Agregátor RSS

Český výrobce Cubenest uvedl na trh novou řadu oblíbených adaptérů PowerCube. Novinky spadají do řady Ultra a už nevypadají jako kostka, ale mají tvar hranolu postaveného na výšku. Cubenest zatím připravil čtyři řešení, všechna s prodlužovacím kabelem, minimálně čtyřmi klasickými zásuvkami a třemi ...

Employers are getting pickier when looking at tech resumes, but competition for the right skills is still intense. Companies will pay a premium for experience and advanced AI skills.

“The market is no longer defined simply by how many people employers hire, but by how precisely they hire,” said Ger Doyle, ManpowerGroup’s regional president for North America.

In many cases, employers would rather leave a position open than make the wrong hire, Doyle said.

AI fluency and expertise are driving higher salaries, talent consulting firm Robert Half said after surveying more than 2,000 hiring managers, business leaders, and employed workers for its 2027 salary guide. “72% are increasing pay for relevant AI skills, with 42% offering more for AI-related expertise than other technical skills,” the firm said.

The tech job market today

There were 272,040 new IT openings posted in September, boosting the active listings to 625,633, the highest in more than three years, according to a study released by CompTIA earlier this month. About 349,821 jobs listed in September — more than half the active listings — needed AI skills, growing by 32,327 compared to August, CompTIA said.

In a recent survey of tech and IT service employers, AI literacy was the most in-demand technical skill, with 34% of US respondents naming it as a sought-after skill, reported Experis, part of ManpowerGroup, in its fourth-quarter talent outlook. AI modeling and app development followed close behind at 33%.

“We’re seeing it influence hiring across occupations ranging from data science and engineering to project management and operational roles,” ManpowerGroup’s Doyle said.

Employers face a tug-of-war as workflows transform and job requirements change, said Michael Chui, senior fellow at McKinsey.

“You have to have the right talent in place. You have to retrain. You might have to change the incentives. That’s all hard work,” Chui said.

What skills are sought

AI skills in demand are increasingly tied to business priorities and outcomes, consulting firm PwC said in a June study.

Companies want to hire AI-fluent workers who can hit the ground running. They prefer candidates who have used cutting-edge tools and services.

In tech job postings, employers are seeking more experience but fewer skills, said Dean Boerner, a data scientist at Revelio Labs, in a study published last month. Since late 2024, the average number of skills required in tech job postings dropped from about 30 to 21, while required experience rose from about 4.6 to 4.8 years.

Employers particularly want more years of experience in data-related skills such as data organization, data research, and enterprise architecture design. This translates to hiring experienced personnel rather than handing duties to junior hires or AI systems, Revelio said in its study.

Fewer job listings mention broad categories like software and application development, the study said, while a larger number of job listings mention specialized skills such as Java API development and Python development. Other AI-linked skills including networking, cloud development, and machine learning are also in demand.

The AI infrastructure buildout has also led to an increased demand for semiconductor talent, network architects, construction managers, and software developers.

“Data centers are the factories of the AI economy, and every server rack that comes online needs someone who knows how to run it,” said Kye Mitchell, head of Experis US.

Experts said software developer roles are now pivoting toward data and machine learning expertise. AI is automating coding, so software developers are becoming AI engineers with duties that include verifying AI-derived code and ensuring compliance.

“Governance is a thing in which engineers will have a key role to play… AI engineers build contextual guardrails for compliance,” said Deepak Seth, senior director analyst at Gartner.

Salaries

AI engineer will be among the top-paid jobs in 2027, with salaries ranging from $154,500 to $196,750, depending on experience, according to Robert Half.

AI architects get between $145,250 and $204,000. Salaries for AI/ML analysts, machine-learning engineers, and data scientists range from $121,250 to $186,750.

RPA (robotic process automation) engineers, who focus on software and automation, get salaries between $107,000 and $155,250. Salaries also depend on location.

Career ladder

AI is throwing out the traditional way to climb up the career ladder. Hands-on experience and on-the-job upskilling matter more, while academic credentials carry less weight.

