Agregátor RSS

Americká agentura DIA zveřejnila zatím nejlepší snímek utajovaného kosmoplánu Shenlong. Fotografie pořízená komerčním satelitem ze vzdálenosti 90 kilometrů ukazuje jeho konstrukci a doposud neznámý servisní modul se solárními panely. Odhaluje tak další podrobnosti o kosmoplánu, který je právě na orbitě na své čtvrté misi.

HashiCorp has fixed a Nomad vulnerability that could let a malicious program change files on the computer running it.

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers' machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of the incident.

The compromised package was a VS Code extension available in the marketplace of Cursor, a maker of AI-assisted developer tools, the company said Friday. The malicious version, 2.1.313, subsequently affected “at most 5,000 users,” presumably when they either downloaded it or their systems automatically fetched and installed it. Anthropic pushed version 2.1.314 several hours after the previous version became available on Cursor, according to independent researcher Kevin Beaumont. Both Beaumont and the CTO and co-founder of security firm Phorion said that version 2.1.313 was distributed through Anthropic’s official account on Cursor. So far, neither Cursor nor Anthropic has explained how the attackers gained control of the account.

In search of cloud credentials

“It was a supply-chain compromise where the attacker gained access to the official distribution channel,” Phorion CTO and co-founder Luke Roberts told Ars. “The malicious version 2.1.313 was posted to the official Anthropic account, effectively superseding 2.1.312. Extensions auto-update in Cursor by default, but users can configure this in settings.” Phorion has more details here.

Read full article

Comments

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]

Intel před nějakou dobou refreshnul nabídku svých desktopových Arrow Lake procesorů o modely Plus, na jeden takový a desku se dnes podíváme.

A n0n ransomware operator tried to break into 23 organizations across 14 countries, but couldn't secure its own front door, leaving its server exposed with all of its methods on view. The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases not only stole and encrypted files, but also deleted data and backups, eliminating victims’ ability to recover their information. And despite the fear and hype around the breachpocalypse, with AI finding and developing exploits for critical vulnerabilities affecting most organizations across the globe, these crooks did not exploit a single bug to gain entry into any of their victims’ IT environments. “In every documented compromise in this investigation, access relied on weak or stolen credentials,” said Ensar Seker, chief information security officer of threat intelligence firm SOCRadar. “What stands out is the combination of AI-assisted development and very conventional entry points,” Seker told The Register. “We found no evidence of vulnerability exploitation in the cases examined.” The gang breaks into organizations at scale using widespread Remote Desktop Protocol (RDP) scanning and automated FortiGate SSL-VPN credential stuffing. To access US-based IT managed services provider ChiBiTek, the crew used a 15-thread residential SOCKS5 proxy pool to test credentials (ip:port:user:password) against FortiGate portals (GET /remote/login). The operators also gained entry using exposed cloud credentials and reused hosting portal sessions. In one case linked to e-commerce site Fanatics, SOCRadar found that n0n used an exposed AWS access key with permissions to list, read, and delete objects in S3 buckets. The criminals then used this key to pull data from 40 S3 buckets, with up to 110 GB per bucket, and ultimately deleted data, including bank-transaction archives, and purged keys across 12 sensitive buckets. AI-assisted extortion While the threat hunters didn’t find any evidence of a fully autonomous attack system, the ransomware operator did use AI to assist with these intrusions, incurring more than $7,216 in AI usage costs by October 22. Specifically: the criminal or criminals used OpenCode, an open-source AI coding agent, configured with 154 model entries across seven providers. Models included Gemini, Mistral, Nemotron, Llama, Claude, GPT-5.x, Grok, Kimi, GLM, DeepSeek, MiniMax, Qwen, and many, many others, some with safety training removed and others marketed as “uncensored” models. “The operator used AI to write and debug hundreds of scripts. That shows how AI can help an attacker turn basic access into a broader, tailored operation,” Seker said. “The destructive behavior is equally significant,” he added. “The operator did more than steal and encrypt files: in some cases, it deleted data and backups, and in one case changed firewall policies to block traffic. That creates a recovery problem that a decryption key alone cannot solve.” SOCRadar’s threat hunters found the operator’s workspace - a publicly accessible Python HTTP file server hosted in Sweden at 185.157.161[.]148 on port 8877 - last month, and documented the exposed directory in snapshots on September 25 and 26. “Across those snapshots, we identified 1,719 files, including attack scripts, ransomware source code, extortion infrastructure, and an AI coding agent environment,” Seker said. “This gave us visibility into the operation behind the victim listings, including how the operator prepared attacks and handled stolen data.” Meet n0n It also provided a close look at n0n, a newcomer to the data-theft and extortion game that has claimed 108 victims since it emerged last month. On October 12, the group added 38 maritime, port and logistics organizations across 18 countries to its leak site in a single batch. Researchers have linked at least 21 of them to customers of South Korean maritime software provider CyberLogitec, although the software provider has not confirmed an intrusion. The crooks set an October 19 deadline for the maritime firms, with ransom demands ranging from $400,000 to $28 million, payable in Bitcoin. After the deadline, however, none of the 38 listings were marked “settled” and none of their payment addresses showed any transaction. All affected organizations’ stolen data was published. While a handful of the gang’s claimed victims have been marked “honored - data destroyed” on n0n’s leak site, indicating the victim orgs paid the ransom demand, SOCRadar hasn’t validated any transactions on-chain. In its profile details, the security shop rates the gang a 10 out of 10 for "aggressiveness" and a zero out of 10 for “lethality.” The group is believed to be based in Russia, although the server uncovered by SOCRadar, which it attributed to a single operator or small team, didn’t provide any definitive geographic or national attribution. Every case that the exposed server documented followed the same lifecycle, moving from initial access to establishing persistence and credential collection via hidden admin accounts disguised as services, covert proxies, credential and session-token theft, mailboxes and emailed multi-factor authentication codes. The crooks then collected sensitive data and sent everything to the operator’s central storage with the attack impact shifting between data-theft, encryption, destruction, and network disruption, depending on the targeted organization. After breaking into Transcom, a Netherlands-based financial services provider, the crims sent a secondary ransom alert directly to PayPal's security team, even though the compromised data was only on Transcom's network. Stupid mistakes and n0n security basics Finally, the crims send ransom notes, post a countdown clock on the leak site, establish negotiation rooms and emails for victims - and then leak the stolen files or destroy backups when the organizations don’t pay up. In some cases, and to apply increased pressure on victimized companies, n0n also broadcasts automated countdown warnings to businesses’ service providers, clients, and media outlets. Despite its aggressive tactics, the operator in this case - as with other stupid criminals The Register has gleefully documented in earlier stories - still struggles with basic security hygiene. “There is a striking gap between operational ambition and security discipline,” Seker said. “The operator invested thousands of dollars in AI services while leaving its own workspace exposed. The locker also contained hardcoded encryption keys, with evidence suggesting reuse across victims. An operation can have serious destructive capability while still making fundamental mistakes.”®

