Agregátor RSS

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why blocking malicious domains is no longer a useful defense. Read

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why blocking malicious domains is no longer a useful defense. Read [email protected]

Welcome back to PWNED, the column where we look at all the ways your security can become self-owned. Today’s scary story involves government contractors who just had to make their lives easier at the expense of locking down sensitive information. Have a story about someone leaving a gaping hole in their network? Share it with us at [email protected]. Anonymity is available upon request. Our tale of bureaucratic hell comes courtesy of security researcher Joe Brinkley, who previously worked for a government contractor as an information system security officer responsible for firewall rule changes, plus network intrusion detection and prevention. To improve the contractor's ability to deploy program changes, some of the org's developers wanted to change the firewall rules so it would be easier to move data from a low-security datacenter where they tested new code to the classified datacenter that housed the production server and data. They wanted to be able to VPN into a low-security commercial datacenter, where other non-governmental tenants, such as Microsoft and Oracle, had servers accessible through the same VPN connection. The datacenter itself provided the VPN, not the government. Back then, in the early 2010s, developers would use a provisioning server to help deploy code from dev to production. But there was always a hard firewall between the classified datacenter and the non-classified datacenter. The developers wanted this provisioning server to be able to access all of the production servers that sat in the classified datacenter so they could more easily push the code around. When the developers suggested they make this change for ease of deploying code, Brinkley told the Change Review Board that it was a very bad idea. “It creates a very glaring issue that we are going from a low-level secured datacenter all the way up to a high-level, top secret secured datacenter for production, and you guys are opening up a firewall rule that would allow anybody from that low level datacenter to have access into, at a minimum, into the high level datacenter,” Brinkley said. However, during a week when Brinkley was on vacation, the developers who wanted this firewall change talked directly to the Change Acceptance Board and got the rule changed. When he got back, Brinkley got a member of his company and a government representative to sit down for a demonstration. Tethering his laptop to his cell phone, he logged into the dev server over the VPN — then turned the box on and off. Then he showed how, with the very same VPN connection, he could get into the prod server and control it. This was a server that had 50 million records about immigration: who was coming to the country, who those people stayed with, and so on. According to Brinkley, thousands of people had access to the commercial datacenter’s VPN, but only dozens were supposed to have access to the classified government datacenter. The change potentially made the production servers reachable from a network accessible to thousands of VPN users. Yes, the servers still required a username and password for access, but an enterprising hacker could have tried guessing the correct combos or attempting a brute-force attack. There was no multi-factor authentication and password standards were low at the time. After Brinkley showed supervisors what was going on, they immediately changed the rule back to the way it was before. What we can take away from this lesson is that, even when you have security measures like a VPN and password protection, sensitive data requires additional safeguards. It’s not enough to do the minimum. ®

Herní klávesnice od Alzy zlevnila na historicky nejnižších 650 Kč. • Rapture Kilo V2 Wireless používá kvalitní spínače, RGB a ani není příliš hlučná. • V akci jsou i další modely této značky.

Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. [...]

Standardní 2GB GDDR7 již Micron nenabízí, na oficiálních webových stránkách oznámil ukončení výroby (EOL). Důvody tohoto kroku nezveřejnil, zůstávají nejasné, neboť tyto čipy využívá GeForce RTX 5000…

Romantické snímky patří k nejvyhledávanějším titulům; a to nejen ženským publikem. Připravili jsme přehled ikonických klasik tohoto žánru i filmů, jež mají náběh se jimi stát.

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and personal records. The agent reached files on it that were not public, but no personal

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and personal records. The agent reached files on it that were not public, but no personal Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Naskládat počítačové komponenty do košíku umí mnoho lidí, ale vybrat vhodně se doplňující, cenově vyvážené a smysluplné komponenty už tak jednoduché není. Poradíme, jak na to, a vypíchneme nejčastější chytáky.

