Story 1 — Canvas breach fallout hits schools

• Reuters reports that schools and universities affected by the Canvas breach have reached out to the attackers to prevent data release, according to a source familiar with the matter. Source: Reuters via Mix 92.9

Story 2 — Apple and Intel chip-making deal (reported)

• Reuters reports Intel has reached a preliminary deal to make some chips for Apple devices, per a Wall Street Journal report. Source: Reuters via Global Banking & Finance Review

Story 1 — U.S. expands pre-release AI evaluations
The Center for AI Standards and Innovation (CAISI), part of the U.S. Department of Commerce, announced new agreements with Google DeepMind, Microsoft, and xAI to enable pre-deployment evaluations of advanced AI models.

CNBC (May 5, 2026): Trump admin. moves further into AI oversight, will test Google, Microsoft and xAI models

Story 2 — Office vulnerability exploited within 48 hours
Researchers reported Russian state-linked hackers exploited Microsoft Office vulnerability CVE-2026-21509 in under forty-eight hours after an urgent patch, highlighting shrinking time windows for remediation.

Ars Technica (Feb. 4, 2026): Russian-state hackers exploit Office vulnerability to infect computers

Story 1: Washington considers a 72-hour patch clock

Reuters reports U.S. cybersecurity officials are discussing shrinking the default remediation window for actively exploited vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog from roughly two to three weeks to three days.

Source: Reuters via The Star (May 2, 2026)

Story 2: White House weighs AI model vetting before broad release

Bloomberg reports the White House is considering an executive order that would create a vetting system for new AI models to reduce AI-related cybersecurity risks, according to National Economic Council Director Kevin Hassett.

Source: Bloomberg (May 6, 2026)

Story 1 — Apple settles shareholder lawsuit tied to delayed Siri AI upgrades
Reuters reports Apple agreed to pay $250 million to settle a shareholder lawsuit connected to delays in AI upgrades for Siri.

Reuters technology page (story listing)

Story 2 — Infineon lifts outlook as AI data centers drive demand for power supply solutions
Reuters reports Infineon raised its full-year outlook; it cited €3.81 billion in quarterly revenue and projected about €1.5 billion in AI-related power-supply revenue in fiscal 2026.

Reuters via Global Banking & Finance Review

Story 1: U.S. weighs new AI chip export conditions
Reuters reports the U.S. Commerce Department is considering a new framework that could add licensing and security conditions for advanced AI chip exports, including thresholds as high as 200,000 chips tied to investment or assurances.

Reuters — US mulls new rules for AI chip exports, including requiring US investments by foreign firms

Story 2: CISA adds three exploited iOS vulnerabilities to its catalog
Ars Technica reports CISA added three iOS vulnerabilities to its Known Exploited Vulnerabilities catalog after Google described active use; the affected range includes iOS 13 through 17.2.1.

Ars Technica — CISA adds 3 iOS flaws to its catalog of known exploited vulnerabilities

Story 1 — Alphabet investors push for safeguards on cloud and AI
A shareholder coalition is asking Alphabet to explain how it governs government use of its cloud and AI technology, citing concerns about surveillance and contract guardrails.

Story 2 — EU AI rules talks stall
EU countries and lawmakers failed to reach a deal on a watered-down version of the AI Act after 12 hours of negotiations, with talks set to resume next month.

Sources

• Reuters — Alphabet investors push for safeguards on use of its cloud, AI tech
• Reuters — EU countries, lawmakers fail to reach deal on watered-down AI rules

Story 1 — EU shifts Digital Markets Act focus toward cloud and AI
EU regulators said they are turning attention to cloud services and artificial intelligence under the Digital Markets Act, including assessing whether some AI offerings qualify as core platform services and investigating whether Amazon and Microsoft should be labeled gatekeepers for cloud services.

Reuters — EU rules reining in Big Tech will now target cloud services and AI, regulators say

Story 2 — Medtronic reports unauthorized access to corporate IT systems
Medtronic said an unauthorized party accessed data in certain corporate IT systems, and stated it has not identified impacts to products, patient safety, manufacturing and distribution operations, or financial reporting systems.

Medtronic — statement on unauthorized system access

Story 1: EU Chips Act II draft would let the Commission invest directly in fabs
Why it matters: A more active EU role could reshape where semiconductor capacity gets built and how resilient supply chains become.

Bloomberg: EU Chips Act Revamp Would Let Commission Invest Directly in Fabs

Story 2: Over 40% of UK firms suffered a cyber attack last year, survey finds
Key figures: Forty three percent of businesses reported a breach or attack; roughly six hundred twelve thousand businesses reported at least one incident; phishing affected thirty eight percent.

Reuters: Over 40% of UK firms suffered cyber attack last year, survey finds