Companies are looking for specialized, judgment-heavy skills, “which younger workers are the least equipped to offer,” Revelio Labs said in its study. 

PwC noted that entry-level roles in AI-exposed jobs now demand skills that are traditionally developed through experience, such as leadership and strategic thinking.

“Organizations must rethink how they mentor and train junior staff, helping them step up to complex decision-making much earlier in their careers,” PwC said in its June report.

Fresh graduates combining technical fundamentals with practical experience, AI fluency, and strong communication skills will stand out, Experis’ Mitchell said.

“[Employers] are also building talent from within, expanding talent pools, and using multiple strategies to meet their needs,” Mitchell said.

Proof of AI proficiency in the workplace will become a standard requirement, Gartner’s Seth said. By 2027, 75% of hiring processes will include certifications and testing for workplace AI proficiency during recruiting, he said.

“Anybody in the IT world knows… we were asked for certifications about Java or C++ or whatever. Now suddenly that will shift to workplace AI proficiency,” Seth said.

Skills are also going out of date faster. “The half-life of technical skills will shorten from 8 to 12 years to 2 to 5 years. So adaptability and learning velocity will become very, very key,” Seth said.

“Rehiring is expensive. Reskilling is a better option,” Seth said.

Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. [...]

The embargo for iPhone Duo reviews has broken, which means dozens of reviews have appeared all at once. It’s like sitting in an empty office with all the phones ringing at the same time. No one can answer all of them.

So, what are reviewers saying about Apple’s new $2,000 product? What’s hot? What’s not? And what’s next?

Let’s begin with the criticisms. 

Almost every review I read is critical about the same things: the lack of a telephoto lens on the camera, the decision to use Touch ID, and lagging third-party software support for the device, with some criticism of the FaceTime camera. 

To be fair, one of those criticisms will change as developers build iPhone Duo support for their applications, while others will change in future versions of the device.

A convincing case for foldables

Reviewers seem to agree that Apple has plucked all the best ideas introduced in foldables so far and wrapped them in a highly designed, well-executed, luxurious product they think sets the scene for the next generation of foldable smartphones. As the history of most Apple product introductions shows, first-generation compromises will be overcome.

The iPhone Duo form factor itself, however, seems to be a success.

“For an iPhone user who has never experienced a foldable, I suspect they will be surprised by how quickly the larger display starts to feel useful,” wrote Francisco Jeronimo, IDC vice president, worldwide devices, in a note seen by Computerworld. “Apple has made a convincing case for this form factor. Now comes the next test: turning excitement into availability, adoption and a lasting new chapter for the smartphone market.”

Here’s what the first reviewers have to say “Masterfully-designed”

“The iPhone Duo is a masterfully designed product that earns its two grand price tag. By borrowing the same aspect ratio as a notepad, it feels compact when folded and expansive when opened up to double in size. It’s crazy thin — just 5.2mm when folded flat — and littered with small design choices that add up to an overwhelming sense of luxury,” wrote Robert Leedham at GQ.

“Hype is justified”

“After a week of testing, I can say that hype is justified. Its polished design and thoughtful craftsmanship, headlined by a unique inner display and hinge design, set a new platinum standard for folding phones, and serve as a shot in the arm of the entire smartphone ecosystem. Needless to say, the Duo is the best foldable phone I’ve tested to date, and the freshest, flashiest phone I’ve used in years,” wrote Stefan Vazharov at Popular Mechanics. 

You may not need it

“If you want the convenience of a larger screen without carrying two devices, the Duo could be a compelling proposition. But if you prefer to use your phone and tablet separately, you’re paying a premium for a folding design you may not need,” wrote Shivali Best at the Daily Mail.

“An incredible piece of engineering”

“It’s hard to overstate just how impressive the whole thing feels in practice. The hinge feels fantastic, the smaller footprint makes it surprisingly easy to carry, and you can unfold it into a 7.6-inch display. It’s an incredible piece of engineering, and even after a week, I’m still impressed by how well the entire package comes together,” wrote Chance Miller at 9to5Mac.

