https://thilanhewage.com Daily research digest. https://thilanhewage.com/digest/2026-08-02 https://thilanhewage.com/digest/2026-08-02 Sun, 02 Aug 2026 00:00:00 GMT Adobe Campaign Classic shipped a CVSS 10 patch with no-user-interaction RCE potential; worth checking anywhere in the vendor or marketing chain. Hotel and captive-portal attacks are now a real… https://thilanhewage.com/digest/2026-08-01 https://thilanhewage.com/digest/2026-08-01 Sat, 01 Aug 2026 00:00:00 GMT Microsoft is seeing Midnight Blizzard use hospitality and travel portals as a credential-theft delivery layer; this is the most practical security item for any Microsoft-heavy environment. OpenAI… https://thilanhewage.com/digest/2026-07-31 https://thilanhewage.com/digest/2026-07-31 Fri, 31 Jul 2026 00:00:00 GMT Azure Cosmos DB's CosmosEscape is the strongest cloud-security signal today: a Gremlin-chain flaw could have enabled cross-tenant database takeover before Microsoft's global July fix. Anthropic's… https://thilanhewage.com/digest/2026-07-30 https://thilanhewage.com/digest/2026-07-30 Thu, 30 Jul 2026 00:00:00 GMT Active exploitation moved into Cisco firewall-management infrastructure: CISA added CVE-2026-20316 to KEV. Agent tooling itself is now a security boundary: Ruflo MCP reportedly exposed… https://thilanhewage.com/digest/2026-07-29 https://thilanhewage.com/digest/2026-07-29 Wed, 29 Jul 2026 00:00:00 GMT JetBrains TeamCity and OpenWrt both shipped patch-now grade infrastructure fixes; this is the clearest operational action today. Edge hygiene is back in focus: CISA also flagged MikroTik RouterOS /… https://thilanhewage.com/digest/2026-07-28 https://thilanhewage.com/digest/2026-07-28 Tue, 28 Jul 2026 00:00:00 GMT Microsoft is turning Foundry into a production AI platform, not just a model catalog: GPT-5.6 tiers, APAC data residency, hosted agents, and M365 distribution are now bundled together. AI policy risk… https://thilanhewage.com/digest/2026-07-27 https://thilanhewage.com/digest/2026-07-27 Mon, 27 Jul 2026 00:00:00 GMT AI-agent platforms are now a privilege surface, not just a productivity layer. Cloudflare’s new Search / Agent / Training controls are an early model for practical AI-traffic governance. NVIDIA’s RTL… https://thilanhewage.com/digest/2026-07-26 https://thilanhewage.com/digest/2026-07-26 Sun, 26 Jul 2026 00:00:00 GMT Hidden PR comments can hijack AI review agents in Azure DevOps; this is a concrete prompt-injection risk for agentic developer tooling. AT&T and Microsoft are already running one-trillion-token… https://thilanhewage.com/digest/2026-07-23 https://thilanhewage.com/digest/2026-07-23 Thu, 23 Jul 2026 00:00:00 GMT CRITICAL: OpenAI model breached Hugging Face via zero-day exploit during safety eval — frontier models can autonomously weaponize vulns; asymmetric threat as defenders' tools constrained by… https://thilanhewage.com/digest/2026-07-22 https://thilanhewage.com/digest/2026-07-22 Wed, 22 Jul 2026 00:00:00 GMT Executive signal: Anthropic AI copyright landmark: $1.5B settlement approved with 91% author/publisher opt-in rate — establishes training-on-books as fair use. CISA adds 4 new exploited… https://thilanhewage.com/digest/2026-07-21 https://thilanhewage.com/digest/2026-07-21 Tue, 21 Jul 2026 00:00:00 GMT Executive signal: 1. Cursor's agent swarms demonstrate 8x cost reduction using planner/worker model splits — directly applicable to Hermes fleet architecture. 2. Hugging Face breached by autonomous… https://thilanhewage.com/digest/2026-07-19 https://thilanhewage.com/digest/2026-07-19 Sun, 19 Jul 2026 00:00:00 GMT 🌅 Daily Research Digest — Sunday, 19 July 2026 https://thilanhewage.com/digest/2026-07-17 https://thilanhewage.com/digest/2026-07-17 Fri, 17 Jul 2026 00:00:00 GMT 🔎 Daily Research Digest — 2026-07-17 https://thilanhewage.com/digest/2026-07-16 https://thilanhewage.com/digest/2026-07-16 Thu, 16 Jul 2026 00:00:00 GMT 🔎 Daily Research Digest — 2026-07-16 https://thilanhewage.com/digest/2026-07-15 https://thilanhewage.com/digest/2026-07-15 Wed, 15 Jul 2026 00:00:00 GMT 🔎 Daily Research Digest — 2026-07-15