Agregátor RSS

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, [email protected]

Amazon chystá nové Kindly, takže spustil výprodej těch stávajících. • Základní model s 6" displejem stojí 2500 Kč, lepší Paperwhite je za 4000 Kč. • V akcích jsou také barevné čtečky Colorsoft a obří Kindle Scribe.

More than half of UK businesses lack confidence in their ability to perform at least one basic cybersecurity task, according to the government's latest skills survey. The annual research found 57 percent of businesses reported a basic technical skills gap, up from 49 percent last year despite tighter national standards and repeated government warnings about cyber resilience. That equates to approximately 808,000 businesses whose cybersecurity leads were not confident in carrying out at least one of nine tasks, including storing data securely, configuring firewalls, and detecting and removing malware. The equivalent estimate last year was 699,000 businesses. The researchers cautioned that the increase might reflect greater awareness of organizations' security posture rather than an actual deterioration in their capabilities. Interviews suggested that recent high-profile breaches had prompted executives and boards to scrutinize cybersecurity more closely. Detecting and removing malware produced the largest reported skills gap: 38 percent of businesses, 47 percent of charities, and 23 percent of public sector organizations lacked confidence in performing the task. The public sector reported fewer problems than businesses and charities across all nine basic skills measured. Sam Thornton, COO at cybersecurity consultancy Bridewell, said the figures reflected the position of smaller businesses and charities, where cybersecurity is often "just one part of someone's wider role rather than a dedicated job." "Malware is evolving quickly, and AI is increasingly helping attackers produce faster variants which are harder to spot," he told The Register. "Keeping pace requires constant attention, which may be harder when the person responsible for security is also handling several other roles. "This could mean that personnel lean on greater use of AI tooling to support cyber defences, which in turn could induce further exposure to the organization where sufficient skill levels are needed to understand and interpret the output of such AI models." Matt Hull, veep of cyber intelligence and response at NCC Group, said limited resources were compounded by increasingly complex IT environments. "Businesses increasingly rely on cloud infrastructure, SaaS platforms, APIs, third parties and growing numbers of human and machine identities," he said. "These environments can change rapidly, making it much harder to apply security fundamentals consistently across the organization." Hull said the industry also has "a habit of chasing the latest shiny update," when in reality most problems arise when organizations overlook the fundamentals. "It's a bit like looking after your car. You can spend a fortune on the latest safety features and a brilliant sound system, but none of that helps much if your tyres are bald or you can't see through the windscreen." Other reported gaps included storing and transferring personal data securely, restricting which software could run, configuring firewalls, selecting secure device settings, enabling automatic updates, and creating user accounts securely. Charities reported the widest skills gap on most measures, although businesses were less confident about storing and transferring personal data securely. Although the public sector scored better than businesses and charities in this survey, its overall basic skills gap nearly doubled from 14 percent last year to 27 percent. That comes despite repeated warnings about weaknesses in government systems. In 2025, the National Audit Office found "significant" gaps and immature controls across most critical systems it examined. Incidents affecting the Legal Aid Agency, Foreign Office, British Library, and NHS supplier Synnovis have provided ample demonstrations of the potential consequences. Among the government's responses is the £210 million Cyber Action Plan, announced at the start of the year to strengthen central government systems and introduce mandatory security requirements. Operators of critical services can use the NCSC's Cyber Assessment Framework to assess their resilience, while smaller organizations can seek Cyber Essentials certification as a baseline. The Cyber Security and Resilience Bill, now making its way through the Lords, would impose additional requirements on operators of essential services and their suppliers. The bill is intended to replace the NIS Regulations 2018 but excludes central and local government. The UK government believes the Cyber Action Plan essentially holds the public sector to the same standard as those in scope of the new bill, but does so without any legal obligations. Thornton argued that tighter regulation was unlikely to close the skills gaps among small businesses and charities without practical support tailored to their limited resources. "When more than half of UK businesses lack confidence in the basics, and nearly half of those responsible for security don't feel equipped to handle an attack, we have an economy that is both easier to breach and slower to recover," he said. "A growing skills gap at the bottom of the supply chain weakens the UK's resilience as a whole. Tighter regulation will help protect critical infrastructure, but it's unlikely to improve the skills in smaller businesses and charities. "Closing the gap will need affordable, practical support for smaller organisations, whether through managed services, simpler tools or incentives from insurers, so that good baseline security becomes the default rather than something only larger firms can afford." ®