“Satisfying“

“’Satisfying’ is the best way to describe the feeling of repeatedly opening and closing the iPhone Duo. It’s as if Apple inadvertently created a digital fidget spinner — the more I carried around the iPhone Duo, the more I found myself absentmindedly folding and unfolding the phone,” wrote Lance Ulanoff at TechRadar.

Cohesive. Intuitive. Useful

“Thoughtful software integrations … give the Duo’s unique design a practical purpose beyond the novelty. The result is a foldable experience that feels cohesive, intuitive and genuinely useful, which could help win over more people to foldables in general. But I think that broader appeal is still a ways off,” wrote CNET’s Abrar Al-Heeti.

“A little bit like magic”

“If you care about having the fanciest phone, this is the one. It’s a neat little book-like iPhone when folded. But that inner display, once you open it, is the nicest phone display I’ve ever seen. It’s matte and has a 120Hz refresh rate, so when you lay the unfolded Duo on a table, a still image on the display appears solid, like a painting… The transition effect Apple’s designers have conjured for opening and closing the phone does look a little bit like magic,” wrote Mashable’s Stan Schroeder.

“Strong and smooth”

“Early folding phones had creaky hinges that felt grindy and didn’t always open fully. Those pioneering devices led the way, to be sure, and they deserve credit for being first to market with those designs. But none of the four competing folding devices on my desk (all from 2026) have a hinge that feels this strong and smooth,” wrote PC Mag‘s Eric Zeman.

“Worth the wait”

“While the Duo is heavy, expensive and late to the market compared to its Android rivals, it encompasses some of the best tech used by its competitors while also redeeming features that other manufacturers have seemingly left for dead. And even though many apps still need to be optimized to fully take advantage of the Duo’s design, the release of Apple’s first foldable has been worth the wait,” said Engadget’s Sam Rutherford.

“Something magical”

“At the risk of sounding cliche, there’s something magical about using the iPhone Duo. The way it seamlessly transitions from phone to tablet and back again. The fact that you can’t even feel the crease — though it is visible. And the way the software reacts based on the angle of the device,” writes Mark Spoonauer at Tom’s Guide.

My take

Having read these reviews, I don’t think any of them will quell enthusiasm for Apple’s $2,000 device. I also think its introduction will help Apple create a mind shift among consumers, some of whom may recall when the $499 entry-level price Apple charged for the original iPhone was seen as too expensive. 

In this case, by combining premium hardware design with smart software decisions, Apple seems to have created an experience many consumers will value. Even those who don’t will probably spend time snapping the fold on the display units at their local Apple Store, if only to find out if doing so really is “satisfying” enough to spend two thousand bucks on a machine for doom scrolling and taking pictures of the family cat.

I believe Apple has reset the industry and will sell as many of these things as it is able to create. I also look forward to seeing what it comes up with next year. There’s only eleven months — and the many stages of new Apple product rumor — until we find out. That suggests the first well-timed Bloomberg rumor will slip just before Christmastime…

Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. "The most distinctive technical marker for Bronze Sandcastle is its consistent use of Sandboxie DLL sideloading," Sophos security researcher Gabor Szappanos said in a post publishedRavie Lakshmananhttp://www.blogger.com/profile/[email protected]

