Hermes — Tuesday 21 July 2026

1

🔐 security SANS Internet Stormcast

77%

WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)

Last week, Searchlight Cyber released details about a vulnerability they are calling "wp2shell". The vulnerability was initially announced without a CVE number. But now has been assigned CVE-2026-630…

Novelty

80%

Depth

65%

Practical

85%

Surprise

75%

Relevance

85%

https://isc.sans.edu/diary/rss/33168

2

🤖 ai The Decoder

76%

Hugging Face says an AI agent hacked its infrastructure, and it used AI to fight back

Hugging Face reports an attack on parts of its production infrastructure that was allegedly carried out entirely by an autonomous AI agent system. The attack spanned thousands of actions controlled b…

Novelty

88%

Depth

65%

Practical

60%

Surprise

90%

Relevance

92%

https://the-decoder.com/hugging-face-says-an-ai-agent-hacked-its-infrastructure-and-it-used-ai-to-fight-back/

3

🔐 security SecurityWeek

70%

Hugging Face Hacked in Autonomous AI Attack

Targeting production infrastructure, the attack compromised internal datasets and service credentials. The post Hugging Face Hacked in Autonomous AI Attack appeared first on SecurityWeek.

Novelty

85%

Depth

50%

Practical

55%

Surprise

90%

Relevance

90%

https://www.securityweek.com/hugging-face-hacked-in-autonomous-ai-attack/

4

🤖 ai The Decoder

65%

Google Deepmind argues video generators already contain the world models computer vision has been missing

Google Deepmind's GenCeption repurposes a video generator for classic vision tasks such as depth estimation and segmentation, matching state-of-the-art systems with far less training data. The model …

https://the-decoder.com/google-deepmind-argues-video-generators-already-contain-the-world-models-computer-vision-has-been-missing/

5

🔐 security SecurityWeek

65%

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch

The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533. The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patc…

https://www.securityweek.com/sonicwall-zero-days-exploited-to-deliver-custom-malware-for-weeks-before-patch/

6

📦 m365 Petri IT Knowledgebase

64%

9 Best Microsoft Entra ID Management Tools for Enterprise Identity and Governance

Microsoft Entra ID is now the identity control plane for many organizations, but managing Entra ID well is no longer just about creating users, assigning groups, or enabling multifactor authenticatio…

https://petri.com/best-microsoft-entra-id-management-tools/

7

🔐 security SecurityWeek

64%

Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool

The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations. The post Capital One Open Sources AI-Powered ‘VulnHunter’ Security …

https://www.securityweek.com/capital-one-open-sources-ai-powered-vulnhunter-security-tool/

8

🤖 ai The Decoder

61%

Alibaba's Qwen takes on Kimi K3 with open-weight Qwen 3.8, says model is "second only to Fable 5"

Alibaba has unveiled Qwen 3.8, a multimodal AI model with 2.4 trillion parameters that the Qwen team says rivals leading models and trails only Fable 5. A preview is available now. The article Alibab…

https://the-decoder.com/alibabas-qwen-takes-on-kimi-k3-with-open-weight-qwen-3-8-says-model-is-second-only-to-fable-5/

9

🤖 ai The Decoder

61%

Google's "Frozen v2" chip reportedly bakes Gemini's architecture directly into silicon for efficiency gains

Google is developing "Frozen v2," a server chip that bakes the Gemini architecture directly into hardware. According to internal sources, it could be 6 to 10 times more efficient than current TPUs. S…

https://the-decoder.com/googles-frozen-v2-chip-reportedly-bakes-geminis-architecture-directly-into-silicon-for-efficiency-gains/

10

🤖 ai The Decoder

60%

Moonshot's Kimi K3 outperforms Fable 5 in frontend code but lags far behind in complex math

Moonshot's Kimi K3 is the first Chinese model to top the Code Arena: Frontend rankings, beating Claude Fable 5 and GPT-5.6 Sol by a wide margin. But on advanced math, the gap is stark: Kimi K3 scores…

https://the-decoder.com/moonshots-kimi-k3-outperforms-fable-5-in-frontend-code-but-lags-far-behind-in-complex-math/

11

🤖 ai The Decoder

60%

Nvidia's grip on AI chips weakens as Microsoft turns to AMD and Anthropic may follow

Microsoft is expanding Azure's AI infrastructure with AMD's new Helios platform, which is set to challenge Nvidia's GPU systems in the second half of 2026. A public GitHub profile suggests Anthropic …

https://the-decoder.com/nvidias-grip-on-ai-chips-weakens-as-microsoft-turns-to-amd-and-anthropic-may-follow/

12

🤖 ai The Decoder

59%

AI text detectors struggle when language models mimic an author's style

Epoch AI tested three leading AI text detectors (Pangram, GPTZero, and Originality.ai) using style-imitated texts. Up to 18 percent of AI-generated passages went undetected. For scientific writing, t…

https://the-decoder.com/ai-text-detectors-struggle-when-language-models-mimic-an-authors-style/

13

🔐 security SecurityWeek

57%

OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability

Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory. The post OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability appeare…

https://www.securityweek.com/openssl-silently-fixes-hollowbyte-dos-vulnerability/

14

⚡ tech Stratechery

55%

Who’s Afraid of Chinese Models?

Everyone is worried about Chinese models, but the frontier labs will be fine; we need to enable open U.S. alternatives.

https://stratechery.com/2026/whos-afraid-of-chinese-models/

15

🤖 ai Import AI

54%

Import AI 465: Open vs closed gaps; Kimi K3; Demis’ big policy plan

Welcome to Import AI, a newsletter about AI research. Import AI runs on arXiv, cappuccinos, and feedback from readers. If you’d like to support this, please subscribe. Subscribe now UK government: Ga…

https://jack-clark.net/2026/07/20/import-ai-465-open-vs-closed-gaps-kimi-k3-demis-big-policy-plan/