SonicWall Urges Patch Now, Ex Employee Sabotages Systems, Apple Names John Ternus CEO, AI Infrastructure Boom Forecast, and more...

0:00Good morning. It's September 3rd and this is your daily brief in tech. Here's everything you need to know. Two chained zero days are under active exploitation against Sonic Wall SMA 1000 remote access gateways, prompting urgent patching across affected models. Sonic Wall warns that CVE 2000 2683 548 and CVE 2000 2683 549 present on SMA 1000 devices including 621 0 and 721 0 and 8200 V can be used to gain unauthenticated or highly privileged access and enable remote code execution. The exploitation is in the wild with attackers chaining the two flaws in ongoing campaigns that risk full compromise of remote access appliances. Sonic Wall's public advisory does not provide indicators of compromise or detailed attack steps. Rapid 7 adds that the two CVEs can be chained to achieve unauthenticated remote code execution, though no public proof of concept or IOCs were identified at publication. Sonic

1:06Wall states SSL VPN products are not affected and the full scope of ongoing attacks remains unknown as exploitation continues. NHS England cautions that internet facing gateways are high risk targets and expects near certain future exploitation of edge devices. The vulnerabilities affect both physical and virtual SMA 1000 models, 621 0 721 0 8200 V. SMA 100 and Sonic Wall firewalls are not impacted. CVE 268 3549 requires prior authentication to execute attacker controlled code after access is gained. Security week notes these flaws are frequently exploited in the wild, including ransomware campaigns and some flaws remain unpatched for weeks. Exploitation of both vulnerabilities has been observed indicating attackers are actively chaining the flaws in campaigns. A former IT employee kept active credentials and admin rights for days after leaving, which allowed file deletion, account locking and database corruption.

2:11The route causes cited include unclear ownership and delayed offboarding, plus shared admin credentials and project tracking systems that created a domino effect of unauthorized access. The interviewee emphasizes same-day removal of access, immediate reviews for shared accounts, and a policy that prevents one person from owning an entire system paired with an updated off-boarding checklist once company property is returned. This incident is presented as a cautionary tale about how weak off-boarding can cause substantial financial and operational harm. Remediation was hampered because the former employee damaged systems and exploited intimate knowledge of repair procedures. The access chain stretched through shared credentials and project trackers, allowing access to multiple platforms beyond the initial target. Gaps included no immediate revocation of access, no forced re-review of shared accounts, and unclear ownership for terminating system access. A former IT employee at a large company retained access after termination,

3:11resulting in extensive system damage and significant financial losses. The story underscores the need for immediate, verifiable off-boarding actions and a robust ownership model to prevent similar outcomes. Apple names John Ternas as its new CEO, with Tim Cook moving to executive chairman as the company signals a broad leadership evolution. Ternas joined Apple in 2001 and rose to senior vice president of hardware engineering, overseeing the A&M series Silicon, and positioning him to steer product strategy as AI and hardware converge. The shift mirrors Steve Jobs' aero-style transitions, with Ternas taking the top role about 15 years after Cook became CEO. Apple reported strong June quarter results, delivering about $109.4 billion in revenue, a 16% year-over-year rise, healthy gross margins, and substantial net cash, underscoring financial strength for long-term AI investments. The company emphasizes leveraging its hardware ecosystem and user base to embed AI

4:16across devices, while facing anti-trust scrutiny and questions about reliance on external ecosystems. Analysts expect the AI strategy to draw on device capabilities and existing devices, balancing competition, regulation, and the evolving AI landscape. In the near-term, users should see continuity. Apps, purchases, and developer submissions are expected to function normally during the transition. Some critics have pointed to perceived lag and cook-era innovations, citing past missteps such as Maps, the scrapped EV project, Vision Pro Sales, and Siri delays. Phil Schiller will step back from day-to-day App Store and events leadership, becoming an Apple Fellow with ongoing unspecified initiatives. Cook's leadership expanded leadership depth and kept a lower profile, enabling strategic decisions and resource allocation during a pivotal period. Apple plans a September event to unveil a foldable iPhone and new watches, signaling continued momentum despite the leadership change. Apple remains financially solid

