Agregátor RSS
Extortion crews have their eyes on high-value AI data, Google warns
Microsoft: Windows Server 2025 changes causing app crashes
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
What It Took to Reach 1 Billion Build Manifests
What It Took to Reach 1 Billion Build Manifests
Apple after Cook: The Ternus age begins this week
We’re hurtling toward the loss of something big. Finally, after months of speculation, Apple is about to introduce its first-ever folding smartphone. And once it does, the conversation will change as the annual iPhone rumor season is replaced with the reality of whatever Apple unveils.
Except, it won’t quite be the same as in the past. Because no sooner will new Apple CEO John Ternus finish his iPhone announcement keynote speech tomorrow than the speculation will shift to next year’s 20th-anniversary iPhone, what’s coming to the iPhone 18 and e-series iPhones, and expectations around Apple’s upcoming wave of smart home products, including health and home security services. There’s a lot going on.
Meet John TernusHaving a lot going on is one of the prime expectations of Apple under its new boss. A family man with a wife and kids, he’s led Apple’s hardware division for five years after an eight-year stint running hardware engineering. He joined the company in 2001 and is described as a highly competent, hugely talented, and modest by nature.
His hobby is quite revealing — he drives race cars, is a regular at California’s Laguna Seca Raceway, and owns an incredibly rare 2019 Porsche 935. To me it suggests a calm, competent, individual with excellent mental and physical reflexes who can make life or death decisions at speed. He’s also deeply committed to good product design.
He’ll need that calm embrace of speed and adrenaline to manage the company his predecessor, Tim Cook, led to become the world’s most valuable firm.
A hard act to followHe’s also got a hard act to follow, as while Cook had to carve out his reputation in the shadow of Steve Jobs, Ternus must sculpt his own destiny in the shadow of Cook, who managed to make shareholders of record in 2011 around 20 times richer by the time he quit. (Apple stock rose from $13.74 per share on a split adjusted basis to $319.97 per share today.)
While Cook was frequently criticized for not being a product guy, he presided over the launch of the Apple Watch, AirPods, Apple Silicon, and the Vision Pro, and helped grow Apple’s services income to become its second-biggest product category, diversifying Apple’s revenue and creating financial stability. That’s no easy task.
Building his own teamCan Ternus improve on that? He’s certainly being positioned as someone who can. His deep experience in hardware has led to expectations that Apple will double down on product under his watch, so a great deal is expected of him in consequence. He is also putting together a hardware-focused team, including Laura Legros, former vice president of hardware engineering, as a direct report.
What will we see of this tomorrow? To be fair, while he will lead the announcement on the keynote stage, development of this first tranche of products took place under the leadership of Cook, and while Ternus will have had a big hand in development, this year’s Apple event should be seen as a moment of transition.
“I’m just as excited about what lies beyond that, including the incredible products already in the works and the ones we haven’t even imagined yet that we’ll dream up and create together. There’s no team in the world I’d rather build the future with,” Ternus told Apple staff in his first memo as CEO.
It’s what Apple does in the next couple of years that will truly define the new leadership. He’s literally been CEO for a week!
What to expect on Sept. 9Here’s my TL; DR list:
- First folding iPhone: Apple’s response to folding devices from Samsung, Google, Huawei, Xiaomi. It’s expected to have a highly durable, near invisible hinge and a powerful 2nm A20 chip around 20% more performant than the 17 series devices; Touch ID; a 48MP camera; and be able to unfold from a 5.5-in. to a 7.8-in. display. Potentially called iPhone Ultra, some predict it might be the “iPhone Duo” or “iPhone Fold.” It’s likely to cost $2,000+.
- iPhone 18 Pro series: Equipped with a fantastic new display, smaller Dynamic Island, 48MP main camera, and telescopic lens and supported by a fresh tranche of pro-photography features, the 18 Pro/Pro Max range will also use A20 chips. Both the fold and Pro devices will carry significantly more RAM, enabling them to handle on-device AI tasks. Apple is expected to introduce the iPhone 18, iPhone Air 2, and iPhone 18e devices at a spring 2027 event. Prices on all iPhones are expected to increase by $100 or more, depending on model.
