JadidJust-in AI Developments, Incidents & Deadlines
May 2026

AI news, Thursday, May 14, 2026

4 stories

TLDR

  • Cisco: record $15.8B Q3 revenue, ~$9B AI orders forecast, 4,000 jobs cut starting today (May 13–14) — Stock surged 15–20% after-hours even as layoff notifications hit inboxes this morning; hyperscaler AI networking orders tripled year-over-year.
  • Palo Alto Networks used Anthropic Mythos + GPT-5.5 to find 75 security holes in 30 days (May 13) — Company normally finds ~5 bugs/month; the 26 new CVEsCommon Vulnerabilities and ExposuresA public catalog that gives each known security vulnerability a unique ID, a short description and at least one reference.NIST ↗ have been patched. Tech chief warns of a "3–5 month window" before attackers have the same capability.
  • "Vulnpocalypse" accelerates: Mozilla patched 423 Firefox bugs in April — 20× its historical average (May 14) — The Register documents the industry-wide surge in AI-driven bug discovery that follows this week's MDASH and Glasswing disclosures.
  • Google I/O 2026 is May 19–20 — biggest Google developer event in years — Gemini 4 upgrades, Android 17, Android XR glasses, and a new Gemini Omni video model are all expected.
  • Pinecone Nexus proposes replacing query-time RAGRetrieval-augmented generationFetching relevant documents at query time and giving them to the model, so its answer draws on them.Lewis et al. 2020 ↗ with a compile-time knowledge layer (May 2026) — Claims 98% tokenA small unit of data, such as part of a word, that AI models read and generate. Many AI services price by tokens in and out.NVIDIA ↗ reduction on internal benchmarks; still needs independent validation but the architectural direction is significant for agent builders.

Action Items

Things your engineering team should look at or do this week.

  • Re-audit your AI agent permissions before the "vulnpocalypse" window closes — Palo Alto's Lee Klarich says there is a narrow three-to-five-month gap before AI-discovered exploit chains reach offensive actors. Map what frontier models are connected to your production tooling and what scopes their credentials hold (the April Cursor/Railway database-deletion incident is the canonical "too-broad token" cautionary tale). (Palo Alto blog | CNBC)
  • Block time for Google I/O next week (May 19–20) — Gemini 4 and tooling updates are expected, and past I/O events have preceded rapid API and pricing changes. Keep an eye on the developer sessions for agenticDescribes AI systems where a model uses tools and decides its own steps instead of following a fixed script.Anthropic ↗ and multimodal API changes that affect your stack. (Google I/O 2026)
  • Evaluate Pinecone Nexus if you are running token-heavy agentic RAG pipelines — The compilation-stage approach (pre-building persistent knowledge artifacts vs. query-time retrieval) is worth a spike before committing to another year of vanilla RAG infrastructure at scale. Internal Pinecone benchmarks should be independently verified, but the architecture solves a real token-cost problem. (VentureBeat)

Models & Tools

  • Pinecone Nexus (May 2026) [Data] [Agents] — Pinecone shipped a compilation-stage replacement for query-time RAG: Nexus converts raw enterprise data into persistent, task-specific knowledge artifacts ahead of time, and serves them with field-level citations and deterministic conflict resolution. Their internal benchmark reduced one financial analysis task from 2.8 million tokens to 4,000 (~98% reduction). Worth trialing if your agents are spending most of their context windowHow much text a model can see and use at once while writing a reply.Anthropic ↗ on retrieval noise — though the benchmark is self-reported and production validation is still forthcoming. (VentureBeat)

Security

  • Palo Alto Networks: Glasswing + Mythos + GPT-5.5-Cyber → 75 verified bugs, 26 CVEs patched in 30 days (May 13) [Trending] [Agents] — Since April 7, Palo Alto Networks has been running Anthropic's Mythos Preview and OpenAI's GPT-5.5-Cyber (both under Project Glasswing) across 130+ of its products. The result: 75 legitimate vulnerabilities — about 15× its usual monthly rate — now addressed in 26 CVEs. The models generated working exploits over 70% of the time and excelled at chaining logic flaws across components. CISO Lee Klarich issued a direct warning: organizations have a "narrow three-to-five-month window" to harden their environments before adversaries gain equivalent capability. This is the second major Glasswing disclosure in 48 hours, after Microsoft's MDASH announcement on May 12. (CNBC | Axios | Palo Alto Blog)

  • The "Vulnpocalypse": AI-driven bug discovery is overwhelming patch pipelines (May 14) — The Register today documents the emerging industry pattern: Mozilla patched 423 Firefox bugs in April (vs. a 21.5-bug/month historical average and only 76 in March), after using AI scanning internally. Microsoft, Palo Alto, and Mozilla — all Project Glasswing partners — are now publishing new CVEs at a rate that strains traditional patch management workflows. Security teams should expect a sustained surge in vendor patch advisories over the coming months and plan triage processes accordingly. (The Register | NBC News)


Industry & Business

  • Cisco Q3 FY2026: record $15.8B revenue, ~$9B AI orders in sight, 4,000 jobs cut (May 13–14) [Infra] [Hiring] [Trending] — Cisco beat Q3 estimates across the board ($15.8B vs $15.56B expected, +12% YoY) and raised FY2026 guidance to $62.8–63B. The standout number: hyperscaler AI infrastructure orders hit $5.3B year-to-date, with Cisco now projecting ~$9B for the full fiscal year (up from a $5B prior estimate), driven by its Silicon One portfolio and optical networking for AI data centers. Against this backdrop, Cisco simultaneously announced ~4,000 job cuts (~5% of workforce) starting today, framing the move as reinvestment into AI rather than cost reduction. Stock surged 15–20% after-hours. Adds to the Cloudflare + Coinbase + GM pattern: AI infrastructure revenue up, traditional headcount down. (CNBC | Seeking Alpha | Yahoo Finance)

Type to search · ↑↓ to move · enter to open