Konference LinuxDays 2026 proběhne již tento víkend 3. a 4. října v Praze v areálu ČVUT v Dejvicích na FIT. Konference LinuxDays 2026 znamená desítky přednášek a workshopů, zástup zajímavých osobností, místo pro setkání, spoustu nových nápadů a informací a stánky řady různých projektů: Fedora, openSUSE, vpsFree.cz, Mozilla, MacGyver - bastlíři SH, OpenAlt a mnoho dalších. Vstup je volný.

Plzeň testuje chytré semafory které dají hasičům zelenou s předstihem • Systém varuje řidiče na displeji auta dříve než uslyší sirénu • Po vyhodnocení pilotního provozu se technologie rozšíří do dalších měst

One of the most rewarding parts of being a Certified Android Explorer™ is the geeky pleasure that comes with uncovering a hidden shortcut Google snuck somewhere into its smartphone software.

One of the most exhausting parts, in contrast, is realizing that Google randomly changed a bunch of the shortcuts you’d found and developed the muscle memory to remember.

Here in the land o’ Googley matters, both of those things are constant realities and balancing forces. In fact, we’re watching that exact duality play out in the Google Messages app for Android right now.

Google Messages has so many tucked-away options and power-user shortcuts that most mere mortals never notice — or just don’t remember to use. And now, sure enough, Google’s in the midst of rolling out an update that changes the way many of ’em work.

Maybe you’ve noticed. Maybe you had no idea those invisible gestures were even there in the first place. Either way, now’s the time to learn or relearn the best ways to get around Google Messages on Android and take full advantage of its recently revamped invisible actions.

Here’s your guide to all the hidden swipes, taps, and presses and how they can help you communicate more efficiently than ever.

[Don’t stop here: Come check out my free Android Intelligence newsletter for something new and useful in your inbox every Friday — and my Android Notification Power-Pack as a special welcome bonus!] 

Google Messages gesture #1: The message long-press

We’ll start within the actual Google Messages chat experience — what you see once you’re looking within a specific conversation or texting thread on whatever Android device you’re using — ’cause that’s where the biggest and most jarring gesture changes are appearing.

First and foremost, if you press and hold your finger down onto any individual message within a thread, you’ll now see a new pop-up menu filled with possibilities for interacting with that message — with regular and custom photo-based reactions at the top, when the thread supports those, and then a variety of available actions in a menu beneath that.

Google Messages’ new text long-press menu on Android — never more than a press away.

JR Raphael, Foundry

Of note, the new “Select more” option within that menu will allow you to select multiple messages within a thread for copying, forwarding, or deleting; the new “Copy” option is an easy way to copy the contents of that one message onto your Android system clipboard; and the newly positioned “Info” option is an interesting way to see more about the message’s status — including if and how the message has been edited after its original delivery.

Speaking of editing, if you’ve sent a message recently enough and it’s in a thread where editing is supported, you’ll also see the option to edit a message of your own in that same new long-press pop-up.

And all of that’s just scratching the surface.

Google Messages gesture #2: The message right swipe

Still within the Google Messages conversation interface, try placing your finger onto any individual message and swiping it toward the right of the screen.

In a conversation where everyone’s using a device that supports modern messaging standards, that’ll reveal an artfully hidden shortcut to reply directly to that specific text — which essentially quotes and repeats the original message above whatever you write for context.

A reply lets you quote an earlier message in a conversation for context.

JR Raphael, Foundry

It’s a handy way to keep track of what’s happening in a conversation, especially if numerous things are being discussed at once or you’re replying to something from a while back.

Google Messages gesture #3: The message left swipe

Another change in the Android Messages gestures is what happens when you swipe the other way — toward the left — on any individual message.

