Agregátor RSS

Garmin CIRQA je chytrý náramek bez displeje pro diskrétní sledování zdraví • Zařízení nabízí pokročilé fitness funkce i desetidenní výdrž baterie bez předplatného • Prodej na českém trhu odstartuje 24. července s doporučenou cenou 4990 Kč

Just in time for the iPhone’s 20th anniversary, Apple is moving closer to becoming a service company. It is set to launch its new deal with Klarna next week and when it does, Apple enthusiasts in the US will effectively be able to subscribe to their favorite Apple hardware, with the cost spread across up to three years.

This matters because when combined with Apple One and Apple’s Creator Studio subscriptions, the Klarna arrangement brings Apple closer to offering a full subscription model for hardware, software, and services. The only thing you don’t get under the new arrangement is AppleCare, for which you’ll allegedly need to pay extra.

Moving closer to hardware-as-a-service

Apple has slowly been transitioning toward hardware-as-a-service for almost a decade. Back then, Forrester analyst Frank Gillet predicted the company would eventually offer bundles of services and products for a monthly, all-in, fee. 

This isn’t quite where we are yet; you still need at least three subscriptions to get close. But, after the better part of a decade, Apple has moved much nearer to the hardware-as-a-service idea.

There are some products reportedly excluded from the arrangement, including MacBook Neo, Apple Watch SE, the entry-level iPad, and iPhone 16. Clearly, Apple sees those products as sufficiently affordable. 

Easy payments for RAM-ageddon

The new Klarna arrangement comes as Apple is forced to increase product prices as AI-driven memory price inflation becomes widely felt across every economy. In theory, I assume, Apple hopes to make its products available to cash-strapped consumers who need new hardware, while also navigating a time of deep economic tumult and uncertainty. It’s thought the company has previously rejected these plans to protect normal hardware sales, but normality is a kingdom we no longer seem to possess. Interesting times. Probable inflation incoming.

“Apple Upgrade lands at precisely the moment Apple needs it,” IDC analyst Francisco Jeronimo wrote in a note seen by Computerworld. “Having just pushed Mac and iPad prices up on the back of the memory shortage, with iPhone increases widely expected in September — as well as the new iPhone foldable expected at $2,500 — Apple’s real risk is that rising prices even further can impact the upgrade cycle.” 

New age, new shopping habits

The introduction of the scheme gives consumers a way to purchase the company’s popular high-end devices when they are introduced — no doubt,at higher cost — this fall. Plus, of course, if it’s good enough for GM, it’s good enough for Apple.

It’s all about attitude, too. From Apple’s perspective, it has done plenty of the groundwork required to convince its customers that subscription payments for things you value are no bad thing. 

Reluctance to embrace “Access Not Ownership’”purchasing models has dropped dramatically since Apple — and CEO Tim Cook — first began banging the drum for services income. Apple’s services stream has now become its second-biggest revenue driver after the iPhone. It has over 1 billion paid subscriptions, and an active hardware installed base of more than 2.5 billion devices globally.

A combination of changed customer habits and external threat means the stars are now aligned for hardware-as-a-service models. “Reframing a device as a low monthly payment protects that [upgrade] cadence and allows Apple to start marketing their products as device-as-a-service to consumers, which no other vendor was ever able to do,” Jeronimo wrote to me. 

There is a one-more-thing aspect to this: the products are effectively being leased, a new approach that will give Apple a stronger grip on EOL devices, helping it grab more of them for refurbishment, resale, and recycling. Over time, this will give the company a much stronger grip on the lucrative second-user market that exists around Apple equipment, even while for almost every consumer product we find the life we want is something we can rent, but probably can’t afford to own.

Managing future risk

The other solid reason to take a partnership approach is risk management. Apple had intended to develop its own buy-now, pay-later scheme via Apple Pay Later, but abandoned that plan as it became riskier with rising bank rates. “Also, by backing the program with Klarna rather than reviving the in-house subscription plan it shelved in 2024, Apple captures the demand upside without taking the credit risk onto its own balance sheet,” Jeronimo said.

