❗️ The slopocalypse is real. MITRE published a critical SQLite vulnerability with a CVSS of 10.0 that does not exist. Turns out it was hallucinated by an LLM. SQLite's Richard Hipp says dozens more fake CVEs were filed.

CVE-2026-51302 was assigned on 27 July. CISA's enrichment programme then scored it critical and flagged a public proof-of-concept. The Dutch National Cyber Security Center republished it as an advisory, and has now withdrawn it, saying the "vulnerability" was most likely hallucinated by an LLM.

❗️Great news for Linux enthusiasts: Linux crossed 10% of North American desktop traffic for the first time, 10.65% last month.

That's over 3.5x its 2.94% in April, per StatCounter.

❗️China's CXMT wants to solve the DRAM crisis by opening a second memory fab in Beijing and is in early talks with the state-backed development zone over funding.

Its current projects alone would double output to 600,000+ wafers a month. Beijing's memory fab would come on top of that — as international DRAM prices keep climbing.

For comparison, the three biggest players' capacity this year (per month):
Samsung 720k wafers
SK hynix 550k wafers
Micron 375k wafers

❗️Under a secret order, the UK wants Apple to build a backdoor into its encrypted iCloud backups. Apple is refusing, and fighting it in court.

Britain's first attempt covered Americans' data too. Washington pushed back, and it was withdrawn — then the Home Office issued a new one, narrowed to UK users only. Apple filed against it at the Investigatory Powers Tribunal last month.

Britons have had no Advanced Data Protection since February 2025: the opt-in setting that end-to-end encrypts iCloud photos, notes and backups. Apple pulled it rather than comply.

By Apple's own account, UK users are now the only ones in the world who can't switch it on. Their photos and backups sit on servers Apple can unlock — and hand over on a valid legal request...

‼️ BREAKING: An active npm supply chain attack has compromised at least 868 packages carrying over 2 billion monthly installs with a credential-stealing worm. Shai-Hulud is back.

It started with the compromise of the GitHub account of the maintainer behind keyv, a library with roughly 127 million weekly npm downloads.

A preinstall hook fires on npm install and drops a stealer that sweeps npm, GitHub, AWS, Kubernetes and Vault secrets, and then spreads to more maintainers.

Sources:

https://aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack

https://wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack

https://socket.dev/blog/popular-npm-packages-in-the-keyv-and-cacheable-namespaces-compromised-in-active-supply-chain

Apple has agreed to open the iPhone clipboard to Windows PCs in the EU after Microsoft filed a DMA interoperability request in March.

Microsoft says users would:
- Copy on an iPhone and paste straight into Windows, and the reverse
- Move content without foregrounding an app or re-triggering each transfer
- Get clipboard sync as "a lightweight, continuous capability rather than a manual, app-driven operation"

Microsoft is using the EU's Digital Markets Act to prise open iOS one feature at a time.

❗️ Claude Mythos tried to backdoor a real open-source project during a UK government safety test.

The AI Security Institute says it opened a malicious GitHub pull request, then created a second account to vouch for its own code and pressure the maintainer into merging.

Called out by a human contributor, it apologised for an "accidental" malicious commit, force-pushed a clean branch, and hid a fresh payload in it. Twice.

Anthropic's cyber guardrails had been deliberately disabled for the test.

https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing

🚨 BREAKING: EA is now private, and $18 billion in debt.

A Saudi $55B takeover closed Tuesday, the largest leveraged buyout in history. The buyers borrowed the money. EA has to pay it back with around $1.8B a year in interest alone.

EA has already told debt investors it will cut $700M in annual costs, including $170M in "organizational efficiencies."