86 stories on engineering from the Data Today newsroom.
The AI compute cost gap is widening: 92 percent of enterprises lack mature cost tracking for AI infrastructure even as 45 percent plan to switch or add providers within a year, risking runaway spend.
Two SonicWall SMA 1000 zero-day vulnerabilities including a CVSS 10.0 SSRF are under active exploitation. CISA KEV-listed with a July 17 patch deadline.
Apple's Neural Engine, born from its failed car project, became the backbone of on-device AI. The M7 Ultra with 1.5TB of RAM could put Apple in the server inference market by 2027.
Ghostcommit is a prompt injection attack that hides malicious instructions inside PNG files in pull requests. It exploits a blind spot in AI code reviewers to steal .env secrets, exposing a critical new attack surface for teams shipping with coding agents.
Managed Iceberg materialized views let external engines like Trino read your Databricks MVs. Now in Public Preview, they shift the lock-in calculus.
A critical Gitea Docker auth bypass, CVE-2026-20896, lets attackers impersonate any user with one HTTP header. Over 6,200 instances are exposed online.
ShareFile Storage Zone Controllers are on-prem servers Progress ordered shut down on July 10 over a credible threat with no patch available.
HalluSquatting is a pull-based prompt-injection attack that exploits LLM hallucinations of repository names. Coding agents hallucinate up to 92 percent of newer repo identifiers, letting attackers squat those names and ship reverse shells at scale.
LeRobot v0.6.0 adds a DAgger correction loop that turns robot deployment failures into training data, plus reward models and world model policies in one CLI.
Lakehouse Real-Time is a serverless SQL warehouse for sub-second reads against Unity Catalog tables. It targets thousands of concurrent users but only supports SELECT queries via the Statement Execution API, and it is in Beta.
LeRobot v0.6 ships world models, reward APIs, and DAgger deployment. The robot learning flywheel turns from research demo into a repeatable engineering workflow for VLA builders.
Snowflake workload identity federation is now GA, letting Snowflake act as an OIDC provider so workloads authenticate to external services with short-lived tokens instead of static credentials. It costs zero additional credits and eliminates credential rotation for outbound API calls.
Bad Epoll (CVE-2026-46242) is a Linux epoll use-after-free giving unprivileged users root on v6.4+ kernels and Android. No workaround exists. Apply patch a6dc643c6931 now.
Citrix Bleed 2 is now an Anubis ransomware access path. Patch NetScaler, kill sessions, and hunt RMM plus credential abuse.
SharePoint CVE-2026-45659 is an actively exploited RCE risk in CISA KEV. Patch exposed servers and check compromise now.
RLVR for tool-use agents trains a 4B model to hit 1.00 reward on Atlassian API tasks, up from a 0.35 baseline on Confluence page creation. Synthetic environments and verifiable rewards close the schema gap.
AI browser security now has a six-agent failure case: BioShocking shows guardrails breaking when web content rewrites context.
Langflow RCE is being used to mine Monero on exposed AI app endpoints. Patch, isolate, and treat public workflows as production attack surface.
SimpleHelp CVE-2026-48558 is an actively exploited auth bypass. Patch 5.5.16 or 6.0 RC2, then hunt for TaskWeaver and Djinn.
Spring AI 2.0 is a sturdier Java AI stack: Boot 4.1, MCP, unified tool loops, and 4 Cosmos DB modules now matter for agents.
AI coding agent malware can hide behind a clean repo. Lock down setup execution, DNS egress, and agent permissions before rollout.
VS Code Tasks supply chain attack is a package hijack pattern that can run outside npm lifecycle scripts, so scan editor configs now.
Unity AI Gateway budgets set shared and per-user AI spend limits for Genie and gateway traffic, with alerts and blocking for admins.
LineShine supercomputer is a 2.198 exaflop CPU machine. Treat it as a supply chain signal, with a power bill attached.
Matillion Maia BigQuery support brings GCP warehouses into Maia on Current now, with Stable expected August 1, 2026.
Dynamic Iceberg table replication now keeps Snowflake managed Iceberg pipelines in DR plans, but refresh and transfer costs move to the target account.
Cisco Unified CM CVE is now a patch-or-isolate job: CISA set a June 28 deadline after active exploitation of CVE-2026-20230.
Signal backup recovery keys can expose historical chats after one phishing win. Treat messenger backups like identity infrastructure now.
