Microsoft faces UK tribunal over alleged multibillion‑pound cloud overcharges
TL;DR A collective claim against Microsoft is before the UK Competition Appeal Tribunal, alleging the company overcharged organisations that run…
US Sues Former Accenture Manager Over Alleged False Claims on Army Cloud Security
TL;DR The Department of Justice has filed suit against a former Accenture senior manager alleging she misled federal auditors about…
Microsoft to expand bug payouts across all services, even without programs
TL;DR Microsoft's Security Response Center says it will pay researchers for critical flaws that affect its online services regardless of…
NATO: Speed and sovereign cloud capabilities are existential to defense
TL;DR NATO's assistant secretary general for cyber and digital transformation told RUSI that the alliance must accelerate development of sovereign…
Airbus to Move Mission-Critical Systems to a Sovereign European Cloud
TL;DR Airbus plans a major procurement to migrate key on-premises applications — including ERP, manufacturing execution, CRM and product lifecycle…
Europe doubles down on cutting digital ties to US cloud giants
TL;DR European public bodies are beginning to shift workloads off US hyperscalers as a legal conflict between the US CLOUD…
Microsoft patches 9.9-rated Kestrel request-smuggling bug in ASP.NET Core
TL;DR Microsoft has released a patch for a critical ASP.NET Core vulnerability in the Kestrel web server (CVE-2025-55315) that enables…
Python Software Foundation rejects $1.5M NSF grant over DEI restriction
TL;DR The Python Software Foundation declined a $1.5 million grant from the National Science Foundation after the award terms would…
Docker Compose path-traversal bug lets attackers write to host — update now
TL;DR A path traversal vulnerability in Docker Compose's OCI artifact handling (CVE-2025-62725, NIST severity 8.9) could let attackers cause Compose…
PostHog: Shai‑Hulud 2.0 worm was company’s largest security failure
TL;DR PostHog says the Shai‑Hulud 2.0 incident — where malicious npm releases were pushed and a worm harvested developer secrets…