ENISA launches draft EUMSS cybersecurity certification scheme for managed security services, seeks feedback https://industrialcyber.co/managed-services/enisa-launches-draft-eumss-cybersecurity-certification-scheme-for-managed-security-services-seeks-feedback/

Motherboard prices are going to increase 50% this year. https://www.digitalfoundry.net/news/2026/08/motherboard-prices-set-to-rise-as-ai-fuelled-pc-component-disruption-continues

This is going to be one to watch. Companies aren’t going to be able to replace their users PCs and servers.

All memory on track to be manufactured in 2027 by Samsung, SK hynix, and Micron is now sold out, with no additional supply planned. https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?CnlID=1&id=0000763847_DVY7YHX65GMLYZ6UQEEMP

Traditionally, July and August are when companies secure memory for the following year. Companies who got in early have prebooked 5 years worth of supply.

New directory traversal CVE!
CVE-2026-71309 - https://www.cve.org/CVERecord?id=CVE-2026-71309
rclone - rclone
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and passes it to GET, HEAD, POST, and DELETE handlers for configured backends including WebDAV, FTP, HTTP, Memory, and SFTP. An attacker who can access the REST endpoint may read, create, overwrite, or delete objects outside the path configured by the operator when the operator publishes a backend subdirectory and the backend credential can access parent or sibling objects. This issue is fixed in 1.75.0.