THE DAILY BRIEF

Cloudflare's Turnstile CAPTCHA now uses fingerprintable WebGL techniques, triggering security community debate over whether the change increases device tracking risks while maintaining bot protection.

► Security tools optimized for bot detection may inadvertently expand browser fingerprinting, creating privacy-security tradeoffs that developers need to understand.

Microsoft is degrading functionality of perpetually-licensed Office 2019 and 2021 for Mac, converting them to view-only starting 2026 to push users toward subscription-based Microsoft 365.

► One-time software purchases are being unilaterally downgraded post-sale, signaling a broader shift toward forced subscription models for legacy software.

Palo Alto Networks warns that CVE-2026-0257, an authentication bypass vulnerability in PAN-OS GlobalProtect VPN, is now being actively exploited in attacks targeting corporate networks.

► VPN appliances remain critical attack surface—exploitation of auth bypass flaws at the network perimeter can grant attackers unfettered enterprise access.

SoftBank announced plans to build AI data centers with up to 5 gigawatts of capacity in France, with €45 billion in facilities across three northern sites operational by 2031.

► Massive geographic diversification of AI compute outside the US signals a potential shift in AI infrastructure control and geopolitical competition for inference capacity.