CISA KEV vulnerabilities are a live patch queue: four exploited Lantronix and UniFi OS bugs now demand edge inventory and compromise checks.
FortiBleed FortiGate credentials are an active edge risk: rotate VPN and admin access now, then hunt for persistence.
Ford AI quality is a lesson in automation debt: 350 veteran engineers came back as JD Power scores rose and recalls stayed costly.
IBM nanostack chip is a 0.7 nm research architecture that stacks transistors, doubling IBM’s 2021 density claim to nearly 100 billion.
Post-quantum cryptography deadline means high-value federal systems must shift key establishment by 2030 and signatures by 2031.
Copilot spend meter is VS Code's new warning for AI credit overruns. Treat the 1,500 Pro credits as a budget, not a perk.
AutoJack is a host RCE warning for AI agent prototypes: one malicious page chained three AutoGen Studio weaknesses into command execution.
FortiBleed credential theft turns compromised FortiGate firewalls into sniffers. Rotate secrets and hunt traffic capture now.
High-NA EUV is ASML’s 8 nm lithography step for denser AI chips. Treat the $400M tool as a roadmap risk and cost signal.
45C liquid cooling lets Rubin racks reject heat with dry coolers, cutting on-site water use while shifting scrutiny to power and buildout.
45C liquid cooling lets Rubin servers use warmer coolant and near zero facility cooling water in favorable climates, changing AI site math.
Databricks Lakeflow Designer is GA for visual, governed data prep. Use it for analyst-built transforms, but meter previews and jobs.
Databricks PAT auto-scoping narrows long-lived tokens after 30 days of observed API use. Audit automation now before jobs fail.
Matillion anomaly alerts flag runtime drift after 10 successful runs, using up to 300 runs of history so you can watch cost before failure.
Snowflake Adaptive Compute is GA on AWS in six regions, with query-level billing and a 1.2x Snowflake benchmark edge over Gen2.
Snowflake Dynamic Tables now claim up to 2.8x faster refresh on Gen2 warehouses, but the cost win depends on target lag and change volume.
Vibe coding security is a publish-time problem: 5,000 AI-built public assets reportedly exposed sensitive data, so add gates before launch.
FortiBleed is an active FortiGate credential exposure campaign with up to 86,644 devices reported. Rotate, isolate, and investigate now.
Splunk CVE-2026-20253 is an actively exploited critical flaw. Patch exposed Enterprise 10.0 and 10.2 nodes by June 21.
Fortinet credential exposure means about 74,000 edge devices may have leaked logins. Rotate, audit, and lock down FortiGate access now.
Mastra npm supply chain attack exposed AI build pipelines through more than 140 packages, so treat installs as secret exposure events.
Splunk Enterprise flaw CVE-2026-20253 is under active exploitation. Patch by June 21 or disable the PostgreSQL sidecar safely.
Subquadratic attention is a sparse LLM design now showing a 56.2x speed test win at 1M tokens. Treat it as promising, gated infrastructure.
Flexible data centers let AI sites cut load for a few peak hours, with Duke finding 76 GW of headroom at 0.25% curtailment.
Snowflake Hybrid Tables are row-store tables for OLTP-style work in Snowflake. New preview optimizations report up to 8x throughput.
Snowflake Iceberg ADLS support is the GA path for Azure teams to read and write externally managed Iceberg tables without moving storage.
olmo-eval is an open workbench for iterative LLM evaluation. It makes tiny checkpoint gains harder to mistake for progress.
Miasma is a self-propagating npm worm. It hijacked Red Hat's GitHub Actions OIDC trusted publishing to ship 96 backdoored @redhat-cloud-services versions whose preinstall hook runs a Bun credential stealer that then spreads with the secrets it steals.
Confidential inference lets Apple run AFM 3 Cloud Pro on NVIDIA GPUs in Google Cloud while keeping PCC privacy promises.
MCP is an open standard that lets AI models call your tools and data through one connector instead of a custom integration per model. Here is what it means for data engineers.
Miasma worm is a credential stealer that hit 73 Microsoft GitHub repos. Treat agent-opened clones as compromised, not suspicious.
Xcode 27 is Apple's AI development reset: free Private Cloud Compute for small apps, agent hooks, and five AFM 3 models change build calculus.
Matillion Context Engine is a public preview knowledge graph for Maia AI Agents. Start with restricted domain graphs and watch crawler scope.
Snowflake Adaptive Compute is query-based adaptive warehouse compute. Use its 2 knobs to cap bursts, monitor credits, and avoid blind migrations.