Zákazník z Indonésie našel v peněžence Trezor Safe 5 implantovanou desku. • Deska měla odesílat přes mobilní síť frázi pro obnovení peněženky. • Firma zařízení zatím nemá, hlášení zákazníka považuje za důvěryhodné.

NexPhone měl přinést Windows 11 do našich kapes už v listopadu • Odkládá se až na jaro kvůli problémům s anténami a rušením signálu • Telefon dostane jako bonus Android 17, ale kvůli cenám pamětí nevyhnutelně podraží

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion adversary" it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

General Motors is taking what looks like a light slap on the wrist from a coalition of 35 states and the District of Columbia after agreeing to settle allegations that it collected drivers' data without proper consent and sold it to data brokers that supplied insurance companies. The Washington state AG's office said on Thursday that GM had reached a $220 million settlement with 36 attorneys general over the automaker's collection and sharing of driving data, including precise location information, speed, seatbelt use, and other metrics. According to investigators, GM sold that data to brokers, which in turn supplied it to insurance companies that could use it to set customers' premiums, without drivers' informed consent. For reference, the $220 million settlement, which will be distributed among the participating jurisdictions, equates to less than 7 percent of GM's $3.3 billion in net income attributable to stockholders for its third quarter, which ended on September 30, 2026. Don't spend it all in one place, y'all. The settlement comes more than two years after a 2024 New York Times investigation found that GM had been selling the data collected from vehicle owners through its Smart Driver program. That program, part of GM subsidiary OnStar’s offering, collected the aforementioned data and handed it back to vehicle owners in reports designed to inform better driving habits. Unbeknownst to Smart Driver subscribers, their data was also being forked over to data brokers despite GM telling customers it wouldn't share that information with insurers without their express consent. The insurers ultimately obtained the data by purchasing it from brokers with which GM had struck deals. To make matters worse, the Washington AG's office said GM incentivized dealerships to enroll customers in Smart Driver, with employees in some cases accepting terms and conditions on customers' behalf without their knowledge or consent. GM also failed to notify many drivers that their information was being collected and shared. Its OnStar app incorrectly told more than 370,000 drivers they were not enrolled in Smart Driver, even as GM continued collecting and selling their data, according to investigators. “The data GM sold was personal, identifiable, and specific,” the AG’s office said. GM canned the Smart Driver program in April 2024, just over a month after the New York Times exposed its data-sharing practices, citing customer feedback. In addition to the monetary pittance it’s handing over to the states, GM also agreed with the 36 AGs to limit the driving data it collects, better protect customer PII, and establish a "comprehensive data privacy program.” The Washington AG’s office described its settlement as “significantly stronger than any other resolution reached with GM for this conduct.” Speaking of those other terms, GM finalized its settlement of the same allegations with the Federal Trade Commission in January 2026. The FTC order required GM to obtain drivers' express consent before collecting, using, or sharing covered driving data, subject to certain exceptions. It also required the company to offer a simple way for drivers to request a copy of their data, request its deletion, and disable precise geolocation data collection where their vehicles support it. The state of California separately reached a $12.75 million settlement with GM in the matter in May; a separate case in Texas is ongoing. “This agreement … reinforces steps we’ve taken to strengthen our privacy practices,” a GM spokesperson told The Register, though the company noted that it still stands by driver data collection as a best practice. “Safer, more helpful and personalized experiences are enabled by connected vehicle data, and GM is committed to being clear about what information is used, how it’s protected, and the choices customers have about what they share,” the spokesperson added. ®

