Agregátor RSS

Microsoft fixes bug that broke Windows File History backup feature

Bleeping Computer - 24 Září, 2026 - 10:14
Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. [...]
Kategorie: Hacking & Security

Micron ukončil výrobu 2GB GDDR7, na nichž stojí RTX 5000. Důvody nejsou známé

CD-R server - 24 Září, 2026 - 10:00
Standardní 2GB GDDR7 již Micron nenabízí, na oficiálních webových stránkách oznámil ukončení výroby (EOL). Důvody tohoto kroku nezveřejnil, zůstávají nejasné, neboť tyto čipy využívá GeForce RTX 5000…
Kategorie: IT News

25 nejlepších romantických filmů. Drama, komedie, velkofilmy i oddechovky. Víme, kde je najdete online

Živě.cz - 24 Září, 2026 - 09:32
Romantické snímky patří k nejvyhledávanějším titulům; a to nejen ženským publikem. Připravili jsme přehled ikonických klasik tohoto žánru i filmů, jež mají náběh se jimi stát.
Kategorie: IT News

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

The Hacker News - 24 Září, 2026 - 09:07
An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and personal records. The agent reached files on it that were not public, but no personal
Kategorie: Hacking & Security

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

The Hacker News - 24 Září, 2026 - 09:07
An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and personal records. The agent reached files on it that were not public, but no personal Swati Khandelwalhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Stavba PC je umění kompromisu. Poradíme, kde připlatit a na čem bez výčitek ušetřit

Živě.cz - 24 Září, 2026 - 08:45
Naskládat počítačové komponenty do košíku umí mnoho lidí, ale vybrat vhodně se doplňující, cenově vyvážené a smysluplné komponenty už tak jednoduché není. Poradíme, jak na to, a vypíchneme nejčastější chytáky.
Kategorie: IT News

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

The Hacker News - 24 Září, 2026 - 08:32
Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It originated from 1,487 unique AWS EC2 source IP addresses. "The campaign compromised 7 accounts –
Kategorie: Hacking & Security

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

The Hacker News - 24 Září, 2026 - 08:32
Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It originated from 1,487 unique AWS EC2 source IP addresses. "The campaign compromised 7 accounts – Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Příští rok odstartuje první družice, kterou bude řídit výhradně AI. Je to šance pro dálkové sondy zítřka

Živě.cz - 24 Září, 2026 - 07:45
AstroForge chce těžit rudy na asteroidech • V roce 2027 hodlá do vesmíru vyslat sondu Autonomy-1, kterou bude ovládat AI • Cíl je jasný: Úspora nákladů
Kategorie: IT News

Ještě dříve: Zkušební výroba na 1,4nm procesu TSMC začne již v zimě

CD-R server - 24 Září, 2026 - 07:40
Aby těch překvapení nebylo málo, přichází další pozitivní zpráva o přípravách 1,4nm (A14) procesu TSMC. Zkušební výroba, která měla být urychlena na duben 2027, ve skutečnosti začne ještě o kvartál dříve…
Kategorie: IT News

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

The Hacker News - 24 Září, 2026 - 07:36
Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file
Kategorie: Hacking & Security

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

The Hacker News - 24 Září, 2026 - 07:36
Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Meta Connect 2026

AbcLinuxu [zprávičky] - 24 Září, 2026 - 03:36
Společnost Meta na dvoudenní konferenci Meta Connect 2026 představuje své novinky. Vypíchnout lze lehké brýle s funkci VR Meta VR Glasses. Do prodeje půjdou na jaře 2027 za cenu 1299,99 dolarů.
Kategorie: GNU/Linux & BSD

AI spend will jump 49.5% in 2026, says Gartner

Computerworld.com [Hacking News] - 24 Září, 2026 - 03:30

Worldwide AI spending will increase 49.5% in 2026, to $2.7 trillion, and grow another 36.2% in 2027 as AI usage continues to expand, Gartner predicts in the latest quarterly update to its IT spending forecast.

But there’s been no diversion of money from other areas of IT to feed AI, said Gartner Distinguished VP Analyst John-David Lovelock. CIOs got some net new money for AI back in 2024, and a little in 2025, he said, “so there wasn’t a diversion, and now more of their spending is about rebranding than diversion.”