You can follow me on social media! Join me on BlueSky,  LinkedIn, Mastodon and subscribe to The Core.

Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers. [...]

If you're responsible for Linux security, someone just dumped a pile of work onto your desk: 432 Linux kernel CVEs were published across Sunday and Monday this week. Linux watchers at nixCraft pointed out the volume on Monday morning, and it didn’t take long for seasoned sysadmins to start expressing concerns. Jan Schaumann, chief information security architect at Akamai Technologies, took to the OSS-SEC mailing list Tuesday to express concerns over the sheer volume of Linux kernel CVEs published in recent days. Aside from noting that the CVE system isn’t the best way to track security changes, Schaumann also wondered in his post whether there was any good way to deal with so many kernel security issues. “This onslaught really shows it's not feasible to attempt to prioritize individual kernel changes,” Schaumann said. “You might attempt to process this large set of changes by pointing an LLM at the intake and asking it to prioritize them,” he suggested, “but if it spits out a dozen today and another 25 the next, you haven't won much.” Schaumann also suggested waiting to see which ones emerge as serious issues and focusing on those in the weeks to come, or updating one’s entire fleet of Linux machines on a weekly basis. “I sure would like to be able to do [that], but reality keeps getting in my way,” Schaumann said. “I'm not sure what to do here going forward.” In an email to The Register, Schaumann said that individually reviewing vulnerabilities for patching was already difficult enough before things rose to this level, and that automation may be the only option - but it's not a great one. "Automated, regular, and frequent updates that pull in all changes within a given time window of tolerance seem to me the only reasonable approach, but that is very difficult for many large organizations," Schaumann explained. Those orgs often rely on lengthy QA processes, slow and staged development cycles, and may even have contractual requirements for long-term support that make an automated approach an impossible one. The nixCraft team speculated on social media that AI bug reports are a likely reason for all those kernel CVEs, which wouldn’t be without precedent - Linus Torvalds himself said in May that the Linux kernel security mailing list had become “almost entirely unmanageable” due to AI-assisted bug hunting. Nonetheless, Torvalds has described AI as a useful tool for Linux development while still noting it can be a drag for maintainers, both from a workload standpoint and the fact "it keeps finding embarrassing bugs." On that note, it's worth understanding what a Linux kernel CVE actually means - many of the vulnerabilities included in the Sunday-to-Monday batch are small in scope, but they're vulnerabilities nonetheless. As senior Linux maintainer Greg Kroah-Hartman noted in a February blog post, the Linux kernel CVE team follows the CVE Program's definition of a vulnerability: a weakness in a product that can negatively affect a system's confidentiality, integrity, or availability. “At the level that the Linux kernel runs, almost any type of bug that can affect a running system can be classified as a vulnerability,” Kroah-Hartman noted. The kernel team looks at every bugfix that is added to stable kernel releases, he added, and if it fixes an issue that meets that CVE criteria, a CVE is assigned. AI-assisted bug hunting has increased the volume of reports reaching Linux kernel maintainers. We reached out to the Linux kernel team, but didn’t hear back. Kroah-Hartman did tell The Register earlier this year that AI bug reports had become worthwhile in recent months, and he predicted they're likely to keep adding to his workload. Unfortunately for Linux sysadmins, the position in which they find themselves in this current mess isn’t one that’s readily solved. CVEs might be a messy way to track and prioritize security updates, especially when hundreds of them are published over a short period, but without something better, it falls to IT and security teams to determine which vulnerabilities affect their systems and which kernel updates they need to deploy. Hope you’ve got the coffee machine filled up: The onslaught is unlikely to ease if other recent patch cycles are any indication. ®

Aktualizace KB5101684 vyšla pro Windows 11 24H2/25H2 v kanále Release Preview. • Vyhledávání si lépe poradí s překlepy a neúplnými názvy aplikací. • Průzkumník se učí používat jednotky MB a GB.

Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identities. Acronis explains how identity controls, governance, and least-privilege access help reduce AI-enabled ransomware risk while supporting secure AI adoption. [...]

