Agregátor RSS

Plymouth council exposes hundreds in latest local government email gaffe

The Register - Anti-Virus - 12 Červen, 2026 - 12:32
Plymouth City Council has joined the growing ranks of public bodies defeated by the humble BCC field after exposing the email addresses of around 500 home-schooling families in a mass-mailing mishap. The blunder comes barely a week after City of York Council disclosed a similar mistake that exposed the email addresses of hundreds of disabled residents, suggesting that some public sector workers remain engaged in an ongoing battle with one of email's oldest features. The message, sent by Plymouth's Elective Home Education team, was meant to share information about upcoming legislative changes, but it also shared the email addresses of hundreds of home-schooling families with one another. A Register reader who contacted us about the incident described the aftermath as "a bit of a mess," claiming follow-up communications caused further confusion among recipients. Plymouth City Council did not respond to The Register's questions, but in a statement provided to local media, it admitted the incident was caused by human error and affected approximately 500 families. "Unfortunately, due to human error, a recent email was sent to approximately 500 families without using the BCC function, meaning recipient email addresses were visible," the council said. The authority said it contacted recipients as soon as it became aware of the problem, apologized, and asked families to delete the email and refrain from using any details they had received. It stressed that the message included no information relating to children and consisted solely of a general update. The council said the email mishap was investigated internally and that affected families were contacted again once officials had pieced together what went wrong. It also promised extra checks designed to keep future mailing lists out of public view. The council also reported the matter to the Information Commissioner's Office (ICO). An ICO spokesperson told The Register: "We can confirm that we received a report from Plymouth City Council regarding this incident. After carefully assessing the information in the report, we provided data protection advice and closed the case with no further action." While the exposure appears limited to email addresses rather than more sensitive personal information, the incident serves as another reminder that some of the most common data breaches do not involve sophisticated cybercriminals or ransomware gangs. Sometimes all it takes is sending an email to a few hundred people and clicking the wrong box. ®
Kategorie: Viry a Červi

UK digital ID gets brain trust to 'challenge' ministers on policy

The Register - Anti-Virus - 12 Červen, 2026 - 12:13
The UK government has set up an advisory board for its digital ID project, intended "to challenge the government on emerging ideas or policy decisions to ensure the system works for everyone," says the Cabinet Office. The board includes David Rogers, an Internet of Things security expert and CEO of security consultancy Copper Horse. He is no stranger to government advisory panels, having previously sat on a group formed in 2020 to consider telecoms diversification. A year later, as chairman of the GSMA's fraud and security group, he backed the then-Conservative government's Product Security and Telecommunications Infrastructure Act 2022. Rogers has provided El Reg with comments over the years, and in 2014 discussed iPhone 6 biometric security, arguing that better usability would cut data loss overall because most people found PIN locks too cumbersome. Justine Roberts, founder and chief executive of UK parenting forum Mumsnet, is also on the board. The site experienced a data breach in 2019 due to a cloud migration affecting 46 user accounts, leading Roberts to apologize. More recently, some Mumsnet posters have been unimpressed by the government's digital ID plans, with one responding to the prime minister's October 2025 announcement with "Honestly, who is he kidding?" and "Desperate stuff to justify this authoritative bs." During the public consultation, some posters promoted the Sex Matters campaign to let Brits include their sex in their digital IDs. Another board member, Victor Dominello, has relevant experience as the minister who launched New South Wales' digital driver's license in 2019, saying it was more secure than the physical equivalent. In 2022, a researcher at security company Dvuln found numerous security flaws in the Service NSW app that hosts the license and other government services, although the state government said these did not pose a risk to customer information. Other members include John Fallon, former chief executive of Pearson and the lead non-executive board member of the Cabinet Office; Anne-Marie Imafidon, who runs social enterprise Stemettes, which encourages people to consider jobs in tech and science; and digital regulation lawyer Emma Wright. The board will meet quarterly for as long as the digital ID program lasts. The government is also setting up engagement exercises with the digital verification and financial services sectors. It is currently running a People's Panel with around 100 to 120 participants meeting in Birmingham and on Zoom to hear from experts and ministers before producing recommendations, in return for £550 in cash or vouchers. ®
Kategorie: Viry a Červi

Pharma giant Novo Nordisk discloses breach of clinical trials data

Bleeping Computer - 12 Červen, 2026 - 12:13
Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, disclosed a data breach affecting patient information from some clinical trials. [...]
Kategorie: Hacking & Security

