EVA Tech BriefIT/DevOps

2026-07-18 - 7:30 PM PKT

Frontier LLMs

GPUs and Silicon

Nvidia RTX 50 Super refresh reportedly stalls over high GDDR7 memory costs

Tom's Hardware reports that Nvidia's RTX 50 Super cards are ready but delayed because the 3GB GDDR7 modules they need cost two to three times as much as 2GB chips. That would make it difficult to hit target retail prices, keeping the refresh in limbo even as demand for graphics memory stays tight.

Cloud and Infra

Compute Exchange launches used H100 and A100 GPU marketplace

Compute Exchange opened a secondary market for used and refurbished Nvidia H100 and A100 GPUs. The move gives enterprises, cloud providers, and AI startups another sourcing path for physical accelerator capacity as buyers weigh cost, availability, and generation tradeoffs.

Pakistan Tech

Security

WordPress core flaw lets unauthenticated attackers run code

The Hacker News reports that the wp2shell flaw affects WordPress core, meaning even sites with no plugins were exposed. WordPress shipped fixes in 6.9.5 and 7.0.2 and used its auto-update system to push emergency updates, making patch status the immediate operational priority.

NadMesh botnet targets exposed AI tools for cloud and Kubernetes secrets

NadMesh is scanning exposed ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio services for AWS keys and Kubernetes tokens. The campaign highlights how quickly self-hosted AI tooling becomes infrastructure risk when services are published before access controls and network boundaries are locked down.

Dev Tools

AWS billing bug showed some customers billion-dollar charges

TechCrunch reports that Amazon is fixing a billing bug that caused some AWS customers to see estimated charges in the billions of dollars. The issue appears to be an accounting display problem, but it is still a reminder to monitor cloud billing alerts and confirm anomalies before triggering internal incident processes.

Capital One open-sources VulnHunter AI vulnerability scanner

Capital One released VulnHunter, an Apache 2.0 agentic security tool that scans source code for exploitable flaws. It maps potential attacker paths and proposes targeted fixes before code ships, putting AI-assisted secure coding into a practical developer workflow.