SIGNAL

Monday, May 25, 2026

6 stories

snapshot

→ signal --date=2026-05-25

This week's Signal brief covers Google's decisive push into the agentic AI era with Gemini Spark, Omni, and 3.5 Flash at I/O 2026. On the security front, a massive npm supply chain attack compromised 170+ packages, a Microsoft Exchange zero-day is actively exploited, and the first AI-generated zero-day vulnerability was disclosed. In MENA, startup funding rebounded 211% to $150M in April, and Valeo launched a new AI Development Center in Cairo.

→

Google's I/O 2026 ushers in the agentic era, while a massive npm supply chain attack rocks the developer world and MENA startup funding surges 211%.

AI Google Blog

Google I/O 2026 Declares the Agentic Era With Gemini Spark, Omni, and Antigravity 2.0

Google unveiled a sweeping set of AI announcements at I/O 2026, including Gemini Spark (a personal 24/7 AI agent), Gemini Omni (native multimodal model), Gemini 3.5 Flash (frontier-speed model at half the cost), and Antigravity 2.0 (agent orchestration platform). The company is processing over 3.2 quadrillion tokens monthly — 7x growth year-over-year.

Security SecurityWeek

Mini Shai-Hulud Supply Chain Attack Compromises 170+ npm Packages Including TanStack and Mistral AI

A coordinated supply chain attack by TeamPCP compromised over 170 npm and PyPI packages, including popular TanStack libraries, Mistral AI SDKs, UiPath, and OpenSearch. Over 400 malicious versions were published in a five-hour window, stealing developer credentials and CI/CD secrets.

MENA Startup Scene

MENA Startup Funding Surges 211% to $150M in April, Led by UAE

Startup funding across MENA reached $150 million in April 2026, a 211% jump from March, with UAE capturing 52% of total capital. Fintech dominated with $89.4M across seven deals, though year-on-year funding remains down 42%.

Security Dark Reading

Microsoft Exchange Server Zero-Day Actively Exploited in the Wild

Microsoft disclosed CVE-2026-42897, a spoofing vulnerability in Exchange Server's Outlook Web Access that enables unauthorized remote code execution. The zero-day affects fully patched Exchange 2016 and 2019 servers, with no permanent fix available yet.

MENA Tech Africa News

Valeo Launches AI Development Center in Cairo, Strengthening Egypt's Tech Position

French automotive giant Valeo inaugurated an AI Development Center in Cairo's Smart Village, starting with 35 engineers and planning to expand to 100+ specialists. The center will accelerate AI adoption across Valeo's global operations and builds on 20 years of R&D presence in Egypt.

Security DIESEC

First AI-Generated Zero-Day Vulnerability Discovered, Raising New Security Paradigm

Security researchers disclosed what appears to be the first AI-generated zero-day vulnerability — a security flaw created by an AI model rather than discovered by human researchers. The disclosure raises urgent questions about AI's dual-use potential in offensive and defensive cybersecurity.