Security-Portal.cz je internetový portál zaměřený na počítačovou bezpečnost, hacking, anonymitu, počítačové sítě, programování, šifrování, exploity, Linux a BSD systémy. Provozuje spoustu zajímavých služeb a podporuje příznivce v zajímavých projektech.

Kategorie

Japan's Keio confirms ransomware attack disrupted business systems

Bleeping Computer - 28 Září, 2026 - 22:56
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting  some of its business systems. [...]
Kategorie: Hacking & Security

Times Car confirms data breach affecting 6.6 million user accounts

Bleeping Computer - 28 Září, 2026 - 22:31
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...]
Kategorie: Hacking & Security

Dutch police confirm arrest in ShinyHunters hacking investigation

Bleeping Computer - 28 Září, 2026 - 21:49
Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation into the ShinyHunters hacking group. [...]
Kategorie: Hacking & Security

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

The Hacker News - 28 Září, 2026 - 21:18
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The iPhone maker said the Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Over 16,000 Supabase databases expose PII, passwords, auth tokens

Bleeping Computer - 28 Září, 2026 - 20:50
Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]
Kategorie: Hacking & Security

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

The Hacker News - 28 Září, 2026 - 20:35
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least Swati Khandelwalhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

IAM for AI agents: A Practical Enterprise Framework

The Hacker News - 28 Září, 2026 - 20:20
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how to evaluate framework choices, and what runtime evidence proves an agent behaved as intended. [email protected]
Kategorie: Hacking & Security

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

The Hacker News - 28 Září, 2026 - 19:42
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget's wallet system. Exchanges keep most Swati Khandelwalhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

The Hacker News - 28 Září, 2026 - 19:38
RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware collects from each phone, Swati Khandelwalhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

JadePuffer agentic AI attacks target Azure, destroy cloud resources

Bleeping Computer - 28 Září, 2026 - 17:49
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. [...]
Kategorie: Hacking & Security

Malware se radí se čtyřmi AI, co udělat dál. Útočník nemusí řídit každý krok

Zive.cz - bezpečnost - 28 Září, 2026 - 17:45
Bezpečnostní analytici Cisco Talos popsali škodlivý program CLOSEDQUORUM pro Windows, který po spuštění svěřuje rozhodování o svém dalším kroku jazykovým modelům. Místo pokynů od útočníka se může ptát až čtyř různých AI a podle jejich odpovědí jednat. Zatím však není potvrzené, že byl použit při ...
Kategorie: Hacking & Security

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

The Hacker News - 28 Září, 2026 - 16:00
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface. Elsewhere, weak service accounts, old bugs, exposed systems, phishing kits, and strangely easy exploit paths kept doing useful work for attackers. Nothing Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking

Bleeping Computer - 28 Září, 2026 - 16:00
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify their exposure. [...]
Kategorie: Hacking & Security

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI

The Hacker News - 28 Září, 2026 - 13:58
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s Global CISO Insights 2026 report, only 47% of CISOs are confident they can identify every AI agent in their environment. Even among those who feel [email protected]
Kategorie: Hacking & Security

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

The Hacker News - 28 Září, 2026 - 13:46
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39-line prompt directs it to execute tasks received through Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Try Google Drive Projects for fast, focused AI analysis

Computerworld.com [Hacking News] - 28 Září, 2026 - 13:17

Google Drive is the cloud platform for storing and organizing your Google Workspace files: documents, presentations, spreadsheets, and even media (images, audio, and video). If your Workspace account includes Gemini, Google’s AI assistant, you can prompt it to work with your files, such as asking it to analyze or sum up information from your Drive files.

Obviously, this is quite convenient: Instead of having to load one or more files and search or read through them to find specific information — for example, about your business’ budget — you can just ask Gemini to analyze your files and provide a budget summary. Gemini can even access your Gmail and content from other Workspace tools (such as Google Calendar, Chat, Keep, and Tasks) for any mentions of your business’ budget.

