Attackers target a critical Atlassian Data Center flaw within hours
Honeypots recorded exploitation attempts against CVE-2026-21589 shortly after proof-of-concept code appeared. The unauthenticated file-access flaw affects all supported self-hosted versions of Bitbucket, Confluence, Jira, Bamboo, Crowd, Crucible and Fisheye before their fixed releases; certain Jira-and-Crowd configurations may expose credentials that enable administrative access.
Why it matters to you
Patch every affected node immediately, especially identity-linked deployments. Review reverse-proxy and application logs for requests to known configuration paths, rotate Crowd application credentials where exposure is possible and avoid treating an upgrade as proof that earlier exploitation did not occur.
US seizes seven domains used to scan critical infrastructure
The US Justice Department says seven domains linked to China's Integrity Technology Group were used to scan and attack critical infrastructure in the United States and other countries. It is the second public disruption of the company's alleged infrastructure after authorities dismantled a botnet of more than 250,000 compromised consumer devices in 2024.
Why it matters to you
Domain seizure disrupts command infrastructure but does not remediate compromised devices. Block and retrospectively search for related indicators, separate management planes from internet-facing services, preserve DNS and flow logs and assume reconnaissance can resume through replacement domains or residential proxies.
Google introduces a cross-application Gemini agent for work
Google Cloud introduced a Gemini agent that can plan work, use tools and return completed tasks in documents, email and developer environments. It operates across Google Workspace, Microsoft 365 and Slack, and can select between Google's Gemini and Anthropic's Claude models.
Why it matters to you
A universal agent creates a broad identity and data boundary across multiple SaaS systems. Use task-scoped OAuth grants, approval gates for writes and external messages, per-connector audit logs, tenant-level kill switches and model-independent policies that remain enforceable when the agent changes models.
Token Fabric targets mixed-vendor AI clusters
Nvidia-backed Upscale AI launched Token Fabric, a hardware-and-software networking platform intended to connect accelerators from different suppliers. The system combines Upscale networking chips, Nvidia Spectrum-X equipment and software that identifies bottlenecks and failing components.
Why it matters to you
Mixed accelerators are useful only if the fabric and software expose predictable performance and failures. Benchmark east-west throughput, congestion control and collective operations under load; require open telemetry and portable orchestration so a nominally multi-vendor cluster does not become locked to one control plane.
Data-centre demand response moves from pilots toward grid policy
Utilities and technology companies are testing data centres that reduce or shift electricity use during grid stress. Facilities surveyed by the Electric Power Research Institute reported potential peak reductions of 10% to 30%, while a Duke University study estimated flexible demand could avoid $40 billion to $150 billion of grid investment over a decade.
Why it matters to you
Curtailable power can accelerate grid connection, but it converts an energy event into a capacity-management event. Classify workloads by interruption tolerance, test queueing and regional migration, reserve headroom for stateful services and make curtailment thresholds visible in infrastructure and customer SLOs.