On August 13, 2026, the PostgreSQL project released 18.6, 17.11, 16.15, 15.19, 14.24 and 19 Beta 3, fixing 28 security vulnerabilities — a record — including a dozen memory bugs exploitable for code execution. Apply the minor release now, and if you are still on version 14, plan the major upgrade before November 12, 2026.
On August 14, 2026, AWS added preconfigured, read-only managed dashboards to Billing and Cost Management, at no extra cost. It is the baseline FinOps visibility the vendor is finally offering natively — and direct pressure on third-party tools whose entry price starts at 5% of spend.
The GNOME 51 beta, released on August 15, 2026, locks in the feature freeze and delivers Wayland background blur, fingerprint management and systemd-homed support. For extension developers and teams preparing Ubuntu 26.10, this is the moment to test — the stable release lands September 16.
On August 14, 2026, Google showcased HEIR, an open-source MLIR-based compiler that converts a trained model so it runs on homomorphically encrypted inputs. For regulated sectors that currently cannot send their data to a model at all, this removes the blocking constraint — provided you accept narrow workloads and latency still far above plaintext.
An Akira ransomware affiliate got initial access through a SonicWall VPN with no MFA, then rebooted the box into Safe Mode to neutralize EDR while exfiltrating. Huntress’s account shows an EDR is no safety net once an attacker holds valid credentials.
Anthropic now applies a statistical watermark to Claude’s responses, built on Google DeepMind’s SynthID-Text, to comply with the EU’s AI Act. Invisible to the eye, it remains a probabilistic provenance signal — not proof of attribution.
The Mirai-derived modular botnet Evooo1Bot has been recruiting internet-exposed gateways — Alcatel, NETGEAR, Tenda, D-Link — into resellable SOCKS5 relay nodes since July. Fortinet documents a full arsenal whose economic novelty, the residential relay, should push every operator to inventory their internet-facing routers.
On August 13, 2026 Fortinet shipped eight fixes, including a FortiWeb authentication bypass that lets an attacker log in with random credentials and a FortiManager flaw that allows impersonating a FortiGate. Teams running a firewall fleet should treat these two as top-priority patches.
On August 14, 2026 Alibaba’s Qwen team released Qwen3.8-27B, a dense 27-billion-parameter multimodal model under an Apache 2.0 license that beats larger models on agentic coding. For teams self-hosting their models, it is a serious candidate to replace proprietary APIs on development tasks.
On August 12, 2026 HashiCorp shipped Terraform 1.16 in release candidate, with two major changes: import blocks now work inside modules, and the new store block on terraform_data keeps ephemeral and sensitive values across plan and apply. Teams adopting Terraform over existing infrastructure gain the lever they were missing.
In early August 2026 AerynOS published its 2026.08 image, adding experimental OpenZFS support, completing phase 2 of its versioned repositories and splitting systemd into separate packages. It is a demonstration that an atomic rolling release can stay predictable.
On August 13, 2026 AWS shipped version 6.0 of its VPN client, rebuilt on OpenVPN3 with a full CLI and centralized administrative controls. Teams automating remote access can now script connections without third-party tooling.
