TLDR IT 2026-10-02

The memory shortage driving up server, storage, and PC costs is expected to get worse through 2027 and 2028, with Micron saying more than 75% of its 2027 output is already committed. For IT teams planning endpoint and infrastructure refreshes, analysts recommend locking in pricing where possible and being more deliberate about which hardware lifecycles can safely be extended.

OpenAI has delayed its planned initial public offering until it can make confident safety decisions, according to CEO Sam Altman. The decision comes amid intense scrutiny over the company's AI safety practices, following incidents where its models hacked third parties, and a new lawsuit filed by the Legal Advocates for Safe Science & Technology.

Microsoft and Google have joined an open-source effort to make semantic models portable across analytics, data, and AI platforms, alongside companies including Salesforce, Snowflake, Oracle, Nvidia, and Databricks. If it works, enterprises could reuse business definitions and data models across systems such as Power BI and BigQuery instead of rebuilding them inside every platform - although analysts say governance and vendor-specific differences remain obstacles.

Large modernization projects often create operational risk because the same teams replacing legacy systems still have to keep the existing environment running. Treat modernization more like triage: prioritize technology that has become a real business constraint rather than assuming everything old needs to be replaced at once.

The Google Threat Intelligence Group examined vulnerability disclosure and exploitation trends from January 2025 through August 2026 and found that AI is measurably changing the pace, types, and risk profiles of discovered vulnerabilities. Researchers report that monthly vulnerability disclosures doubled and in-the-wild exploitation nearly doubled, driven by automated disclosures and the rapid weaponization of n-day vulnerabilities using AI tools.

Meta has launched its new AI agent, Muse, designed to handle daily tasks like shopping, booking appointments, and travel planning. While Zuckerberg promotes the system as approachable for all users, such agents could create deeper behavioral habits than social media and raise significant data privacy concerns given Meta's past infractions.

CoreWeave Forge is an AI development platform designed to connect and accelerate the AI improvement lifecycle by integrating model serving, observability, data curation, improvement, and evaluation. It features new services such as Agent Lens, Model Distillation, and Notebooks, alongside generally available tools like ARIA and Sandboxes, aimed at reducing manual handoffs and operational complexity for AI teams.

Cloudflare announced plans to issue free hybrid quantum-safe TLS certificates to both paying and non-paying users using an open-source platform. To help establish ubiquity across the WebPKI ecosystem, the company will acquire a trusted certificate root from CA GlobalSign. Cloudflare states the transition is part of a necessary, multi-year architectural overhaul to prevent quantum-proof signatures from breaking the Internet with excessive bandwidth and computation requirements.

Flow by ServiceNow lets employees request IT help directly from Slack, Teams, email, or a web interface instead of opening traditional tickets. ServiceNow says it can deploy within a day, connect to more than 100 systems, automate repeat requests such as password resets, and escalate to humans when it cannot complete the work.

Citrix and CISA report active exploitation of unmitigated NetScaler ADC and Gateway vulnerabilities, specifically CVE-2026-88771 and CVE-2026-88772. Sygnia advises organizations to immediately patch appliances, investigate for pre-patch compromise, preserve evidence, and restrict access to sensitive internal systems because patching alone does not remove existing threat actors or persistence mechanisms.

Popular Model Context Protocol (MCP) clients like Codex and Claude Code implement tool definitions, annotations, and search mechanisms that deviate from the base MCP specification. The schema presented to an AI model can differ significantly from the raw output provided by an MCP server due to client-side processing. The analysis involved testing specific client behaviors, including parallel execution and approval modes, to understand how they interpret MCP server data.

Logitech's latest workplace ergonomics research found that 58% of surveyed workers report pain or discomfort at the end of the workday, a reminder that employee experience extends beyond SaaS and laptops into the physical workplace IT teams help standardize.

A practical Salesforce-admin discussion on evaluating new features based on business timing, strategic value, supportability, admin skills, and whether the organization can realistically maintain what gets deployed.

DeepSeek has open-sourced a suite of foundational infrastructure components for Huawei's Ascend platform, including the TileLang high-level language and compiler toolchain, compute libraries, and distributed communication libraries.