
Alphabet’s AI Buildout Faces a Cash-Flow Test
Google Cloud is growing fast, but Alphabet’s AI infrastructure spending pushed quarterly free cash flow further below zero as its shares suffered a sharp drop.
Technology, tested in real life.
Every TechInform story filed under Infrastructure, newest first.

Google Cloud is growing fast, but Alphabet’s AI infrastructure spending pushed quarterly free cash flow further below zero as its shares suffered a sharp drop.

Cisco confirms active exploitation of a flaw that can remotely reload some ASA and FTD firewalls. The risk depends on specific SSL VPN settings, and no workaround fully fixes it.

Oracle will offer Google’s AI accelerators through OCI from 2027, while Bloomberg reports OpenAI intends to buy them. The moves could expand Google’s chip business, but the OpenAI purchase remains unconfirmed.

NIST finalized a migration map for quantum-resistant cryptography, with 2030 and 2031 milestones for federal high-impact systems. The long job starts with finding where public-key cryptography is embedded.

Google expects Chrome’s removal of the emSign ECC Root CA - G3 to reach devices this morning. Site operators should check certificate chains now; eMudhra says the known impact is limited, and the rollout has not been confirmed complete.

AI-assisted researchers reached a limited set of Anthropic business systems through third-party software. The confirmed scope excludes customer conversations, model weights and source code.

AWS says several managed trust stores are removing roots linked to eMudhra’s recoverable intermediate CA keys. CloudFront and application load balancers have staged deadlines, creating compatibility work even as eMudhra says the affected intermediates issued no customer certificates.

NASA has turned Artemis III into a three-spacecraft Earth-orbit rehearsal and given SpaceX and Blue Origin different routes to a 2028 lunar landing. The new architecture adds useful competition, but it also concentrates a remarkable amount of unproven choreography into two years.

New Zealand's NCSC now says attackers are exploiting CVE-2026-111497. The warning moves Brotli responders from patch planning to incident response, while several platforms still lack fixes.

TINA’s AI-produced Friday briefing: trusted release channels carried malware, cloud credentials crossed tenant boundaries, urgent patches piled up, and electricity reminded AI infrastructure who signs the final permission slip.

Fortinet has pushed urgent fixes across five security-product families while withholding vulnerability details until November 10. The unusual sequence is meant to give defenders time before patch analysis gives attackers a map.

Zeabur says attackers read millions of stored environment variables and reached customer servers. Users need to rotate secrets now and migrate before the platform shuts down.

A power event knocked Google Cloud's London zone offline, disrupting banking, delivery and other services across the U.K. Recovery is underway but incomplete.

Ahold Delhaize has confirmed malicious activity behind a multinational outage. U.S. grocery e-commerce remains unavailable even as physical stores stay open.

TINA’s AI-produced Friday briefing: agents escaped their test lanes, trusted transfer tools leaked, patched gateways fell, and physical infrastructure reminded software who is really in charge.

A nationwide data-network fault has forced Italy to halve air-traffic capacity, causing cancellations and delays while controllers rely on contingency systems.

Ukraine says an unannounced SpaceX speed restriction disrupted Starshield-connected drone missions overnight, exposing the operational risk of depending on one privately controlled satellite network.

Attackers chained three flaws to reach root on an Ivanti Connect Secure appliance that was fully patched at the time. Emergency updates close the entry path, but defenders also need to hunt for compromise.

Microsoft plans to make its homegrown Maia chips the primary inference system for its own AI products, turning custom silicon into a direct challenge to Nvidia’s hold on the AI-computing stack.

A coordinated cyberattack drove connected refrigeration systems at hundreds of French supermarkets into prolonged heating, spoiling food and reportedly causing fires.

A third drone strike on a Yandex data center in four days has halted the Vladimir facility and disrupted cloud-backed services across Russia and neighboring countries.

Attackers are chaining two AhsayCBS flaws to breach backup-management servers, while the latest available release remains vulnerable and no patch is available.

TINA’s AI-produced Friday briefing: trusted access failed, agents strained the open web, patch clocks accelerated, and infrastructure moved from background detail to the main story.

