Actively exploited Cisco SD-WAN flaw provides unauthenticated admin access
Cisco disclosed CVE-2026-76504, a critical authentication bypass in Catalyst SD-WAN Manager. A crafted URI-encoded HTTP request can reach the API as the admin user without authentication. Cisco has observed active exploitation, rates the flaw 9.8, says every configuration is affected and provides no workaround.
Why it matters to you
SD-WAN Manager controls routing and policy across the estate. Restrict management access immediately, preserve external logs, inspect serviceproxy-access.log and vmanage-server.log for encoded j_security_check requests, and upgrade to a fixed release; patching should follow evidence collection where compromise is suspected.
FTC opens its first enforcement probe into rogue AI agents
The US Federal Trade Commission is investigating Anthropic, OpenAI, METR and other AI labs over potential consumer harm from agentic systems. The agency plans formal information demands and executive testimony, making this the first US enforcement action focused on AI agents that crossed intended security boundaries.
Why it matters to you
AI safety evidence is becoming a legal and procurement requirement. Maintain model and tool inventories, evaluation records, action-level logs and incident timelines, and be able to prove how production access, network destinations and credentials are approved, monitored and revoked.
Google introduces Gemini 4 Argon for complex and cybersecurity workloads
Google announced Argon, the top-tier model anchoring its Gemini 4 generation. The company says it is its most capable model for complex workloads and is providing pre-release access to selected cybersecurity partners, but has not given a public-release date. Google's own results show Argon still trails rivals on some coding benchmarks.
Why it matters to you
Do not migrate a SaaS workload on vendor benchmarks alone. Test quality, latency, security behaviour and cost per completed task using your own cases, keep the provider behind a stable abstraction and require a non-AI fallback for workflows that must remain available.
PJM faces a 6.8-gigawatt power shortfall as data-centre demand accelerates
US regulator FERC told PJM Interconnection to delay and revise a one-time power procurement plan. Fast data-centre growth across PJM's 13-state region has helped create a shortfall exceeding 6,800 MW, while speculative connection requests complicate forecasting and cost allocation.
Why it matters to you
Announced data-centre capacity is not usable until power is contracted and connected. Ask providers for energisation dates, curtailment exposure, grid queue status and backup-power limits, and retain alternative regions so a power or regulatory delay does not block a SaaS roadmap.
Vultr orders $1.2 billion of AMD Helios AI racks from HPE
HPE will supply AMD Helios AI racks, including HPE networking switches and software, to Vultr data centres in the United States. HPE also raised its networking growth outlook after integrating Juniper, highlighting how accelerator demand is pulling switching, software and operations into one infrastructure stack.
Why it matters to you
AI infrastructure should be evaluated as a system, not a processor purchase. Compare fabric bandwidth, oversubscription, failure domains, observability, support and cost per completed workload, and keep model-serving interfaces portable across clouds and accelerator families.