Agregátor RSS

Digitální suverenita, snížení či eliminace závislosti na jednom dodavateli, který navíc neručí za dodržování GDPR a snahy o finanční úspory, to vše spojuje všechny snahy o přechod k otevřeným alternativám.

Nvidii patrně na skladě leží defektní čipy GB203 v množství větším než v malém, a tak hledá řešení, jak je udat. Tím by nakonec měla být nová verze GeForce RTX 5070…

Astronomové vystopovali černou díru v relativně blízké trpasličí nepravidelné galaxii UGCA 320, která se tam toulá mimo hlavní oblast tvorby hvězd. Je to zřejmě černá díra střední velikosti a pozorování potvrzují, že se krmí s využitím gravitační brázdy, kde se shromažďuje kosmický plyn, přitahovaný gravitací toulající se černé díry.

General Atomic MQ-9 se chtějí podílet na nástupci starých dobrých Reaperů. Jejich želízkem v ohni je dron Wildfire, který by měl létat do boje s tunovými střelami LRASM a půltunovými Krakeny (JAS). Dolet by měl mít as 14 800 kilometrů a díky relativně nízké ceně pod 10 milionů dolarů by měl být nasazován ve větších počtech k hejnovým útokům.

A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]

Startup Isar Aerospace delivered a payload of satellites to orbit on its second try. Rivals in Germany and Spain are hot on its heels.

Europe has long had to choose between state-backed rocket maker Arianespace and a handful of foreign launch providers to get its satellites into space. Now, there’s a new option. Last weekend, German rocket startup Isar Aerospace became the first private company to reach orbit from the continent.

Amid increasing global tensions, policymakers around the world have become more focused on developing sovereign launch capabilities, and in Europe, reliance on foreign players like SpaceX has raised significant concerns. Earlier this year, the European Space Agency launched a major new funding program, the European Launcher Challenge, for launch startups to help plug the gaps.

One of the program’s awardees, Isar Aerospace, has already made a mark, after its rocket lifted off from Andøya Spaceport in Norway on Saturday. This was the vehicle’s second attempt. Its March 2025 debut ended when the rocket lost control and fell into the sea roughly 30 seconds after liftoff. This time, Isar’s launch vehicle reached orbit and successfully released its payload.

“Today, Isar Aerospace opened space from continental Europe,” CEO Daniel Metzler said in a company press release. “Launch continues to be the largest bottleneck for the global space industry and from today on, there is a true alternative for commercial and institutional customers.”

Standing 28 meters tall, the two-stage Spectrum rocket is designed to carry up to 1,000 kilograms to low Earth orbit, more than three times the capacity of the Electron launch vehicle produced by leading competitor Rocket Lab. Spectrum is smaller than SpaceX’s Falcon 9 rocket but more powerful than the company’s inaugural Falcon 1. For this mission, the vehicle carried five commercial and educational CubeSats plus a technology experiment, selected through a competition run by the German Aerospace Center.

“All launches are special, but what Isar Aerospace achieved today is historic: the first European company to reach orbit with their own launch vehicle,” Géraldine Naja, the European Space Agency’s (ESA) director of space transportation said in an ESA press release. “A huge congratulation to the teams involved.”

The company says it already has five more Spectrum vehicles in production and is nearing completion of a 40,000-square-meter factory near Munich that should eventually churn out up to 40 launch vehicles a year. It is also constructing a launch complex in Nova Scotia, Canada, which will enable it to reach orbits critical for Earth observation and communications satellites.

Isar’s chief commercial officer, Stella Guillen, told CNBC the company already has deals worth roughly €10 billion ($11.6 billion) in the pipeline, though it didn’t clarify what proportion represented firm contracts. “The demand is so big,” Guillen said, adding that the launch industry is “desperate” for more capacity.

Isar has raised roughly €870 million ($1 billion) to date. It has also received a €198 million ($230 million) contract from ESA’s European Launcher Challenge, which stipulated that it must achieve an orbital launch by 2027, a milestone it has now cleared. The challenge has also funded PLD Space and Rocket Factory Augsburg, so it may not be long before there are other private European launch providers hot on Isar’s heels.

And it’s not just homegrown companies in pursuit. The global private launch market has become increasingly competitive in recent years. A wave of new rockets from outside Europe are also targeting debut flights in the next year, including Rocket Lab’s Neutron, Relativity Space’s Terran R, Stoke Space’s Nova, Astra’s Rocket 4, and Firefly Aerospace and Northrop Grumman’s Eclipse.

