TLDR IT 2026-08-07

China's cyberspace regulator launched a cybersecurity review of Palo Alto Networks products, citing potential risks to critical infrastructure and national security without identifying specific products or vulnerabilities. The move follows growing Chinese restrictions on foreign cybersecurity suppliers and echoes its earlier review that ultimately restricted Micron products.

Google says it will begin shutting down Google Assistant on mobile devices on September 4, moving users to Gemini instead. The transition may take several weeks and will also affect smartwatches, headphones, and cars using Android Auto, while users who already switched to Gemini will see no change.

NatJack is a class of attacks that manipulates NAT connection-tracking tables to hijack connections, poison DNS responses, or trigger denial of service. Testing covered 32 products and configurations across 13 vendors, with every implementation vulnerable to at least some of the techniques tested.

Data teams are moving away from all-in-one platforms toward a smaller best-of-breed architecture centered on data movement, storage and compute, and a control plane. Enterprise orchestration, observability, metadata, incident management, and agent runtime are the missing pieces needed to coordinate increasingly complex ELT pipelines and reduce the operational burden of tracking failures and data freshness.

AWS Marketplace AI Insights explain complex product pricing in plain language, including how costs scale, how multiple usage dimensions combine, and what is included. The feature could help enterprises compare consumption-based AI tools and forecast costs before purchasing, although its accuracy depends on the pricing information vendors publish.

Anthropic's inference hooks for Claude Enterprise route prompts and tool-call responses through a customer-controlled data loss prevention server before Claude can process them. The beta works across Claude surfaces, including chat, Claude Code, Cowork, and connected tools, and supports a single organization-wide configuration with staged enforcement options.

Cloudflare's Agent Access Model (AAM) is a security framework that treats each agent task execution graph as untrusted and authorizes every action against the agent, task, and accumulated resource state. Agent controls should use short-lived, sender-constrained credentials and inline enforcement in the harness and network, while a one-way Trust Ratchet can remove capabilities when protected events occur.

Unexpected AI expenses have caused one-quarter of enterprises to delay or cancel projects, while nearly half have escalated spending surprises to their boards, according to a survey of 396 organizations. Costs are becoming harder to track as AI spending spreads across models, infrastructure, developer tools, data platforms, and agentic workflows, pushing CIOs to build cost controls directly into their AI architecture.

As lunar and deep-space missions move toward interconnected networks, communications systems must support high-volume data while resisting eavesdropping, jamming, ransomware, and nation-state attacks. NASA's planned LunaNet may use Delay/Disruption Tolerant Networking, 4G/5G radio links, and optical inter-satellite links, alongside hardware roots of trust, secure boot, post-quantum cryptography, and updateable space-qualified systems.

Cisco released security updates for Catalyst SD-WAN Software to address several vulnerabilities, including three rated CVSS 9.9 that may enable access-control bypass, privilege escalation, or sensitive-data exposure.

HPE will honor hardware pricing from quote issuance until equipment leaves its factories, easing pricing uncertainty caused by volatile server, memory, and storage component costs.