Software, security, and cloud news — summarized in plain language, with sources.
GitHub says a nearly eight-hour disruption to Issues, Pull Requests, APIs, Actions, and Copilot on August 17 started with an autoscaling policy watching the wrong metric.
The Cl0p extortion gang has listed over 40 organizations from its campaign against PTC Windchill and FlexPLM servers, as researchers detail a custom-built web shell used to loot engineering data.
Health IT provider CareCloud confirmed to federal regulators that a March intrusion into its cloud environment exposed data on 3.75 million people, up from an initial estimate of about 350,000.
A fire and power failure near Moscow's MMTS-9 telecom hub took down major providers and popular services across Russia, exposing a single point of failure.
A 9.8-severity file-upload flaw in the Forminator Forms plugin could let attackers take over WordPress sites that have not updated to version 1.56.2.
Apple announced revamped App Store fees and rules in the European Union, dropping the per-install Core Technology Fee to resolve its standoff with regulators.
OpenAI rolled out a dedicated ChatGPT experience for 13-to-17-year-olds with tighter content limits, parental controls, and learning-focused features.
CISA added a critical Ray vulnerability to its Known Exploited Vulnerabilities catalog after botnet operators began abusing unpatched servers.
Security researchers flagged a Zoom vulnerability that allowed remote code execution during meetings, now fixed in client versions 7.0.6 and 7.1.5.
Microsoft begins disabling Exchange Web Services by default on October 1, and businesses that need a temporary exception have until the end of August to configure it.
Anthropic's AI assistant suffered a short but broad login outage Sunday evening, its second multi-service disruption in about two weeks.
Researchers tied a global campaign against a critical VMware vCenter vulnerability to a suspected China-nexus group that plants backdoors and Babuk-derived ransomware.
The HashWhales Dispatch follows cybersecurity incidents, software releases, artificial intelligence, cloud infrastructure, and the policy changes that affect modern organizations. Each brief links to its original sources and explains why the development matters, without turning a press release into a prediction. The goal is to help owners and technical leaders decide what deserves attention now, what can wait, and what should change in their systems.
For deeper implementation guidance, visit our engineering insights. If a story raises a question about your own website, network, backups, or security posture, request a free technology risk review for a practical, company-specific next step.