When it comes to cyberattacks that shut down power grids, drinking-water systems, and other critical infrastructure, AI doesn’t – yet – turn script kiddies into sophisticated, nation-state attackers. But “the potential is there,” according to operational technology (OT) security experts. "One thing that we've relied on for years is security by obscurity when it comes to utilities," said Steve Swick, former chief information security officer at American Electric Power. "The knowledge needed to do some of that stuff is getting less likely to be necessary," Swick added during a media panel ahead of the publication of Frenos' State of AI in Security report. AI makes it easier and faster for human attackers to target critical infrastructure, gain access to utilities and manufacturing plants, and perform OT system reconnaissance. “Basic access can recon documentation, and distill through that documentation very quickly to find out critical design features of your plant and facility,” said Paul Shaver, head of OT at Armadin, during the panel. “I can download the manual for almost any automation controller, parse through that very quickly, and come up with ways that I can exploit a dedicated feature of something that was not secure by design.” Armadin is Kevin Mandia’s new security startup that uses swarms of autonomous AI agents to simulate real-world cyberattacks. Prior to joining Armadin, Shaver spent six years as the global OT practice leader at Mandia’s earlier company, Mandiant, which Google acquired in 2022. “I will fly my Mandiant flag for a second and try to steer away from the fear, uncertainty, and death of the world is coming to an end, and every script kiddie is now a very sophisticated nation-state adversary. But I’m not going to say the potential is not there, because the tools are improving such that the access to information is so much quicker.” At Armadin, and with an AI assist, “I'm very quickly building tools in days that would normally have taken me months,” Shaver said. “If it can do that for me, it's doing something similar for the folks that have a very basic skill set. I wouldn't go so far as to script kiddies yet, but as the models improve, that becomes more of a possibility in this space.” Plus, as AI lowers the technical barriers to would-be OT hackers, “it advances the timeline,” said Harry Thomas, chief technology officer and co-founder of Frenos, a security company that does AI pentesting for OT environments. “If a better-than-average script kiddie can now perform attacks,” Thomas said, “You have more threat actors out there. There's an acceleration in timeline, more attacks could be happening, and from a defensive position, you might not know who your threat actor is anymore.” Testing the power of LLMs to help plan attacks The Frenos report, published Wednesday, examined the extent to which AI could help someone plan an attack on industrial systems. To do this, it ran several AI models through 16,980 tests between October 2025 and September 2026. These included 13,884 decision attempts, 2,520 planning attempts, and 576 simulated attacks. The company won’t disclose the models or providers’ names, but said it tested six frontier models, two US open weight models, and two foreign open weight models, on three kinds of tasks: choosing one action, planning the steps to a goal, and working through a simulated scenario. Each test gave the model background information and a set of attack actions to choose from. Before choosing, each model received details about assets, networks, and known weaknesses, plus the access each action required. Frenos then checked whether the model’s choice matched the required outcome. Depending on the model, between 6 percent and 47 percent of the choices passed. These tests found that the strongest three frontier models succeeded in about 90 percent of their planning attempts – meaning they produced a workable attack plan – but these same models weren’t consistent: 60 percent, 62.9 percent, and 74.3 percent of the attack plans passed every repeat. “A plan can look sensible and still leave out something essential,” according to the report. “The models had information about the task, but some answers skipped a step or assumed access that the plan had not established.” Meanwhile, the most successful of the four open weight models – a non-US model – achieved a 36.2 percent overall success rate. That figure, however, was still higher than the overall success rates of three other US frontier models, which scored 31.9 percent, 18.8 percent, and 17.9 percent, respectively. “We're seeing that even though AI models help us accelerate our tooling, accelerate our access and knowledge transfer, they are still prone to hallucinations – aka mistakes,” Thomas said. “We still think human judgment remains essential for these AI models to make the threat actors achieve whatever mission or goal they're trying to achieve.” In these tests, no humans asked the models to correct their plans, whereas in a real-life attack, a miscreant who understood the target could spot a gap in the AI’s plan, provide more information, and ask the model to revise its answer. “On top of that, when we were testing the AI models, we used a harness that was pretty simple: Here's some information. Here's the context. Give me an answer,” Thomas said. “A more capable harness could have given these AI models more of an edge.” Based on the findings, Frenos recommends actions for OT defenders to take, starting with a layered defense. This involves segmenting networks, limiting remote access and user permissions, and testing recovery steps. “We have our business continuity plans and disaster recovery plans for a reason,” Thomas said. “Let's execute them.” ®

Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique to each recipient, and the behavioral signals email filters have relied on for years are fading as a result. Proofpoint shared several examples of the shift at its Protect 2026 [email protected]

Andy Coenen z laboratoře DeepMind se zkraje roku pochlubil obří pixelartovou mapou New Yorku, kterou najdete na webu isometric.nyc. Už podle svého názvu používá izometrickou projekci, kterou znáte z nejedné budovatelské počítačové simulace a tištěných návodů na poličku z Ikey. Ústředním principem ...

