The HashWhales Dispatch

Software, security, and cloud news — summarized in plain language, with sources.

AI Coding Agents Hijacked via Fake Errors; New Ransomware Gang Rises Fast

Two new threats demand attention: a technique that weaponizes developer tooling against AI agents, and a ransomware group climbing victim charts with aggressive affiliate payouts.

Vercel AI SDK Adds Agent Harness Support; GitHub Logs Nine May Outages

Vercel expands its AI SDK to orchestrate major coding agents while GitHub discloses a turbulent May marked by nine separate service incidents.

LangGraph RCE Flaws and a Rising Ransomware Gang Headline Cyber Week

Patched vulnerabilities in a popular AI agent framework and fresh intelligence on a fast-growing ransomware operation put pressure on security and engineering teams.

AWS and Cloudflare Expand Observability and Private Network Routing

Two major platform updates reduce tool-switching for ops teams and eliminate the need for public IPs when exposing private applications.

AWS and Cloudflare Simplify Log Access and Private-Origin Routing

Two networking updates cut console-hopping and eliminate the need for public IPs when exposing private apps.

ShinyHunters Zero-Day Hits Universities; New Ransomware Gang Rises Fast

Two separate threat actors are reshaping enterprise risk: one exploiting an Oracle PeopleSoft flaw before a patch existed, another scaling ransomware operations with a 90% affiliate payout model.

GitHub logs nine May incidents; Vercel lands inside xAI's Grok Build

A turbulent month for GitHub reliability coincides with Vercel expanding its deployment reach into xAI's Grok Build environment.

Ransomware Group 'The Gentlemen' Exposed as Industry Honors Quiet Defenders

Investigators close in on the operator behind one of ransomware's fastest-rising gangs, while the security industry pauses to recognize the work that keeps attacks from making headlines.

GitHub Cuts Secret Scanning Noise With LLM Verification; Vercel Adds DeepSeek via Azure

Two platform updates this week sharpen AI tooling for security and model access in production environments.

npm Locks Down Install Scripts; New Ransomware Gang Climbs Victim Charts

GitHub's npm overhaul targets supply chain exploits while a fast-rising ransomware group called The Gentlemen lures affiliates with a 90% revenue split.

AWS Adds GPT-5.4/5.5 to Bedrock; Cloudflare Opens Private-Origin Routing Beta

Two infrastructure moves this week lower the bar for enterprises deploying AI workloads and exposing internal apps to the public internet.

AWS Graviton5 Instances Launch as Cloudflare Opens Private-Origin Routing Beta

Two major infrastructure moves this week lower the cost and complexity of connecting public-facing apps to private backend systems.

Signal, not noise

Technology news translated into business decisions

The HashWhales Dispatch follows cybersecurity incidents, software releases, artificial intelligence, cloud infrastructure, and the policy changes that affect modern organizations. Each brief links to its original sources and explains why the development matters, without turning a press release into a prediction. The goal is to help owners and technical leaders decide what deserves attention now, what can wait, and what should change in their systems.

For deeper implementation guidance, visit our engineering insights. If a story raises a question about your own website, network, backups, or security posture, request a free technology risk review for a practical, company-specific next step.

Free AuditChat on WhatsApp