Agregátor RSS

SkyShowtime a 30 nejoblíbenějších filmů a seriálů v květnu 2026. Marshals, Madison a několik Mumií

Živě.cz - 26 Květen, 2026 - 20:45
Tyto filmy a seriály jsou teď na SkyShowtime nejoblíbenější. Nerozlišujeme žánr, stáří ani hodnocení na filmových webech. Jde o souhrnnou oblíbenost za poslední dobu, kterou zjišťuje a počítá web FlixPatrol.
Kategorie: IT News

MyPillow must decide whether to be firm or soft as ransomware crims demand pay

The Register - Anti-Virus - 26 Květen, 2026 - 20:02
Crims found the soft spot in the company's security. MyPillow, the US-based bedding brand founded by election conspiracy theorist Mike Lindell, has been listed by Play ransomware extortionists as an alleged victim. The pillow shop first appeared on Play’s name-and-shame data leak site on Monday, with the gang threatening to leak stolen data by Friday if MyPillow execs don’t pay the ransom demand. While the extortionists didn’t specify how many gigabytes of data they allegedly stole from MyPillow, they claim it includes “private and personal confidential data, client documents, budget, payroll, IDs, taxes, finance information” and more, according to the dark-web post seen by The Register and shared on social media by threat-intel firm FalconFeeds. MyPillow did not immediately respond to The Register’s inquiries. We will update this story if we receive any response. As of May 2025, the FBI said Play ransomware operators had allegedly exploited about 900 organizations, and the crew’s ransomware variant consistently ranks among the top five targeting critical infrastructure. Play previously stole around 65,000 Swiss government files after breaching its IT supplier Xplain in 2023. A year later, the group hacked Microchip Technology. The American semiconductor manufacturer told regulators that the ransomware attack disrupted some of its business operations and cost it $21.4 million in expenses related to the security incident. North Korean government goons have also used Play ransomware in their intrusions. Cisco Talos' incident responders previously told The Register that Play was one of the crews that used so-called "EDR killers" to disable endpoint security products in their ransomware infections. MyPillow is probably best known for its founder and CEO's politics. Lindell is a major proponent of President Trump’s false claims that the 2020 election was stolen, and is now running for Minnesota governor. ®
Kategorie: Viry a Červi

S Firefoxem 151 vás weby hůře identifikují. Čtečka PDF umožňuje slučování dokumentů

Živě.cz - 26 Květen, 2026 - 19:45
Oživeno 26. 5. 2026 | Režim soukromého prohlížení maže data relace po ukončení. Firefox 151 ale na navigační lištu přidává tlačítko, které relaci vymaže okamžitě. Díky tomu můžete soukromý režim okamžitě využít k jinému účelu. Prohlížeč si jen vyžádá potvrzení, které pro příště můžete ...
Kategorie: IT News

Vybrali jsme 15 nejlepších tabletů. Použitelné jsou i ty levnější, drahé umí kouzla se stylusem a AI

Živě.cz - 26 Květen, 2026 - 18:45
Vybrali jsme 15 nejzajímavějších tabletů, které si dnes můžete koupit • Dostávají se do nich i vyšší obnovovací frekvence displejů či rychlé dobíjení • Špičkový tablet už nemusí stát desetitisíce
Kategorie: IT News

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

The Hacker News - 26 Květen, 2026 - 17:48
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The activity targeted industrial and electronics manufacturing, education and public-sector bodies, financial services, and professional services, per the Threat Hunter Team from Symantec and Carbon Black. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Logitech zkusil něco nového. Myš Comfort Plus dostala polštářek, klávesnice zase AI tlačítko

Živě.cz - 26 Květen, 2026 - 17:45
Logitech v rámci inovací sáhl k překvapivému technologickému pokroku. Nová myš Signature Comfort Plus M850 L, kterou doplňuje klávesnice Signature Comfort Plus K880, přináší měkčený polštářek z podložek pro zápěstí i na samotnou myš. NDA 26.5. prostě kdykoli od úterý dál to může ...
Kategorie: IT News

Apple opens its post-Quantum encryption vault

Computerworld.com [Hacking News] - 26 Květen, 2026 - 17:31

The tech world is rapidly waking up to the security threat posed by future quantum computers, which will be able to break the encryption we now use to protect our internet existences with ease. Against that backdrop, Apple’s decision to share iPhone and Mac post-quantum cryptography code on GitHub speaks volumes. 