Nvidia has proposed a new way to keep corporate AI agents in line. Nvidia on Wednesday introduced its OpenShell Reference Architecture. Based on the company's OpenShell secure runtime, It's a recipe for creating, operating, observing, and policing AI agents using OpenShell on Nvidia hardware. "Nvidia created OpenShell to give agents the freedom to do useful work within clearly defined boundaries — contained, monitored and under control," CEO Jensen Huang said in a canned statement. "With the OpenShell Reference Architecture, agents can think on Rubin, act on Vera and be governed on BlueField." AI agents are touted as a powerful automation technology. The reality is that they can be unruly, as demonstrated by security testing OpenAI and Anthropic conducted, during which their models exceeded their remit and attacked third-party organizations. Developers of existing agents, like Claude Code, Codex, OpenClaw, and OpenCode, therefore include controls that limit access to tools like curl and bash.Devs also create sandboxes to isolate an agentic process from the host, so that if agents go awry they're contained. OpenShell sits a level above that with a runtime that extends sandboxing to govern gateway-brokered credentials, identity and policy boundaries, and (eventually) routing and workflows too. At least mostly – OpenShell still has a few open security-related issues listed on GitHub. To implement OpenShell, organizations need Nvidia hardware. The company's blueprint calls for Nvidia Vera Rubin infrastructure to run models like Nvidia Nemotron, with agent harnesses handled via Vera CPUs, and Nvidia BlueField-4 DPUs (aka SmartNICs) propping up Nvidia Sentry security software to monitor agent behavior. The AI biz has made this blueprint available to partners capable of powering Linux and Kubernetes infrastructure. The usual suspects are aboard: Canonical, SUSE and Red Hat. Cloud hyperscalers Amazon Web Services, Google Cloud, and Microsoft Azure have also been tapped as vendors for this vision. And of course Nvidia's floor plan applies to agents from various model builders, including Anthropic, Cohere, Google, Meta, OpenAI, Perplexity, Reflection, and SpaceX. Nvidia says several banks – Europe’s BBVA and Santander – are perusing the OpenShell Reference Architecture spec to see how it aligns with their security and governance requirements. And the AI biz is not too modest to let slip that SAP is integrating the OpenShell Reference Architecture with its Joule Studio runtime for safer agent operations. It's worth noting that OpenShell collects telemetry data by default, "to improve the project," Nvidia insists. The biz allows users to opt-out, with a cautionary note: "Third-party services, model providers, inference endpoints, agents, or tools that you configure and use with OpenShell may have their own terms and privacy practices." ®

Levný telefon s Androidem rozběhal starší systém iOS • Na běžné používání to není ani náhodou, pokrok je ale vidět téměř každý den • Jde o fascinující ukázku bourání softwarových i hardwarových bariér

Kritické zranitelnosti PHP mohou pomoci ke kompromitování webových serverů. • Správci se připravují na nouzové opravy, vyjdou dnes v 16:00. • Útoky využívající zranitelnosti již odstartovaly.

Microsoft expanded its sovereign cloud offerings on Tuesday, adding new security, governance and AI capabilities as customers, particularly in Europe, demand greater assurance over where data is stored, who can access it and how critical services operate during disruptions.

The announcement builds on Microsoft’s ongoing digital sovereignty efforts, assisting organizations in applying appropriate levels of control to each workload rather than forcing a rigid, one-size-fits-all approach.

“Organizations are considering more than where data resides. They also seek to understand who can access and operate their systems, how sensitive digital assets remain protected, which technology dependencies matter most and whether critical services can continue as regulatory, geopolitical, security or network conditions change,” Douglas Phillips, president and CTO at Microsoft Specialized Clouds, said in a blog post.

