Daily Briefing

[Daily Briefing] 🚨 A 10/10 flaw, live hits / 🧠 AMD's whole rack / 🔴 Mars run

25 July 2026

A 10 out of 10 flaw is already being used, and Oracle just shipped its biggest patch ever

Oracle's July Critical Patch Update ran to 1,449 fixes across databases, middleware, cloud and enterprise apps, the largest single release in the company's history. In the same week, security teams raised the alarm on SonicWall SMA1000 appliances.

The headline bug is CVE-2026-15409, an unauthenticated server-side request forgery rated a maximum CVSS 10.0. On its own that is bad. Chained with a separate code-injection flaw it opens the door to full remote code execution, and it is already being used in real attacks.

These boxes sit right at the network boundary, which is exactly why they are being hit. A maximum-severity bug that needs no login, on a device facing the internet, is about as urgent as security gets.

Why it matters: If you run a SonicWall SMA1000, this is a tonight job, not a next-sprint job. Patch the appliance, then work through Oracle's list by exposure. Edge devices first, everything reachable from outside second.

Quick hits

AMD tried to sell the whole rack, not the chip. At Advancing AI 2026 it showed EPYC Venice on a 2nm process, a Helios rack with 31 TB of HBM4, and the new MI455X accelerators, all aimed at Nvidia. Full story (TechTimes, 4 min read)

A robot ran a marathon on Mars. NASA's Perseverance has now driven 26.2 miles across Jezero Crater, the exact distance of a marathon, one careful metre at a time. Full story (ScienceDaily, 3 min read)

Amazon keeps pulling silicon in-house. AWS Graviton5 is the latest sign that hyperscalers would rather build their own chips than queue for someone else's. Full story (Future Technology, 3 min read)

Patch Zoom while you are at it. CVE-2026-53412 is an account-takeover bug rated 9.8, and updating the client is the whole fix. Full story (Future Technology, 2 min read)

Tool of the day

With edge-device and account-takeover bugs both in the news, a hardware security key earns its place on your keyring. The YubiKey 5 NFC is the one I point people to. It is not magic, and it will not patch your appliances, but it makes phishing and leaked passwords far less useful to an attacker, and it just taps against a phone. Check price on Amazon

That is your Friday briefing. Reply and tell me: have you ever delayed a patch and lived to regret it? I read every reply.

Nath, Future Technology

Forwarded this? Get your own free briefing at futuretechnologyhq.com/newsletter

Some links may be affiliate links.