrusted code can still slip in via git, GitHub CLI, or other triggers, so teams still need to minimize pull_request_target use, restrict permissions, and validate inputs.

This daily roundup covers a 40 GB data breach at the University of Nottingham, a lost-drive incident exposing 10.9 million Japanese utility customers, and a proof-of-concept Exchange spoofing flaw. It also highlights automated AI-driven attack research, supply-chain toolkits on GitHub, and new product launches for dependency patching and taint analysis.

• ShinyHunters exploited a zero-day gadget chain in University of Nottingham's PeopleSoft to steal 40GB of data on 454,600 students, including passport numbers and disability details.
• Kyushu Electric Power lost a physical backup drive exposing personal and usage data for 10.9 million customers.
• InfoGuard's "Ghost-Sender" exploit spoofs any Exchange Online address (even CEO/noreply) via a one-line PowerShell script, bypassing SPF, DKIM, and DMARC.
• A researcher earned over $500,000 in bug bounties using an AI-driven fuzzer to scrape thousands of Google API keys and find leaky internal-only endpoints.

a16z led Westmag’s seed round to create a domestic motor and actuator manufacturer, tackling U.S. supply-chain reliance on Chinese parts amid tighter drone regulations. Founders David Hansen and Jordan Sanders have set up a semi-automated factory in South San Francisco and are scaling production for defense and robotics customers.

• China produces over 30 million more motors/actuators annually than the U.S., creating a critical supply-chain vulnerability for defense and robotics OEMs.
• A new FCC rule banning foreign drones and components (including motors) starting December 2025 is forcing U.S. manufacturers to scramble for domestic suppliers.
• Westmag, founded by David Hansen and Jordan Sanders, built a semi-automated U.S. factory (South San Francisco) and went from concept to shipping qualified motors/actuators in under a year.
• a16z led the seed round, betting on the founders' combination of deep motor expertise and manufacturing execution to fill the domestic supply gap.

This video breaks down how Cheesecake Factory handles its 250-plus menu items from supply chain through final plating. It covers centralized prep kitchens, digital ordering systems, staff training and menu testing to keep dishes consistent and cost-efficient.

• Cheesecake Factory runs 250+ menu items across 215 locations at just 29-30% food cost by splitting production between four regional commissaries (bulk prep) and on-site kitchens (final cooking/plating)
• Every dish gets a digital POS tag tracking sales velocity, profitability, and feedback, so underperformers get reworked/cut while stars get prime menu placement
• New recipes go through weekly innovation testing, then pilot runs at select restaurants before chain-wide rollout, with exact weights and cook times standardized for consistency
• Specialty ingredients (sauces, cheesecake bases, marinades) come only from company commissaries for volume discounts, while each restaurant sources its own produce/proteins from approved broadliners like Sysco and US Foods

The post highlights the ongoing shortage of RAM memory modules in the tech supply chain. It points to production bottlenecks and high demand that keep prices elevated and inventory low.

• The only substantive content available is a single tweet stating "This is why we still have a ram crisis btw," with no supporting article text provided.
• No specific data, names, or figures about RAM shortages, pricing, or supply chain bottlenecks are present in the material given.

Over the past 15 months a series of high-profile backdoors, worms and trojans have compromised thousands of npm, PyPI and other open-source packages, exposing millions of downstream projects to remote access, data wiping and credential theft. The article traces incidents from the xz-utils backdoor to self-propagating npm worms, explains how deep dependency trees magnify risk, and outlines immediate steps—pinning versions, auditing dependencies and funding maintainers—to stem the threat.

• The Jia Tan xz-utils backdoor took two years of patient, legitimate-looking contributions to slip in, and was only caught by accident when an engineer noticed a slight SSH slowdown.
• Supply-chain attacks have escalated fast: Shai-Hulud went from hijacking 500 npm packages to infecting 25,000 GitHub repos two months later, complete with a dead-man's-switch data wiper.
• Nation-state actors are now directly involved—North Korea's Sapphire Sleet poisoned Axios (70M weekly downloads) with a RAT, and 1,700 malicious packages across npm, PyPI, Go and Rust have been tied to North Korean groups.
• A typical Node.js app pulls in 800–1,500 transitive dependencies (vs. 40 direct ones), meaning most compromises hit projects three or four layers deep where developers have zero visibility.

The article discusses a recent supply chain attack involving the popular Axios package, highlighting how an attacker installed malware without altering the original code. It emphasizes the challenges posed by AI in both coding and attacking, as automated systems can easily introduce vulnerabilities faster than traditional security measures can respond.

• Attackers hijacked a maintainer account and slipped a self-deleting RAT into Axios (100M+ weekly downloads) via a malicious dependency, leaving no CVE for traditional scanners to catch.
• AI coding agents are 50% more likely than humans to pick known-vulnerable dependencies and often hallucinate package names that attackers exploit via "slopsquatting."
• Attacks have shifted from targeting single packages to automated, ecosystem-wide worms, like the TeamPCP campaign that spread through 66 npm packages in days.
• Socket detected the malicious Axios dependency in 6 minutes by analyzing code behavior, versus the industry-average 267 days for breach detection.

This article outlines the global energy crisis caused by the closure of the Strait of Hormuz, a vital chokepoint for oil and gas shipments. It details the economic implications for various industries and the challenges faced by countries reliant on Middle Eastern energy supplies. The piece also discusses the limited alternatives available and the potential for severe shortages.

• Vessel traffic through the Strait of Hormuz has dropped from the usual 50-60 daily crossings to just 17-18, signaling a major disruption to global energy flows.
• Saudi Arabia is the only country with a real workaround—its East-West pipeline—while others like Kuwait and Qatar have almost no alternative export capacity.
• The crisis threatens deep, specific dependencies: 400 million people in India rely on LPG for cooking, and Taiwan depends on Qatari LNG for a significant share of its power.
• Lack of transparency about what's actually happening in the Strait is fueling uncertainty about how severe and prolonged the shortages could become.

The article discusses how consumer electronics, particularly smartphones, have set the foundational blueprint for various technologies, leading to a convergence of products like electric vehicles and drones that are essentially advanced iterations of the smartphone. It emphasizes the importance of the "modular middle" in the supply chain, which allows for rapid innovation and integration across different industries, particularly highlighting the competitive landscape between the U.S. and China.

• Smartphones created a standardized "modular middle" of components (chips, sensors, batteries, cameras) that now gets remixed into EVs, drones, and other hardware categories.
• Products like electric vehicles are increasingly just smartphones on wheels, reusing the same supply chains and component ecosystems rather than being built from scratch.
• China has built dominant control over this modular middle supply chain, giving it a structural edge over the U.S. in rapidly assembling new hardware categories.
• Speed of innovation now depends less on inventing new technology and more on who can most quickly integrate existing modular components into new form factors.