Agregátor RSS
Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. [...]
Future
These Companies Say AI Is Reviving Entry-Level Jobs, Not Killing ThemLindsay Ellis | The Wall Street Journal ($)
“In one of the biggest surveys on employers’ graduate hiring plans this year, nearly three times as many executives at companies using or exploring AI said they were increasing junior-level hiring in 2026 than cutting back. Those using AI most extensively were the most bullish, according to Strada Education Foundation, which surveyed about 1,500 employers.”
Robotics
The Internet Can’t Stop Watching Figure AI’s Humanoid Robots Handling PackagesJeremy Hsu | Ars Technica
“The promotional robot demo has become a viral sensation among tech enthusiasts, spurring YouTube commenters to name the robots and the company to rapidly roll out related robot merchandise in response. …But despite such sentiments, it’s worth bearing in mind that even the most impressive robot demos represent narrow windows for understanding real-world robot capabilities.”
Robotics
Will Robotics Have a ChatGPT Moment?Jonathan W. Hurst and Hans Peter Brondmo | IEEE Spectrum
“We believe AI will enable an inflection point in robotics advances, but that it will be through the well-engineered application of coordinated systems of different AI tools rather than a single ChatGPT-style breakthrough. As the excitement around AI is matched only by the uncertainty of what will be possible, here are five hard truths that will define AI in robotics.”
Computing
New Quantum Processing Technology Points to Life After the Transistor, MaybeTom Hawking | Gizmodo
“The paper describes how a team from the University of Tokyo took a radical approach to the problem: they did without transistors entirely. Instead, their ‘non-volatile quantum switching element’ uses the spin of an individual electron to represent the state of a given bit.”
TECH
Why SpaceX Is Worth $700 Billion, Not $1.75 TrillionMartin Peers | The Information ($)
“In other words, anyone who buys into the company at the vaunted $1.75 trillion valuation (that’s at least what bankers are hoping SpaceX will achieve) is paying $1 trillion for the promise that SpaceX will overcome major technological hurdles and launch an orbital cloud-computing service, as well as industrialize the moon. It’s admirable Musk is shooting for the stars—but investors need to know what they’re getting into.”
Biotechnology
Colossal Biosciences Is Growing Chickens in a 3D-Printed Artificial EggshellAntonio Regalado | MIT Technology Review ($)
“The biotech company today claimed it has developed a ‘fully artificial egg’ as part of its effort to resurrect extinct avian species, including birds like the dodo and the giant moa. But ‘artificial eggshell’ would probably be a better description for the invention. It’s an oval-shaped printed lattice, coated inside with a special silicone-based membrane that lets in oxygen, just as a real eggshell does.”
Energy
Soaring Solar and a Surge in Hydro Push More Coal off the US GridJohn Timmer | Ars Technica
“Compared to the same quarter the year earlier, solar was up by 24 percent. On its own, that was enough to offset 80 percent of the rising demand. Overall, the output of the major renewables (wind, solar, and hydro) grew by 11 percent compared to the same period the year prior, or about 1.8 times the growth in demand.”
Artificial Intelligence
Even If You Hate AI, You Will Use Google AI SearchSteven Levy | Wired ($)
“To answer a query on black holes, AI agents [in Google’s new AI search] might whip up an interactive graphic explaining how they work. But information has to come from somewhere. The raw material for that was the hard work of cosmologists, science writers, and visual artists, none of whom are easily credited or surfaced. These types of creators—and the web sites that hold their work—seem to be the losers in this transition.”
COMPUTING
US Government Takes $2 Billion Equity Stake in Nine Quantum Computing Firms Joe Miller and Michael Peel, Financial Times | Ars Technica
“The US government will take equity stakes worth a total of $2 billion in a slew of quantum computing companies, including a startup backed by a firm with links to the Trump family and one taken public by a Pentagon official. The announcement by the commerce department that it had signed letters of intent with nine companies—including GlobalFoundries and IBM—sent shares in quantum specialists soaring on Thursday.”
