Copilot searched your mailbox. LiteLLM handed out admin keys. Run this 5-check audit before your stack is next

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a CVE, a verify command, and a fix.
VentureBeat

Z.ai’s open-weights GLM-5.2 beats GPT-5.5 on multiple long-horizon coding benchmarks for 1/6th the cost

Today, Chinese AI startup Z.ai (formerly Zhipu AI) announced the immediate release of GLM-5.2, a 753-billion parameter open-weights large language model (LLM) engineered specifically to dominate "long ...
GitHub

AWS API Gateway - Managed API Front Door for Cloud Services

AWS API Gateway helps teams create, secure, publish, monitor, and scale APIs for cloud applications and serverless services. Download AWS API Gateway to build, publish, monitor, and protect scalable ...
InfoQ

A Trailing Slash Bypassed AWS API Gateway Authorization

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
Krebs on Security

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS ...
CNBC

AWS data center outage hits trading on FanDuel, Coinbase — recovery to take hours

Amazon Web Services reported operational issues starting Thursday night due to a "thermal issue" at a Virginia facility. The leading cloud provider's outage was tied to issues on popular trading ...
Reuters

Amazon cloud outage at North Virginia data center largely resolved

AWS says full recovery could take several hours Coinbase re-enables trading across all markets, says primary issue fully resolved Outage highlights overheating issue at data centers May 7 (Reuters) - ...
TechCrunch

Pentagon inks deals with Nvidia, Microsoft, and AWS to deploy AI on classified networks

After landing agreements with Google, SpaceX, and OpenAI, the U.S. Defense Department said on Friday that it has signed deals with Nvidia, Microsoft, Amazon Web Services, and Reflection AI that allow ...
Ars Technica

Amazon stuck with months of repairs after drone strikes on data centers

Amazon’s cloud customers will need to wait several more months before the US tech company can repair war-damaged data centers and restore normal operations in the Middle East. The announcement comes ...
TheServerSide

Top REST API URL naming convention standards

There is no sanctioning body or open source linter that can verify if a RESTful API conforms and complies with all applicable REST API naming conventions and best practices. However, REST API ...
techtimes

API Key Leak Exposes AWS, Stripe, OpenAI Credentials Across Thousands of Sites

A large-scale cybersecurity study has revealed a serious global web security issue involving exposed API credentials tied to major platforms, including Amazon Web Services, Stripe, and OpenAI. After ...