Corsair RM1200e hlídá proud v jednotlivých pinech napájecího konektoru grafiky. • Technologie PinProtect dokáže včas odpojit napájení a zabránit přehřívání konektoru. • Zdroj nabízí výkon 1200 W, certifikaci Platinum a desetiletou záruku.

Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of compromise of its own systems. The company was forced to issue a statement after prominent figures in the cybersecurity industry alleged that the extension, which infected up to 5,000 developers, was uploaded to Cursor’s marketplace following a breach at Claudemaker Towers. Felix Rieseberg, a member of Anthropic’s technical staff, Xeeted today: "We're working with Cursor on this incident, but it wasn’t a compromise of Anthropic's systems or employee laptops. "A malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension, which we didn't build or publish. The versions on our official channels are not affected, and this only impacts Cursor users." First spotted by EDR vendor Phorion, an unknown party pushed an update to Cursor's official Claude Code extension for Visual Studio Code that contained a persistent SSH backdoor written for Windows, macOS, and Linux. According to Cursor, the extension – version 2.1.313 – was available to download for around 11 hours between 0227 and 1335 PT (0927 and 2035 UTC) on Thursday. The vendors' analyses of the implant revealed that it collected information about the host machine and user, including usernames, configured Git emails, and public IP addresses, as well as attempting to open a reverse SSH tunnel. Crucially, Cursor echoed Phorion's assessment that the package contained a critical flaw. The script responsible for opening the SSH tunnel required admin rights on macOS and Windows to do so, and in the vast majority of cases it did not have these, resulting in failure. Regardless, the extension still forwards the collected host and user data to the attacker, as well as dropping the attacker's SSH key and installing the persistence mechanism, so developers must go threat hunting in case their instance allows for the SSH tunnel to be created successfully. Simply installing the latest version of the extension is not enough to clear the persistence mechanism, either. The full details of how to remediate the issue, and links to download scripts to wipe the infection, are laid out in Cursor's account of the situation. Aside from Rieseberg's statement today, neither Cursor nor Anthropic have commented on how the malicious package made its way to the official marketplace. Anthropic's position is that a malicious actor uploaded the tampered copy to Cursor, but the latter has not outlined how it reached the marketpplace. "[We] removed the malicious version from the marketplace immediately upon detection and blocked further distribution," Cursor said in the advisory. "We followed with a full shutdown of the VSCode Marketplace out of an abundance of caution." It also ran checks to confirm no other extensions were compromised in the same way, rotated its own keys before restoring the marketplace, and worked with a cloud hosting provider to block the connection to the attacker's server, it said. ®

One of the great things about Apple device management solutions is that the market for them is growing. Another is that because no two enterprises are alike, there is scope to bring different offerings to the market. I spoke with Ben Greiner, co-founder and COO of Smplify, a new-to-market device management vendor, to find out what his company provides to IT.

Smplify, which just announced $1m in pre-seed funding, offers what could be described as a headless management tool: everything it does is available through the API and CLI. In use, that means you can build it and wield it from within the tools you already use, Greiner explained. 

He’s building the company with Preetham Gurram, known in device management circles for his work at MobileIron, SOTI, Automox, Addigy, Scalefusion, and Apple, where he contributed to Apple’s core MDM platforms and zero-touch enrollment at scale.

So, who needs this?