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

The Hacker News - 12 Červen, 2026 - 11:50
Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a critical vulnerability chain that could result in remote code execution. LangGraph is an open-source framework created by LangChain to build complex, stateful, and multi-agent artificial intelligence (AI) agentic applications. "An SQL injection in LangGraph's function could Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Elon Musk bude první dolarový bilionář. Stane se to dnes na burze, kam vstupuje jeho SpaceX

Živě.cz - 12 Červen, 2026 - 11:45
Elon Musk je už dlouho nejbohatším člověkem světa. Dnes, v pátek 12. června 2026 ale zřejmě překročí další metu. Jeho SpaceX vstupuje na americkou burzu Nasdaq pod tickerem SPCX a hned to bude rekord. Úpisová cena 135 dolarů za akcii a objem kolem 75 miliard dolarů dělají z premiéry největší IPO v ...
Kategorie: IT News

Homebrew 6.0.0

AbcLinuxu [zprávičky] - 12 Červen, 2026 - 11:34
Homebrew, správce balíčků nejen pro macOS, byl vydán ve verzi 6.0.0 (seznam změn). Hlavními novinkami jsou bezpečnostní mechanismus tap trust kvůli důvěryhodnosti závislostí, vylepšení sandboxingu na Linuxu, interní JSON API nebo zlepšení výkonu.
Kategorie: GNU/Linux & BSD

BOFH: For one ambitious security type, chaos is a ladder

The Register - Anti-Virus - 12 Červen, 2026 - 11:17
EPISODE 11 "And uh... what are you doing?" the Head of Security asks, entering the Security office as I'm making my way to the exit – with a PC under my arm. "Just taking this back to the office to archive the contents and then reset it to factory defaults," I say. "Company policy when someone has been... let go." There have been a number of changes at Security – the same number of changes as there used to be members of Security staff. Apparently, eating endless pastries and watching pirated movies isn't an industry-standard procedure for security professionals. Furthermore, the spate of alcohol thefts from the boardroom liquor cabinet seems to have ended after HR discovered several empty bottles in Security's overflowing recycling bin... HR acted swiftly (for a change) and a whole new security team was employed, headed by a keen new broom – who's currently blocking the doorway... To say that he's enthusiastic in his role would be an understatement. His first move was to isolate Security onto a completely separate internet feed, firewalled off from the rest of the Company. Move two was to implement a plan of recording the equipment people leave the building with – something that's proving rather unpopular with laptop users. "Oh, I don't think we'll need it to be erased," he says, holding out his hands to retrieve the machine from my grasp. "Really, there's no telling what's on this machine," I say. "Malware, copyright movies, porn even. We don't know. It's safer – for the Company – if we just start from a clean machine. We might even just dump it to be on the safe side." "Sure," the Head of Security says. "Though that machine looks like it's almost brand new. It's still got stickers on it! And it looks fairly... high end. I think we can take the risk. I'm pretty up-to-date with IT security and the like – so maybe you should let me worry about..." "I think this should probably be HR's call," I respond. "They may want to be sure the Company isn't exposed to any risk that the machine might present." "I can call HR if you like," the Chief Pie-eater suggests, calling my bluff and reaching for his phone. "But I doubt they'd be too concerned." "They should be. If there's malware installed on the recovery partition, you'll reinfect the machine when you restore it to factory defaults." "Thanks for your concern," he says, wresting the machine from my grasp and stepping out of the doorway. ... So that's how it's going to be. Obviously, we knew there was going to be trouble. We prepared ourselves for it. The new Security team has an enthusiasm for the job that was completely absent from the former crew, mainly because they're jockeying for the position of 2IC. The Boss is waiting for me when I get back to Mission Control. "Just had a call from Security. Apparently, you were trying to... remove... one of their machines?" "Yeah. I was going to erase it and restore it to factory settings." "Couldn't you just do that there?" "We prefer to do a reinstall on the DMZ segment – just in case there's any malware on the machine after we restore it." "Right. Well, I talked to the guy, and it certainly sounded like he had everything under control," the Boss assures me. And so there you go. The Boss can determine someone's technical competence from a two-minute phone call. It must be one of his superpowers, along with the toxic body odor and the ability to sniff out a kebab stand in a farmers' market. Two minutes later, in Mission Control… "Right," I say, entering Mission Control. "Everyone ready?" The PFY nods. The lead candidate for 2IC of Security nods. "One of the pitfalls with security types is that they often shave with Occam's razor," I say. "When seeing someone leaving the office with a PC under their arm, they immediately think 'office theft,' rather than thinking 'did this person bring the aforementioned machine into the office in the first place, wait until they heard someone approaching, then make to exit the office?'" The 2IC candidate contemplates this silently. "Another problem with security types is how to celebrate a victory. In this situation, a wise person would not simply 'upgrade' their desktop machine with this newer and shinier item – because it might have an infected operating system – AND infected recovery partition. No, a wise person would first sca-" "Ooh, we're in business!" the PFY interrupts, as his machine receives a ping. "Right," I say to Security 2IC, "I'd give it maybe half an hour – to really trash your network – before I head downstairs. Then maybe I'd ask why all the machines in your office appear to be going crazy." "And you think that would be enough to get him fired, do you?" he asks. "It will be when you discover the stash of Company laptops in the boot of his car as he leaves the parking basement," the PFY says. "And make sure you have the Head of HR with you." "Why's that?" the soon-to-be Head of Security asks. "Because one of the laptops is his..." BOFH: Previous episodes on The Register The Compleat BOFH Archives 95-99
Kategorie: Viry a Červi

