AI & Cybersecurity: Wiz says its AI agent found and exploited a GitHub Actions flaw that GitHub Copilot Autofix allegedly missed, underscoring how autonomous agents can spot and act on software weaknesses. Critical Infrastructure Security: Georgia Tech researchers warn municipal water systems remain exposed because industrial controllers are often internet-facing and vulnerable. Ransomware Disruptions: Suisun City and Lincoln’s town office both shut down services after cyberattacks encrypted parts of their networks, with recovery ongoing. Software Supply Chain Flaws: GitLab issued emergency patches for a critical GraphQL flaw that could let unauthenticated attackers delete or alter public projects on self-managed installs. Policy & Standards: NIST is seeking public input on human-centered cybersecurity guidance, aiming to reduce burnout and improve real-world security outcomes. Government Cloud Compliance: IBM secured FedRAMP Moderate authorization for Maximo Government SaaS, expanding compliant cloud options for federal users. Consumer Breach Fallout: Comcast agreed to a $117.5M settlement over an Xfinity data breach. Local Governance: San Antonio council pushes for confidential cybersecurity briefings for water and power utilities after Minnesota attacks. Model Updates: Nvidia released Nemotron 3.5 Lightning, targeting high-volume execution inside long-running AI agents.