Software Development

 Easy to exploit. Unauthenticated access. Massive reach. ToolShell has it all.  [[{“value”:” Government agencies and private industry have been under siege over the past four days following the discovery that a critical vulnerability in SharePoint, the widely used document-sharing app made by Microsoft, is under mass exploitation. Since that revelation, the fallout and the ever-increasing …

What to know about ToolShell, the SharePoint threat under mass exploitation Read More »

 EFF says the “mass surveillance scheme” violates constitutional protections.  [[{“value”:” In May 2020, Sacramento, California, resident Alfonso Nguyen was alarmed to find two Sacramento County Sheriff’s deputies at his door, accusing him of illegally growing cannabis and demanding entry into his home. When Nguyen refused the search and denied the allegation, one deputy allegedly called …

A power utility is reporting suspected pot growers to cops. EFF says that’s illegal. Read More »

 Ongoing attacks are allowing hackers to steal credentials giving privileged access.  [[{“value”:” Authorities and researchers are sounding the alarm over the active mass exploitation of a high-severity vulnerability in Microsoft SharePoint Server that’s allowing attackers to make off with sensitive company data, including authentication tokens used to access systems inside networks. Researchers said anyone running …

SharePoint vulnerability with 9.8 severity rating under exploit across globe Read More »

 Non-math AI model reportedly solves proofs at human speeds, but early reveal roils community.  [[{“value”:” On Saturday, OpenAI researcher Alexander Wei announced that a new AI language model the company is researching has achieved gold medal-level performance on the International Mathematical Olympiad (IMO), matching a standard that fewer than 9 percent of human contestants reach …

OpenAI jumps gun on International Math Olympiad gold medal announcement Read More »

 “Humanity has prevailed (for now!),” writes winner after 10-hour coding marathon against OpenAI.  [[{“value”:” A Polish programmer running on fumes recently accomplished what may soon become impossible: beating an advanced AI model from OpenAI in a head-to-head coding competition. The 10-hour marathon left him “completely exhausted.” On Wednesday, programmer Przemysław Dębiak (known as “Psyho”), a …

Exhausted man defeats AI model in world coding championship Read More »

 The repository offered the MaaS a distribution channel not blocked in many networks.  [[{“value”:” Researchers from Cisco’s Talos security team have uncovered a malware-as-a-service operator that used public GitHub accounts as a channel for distributing an assortment of malicious software to targets. The use of GitHub gave the malware-as-a-service (MaaS) a reliable and easy-to-use platform …

GitHub abused to distribute payloads on behalf of malware-as-a-service Read More »

 New “agentic” AI feature combines web browsing with task-execution abilities.  [[{“value”:” On Thursday, OpenAI launched ChatGPT Agent, a new feature that lets the company’s AI assistant complete multi-step tasks by controlling its own web browser. The update merges capabilities from OpenAI’s earlier Operator tool and the Deep Research feature, allowing ChatGPT to navigate websites, run …

ChatGPT’s new AI agent can browse the web and create PowerPoint slideshows Read More »

 Gemini 2.5 paper hides Easter egg in massive author list—but why so many contributors?  [[{“value”:” How many Google AI researchers does it take to screw in a lightbulb? A recent research paper detailing the technical core behind Google’s Gemini AI assistant may suggest an answer, listing an eye-popping 3,295 authors. It’s a number that recently …

Google hides secret message in name list of 3,295 AI researchers Read More »

 Smaller businesses most likely to be affected as white-label cloud program is also ending.  [[{“value”:” Broadcom is kicking some cloud service providers (CSPs) out of the VMware channel partner program, bringing uncertainty for the technological and financial futures of numerous businesses, especially small-to-medium-sized ones. As reported by The Register today, Broadcom this week revealed to …

More VMware cloud partners axed as Broadcom launches new invite-only program Read More »

 Overstep backdoor nukes key log entries, making detection hard.  [[{“value”:” Researchers from the Google Threat Intelligence Group said that hackers are compromising SonicWall Secure Mobile Access (SMA) appliances, which sit at the edge of enterprise networks and manage and secure access by mobile devices. The targeted devices are end of life, meaning they no longer …

Google finds custom backdoor being installed on SonicWall network devices Read More »