Energy
The Quest for an Elusive Clean Fuel Is Moving UndergroundBrad Plumer | The New York Times ($)
“A start-up called Vema Hydrogen has drilled two test wells into the bedrock, each 1,000 feet deep, and is starting to inject treated water into the iron-rich rocks below. The goal is to trigger a special type of chemical reaction that could eventually produce large quantities of hydrogen, a clean-burning fuel that may one day play a vital role in tackling climate change.”
The post This Week’s Awesome Tech Stories From Around the Web (Through May 23) appeared first on SingularityHub.
Rekordní sluneční rádiový záblesk trval nečekaně dlouhých devatenáct dní • Signál vznikl kvůli uvěznění velkého množství elektronů uvnitř magnetické pasti • Sledování těchto jevů pomáhá chránit moderní technologie před kosmickým počasím
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most "systemically" important software across the world since the cybersecurity initiative went live last month.
Project Glasswing is a defensive effort launched by the artificial intelligence (AI) company to secure critical global software
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most "systemically" important software across the world since the cybersecurity initiative went live last month.
Project Glasswing is a defensive effort launched by the artificial intelligence (AI) company to secure critical global software Ravie Lakshmananhttp://www.blogger.com/profile/ [email protected]
Marihuanou zkouřený muž změnil heslo ke kryptoměnové peněžence a zapomněl ho • . • Dalších jedenáct let se neúspěšně snažil dostat ke svým bitcoinům. • Nakonec pomohla AI Claude, do které nahrál obsah svého počítače.
OPINION Dirty Frag, Copy Fail, and Fragnesia are less a random cluster of Linux bugs and more the public unveiling of how AI tools can pry open security holes with just a prompt or two. What they also have in common is their shared abuse of a core kernel abstraction: The page cache. What does this mean for you and me? Is this the rainstorm before a downpour of killer Linux security problems, or is this just a shower? It depends on who you ask. Whatever else may be true, these problems must be addressed. As Igor Seletskiy, CEO of CloudLinux, said: "The real story here is that we typically see one or two kernel-level LPE (Linux privilege escalations) vulnerabilities that affect multiple distros/versions per year. And now we see two such vulnerabilities one week apart. We should expect this trend to continue for quite a few months, meaning companies might have to reboot servers weekly." Ouch! But is this the start of a trend? Linus Torvalds, who knows a thing or two about Linux, said at Open Source Summit North America in Minneapolis that until recently, the kernel community would quietly notify distributions about a bug and ask them to upgrade without detailing the vulnerability, and "most of the time, nobody would figure out what happened." That was then. This is now. With AI‑accelerated analysis, he recalled that "last week, we fixed the bug; within three hours, there was a blog post about the implications of that bug fix, because security people love getting attention." As a result of this kind of thing, Torvalds has changed how the Linux security community will deal with AI-discovered security holes. "AI-detected bugs are pretty much by definition not secret, and treating them on some private list is a waste of time for everybody involved – and only makes that duplication worse because the reporters can't even see each other's reports." In addition, Torvalds added, in the case of AI-discovered bugs, you need to keep in mind that just "because you found it with AI, 100 other people also found it with AI." That means we're going to hear a lot more about Linux security problems. But are they getting worse? I asked Greg Kroah-Hartman, the Linux stable kernel maintainer, and he told me: "Maybe? It's hard to tell; the 'recent' ones really are very minor, as the number of systems that have 'untrusted users' is not common anymore. I don't see any real uptick in our actual bug fixes that I can tell." He continued: "We fix bugs like that on a daily basis, it's just the rise of people wanting to 'name a bug' and release a public exploit seems to be all the rage at the moment." An important point that Chris Wright, Red Hat's CTO, made at Red Hat Summit, the week before, is that in "security, all things aren't created equal. There will always be a spectrum of vulnerabilities that will surface. Some of those will be really critical and we will need to respond very quickly, so that becomes a clear priority. Others will have a longer tail of lower severity." Torvalds also added at Open Source Summit that just because you read stories about Linux and AI-discovered bugs, you shouldn't think the same thing isn't happening to proprietary software, such as Windows. "If you think that AI can't reverse engineer closed source, you're in for a surprise." In fact, he warned, "closed source is even worse in this