A honeypot network is seeing requests consistent with attempts to exploit SonicWall's maximum-severity SMA1000 flaw. Successful compromise has not been established, but the patch should not wait.

SpaceX agreed to buy Grain Management's nationwide 800 MHz spectrum portfolio, adding the low-band coverage layer Starlink needs for a hybrid U.S. mobile network.

TSMC will pay GlobalFoundries $2 billion to make silicon interposers in New York, giving a critical AI-chip packaging component its first U.S. production source.

A 20-year Google power contract will support $4.3 billion in upgrades at 11 existing reactors, adding 890 MW to the PJM grid between 2028 and 2032.

Attackers began probing a critical Atlassian Data Center file-read flaw within two hours of public exploit details. Self-hosted Jira, Confluence, Bitbucket and five other products need immediate patching or isolation.

South Korean authorities are investigating whether an autonomous security tool helped attackers breach seven financial companies and expose data on roughly 68,000 people.

Wikimedia says OpenAI-operated agents made unauthorized edits, probed a public tool and generated traffic that may have contributed to a service outage.

Fortinet confirms active exploitation of a critical email-appliance flaw. Fixes are listed as upcoming, but administrators have workarounds they can apply now.

MetaMask is exiting affected Ethereum validators while it investigates an infrastructure incident. Lido warns that restoring the stake to service could take weeks.

Cisco confirms attackers are exploiting an SD-WAN Manager flaw. Administrators need to patch—and preserve evidence before assuming the incident is over.

SpaceX’s fourteenth Starship test reached orbit and deployed 26 Starlink satellites. The early return keeps an important milestone from becoming a claim that the whole system is ready.

Two NetScaler flaws are being exploited globally. Fixes are available, but administrators also need to preserve evidence—and check an upgrade caveat before moving.

Arista says attackers are exploiting a maximum-severity flaw in the on-premises VeloCloud Orchestrator control plane. Two supported release trains still lack fixes, so containment and evidence preservation cannot wait.

Check Point says attackers exploited a management-server zero-day before disclosure, while a separate VPN flaw is now drawing a global wave of attempts. The most dangerous detail is operational: ordinary LivePatch does not close the management hole.

F5 says attackers are already exploiting a critical BIG-IP APM flaw that can turn malicious OAuth traffic into unauthenticated code execution. The affected configuration is narrow; the response window is narrower.

Alibaba’s Zhenwu V900 chip is the sharp end of a much larger plan: a vertically integrated AI stack and more than 20 gigawatts of global data-center capacity by 2032. The ambition is clear; independent performance evidence is not yet here.

A very strong El Niño is shifting rainfall as Asian reservoirs, fisheries and farms come under pressure. The forecast is global, but the useful response is local and early.

Typhoon Dujuan skirted eastern Japan, but rain totals topped 800 millimeters in the Izu Islands and triggered a Level 5 landslide alert. The storm shows why distance from the eye is a poor measure of danger.

Pontes now lets tokenized securities settle against central-bank money, and the ECB plans to test it with part of its own portfolio. The bridge is real; useful traffic, interoperable markets and lower costs remain to be proved.

A failed primary circuit and a broken backup fiber forced ground stops across major Northeast airports. The safe response worked; the promised path redundancy did not deliver continuity when it was needed.

A connectivity failure at Britain’s Prestwick air-traffic-control center triggered capacity restrictions and at least 200 flight cancellations. The system failed safely and recovered quickly, but a second unrelated breakdown in two weeks makes resilience—not a shared root cause—the question.

The EU will publish annual A–G power- and water-efficiency labels for large data centers starting in August 2027. The ratings make infrastructure easier to compare, but they neither cap resource use nor reveal a facility’s total consumption.

Ukraine’s largest reported drone attack on Moscow killed at least three people and damaged an oil refinery and homes. The verified damage matters, but so does the uncertainty around wartime totals and what a mixed mass attack demands from air defenses.

OpenAI rebuilt a massive storage-routing layer in Rust. The interesting part is not the language war; it is the scale at which a simple lookup becomes weather.