Citrix bleeds again: This time a zero-day exploited - patch now
Hot on the heels of patching a critical bug in Citrix-owned Netscaler ADC and NetScaler Gateway that one security researcher dubbed "CitrixBleed 2," the embattled networking device vendor today issued an emergency patch for yet another super-serious flaw in the same products — but not before criminals found and exploited it as a zero-day.…
Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack
Citrix patched a critical vulnerability in its NetScaler ADC and NetScaler Gateway products that is already being compared to the infamous CitrixBleed flaw exploited by ransomware gangs and other cyber scum, although there haven't been any reports of active exploitation. Yet.…
Rack-scale networks are the new hotness for massive AI training and inference workloads
Analysis If you thought AI networks weren't complicated enough, the rise of rack-scale architectures from the likes of Nvidia, AMD, and soon Intel has introduced a new layer of complexity.…
Amazon's Ring can now use AI to 'learn the routines of your residence'
Ring doorbells and cameras are using AI to "learn the routines of your residence," via a new feature called Video Descriptions.…
Cosmoe: New C++ toolkit for building native Wayland apps
Cosmoe is a modern C++ UI library, but it's also a new iteration of a project with roots in one of the most elegant GUIs ever written.…
Supply chain attacks surge with orgs 'flying blind' about dependencies
The vast majority of global businesses are handling at least one material supply chain attack per year, but very few are doing enough to counter the growing threat.…
Three goes to zero as UK mobile provider suffers voice and text outage
Britain's Three mobile network has suffered a major outage, with voice calls out of action and limitations on texting.…
Hyperscalers to eat 61% of global datacenter capacity by decade's end
Hyperscale operators are expected to account for 61 percent of all datacenter capacity by 2030, thanks in part to the growth of cloud services and rising demand for compute to feed AI.…
French cybercrime police arrest five suspected BreachForums admins
The Paris police force's cybercrime brigade (BL2C) has arrested a further four men as part of a long-running investigation into the criminals behind BreachForums.…
Typhoon-like gang slinging TLS certificate 'signed' by the Los Angeles Police Department
A stealthy, ongoing campaign to gain long-term access to networks bears all the markings of intrusions conducted by China’s ‘Typhoon’ crews and has infected at least 1,000 devices, primarily in the US and South East, according to SecurityScorecard's Strike threat intel analysts. And it uses a phony certificate purportedly signed by the Los Angeles police department to try and gain access to critical infrastructure.…
CloudBees CEO says customers are slowing down on 'black box' code from AIs
interview Anuj Kapur, CEO of DevOps darling CloudBees, reckons that AI could retest the founding assumptions of DevOps as a whole, but warns against the risk of creating black-boxed code in the pursuit of greater efficiency. He also says that some customers who rushed into AI-generated code for fear of missing out (FOMO) are starting to slow down and be more considered.…
Microsoft dangles extended Windows 10 support in exchange for Reward Points
Microsoft has found a new use for Reward Points – and another incentive to upload everything you hold dear to someone else's servers.…
Anthropic: All the major AI models will blackmail us if pushed hard enough
Anthropic published research last week showing that all major AI models may resort to blackmail to avoid being shut down – but the researchers essentially pushed them into the undesired behavior through a series of artificial constraints that forced them into a binary decision.…
Germany asks if US hyperscalers hold keys to AI kingdom
Three American hyperscalers are the gatekeepers to AI, as they possess the necessary compute infrastructure and access to the volumes of data required to train and deploy models at scale. …
UK govt dept website that campaigns against encryption hijacked to advertise ... payday loans
A website developed for the UK Home Office's 2022 "flop" anti-encryption campaign has seemingly been hijacked to push a payday loan scheme.…
Bank of England expands data and cloud framework by £26.7 million after revising data strategy
The UK central bank is expecting a 45 percent hike in the maximum cost of support services as it moves to the cloud and executes a revised data and analytics plan.…
Mozilla rolls out Firefox 140 with ESR status and fresh features
The latest Mozilla Firefox is trickling out – and it's an Extended Support Release (ESR).…
Anthropic won't fix a bug in its SQLite MCP server
Anthropic says it won't fix an SQL injection vulnerability in its SQLite Model Context Protocol (MCP) server that a researcher says could be used to hijack a support bot and prompt the AI agent to send customer data to an attacker's email, among other things.…
Don't look up: NASA is struggling to execute its planetary defense plan
NASA is struggling to meet all the goals of its Planetary Defense Strategy and Action Plan, the effort that aims to prevent humanity being wiped out by space rocks that hit Earth.…
Tesla Robotaxi videos show Elon's way behind Waymo
Video On Monday, Elon Musk proudly launched his often-promised Robotaxi service in Austin, Texas, but early videos shot by riders show how far the service lags behind Waymo.…
