Kategorie

U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. [...]

Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure," Lumen Technologies Black Lotus Labs said in a report sharedRavie Lakshmananhttp://www.blogger.com/profile/[email protected]

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update, for ongoing malware scanning. Approved stores get the features from December 1, but only onSwati Khandelwalhttp://www.blogger.com/profile/[email protected]

Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the Pwn2Own Berlin contest in May. Microsoft fixed the Edge bugs the day after the contest,Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]

Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]

Otter has added a new Work mode to its AI Chat assistant, expanding the range of tasks it can carry out before and after meetings.

It’s part of a wider drive by Otter — which received $320 million in funding last week — to move beyond meeting transcription and into automating tasks and workflows.

The Work interface, announced Tuesday, is accessible in the AI Chat prompt box, alongside the Chat option. While Chat allows users to ask questions, generate content, and retrieve information, Work is aimed at multi-step actions, Otter said. It’s a similar approach to other AI assistants, such as Claude and ChatGPT, that separate simpler chat functionality from newer agentic capabilities.

Prior to a meeting, Otter users can prompt Work to generate briefing documents based on information collated from previous calls and data from connected applications. After a meeting ends, the AI assistant can draft emails, generate documents — including Word and Notion docs, PDFs, and interactive web pages — and update Salesforce records.

The AI assistant requires human approval before completing tasks, an Otter spokesperson said.

The capabilities expand on functions already available with AI Chat’s existing Advanced mode. Otter will now remove the Express and Advanced options from the AI Chat interface.

Work mode is available now to all paid Otter users. There are no usage limits, Otter said — this differs from the Chat mode, which allocates a certain number of queries each month depending on a customer’s payment plan.

The feature updates reflect how meeting note taking is rapidly moving from data capture to workflow automation, said Irwin Lazar, principal analyst at Metrigy. “That is, vendors are delivering solutions that allow meeting notes to be actionable, based on context both from within meetings, as well as from other connected platforms,” he said.

Lazar pointed to similar functionality emerging in other meeting systems such as Microsoft’s facilitator in Teams and Cisco’s Webex meeting agent.

The vast majority (91%) of business users want meeting note-takers to access and act on context from outside a meeting, according to a global study of 403 organizations in Metrigy’s “Workplace Collaboration & Employee Experience: 2027” report.

In addition to the Work mode, Otter announced that its Live Assist feature is now available to enterprise customers, and will expand access to all paid Otter accounts in the coming weeks. Live Assist, announced in April, provides private guidance to a user during a call, such as suggesting questions and tracking meeting “objectives.”

“I see this kind of widget assist a lot in external-facing customer support roles, but for internal productivity meetings, this is quite unique,” said Thomas Randall, a research director at Infotech.

However he said that Otter faces from other meeting software vendors which are also integrating AI capabilities into their platforms. “So I don’t see Otter becoming a center of work, though its new functionality will be of great assistance to pre-existing users,” said Randall.

Related:

• Cisco brings collaborative agents and Claude into Webex chats
• AI notetakers at work could leave companies at risk for lawsuits

Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. [...]

PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authentication in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its CriticalRavie Lakshmananhttp://www.blogger.com/profile/[email protected]

Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]

A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs first when a computer is switched on, before the operating system. An attacker who can reach the machine Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation. While attackers employ AI to automate [email protected]

Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Decades ago, the United States established programs that allow businesses to hire highly skilled foreign workers — the H-1B visa program and a related green card program. They’re designed to make sure we lead the world in technology. Not uncommonly, H-1B workers and green card holders eventually become American citizens.

One of the best-known examples is Microsoft CEO Satya Nadella. He came to the US from India on the green card program, then switched to the H-1B visa program in the early to mid-1990s when working for Microsoft. He ended up becoming a US citizen. In 2014, he was appointed Microsoft CEO and subsequently architected one of the biggest turnarounds in tech history. Under his leadership, Microsoft has become nearly a $4 trillion company.

President Trump, who rode an anti-immigrant message to the White House two times, has both the green card and H-1B programs in his crosshairs — and he’s aiming right at Microsoft.

Earlier this month he claimed Microsoft, Adobe, and several other companies had abused an important part of the green card program called PERM, which helps H-1B visa holders get green cards. He’s suspended their use of it. Microsoft fired back that Trump was off target and the company has done nothing wrong.

Who’s right and who’s wrong? We’ll follow the facts to find out.