Lost in the fog of reporting over the Memorial Day weekend, this protection implements Apple’s versions of the standardized quantum-secure ML-KEM and ML-DSA algorithms. The newly-published material includes source code for corecrypto, the cryptographic library used by Apple’s Security framework, CryptoKit, and CommonCrypto. The company also published a white paper explaining more, including how it’s been testing its protection.

Post-quantum to its core

Apple has been working on post-quantum cryptographic protection for years. It first went public with this effort when it introduced iMessage’s PQ3 protocol in iOS 17.4. That protection secures both the conversation and its encryption keys against future quantum-based attacks. It is now available in iMessage, VPN, and TLS networking, while CryptoKit means developers can adopt quantum-secure encryption in their own apps. 

What Apple published is fairly extensive, but briefly it means the company has formally verified that its corecrypto library puts quantum-resistant protection in place. It already runs continuously across over 2.5 billion active devices, providing encryption, hashing, random number generation, and digital signatures. Apple’s tests also mean the company has set a new benchmark for high-assurance security engineering and compliance — even to the extent that it built its own custom tools to verify its protection, and collaborated with well-regarded US R&D firm Galois to facilitate third parties who want to test corecrypto.

Apple wants you to kick its protection around

“With the latest release of corecrypto source code on May 22, 2026, we’re sharing meaningful advances in applied formal verification with the global cryptographic community, including the details of our approach and the tools we used,” Apple said.

The idea is that by publishing it this way, Apple makes it possible for security researchers to really kick these protections around to try to make sure they will work once quantum truly becomes a threat. The company also said it wants to “encourage wider adoption, support critical review of our work, and help advance the state of the art for assuring critical software.”

Apple is relatively certain its protections do work. To achieve that, it formally verified parts of its CoreCrypto library, providing mathematical proof that its critical encryption implementations work as they should.

Why proof matters

The significance of that mathematical proof is important. One way to look at it is that while traditional security models focus on perimetric protections, Apple’s mathematical approach effectively analyzes protected code to ensure there are no vulnerabilities at all in its security foundations — at least when it comes to quantum-based attacks. Now, “at all” is a big claim, but in the here and now at least it means developers will be able to focus on ensuring their apps and user access protections are quantum-safe, leaving foundational protection to the security teams in Cupertino. 

It’s a move that should raise the bar across the entire industry; Apple has basically proved it’s possible to verify critical code with mathematical certainty. If Apple can do it for its operating systems, others should be able to do the same. I find it easy to imagine Chrome will quickly follow, though other operating systems might continue to face future quantum challenges, in part because elements of their code were literally built for a different computational paradigm.

“Our formal verification detected issues that would not have been caught with conventional testing, letting us address the errors before they ever reached our products,” Apple said in its white paper.

There are limitations to what Apple is offering. The mathematical proof is expensive to deliver, which means the scope of what is claimed applies only to those quantum protections Apple mentions in its report. This likely leaves other attack vectors future attackers could seek to exploit. Apple also seems to concede that it’s possible its tests might themselves have flaws, which is why it wants to encourage researchers to put its work to the test.

What next? 

We already know that security on any platform is a never-ending struggle. As one thing gets fixed, additional vulnerabilities become exposed. And when dealing with adversaries — some of whom are supported by the power of entire nations — one can never be too complacent. It’s good to see that Apple continues put protections in place against the looming quantum computing threat. It’s even better that the company is sharing how it verifies its work; doing so makes it a little easier for less resourced developers to research, test, and implement their own protections against the coming quantum menace.

ou can follow me on social media! Join me on BlueSky,  LinkedIn, and Mastodon.

Kategorie: Hacking & Security

Honeywell si postavil poskakující simulátor. Inženýři zkoumají, jestli pilot ve stresu zvládne dotykové ovládání letadel (video)

Živě.cz - 26 Květen, 2026 - 17:24
Inženýři z brněnského vývojového centra Honeywell si letos postavili novou hračku a my se na ni zajeli podívat. V jedné z technologických hal na tamní Černovické terase se totiž skrývá nový letecký trenažér CIMS (Crew Interface Motion Simulator), který věrně imituje kokpit letounu Falcon 10X a ...
Kategorie: IT News

AlmaLinux OS 9.8 a 10.2

AbcLinuxu [zprávičky] - 26 Květen, 2026 - 17:00
AlmaLinux OS byl vydán ve verzích 9.8 s kódovým jménem Olive Jaguar a 10.2 s kódovým jménem Lavender Lion. Podrobnosti v poznámkách k vydání (9.8 a 10.2). Opraveny byly zranitelnosti Copy Fail (CVE-2026-31431), Dirty FRAG, Fragnesia (CVE-2026-46300), nginx Rift (CVE-2026-42945) a SSH Keysign Pwn (CVE-2026-46333).
Kategorie: GNU/Linux & BSD