By 2030, “every dollar is going to be an AI dollar in one way or another,” he said.

Instead of buying just a laptop, companies now buy a laptop with AI chips in it, while enterprise software now has AI embedded in it. And instead of doing a project about business strategy, they now do a project about how AI might change business strategy.

“In one way, it’s kind of rebranding,” he said. “Net new spending is going more towards AI, and existing spending is being transformed towards AI.”

It’s similar with hyperscalers: “The hyperscalers haven’t diverted one dime away from their cloud. So AWS, Google, Microsoft, Meta are all continuing to build out their cloud infrastructure at the same rate they were in 2022.”

The AI buildout “is the largest infrastructure project humanity has ever undertaken,” he observed.

Gartner updates its spending forecasts quarterly. In its latest report, it predicted AI infrastructure spend will grow 51.2% this year, and AI software 60.2%. Spend on AI agents and assistants, which it breaks out separately from other software, is forecast to increase by 77.3%, and AI security spend to almost double.

As AI development platforms prove themselves, Gartner sees spending on them accelerating: It has increased its 2026 growth forecast for them from 28% in its May report to 39%, attributing the change to the development of custom AI applications by enterprises and software and service providers.

AI model providers are seeing a “small but growing opportunity” for domain-specific language models aligned with enterprise use cases, upping the 2026 growth rate for generative AI models to 117%.

Semiconductor surprise

But what surprised Lovelock was the semiconductor spend.

“Semiconductors for the last 30 years has been a nice, easy market to work through,” he said. “Total spending has been very incremental. It’s followed a nice long-term evolutionary curve. Back in 2015, we said it would be about a trillion dollars by 2030, and we got real pushback on that back then, saying we didn’t understand Moore’s law and fabrication and all the rest of it. Well, turns out both myself and the people giving the criticism were wrong, because with AI, chips are now going to push $2 trillion by 2030.”

The culprit is memory.

“We were ready for the run-up in the chips that went into the heart and soul of the servers. However, as the AI servers got more functional, they required more memory and, of course, more storage, which is also memory,” he said.

People often mistake the reason for the substantial rise in memory prices, he said: “It’s very often written that there is a memory shortage, which is not putting the blame or the explanation in the right place. There is a massive over-demand towards memory, and that’s pushed these chip prices incredibly high, and that has spiked that semiconductor spend, now doubling 2030 spend from what we thought it was before AI.”

His message to CIOs is straightforward: “The next two years, next three years, have at least three major transitions in them,” he said. “If you think you know what will happen with AI based on what is happening with AI, you’re wrong. The technology is changing too quickly for anybody to have assurances or certainty on what can be done and at what price point. This is going to be continually on your plate, and your balance between risk and reward has got to be your number one priority.”

This article originally appeared on CIO.com.

Kategorie: Hacking & Security

OpenAI agents ‘infiltrated Australian government website’