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

The Hacker News - 12 Červen, 2026 - 10:52
An INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, Group-IB said Thursday. The effort, codenamed Operation Ramz, took place between October 2025 and February 2026, and saw authorities from 13 countries in the Middle East and North Africa (MENA) region making 201 arrests. Included among them was Guedz, the primary Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Albert zavádí AI do samoobslužných pokladen. Rozpozná ovoce, zeleninu a pečivo

Živě.cz - 12 Červen, 2026 - 10:45
Řetězec Albert od loňska integruje kamery s umělou inteligencí do klasických pokladen, aby prodavačům pomohly s identifikací zboží, které na sobě nemá štítek. Teď ale firma jako první u nás vybaví pomocí AI také samoobslužné pokladny. „Rozšiřování umělé inteligence na samoobslužné pokladny je ...
Kategorie: IT News

CISA orders feds to patch actively exploited Ivanti flaw by Sunday

Bleeping Computer - 12 Červen, 2026 - 10:26
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch an actively exploited Ivanti Sentry flaw within three days, as mandated by the newly issued Binding Operational Directive (BOD) 26-04. [...]
Kategorie: Hacking & Security

Notebookcheck: Vyhněte se Intel Graphics 2 Xe3 z Panther Lake / WildCat Lake

CD-R server - 12 Červen, 2026 - 10:00
Intel si dal záležet, aby zákazníci vnímali Panther Lake jako mobilní řešení s výkonnou integrovanou grafikou. Proto asi mnoho zákazníků nečeká, že nižší modely jsou citelně pomalejší než konkurenční…
Kategorie: IT News

Vybrali jsme nejlepší telefony, které si v červnu 2026 můžete koupit

Živě.cz - 12 Červen, 2026 - 09:45
Každý měsíc vybíráme nejlepší mobily v několika kategoriích • Smartphony dělíme podle výbavy a ceny, aby si mohl vybrat každý • Nezapomínáme ani na levné a tlačítkové telefony
Kategorie: IT News

Over 73,000 French govt employees affected in Tchap messenger breach

Bleeping Computer - 12 Červen, 2026 - 09:09
The French government revealed that a recent breach of its Tchap encrypted messaging platform affects the accounts of over 73,000 employees in the French public sector. [...]
Kategorie: Hacking & Security

Inside the coming war over face cameras

Computerworld.com [Hacking News] - 12 Červen, 2026 - 09:00

Several trends are now converging that threaten to pit tech companies against the general public. 

Miniaturization has finally enabled companies to build AI glasses that look and function like normal glasses, but with microphones and cameras. People are increasingly talking to AI, rather than typing. And multimodal input, especially video, is on the rise. 

Put all of these trends together and you get a nascent industry pushing toward all-day, everyday AI glasses with cameras — and a worried public already pushing back at  the idea.

Let’s look at how we got here.

Meta started it with a surprise hit: its second-generation Ray-Ban Meta glasses, which later gained multimodal AI capability. Its Meta Ray-Ban Display glasses add one in-lens screen — but both versions of the glasses have cameras. (The company is working on a third generation that will probably ship next year.)

