Co-op CEO prosecution blocked, Cloudflare Kitesurf, Framework breach

Microsoft Edge is ending support for Manifest V2 extensions, cutting off uBlock Origin and the last MV2 ad blockers on the browser, months after Chrome did the same. Microsoft counts only 58 extensions with meaningful usage still on MV2, and just three of those lack an MV3 version. Notices begin appearing on the Manage Extensions page from August 2026, with enforcement rolling out gradually. uBlock Origin users on Edge have limited paths: switch to uBlock Origin Lite, move to Firefox, or rely on enterprise policy exceptions if your organisation manages the browser. The practical read is that full-power ad blocking on Chromium browsers is now permanently gone, and sites with heavy ad loads just got harder to tolerate.

AWS has added runtime instances to Bedrock AgentCore: persistent, managed EC2 infrastructure for production AI agents. Sessions can run up to 14 days, with GPU support and multi-agent collaboration, and AWS provisions and operates the instances inside your own account. The existing AgentCore runtime is serverless, which left stateful, long-running agents awkward to host. This new complementary option closes that gap for teams shipping real workloads instead of demos: durable state, hardware choice and EC2 pricing without managing the boxes yourself. If you are building agents that hold state or need GPUs, this is the missing compute option.

Cloudflare's Web Integrity and Trust team is shifting bot mitigation from point-in-time risk checks to continuous trust evaluation, and published early findings from Precursor, its agent-detection product. The reason is structural: sessions now flip between human and agentic mid-flow, like a shopper handing checkout to an automated assistant, so a single request no longer tells you who is on the other end. The team also released a simulation showing how cursor movements get scored as human or bot. For site operators the consequence is practical: static bot rules are losing their power, and access decisions increasingly rest on behaviour scored over time rather than one check.

The Software Stewardship Lab, a nonprofit based in Scotland, has launched. Its two research tracks are a real-time observatory for the world's critical open source packages, including previously hidden parts of the dependency graph, and ongoing work on maintainer burnout, with a report on how AI is affecting it. The Lab will direct funding to and supervise open source sustainability researchers, and already works with universities to train supply chain specialists. The project matters because the xz-utils near-miss and the left-pad incident showed how fragile the ecosystem's critical path is. Expect it to feed the same debate Debian, OpenSSF and big vendors keep circling: who pays for the code the internet runs on.

Friday's patch roundup is substantial. AlmaLinux shipped fixes for the kernel, firefox, nodejs 22 and 24, thunderbird, pipewire, libgcrypt and more; Debian patched linux-6.1 and linux-6.12, redis, jq and udisks2; Fedora covered chromium and abrt among others. The kernel items follow this week's stable releases responding to CVE-2026-68480, a speculative execution data-leak flaw. A single cycle covering kernel, browsers and nodejs is a lot of exposed attack surface, so today's updates are not optional. Patch now, especially anything reachable from the internet.

New research from APNIC argues that partial reachability in the internet core is a permanent, measurable feature of how the network behaves, not measurement noise. A small number of long-lived peninsulas, prefixes that are visible but only partially reachable from large parts of the internet, cause most of the impact. Recognising them improves both operational clarity and measurement accuracy. For network operators the practical read: anycast and BGP monitoring must account for these zones, because a prefix that looks fully announced can still be degraded for big chunks of the internet. If you run critical infrastructure behind BGP, this is worth reading.