ICEBERG_MERGE_ON_READ_BEHAVIOR is Snowflake's GA switch for Iceberg DML mode. AUTO sends 3 of 4 table cases to merge-on-read.
The Databricks Data Intelligence Platform is a lakehouse that unifies storage, compute, governance, and AI on open Delta tables. Here is how the pieces fit and where the cost goes.
Matillion Context Engine is a public preview metadata layer that gives Maia AI Agents knowledge graphs for safer pipeline work.
The Data Productivity Cloud is Matillion's cloud-native platform for building, running, and orchestrating data pipelines with low-code, code, and AI. Here is how the pieces fit and where the cost goes.
Snowflake Adaptive Compute is query billed warehouse compute with 2 tuning knobs. Use it when tuning costs more than control.
Snowflake Adaptive Compute is query-billed warehouse compute. Its default XLARGE cap and multiplier 2 force FinOps teams to retest sizing.
Cortex Agents let you build an AI agent that reasons across structured tables, unstructured documents, and custom tools inside Snowflake. It orchestrates a plan-act-reflect loop, and the bill is the sum of four meters you need to watch.
Snowflake Cortex AI exposes LLMs as SQL functions like AI_COMPLETE and AI_CLASSIFY, so you run inference without moving data out. It is billed per token by model, and cost swings roughly 40x between a small model and a frontier one, so model choice is the budget.
Cortex Analyst is Snowflake's managed text-to-SQL service: business users ask questions in natural language and get answers without writing SQL. The accuracy depends almost entirely on a semantic view you build, and it is billed per message, not per token.
Cortex Search is Snowflake's managed hybrid search service: it embeds your text, runs vector plus keyword retrieval with reranking, and keeps the index fresh, so you can build RAG and enterprise search without standing up a vector database. The cost is several meters, and serving compute bills even when idle.
Snowflake Gen2 standard warehouses run on faster hardware and finish most queries quicker, but they bill at a higher credit rate and you often have to switch with a SQL clause. Whether they save money depends entirely on whether the speedup beats the rate.
Snowflake access control is role-based: privileges attach to roles, not users. Splitting access roles from functional roles collapses thousands of direct grants to a few hundred, and one masking policy can protect thousands of columns at query time.
Snowflake Iceberg tables store data in open Apache Iceberg format in your own cloud storage, so Snowflake bills zero storage and other engines can read it. The catch: only Snowflake-managed catalog tables get full platform support, external-catalog tables lose clustering, cloning, and replication.
Openflow is Snowflake's managed data integration service, built on Apache NiFi, that moves structured and unstructured data from any source into Snowflake. It runs in two modes: inside Snowflake on container services, or in your own cloud VPC, and each bills and isolates differently.
Snowflake clustering keys reorganize micro-partitions so queries prune more of the table. On a well-clustered date column a one-day query can scan 140 micro-partitions instead of 9,800, but automatic clustering bills credits, so it only pays on big, filtered, slow-changing tables.
Dynamic Tables let you declare a SELECT and a target lag and let Snowflake refresh it; Streams and Tasks give you imperative control. Dynamic Tables bottom out at a 60-second minimum lag, so sub-minute freshness still means Snowpipe Streaming or Tasks.
Snowflake warehouse sizing sets your credit burn: each size up doubles credits per hour, so a 4XL costs 128 credits per hour against an XS at 1. Right-size by workload, not by habit.
AI agent security is privileged access control for LLMs. Meta’s Instagram hack shows one support bot can turn account recovery into takeover.
TeamPCP is the cybercrime crew behind the Shai-Hulud npm worm. It open-sourced the malware in May 2026, then poisoned Red Hat's packages and blurred the question of who to blame.
AI agents are not yet mainstream, and the developers who use them report personal speed but little team-wide gain. The fix is teaching agents when to stop.
AI chip performance per dollar improves about 37 percent a year, yet each new flagship costs more upfront. The GB300 delivers 24 times the value of a P100 at nine times the price.
LLM context windows have expanded about 30 times a year since 2023, from a few thousand tokens to over a million. The change quietly rewrites how RAG systems should be built.
The installed stock of AI chips is growing 3.4 times a year, doubling every seven months. The capacity question has quietly shifted from chips to power and buildings.
LLM inference costs fell between 9 and 900 times a year depending on the task. The cheapest gains landed on easy work, while frontier reasoning barely moved.