However, an issue arises if you have a lot of files in your Drive library. You can quickly fill up your storage over the course of your business activity, creating new documents, spreadsheets, and presentations and accumulating even more files from co-workers. This can slow Gemini as it scans your entire library to find and compile the information you request.

A more focused approach to AI interaction with your files

To remedy this, the Projects feature in Drive helps Gemini process your files more efficiently. The basic idea is that you create a Project for a specific subject or work project. You attach files that you select in your Drive, as well as specific content from your other Workspace tools, such as chats, calendar events, emails, notes, or tasks.

When you chat with Gemini within this Project, it will analyze only the materials attached to the Project. Thus, Gemini should perform faster and provide you more contextual results.

Group specific documents and other sources as a project in Google Drive, then ask Gemini for insights.

Howard Wen / Foundry

It’s similar in concept to Google’s Gemini Notebook (formerly NotebookLM) tool in that you direct the AI to work with a specific set of sources only, except it’s built right into Google Drive and Workspace. There’s no need to upload any files; you simply point to the relevant sources in your existing environment.

Another benefit to using Drive Projects: You can share a Project with your co-workers. They can access only the files that you’ve attached to a Project, and if they have Gemini access, they’ll be able to have their own chats with the AI about the Project.

How to use Drive Projects

In this guide, we’ll go over how to set up, use, and share a Project in your Google Drive.

Prerequisite: A subscription that includes Gemini access

Because Projects relies on Gemini, this feature is not available for free, personal Google accounts. You can unlock the Projects feature by subscribing to a paid Google AI plan.

For business and enterprise users: Google Workspace accounts that include Gemini (such as Business Standard, Business Plus, Enterprise Standard, and Enterprise Plus) have access to the Drive Projects feature. If you’re a member of these organizations, you can create, view, manage, and share projects across your company domain.

Accessing Drive Projects: Web vs. mobile

Currently, you can create and open Drive Projects only in the Google Drive web app. In the Drive mobile app, you can view your existing project names, rename them, share them with co-workers, and adjust their share permission settings.

Create a Drive Project from scratch

You can start a new Project in a few different ways:

  • Open the Google Drive home page in your web browser. At the top-left corner of the screen, click the New button. From the dropdown that opens, click New project.
  • On the Drive home page, click Projects in the left navigation. On the Projects page that appears, click Create a project.
  • The fastest way to start a new Project is to type project.new in your browser’s address bar.

A new Project creation screen will open. Enter a title for your new Project. Use clear, concise wording, such as “Q4 Budget Analysis.”

Give your project a descriptive name.

Howard Wen / Foundry

Next, you’ll add your relevant Workspace sources, such as Docs/Sheets/Slides files, Microsoft 365 files, or PDFs that are stored in Drive.

Click the Add sources button, and Gemini will present a list of sources that it recommends (files, folders, emails, etc.), basing these on your recent activity in your Google account. You can select items from these recommendations and/or click Add more sources to open a screen where you can search for additional files in your Drive. You can attach specific documents or an entire folder.

Select the sources you want to include in the project.

Howard Wen / Foundry

After you have selected the source materials you want, click Create project.

You’ll be taken to a new page with your project title at the top, a panel at the left listing the Project sources, and a large chat area to the right. Toward the bottom of the left panel, turn on the “Let Gemini search for sources” switch. This permits Gemini to search your Gmail, Google Chat, Google Calendar, and other Google Workspace activity for more potential sources related to this project when you prompt it to.

If you turn the ‘Let Gemini search for sources’ switch on, you can prompt Gemini to find more related sources from Drive, Gmail, Chat, and Calendar.

Howard Wen / Foundry

Create a new Project in a Gemini chat

Another way to create a new Project is from within a Gemini chat session. Say you’re already in a chat with Gemini, prompting it with questions or requests about files or other Workspace content, and you want these materials to be used for a new Project. At the top right corner of the chat screen, click Save as a project.

