Every published Canopy story, newest first — free, unedited, no paywall.
Privacy & Regulation US Justice Department seizes over 1,000 domains streaming FIFA World Cup without authorization Federal authorities executed one of the largest domain seizures targeting live sports piracy, blocking nearly 3,000 websites streaming World Cup matches. 
Security Palo Alto GlobalProtect VPN vulnerability exploited in Qilin ransomware attacks A critical authentication bypass flaw in widely deployed enterprise VPN infrastructure is now being weaponized by a known ransomware operation. 
Cloud & Infrastructure Two-phase cooling systems target AI accelerator thermal challenges Startup claims 14°C temperature reduction using refrigerant-based cooling, addressing GPU thermal density in AI infrastructure. 
Artificial Intelligence Qwen-Image-3.0 model released with enhanced visual generation capabilities Alibaba's open-source image model expands competitive options for visual AI generation outside Western providers. 
Security Windows LegacyHive zero-day receives unofficial patches from third-party security researchers Windows systems remain vulnerable to privilege escalation attacks until Microsoft ships official patches, leaving admins to evaluate third-party remediation. 
Cloud & Infrastructure Google Cloud outage exposes resilience transparency gap in hyperscaler architecture Single datacenter outages reveal customers still lack clear visibility into how cloud providers actually isolate failures across zones and regions. 
Cloud & Infrastructure OVH deploys Januscape critical bug patch via mass server reboots without customer consent A major European cloud provider patched a critical infrastructure vulnerability by forcing server reboots without seeking advance customer approval, testing the approach in Australia first. 
Artificial Intelligence AI companies acquire out-of-print books for training data from secondhand bookstores Technology companies are sourcing training data beyond public internet content, raising questions about copyright and the boundaries of fair use in AI development. 
Privacy & Regulation Flock Safety faces credibility questions over automated license plate reader claims Municipalities deploy surveillance infrastructure based on vendor claims that may lack independent verification. 
Security WordPress critical vulnerability under active exploitation with public proof-of-concepts A critical flaw affecting the world's most popular content management system is being actively exploited with dozens of public attack tools available. 
Security Estée Lauder data breach traced to Oracle E-Business Suite vulnerability A flaw in widely deployed enterprise resource planning software exposed HR data at a Fortune 500 company, highlighting third-party platform risk. 
Security SonicWall SMA1000 zero-day vulnerabilities exploited for weeks before disclosure Two unpatched flaws in widely deployed enterprise VPN appliances allowed attackers to install custom malware before vendors became aware. 
Security JadePuffer autonomous AI agent deploys ransomware targeting AI training data and model checkpoints Attackers now use autonomous AI agents to encrypt AI infrastructure assets including training datasets and vector databases, escalating threats to organizations deploying machine learning. 
Security Cursor, Codex, Gemini CLI, and Antigravity AI coding tools vulnerable to sandbox escape attacks Popular AI coding assistants allow attackers to escape security sandboxes by writing files that host tools later execute, potentially compromising developer workstations. 
Cloud & Infrastructure Space Force seeks up to $30 billion in rocket launch contracts The largest government rocket procurement in history signals a strategic shift in military space operations and creates new opportunities for launch providers. 
Cloud & Infrastructure Malicious cloud workloads could destabilize power grids, researchers warn Coordinated attacks using cloud computing resources could exploit datacenter power consumption patterns to create instability in electrical grids. 
Artificial Intelligence OpenAI publishes safety framework for long-horizon AI models OpenAI addresses safety challenges as AI systems gain ability to operate autonomously over extended periods without human oversight. 
Artificial Intelligence ArXiv submissions show over 30% now read as AI-written The accelerating use of AI writing tools in academic preprint repositories raises questions about research authenticity and peer review effectiveness. 
Security HollowGraph malware uses Microsoft 365 calendars as command-and-control channel Attackers now exploit legitimate calendar features in compromised Microsoft 365 accounts to hide malicious communications within everyday business activity. 
Hardware & Devices LG monitors auto-install software on Windows PCs via driver updates, including McAfee advertising Hardware vendors using Windows Update to silently install applications raises questions about driver delivery boundaries and user consent. 