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It originated from 1,487 unique AWS EC2 source IP addresses. "The campaign compromised 7 accounts –

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It originated from 1,487 unique AWS EC2 source IP addresses. "The campaign compromised 7 accounts – Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

AstroForge chce těžit rudy na asteroidech • V roce 2027 hodlá do vesmíru vyslat sondu Autonomy-1, kterou bude ovládat AI • Cíl je jasný: Úspora nákladů

Aby těch překvapení nebylo málo, přichází další pozitivní zpráva o přípravách 1,4nm (A14) procesu TSMC. Zkušební výroba, která měla být urychlena na duben 2027, ve skutečnosti začne ještě o kvartál dříve…

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Společnost Meta na dvoudenní konferenci Meta Connect 2026 představuje své novinky. Vypíchnout lze lehké brýle s funkci VR Meta VR Glasses. Do prodeje půjdou na jaře 2027 za cenu 1299,99 dolarů.

Worldwide AI spending will increase 49.5% in 2026, to $2.7 trillion, and grow another 36.2% in 2027 as AI usage continues to expand, Gartner predicts in the latest quarterly update to its IT spending forecast.

But there’s been no diversion of money from other areas of IT to feed AI, said Gartner Distinguished VP Analyst John-David Lovelock. CIOs got some net new money for AI back in 2024, and a little in 2025, he said, “so there wasn’t a diversion, and now more of their spending is about rebranding than diversion.”

By 2030, “every dollar is going to be an AI dollar in one way or another,” he said.

Instead of buying just a laptop, companies now buy a laptop with AI chips in it, while enterprise software now has AI embedded in it. And instead of doing a project about business strategy, they now do a project about how AI might change business strategy.

“In one way, it’s kind of rebranding,” he said. “Net new spending is going more towards AI, and existing spending is being transformed towards AI.”

It’s similar with hyperscalers: “The hyperscalers haven’t diverted one dime away from their cloud. So AWS, Google, Microsoft, Meta are all continuing to build out their cloud infrastructure at the same rate they were in 2022.”

The AI buildout “is the largest infrastructure project humanity has ever undertaken,” he observed.

Gartner updates its spending forecasts quarterly. In its latest report, it predicted AI infrastructure spend will grow 51.2% this year, and AI software 60.2%. Spend on AI agents and assistants, which it breaks out separately from other software, is forecast to increase by 77.3%, and AI security spend to almost double.

As AI development platforms prove themselves, Gartner sees spending on them accelerating: It has increased its 2026 growth forecast for them from 28% in its May report to 39%, attributing the change to the development of custom AI applications by enterprises and software and service providers.

AI model providers are seeing a “small but growing opportunity” for domain-specific language models aligned with enterprise use cases, upping the 2026 growth rate for generative AI models to 117%.

Semiconductor surprise

But what surprised Lovelock was the semiconductor spend.

“Semiconductors for the last 30 years has been a nice, easy market to work through,” he said. “Total spending has been very incremental. It’s followed a nice long-term evolutionary curve. Back in 2015, we said it would be about a trillion dollars by 2030, and we got real pushback on that back then, saying we didn’t understand Moore’s law and fabrication and all the rest of it. Well, turns out both myself and the people giving the criticism were wrong, because with AI, chips are now going to push $2 trillion by 2030.”

The culprit is memory.

“We were ready for the run-up in the chips that went into the heart and soul of the servers. However, as the AI servers got more functional, they required more memory and, of course, more storage, which is also memory,” he said.

People often mistake the reason for the substantial rise in memory prices, he said: “It’s very often written that there is a memory shortage, which is not putting the blame or the explanation in the right place. There is a massive over-demand towards memory, and that’s pushed these chip prices incredibly high, and that has spiked that semiconductor spend, now doubling 2030 spend from what we thought it was before AI.”

His message to CIOs is straightforward: “The next two years, next three years, have at least three major transitions in them,” he said. “If you think you know what will happen with AI based on what is happening with AI, you’re wrong. The technology is changing too quickly for anybody to have assurances or certainty on what can be done and at what price point. This is going to be continually on your plate, and your balance between risk and reward has got to be your number one priority.”

This article originally appeared on CIO.com.