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Po pěti letech vývoje vyšla česká počítačová hra Scarlet Deer Inn (ProtonDB). Scarlet Deer Inn je vyšívaná temná středověká pohádka. Zatímco život ve zdánlivě obyčejné vesnici se točí kolem běžných povinností a sousedských drbů, v podzemí se skrývají zlověstná tajemství.

Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed to help organizations prioritize vulnerabilities affecting infrastructure, firmware, networking, and edge devices. [...]

Researchers could use lab-grown sperm to develop infertility treatments or, more controversially, make babies.

Scientists just transformed a living mouse’s kidney into an incubator for developing human sperm made from blood cells.

It sounds like sci-fi Mad Libs. But a team at the University of Pennsylvania, led by Kotaro Sasaki, pulled it off. For up to nine months, a tiny pouch of human cells nestled beneath a mouse’s kidney gradually developed into immature sperm. The study is the latest in a decade-long quest to grow sperm in the lab.

If successful, lab-grown sperm could open a new window into the earliest stages of sperm development, a process that’s notoriously difficult to study because it begins before birth. The research could also shed light on male infertility—which, in many cases, has no clear cause—and inspire treatments.

More controversially, lab-grown sperm could one day be used to make babies, offering hope to people struggling to conceive and same-sex couples who want to have children genetically related to both parents. That goal is still far off. Though gene activity was similar to their natural counterparts, none of the lab-grown cells were able to develop into functional sperm.

Those results starkly contrast similar attempts in mice. Researchers have already produced functional sperm and egg cells from rodent skin cells, and in two pioneering cases, used them to create healthy pups with two dads. But translating this capability to humans has been difficult, largely because reproductive development differs tons between species.

Still, the new system can help scientists probe the earliest stages of human sperm development. And because any future clinical applications would first need extensive testing in non-human primates, the team also generated immature sperm cells from monkeys, whose reproductive biology more closely mirrors our own.

Recapitulating sperm development in the lab has uses beyond fertility treatment too, such as testing whether drugs interfere with reproduction. The platform “establishes a robust framework for modeling primate germ cell [reproductive cell] development,” the team wrote.

Winning Recipe

For decades, scientist have been able to rewind adult cells into induced pluripotent stem cells (iPSCs). These cells can go on to  become nearly any other cell type. But steering them to become sperm has proven far trickier, largely because human sperm takes years to fully develop.

The journey begins before birth. Early stem cells give rise to spermatogonia, the founder cells that replenish sperm throughout life. These cells are largely dormant until puberty, when some begin meiosis, a special type of cell division that halves their chromosomes. That way, when sperm meets egg, the embryo gains a full genetic set.

But the cells don’t live in a vacuum. Proteins and other molecules instruct immature sperm when to grow, divide, or pause. Physical forces, such as the winding architecture of the testes and the flow of fluid, also play a role. Recreating this intricate environment in a dish has been one of the biggest challenges to the study of sperm development and our ability to grow them in the lab.

Roughly a decade ago, Sasaki and colleagues found a way to transform human iPSCs into early stem cells that could eventually give rise to sperm and egg. On paper, their gene expression profile closely matched that of natural counterparts. But in practice, the cells couldn’t mature further without the right environmental cues.

In an usual workaround, the team next mixed the immature cells with supportive, non-reproductive cells isolated from mice testes. While it was an usual environment, the mice cells provided nutrients and molecular signaling that nudged development forward.

Called xrTestis, the mixture spontaneously organized into tube-like structures resembling those inside testes. “Overall, our culture method accurately recapitulates in vivo human male GC [germ cell] development and allows us to understand the genetic pathways governing this process,” they wrote at the time.

Yet none of the immature sperm advanced beyond developmental stages normally seen in fetuses. And the miniature structure collapsed after 80 days, likely because it lacked a blood supply.

Unexpected Host

To prolong the mixture’s viability and push sperm development further, the team transplanted it into the kidneys of immunodeficient mice.