Gemini will analyze the files in this conversation and suggest a title for the Project. You can use this title or change it before saving the chat as a new Project.

Chat with Gemini in a Project

Once your Project is created, you can interact with Gemini in it.

For example, ask Gemini to extract key details from all the documents that you’ve attached to the Project, compare them to each other, or summarize key takeaways from all the documents. Or instruct Gemini to extract certain data from your documents or spreadsheets in the Project. You can instruct it to format the result as a table and export it to Google Sheets.

Ask Gemini to extract, analyze, and/or visualize key data from your sources.

Howard Wen / Foundry

Because Gemini has to focus its analysis only on the sources that you’ve added and not everything in your Drive and Google account, these results should be generated much more quickly and with more specific context.

Important: All generative AI tools make mistakes, so be sure to verify Gemini’s results.

Access your Projects and pick up where you left off

You can return to a project at any time and resume your chats with Gemini about it. On your Drive home page, click Projects and select the Project you want to reopen. You can add more sources or remove sources from it.

To review your chat history with Gemini for the Project, click the History tab in the left panel. You can click a past thread and resume the chat with Gemini where you left off without losing its context.

Click a thread on the History tab to resume the chat with Gemini.

Howard Wen / Foundry

Collaborate on your Projects with co-workers

Sharing a Project with co-workers is the same process as sharing a file in your Google Drive: Open the Project and click Share to open its sharing settings. From the settings menu, invite co-workers by entering their email addresses. Or you can copy a link to your Project and share it with them through other means, such as a chat with the person.

Sharing a Drive project.

Howard Wen / Foundry

How file permissions work in Drive Projects

Collaborating on a Drive Project raises privacy concerns, since you can attach your files, emails, and personal information to it for Gemini to analyze. Here’s what you and your collaborators should know about projects and permissions:

  • When you grant someone access to your Project, they can see and query the source files – but only if they already have permission to view those files in Google Drive. If a collaborator doesn’t have existing access to a file in the Project, simply adding them to the Project will NOT automatically grant them permission to that source file. They must be granted file-level access separately. (You’ll see a prompt to give them access.)
  • The Gemini chat session for each person in your Project remains strictly private to them. So a co-worker who’s collaborating with you on your Project cannot see your chats with Gemini, whether it’s your prompts to Gemini or the results it generates at your end.
  • If you attach a Gmail thread to a Project, other collaborators in the project will not be able to view the thread, nor can they prompt Gemini to reveal what’s in your emails.

When collaborating on a Project, you can assign each co-worker a specific access type:

  • A co-worker assigned as an Editor has full control over the source list of the Project. They can add new files, folders, or emails to your Project, or remove these sources.
  • A co-worker assigned as a Viewer can prompt Gemini about the sources in your Project, but cannot change its list of sources.
Related reading:

Kategorie: Hacking & Security

Apple’s long, lonely game in the AR race

Computerworld.com [Hacking News] - 28 Září, 2026 - 12:57

Meta’s most recent product announcements have grabbed attention, but the one thing they could not hide is that it’s still not possible to build a system as sophisticated as Apple’s Vision Pro at an affordable price, or Meta would have done it.

You could argue that at $1,299, the Meta VR Glasses the company introduced last week and promised to ship in spring 2027 could be as sophisticated, but they do betray some significant design compromises that Apple seems to have avoided. 

The most glaring compromise is the use of a puck to carry the processor and battery, so the glasses weigh just 100 grams. Even now, a recent Bloomberg report tells us that senior Apple decision makers have resisted use of an external puck to help reduce the weight and cost of future Vision Pro models, holding steady to the fully integrated device model typical of Apple’s products. (While Apple will have its reasons, I’m not certain that’s the correct approach, as the company could effectively sell two products, the headset and the puck, making both systems available on a biennial upgrade.)

There are other compromises as well — for example, Meta’s glasses seem to deliver a narrower field of view than the current Vision Pro.

