Agregátor RSS

Mladé Slunce mohlo v rané fázi pohltit velkou kamenitou superZemi • Pohlcením planety lze vysvětlit odchylky vnitřní struktury naší mateřské hvězdy • Tento dramatický děj zároveň objasňuje nízké zastoupení lithia na povrchu

A Swiss court has sentenced a 52-year-old Ukrainian ransomware developer to 12 years and nine months in prison for his role in attacks on companies including Stadler Rail. Zurich District Court found that the man developed LockerGoga, MegaCortex, and Nefilim, but was not the mastermind behind the operations. He also received a ten-year ban from Switzerland. The judgment is not final and can be appealed. He had been held in pretrial detention since October 2021 and consistently denied knowing that his software was being used for criminal purposes. He said the source code found at his home in Basel-Landschaft came from his consulting work for an unidentified IT security client. The court rejected that explanation because extortion messages were also found among his data, SWI reported. The ransomware developer was also found guilty of playing a key role in high-profile ransomware attacks, including the one that hit Stadler Rail in 2020 [PDF]. Not to be confused with the more recent attack on the rolling stock manufacturer – that one was claimed by Everest – the earlier breach occurred in May 2020. At the time, Stadler Rail did not use the word "ransomware," but said the attack involved malware, that it "most likely led to a data leak," and that "the offenders tried to extort a large amount of money," threatening to leak the files if the ransom was not paid. As it did following this year's incident, Stadler refused to pay. The 2020 Nefilim ransom demand was reportedly $6 million. The court also found that he played a key role in attacks on HVAC company Meier Tobler and software company Crealogix. In September 2022, Zurich prosecutors reported that a suspect had been arrested in Basel-Landschaft in October 2021 on suspicion of money laundering and data corruption. The statement accused the perpetrators of involvement in attacks on more than 1,800 individuals and institutions across 71 countries, causing estimated losses of several hundred million Swiss francs. The same law enforcement action in 2021 led to the identification of other alleged members of the three ransomware operations, none of whom were named. Volodymyr Tymoshchuk was formally indicted in the US last year and was described by prosecutors as the mastermind of all three ransomware crews. Unlike many others, Tymoshchuk has not yet been arrested, but is on the FBI's most wanted list, with an $11 million bounty placed on the information that could lead to his arrest or conviction, or that of other key leaders. He was allegedly responsible for attacks on at least 250 companies, including the infamous Norsk Hydro attack in 2019. ®

Chystají se přísnější pravidla pro dovoz zboží ze zemí mimo EU. • Větší odpovědnost ponesou online tržiště jako Temu či Shein. • Přibude také poplatek za kontrolu dováženého zboží.

Článek na Raspberry Pi představuje nový vzhled desktopu operačního systému Raspberry Pi OS v aktuálním vydání 2026-09-15.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July. [...]

Nové verze Roundcube Webmailu 1.6.19 a 1.7.4 řeší několik zranitelností.

With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable Marimo notebook to an SSH Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

V prodeji je celá řada herních konzolí. Plánujete nákup? Pomůžeme s výběrem.

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise. But no matter how much you validate against these [email protected]

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Mark Gurman z agentury Bloomberg je léty prověřený „leaker“ připravovaných produktů značky Apple a v posledním reportu tvrdí, že firma pracuje na herním ovladači pro iPhone. Kód operačního systému MacOS zmiňuje dokonce dva modely, detaily však neznáme. Možná ještě zajímavější jsou zvěsti, že Apple ...

The colorful CEO of Automattic, which controls WordPress, was forced out last Thursday by his board of directors, which put him on a leave of absence. He used his system access to remove the accounts of the acting CEO and others — an action that could get most employees fired. Instead, he was fully reinstated to CEO a couple of days later.

It’s not hard to compare this to the saga at OpenAI almost three years ago when an eerily similar series of events happened. The board fired the CEO for having repeatedly lied to it. Within a few days, the board reversed itself. 

A weaker historical comparison is with Steve Jobs, who was ousted from his Apple CEO role, only to later return. But Jobs at least had the decency to wait a few years while he created and ran NeXT.

To be fair, boards have often been criticized for being puppets of the CEO, who often have a lot to say about who serves on the board. But that criticism doesn’t hold for the first OpenAI board nor for the initial Automattic board.

Some years ago, I was involved with a VC-funded startup, and we were at the stage of forming a board of directors. I was talking with the person who was to be the board chair and he needed candidates for board secretary, which is typically an attorney. That role is supposed to be a lawyer who cares about the board, as opposed to the company’s general counsel, who reports into the CEO and only cares about the company. 