The graft organized itself into the hallmark tubular structures found in testes within a month and remained stable for at least half a year. The mice showed no signs of discomfort or immune rejection.

Six months later, some human cells developed into spermatogonia—the self-renewing stem cells that eventually generate sperm. Along the way, they underwent a major event: an epigenetic reset. During this process, chemical tags on DNA that influence whether genes are turned on or off are almost completely wiped clean. If that reset is incomplete, it could compromise any sperm eventually used for reproduction.

Here, the team found a “dramatic” genome-wide epigenetic reset. The cells’ gene activity mirrored their natural counterparts. Even though the graft survived for at least nine months, however, none of the cells were able to develop into mature sperm.

This is likely due to the environment. Human and mice testes don’t share the exact same signaling molecules or respond the same way to hormones and other developmental cues. Replacing the mouse support cells with human versions could help the spermatogonia develop further.

The Ultimate Test

The team also tested the technique in monkeys, with results similar to those found in human cells. “While our human iPSC system provided valuable insight into male gametogenesis [the formation of reproductive cells], future studies of fertility competency must be carried out in non-human primates,” they wrote.

Although the cells also halted at the immature stage, the results are still valuable. Previous studies have shown monkey spermatogonia can generate mature sperm after transplantation into recipient testes, opening the door to eventually testing if lab-grown cells can sire healthy offspring.

That idea is precisely what makes some bioethicists uneasy.

Mass-producing sperm and eggs in the lab could generate far more embryos for selection, making it easier for prospective parents to choose desirable traits such as eye color or height. Pairing the technology with gene editing makes “designer babies” less hypothetical. And if skin scrapings or a single hair can be turned into reproductive cells, someone could theoretically create sperm or eggs from another person without consent.

These scenarios are purely speculation, but regulators are already preparing for that future. In 2025, the United Kingdom’s Human Fertilization and Embryology Authority urged the government to explicitly tackle lab-grown reproductive cells in legislation. The International Society for Stem Cell Research has similarly called for careful oversight and public engagement before clinical use. Most countries, however, are only beginning to grapple with how these technologies should be dealt with.

Meanwhile, companies are pressing forward. Paterna Biosciences in Utah recently announced they had produced functional sperm from immature sperm collected during testicular biopsies. According to the company, early embryos created with the lab-grown sperm seemed comparable to those produced through standard in vitro fertilization (IVF). And California startup Conception recently reported generating early human egg cells from iPSCs. Neither company has released results in a preprint or journal article, making the claims hard to evaluate.

Like germline gene editing, conversations weighing the pros and cons of lab-grown reproductive cells will help decide not only what’s possible, but also what should be permitted. For now, the team stresses that their work is only a research tool—not a fertility treatment—and clinical use is a long way off.

The post Scientists Inch Closer to Creating Human Sperm in the Lab appeared first on SingularityHub.

Saúdská Arábie staví v Rijádu gigantický mrakodrap ve tvaru kostky • Obří budova Mukaab nabídne moderní hotely i unikátní holografické systémy • Celý ambiciózní projekt měl být podle plánů dokončen do roku 2030

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication. [...]