That gesture now reveals the timestamp showing exactly when the message in question was received — a pertinent sliver of info that used to be readily available and visible by default but now gets tucked away out of sight unless you perform that subtle swipe to reveal it.

Google Messages gesture #4: The message tap

Speaking of newly hidden info, try tapping on any message that you’ve sent within a conversation.

In a thread where everyone is using the current RCS messaging standard, that’ll reveal the status markers that show if your message was delivered and also if it’s been read.

Google Messages gesture #5: The profile photo tap

Next up, tap the profile picture or pictures at the tippity-top of any individual thread you’re viewing.

That’ll take you to an info screen about the conversation, where you can adjust a variety of settings as well as see more info about all of the other people in the chat and add any or all of ’em into your Android contacts, too.

The Messages conversation info screen is a convenient place to perform all sorts of actions related to the thread and the people within it.

JR Raphael, Foundry

On a related note…

Google Messages gesture #6: The group chat name tap

In a conversation where multiple people are involved, you can tap the name of any individual person above a message they’ve sent to summon a pop-up panel related to them, specifically.

From there, it’s just one more tap to call or message that person directly or view their contact info and add ’em into your contacts, if they aren’t already present.

Google Messages gesture #7: The send long-press

After you’ve typed a message in any thread, press and hold the send button (at the right of the text composing window) instead of just tapping it.

Future scheduling is one of Google Messages’ most useful hidden powers.

JR Raphael, Foundry

That’ll give you the option to schedule the message to be sent at some future date and time. Just note that your phone will need to be on and with an active connection when that time comes in order for the delivery to happen.

Google Messages gesture #8: The message list swipe

All right — time to head out to your main list of messages for a few final gestures to relearn and remember.

First, you can swipe left or right on any thread in that list of conversations to perform an action of your choosing on it — like archiving it, deleting it, or marking it as unread.

To set those gestures up the way that’s most useful for you, tap your profile picture in the upper-right corner of the screen, select “Messages settings,” then tap “Swipe actions” and review the available options.

You can configure your own swipe gestures for the main Messages list of conversations.

JR Raphael, Foundry

Google Messages gesture #9: The message list long-press

Next, did you know you can press and hold any message in the main Google Messages list to select it?

Once you’ve done that, you’ll see a new set of options appear in the bar at the top of the screen to pin the message for easy ongoing access, to snooze the message and stop receiving notifications related to it for a set amount of time, and to archive or delete it as well as to mark it as unread or block its sender entirely (with those last two options being buried in the three-dot menu icon in the corner of the screen).

Long-press a message in your main Messages list, and boom: All sorts of interesting options appear.

JR Raphael, Foundry

Google Messages gesture #10: The sender pic tap

Last but not least, tap the profile picture next to any thread in your main Messages list, and you’ll find a pop-up menu of actions related to that specific person or all the people within a group chat.

It’s a fast and convenient way to start a new text, place a call, or hop over into the Contacts profile for the person in question — provided they’re already saved in your phone’s contacts.

width="1024" height="474" sizes="auto, (max-width: 1024px) 100vw, 1024px"> Sender-specific actions are always a tap away in the main Google Messages inbox interface.

JR Raphael, Foundry

And now you know, my fellow Certified Android Explorer™. All that’s left is to remember all these time-saving Android Messages gestures — then brace yourself for the inevitable next time Google changes ’em around again.

Keep the Googley goodies coming with my free Android Intelligence newsletter — one new thing to try every Friday and my Android Notification Power-Pack as an instant welcome bonus. 

Běžný agent je něco jako „udělej tento úkol“. • Dot se snaží být „vezmi si tento problém na starost a průběžně ho řeš“. • OpenAI reaguje na Meta Muse a Grok Bota.

