Surge CEO Says '100x Engineers' Are Here

Google has launched OSS Rebuild, a new initiative aimed at enhancing the security of open-source package ecosystems to prevent software supply chain attacks. Matthew Suozzo from Google Open Source Security stated that this initiative provides security teams with essential data to mitigate risks without adding extra burden on upstream maintainers. Want More Context? 🔎

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included two vulnerabilities in SysAid IT support software in its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation. Notably, CVE-2025-2775, which has a CVSS score of 9.3, relates to an improper restriction of XML external entity (XXE) reference vulnerability. Want More Context? 🔎

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two Microsoft SharePoint vulnerabilities, CVE-2025-49704 and CVE-2025-49706, to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation as of July 22, 2025. Federal Civilian Executive Branch (FCEB) agencies must remediate these vulnerabilities by July 23, 2025. Want More Context? 🔎

A groundbreaking humanoid robot from China has achieved a significant milestone by being the first to autonomously change its own battery pack, raising intriguing questions about the future of robotics. This development challenges skepticism about robot capabilities and hints at advancements that may redefine human-robot interactions. Want More Context? 🔎

A six-month international study involving 2,896 employees across 141 organizations found that a four-day workweek with no pay reduction significantly enhanced employee well-being, job satisfaction, and sleep quality, particularly among those reducing hours by eight or more. While the study highlighted the potential of this work model for improving workplace conditions, it acknowledged limitations related to sample size and volunteer participation. Want More Context? 🔎

Microsoft has linked the exploitation of security vulnerabilities in SharePoint Server to two Chinese hacking groups, Linen Typhoon and Violet Typhoon, since July 7, 2025, confirming prior reports. Additionally, a third group known as Storm-2603 has also been identified as utilizing these flaws for initial access. Want More Context? 🔎