The developments come amid growing international scrutiny of how global tech providers handle sensitive data and the extent of control customers retain over their digital infrastructure.

“Three factors are driving this, including stricter data regulations, rising geopolitical tensions, and growing AI adoption,” said Pareekh Jain, CEO at EIIRTrend & Pareekh Consulting. “Governments and enterprises want greater control over where their data is stored, who can access it, and whether critical systems can operate during disruptions. For instance, governments and big enterprises in Europe are worried about keeping their important data on an American company’s computers. Europe has proposed a new law that would limit the use of US cloud companies for sensitive government data in many areas. Microsoft is responding to these concerns while competing with local sovereign cloud providers.”

New controls across cloud and AI workloads

Microsoft is introducing the Sovereign Control Panel, a unified Azure portal experience that will allow organizations to assess their sovereignty posture, identify risks and gaps, apply controls, and evaluate workload portability. The panel is scheduled to enter public preview at Microsoft Ignite.

Expanding on Azure Key Vault Managed Hardware Security Module (HSM), which gives customers dedicated protection over encryption keys, Microsoft is now extending control beyond its own infrastructure. External key management with Azure Managed HSM is now generally available, enabling organizations to keep root encryption keys in hardware they own and operate on-premises or through a trusted third party.

In limited preview, Azure Confidential Clean Rooms will use confidential computing to support collaboration involving sensitive data, where participants will be able to analyse shared information while limiting broader exposure of the underlying data.

Microsoft is also expanding Azure Local to bring more cloud capabilities into customer-operated environments. The ability to transition workloads between connected and disconnected states is entering public preview. Additionally, DocumentDB and Blob Storage are entering public preview on Azure Local, while SQL Server on Azure Local is already generally available for connected and disconnected deployments.

On the AI front, Foundry Local is scheduled to become generally available at Microsoft Ignite for connected and disconnected operations on Azure Local. It will support local inference and agentic retrieval in natural language, backed by an expanded model catalog from Microsoft, partner networks, and the open-source community.

To further protect data during processing, Confidential Virtual Machines on Azure Local is now generally available, leveraging hardware-encrypted memory and isolation alongside workload attestation before sensitive keys or data are released.

While these additions give enterprises greater flexibility, industry analysts emphasize that localized deployments do not automatically erase vendor dependency.

“Depending upon the deployment model, in the public cloud, enterprises get better visibility, stronger access controls, and more control over encryption keys,” said Ashish Banerjee, senior principal analyst at Gartner. “In the Sovereign Private Cloud, they can operate infrastructure locally and even disconnect selected workloads from Azure. But I would not call this complete control. Enterprises still need to check whether Microsoft remains involved in identity, software updates, management, or technical support for the services they use.”

The article originally appeared on CIO.

European oversight and partner options

For customers in the EU and the European Free Trade Association (EFTA), Microsoft is rolling out Data Guardian. Under this model, a trusted regional partner will provide independent oversight of remote access requests by Microsoft engineers. Simultaneously, a Production Touch Ledger will create tamper-evident logs of all technical actions performed.

Microsoft is also broadening its Sovereign Partner Ecosystem, highlighting regional operators like Bleu Cloud in France and Delos Cloud in Germany, alongside independent software vendors specializing in security, identity, observability, and backup.

Geopolitical realities and market limits

Despite these additions, analysts note that technical controls cannot eliminate geopolitical dependence entirely. US hyperscalers (Amazon, Google, and Microsoft) continue to account for roughly 70% of the European cloud market, whereas European providers’ market share has contracted over the last decade.

The new measures introduced under Microsoft Sovereign Cloud do reduce risks but cannot eliminate them. “Local infrastructure, independent encryption keys, and disconnected operations make it harder for external parties to access data or disrupt services. However, Microsoft remains subject to applicable US laws, sanctions, and export restrictions. Enterprises gain greater operational independence but not complete legal or technological independence,” added Jain.