At the same time, the competition between the two firms hints at the technological barriers Apple is trying to solve. After all this time since the introduction of the first Vision Pro, Meta still can’t match the field of view, and even with a puck rather than an integrated build, its alternative still costs a fair bit of cash, while the processor it plans to power the glasses with isn’t even available yet.

Think about that. It means Meta and its partners are still building a processor with which to match Apple’s. If that’s not a technical challenge, I don’t know what is.

The roadmap for visionOS

This isn’t about Meta bashing or Apple building. It’s about how Apple has always  openly described Vision Pro as a product from the future. Even earlier this month, CEO John Ternus said, “I think of it [Vision Pro] as like the early days of computers. It is the early days of a long journey. That’s how I feel about Vision Pro.”

Meta’s new product and the latest reports from inside Apple show that the future takes time to build. On the journey to doing so, the company now seems to be contemplating four potential paths:

  • A Vision Pro design using lighter, potentially lower-cost materials such as plastic or titanium.
  • A design that offloads components to a puck.
  • Smart glasses with audio, camera, and AI, which Apple hopes to introduce by the end of 2027.
  • Smart glasses with audio, camera, AI, and a video display, which feels like the most appropriate endgame for both Vision Pro and smart glasses products.

I don’t think the consequences of taking any of those paths should be seen as zero-sum options, but as priorities toward an eventual goal for pervasive spatial computing, combining always-aware contextual AI with wearable computing designed to deliver powerful augmentation across all parts of life.

The Bloomberg report suggests that Apple is in a state of flux regarding its next move with Vision Pro, complete with a reference to the work being on “life support.” I’d argue that Apple is in the lull before the spatial storm. What happens next is under review.

What amazing timing 

However, this must be contextualized against the depth of competition between Apple and Meta. The timing of these claims — coming so soon after Meta’s latest product reveal — is a gift to Meta’s marketing machine.

At Apple’s scale, it is entirely possible to pursue multiple parallel designs, so any perceived internal confusion may simply reflect different degrees of preparedness across all four (and possibly more) of these projects. Management may simply have been waiting to see what Meta did before accelerating any of these initiatives. 

While there have allegedly been some recent redundancies in the Vision Pro team, Apple’s new leader doesn’t seem to have gone cold on the product. It’s more as if he accepts that Apple is in it for the long haul. 

A long-haul destination

That long-term commitment allows Apple time to refine key components of its product plans, particularly around privacy. Apple wants to avoid the stigma of “pervert glasses,” which is why its work on ambient audio intelligence requires close scrutiny.

The decisions it takes to protect privacy there — including use of Secure Exclave — will I believe be emulated across the future visionOS product range. In the short term, the most telling insights we’ll see will be the pushback Apple and Meta face from global privacy regulators, for AR in Meta’s case, and for Audio Intelligence in the case of Apple.

Those decisions will set the framework both for Apple’s future AR products and the future of consumer/enterprise mass-market AR. 

Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0cm;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
mso-themecolor:hyperlink;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-noshow:yes;
mso-style-priority:99;
color:#96607D;
mso-themecolor:followedhyperlink;
text-decoration:underline;
text-underline:single;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-font-kerning:0pt;
mso-ligatures:none;
mso-fareast-language:EN-US;}
@page WordSection1
{size:595.3pt 841.9pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:366374507;
mso-list-type:hybrid;
mso-list-template-ids:-1454997808 134807553 134807555 134807557 134807553 134807555 134807557 134807553 134807555 134807557;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}