The chair said that we need someone who is trustworthy. I had the perfect candidate in mind, until I probed deeper and found that there is a vast chasm between “trustworthy” and “someone we can trust.” 

I envisioned someone who was honest and had integrity, someone who would take their duties seriously and would tell the board the truth regardless of the implications. That turned out to be precisely what the chair did not want. 

He wanted someone who would vote with us regardless of their legal opinion. He didn’t actually want trustworthy. He wanted blind unconditional loyalty. (That business, thank goodness, never ended up launching.) 

But that seems to be what CEOs now want, which undermines the entire point of having an independent board. Other than deciding whether to accept an acquisition offer, the most important decision of any tech board is the hiring — and firing — of the CEO. 

What does it say when a board makes that decision for what it seems to be a legitimate business reason — and then reverses itself within a couple of days? 

In the case of Automattic, it is not a good look. The board said absolutely nothing about why it forced the CEO out, which made its reversal over the weekend even more perplexing. 

When Automattic emailed reporters on Thursday to announce that the CEO had been ousted, the messages were cryptic: “Matt Mullenweg is currently on leave from Automattic. Mark Davies, Automattic’s CFO, will lead the company as interim CEO. The Board has full confidence in Mark’s leadership and in the team’s ability to execute against the company’s priorities.”

The next we heard was an equally cryptic message sent Saturday afternoon: “Matt Mullenweg is the chairman and CEO of Automattic, with full support of the board, and if you search online you can see many top executives and Automatticians supporting him as well.”

Huh? We then asked for clarification of what happened and why. At 2:26 AM Eastern on Sunday, the media team emailed: “Matt and Automattic’s leadership team have great respect for everyone involved. While we can’t comment on specific individuals, we’re thankful for their contributions to Automattic and its mission, and we remain excited about what’s ahead with Matt at the helm. Matt was away for only 33 hours and 20 minutes — we’re now back to work.”

My proposal: A board’s decision to hire or terminate a CEO should be defended with public specifics. And so should a hiring decision. Or, in this case, a reversal of a mandatory leave of absence decision. 

If the board is going to take the extreme step of relieving the CEO, it should be required to say why. In some situations, it may need to be vague (as in “personnel situation involving a substantiated sexual assault”), but the board needs to give some kind of reason. That should happen so at the very least, a reversal is also explained. 

Further reading:

• Automattic CEO Matt Mullenweg is out: Does this mean long-term viability, or liability, for WordPress customers?
• Matt Mullenweg: WordPress developer hours cutback may or may not slow innovation
• WordPress.org statement threatens possible shutdown for all of 2025
• About that brawl between the WordPress co-founder and WP Engine…
• One-twelfth of Automattic staff leave over WordPress-WP Engine spat
• Things get nasty in lawsuit between WordPress.org and WP Engine

Five alleged leaders of the Black Axe cybercrime syndicate, known for its involvement in global-scale cyber-enabled financial fraud, have been extradited to the United States to face wire fraud and money laundering charges. [...]

Na Kickstarteru běží kampaň na podporu hloupého (jenom volání a SMS) tlačítkového DIY telefonu MAKERphone 2.0 od společnosti CircuitMess postaveného na ESP32-S3 a volitelně také s hodinkami MAKERband. S možností psaní vlastních aplikací. S volitelnými HW rozšiřujícími moduly.

Čínské solární elektrárny překonaly v celkové kapacitě uhelné zdroje • Kvůli noční tmě a výkyvům počasí slunce pokrývá jen 13 % • Čína proto mohutně investuje do přenosové sítě i velkých bateriových úložišť

Prodej brněnské firmy Phonexia korejskému fondu ukazuje, jak odlišně se technologické byznysy rozvíjejí v Česku a v USA. • Zakladatelé české Phonexie roky raději rostli pomalu z vlastních peněz, než aby vzali rizikový kapitál a rychle expandovali. • Noví korejští majitelé chtějí v Brně dál ...

Microsoft has confirmed that copy and paste may silently fail for some Excel users after installing the September 2026 KB5002914 security update. [...]

Uživateli profesionální sestavy se roztavil 16pin napájecí konektor. Na tom by nebylo nic zvláštního, kdyby nešlo o sestavu, která je vybavena ochranou, jenž má takové situaci zabránit…

Makerphone 2.0 si postavíte za dvě hodiny, potřebujete jen šroubová • k • Telefon zaujme modulární konstrukcí, přidáte k němu třeba teploměr nebo svítilnu • Vypadá jako ideální mobil pro děti nebo kutily

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. [...]