Tech brief
Security Overhauls and Energy Realities
Microsoft mandates passwordless logins as New York halts hyperscale data center expansion.
Tech
New York is freezing hyperscale approvals to protect its power grid — setting up a regulatory precedent that could force AI developers into less-constrained states.
BackgroundThe rapid expansion of artificial intelligence models has driven unprecedented demand for massive computer warehouse facilities. These hyperscale data centers consume vast amounts of electricity and water, straining regional utilities.
- Governor Hochul's executive order initiates an immediate pause on development to draft strict environmental standards, temporarily blocking several major infrastructure projects.
- The state administration is also asking lawmakers to eliminate previous sales tax exemptions that were designed to attract technology infrastructure investments, increasing future development costs.
- Industry advocates warn that the moratorium could drive digital infrastructure investments to rival states, potentially leaving New York behind in the regional race for artificial intelligence leadership.
Tech
Microsoft is forcing a hard migration to passkeys to contain a quiet log-bypass exploit — ending the era of SMS-based verification as enterprise identity attacks grow stealthier.
BackgroundEnterprise identity management systems are the primary entry targets for corporate espionage and ransomware delivery. Security teams have historically relied on SMS and voice-based multifactor tools despite their long-documented vulnerability to interception.
- Microsoft will prompt users of legacy SMS and voice logins to register cryptographic passkeys, aiming to disable telecom-based delivery by early 2027.
- Security firm Proofpoint discovered an evasion technique called OAuth client ID spoofing, which allows threat actors to silently validate stolen credentials.
- The exploit bypasses traditional identity logs by using targeted POST requests, preventing enterprise security defenders from receiving alerts and allowing attackers to roam undetected.
Tech
Google is mandating labels for AI-generated ads while shifting legal liability to external agencies — shielding its own platform from compliance penalties as global synthetic-media laws tighten.
BackgroundGenerative artificial intelligence has made it cheap and simple to produce high-quality, synthetic promotional materials. Regulators globally have pressured online platforms to clearly label synthetic media to protect consumers from deception.
- Google will automatically tag advertisements that are built using the company's internal suite of creative artificial intelligence tools, streamlining disclosure for users.
- For ads designed with external software, Google's documentation explicitly shifts all regulatory and legal compliance liability onto the advertisers, shielding the platform from costly litigation.
- The platform will allow global users to access disclosure details through a dedicated information panel, offering clear insights into how the promotional creative was generated.
Unlock the full brief
Sign in to read every signal, takeaway, and source. Free account — Apple, Google, or email.