How Varonis Atlas integrates Claude Compliance API for AI governance

Bleeping Computer - 26 Květen, 2026 - 16:01
AI governance requires visibility into how AI tools interact with enterprise data. Varonis explains how its Atlas platform uses Claude Compliance API data to help monitor usage, investigate risk, and support compliance. [...]
Kategorie: Hacking & Security

Novinky ze Seznam.cz

AbcLinuxu [zprávičky] - 26 Květen, 2026 - 15:25
Seznam.cz vykázal za rok 2025 tržby v celkové hodnotě 6,454 miliardy korun. Oproti roku 2024 nárůst o 3,68 %. Zisk před zdaněním oproti předcházejícímu roku poklesl, a to o 11,21 % na 1,330 miliardy korun. Vlastní velké jazykové modely SeLLMa najdou dnes uživatelé téměř na všech seznamáckých službách. Na všechny obsahové služby byla zavedena technologie text-to-speech, díky níž si mohou uživatelé přehrát články v audio verzi namluvené syntetickým hlasem. Včera zpřístupnil beta verzi Seznam Asistenta všem přihlášeným uživatelům. Konverzační rozhraní Seznam Asistenta umožňuje uživatelům snáz popsat, co potřebují, a dostat odpověď, která je jasná, přehledná a snadno pochopitelná.
Kategorie: GNU/Linux & BSD

Lenovo začne prodávat křiklavě zelený herní notebook. Asi uhádnete, který e-shop jej exkluzivně nabídne

Živě.cz - 26 Květen, 2026 - 14:45
Na nedávné akci Lenovo věnované spíše AI a korporátním produktům doslova zářil jeden počítač určený pro běžné zákazníky. Výrazně zelený Lenovo LOQ. Lenovo LOQ Surge Green je opravdu výrazně zelený. Řadu LOQ rádi doporučujeme jako cenově výhodnou, s rozumným chlazením i vhodně zvolenými ...
Kategorie: IT News

Microsoft Defender can now automatically isolate hacked endpoints

Bleeping Computer - 26 Květen, 2026 - 14:19
Microsoft is testing a new Defender for Endpoint capability that will automatically isolate compromised endpoints to thwart attackers' attempts to move laterally across the network. [...]
Kategorie: Hacking & Security

Webinar: Too many tools are slowing network incident response

Bleeping Computer - 26 Květen, 2026 - 14:16
IT teams often need to jump between monitoring dashboards, infrastructure tools, ticketing systems, and communication platforms during network incidents. This webinar explores how automation and AI-assisted workflows can help reduce manual coordination and improve incident response times. [...]
Kategorie: Hacking & Security

