AI Infrastructure

Patch the Planet: OpenAI and Trail of Bits’ Initiative to Secure Open Source

Patch the Planet combines frontier AI models like GPT-5.5-Cyber with dedicated security engineers to find, validate, and patch vulnerabilities in open-source software. It addresses the maintainer burden by filtering false positives and developing patches, turning AI's speed into tangible security improvements for projects like cURL, Python, and the Linux kernel.

Read MorePatch the Planet: OpenAI and Trail of Bits’ Initiative to Secure Open Source

Improving Ray Serve LLM on GKE: 5x Throughput, 8x Latency

If you've ever struggled with the performance tax of using Ray Serve for LLM inference on Kubernetes, this article details three concrete architectural fixes—HAProxy integration, direct token streaming, and a v2 vLLM executor—that deliver up to 5x higher throughput and 8x lower latency on GKE, closing the gap with native vLLM without sacrificing developer experience.

Read MoreImproving Ray Serve LLM on GKE: 5x Throughput, 8x Latency

Choice, Compliance, and Collaboration: Europe’s Path to Open Digital Sovereignty

Google argues that Europe's Tech Sovereignty Package risks market isolation by imposing rigid geographic criteria for sovereign cloud certification, while offering a path forward through 'Made with Europe' partnerships, open-source contributions, and technical controls like Cloud External Key Manager.

Read MoreChoice, Compliance, and Collaboration: Europe’s Path to Open Digital Sovereignty

Google Cloud Network Insights: Active monitoring for cross-cloud visibility

Google Cloud has launched Cloud Network Insights in partnership with Broadcom AppNeta, a native observability tool that uses active synthetic probing to monitor network performance and digital experience across multi-cloud and hybrid environments. It integrates directly with Cloud Monitoring and Gemini Cloud Assist, helping teams pinpoint bottlenecks rapidly.

Read MoreGoogle Cloud Network Insights: Active monitoring for cross-cloud visibility

Chinese Threat Actor UNC6508 Targets Medical REDCap Servers for Espionage

A sophisticated PRC-linked espionage campaign compromised medical research REDCap servers for over a year, using a custom malware called INFINITERED to harvest credentials and then abusing enterprise email compliance rules for silent data exfiltration. A detailed breakdown of the attack chain, malware mechanics, and defensive takeaways for any organization running shared research platforms.

Read MoreChinese Threat Actor UNC6508 Targets Medical REDCap Servers for Espionage