IT News Roundup: Critical Infrastructure Attacks, Open Source Vulnerabilities Surge, and AI Infrastructure Expansion - August 1, 2026

The past 24 hours have brought a mix of urgent security warnings and significant developments in AI infrastructure. A critical unauthenticated remote code execution vulnerability has prompted CISA to issue emergency guidance for water and wastewater utilities, while researchers have flagged a maximum-severity flaw in a popular open-source AI agent framework. On the cloud front, Microsoft announced a new AI advisory venture and Google Cloud reported that three-quarters of its customers are now running AI workloads. Meanwhile, new data reveals that open-source vulnerabilities per codebase have more than doubled in a single year.

Critical Unauthenticated RCE Vulnerability Targets Water and Wastewater Systems

A security defect tracked as CVE-2026-63077 allows unauthenticated remote code execution via the agent polling protocol commonly found in industrial control systems. The vulnerability has prompted the Cybersecurity and Infrastructure Security Agency (CISA) to issue urgent guidance for water and wastewater utilities, warning operators to immediately lock down internet-exposed controllers.

The alert comes days after intrusions were confirmed across dozens of water treatment facilities, underscoring the growing threat to critical infrastructure. The agent polling protocol, used for routine communication between control systems and monitoring agents, can be exploited without any form of authentication, making it a high-priority patch target for all operators of SCADA and ICS environments.

Source: SecurityWeek

Maximum-Severity Flaw Found in Ruflo, Open-Source AI Agent Framework

Cybersecurity researchers have identified a critical, maximum-severity vulnerability in Ruflo, an open-source agent meta-harness designed to work with Anthropic's Claude Code and OpenAI's Codex. The flaw could enable unauthenticated remote code execution, potentially allowing attackers to take full control of any system running the framework.

Ruflo has gained traction in developer communities as a way to orchestrate multiple AI coding agents in parallel workflows. The discovery highlights a broader concern about the security posture of rapidly evolving open-source AI tooling, where development velocity can outpace thorough security review. Users are advised to update immediately and audit any systems where Ruflo has been deployed.

Source: The Hacker News

Microsoft Launches New Company to Guide Enterprise AI Technology Selection

Microsoft announced the creation of a new subsidiary focused on helping enterprise customers select and implement AI technologies that deliver measurable returns on investment. The company aims to address the growing challenge organizations face in navigating an increasingly complex AI tooling landscape.

The move comes as businesses across industries struggle to differentiate between AI solutions that offer genuine productivity gains and those that add complexity without clear ROI. Microsoft's new venture will provide advisory services, technology assessments, and implementation guidance, leveraging the company's extensive experience with Azure AI and its own Copilot product line.

Source: Reuters

Google Cloud Reports 75% of Customers Now Running AI Workloads

At Google Cloud Next 2026, Google revealed that nearly 75% of its cloud customers are now actively using AI products to power their business operations. The company reported that 330 Google Cloud customers have each processed over a trillion tokens in the past 12 months, illustrating the scale of enterprise AI adoption.

Google also announced new gentic technology capabilities designed to streamline AI workflow orchestration. The announcements include expanded support for multi-agent systems, improved token throughput, and new pricing tiers aimed at making large-scale AI inference more cost-effective for mid-market organizations.

Source: Google Cloud Blog

Open-Source Vulnerabilities Per Codebase More Than Double, Black Duck Report Finds

Black Duck's 2026 Open Source Security & Risk Analysis (OSSRA) report reveals that the mean number of vulnerabilities per codebase has climbed from 280 to 581 in a single year — a more than 100% increase. The report found that 87% of surveyed codebases are now at risk, with 65% having been directly hit by attacks.

The surge is largely attributed to the rapid proliferation of AI-generated code and the expanding dependency graphs in modern software projects. The report emphasizes that organizations need to implement continuous dependency scanning, enforce strict SBOM practices, and prioritize vulnerability remediation in their CI/CD pipelines to keep pace with the growing threat surface.

Source: Black Duck

Publicly Exposed Elasticsearch Database Leaks 24 Billion Stolen Credentials

Researchers at Cybernews discovered a publicly exposed Elasticsearch database containing approximately 24 billion stolen credential records — roughly 8.3 terabytes of data including usernames, email addresses, and plaintext passwords. The database was left accessible without authentication, making the data trivially downloadable by anyone.

The credentials span multiple breaches and data leaks, representing one of the largest single credential dumps discovered in 2026. Security experts are urging users to assume any password that has appeared in a prior breach is compromised and to adopt unique, randomly generated passwords managed through a password manager, along with multi-factor authentication wherever available.

Source: Bright Defense

China Threatens Retaliation Over U.S. Ban on Humanoid Robot Imports

The Chinese government has issued a formal protest against a U.S. ban on imports of humanoid robots, stating that the restriction "severely damages" bilateral relations. China is threatening retaliatory measures, raising concerns about a potential trade conflict in the robotics sector that could disrupt supply chains for automation hardware and components.

The ban targets humanoid robot systems manufactured in China, citing national security concerns over potential data collection and surveillance capabilities. Industry analysts warn that a trade escalation could impact not only the robotics sector but also broader technology supply chains, affecting everything from industrial automation to consumer electronics.

Source: CNBC