EXCLUSIVE A Windows information-stealer targeting more than 300 applications comes equipped with a novel surveillance tool: an AI profiler that ranks infected victims so crooks know who to target first. Varonis Threat Labs spotted the new stealer and remote access trojan (RAT), called Dolphin X, for sale on a cybercrime forum, and shared their research exclusively with The Register. The ad for the malware claims it can target upwards of 300 applications and has the ability to bypass browser passwords and steal enterprise credentials, cryptocurrency wallets, .env files, SSH keys, cloud tokens, and DevOps secrets. Dolphin X also promises users a super-sneaky surveillance feature called the AI Profiler. It scores infected users by app usage, browsing history, and installed software, and sends the cybercriminals a daily summary that ranks victims’ based on the likely payoff from an attack. “There's two things that stand out,” Daniel Kelley, a senior threat researcher with Varonis, told The Register. “The first thing is the AI profiler. That's something I've never seen before. And then it’s also the breadth of applications that it steals - and it’s not even just applications. It’s everything, you name it: it will steal files, or credentials, cryptocurrencies. It’s probably one of the biggest stealers I’ve ever seen, and covers the biggest attack surface.” A malware vendor using the alias “Kontraktnik” posted Dolphin X for sale, promising: “You can use it as a stealer, as an HVNC [Hidden Virtual Network Computing], as a DDoS botnet, as a loader.” The crimeware currently only runs under Windows, but “we are working on Debian,” Kontraktnik claimed, adding that the malware also only supports English and Russian. Kelley suspects the developer is Russian-speaking, and told us that the stealer includes an option not to infect any users in the Commonwealth of Independent States (CIS) countries, a common choice among Russian-based ransomware and cybercrime gangs. Kelley and his team obtained and analyzed the malware builder, operator panel and its network traffic, but didn't examine a malware sample. Varonis therefore can’t guarantee that all of the developer’s claims are true. However, “when we looked at the builder, it had everything to suggest the features were legitimate,” he said. “We couldn’t test out the malware itself, but I would say it probably lives up to most of its expectations.” Feedback left on the forum where the malware is sold supports that analysis. As of Tuesday, the sales thread has passed 3,000 views, we’re told, with Kontraktnik closing at least two confirmed deals. Both of these included positive feedback from the buyers. Three-tier subscription model Beyond the 300 + apps it targets, Dolphin X's operator panel lists 329 features across 10 categories. Buyers can subscribe to one of three tiers, each unlocking new features, or buy a lifetime subscription. The minimalist suscription costs about $80 per month, which buys rewriting and altering capabilities across Windows Portable Executable (PE) timestamp, Rich headers, and section padding, along with capabilities allowing the malware to exploit the brittle YARA rules to bypass detection and hash-based blocklists. The middle tier advertises shuffling the import table, which would change the binary's import hash between builds. The top level sub (about $230 per month) claims to rewrite the code’s control flow, substitute instructions, and re-encrypt embedded strings with a new random key each time, thus making stable byte sequences harder to identify. Lifetime subscription cost about $1,140 for basic access, $2,280 for mid-tier malware, or $3,420 for perpetual pro-level Pwnage. “It really lowers the barrier to entry,” Kelley said, adding that in the not-so-distant past, cybercriminals needed a certain level of technical expertise to develop and use different types of malware. “Now it's set up in a way where it's almost like SaaS. Anyone can purchase it. Anyone can take it out of the package and use it.” All of this suggests two takeaways for defenders, according to the security sleuths. First, keep long-lived credentials off disk if possible. “Infostealers are designed to grab everything in one pass, so anything stored locally should be treated as potentially exposed,” the report warns. Second: focus threat detection on behavior - not file signatures - because this and other malwares include capabilities to bypass signature-based detection. “For example, explorer.exe running under a non-default desktop is a strong indicator of an HVNC session, regardless of how the malware binary is packed or what hash it uses,” the authors wrote. Varonis’ threat hunters previously uncovered other AI-powered malware, including an all-in-one phishing kit called Bluekit, and an email attack tool called SpamGPT. “It’s a huge trend,” Kelley said. “Cybercriminals are finding a lot of unique ways to integrate AI, and then they're using it to make their lives a lot easier, which is problematic.” ®

Google představil modely Gemini 3.6 Flash, 3.5 Flash-Lite a 3.5 Flash Cyber. • Neohromí vás inteligencí, ale rychlostí a nižšími náklady. • První dva modely si můžete hned zkusit v aplikaci Gemini nebo skrze API.

A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's "get_log_file" endpoint ("/api/w/{workspace}/jobs_u/get_log_file/{filename}"). "The filename parameter is concatenated into

A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's "get_log_file" endpoint ("/api/w/{workspace}/jobs_u/get_log_file/{filename}"). "The filename parameter is concatenated into Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need, employees the tools they want, and CISOs the strategic influence they have earned. According to McKinsey's State of AI report, 76 percent of employees now use AI in some capacity at work, up from 55