AWS Adds AI Coding Metrics; Cloudflare Patches Two WordPress Flaws
Two infrastructure giants move to close visibility and security gaps affecting developers and site operators this week.
The HashWhales Dispatch
Software, security, and cloud news — summarized in plain language, with sources.
networking
cybersecurity
HollowGraph Hides Espionage in M365 Calendars; Microsoft Patches Record 570 Flaws
A novel malware strain exploits Microsoft 365 calendar events as a covert command channel while Microsoft issues its largest-ever Patch Tuesday, fixing 570 vulnerabilities.
cybersecurity
7-Zip Code Execution Flaw and Microsoft's 570-Patch Record Month Raise Alarm
Two major vulnerability disclosures in July 2025 signal a sharp escalation in software attack surface exposure for enterprise and SMB environments alike.
cybersecurity
NGINX Heap Overflow and Microsoft's 570-Flaw Patch Drop Demand Urgent Action
Two major patch events in July 2026 put web infrastructure and Windows environments squarely in attackers' crosshairs.
cybersecurity
Sandworm Deploys CAPTCHA Trick on Ukraine; Microsoft Fixes Record 570 Flaws
A GRU-linked hacking unit is weaponizing fake CAPTCHAs against Ukrainian targets while Microsoft rushes out its largest-ever patch batch, nearly tripling last month's record.
networking
Cloudflare Patches WordPress Flaws; AWS Streamlines OpenSearch Migration
Two platform-level moves address security gaps and operational friction for teams running web applications and search infrastructure.
cybersecurity
WordPress Core RCE Bug and Microsoft's 570-Flaw Patch Drop Demand Urgent Action
Two major patch events hit simultaneously: a no-authentication WordPress remote code execution flaw and Microsoft's largest-ever Patch Tuesday by a wide margin.
software
AI Cuts Code-Writing Costs, But Ownership Burden Stays High
GitHub reframes software decision-making for the AI era while Vercel adds cache transparency to runtime logs.
cybersecurity
North Korean SVG Malware and Microsoft's Record 570-Flaw Patch Drop
Two major cybersecurity developments hit the same week: a North Korean steganography campaign targeting developers and Microsoft's largest-ever Patch Tuesday.
cybersecurity
Microsoft Patches Record 570 Flaws; CISA Flags SharePoint Zero-Day
A historic Patch Tuesday and an actively exploited SharePoint RCE zero-day are forcing IT teams to prioritize remediation at unprecedented scale.
networking
Grafana Wins FedRAMP High; Cloudflare Adds DNS Transparency Signal
Two infrastructure updates this week sharpen compliance posture and DNS reliability for organizations running sensitive workloads.
networking
AWS exposes AMI-SSM links; Cloudflare flags DNSSEC bypasses in real time
Two infrastructure updates sharpen visibility into cloud image discovery and DNS security failures, giving operators faster, clearer signals when something goes wrong.
Technology news translated into business decisions
The HashWhales Dispatch follows cybersecurity incidents, software releases, artificial intelligence, cloud infrastructure, and the policy changes that affect modern organizations. Each brief links to its original sources and explains why the development matters, without turning a press release into a prediction. The goal is to help owners and technical leaders decide what deserves attention now, what can wait, and what should change in their systems.
For deeper implementation guidance, visit our engineering insights. If a story raises a question about your own website, network, backups, or security posture, request a free technology risk review for a practical, company-specific next step.