Agregátor RSS

Otestovali jsme skládací Vivo X Fold6 • Není ve všem nejlepší, ale ve všem patří mezi ty nejlepší • Líbily se nám fotky a výdrž, méně pak větší vyčnívající fotomodul a koncová cena

Byla objevena zranitelnost Tailworm v Tailscale a Headscale umožňující lokální eskalaci práv přihlášeného uživatele. Následně byla v Tailscale v opravené verzi 1.104.4+ změněna architektura aplikace. Viz příspěvek na blogu Tailscale.

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update, for ongoing malware scanning. Approved stores get the features from December 1, but only onSwati Khandelwalhttp://www.blogger.com/profile/[email protected]

Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]

Vyhledávání ve Windows 11 projde výraznou proměnou. • Nové prostředí bude čisté a díky WinUI 3 také svižné. • Testování v programu Insider začalo, ale jen v angličtině.

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the Pwn2Own Berlin contest in May. Microsoft fixed the Edge bugs the day after the contest,Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]

Ukrainian ransomware crook Artem Stryzhak has been sentenced to 70 months in the slammer by a New York federal court for his role as an affiliate of the Nefilim and Hive ransomware gangs. Prosecutors believe the cybercriminal began working with Nefilim in or around June 2021, while living in Barcelona, Spain. The Nefilim ransomware-as-a-service (RaaS) operation was known for targeting wealthy companies, with its operators encouraging affiliates to pursue businesses capable of paying substantial ransom demands. One of Nefilim's most high-profile attacks was on Australian logistics giant Toll Group in 2020, encrypting its files roughly three months after it suffered a separate Mailto ransomware attack. Court documents [PDF] state that Stryzhak agreed with alleged Nefilim boss Volodymyr Tymoshchuk, who remains at large, to pay the ransomware crew a 20 percent cut of the ransom proceeds he collected. Tymoshchuk told Stryzhak that his preference was for attacks to target companies based in the US, Canada, and Australia that turn over more than $100 million annually. This guidance was soon tweaked to encourage targeting companies in the same regions with more than $200 million in annual revenue. Prosecutors claim that around the time Stryzhak joined forces with Nefilim, he also signed up to the Hive ransomware operation as "one of its earliest affiliates," and used its platform to attack approximately seven victims. Hive's operators claimed they targeted circa 1,500 victims worldwide between June 2021 and January 2023. According to separate court documents [PDF], Hive's victims included a law firm and an Ohio hospital, which paid approximately $1.7 million in Bitcoin after the gang initially demanded $2 million during the COVID-19 pandemic. Before its infrastructure was seized in an international law enforcement operation in January 2023, Hive was known for attacking healthcare facilities during the COVID-19 pandemic, as well as being one of the ransomware groups that battered Costa Rica in 2022. Brett Leatherman, assistant director at the FBI’s cyber branch, described Stryzhak as a “prolific cybercriminal” who played a role in groups that were responsible for more than $100 million in victim damages. “Today’s sentence reflects the seriousness of Stryzhak’s crimes and demonstrates the FBI’s global reach and extensive network of international partners,” he said. “Multiple field offices contributed to this investigation, and our work does not end here. We will continue to leverage every tool at our disposal to track down Stryzhak’s co-conspirators and hold them accountable, including Volodymyr Viktorovych Tymoshchuk.” Stryzhak was arrested by Spanish police in June 2024 before being extradited to the US in April 2025. In announcing Stryzhak's sentencing, the Justice Department took the opportunity to remind the public that rewards totaling up to $11 million are available for qualifying information about alleged Nefilim operator Volodymyr Tymoshchuk and other key ransomware suspects. ®

Koukáte pořád na hodinky nebo vytahujete telefon z kapsy? • V budoucnu to možná nebude vůbec nutné • Vědci vynalezli dotykový displej, který všili přímo do rukávu

Prší, venku je zima a vám se nikam nechce… tak do čeho se pustit, abyste se neukousali nudou? Pojďte se inspirovat tipy, jak si takové sychravé večery užít naplno, od deskovek s kamarády přes malou sázku v online casinu až po drinkovou degustaci.

Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]

Vědci simulovali jaderný výbuch u asteroidu pomocí pokročilého programu • Rentgenové záření odpařilo povrch tělesa a vyvolalo silnou rázovou vlnu • Rozptýlení nebezpečných úlomků v prostoru však zůstává neověřené

Otter has added a new Work mode to its AI Chat assistant, expanding the range of tasks it can carry out before and after meetings.

