Agregátor RSS

French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. [...]

Micron považuje paměťové buňky 4F² za slepou uličku, Samsung se k nim chce propracovat v roce 2028, ale v Číně má začít jejich sériová výroba již letos - na trh se dostanou v podobě serverových DDR5…

Běžný uživatel si od roku 2027 vymění akumulátor v mobilu sám doma • Odolné mobily s trvanlivou baterií však mohou zůstat zalepené • Výrobci musí dodávat náhradní součástky nejméně sedm let

OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encrypted item the user cannot read. The method got past

OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encrypted item the user cannot read. The method got past Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]

Polský Proud jako nejlepší seriál, Kamarád jako první vítěz nové české soutěže a desítky dalších titulů z celé Evropy. Devátý ročník festivalu Serial Killer znovu ukázal, že Brno má na seriálové mapě své pevné místo. Computer byl u toho a vybírá to nejzajímavější.

Summary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more vulnerabilities than Fuzzilli (45 versus 37) with a 25% overlap in the specific bugs reported. Since this comparison methodology has a tendency to underestimate overlap, we also performed dedicated experiments to test theoretical overlap in vulnerabilities reported since 2023. These experiments estimated overlap at roughly 60%. Regardless of which value is accurate, a substantial portion of vulnerabilities were discoverable by only LLMs or only fuzzing. While it is extremely promising that LLMs have become able to find so many vulnerabilities so quickly, fuzzing and LLMs are still complementary approaches. We recommend vendors perform both fuzzing and agentic analysis of their code to maximize the number of vulnerabilities that get reported before they impact users.

Model GPT-6 Astra rozluštil po dvou stoletích tajný vojenský dopis • Depeše líčí pozice armád před zahájením rakouského útoku do Bavorska • Úspěšné řešení historické šifry potvrdil provozovatel webu Cryptiana

FSR 4.1.2 přineslo čtyři režimy upscalingu. Jeden z nich - zvaný Lite - určený a optimalizovaný pro APU, se ukázal být velmi efektivním a zajímavým řešením, které je vhodné nejen pro integrovaná GPU…

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have been recorded," the State Special Communications Service of Ukraine (SSSCIP)

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have been recorded," the State Special Communications Service of Ukraine (SSSCIP) Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments - CVE-2026-109618 - An out-of-memory

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments - CVE-2026-109618 - An out-of-memory Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Japanese ISP GMO Internet has warned customers the cloudy desktop service it offers as an ideal foreign exchange trading environment was compromised by an attacker, and that it had been slow to improve the service's security. GMO runs a service called Onamae.com Desktop Cloud and last week admitted “a third party had installed malicious programs in the server environments of some customers.” That’s never welcome news but is an especially poor outcome because the servers host cloudy Windows desktops that GMO recommends customers use to host foreign exchange trading applications. In later updates the company revealed that some customers reported “unauthorized operations were performed on their trading accounts” and advised that third parties had probably seen users’ passwords for trading services. The next day, the company advised users to immediately change passwords for their trading accounts, and to do so using a device that they don’t use for trading. The company has since admitted that its Onamae.com Desktop Cloud service’s “systems had security vulnerabilities, that its environment was accessed without authorization, and that customer information was taken outside the Company.” “Some customers have also reported transactions in their trading accounts that they do not recognize.” Those transactions have GMO sufficiently worried that it contacted major trading services, asked them to forcibly terminate all active sessions, monitor for unauthorized transactions, and to block trade requests coming from the Onamae.com Desktop Cloud. Not paying, or complaining GMO said it has “received a demand for money from a person believed to be the attacker. We have also been told that, if we refuse, the attacker will take actions such as publishing information about the Company and our customers.” The attacker wants $50 million. The company won’t pay because it feels “complying would not guarantee that the obtained information is deleted or that its misuse is prevented.” Investigations into the incident continue, with GMO warning that 26,739 VDI servers may have been hit by the attack, and that users’ personal devices may be at risk. The company is offering all users a ¥5,000 ($32) condolence payment and promised to make good on any trading losses caused by the attack. This incident may have quite a blast radius, as GMO has warned that some trading apps may keep sessions alive even after passwords change. “Check your securities or FX company's guidance or your account page, and either disconnect all active sessions or ask the company's support desk to disconnect them,” GMO advised. That ¥5,000 isn’t going to get anywhere near paying for the work customers will do to sort this out. GMO CEO Masatoshi Kumagai acknowledged that in a blog post in which he described the payment as “a token of our initial sincerity towards our customers who have experienced inconvenience and worry.” “We will dedicate the full resources of our group to providing a free alternative environment for six months, fundamentally overhauling our system infrastructure, and conducting a thorough investigation into the cause and preventing recurrence with the help of external experts,” he added. But he also admitted that GMO knew the service’s security could be improved. “Our in-house white-hat hackers had previously pointed out areas for improvement to the team,” he wrote. “The team took these points to heart and was working on countermeasures.” “However, while we proceeded cautiously, considering the impact on service availability and prioritizing other issues, our response lacked sufficient depth and speed, allowing the attackers to exploit the vulnerability. I deeply regret that, despite having professionals on staff, we failed to fully translate their expertise into effective defenses as an organization.” The CEO also said GMO can’t secure itself without government help. “I've been involved in this world for 31 years, since the dawn of the internet industry,” he wrote. “The cyberspace that I built with my colleagues, believing it would bring smiles to people's faces, is now on the verge of being completely destroyed by malicious actors.” “The ease with which open weight AI models can be combined and spread into countless attack tools has transformed cyberattacks, which once required advanced skills, into an era where anyone can easily carry them out,” he added, before claiming that GMO Group’s cybersecurity operation “has confirmed that the source of an unauthorized access attack targeting approximately 20 Japanese companies was the misuse of ‘ARTEX,’ an autonomous AI penetration testing tool originally intended for defense.” Kumagai thinks public/private partnerships are needed to improve infosec across Japan. “Yesterday, we submitted a proposal to the government to ‘apply proactive cyber defense,’” he wrote. “We are by no means trying to shift the blame for our company's actions onto the government and beg for a bailout,” he wrote, but argued that unless Japan implements national-level defenses, more such incidents are unavoidable. ®

Výrobce vám bude muset nově zajistit opravu vybraných spotřebičů či elektroniky i v době, kdy už za vadu neodpovídá prodejce. Za opravu si ale může nechat zaplatit. Pokud si naopak zvolíte opravu při reklamaci u prodejce, má se jeho odpovědnost za vady prodloužit o rok. Obě změny schválila Sněmovna.

Souborový systém ZFS nám dává mnoho množností, jak pracovat s daty na různých zařízeních a discích. Zkusíme si přenést vyladěnou instalaci systému do jiného stroje, abychom s ním mohli dále pracovat.

Na několika příkladech si ukážeme, jakým způsobem je možné na stěnu těles ve 3D scéně nanést textury. Popíšeme si jak nanesení procedurálních textur, tak i textur načítaných z externích souborů (fotografie atd.).

GeForce RTX 2000, RTX 3000 a RTX 4000 sice obsahuje tzv. Tensor Units používané k akceleraci AI výpočtů. Jejich potenciál je však v PC segmentu uměle omezen, snížen na polovinu. Což lze však řešit…

Psychedelický tryptamin z jedu ropuchy coloradské mebufotenin čili 5-MeO-DMT by mohl pomoci lidem s depresí, kteří nereagují na běžnou léčbu. Nedávná klinická studie ukázala, že jediná dávka nosního spreje s mebufoteninem může přinést rychlé zlepšení, které přetrvává nejméně osm týdnů. Výzkum ale ještě zdaleka nekončí.