Isar’s European pedigree will make it easier to command a large chunk of the continent’s launch requirements, but the company still needs to quickly convert this early win into a regular and reliable launch service. If it can manage that, Europe may finally have the homegrown launch capacity it has long sought.

The post Europe’s First Private Rocket Reaches Orbit appeared first on SingularityHub.

Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, in some cases, requiring a hard reset to restore functionality. [...]

With the release of Apple Watch Series 12, Apple has decided that it's ok to capture people's conversations without their consent. The latest Apple Watch comes with Audio Intelligence, a set of AI audio processing capabilities tuned for the company's S11 chip. Its features include: Sound Recognition, Music Recognition with Shazam, Live Rewind, and Siri Recap. "Live Rewind lets you instantly see the last 15 seconds of a conversation as text," Apple explains in its technical summary [PDF]. "Siri Recap summarizes conversations throughout your day and produces high-level Apple Intelligence-generated notes so you can stay present in the moment and catch up later." With the double-press of the Digital Crown – as Apple grandly refers to the button on its Watch – Live Rewind takes in an audio stream from the Watch microphone, processes it in a Secure Exclave on the S11 chip, and routes the data to the user's nearby iPhone, which runs a speech-to-text algorithm on the 15-second audio segment. The resulting text is saved and the audio is discarded. The wearer's Watch emits an audible tone, even in silent mode, to alert those in the vicinity and provides a visual cue for those able to see the face of the device. Nonetheless, bystanders alerted to the recording – to the extent they recognize the meaning of the tone – have not consented to being recorded, which is a legal requirement in 11 US states that have all-party consent laws. Apple characterizes its implementation of brief eavesdropping as respectful of personal privacy. It makes that claim in a section titled, "How Live Rewind respects those around you," citing the audible chime and visual on-screen animation. Siri Recap, meanwhile, "summarizes conversations throughout your day and produces high-level Apple Intelligence-generated notes so you can stay present in the moment and catch up later." This too, Apple describes as an act of respect. "By design, Siri Recap does not create a recording, does not produce a verbatim transcript, and does not identify and attribute speakers," Apple's technical documentation explains. "The output is a brief, high-level summary, comparable to notes a person might write after a conversation. There is no audible signal because no raw audio is retained, and there is no way to reconstruct the original audio from a Siri Recap or share raw audio with anyone." The implication here is that Apple's non-consensual audio processing is less contemptuous of the public than the middle finger Meta has raised with its AI Glasses. That may be the case, but privacy advocates are still not impressed. "Our right to conversational privacy must include freedom from other people, without our clear opt-in consent, using technology to document what we are saying," said Electronic Frontier Foundation privacy litigation director Adam Schwartz in an email to The Register. "Otherwise, people will self-censor, and conversation will lose its spontaneity and intimacy. "So, EFF is disappointed that Apple is releasing a new Audio Intelligence feature that reportedly can create a transcript or written summary of what people are saying in the vicinity of an Apple Watch. People don't really have a practical means to consent or decline recording. "We suggest people should think twice before using this technology, out of respect to the conversational privacy of others. While it remains to be seen how state eavesdropping laws will apply to this new technology, it is clear that always-on monitoring of our conversations is an unacceptable burden on our conversational privacy." ®

A file descriptor is the numbered handle a running program uses to access an open file or similar resource. Linux can mark it to close automatically when the program replaces itself through exec(). That cleanup can involve waiting for a filesystem, which makes its timing important.

Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. [...]

A Linux sandbox restricts which files a program can access. Landlock, a kernel facility that lets programs apply those restrictions to themselves, had a bug in the code checking file locations. A concurrent directory move could leave the check reading memory that had already been released.

Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality. [...]

