News
-
The Fly Brain That Took Over the Internet: A Drosophila Connectome Plays Doom and Trades Bitcoin
A complete digital map of the fruit fly's nervous system has become a viral pastime: enthusiasts are making it play Minecraft, park a car and run a LinkedIn. But behind the memes lies a serious scientific resource.
-
BambooToken: Malware Controls Windows and Linux Through the IoT Protocol MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, has adopted the lightweight MQTT protocol for covert communication with infected servers. According to Lumen researchers, the nature of the attacks points to a link with pro-Chinese operations.
-
Google DeepMind unveils Gemini 3.8 Live and an extended-thinking version
Google DeepMind has released two models for real-time voice conversation — Gemini 3.8 Live and 3.8 Live Extended Thinking. Both are available today through the Gemini API, Google Workspace, Search and the Gemini app.
-
Open AI models trail closed ones by just 4 months — but cost a fifth as much
According to a Mozilla report, the gap between frontier closed models from the US and the best open models from China has narrowed to 4.4 months. Paying for the “frontier” buys a four-month head start at five times the price.
-
Fedora 45 Beta: KMSCON Instead of the Kernel Console, GNOME 51, and New Security Rules
The Fedora Project has released the beta of its 45th release right on schedule. The distribution replaces the kernel's built-in console with KMSCON and tightens the default security settings.
-
Ransomware Gangs Join Attacks on Critical VMware vCenter RCE Flaw
CISA warns that ransomware operations have joined the exploitation of a critical vCenter vulnerability that Broadcom patched back in July.
-
Raspberry Pi OS Desktop Gets an Icon Dock and a New Launcher
The Raspberry Pi developers have released a major update to the desktop interface for ARM64 single-board computers, seriously refreshing the user experience for the first time in a long while.
-
Twenty-Five Years of Mass Surveillance: Time to Take Stock
In an essay for Lawfare, Bruce Schneier and Cindy Cohn argue that the architecture of total surveillance that emerged after 9/11 long ago outgrew the fight against terrorism and has become a routine tool for the police, ICE and private companies.
-
Five Alleged Black Axe Leaders Extradited to the US
Members of the Nigerian syndicate Black Axe are accused of dating-site fraud and laundering money swindled from Americans over the course of ten years.
-
Critical LiteSpeed Enterprise Flaw Hands Out Root on Shared Hosting
cPanel warned that a defect in LiteSpeed Web Server Enterprise lets the owner of a single account take over an entire shared-hosting server. A patch is already out, but it's in no hurry to arrive automatically.
-
Microsoft Ships Emergency Fix for Its Record-Breaking September Windows 11 Patch
The largest set of fixes in the company's history closed nearly a thousand vulnerabilities — and broke some features at the same time. An out-of-band update had to be rushed out.
-
Critical Cisco Secure Email Gateway Vulnerability Exploited in Attacks
Cisco has warned of active exploitation of CVE-2026-76461, rated 9.8, which allows remote command execution with root privileges through a specially crafted email.
-
A Nix binary cache is just three functions — which means anything can be one
Farid Zakaria shows that to play the part of a Nix binary cache, all you need to do is answer three HTTP requests — and he proves it by turning GitHub Pages, npm, and even DNS into substituters.
-
Lina Khan urges handcuffs for AI company chiefs, citing a 1934 precedent
Lina Khan, former chair of the U.S. Federal Trade Commission, proposes applying criminal liability to the leaders of AI companies, appealing to a 1934 legal precedent.
-
GNU Core Utilities 9.12 Released
Pádraig Brady has unveiled a new version of the GNU coreutils base utility suite, with useful additions and a fix for a bug that had lived in the code “from the very beginning.”
-
VPN Flaw Exposes Data of 246,000 Japanese Government Personnel
Japan's Digital Agency has reported a leak of roughly 246,000 records containing the personal data of public-sector employees: an attacker breached the system through a vulnerability in a VPN device.
-
Microsoft Ships Emergency Patches to Fix Remote Desktop Failures
Out-of-band Windows updates fix the Remote Desktop Services outages caused by the September patches, along with problems affecting Hyper-V and USB audio.
-
Microsoft issues a “code of conduct” for AI: don’t hack systems and don’t deceive people
Microsoft has published a set of rules laying out the values and “red lines” for its own AI models — amid the industry’s growing focus on safety and control.
-
Red Heron Breaches 13 Organizations Through a Gitea Vulnerability
In a matter of days, the presumed Chinese group Red Heron turned a public Gitea exploit into an automated tool and struck targets across six countries.
-
DDRop: A Cheap Interposer Breaks Intel TDX and AMD SEV-SNP
Researchers have demonstrated a hardware attack that forces a processor to read stale encrypted data, bypassing the protections of confidential computing in the cloud. The device used for the attack costs less than $200.
- More