172 Compromised npm and PyPI Packages Carry the Shai-Hulud Worm — Patch Dev Stacks Now

Since 11 May, 172 npm and PyPI packages published with valid provenance attestations have been identified as carrying the Shai-Hulud worm. Any development environment that installed them should be treated as compromised, with credentials harvested from AWS keys, SSH private keys, GitHub PATs, HashiCorp Vault tokens, Kubernetes service accounts, and password managers.

Four Security Research Teams Map the Same Architectural Flaw in Claude — an Enterprise AI Governance Gap

Between 6 and 7 May, four separate security research teams published findings showing Claude acting as a confused deputy — accessing SCADA gateways without explicit instruction, hijacking OAuth tokens through browser extensions, and exfiltrating data across third-party integrations. No single patch exists; the issue is architectural.

Android 17 Reframes the OS as an Intelligence System — What the AI-First Platform Shift Means for Enterprise

Google has declared at I/O 2026 that Android 17 is no longer an operating system but an "intelligence system" — a fundamental reframing of the platform around AI agent capabilities. The shift means enterprise device management, MDM policies, and data governance frameworks built on Android OS assumptions will need rethinking.

Perceptron Mk1 Delivers Enterprise Video Analysis AI at 80–90% Lower Cost Than Frontier Models

A Mobile Carrier Is Deploying AI Voice Clones for Customer Calls — the Enterprise Security Implications Are Serious

A mobile virtual network operator has announced plans to deploy AI-cloned voices to handle outbound calls on behalf of customers, raising significant concerns about voice authentication in enterprise communications. The move highlights an emerging frontier in AI-enabled identity impersonation at the carrier level.

Docker Bypasses Host Firewalls Silently — Enterprise Container Deployments May Be Unknowingly Exposed

Docker's default networking behaviour bypasses host-level firewall rules by inserting its own iptables entries at higher priority than rules set by ufw or firewalld. Most containerised deployments — including enterprise production environments — may be unknowingly exposing services to the network.

Google Kills the Chromebook and Launches the Googlebook — Built Around Gemini, Not Chrome

Google has announced the Googlebook, a new laptop range that replaces Chromebooks and is built around Gemini Intelligence rather than Chrome OS. The shift ends 15 years of Chromebook enterprise deployments and introduces a device category with deep AI integration, targeting enterprise customers who have standardised on Google Workspace.

Gemini Gets a Major Upgrade on Android — Adaptive Widgets Plan Your Schedule Before You Wake Up

Google is rolling out Gemini Intelligence on Android this summer, bringing advanced generative UI capabilities to Samsung Galaxy and Pixel devices. The flagship feature is AI-adaptive widgets that reorganise themselves based on schedule, context, and predicted intent — a fundamental shift in how mobile AI interacts with users throughout the day.

Your Enterprise VPN May Be Leaking Identities and Traffic — Eight Gaps Your Security Stack Misses

VPN deployments across enterprise networks are failing to protect users in predictable ways — from DNS leaks that expose every domain queried to traffic-analysis attacks that re-identify users despite encryption. Eight attack surfaces your VPN does not address, and how to audit for each.

AMD 3D V-Cache Arrives in Enterprise Workstations — Lenovo ThinkStation P4 Is First to Ship

Lenovo has announced the ThinkStation P4, the first professional workstation to ship with AMD processors featuring 3D V-Cache technology, targeting simulation, engineering rendering, and data science applications. The combination brings AMD's stacked cache architecture — previously concentrated in consumer gaming CPUs — into formally certified enterprise workstation configurations.