An unknown attacker used hundreds of AI agents to exploit two PaperCut MF/NG bugs and break into at least 395 organizations. The victims were concentrated in the US education sector, and the intrusions moved fast. In one case, an American high school went from initial access to domain admin in seven minutes. These agents, powered by OpenAI’s Codex harness and a DeepSeek model, also allowed the miscreant to attack organizations at scale, according to threat-intel firm GreyNoise, which traced the campaign’s orchestration to 45.142.193.132 on August 31. “The adversary went from an empty workspace to first achieving RCE against a real victim in just under four hours, first domain admin in an additional two hours, and once the full campaign launched, compromised at least 11 organizations in 26 seconds,” GreyNoise analysts said in a Wednesday report. The security provider attributes these intrusions to a “likely Russian-speaking” criminal who used AI to develop exploits against the pair of PaperCut vulnerabilities disclosed just days earlier. On August 28, the print management software provider issued emergency patches for CVE-2026-81578 and CVE-2026-82078, at the time warning that it was “aware of confirmed customer incidents and are treating this matter with the highest priority.” The flaws affect PaperCut NG and MF, which are self-hosted Java web applications that by default run with SYSTEM-level privileges on Windows. PaperCut’s CEO later said that the first reported compromise came in on August 27, and involved an education-sector firm. On Thursday, PaperCut published security maintenance releases, which replace the earlier emergency fixes. By now, however, at least 440 instances hosted by 395 identified victim organizations in 48 countries have been compromised, according to GreyNoise. “There are other real victims that could not be attributed to a named organization,” the threat signals team wrote. The human attacker told the agents to avoid targeting entities in 28 countries with the top five being Russia, China, Hong Kong, Thailand, and Iran. Several Commonwealth of Independent States (CIS) countries are on the list, which is why GreyNoise says the crim is likely Russian-speaking. It’s typical for ransomware and other cybercrime operations to expressly avoid attacking Russia and other CIS countries, whose governments often provide safe harbor for extortionists and financially motivated crims - especially if they also happen to work day jobs as state-sponsored hackers. Plus, local cops tend to ignore the digital break-ins unless the gangs infect any in-country organizations. However, the agents in the PaperCut attacks didn’t always follow these instructions, and in some cases still hacked organizations based in countries on the do-not-hit list. “It’s currently uncertain why the [attacker's] agents deviated,” GreyNoise said. “But it is a good example of agents gone wild.” The US and the UK were the countries with the highest victim count, at 98 and 59, respectively. Schools and other education-industry organizations were, by far, the hardest hit with 204 victims. For comparison, the No. 2 industry (other/unclassified) had 51, while retail/commercial/professional services ranked third with 38 victims. After using AI to develop exploits, achieve remote code execution, and harvest credentials in a self-hosted lab, the baddie set hundreds of AI agents loose on the open internet to find and attack public-facing, vulnerable instances. “This campaign appears to be opportunistic,” according to GreyNoise. “There is a high concentration of US-based targets in the education sector; however, it’s likely that is more attributable to the customer base of PaperCut NG/MF.” Interestingly, the attacker did not immediately set to work on post-compromise evil deeds with all of the victims. GreyNoise noted “multiple-day delays” between gaining initial access and achieving domain admin “but only due to a lack of action by the adversary.” The fastest time was five minutes, while the longest was 144 minutes. It’s also unclear if the criminal is only focused on gaining access to compromised organizations - and then plans to hand the attack off to affiliates or other data-theft, extortion, and ransomware groups - or if they plan to use this access for follow-on nefarious activities of their own. GreyNoise does note that, in at least one case, Cloudflare’s Web Application Firewall (WAF) blocked the attacker. “Fundamental hardening of environments still matters against AI-enabled threats,” they wrote. It’s also worth noting that GreyNoise has been tracking malicious use of 45.142.193.132 since early July, and says this IP has been used in attacks against internet facing technologies and devices from Palo Alto, Ubiquiti, Citrix, SonicWall, and Proxmox VE. ®

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks useful right up until it isn’t. Different stories, same basic problem: the path in was often already

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks useful right up until it isn’t. Different stories, same basic problem: the path in was often already Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Apple does seem to have tried to ensure its controversial Audio Intelligence feature isn’t abused. Alongside the iPhone Duo and new iPhone 18 Pro range, Apple on Wednesday introduced a new Apple Watch equipped with a brand new feature it calls Audio Intelligence. The existence of this surprising tool was confirmed only on the eve of the launch event. Enabled by the new S11 chip on the latest Watch devices, this is actually a collection of four features:

• Siri Recap, which creates high-level summaries of conversations during your day.
• Live Rewind, which transcribes the previous 15 seconds of a conversation as text.
• Music recognition, which relies on Shazam.
• Sound recognition, which can identify things like sirens or alarms.

All of these features must be consciously enabled by the user and are not on by default.

What they have in common is use of artificial intelligence along with always-on microphones. While all four of these tools are being presented as opt-in, their existence will inevitably — and justifiably — raise privacy concerns. 