Google provides the AI and software platform through Android XR and Gemini, partnering with hardware makers to put its AI on other companies’ glasses. At Google I/O last month, Google unveiled frames from Gentle Monster and Warby Parker running Android XR with Gemini AI; they’re scheduled to launch this fall. Google is working on two types of AI glasses, one with screens and one that is audio-focused. Both types have cameras, though. 

Samsung is working to launch AI-powered smart glasses, too, code-named “Jinju.” The company offered up details at Google I/O alongside Google. The glasses feature a 12-megapixel camera with autofocus; run on Android XR with Gemini AI; are co-designed with Gentle Monster and Warby Parker; and are slated to launch in July at the Samsung Unpacked event. 

(As with Meta and Google, Samsung is working on AI glasses with and without screens, but both of its models have cameras.)

Tech giant Apple is also on the glasses train, based on reporting from anonymous insiders. Codenamed N50, the Apple glasses could have two cameras, one for pictures and videos, the other for multimodal AI input and hand-gesture control. (Apple is also working on a pendant and next-gen AirPods, both of which have cameras.) 

There’s Amazon, which is reportedly developing a new line of consumer AI glasses with a camera after its earlier, camera-less Echo Frames and Carrera Smart Glasses lines failed. (My guess is the problem was Alexa, not the lack of cameras.) Although its Echo Frames have been effectively discontinued — displayed as sold out online — the company is already testing AI glasses with cameras for enterprise use on hundreds of US-based Amazon drivers

Amazon Smart Delivery Glasses

Amazon

Huawei in April launched its AI Glasses for the Chinese market — the lightweight glasses sport a dual-engine AI architecture and integration with its HarmonyOS ecosystem. It’s joined there by Xiaomi’s AI Smart Glasses, which are powered by the company’s HyperOS ecosystem and have cameras for photos and videos and for for reading QR codes. 

Beyond those well-known firms, other companies are making daily-wear AI glasses with cameras in them, including XREAL, Rokid, TCL, Solos, and Brilliant Labs.  

A minority of other companies is focused on glasses without cameras, including Even Realities (G1 and G2); MIRA (MIRA glasses); Dymesty (Dymesty AI glasses); Lucyd (Lucyd Lyte); and Huawei (Eyewear 2).

Get the picture?

Clearly, by the end of the year, the market will be flooded with all manner of AI glasses designed for everywhere, everyday wear. They can use prescription lenses or serve as sunglasses — and most of them will have cameras built in for photos, videos and multimodal AI. 

There’s just one problem: The public hates AI glasses with cameras.

Return of the ‘Glassholes’?

As we learned from Google Glass, a lot of people feel uncomfortable with a camera pointed at them while they’re talking to someone. And that backlash is back with the current generation of AI glasses. 

Because Meta is the market leader in the US, its Ray-Ban Meta glasses have borne the brunt of early disaffection. 

Texas Attorney General Ken Paxton recently launched a formal investigation into Meta’s AI glasses, calling them “a privacy nightmare for Texans,” claiming the devices “can easily invade personal privacy by collecting biometric data and recording Texans without their knowledge or consent.” 

Paxton also claimed the LED light on the glasses, which is designed to alert others that the camera is taking pictures or videos, can be easily defeated. In fact, some modders-for-hire charge up to $100 to physically destroy the LED and TikTok videos describe how to disable or cover the light. 

The pushback is happening elsewhere. Philadelphia courts banned smart Meta AI glasses with recording features from city courthouses and a petition is circulating to ban them from New York City bars and restaurants. MSC Cruise Line banned smart glasses in all public areas. And restaurants, gyms, and workplaces have begun banning smart glasses because of the camera. 

Uncertainty drives some of the concern. People don’t know whether they’re being recorded, and if they are, they don’t know who will see the video. It turns out, those  suspicions might be warranted. 

In February, Swedish publications Svenska Dagbladet and Göteborgs-Posten published an investigation that found Meta contractors in Kenya were reviewing footage from Ray-Ban Meta smart glasses — including “bank details, sex and naked people who seem unaware they are being recorded.” 

The New York Times published an internal Meta memo in February describing plans to add facial recognition (“Name Tag”) to Ray-Ban Meta glasses. The memo said the “political tumult in the United States would distract critics from the feature’s release.”

