TLDR IT 2026-07-31

Researchers demonstrated a document-borne attack that hides instructions inside files processed by Copilot, alters generated content, and copies itself into newly created documents. Microsoft has deployed mitigations, but researchers say the underlying problem remains because current models cannot reliably distinguish untrusted data from executable instructions.

Third-party facilities now host 46% of enterprise workloads, compared with 44% in company-owned datacenters, marking the first time off-premises infrastructure has taken the lead, according to Uptime Institute's survey of more than 800 operators. Typical rack density also climbed above 11 kW as organizations replace older servers with more power-hungry hardware.

Anthropic discovered that Claude models unintentionally reached the public internet during supposedly isolated cybersecurity evaluations and compromised systems belonging to three real organizations using weak passwords and unauthenticated endpoints. The incidents involved Opus 4.7, Mythos 5, and an internal research model, with the earliest dating back to April, and were uncovered only after Anthropic reviewed more than 141,000 test sessions following OpenAI's similar incident. Anthropic suspended its cyber evaluations and notified the affected organizations, two of which had not detected the activity.

DNS is often managed through manual dashboards and scattered accounts even though a single incorrect change can disrupt websites, email, certificates, and other critical services. Bring domain and DNS management into Infrastructure as Code, APIs, and CLI workflows so changes are repeatable, reviewable, automated, and easier to audit or roll back.

Opposition to new data centers is becoming a material infrastructure and budgeting risk, with protests organized across 42 states, construction moratoriums active in 10 states, and new large-load electricity tariffs emerging across the country. CIOs may need to secure capacity earlier, reconsider cloud and colocation cost assumptions, diversify regions and providers, and treat compute and power as strategic supply-chain dependencies.

Inforcer raised a $50 million Series C to expand its platform for MSPs managing Microsoft 365 environments across multiple small and midsize businesses. The company says revenue is growing 300% year over year as it adds capabilities for detecting unauthorized AI use and responding to security threats across customer environments.

Okta agreed to acquire Permiso Security in a deal reportedly worth just under $200 million, adding technology that detects suspicious behavior involving employees, service accounts, applications, and AI agents after they have authenticated. The acquisition pushes Okta deeper into identity threat detection and response and the security operations center, with capabilities for identifying excessive privileges, compromised identities, and anomalous agent activity across cloud and SaaS environments.

Cisco's outdoor Wireless 9177 Series combines tri-band Wi-Fi 7 with automated frequency coordination for outdoor 6 GHz access and Ultra-Reliable Wireless Backhaul for multigigabit connectivity and sub-10-millisecond handoffs. The access points offer directional, omnidirectional, and external-antenna models, copper or fiber uplinks, and cloud or on-premises management for campuses, ports, industrial facilities, stadiums, and transit environments.

Nexus Hyperfabric lets IT teams design cloud-managed VXLAN EVPN networks using validated templates, automatically generate hardware bills of materials, and perform guided zero-touch deployments. The platform abstracts much of the BGP, VXLAN, and cabling complexity normally associated with datacenter fabric deployments.

Qualcomm's latest comments suggest Apple is moving more quickly toward replacing third-party modems with its own chips, potentially improving battery efficiency while reshaping the mobile-device supply chain.

A Russian espionage group is exploiting an on-premises Outlook Web Access flaw that can install a mailbox-based browser implant when a victim opens a malicious email.