Trump’s and Vance’s fact-free charges against Microsoft

A green card allows a foreigner to stay and work in the US permanently. Companies often sponsor people for green cards, although there are other ways someone can get one as well. Once someone has a green card, they can switch to work for a company other than the one that sponsored them. Getting a green card is often a first step for someone to become a US citizen.

An H-1B visa, on the other hand, is temporary and allows a skilled worker to stay in the US for three years, which can be extended to six years.

The two programs are closely related. Not uncommonly, someone on an H-1B visa can get a green card by having the company sponsoring them apply for it through the PERM program.

PERM is what Trump targeted earlier this month. He suspended Microsoft, Adobe, and several other companies from the PERM program so they can’t get their H-1B workers green cards.

Vice President Vance claimed Microsoft had “abused” the system by laying off American workers and replacing them with lower-cost foreign workers. He said in a news conference that there was “no company in the United States, unfortunately, that has abused this system more.” 

Vance contends that Microsoft laid off 6,000 American workers in the past year and replaced them with much less expensive foreign H-1B visa and green card holders. He called the foreign workers “indentured servants.”

Vance concluded, “If you do the math, for every worker that Microsoft laid off, they replaced that worker with one and a half foreign indentured servants. Now that is a scandalous system.”

That’s pretty damning, if true. But as so often is true with the Trump administration, the charges bear no relationship to the truth. For one thing, Vance’s numbers include Microsoft’s use of the H-1B program as well as the green card program.

It’s not just PERM and the green-card program that Trump has been attacking. Since his first election, he’s targeted the H-1B visa program as part of his war on immigrants and immigration. Last year, he imposed a $100,000 fee on companies for each H-1B visa they use, a move which a judge earlier this year ruled was illegal. His administration has appealed the ruling.

In August, the Department of Homeland Security proposed a similar fee plan, with companies having to pay $103,265 to hire an H-1B worker. The administration has also filed proposals to end work authorization for some H-1B workers’ spouses and eliminate the 60-day grace period H-1B workers have now to stay in the US after a job loss so they can look for new work.

Microsoft fights back with facts

After Vance’s charges, Microsoft immediately fired back with a statement that succinctly pointed out how wrong his claims were. The company addressed Vance’s false claims about both the H-1B and PERM programs.

Microsoft noted that “of the approximately 6,000 H-1B visa applications we submitted in the last fiscal year, 80% were to extend or change the status of existing Microsoft employees. These were not to hire new people.”

It went on to say, “the remaining filings for new employees were for individuals already legally in the United States who decided to come work for us.”

Beyond that, Microsoft’s layoffs in the past year had nothing to do with H-1B visas or green cards. Even if Microsoft didn’t have a single H-1B visa worker or green card holder, the layoffs would have gone through.

All that’s not to say the H-1B program is perfect. Some companies do hire foreign workers under the program to perform jobs Americans can do and pay them less. Disney, for example, in 2014 replaced several hundred IT staff members with lower-paid foreign workers who had no unique, highly specialized skills. In fact, the Disney workers trained the foreign workers to do their jobs.

There have also long been charges that under the program, companies that provide IT outsourcing hire foreign workers with no greater skills than US workers and pay them less. The Biden administration issued a series of rules cracking down on that. It’s not clear how effective those rules have been. When Trump suspended Microsoft and Adobe from the PERM program, he also suspended several big IT outsourcing firms. 

Trump honors foreign-born CEOs

Vance’s news conference was followed by a very different Trump news conference several hours later, offering the usual head-spinning sense of unreality so often found with the Trump administration. Trump awarded Nadella the National Medal of Technology and Innovation — an award he called “so well deserved.” No mention of the H-1B or PERM charges against the company, or that Nadella worked for Microsoft on an H-1B visa and with a green card in the 1990s.

At the same press conference, Trump awarded Elon Musk, CEO of Tesla and SpaceX, the National Medal of Science. Other foreign-born honorees included Google co-founder Sergey Brin, Nvidia CEO Jensen Huang, and AMD CEO Lisa Su.

Musk says he’s a former H-1B holder and is a big supporter of the program. He’s written on X, “The reason I’m in America along with so many critical people who built SpaceX, Tesla and hundreds of other companies that made America strong is because of H1B.”

Musk being Musk, there hasn’t been a peep from him about Trump’s latest assault on the program.

The upshot

Nothing could be clearer: Trump’s and Vance’s charges against Microsoft are lies. It’s true that some companies have abused the H-1B program, and possibly PERM, but Microsoft isn’t one of them.

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]

Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind. ANY.RUN's analysis of Skyw4lker, a device code phishing campaign primarily targeting U.S. [email protected]