Then earlier this month, WIRED discovered dormant facial-recognition code called “NameTag” hidden inside Meta’s AI companion app. The code would let Ray-Ban Meta glasses identify strangers by face, a feature Meta publicly claimed “does not exist.” Meta quietly erased the code with an update one day after the exposé was published.

A coalition of civil society organizations wrote Congress to demand that Meta abandon its Name Tag facial recognition plans, calling it a “creepy and unacceptable escalation of surveillance.” The letter warned the technology could be adopted by law enforcement to surveil immigrants, people of color, and nonviolent protesters.

Finally, a range of reports involving AI glasses with cameras in them has emerged in recent months involving secret recording, harassment and extortion

The coming conflict over face cams

On one hand, all the biggest consumer electronics companies are either shipping AI glasses with cameras in them or planning to do so — and many smaller companies are looking to do the same. The industry expects AI glasses with cameras to go totally mainstream. 

On the other hand, a growing public, legal and legislative backlash has erupted in opposition to AI glasses with cameras in them. 

One possible outcome is that the public disdain for the cameras will fade, overwhelmed by widespread enthusiasm for the benefits they offer. A new social norm might emerge that mirrors the broad acceptance of everybody having cameras in their phones and pointing them in random directions. 

Another possibility is that companies will be forced by consumer disdain and legal action to abandon cameras in glasses and focus instead on AI glasses that can’t take pictures or use video for multimodal AI input. 

Either way, the war is surely coming. 

Kategorie: Hacking & Security

Rozhovor s astronautem Alešem Svobodou. Proč jsou na ISS staré notebooky a jak blízko má stíhačka k raketě

Živě.cz - 12 Červen, 2026 - 08:45
Jak fungují moderní kosmické lodě? Jakou roli bude hrát ve vesmíru umělá inteligence a jaké technologie jsou klíčové pro budoucí cesty na Mars? Tato i další zajímavá témata přibližuje v rozhovoru pro Computer český astronaut Aleš Svoboda.
Kategorie: IT News

Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

The Hacker News - 12 Červen, 2026 - 08:38
Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks. Europol, in a statement issued Thursday, said the dismantling of AudiA6 cut off a "key financial pipeline used to wash hundreds of millions in illicit profits." The service is estimated to have been used to launder more than €336 million (~$389 million) since theRavie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Dokonale náhodná čísla už nejsou jen teorií. Kvantové čipy výrazně zvyšují bezpečnost šifrování

Živě.cz - 12 Červen, 2026 - 07:45
Švýcarští vědci propojili dva podchlazené kvantové čipy třicetimetrovou trubicí • Speciální algoritmus dokázal zesílit původně nedokonalý zdroj náhodnosti • Dokonale nepředvídatelná sekvence čísel výrazně zvýší bezpečnost šifrování
Kategorie: IT News

Nova Lake vyfocen

CD-R server - 12 Červen, 2026 - 07:40
Příští generace procesorů Intelu byla zachycena na první fotografii. Zatímco shora se prakticky neliší od Arrow Lake, rozhraní LGA na spodní straně zabírá viditelně větší plochu…
Kategorie: IT News

Hry zadarmo, nebo se slevou: Balík závodních her za pár stovek a demoliční derby z Warhammeru zdarma

Živě.cz - 12 Červen, 2026 - 07:10
Na všech herních platformách je každou chvíli nějaká slevová akce. Každý týden proto vybíráme ty nejatraktivnější, které by vám neměly uniknout. Pokud chcete získat hry zdarma nebo s výhodnou slevou, podívejte se na aktuální přehled akcí!
Kategorie: IT News

Bumsrakete, kritická zranitelnost ve FreeBSD

AbcLinuxu [zprávičky] - 12 Červen, 2026 - 03:35
Byla nalezena a 9. června opravena kritická zranitelnost ve FreeBSD v Kernel TLS (KTLS). Pojmenována byla Bumsrakete (FreeBSD-SA-26:26.ktls, CVE-2026-45257). Lokální neprivilegovaný uživatel může přepisovat soubory, ke kterým má právo pouze pro čtení. Přepsáním setuid binárky a jejím spuštěním může získat roota. Na všech verzích od verze 13.0 vydané v dubnu 2021.
Kategorie: GNU/Linux & BSD
Syndikovat obsah