British Transport Police (BTP) spent more than £320,000 putting half a million commuters through live facial recognition cameras, only for the system to identify precisely nobody it was looking for. Figures obtained by civil campaign group Liberty Investigates through Freedom of Information requests, and reported by The Guardian, show BTP's six-month trial scanned more than 500,000 faces at London railway stations and generated just one alert. That turned out to be a false positive, meaning the technology produced no correct matches and no arrests directly resulting from an LFR alert. The exercise wasn't exactly light on resources either. According to the figures, deployments swallowed almost 100 hours of police officers' time and cost more than £320,000. Privacy campaigners at Big Brother Watch told The Register the results would be funny if the implications weren't more serious. "The figures from the British Transport Police's live facial recognition pilot would be laughable, if they didn't have such troubling implications for our rights and freedoms," said Jasleen Chaggar, senior legal and policy officer at the campaign group. "Millions of Londoners use the city's stations every day and may have already found themselves caught in a digital police line-up, likely without even realizing." Then there's the small matter of what taxpayers got for their £320,000. "It's not fair to subject innocent people to intrusive identity checks during their commute, but it's even more insulting to waste almost 100 hours of officers' time and £320,000 of public money when it produces such meagre results," she said. "The pilot figures show that replacing officers with AI surveillance does not improve Londoners' safety and British Transport Police should drop their use of live facial recognition." But BTP isn't dropping it. In fact, the trial has been extended until November and expanded from Network Rail stations onto the London Underground. The system uses NEC's NeoFace M40 facial recognition tech, and cameras scan people passing through a designated area, comparing their faces against a police watchlist. When the software thinks it has spotted someone on that list, it generates an alert for an officer to review before deciding whether to stop the person. BTP says it cannot identify people who aren't on a watchlist and that it immediately deletes their biometric data. It also says deployments are intelligence-led and targeted at crime hotspots where officers believe "high harm offenders" are likely to pass through. That claim of a targeted approach isn't convincing everyone. Sarah Simms, senior policy officer at Privacy International, told The Register the results of the trial show just how many innocent passers-by can have their faces processed along the way. "We are deeply concerned by the results of the British Transport Police's live FRT trial. It reaffirms how invasive and disproportionate live facial recognition tech is and why it shouldn't be permitted. Thousands of people have their highly sensitive facial data processed in public spaces as they go about their daily lives, sometimes unknowingly. It also undermines claims of it being a targeted measure." Simms also pointed to the lack of legislation specifically governing the technology as BTP continues to expand its use. "What's further concerning is that they continue to extend these deployments when there is no specific legal framework in place to regulate facial recognition, which is essential to ensure there are restrictions and safeguards on its use to protect people's rights," she said. Those assurances haven't put the wider controversy around police facial recognition to bed. Earlier this year, UK police temporarily suspended deployments after independent testing raised concerns about racial bias at some operating thresholds. BTP's own experiment has produced a rather different problem so far: after scanning more than half a million faces, the only person its cameras picked out was the wrong one.®

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash can happen when such a resend starts while a larger handshake message is stuck part-waySwati Khandelwalhttp://www.blogger.com/profile/[email protected]

Toughbook je řada extrémně odolných notebooků a tabletů vyráběná společností Panasonic. Tyto stroje jsou navržené tak, aby vydržely pády, nárazy, vodu, prach a extrémní teploty, používají je záchranné složky, armáda, stavebníci apod. Toughbook letos slaví 30 let a k narozeninám si nadělila dvojici ...

PNY odmítla vyřídit reklamaci GeForce RTX 5090 se spáleným napájecím konektorem. Jako důvod uvedla podmínku, kterou však nikdy nedefinovala a která je v rozporu s oficiálními specifikacemi Nvidie…