Experts pour cold borscht on Farage's Russian hack claim

The Register - Anti-Virus - 26 Květen, 2026 - 14:12
National security and digital forensics experts have called foul on Nigel Farage's "disturbing" and unsubstantiated claim that Russia was behind the leak of a story about the UK politician receiving a £5 million gift from a crypto billionaire. Sources inside Farage's right-wing Reform UK told the Mail on Sunday that the party leader believes Russian spies hacked his phone and relayed details about Christopher Harborne's gift, a matter of which only four people were aware. Farage was said to have engaged outside "counter-espionage experts" to perform a technical analysis of his device – analysis that was said to point to Russia. According to Peter Sommer, professor of digital forensics at Birmingham City University, whichever outfit was entrusted to carry out this work would have been looking for two different types of markers to prove Russia was involved. These would be either the phishing message Farage clicked on that allowed Russia to access his private communications or the malware code an attacker used to exfiltrate them. "It's obviously trivial to disguise the source of an email, so that doesn't help," Sommer told The Register. "And the second thing is if you're talking about looking for hacking codes, hackers, whether they are juveniles or people in major SIGINT systems, are likely to be stealing from each other, so there's nothing unique about a code that would say where it comes from." Sommer also highlighted that advanced intelligence powers have tools at their disposal to obfuscate the source of malicious code. The CIA's leaked Marble Framework supposedly had the ability to translate malicious code into any language, including those used by its chief adversaries. "Now, absent from that, how on Earth do you determine that this is a Russian hack?" Sommer asked. Neither Farage nor Reform UK has spoken officially on the alleged Russian phone hack. They have not specified which experts on whose conclusions they used to make the claims, they have not stated what evidence pointed to Russia's involvement, and they have not committed to making this forensic assessment available for public scrutiny. Opening up the data for verification was one of the core issues raised by Ciaran Martin, founding chief executive of the UK's National Cyber Security Centre (NCSC), who labeled Farage's claims "disturbing" and "without any merit." Speaking to The Guardian, Martin said that not only is the lack of clear evidence concerning, but also if Russia was behind the hack-and-leak operation, a deliberate attempt at destabilizing a foreign democracy, then it would have significant consequences for the UK's Russia policy. "An aspiring prime minister has essentially claimed that Russia has launched an unprecedentedly aggressive intervention – a malicious intervention – in British politics, and he's not produced a shred of evidence to support that claim," Martin said. "It is a very, very serious thing to allege. It would be a national security issue," he added. "If it is true, the government should be in emergency session in COBR right now, considering their response to the most serious Russian intervention in internal British affairs for years." He said the claims published by the Mail on Sunday, at present, are unsubstantiated, and if true, in normal circumstances, this would prompt a formal government response. The Reg understands that the NCSC has not been engaged by Farage or Reform UK over the matter. The National Crime Agency did not respond to questions regarding its involvement and the Metropolitan Police Service declined to comment. Reform UK did not respond to our requests for more information, nor did Nigel Farage's office. What exactly did Reform UK claim? According to sources who spoke to the Mail on Sunday, Russian spies hacked Farage's phone, ascertained details about Harborne's £5 million donation to the party leader, and leaked it to The Guardian, which first reported the story. The Guardian said at the weekend that Farage is now under "mounting pressure" to prove his claim about the Russian phone hack. There is no indication the Graun 's reporting was connected to any illegal activity or Russian spies, but Farage is implying so, telling the Mail on Sunday: "This shocking revelation brings into question The Guardian’s judgment and whether Reform can cooperate with them in future." According to the analysis of Farage's phone, carried out by the unidentified counter-espionage experts, the findings were "almost certainly linked to Moscow," the Reform UK source said. They also claimed that spear-phishing tactics were used to compromise his phone, email, and bank accounts. "It bore all the sophisticated hallmarks of a nation-state actor using destabilization techniques in the run-up to this month's local elections," the source added. Farage said: "These actions by Russia are deeply concerning and highlight the threat they pose to British security." Regarding the motive for such an attack, Reform UK believes its leader angered Russian president Vladimir Putin by previously expressing support for NATO. He has said in the past that UK forces should shoot down Russian aircraft if they enter NATO airspace, and joined controversial calls for Ukraine to be admitted to the military alliance. The party also said that Harborne may be a target for the Russian regime because he joined former prime minister Boris Johnson on a trip to Ukraine in 2022, designed to showcase the impact of Russia's invasion earlier that year. ®
Kategorie: Viry a Červi

[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back

The Hacker News - 26 Květen, 2026 - 13:58
Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop. According to recent updates from The Hacker News, bad actors are using AI to find weak spots in systems and [email protected]
Kategorie: Hacking & Security

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

The Hacker News - 26 Květen, 2026 - 13:49
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerability, tracked as CVE-2026-45659, carries a CVSS score of 8.8. It has been assigned an important severity. "Deserialization of untrusted data in Microsoft Office SharePoint allows Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Fotbalový zápas natáčely iPhony. Přenos ukázal, proč se profesionální kamery zatím nemusí telefonů obávat

Živě.cz - 26 Květen, 2026 - 13:45
Apple se pokusil o revoluci ve sportovním vysílání a natáčel fotbal iPhony • Experiment ukázal, že mají v produkci své jasné místo • Jako hlavní kamera na celé hřiště ale zatím nestačí
Kategorie: IT News

Vláda představila strategické digitalizační projekty

AbcLinuxu [zprávičky] - 26 Květen, 2026 - 13:26
Vláda představila strategické digitalizační projekty. Roadmapa zahrnuje celkem 55 projektů napříč státní správou, z toho 22 prioritních projektů vycházejících přímo z programového prohlášení vlády a 33 projektů založených na platné legislativě. Portfolio pokrývá oblasti financí, zdravotnictví, digitální identity, dat, registrů, dopravy, krizového řízení, sociálních agend i kybernetické bezpečnosti.
Kategorie: GNU/Linux & BSD
Syndikovat obsah