The archive

Latest articles

Reporting, explainers, and analysis on data and AI, updated continuously by the newsroom.

Databricks PAT auto-scoping timeline showing 30 days of API observation, a 7 day reminder before enforcement, 90 day unused PAT revocation, and the 730 day default maximum token lifetime.

Databricks PAT auto-scoping is a quiet job breaker

Databricks PAT auto-scoping narrows long-lived tokens after 30 days of observed API use. Audit automation now before jobs fail.

Lars Cornelissen · Jun 22, 2026

Matillion anomaly alerts baseline requirements showing 10 successful runs needed before alerts and up to 300 successful runs used for history.

Matillion anomaly alerts: runtime drift without polling

Matillion anomaly alerts flag runtime drift after 10 successful runs, using up to 300 runs of history so you can watch cost before failure.

Lars Cornelissen · Jun 22, 2026

Snowflake Adaptive Compute is generally available on AWS in six regions and Snowflake reports 1.2x price-performance versus Gen2 on the TPC-DS 10TB Concurrency Benchmark.

Snowflake Adaptive Compute changes AWS cost models

Snowflake Adaptive Compute is GA on AWS in six regions, with query-level billing and a 1.2x Snowflake benchmark edge over Gen2.

Lars Cornelissen · Jun 22, 2026

Snowflake Dynamic Tables refresh cost pattern showing 200 tables at a 1 minute target lag producing 288000 daily change detection checks, versus 28800 at 10 minutes and 4800 at 60 minutes.

Snowflake Dynamic Tables refresh gets a cost test

Snowflake Dynamic Tables now claim up to 2.8x faster refresh on Gen2 warehouses, but the cost win depends on target lag and change volume.

Lars Cornelissen · Jun 22, 2026

Vibe coding security donut showing 5,000 sensitive-data assets out of 380,000 public AI-built assets, with 375,000 other public assets.

Vibe coding security needs a real publish gate now

Vibe coding security is a publish-time problem: 5,000 AI-built public assets reportedly exposed sensitive data, so add gates before launch.

Lars Cornelissen · Jun 22, 2026

AI music training data comparison showing the four reported dataset sizes: 12.648 million tracks, 9 million tracks, 0.106 million tracks, and 0.100 million tracks.

AI music training data gets a searchable paper trail

AI music training data now has a searchable trail: The Atlantic surfaced four datasets with more than 21 million tracks, raising build risk.

Lars Cornelissen · Jun 21, 2026

FortiBleed exposure bars showing CISA at about 74,000 Fortinet devices and SOCRadar at 86,644 compromised FortiGate access points.

FortiBleed puts FortiGate credentials on the clock now

FortiBleed is an active FortiGate credential exposure campaign with up to 86,644 devices reported. Rotate, isolate, and investigate now.

Lars Cornelissen · Jun 21, 2026

Splunk CVE-2026-20253 timeline showing day 0 disclosure on June 10, day 2 public technical write-up on June 12, day 8 CISA KEV addition on June 18, and day 11 federal due date on June 21.

Splunk CVE-2026-20253 puts SIEMs on a 72-hour clock

Splunk CVE-2026-20253 is an actively exploited critical flaw. Patch exposed Enterprise 10.0 and 10.2 nodes by June 21.

Lars Cornelissen · Jun 21, 2026

Agentic clinical RAG acceptance rates from 80 percent minimum per type, 96.5 percent overall across 7,326 judgments, and 99 percent maximum per type.

Agentic clinical RAG gets 96.5% clinician acceptance

Agentic clinical RAG accepted 96.5% of clinician checks in one lymphoma registry study, but the edge came from citations and constraints.

Lars Cornelissen · Jun 20, 2026

Fortinet credential exposure chart comparing 87,000 FortiGate SSL VPN devices in 2021 with approximately 74,000 Fortinet devices in 2026 FortiBleed reports.

Fortinet credential exposure needs a reset plan now

Fortinet credential exposure means about 74,000 edge devices may have leaked logins. Rotate, audit, and lock down FortiGate access now.

Lars Cornelissen · Jun 20, 2026

Mastra npm supply chain attack count chart showing more than 140 affected packages, 166 wallet extension IDs checked, and 7 attack phases.

Mastra npm supply chain attack hits AI build rooms

Mastra npm supply chain attack exposed AI build pipelines through more than 140 packages, so treat installs as secret exposure events.

Lars Cornelissen · Jun 20, 2026

Splunk Enterprise flaw CVE-2026-20253 response timeline showing disclosure at day 0 on June 10, public technical writeup at day 2 on June 12, exploitation warning at day 8 on June 18, and the CISA remediation deadline at day 11 on June 21.

Splunk Enterprise flaw turns logs into attack surface

Splunk Enterprise flaw CVE-2026-20253 is under active exploitation. Patch by June 21 or disable the PostgreSQL sidecar safely.

Lars Cornelissen · Jun 20, 2026