Critical BoKS flaws expose privileged Linux and Unix administration
Fortra patched eight vulnerabilities in Core Privileged Access Manager, including a 9.9-rated flaw that can make Active Directory service-account passwords predictable, a command-injection weakness that can execute shell commands as root on the BoKS Master, and a remotely reachable stack overflow in host autoregistration.
Why it matters to you
A compromise of privileged-access infrastructure can provide control over an entire server fleet. Identify every BoKS Manager and Master, upgrade to a fixed release, rotate affected AD service-account credentials and Kerberos material, restrict BCC and WSI network access, and review privileged activity using logs stored outside BoKS.
New US AI task force will review incident reporting and response
The White House has appointed intelligence chief Jay Clayton to lead a task force examining AI risks and opportunities. Its 120-day review will assess reporting mechanisms for breaches, hacks and other AI incidents and recommend improvements to federal response capabilities.
Why it matters to you
Government and enterprise buyers are moving from broad AI principles toward evidence and response procedures. For SaaS products, define reportable agent events, preserve tool and network logs, assign an incident owner, and document how an AI feature can be disabled without taking the underlying service offline.
US plans a $4.2 billion nuclear loan as AI power demand rises
The US plans to lend Vistra about $4.2 billion to increase output at least three nuclear stations. Vistra's six reactors currently produce more than 6.5 gigawatts, while US electricity demand is rising after decades of relative stability because of AI data centres, transport electrification and cryptocurrency mining.
Why it matters to you
Cloud and AI capacity increasingly depends on long-term generation projects rather than server availability alone. Ask providers about grid connection, curtailment exposure, backup limits and the portion of capacity that is already energised before committing critical workloads or delivery dates.
Ohio's data-centre backlash becomes an infrastructure delivery risk
Data centres became a prominent issue at an Ohio election rally as residents and politicians debated electricity prices, farmland and water use. Proposed legislation intended to shift more electricity costs toward very large users failed to advance, illustrating how capacity policy can change through local political pressure.
Why it matters to you
A planned campus is not dependable capacity until utility tariffs, permits and community conditions are settled. Track local approval and power-cost exposure in provider assessments, and retain alternate regions when SaaS availability or customer onboarding depends on promised expansion.
Cheaper AI may increase total data-centre electricity demand
New McKinsey and BCG analysis indicates that falling token prices and more efficient models can encourage much wider AI use, raising total power demand even when each task consumes less energy. McKinsey expects global data-centre electricity demand to grow about 24% annually through 2030.
Why it matters to you
Efficiency per token is not the same as efficiency per business outcome. Set workload budgets, measure cost and energy per completed task, cache repeated results, route simple work to smaller models and keep a non-AI path for processes where automation adds little value.