The Spectre microarchitecture vulnerability has returned yet again, this time to vex just-in-time (JIT) engines that generate machine code for browsers, runtimes, and kernels. The vulnerability is found in many CPUs that use speculative execution, the process of executing code before it is called to boost performance. Researchers found speculative execution opens the door to side channel attacks through which secrets can be exposed or inferred. When news of that risk became known, chipmakers and OS developers scrambled to fix these vulnerabilities, which were referred to as Spectre and Meltdown. And since then, researchers have found two or three dozen variations, such as 2025's VMScape, one of several so-called "Spectre v2" attacks that attempt to exploit indirect branch prediction, where program control is passed indirectly by pointing to an address where the next instruction can be found rather than specifying the instruction itself. The attacker trains the branch predictor to execute speculatively to a chosen address in order to leak data about the microarchitecture state. Researchers from Vrije Universiteit in the Netherlands and Scuola Superiore Sant’Anna in Italy have revived Spectre in a form called Branch Target Reuse (BTR), which they describe as the first practical in-place Spectre v2 attack that attacks just-in-time (JIT) compilers. An in-place attack is confined to the victim's branch while an out-of-place attack relies on speculation directed toward a target on a different branch. The researchers – Sander Wiebing, Yuhui Zhu, Alessandro Biondi, and Cristiano Giuffrida – found that this novel Spectre form can be conjured from code left in JIT engines including Linux cBPF, Oracle GraalVM, and Mozilla SpiderMonkey. "The key insight behind the attack is that, while modern CPUs restore architectural code coherence after self-modification, they do not necessarily invalidate stale indirect branch prediction entries (i.e., branch targets)," the authors explain. "In JIT engines, these stale targets can outlive the original code and later be reused when the code cache is repopulated, yielding a speculative execute-after-free primitive." The result is that an attacker can commandeer speculative control flow in a way that avoids some software defenses like FineIBT [PDF]. The authors showed they could exploit this flaw by designing two proof-of-concept exploits against an Intel-based Linux kernel that reveal the root password hash even with the constant binding defense provided by cBPF. The expected leakage rate is 5.7 KB/sec for Intel Raptor Cove chips and 5.4 KB/sec for Lion Cove. It's slow but enough for an unprivileged user to coax a sensitive password hash out of a vulnerable system. After the researchers disclosed their findings, Linux kernel developers and Oracle put mitigations in place. Two CVEs were assigned: CVE-2026-64507 and CVE-2026-64508. Mozilla, the researchers said, has opted to prioritize work on site isolation instead of addressing the issue directly. Strong mitigations like IBPB are said to be effective but add complexity and hinder performance. The Branch Target Reuse paper has been accepted for publication at the ACM Conference on Computer and Communications Security (CCS) 2026, which will be held November 15 through 19 in The Hague, Netherlands. ®

Intel dnes mohl být jedničkou nejen v osobních počítačích, ale i v serverech a datacentrech pro AI. Namísto toho je dnes rád, že se vůbec vyhrabal z problémů.

Vědci navrhli odstupňované pole bójí pro účinnější zachytávání mořských vln • Různě naladěné řady bójí dokážou pohltit přes 90 % energie • Pokročilá matematika sice funguje skvěle ale elektrárnu stále ještě nemáme

Skupina zlodějů si chtěla přivydělat prodejem kradeného hardwaru Nvidie. Nevyšlo to. Náklad sice úspěšně odvezli, ale radost trvala jen do otevření návěsu. Křemík sice obsahoval, ale v podobě oxidu…

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-88772 (CVSS score: 9.5), has been described as a memory overflow bug in the Datagram Transport Layer Security (DTLS) protocol handling that's rooted in the NetScalerRavie Lakshmananhttp://www.blogger.com/profile/[email protected]

Microsoft oznámil, že WSL kontejnery (WSLC) aneb linuxové kontejnery ve Windows Subsystem for Linux (WSL) jsou již obecně dostupné. Současně popsal jejich architekturu.

Meta is once again repositioning itself to target the enterprise market.

This week, the company announced the Meta Enterprise Platform, which it says will evolve its AI stack into products and services that enterprises can deploy into operations, rather than just using them for advertising and social media campaigns.

While the company provided few details about the offering, Meta CEO Mark Zuckerberg called the platform “the next major pillar” of its business, saying it will feature a connected suite of products including Muse agent, Meta Business Agent, Muse API, and Muse Code.

MongoDB’s Chirantan “CJ” Desai will step in as chief enterprise platform officer to lead the effort.

The question is whether this endeavor, once fully launched, will be more lasting than Meta’s previous attempts in the enterprise.

“The issue of trust remains,” said Armaan Sandhu, research analyst in the AI practice at Info-Tech Research Group.