respect, because the AI can't help you fix those problems, but the AI sure can help find those problems in the first place." He also discouraged security researchers from publishing working exploits: "When it comes to things that really are security issues, you may not want to make the exploit public… Don't be that guy who then crows about it publicly and says, 'Look, I could bring down this big company.'" Following on this theme, Christopher "CRob" Robinson, chief security architect for the Open Source Software Foundation (OpenSSF), told The Register that thanks to AI, "roughly 30 percent of reported Linux security bugs were duplicates. That's going to be another problem in this AI age, where everybody's a researcher, right, with a $20 cloud code account." That, in turn, will burden already overworked maintainers with yet more patches to deal with. Linux, Torvalds added, is something that its maintainers can handle. Smaller open source projects, however, are all too likely to be overwhelmed. The real problem, according to what the Google Threat Intelligence Group has discovered, is that the mean time to exploit (TTE) for vulnerabilities has continually decreased "from 63 days in 2018 to -1 day in 2024 and further downward to an estimated -7 days in 2025. A negative number indicates that exploitation of a vulnerability, on average, occurred before a patch was released." So what does this mean? Yes, we're going to see a lot more security vulnerabilities showing up in Linux and other open source projects. Yes, some of them will be serious, and all too many will have exploits out before the patches arrive. It's not, however, that Linux has suddenly become less secure. It's that AI eyes are much better at detecting bugs than human eyes have ever been. We will catch up, and AI can help with that, too. In the meantime, system administrators and developers will have to be more security-conscious than ever before. As Wright told The Reg, it's high time we switched from using SELinux in permissive to restrictive mode. Enforcing strict security is a pain, but what's even more of a pain is having to rebuild your containers and servers after a serious attack gets through. ®
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework.
The affected packages include -
laravel-lang/lang
laravel-lang/http-statuses
laravel-lang/attributes
laravel-lang/actions
"The timing and pattern of the newly published tags
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework.
The affected packages include -
laravel-lang/lang
laravel-lang/http-statuses
laravel-lang/attributes
laravel-lang/actions
"The timing and pattern of the newly published tags Ravie Lakshmananhttp://www.blogger.com/profile/ [email protected]
Rychle rostoucí lesní požár ohrožuje kontaminovanou oblast jaderného reaktoru • Vyřazený testovací areál je zamořený chemikáliemi i radioaktivními materiály • Záchranáři kolem rizikového zařízení vybudovali rozsáhlé protipožární prvky
Česko a Nizozemsko podepsaly memorandum o úzké spolupráci v oblasti čipů, která má být pružnější než kooperace s Německem • . • Obě země chtějí společně ovlivnit chystaný druhý balíček Chips Act a prosadit větší podporu pro výrobu strojů a mikroskopů. • Tuzemské firmy jako Meopta už pro globální ...
A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.
The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.
"Any cPanel user (including an attacker or a compromised account) may
A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.
The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.
"Any cPanel user (including an attacker or a compromised account) mayRavie Lakshmananhttp://www.blogger.com/profile/ [email protected]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability in question is CVE-2026-9082 (CVSS score: 6.5), an SQL injection vulnerability affecting all supported versions of Drupal Core.
"Drupal Core
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability in question is CVE-2026-9082 (CVSS score: 6.5), an SQL injection vulnerability affecting all supported versions of Drupal Core.
"Drupal Core Ravie Lakshmananhttp://www.blogger.com/profile/ [email protected]
Metoda VeloCD zkoumá dynamické změny nedokončené RNA v lidské krvi • Algoritmus s předstihem předpovídá budoucí vývoj a závažnost onemocnění • Systém úspěšně odhalil blížící se onemocnění covid-19 i chřipku
Oživeno 01:37 | Starship lehce dopadl do vod Indického oceánu. Přistání opět živě přenášely kamery na dronech a robotických hladinových plavidlech vyzbrojených anténami Starlink. Pozemní personál je při dopadu v bezpečné vzdálenosti a k lodi dorazí později.
Starship po převalení na bok ...
Linux privilege escalation starts once an attacker gets a foothold on a machine. Maybe it is a regular user account. Maybe it is an exposed application that nobody patched, or a reused password from another breach. Root access is usually the next objective. Attackers typically keep digging once inside, looking for a way to gain root privileges and remove the restrictions around them.
|