“Device management still assumes a person is watching,” said Greiner. “Admins already automate with scripts and pipelines, and now AI agents are showing up that can act on a fleet at machine speed.”

The challenge for IT is that AI is beginning to take actions, rather than suggest them. That means IT must put systems in place to manage and audit the actions AI takes. “Enterprises that win won’t be the ones with the smartest agents; they’ll be the ones that can say exactly what each agent is allowed to do and prove what it did,” he said.

That’s a fair assessment of how things stand. OneTrust’s 2026 AI-ready governance report found that 87% of organizations are encouraging the use of AI agents, but only 47% have clear governance and controls in place. That’s a problem waiting for a disaster.

A recent report from Gartner predicts that 40% of enterprises will demote or decommission autonomous AI agents in the coming months (“by 2027”) because of governance gaps detected only after incidents take place. Patching those gaps is expected to become a big business.

Who watches the watchmen?

Once agents can submit changes at lightning speed, who can approve them? How widely deployed can those changes be? The risk is “an agent with the right key can wipe thousands of laptops before anyone notices,” Greiner told me.

This is a matter of AI governance and is something I know is in the thoughts of leaders at other device management companies, including Jamf and Fleet.

“AI is happening whether organizations know it or not. That’s the problem. You can try to block it, but that’s very hard to do well. It’s far better to build visibility and governance around it,” Jamf CEO Beth Tschida told me earlier this year. Jamf launched its own AI Governance suite in July, focused on AI tool discovery, policy enforcement, and reporting.

The Smplify approach puts some of these decisions into the management workflow itself. “Preetham calls it the last-mile control plane: the final checkpoint between what an agent decides and what actually happens on a device,” Greiner said.

What are the risks of unmanaged AI? 

While most of the conversation is focused on the risk of data leakage or malware, the other risk is lack of accountability. What if an agent gets bad instructions or hallucinates an inappropriate solution to a problem, and then pushes a destructive change across the fleet? By then it’s too late to figure out why it happened and becomes a potentially costly damage limitation exercise.

Fleet CEO Mike McNeil pointed out that part of the risk lies in the difficulty and cost of recovery after an incident. “I’d frame risk by two things: how much privilege the code runs with and how hard recovery is,” he said, noting the risk of scripts running at root, which can take full control of the machine to the extent that reversion can’t undo what’s done.

Greiner thinks the way to minimize the impact of such damage is to create strong rules and boundaries, and to ensure any risky actions are held back pending human approval. The agent can see a problem and create a solution, but can’t apply that fix until IT gives it the go-ahead. It’s very like how human IT works, only now it’s the machine that must report to the boss. Every change is logged with who asked for it, the intent behind it, and the person or policy that approved it.

Creating the opportunity space

Smplify has built its own platform to help manage devices, including AI management. That platform leans into the native protocols of the platforms it supports, naturally including Apple’s Declarative Device Management (DDM). 

“Admins describe what should be true of their devices, and Smplify keeps it true. If a device drifts from that intent, because a setting changed or an update was missed, the platform notices and brings it back in line, automatically or with an admin’s approval, depending on the rules they’ve set,” Greiner said.

He explained how many IT teams use GitOps to “bring discipline” to device management: configuration lives in GitHub, changes go through pull requests, and there’s a history of what happened. It works, but it adds new layers to the management task. He claims his solution has that discipline (versioned intent, review, and approval, and a full history) built in.

Boundaries, Apple and DDM

In the end, I get the feeling that AI management will embrace some of the ideas put in place with Apple DDM. If you think about it, DDM lets IT define a state and leaves it to the tech to work within that definition, and that same sense of boundary setting may be part of the future for AI in IT. AI will be given agency within limited boundaries.

Greiner pointed out, “Apple has also been giving admins controls over Apple Intelligence features, and I expect that to keep expanding as businesses want a say in which AI runs on company devices. Apple’s privacy stance also suits governed AI well: do things on-device where possible and keep a clear line around what leaves it.”

There is one more thing. Because Smplify is an MDM platform while also being API-first, Greiner explained that software companies can offer native device management inside their own products, under their own name, using his company’s solution. 

Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.

Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]

TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host can exploit the flaw to crash the viewer's TeamViewer and, depending on the platform, may also run Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Eurostat spočítal osobní železniční dopravu na starém kontinentu za rok 2025. Za všech dvanáct měsíců Evropané a návštěvníci dohromady nacestovali 457 miliard osobokilometrů. To je dosavadní rekord od začátku měření v roce 2004. Vývoj osobní vlakové přepravy v EU podle osobokilometrů Nejvíce ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]

Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring system. Patches for the flaw were released on OctoberRavie Lakshmananhttp://www.blogger.com/profile/[email protected]