8,547 European renewable-energy systems are exposed online
Dutch researchers identified 8,547 internet-facing systems linked to solar parks and wind farms across 35 European countries. Most were administrative login pages, but the researchers believe attackers could have gained full operational control at about 181 sites, including interfaces with start, stop and reset controls.
Why it matters to you
This is classic IT/OT boundary failure. Remove management interfaces from public addressing, require a hardened access gateway with phishing-resistant MFA, segment supervisory networks and alert on configuration or state changes using telemetry stored outside the controller environment.
Anthropic expands controlled access to cyber-capable AI models
Anthropic combined its cyber programs into a three-tier Cyber Verification Program for vetted defenders. It says partners found at least 129,000 verified vulnerabilities between April and July, including more than 33,000 rated critical or high, while Anthropic's open-source scanning found another 5,500 through October.
Why it matters to you
The tiered design is a practical pattern for sensitive SaaS capabilities: verify the operator and organisation, bind permissions to an approved purpose, reduce safeguards only when justified and retain action-level audit evidence. Model access alone still does not replace validation, remediation ownership or responsible disclosure.
Google contracts 3.59 GW of power for data-centre growth
Google agreed to buy 3,590 MW from Constellation Energy in the PJM grid. The package includes a 20-year agreement for 890 MW from upgraded nuclear plants and a 15-year agreement for another 2,700 MW, while Constellation plans more than $4.3 billion of fleet investment.
Why it matters to you
Cloud capacity is becoming a power-procurement problem. When evaluating regions or AI providers, distinguish contracted electricity from future generation, check delivery dates and curtailment terms, and make sure workload failover crosses both computing and grid failure domains.
Fast permits turn Aragon into a €60 billion data-centre hub
Spain's Aragon region expects more than €60 billion of data-centre and digital-infrastructure investment over the next decade. Its PIGA fast-track can reduce approvals from years to under 12 months, but critics warn that compressed public consultation and environmental review weaken scrutiny.
Why it matters to you
A fast permit can improve delivery confidence, but legal challenges, national water and electricity rules and community opposition remain capacity risks. Treat announced regions as provisional until permits, grid connections and resource conditions are final, and keep an alternate region ready for critical SaaS workloads.
AMD plans a substantial 2027 increase in AI-chip supply
AMD says it will substantially increase CPU and GPU supply in 2027 and is planning three to five years ahead. The company is coordinating with Foxconn and TSMC on production while seeking sufficient memory from Samsung and SK Hynix, and says it needs more advanced wafer capacity.
Why it matters to you
Accelerator availability depends on wafers, advanced packaging, memory and systems assembly—not the GPU roadmap alone. For infrastructure budgets, qualify complete configurations and delivery commitments, benchmark alternatives and avoid designing a SaaS feature that can run only on one accelerator stack.