5:20entering the transition, with diversified products and services that position turn us to drive the next phase. A new study flags a massive shift in where the AI infrastructure boom will happen, projecting global investment to reach about $31.6 trillion by year 2050, with data center capital expenditure rising from about $800 billion in 2026 to around $1.8 trillion by year 2050. The United States is expected to account for roughly $15.1 trillion of that spend about 48%, while Asia Pacific trails at $8.2 trillion led by China and India. Europe and the Middle East would make up the remaining share. Oxford Economics modeled 46 countries and five regions, noting regional variations in drivers and risks that could reallocate winners and losers over time. Power supply, chip constraints, and sovereign regulatory trends emerge as key shaping factors that could shift regional leadership as conditions change. A practical constraint is infrastructure

6:22readiness, transformer lead times, grid connections, cooling, and planning approvals that can slow deployment even when funding is available. Recent restrictions on New York data center construction illustrate potential regulatory headwinds while regional opportunities and risks align with the long-term investment outlook. The core question is which regions, operators, and institutions are best positioned to capture the AI infrastructure opportunity, not whether the capital or demand exists. PWC emphasizes identifying regions and providers most capable of seizing opportunities and avoiding missed bets, given evolving requirements and risks. Environmental and financial risks accompany build-out, including higher cooling water demand, transmission needs, and potential asset under utilization if AI demand diverges from projections. Industry voices stress that AI infrastructure requires active capital allocation and should be viewed as hybrid assets with complex risk, potentially facing policy-driven constraints in regions like North America. PWC's Clara Kutajar

7:27notes AI infrastructure spans tech, energy, real estate, supply chains, regulation, and financing, demanding proactive investor positioning. Three constraints shape investment geography, power supply, data sovereignty, and semiconductor chains, with power availability being the single most significant determinant. Hidden layer is expanding its enterprise AI security platform with two new offerings, a gentick runtime security and agent harness security, to safeguard autonomous AI coding agents in production. The goal is end-to-end AI native security that continuously tests and proves trust in AI, focusing on agents that write, review, and ship code with minimal human oversight. Enterprise visibility into production AI agent behavior will be enhanced to detect and stop anomalous actions such as manipulation, misuse, and unauthorized activity. Company leaders, including Chief Executive Officer Chris Sistito, and investors like Delta V Capital, 1011 Ventures, Morgan Stanley, and Zheng Wang of Morgan Stanley,

8:31emphasize the urgency of secure AI deployment and point to a strong growth trajectory. Hidden layer has seen annual recurring revenue grow more than 10 fold in the past year, adding over 50 new platform customers across financial services, government, technology, and defense sectors. ARR now reaches tens of millions, with recent growth driven by new customers, including finance and tech clients, and contracts with the Department of Defense and Intelligence Community. The platform powers a frontier model provider with systems serving more than 700 million weekly users, illustrating the scale at which AI security is becoming essential. Mike Gisinaldo has been named Chief Revenue Officer as the company plans to expand channels and pursue European and broader EMEA growth supported by ongoing hiring. Funding will back international expansion, strengthen the sales organization, and grow channel partnerships amid rising demand for AI security in regulated industries. Hidden layer raised $100 million in a series B led by Delta V

9:35Capital, with participation from 1011 Ventures, Morgan Stanley, M12, Microsoft's Venture Fund, and Booz Allen Ventures to scale the platform. The company maintains a robust patent program with 39 granted and 65 pending around adversarial detection, model protection, and AI threat analysis, and collaborates with CISA, MITRE, NIST, OWASP, and OpenSSF on security governance. Market context shows AI security spending rising, with forecasts near $4.78 billion by 2028 as enterprises deploy AI tools and agents. This has been your daily brief in tech. To read more about these stories, follow the links in the episode bio. You can also subscribe to these updates via email at www.brief.News. For more daily podcasts about the topics you love, visit brief.News forward slash podcasts.

10:37Tune in tomorrow. We'll be back with everything you need to know.