Furthermore, while sovereign cloud capabilities can offer greater control over data, infrastructure, and operations, this often comes with trade-offs in cost, performance, scalability, and access to services.

Banerjee noted that sovereignty should be assessed workload by workload, rather than applied as a label to the entire cloud environment. Greater sovereignty generally comes with greater cost and responsibility. Local or disconnected environments may not receive every Azure service at the same time. Enterprises may also need dedicated infrastructure, specialist skills and separate continuity arrangements. On top of that, they may lose some elasticity and economies of scale.

“So, I would not recommend maximum sovereignty for every workload. Reserve it for workloads where the legal, operational or geopolitical risk genuinely justifies the additional complexity,” added Banerjee.

The European Commission has opened an investigation under the Digital Services Act into whether Booking.com is doing enough to stop fraudsters running scams, phishing and smishing on its platform. Officials told The Register the probe, which opened Wednesday, covers a very large online platform (one with more than 45 million EU users) and has three strands. The first is whether Booking.com is failing to prevent fraudulent and non-compliant listings. "This is very much about people portraying themselves as the owner of premises and putting it up for rent while they are not the real owner," an EC spokesperson said. The second is whether it does enough to counter phishing and smishing (SMS phishing), and social engineering. "Scammers take over the account of a property owner and… portray themselves as the property owner, but also take over the contact details," she said. "So they start sending messages that people need to pay additional amounts." The Commission also suspects Booking.com is not sufficiently protecting the data of its consumers and business users. The third strand is advertising transparency: whether the platform clearly distinguishes ads from organic results, and whether it is clear about boosted listings, where property owners pay for higher ranking. Officials cited Booking.com's own admission in June 2024 of a 500-900 percent jump in travel scams over the previous 18 months. "What made us concerned is the very high figures," an official said. In the Netherlands alone, more than 1,000 fraud notifications were made in the first part of 2026, causing damage of €82,000, a tenfold increase on the previous year. “This is a real problem, and this is only the Dutch element,” the official said. “We have reports like that almost from all member states… So, we have clear elements where we find that the risk assessment was not sufficient, and as you know, the risk assessment is a key tool for us.” The Commission acknowledges that Booking.com assesses fraud using cases on its own platform and external reports, and takes internal measures in response. But “we feel that what they have done is absolutely substandard,” the official said. “Although they take measures, they could go much further, and they could have much more solid systems to prevent fraud.” “In the future we expect Booking.com to do a more diligent risk assessment,” she added. That could include addressing abuse of the reservation system, rapidly removing listings when fraud is reported, checking licenses, and changing how property owners are onboarded. A spokesperson at Booking.com told The Register: "We are cooperating fully with the European Commission and engaging constructively on its questions under the Digital Services Act (DSA). Security, trust and the protection of personal information are top priorities at Booking.com. We remain committed to working with relevant governments, regulators, law enforcement and industry partners to combat cybercrime and online fraud and protect travelers and partners." ®

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says. PHP will release the fix at 14:00 UTC on October 21 for two flaws it rates 9.2 out of 10, and has given no workaround of its own. Until you can install it, what lowers yourSwati Khandelwalhttp://www.blogger.com/profile/[email protected]

An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness is where the engineering in AI pentesting sits. The Hugging Face intrusion OpenAI disclosed in [email protected]

Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. [...]

UBports, nadace a komunita kolem Ubuntu pro telefony a tablety Ubuntu Touch, vydala Ubuntu Touch 24.04-2.1 a 24.04-1.5. S opravou kritických zranitelností.

Bosch vypustil aplikaci eBike Flow ve verzi 1.38. Tentokrát nepřináší žádné bombastické novinky, spíše jde o ladění uživatelského prostředí, tedy něco, co udělá radost především stávajícím majitelům elektrokol. Hlavní novinky lze shrnout do čtyř bodů: Individuální kontrola trakce: Trakci ...