The shutdown of previous products like Workplace and Horizon Workrooms indicate that Meta tends to “abandon the enterprise products as soon as its vision of the future changes,” he said. “Companies will therefore require hard evidence that Meta will stick to its future plans and continue investing in their development.”

Meta’s growing AI ambitions

Meta has been working to reorganize its AI efforts since founding its Meta Superintelligence Lab in 2025. Muse Spark was the first new model to come out of that initiative; launched in April 2026, the agent supports multimodal inputs, multiple reasoning modes, and can spin up sub-agents in parallel to handle more complex tasks.

Next, Meta Business Agent, launched in June, directly targets enterprises, providing them with AI assistants to automate customer interactions, support sales, and drive leads across platforms including WhatsApp, Messenger, and Instagram. The company followed that up with Muse Agent, an autonomous business and personal agent that can handle multi-step background tasks.

Muse Code is designed to handle complex software workflows across large codebases, while Muse API gives developers direct access to the Muse AI stack.

Abandoned efforts

However, Meta has so far struggled to gain a strong foothold in the enterprise market, and in some cases has abandoned previous attempts after they failed to take off.

For instance, Workplace, launched in 2016, supported communication and information sharing across organizations, but Meta announced in 2024 that the service would be discontinued, even as it reported millions of users. After a 10-year run, Workplace officially shut down in May 2026.

Then there are the company’s virtual reality efforts, including Horizon Workrooms, a collaboration app used with Quest headsets. It was offered for five years before being retired in February 2026.

Different positioning

But the company is positioning Meta Enterprise Platform differently; it will play on strengths that “few other companies have” and leverage its experience connecting millions of businesses and customers, Zuckerberg said, touting the company’s “advanced models, leading agents, large-scale infrastructure, and years of working closely with many businesses.”

However, noted Info-Tech’s Sandhu, Meta’s key advantage is not its technology; rivals such as Microsoft, Google, Amazon, and Salesforce also offer capable models and agents. Its differentiator is that it owns the platforms where users familiarize themselves with brands, interact with businesses, and make purchases. Meta can therefore link advertising, customer discovery, messaging, service, and commerce through AI agents running across WhatsApp, Instagram, and Messenger.

“Few rival companies can boast of such an effective combination of AI and access to customer channels,” Sandhu said.

Enterprise appeal may not be there

Still, Meta has challenges to overcome as it seeks to compete with well-entrenched tech giants and move beyond its consumer market origins.

Said independent technology analyst Carmi Levy, “It’s difficult to understand the appeal to enterprises, as Meta has never been known as a significant player in the enterprise market.”

Its data stewardship track record is also “somewhat checkered,” he pointed out, citing the infamous Cambridge Analytica scandal that Meta is now answering for, as well as a number of other high-profile data stewardship and privacy cases in the US and UK.

He contended that the company’s core competency revolves around harvesting data to fuel growth, hardly a desirable trait in the enterprise space. Workplace “never quite realized its early promise,” and it’s unclear whether the Meta Enterprise Platform will suffer the same fate.

“Time and again, Meta’s behavior betrays its inability to craft the kind of iron-clad enterprise-grade infrastructure and organizational competency that corporate decision makers value,” he said, noting that even if its offerings were years ahead of the competition, these trust issues should give buyers pause.

In addition, Meta Enterprise Platform loosely ties together a host of offerings originally released into the mass consumer market, yet positions Muse as the pillar of its future enterprise strategy, he pointed out. If anything, Muse’s “early teething troubles,” including privacy violations and serious zero-day vulnerabilities, should be the only warning enterprise buyers need.

If Meta did manage to turn a consumer-architected collection of offerings into something somewhat more enterprise-ready, its “indifferent level of commitment” to earlier enterprise offerings raises the question of whether it intends to support such a platform well into the future. “If the commitment isn’t there, neither is the trust,” Levy added.

However, if enterprises do decide to evaluate the product, Sandhu advised that they pay attention to pricing, integration with other systems, and technical features. And initially, they should choose a narrow field of application, “with the goal of maximum benefit without making this technology a company’s key system.”

This article originally appeared on CIO.com.