- Apple Watch Series 12, Apple Watch Ultra 4: While Apple is thought to be working on new designs for next year, this year’s models will — for the first time in years — include an improved processor, better networking, and more accurate heart monitors. A model with a ceramic body is expected, while the devices will be equipped with additional storage, and integrated satellite emergency features.
- AirPods 5: Earlier speculation about cameras inside AirPods remains, but these aren’t expected at the launch. Instead, Apple’s AirPods 5 will be boosted with a new H3 Wireless Chip for better voice isolation, noise cancellation, and spatial audio. They may also provide some basic health monitoring features with a built-in temperature sensor and heart rate monitoring.
- Smart home products: Apple is still expected to introduce additional products for smart homes, including an Apple TV with a faster processor and SiriAI support, a HomePod mini upgrade, and — potentially — a new home hub. The latter could effectively be a combination of an iPad with a HomePod to run apps, control smart devices, take and make calls, and run Siri.
While all these products are important to the company, the smart home devices should demand attention (if they appear at all), as the indicators suggest Apple intends to explore the smart home space with a range of future hardware, including domestic robotics, security services, and smart devices. This hardware proliferation in new markets could end up becoming one of the hallmarks of Ternus’ Apple leadership, as will Apple’s AR spectacles (once they are introduced).
Equally, it cannot be ignored that one of Ternus’ main tasks since becoming vice president of hardware has been the introduction of new Macs and the transition to Apple Silicon. So he’ll be expected to strike a balance between improving Apple’s traditional product lines while racing his company toward new and emerging opportunities in hardware. (I believe Apple should pay much more attention to the enterprise space within that.)
Apple’s little AI problemThe biggest challenge to all of this will be Apple’s success in implementing AI that’s good enough to get things done while avoiding the unexpected dangers of poor implementation. We don’t want AI agents corroding smart home security, for example, which is why Ternus seems likely to maintain Cook’s focus on security and privacy as enabling technologies to support trusted hardware/software product designs.
Another thing? Tomorrow’s keynote will likely begin with the single word, “Hello,” and feels very likely to also include that classic Apple keynote line, “…One more thing.”
We’ll find out more as the conversation moves from speculation to reality after the 10am (PT) keynote.
Please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.
Netflix a 30 nejoblíbenějších filmů a seriálů v září 2026
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Swiss government explores replacing Microsoft 365 with open-source software
Swiss authorities have launched a pilot project to determine whether it is possible to replace Microsoft 365 with similar open-source services, RTS reports. This follows a proof-of-concept project in which 172 civil servants tested the German open-source platform openDesk.
According to Matthias Stürmer, a professor at the University of Bern, there are three main reasons for the switch: to reduce dependence on US services, to improve operational reliability, and to reduce costs.
In the first phase, the migration involves 3,000 computers, which corresponds to 7% of Switzerland’s federal workforce. The government has more than 54,000 workstations in operation. The pilot will prioritize employees who have access to highly sensitive data, according to RTS.
A move by the Swiss Armed Forces from Microsoft 365 to openDesk is already underway, with that migration expected to be completed in October, It’s FOSS reports.
Switzerland’s move is part of a larger ‘digital sovereignty’ effort in the European Union that aims to retain local control over data, applications, and infrastructure. In January, lawmakers directed the European Commission to map critical technology dependencies and then develop policies to reduce reliance on foreign providers.
This article originally appeared on Computer Sweden.
More on the EU’s digital sovereignty push:
Judge spares Google’s ad-tech business from a breakup
Back in April 2025, the US Department of Justice (DoJ) proudly proclaimed that it had prevailed in a landmark antitrust case against Google’s ad business. Yeah. Right.
You see, just last week, US District Judge Leonie M. Brinkema rejected the DoJ’s effort to force Google to sell its AdX ad exchange. What began as a major anti-monopoly victory has become a mouse-sized settlement.
[ Google US antitrust trials: A timeline ]Does any of this this sound familiar? It should. We’ve seen this show before. Last year, Google had also been convicted of abusing its search business. At first, all the talk was about how Google might be forced to divest itself of the Chrome browser and/or the Android operating system.
Instead, Google was allowed to keep making search deals and only had to share some search data with its rivals.