Apple saw those concerns coming, and to make the features work it has placed a Secure Exclave on the S11 chip inside the latest watches. This is a dedicated secure buffer on the chip that processes audio privately on the fly. It does so without creating a recording of ambient sound around you, and the data it works with is isolated from the rest of the system. That Exclave pairs with the iPhone’s Enclave using “a new audio-verified pairing mechanism that exists in addition to Bluetooth pairing,” Apple explains in a detailed white paper about how it works. 

For Siri Recap, the process works like this:

• Apple Watch recognizes a conversation is taking place.
• If so, audio flows into the Secure Exclave, encrypted, and transmitted to a similarly Secure Enclave on your paired iPhone.
• The audio is then immediately deleted from the Watch. 
• The phone will decrypt and transcribe the audio, condense it, and send that transcript to Private Cloud Compute for processing. 
• The short summary is then made, returned, and deleted after seven days.
• Speakers are not identified, recordings are not made, and detailed transcripts are not created or retained.

The company has also introduced safeguards for those around you. The system will deliberately omit some information, including potentially harmful content, financial data, or personal identifiers. When you use the Live Rewind tool, an audible chime plays on your device to alert nearby people that you are using the feature.

Challenges will emerge

For one thing, we don’t yet know whether the company will provide enterprise IT with device management tools to disable the feature on managed devices. It’s crystal clear that devices that are constantly gathering data will be seen as potential security risks — particularly in regulated industries. And it seems far more logical to provide new APIs to disable Audio Intelligence on managed devices than it would be to insist anyone wearing an Apple Watch put it in a lead-lined box before beginning the next safeguarding, healthcare, or product development meeting.

Another problem I see concerns Europe’s Digital Markets Act. It is, after all, inevitable that competitors (maybe including Meta) will want their devices to have equal access to the information gathered by Audio Intelligence. Based on the decisions Apple has made so far, it seems equally likely it will want to refuse such access; this is why these new features will not initially be available in the EU. 

There is also no doubt hackers will attempt to break into the system, though doing so will not be at all easy on account of the intentional way the company has built in security. I suspect, but do not know, that attempts will focus on the points at which data is exchanged across devices, rather than when the information sits within secure enclaves on those devices. It also makes sense that everyone who uses iCloud services for their data should put 2FA in place and pick strong passwords. 

What about iCloud storage?

The other challenge will be encryption, specifically ongoing attempts to penetrate iCloud data encryption by some nations, led by the UK. Even so, if access could be achieved to iCloud-stored Audio Intelligence text, what is obtained would only be summary data, not a recording. The system is architected so recordings are never made.

Apple’s white paper on the feature explores this in more depth: “Audio from the microphone enters the Secure Exclave of Apple Watch, where it is initially processed for speech, sounds, or music, without transcribing or storing the raw audio. This buffer is a continuously overwritten stream that exists only within the protected hardware and never creates an audio recording.”

Once you decide to keep a Recap or Life Rewind text, the raw audio is not saved to iCloud, only the text, and then only if you use 2FA and a device passcode. No one else, including Apple, can access the encrypted data you save, Apple said.

Where does this go next?

One pre-event rumor that didn’t come true concerned AirPods equipped with cameras and Vision Intelligence to understand physical context and surrounding, with the aim of enhancing Siri AI. I’ve expressed reservations about this idea, but do think the security model Apple has put in place for Audio Intelligence will turn out to be an echo of its intentions to secure Vision Intelligence transactions.

This implies a new chip with Silicon Enclave for AirPods Pro, a similar exchange of information in real time for summary and determination of context and content, and a process in which no recordings are made and media access beyond brief, time-limited summaries, is available. In short, Apple will use the same security model.

What about the rest of them?

That’s fine as far as it goes. But the other subtext is that while Apple seems genuine in its attempt to deliver relatively intrusive tech advances right, others will show less commitment to privacy and security. So, while it’s furthering the conversation about using these tools, Apple is also pushing public acceptance of such technologies.

I’m not entirely sure we’re ready.

Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon

Po Spider-Manovi se studio Insomniac Games rozhodlo odvyprávět příběh ikonického X-Mena. Wolverine je v komiksech zajímavější, než si neznalec může myslet. Své silné stránky přebírá i jeho herní novinka, ale náplní spadá do průměru a je jasně vidět, že hlavní záměr byl sehrát to všechno co nejvíc ...

Svobodný (GPLv3) šachový engine Stockfish (Wikipedie) byl vydán ve verzi 19 (𝕏). Přehled novinek v příspěvku na blogu. Stockfish 19 je o 44 Elo silnější než Stockfish 18.

A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers. [...]