-->
Meta’s most recent product announcements grabbed attention but the one thing they could not hide is that it’s still not possible to build a system as sophisticated as Vision Pro at an affordable price, or Meta would have done it.You could argue that at $1,299 the Meta VR Glasses the company introduced last week and promised to ship in spring 2027 could be as sophisticated, but they do betray some significant design compromises Apple seems to have avoided. The most glaring compromise is the use of a puck to carry the processor and battery, so the glasses weigh just 100 grams. Even now, a recent report tells us senior Apple decision makers have resisted use of an external puck to help reduce the weight and cost of future Vision Pro models, holding steady to the fully integrated device model typical of Apple’s products. While Apple will have its reasons, I’m not certain that’s the correct approach, as the company could effectively sell two products, the headset and the puck, making both systems available on a biennial upgrade. (There are other compromises, for example Meta’s glasses seem to deliver a narrower field of view than the current Vision Pro).At the same time, the competition between the two firms’ hints at the technological barriers Apple is trying to solve. After all this time since the introduction of the first Vision Pro, Meta still can’t match the field of view and even with a puck rather than integrated build its alternative still costs a fair bit of cash, while the processor it plans to power it with isn’t even available yet. Think about that. It means Meta and its partners are still building a processor with which to match Apple’s. If that’s not a technical challenge, I don’t know what is.The roadmap for visionOSThis isn’t about Meta bashing or Apple building. It’s about how Apple has always  openly described Vision Pro as a product from the future. Even earlier this month, CEO John Ternus said, “I think of it [Vision Pro] as like the early days of computers. It is the early days of a long journey. That’s how I feel about Vision Pro.”Meta’s new product and the latest reporting from inside the company show the future takes time to build. On the journey to doing so Apple now seems focused on four potential paths — though I don’t think the consequences of taking those paths should be seen as zero sum options, but about priorities toward an eventual goal for pervasive spatial computing, combining always-aware contextual AI with wearable computing designed to deliver powerful augmentation across all parts of life.The four concepts Apple is exploring seem to include:>·>      A design that offloads components to a puck.>·>      A Vision Pro design using lighter, potentially lower-cost materials such as plastic or titanium.>·>      Smart glasses, with audio, camera,  and AI which Apple hopes to introduce by the end of 2027.>·>      Smart glasses, with audio, camera, AI, and a video display, which feels like the most appropriate endgame for both Vision Pro and smart glasses products.Reports suggest Apple is in a state of flux regarding its next move with Vision Pro. I’d argue it’s Apple in the lull before the spatial storm, what happens next is under review.What amazing timing However, this must be contextualized against the depth of competition between Apple and Meta. The timing of these claims — coming so soon after Meta’s latest product reveal – suggests that describing Apple’s efforts as being on “life support” is a gift to Meta’s marketing machine. At Apple’s scale, it is entirely possible to pursue multiple parallel designs; so, any perceived internal confusion may simply reflect different degrees of preparedness across all four (and possibly more) of these projects. Management may simply have been waiting to see what Meta did before accelerating any of these initiatives. While there have reportedly been some recent redundancies in the Vision Pro team, Apple’s new leader doesn’t seem to have gone cold on the product. It’s more as if he accepts Apple is in it for the long haul. A long haul destinationThat long term commitment allows Apple time to refine key components of its product plans , particularly around privacy. Apple wants to avoid the stigma of “pervert glasses”, which is why its work on ambient audio intelligence requires close scrutiny. The decisions it takes to protect privacy there – including use of Secure Exclave -- will I believe be emulated across the future visionOS product range. In the short term, the most telling insights we’ll see will be the pushback Apple and Meta face from global privacy regulators, for AR in Meta’s case, and for Audio Intelligence in the case of Apple. Those decisions will set the framework both for Apple’s future AR products and the future of consumer/enterprise mass market AR. >Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Bleeping Computer - 28 Září, 2026 - 11:25
Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. [...]
Kategorie: Hacking & Security

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The Hacker News - 28 Září, 2026 - 11:08
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor's tradecraft. The attack took place in early June 2026 over a period of about 18 hours. "The destructive operations Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

US soldier gets 70 months in prison for extorting 10 tech, telecom firms

Bleeping Computer - 28 Září, 2026 - 09:30
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. [...]
Kategorie: Hacking & Security
Syndikovat obsah