I say rivals, but in fact Google still dominates the search market. Indeed, its control has actually expanded a bit. By StatCounter’s numbers, in August 2025, Google search owned 89.89% of the market. By last month, almost a year after the company had been slapped on the wrist, its share had grown to 91.1%.
Boy, wasn’t that a win?
The remedies phase of the government’s ad-tech antitrust case order is a similar Google win. No, it doesn’t overturn the April 2025 finding that Google unlawfully maintained monopolies in the publisher ad-server and ad-exchange markets, or that it illegally tied its ad server and exchange together. Instead, it determines how the company must change its conduct.
The DoJ wanted Google to divest itself of AdX, the company’s ad exchange for matching publisher inventory with advertiser demand. It also sought to require Google to open-source the final-auction logic in its DoubleClick for Publishers (DFP) ad server and, if necessary, divest its DFP business.
Brinkema rejected all three requests. Instead, her short order accepts “most” of the parties’ proposed behavioral remedies, subject to modifications described in a memorandum opinion that remains sealed while the parties identify confidential information for redaction.
Specifically, the court directed Google and the plaintiffs to meet and submit a joint proposed final judgment within 30 days. If they cannot agree on the details, each side must submit its own proposed version.
Google — as it should — sees this as a win. As Lee-Anne Mulholland, Google’s vice president of regulatory affairs, said in a statement, “We’re very pleased the Court rejected the DOJ’s proposal to break apart tools that help small businesses reach new customers and grow.”
Far less convincing is the DOJ’s characterizing the decision as a win. “The Antitrust Division is pleased that the court ordered substantial relief in the Google ad-tech case. We are one step closer to restoring competition and bringing relief for the American people in online advertising markets.”
Oh please! It does nothing of the sort.
To quote Laurel Kilgour, research manager at the American Economic Liberties Project, an anti-monopoly, nonprofit group: “Judges keep finding Google guilty, but Google keeps walking away with both its ill-gotten gains and its empire intact. Without actual structural remedies, antitrust rulings are just inconvenient speed bumps that allow Google to lock down search and ad tech markets today while using that same unchecked power to monopolize tomorrow’s AI frontier.”
Exactly so.
The specific obligations Google will face are not yet public, because Brinkema’s explanatory opinion remains under seal. Earlier, Google had proposed making real-time bidding responses from AdX available to rival ad servers, removing Unified Pricing Rules, and accepting a monitoring trustee for a three-year supervision period. None of that will even dent Google’s ad business.
When all’s said and done, Google is still in charge of both its exchange and publisher ad-server operations. I expect the minor changes required won’t amount to a hill of beans. Restoring competition in markets where the company was found to have used its vertically integrated position unlawfully? Give me a break.
Public Knowledge, a free speech and internet advocacy group, described the decision as one that leaves Google’s monopoly power substantially intact.
As Public Knowledge Legal Director John Bergmayer said, “The court found that Google illegally acquired and maintained monopolies in publisher ad servers and ad exchanges, and used its control of DFP and AdX to shut out rivals.” He concluded, “Telling a monopolist to do better is not the same as restoring competition.… A finding of liability means little if the remedy leaves the market fundamentally unchanged.”
Ya think?
In Google’s last reported quarter, the company reported $81.6 billion in advertising revenue. Next year, when Google is being “punished,” I expect its revenue will be even higher.
BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
A phishing-as-a-service operation targeting Microsoft 365 users has harvested thousands of session cookies that could be used to hijack authenticated sessions after victims complete multifactor authentication, CloudSEK said.
The cybersecurity firm said in a report that it uncovered the operation, known as BigBear 2.0, in June after gaining access to its administrative panel.
The panel contained 5,137 credential records linked to 461 targeted organizations across more than 40 countries. CloudSEK also reported 4,148 captured session cookies and 1,032 plaintext passwords. The firm said 474 records showed completed logins in which attackers captured the authenticated session created after MFA.
BigBear 2.0 is built on Evilginx2, a framework that places an attacker-controlled reverse proxy between the victim and Microsoft’s legitimate authentication service. The victim signs in through the proxied page and completes MFA as usual. Once Microsoft issues an authenticated session cookie, the phishing infrastructure can intercept it and allow the attacker to reuse the session without completing the authentication process again.