It’s part of a wider drive by Otter — which received $320 million in funding last week — to move beyond meeting transcription and into automating tasks and workflows.

The Work interface, announced Tuesday, is accessible in the AI Chat prompt box, alongside the Chat option. While Chat allows users to ask questions, generate content, and retrieve information, Work is aimed at multi-step actions, Otter said. It’s a similar approach to other AI assistants, such as Claude and ChatGPT, that separate simpler chat functionality from newer agentic capabilities.

Prior to a meeting, Otter users can prompt Work to generate briefing documents based on information collated from previous calls and data from connected applications. After a meeting ends, the AI assistant can draft emails, generate documents — including Word and Notion docs, PDFs, and interactive web pages — and update Salesforce records.

The AI assistant requires human approval before completing tasks, an Otter spokesperson said.

The capabilities expand on functions already available with AI Chat’s existing Advanced mode. Otter will now remove the Express and Advanced options from the AI Chat interface.

Work mode is available now to all paid Otter users. There are no usage limits, Otter said — this differs from the Chat mode, which allocates a certain number of queries each month depending on a customer’s payment plan.

The feature updates reflect how meeting note taking is rapidly moving from data capture to workflow automation, said Irwin Lazar, principal analyst at Metrigy. “That is, vendors are delivering solutions that allow meeting notes to be actionable, based on context both from within meetings, as well as from other connected platforms,” he said.

Lazar pointed to similar functionality emerging in other meeting systems such as Microsoft’s facilitator in Teams and Cisco’s Webex meeting agent.

The vast majority (91%) of business users want meeting note-takers to access and act on context from outside a meeting, according to a global study of 403 organizations in Metrigy’s “Workplace Collaboration & Employee Experience: 2027” report.

In addition to the Work mode, Otter announced that its Live Assist feature is now available to enterprise customers, and will expand access to all paid Otter accounts in the coming weeks. Live Assist, announced in April, provides private guidance to a user during a call, such as suggesting questions and tracking meeting “objectives.”

“I see this kind of widget assist a lot in external-facing customer support roles, but for internal productivity meetings, this is quite unique,” said Thomas Randall, a research director at Infotech.

However he said that Otter faces from other meeting software vendors which are also integrating AI capabilities into their platforms. “So I don’t see Otter becoming a center of work, though its new functionality will be of great assistance to pre-existing users,” said Randall.

Related:

• Cisco brings collaborative agents and Claude into Webex chats
• AI notetakers at work could leave companies at risk for lawsuits

Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. [...]

A new study from the Coalition for Language Equity in AI Research shows that AI models require significantly more tokens to process certain languages than others. These differences mean that users of underrepresented languages risk paying more for the same services, reports Rest of World.

An LLM’s tokenizer breaks text down into blocks, or tokens, but it does so much more optimally for languages with abundant digitized data, the researchers explain. They found that among the 20 languages with the largest web presence, less common languages used from 1.5 to 5 times as many tokens as the same prompt in English. When the study was expanded to 200 languages, the difference increased to as much as 17 times in one of the models examined.

Since most LLM providers charge by tokens used, that translates to much higher costs. In addition, more tokens mean longer response times and a smaller amount of information that’s able to fit into the AI models’ context windows.

The researchers describe this as a hidden “tokenizer tax” and warn that it exacerbates digital inequality.

This disparity is not limited to languages with few speakers, the researchers note. “If we sort by speakers instead of web presence, the tax lands on enormous populations: Punjabi (~200 million speakers), Bengali (~266 million), Urdu (~288 million), Burmese (~36 million), Amharic (~36 million). This means hundreds of millions of people billed at multiples of the English rate for the same intelligence,” the study says.

Languages that use writing systems not as commonly found in the AI models’ training data are particularly affected. Examples include Burmese, Tibetan, Khmer, and Lao. Languages that use the Latin alphabet, on the other hand, often have an advantage, even when spoken by relatively few people.

This article was originally published on Computer Sweden.

Related: CIOs grapple with subpar global genAI models

PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authentication in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its CriticalRavie Lakshmananhttp://www.blogger.com/profile/[email protected]

AI agent zrušil cizí rezervaci, další přepsal počítač, nebo prodal zboží bez vědomí majitele. Co všechno se může pokazit, když AI dostane volné ruce?