TLDR IT 2026-07-14

Apple alleges that a former employee exploited an authentication flaw to access its network and download confidential hardware files weeks after joining OpenAI. Apple has since fixed the bug, but the incident highlights the risks of incomplete offboarding, retained devices, and lingering access after employees leave.

Dropbox is adding new “context layer” capabilities inside OpenAI products (ChatGPT Work, ChatGPT, and ChatGPT Codex) using official Dropbox-created skills. The integrations let users organize Dropbox files/folders, generate shareable links, create file requests, and execute multi-step workflows grounded in Dropbox permissions and governance.

Deploying AI agents inside companies will fail to deliver value unless organizations fix ownership gaps and cross-domain data/work coordination. By Conway's Law, agents inherit the company's org chart through schemas. It hits permission and models “hard walls” and then confidently answers using stale or unowned data “soft walls.”

Routine network changes such as firewall updates, DNS shifts, certificate renewals, and failovers can trigger outages by exposing hidden dependencies across interconnected systems. Network teams should validate complete application traffic paths, monitor real transactions rather than device health alone, and create rollback plans that account for lost sessions, caches, and routing state.

Regen is an open-source PagerDuty alternative from the FluidifyAI suite that combines alert ingestion, on-call scheduling, and AI-generated incident postmortems/handoff digests. It supports multiple alert sources and integrates with Slack/Microsoft Teams, Grafana, and PagerDuty migration.

Google Cloud said it is expanding its partnership with Samsung Electronics by rolling out the Gemini Enterprise AI platform to employees across Samsung's Device eXperience (DX) Division worldwide, including in Korea. The companies describe it as their largest enterprise agentic AI deployment in the country so far, using a dedicated tenant for data sovereignty and aiming to enable both low-code/no-code agent building and more advanced autonomous agents later.

Threat actors with elevated privileges can abuse the Windows Antimalware Scan Interface (AMSI) by registering a fake provider to establish persistence. This malicious provider triggers arbitrary execution, such as launching calc.exe, whenever specific strings are scanned within PowerShell content. Threat actors register the component via regsvr32, converting a native security feature into a covert persistence mechanism.

BetterCloud outlines how IT teams can reduce repetitive access tickets by letting employees request software directly through Slack, with role-based eligibility, automated approvals, provisioning, and audit trails built into the workflow. It also stresses that self-service needs least-privilege controls, automated deprovisioning, and regular access reviews to avoid creating new SaaS sprawl and security gaps.

Cisco shares how it uses connected networks, sensors, collaboration tools, and workplace data to optimize office space, reduce energy and real estate costs, and improve the employee experience.

Open vSwitch (OVS) and Open Virtual Network (OVN) work together to provide the networking stack behind OpenStack Neutron.