The operation also uses residential proxies selected according to the victim’s country, which can make malicious authentication traffic appear geographically consistent with the user. CloudSEK said this technique can weaken location-based checks used in Conditional Access policies.
Researchers also found custom code designed to disable FIDO2/WebAuthn authentication on the phishing pages, potentially steering users toward weaker, phishable authentication methods.
CloudSEK described BigBear 2.0 as a multi-user service with at least five identified affiliate operators. The company said it observed 42 virtual private server (VPS) nodes over the campaign, with 26 deleted from the panel since late July.
IT services and managed service providers accounted for 151 of the organizations identified by CloudSEK, making them the most heavily represented sector in its data. Such organizations can present especially valuable targets because employees may hold privileged access to customer environments and administrative systems.
Session theft moves into the mainstreamThe significance of BigBear 2.0 is not just its ability to capture authenticated sessions after MFA, but the way it packages techniques once associated with more skilled attackers into a service that can be used at scale, said Keith Prabhu, founder and CEO of Confidis.
The underlying technique is not new, said Akshat Tyagi, associate practice leader at HFS Research. “What BigBear 2.0 changes is accessibility and scale,” Tyagi said. “It packages AiTM phishing, residential proxies and automated cookie replay into a service that lowers the expertise needed to run these attacks.”
That shift means enterprises need to think beyond protecting the authentication event itself, he said, because a captured session may give an attacker access to Microsoft 365 without another password or MFA challenge.
Prabhu added that successful MFA should no longer be treated as proof that an account or session remains secure.
Session cookies and access and refresh tokens should be treated as high-value authentication material rather than technical artifacts behind the password, said Sakshi Grover, senior research manager for cybersecurity products and services at IDC Asia Pacific.
The risk, she said, is that many enterprise controls are still geared toward detecting credential theft rather than the hijacking of an already authenticated session.
Phishing-resistant authentication becomes criticalOTP, SMS, and push-based MFA should not be relied on as standalone defenses against this type of attack, Tyagi said, because the attacker can allow the legitimate user to complete authentication before stealing the resulting session.
Tyagi said enterprises should enforce phishing-resistant authentication such as FIDO2/WebAuthn passkeys rather than merely making it available alongside weaker alternatives. Prabhu pointed to Windows Hello for Business and certificate-based authentication as additional options, with stronger methods enforced through Conditional Access authentication strengths.
Grover said organizations should also use Continuous Access Evaluation and token protection where Microsoft 365 supports them, but cautioned against treating token protection as a complete solution because coverage varies across platforms, clients and workloads.
The problem is also operational, Grover said. Identity and access tools are not always sufficiently integrated with security operations or SIEM platforms, leaving potentially useful identity signals disconnected from the analysts responsible for detecting attacks.
Password resets are not enough“Treat the event as an active session compromise, not merely a stolen-password incident,” Prabhu said.
He recommended disabling or containing the affected account, revoking Entra sign-in sessions and refresh tokens, and forcing reauthentication. Incident responders should then examine Microsoft 365 logs for evidence of mailbox access, malicious inbox rules, unusual OAuth consent, newly registered MFA devices, privilege changes, and access to other cloud applications.
Tyagi cautioned that IP location may provide limited reassurance in such investigations because residential proxies can make attacker activity appear geographically consistent with the legitimate user. Responders should instead focus on reconstructing what occurred during the compromised session, he said.
Investigators should also determine whether the stolen session was used to reach other employees, customers, or external contacts, Prabhu added.
Grover said organizations should also include session hijacking in tabletop exercises, testing how identity, security operations, messaging, and cloud teams would coordinate during an authenticated-session compromise. Such exercises can expose gaps that may not emerge in simulations centered on conventional credential theft or ransomware, she said.
The article originally appeared on CSO.
Čechům budou chodit balíčky i v sobotu. Víkendové doručování spouští další dopravce
Autonomní taxíky Tesla Cybercab vyjely do ulic Austinu. Americké úřady je hned začaly prověřovat
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Britain reboots its space strategy with £7.8B already on the launchpad
Nejvýkonnější herní procesor zlevnil na minimum. K Ryzenu 7 9850X3D navíc dostanete i hru
- « první
- ‹ předchozí
- …
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- …
- následující ›
- poslední »