The Register - Anti-Virus - 24 Září, 2026 - 02:03
Australia’s Prime Minister Anthony Albanese has revealed an OpenAI agent “infiltrated an Australian government website” while trying to research medical statistics. Albanese said the incident occurred in June and involved an agent gaining unauthorized access to a portal that stores statistics related to Medicare, Australia’s national health insurance scheme. “The AI agent accessed both public and non-public files,” the PM said, before describing the portal as holding “non-sensitive Medicare information relating to data and statistics such as spending.” Australia’s Signals Directorate, a signals intelligence and cybersecurity agency, is investigating the incident. Albanese said the government currently believes none of its other systems were compromised, and that OpenAI’s agents did not access personal information. The PM described the situation as “obviously unacceptable” and said he spoke with OpenAI CEO Sam Altman – who is also attending the UN meetings – “to express Australia's extreme concern about this incident.” Albanese also “expressed my disappointment that it took the company way too long to inform the government what had occurred. The nature of the way that that notification occurred as well was unacceptable.” OpenAI told The Register it discovered the incident during the review of “misaligned behavior” it disclosed last week, and which led it to report six occasions on which its agents behaved unexpectedly and/or dangerously. “During this review, we identified activity involving several Australian government websites and services as our models attempted to look up answers, and available statistics for questions about Australia during an internal evaluation,” an OpenAI spokesperson told The Register by email. “In the course of that, our models took actions we did not intend.” “The information accessed included aggregate health statistics and internal file names,” the spokesperson added. OpenAI say the incident occurred in June, and that it notified Australia’s government on September 10. “During that time, we were validating and investigating the facts and what information had been accessed,” the spokesperson told The Register. We’ve asked OpenAI for more information about the incident, incuding whether this mess was one of the six examples of misaligment it revealed last week, and will update this story if we receive a substantial response. It is unclear why Albanese waited two weeks to disclose the incident, but ahead of the UN meeting Australia signed the Call for Control of Frontier AI Models, a 21-nation proposal for AI regulation. The PM is also using his visit to the UN to launch a bid for Australia to win a non-permanent seat on the United Nations Security Council. Australia last year used the UN meeting to promote its ban on children under 16 accessing social media. Albanese is widely expected to discuss his government’s proposed digital duty of care for tech platforms, which would require tech companies to avoid foreseeable harm to users, at this year’s meetings. The PM sees taking on Big Tech with strong regulations as a political winner, often linking the government’s actions to reducing the likelihood that children will self-harm. He often uses the phrase “we need to shape technology rather than allow it to shape us” to summarize his government’s policy. Every Australian has a Medicare account, the scheme is popular, and is a signature policy of Albanese’s Labor Party. OpenAI’s actions therefore give the PM a weapon to wield as he advocates for stronger regulation of tech companies. Albanese is trying to enact those regulations without scaring away investment. He had a win last week when Anthropic decided to become a long-term tenant of a 1.4GW datacenter cluster currently under construction down under. The PM faces criticism, however, over hints that in order to attract investment he may water down Australian copyright laws. Australia does not have the fair use exemptions that AI companies relied on to scrape content in other jurisdictions. Albanese has said any changes to copyright laws will embody two principles: creators “will have control over their intellectual property” and “any use needs to be monetized,” but hasn’t offered details on what that will mean. APRA AMCOS, an organization that represents Australian composers and musicians, last week criticized AI companies’ approach to gathering training data. "They have found the money for nearly every lobbying firm in Canberra. They have found the money for datacenters, power and Nvidia chips,” wrote CEO Dean Ormston. “But they have no intention of paying for the single most important ingredient in training and running a frontier large language model, which is creative content. And it isn't only Australia's IP they want. It's Australia and the world's IP, trained on in datacenters here without a single license agreement." ® UPDATED AT 2:15 AM UTC SEPTEMBER 24 to add news that OpenAI advised Australia's government of the incident by using the relevant agency's generic publicdisclosures@ email address rather than approaching government officials. That decision drew further criticism from Australian lawmakers. Prime Minister Albanese has also informed two of Australia's State goverments that OpenAI's agents also attacked their sites - a crime agency and a health department.
Kategorie: Viry a Červi

[remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE

The Exploit Database - 24 Září, 2026 - 02:00
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE

OpenAI’s new priorities for third-party assessments are a fine start, but they lack teeth

Computerworld.com [Hacking News] - 24 Září, 2026 - 01:50

OpenAI published a detailed list of priorities and principles on Tuesday designed to govern its third-party model assessors, a list that industry observers agreed was a good one. But they also stressed that it lacked any enforceable controls to truly maintain safety.

If the goal is to encourage enterprise CIOs to trust OpenAI more, it won’t help, they said, but most doubted that this was OpenAI’s objective. Its more probable aim is to use the list to work out an arrangement with competitors and regulators so that enforcement is made more palatable, under the theory that it is open to stricter enforcement, but only if all of its key rivals are locked into identical restrictions.

The OpenAI post said, “OpenAI is committed to supporting independent assessments with deep levels of access across training, evaluation and deployment. That access should enable assessors to challenge our assumptions, identify risks we may have missed, and reach their own conclusions about the effectiveness of our safeguards.”

