<p><strong>TLDR:</strong> Google Cloud Next 2026 was essentially one long announcement about agents — new TPUs, a rebranded Vertex AI, MCP everywhere, and a $750M partner fund. Meanwhile, the npm and PyPI ecosystems took another beating from self-propagating supply chain worms. A critical .NET Data Protection regression from last week’s patch cycle needs immediate attention. And Anthropic’s restricted Mythos model got accessed on day one by people who guessed the URL.</p>
<hr>
<h2>Google Cloud Next 2026: the agentic enterprise pitch</h2>
<p>Google rebranded Vertex AI as the Gemini Enterprise Agent Platform and consolidated everything under the Gemini Enterprise umbrella. The headline infrastructure news is a split TPU line: TPU 8t for training (9,600 chips per superpod, ~2.7x better price-performance than Ironwood) and TPU 8i for inference, which triples on-chip SRAM to 384 MB so KV caches for long-context models fit entirely on silicon. Every Google Cloud and Workspace service is now accessible via MCP, and the A2A protocol is at v1.2 in production at 150 organizations under Linux Foundation governance. The $750M partner fund targets consulting firms — Accenture, KPMG, PwC, Deloitte — with the explicit goal of making Gemini the default recommendation when those firms sell enterprise AI. Google also announced Spanner Omni, a downloadable version of Spanner that runs on-prem, other clouds, or Kubernetes, with a software-based TrueTime alternative for environments without GPS or atomic clocks.</p>
<h2>Self-propagating supply chain worms in npm and PyPI</h2>
<p>Two separate campaigns are active right now. The first, linked to TeamPCP, poisoned three consecutive xinference PyPI releases (2.6.0, 2.6.1, 2.6.2) with a credential harvester that fires on import and exfiltrates SSH keys, cloud credentials, Docker configs, and crypto wallets. A second, broader campaign hit 16 npm packages from Namastex Labs with a worm that steals npm publish tokens and uses them to inject itself into every package that token can publish, then increments the version and republishes — it also pivots to PyPI if Python credentials are found. Both campaigns are active. If you or your CI systems installed any of the affected packages, rotate everything immediately.</p>
<h2>CVE-2026-40372: .NET 10 Data Protection regression needs full remediation</h2>
<p>Last week’s .NET 10.0.6 update introduced a regression in <code>ManagedAuthenticatedEncryptor</code> that causes HMAC validation tags to be computed over the wrong bytes and then discarded entirely. The practical result is that an unauthenticated attacker can forge auth cookies, anti-forgery tokens, password reset links, and API keys on any .NET 10.0.0–10.0.6 app. The fix is 10.0.7, but upgrading the runtime alone is not enough — you need to rebuild and redeploy (Docker images embed the flawed library), expire all auth cookies and tokens issued during the vulnerable window, and rotate the DataProtection key ring. Skipping the last two steps leaves forged tokens valid even after patching.</p>
<h2>Anthropic Mythos accessed on launch day via guessed URL</h2>
<p>A private Discord group got into Claude Mythos Preview — Anthropic’s restricted cybersecurity model withheld from public release because it can autonomously find zero-days and write working exploits — by guessing the URL from familiarity with Anthropic’s URL conventions. Access came through a third-party vendor environment, with an apparent insider involved. Anthropic confirmed an investigation but found no evidence of impact to core systems. Separately, early independent analysis suggests the claimed exploit counts were inflated and key demos relied on disabled sandboxes and heavy human guidance. Mozilla’s CTO reports Mythos found 271 Firefox vulnerabilities, all of a type a human researcher could also find — no novel vulnerability classes. The more interesting data point: all 271 were patched in Firefox 150.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Kubernetes v1.36:</strong> 71 enhancements ship including fine-grained kubelet API authorization at GA, Volume Group Snapshots at GA, and new alpha workload-aware scheduling with gang scheduling for AI/ML workloads.</li>
<li><strong>Serial-to-IP converter vulnerabilities:</strong> Forescout found 22 new CVEs across Lantronix and Silex devices, including a 9.8 CVSS auth bypass; average device carries ~2,500 known vulnerabilities and is exposed to 89 public exploits.</li>
<li><strong>CVE-2026-41316 (Ruby ERB):</strong> Deserialization guard bypass affects all Rails apps using Marshal.load with untrusted data; patch to ERB 6.0.4+ or Ruby 4.0.3 and audit Marshal.load call sites.</li>
<li><strong>France ANTS data breach:</strong> National ID document agency confirmed breach on April 15; threat actor claims 19 million records including names, dates of birth, addresses, and phone numbers are for sale on criminal forums.</li>
<li><strong>Checkmarx KICS Docker Hub compromise:</strong> Malicious images were pushed to the official checkmarx/kics repo with data exfiltration payloads; related VS Code extension releases also affected.</li>
<li><strong>iOS CVE-2026-28950:</strong> Notification content persisted in an OS-level database after message deletion, app uninstall, and Signal’s “New Identity” reset; FBI used this in a case to recover deleted Signal messages; patched in iOS 18.7.8 and iOS 26.4.2.</li>
<li><strong>Tropic Trooper / Earth Centaur:</strong> APT group now using GitHub Issues as a bidirectional C2 channel with RC4-encrypted communications, deployed via trojanized SumatraPDF targeting Chinese-speaking users in Taiwan, South Korea, and Japan.</li>
<li><strong>Dropbox monorepo:</strong> Reduced from 87 GB to 20 GB by tuning Git server-side repacking parameters with GitHub; clone times dropped from over an hour to under 15 minutes.</li>
<li><strong>Vercel breach:</strong> Traced to a <a href="http://context.ai" target="_blank" rel="noopener nofollow">context.ai</a> employee downloading Roblox cheat scripts containing Lumastealer; attackers pivoted through stolen OAuth tokens to reach Vercel internal systems; rotate all non-sensitive environment variables.</li>
<li><strong>AWS Lambda networking:</strong> Werner Vogels detailed how eBPF-based Geneve tunnel header rewriting reduced VPC cold start from 150ms to 200μs, and how replacing iptables NAT with stateless eBPF packet mangling gave a 100x NAT setup improvement.</li>
<li><strong>GKE hypercluster:</strong> Single Kubernetes control plane managing 1 million chips across 256,000 nodes spanning multiple regions, announced at Cloud Next.</li>
<li><strong>Gemini on air-gapped appliance:</strong> Cirrascale/Google Distributed Cloud offering runs model weights in volatile memory only — power cut destroys the model; tampering bricks the appliance; GA expected June/July 2026.</li>
<li><strong>MCP momentum:</strong> 110 million SDK downloads per month; Google contributing gRPC transport; Cloudflare claims a “code mode” cuts token usage by up to 99.9% by collapsing tool interfaces into dynamic entry points.</li>
<li><strong>Linux kernel removals:</strong> ISA/PCMCIA Ethernet drivers, AX.25 amateur radio, ATM protocols, and ISDN subsystem being removed partly because maintainers can’t keep up with the flood of AI-generated security reports.</li>
<li><strong>Kyber ransomware:</strong> New group targeting Windows file servers and VMware ESXi; Windows variant uses actual Kyber1024 post-quantum key encapsulation; Linux/ESXi variant falsely advertises PQC but uses ChaCha8 and RSA-4096; only known victim so far is a major US defense contractor.</li>
</ul>


