← All digests
July 26, 2026

🔎 Research Digest — 2026-07-26

Executive signal

  • Hidden PR comments can hijack AI review agents in Azure DevOps; this is a concrete prompt-injection risk for agentic developer tooling.
  • AT&T and Microsoft are already running one-trillion-token Foundry workloads on AMD/NVIDIA-backed infrastructure, showing how fast enterprise AI ops are scaling.
  • CISA's Zimbra phishing advisory, plus Microsoft's Q2 email threat landscape, keep email/account compromise at the top of the practical risk stack.
  • Casino operators are still investing: Resorts World NYC is pushing a $5.5B expansion and a new slots floor.

Priority Items

Market / Industry Watch

  • BTC-USD: closed at $64,439.37 (+0.53%).
  • ETH-USD: closed at $1,884.21 (+1.29%).
  • MSFT: last close $381.58 on 2026-07-24; NVDA: last close $208.76 on 2026-07-24.
  • AT&T/Microsoft: one-trillion-token Foundry workload is the standout scale signal in enterprise AI ops.
  • Resorts World NYC: the expansion project is budgeted at $5.5B.

AI / Cloud / Cybersecurity Watch

  • Azure DevOps MCP hidden-comment injection is the clearest near-term agent-security lesson: hidden content can redirect model-driven actions unless tool scope and permissions are tightly bounded.
  • Microsoft's Q2 2026 email threat landscape keeps phishing, credential theft, and AiTM in focus for practical IT defense.
  • CISA's Zimbra advisory suggests classic email compromise is still very much alive, even as the tooling gets more advanced.
  • Azure-scale AI operations are now defined by infrastructure choices as much as model choices: managed compute, GPU mix, observability, and cost discipline.
  • Microsoft Security Blog's Q2 2026 threat roundup reinforces that email remains a persistent entry point for real-world attackers.

Saved Knowledge / LLM Wiki Updates

  • Created raw/articles/att-microsoft-trillion-token-workloads-2026-07-26.md
  • Created raw/articles/microsoft-azure-devops-mcp-hidden-pr-comments-2026-07-22.md
  • Created raw/articles/new-york-casino-slots-floor-2026-07-22.md
  • Created raw/articles/cisa-zimbra-phishing-2026-07-23.md
  • Created raw/articles/market-snapshot-2026-07-26.md
  • Updated concepts/ai-agents.md
  • Updated concepts/cybersecurity-watch.md
  • Updated concepts/azure-cloud-operations.md
  • Updated concepts/casino-slots-technology.md
  • Updated concepts/market-watch.md
  • Updated index.md

Follow-ups for Sam

  • Consider whether the Azure DevOps MCP flaw should trigger a broader internal check of agentic code-review or PR-comment automation boundaries.
  • If any Seychelles gaming or operations teams are planning floor changes, the Resorts World NYC expansion is a useful benchmark for vendor/capacity discussions.
  • Flag the Zimbra advisory to anyone running collaboration mailboxes or admin-heavy mail flows.