It added: “Third party assessments are most useful when they address specific, consequential questions: Does the evidence support a lab’s safety case and safety claims? Do evaluations adequately test the risks they are intended to measure? Do safeguards work under realistic conditions?”

Nothing about enforcement

Pieter Arntz, a malware intelligence researcher at Malwarebytes, said that giving third parties rules for engagement is certainly a good thing, but the implication behind such rules is that they are somehow enforceable. And the document says nothing about that enforcement process.

“It sets some useful expectations for independence and rigor, but it does not itself compel OpenAI to submit to a particular scope, publish adverse findings, or change deployment decisions,” he pointed out. “Its credibility will depend on the terms of individual assessments, and what outsiders are allowed to see. Its value therefore hinges on whether OpenAI accepts genuinely inconvenient scrutiny, and whether results, redactions, remediation, and deployment decisions can be independently checked.”

Valence Howden, advisory fellow at Info-Tech Research Group, agreed that the lack of enforceability makes the rules close to pointless. 

The document “doesn’t impose any requirements on OpenAI, and I would have been surprised if it did, because their motivations are not as clear-cut as they’re stating,” he said. “They also haven’t really identified what they will do based on the assessments, once they are conducted. OpenAI retains control over scope in that [OpenAI] must agree with it, limiting where assessors can go. They retain the ability to determine the appropriate level of access, which still allows them to filter what’s provided, impeding the gathering of direct evidence in those cases they define as material or classified. It also allows them to control much of the reporting and redact portions.”

Howden said the net impact is that “it’s good for determining what should be assessed, but considerably weaker on true clarity and approaches for how this is done.”

But Jason Andersen, principal analyst at Moor Insights & Strategy, offered a different perspective, although he reached the same conclusions as Howden and Arntz.

“It’s not an act of good faith to not empower these evaluators,” he said, but at the same time, CIOs need to understand the split personality of OpenAI today.

“It’s a classic problem with OpenAI because they are a split brain company, with the commercial side and the original mission side,” he pointed out. “Those two teams have not aligned very well over the past two years. It looks like it started with the original mission team, but then commercial interests took over that document and turned it into legalese.”

‘A principle instead of an excuse’

Frank Dickson, principal analyst at Dickson Research, concluded from the post that OpenAI “seems proactive in highlighting the threats posed by AI, but hesitant to accept accountability or take real action. This is a code of conduct for the assessors, not for OpenAI. The gap between the two is the whole story.”

He delved into the details of the document and was not happy. He pointed out, for example, that third-party assessor access was “granted within the bounds of legal, security, and IP constraints. That is a company deciding the scope of its own scrutiny.”

He also noted that the document specified that “publication happens after labs get a reasonable period to remediate issues. That is the same grace-period logic that just got Google criticized for sitting on the Gemini hacking disclosure for seven weeks, now written down as a principle instead of an excuse.”

Just the beginning

However, Samantha Gloede, global head of risk services at KPMG, said that she sees the document as the beginning of the process, and it should be evaluated accordingly.

“I believe the conversation will increasingly shift from assessment to accountability,” Gloede said. “Independent testing is important, but long-term trust depends on how organizations respond when material risks are identified. Stakeholders will want confidence not only that issues can be found, but that corrective actions are taken, independently validated and reflected in governance and deployment decisions. The next evolution of AI assurance will be demonstrating that accountability with the same rigor used to assess risk in the first place.”

Edna Conway, executive advisor at consulting firm Acceligence, agreed, noting that the substance of this effort will only become clear in the next phase. 

“The next step is making the lab accountable to the assessment process itself. Who determines when an assessment is required? ” she asked. “How much access is sufficient? What happens when the assessor and lab disagree about scope? Who sees a critical finding? Embracing independence is essential, as third-party assessments are genuinely valuable only when the assessor can ask uncomfortable questions, get sufficient access to answer them, follow evidence outside the original hypothesis when necessary, and report conclusions without commercial or organizational pressure shaping the outcome.”

This article originally appeared on CIO.com.

Kategorie: Hacking & Security

Placeholder domain used in dev docs now serves ClickFix attacks

Bleeping Computer - 24 Září, 2026 - 00:46
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]
Kategorie: Hacking & Security
Syndikovat obsah