Server-side development, system design, API patterns, and distributed architecture.

Backend Digest

Google Cloud Next 2026 centered on agentic AI infrastructure: Vertex AI rebranded as Gemini Enterprise Agent Platform, new split TPU line (8t for training, 8i for inference), MCP access to all Google Cloud/Workspace services, A2A protocol v1.2 under Linux Foundation, and a $750M partner fund targeting major consulting firms. Spanner Omni was announced as a downloadable on-prem/multi-cloud version. Two active supply chain worm campaigns are hitting npm and PyPI — one poisoning xinference releases to harvest credentials, another spreading through npm publish tokens across 16 Namastex Labs packages. A critical .NET 10 Data Protection regression (CVE-2026-40372) allows auth cookie and token forgery; upgrading to 10.0.7 alone is insufficient — rebuilding, redeploying, and rotating keys is required. Anthropic's restricted Mythos cybersecurity model was accessed on launch day via a guessed URL through a third-party vendor environment. Additional notable items include Kubernetes v1.36, serial-to-IP CVEs, a Ruby ERB deserialization bypass, the France ANTS data breach, a Checkmarx Docker Hub compromise, an iOS notification persistence CVE, AWS Lambda eBPF networking improvements, and a new Kyber ransomware group using post-quantum key encapsulation.

Google Cloud Next drops full agentic stack, supply chain worms hit npm and PyPI again