Agregátor RSS

Byl vydán Mozilla Firefox 155.0. Přehled novinek v poznámkách k vydání a poznámkách k vydání pro vývojáře. Vypíchnout lze Smart Window, zatím ale dostupné pouze pro uživatele v USA, Kanadě a Francii. Řešeny jsou rovněž bezpečnostní chyby. Nový Firefox 155 bude brzy k dispozici také na Flathubu a Snapcraftu.

Jeden z nejnabitějších měsíců letošního roku začíná. Máme tady porci sportovek, strategií nebo survivalů. Ani fanoušci RPG nebudou o hladu!

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote access trojans (RATs) developed using Node.js and JavaScript. Russian cybersecurity company Kaspersky is tracking the

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote access trojans (RATs) developed using Node.js and JavaScript. Russian cybersecurity company Kaspersky is tracking the Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Od 1. září vede Apple dosavadní šéf hardwaru John Ternus • . • Tim Cook odchází po 15 letech, firmu vedl déle než Steve Jobs. • Teď bude šéfovat představenstvu a lobbovat ve světě.

Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes. [...]

Softaculous and Virtualizor customers are being urged to reset credentials and inspect their servers after a 33-hour BGP hijacking incident diverted traffic and delivered malware to a handful of installations. Softaculous makes software for the web hosting industry, while its Virtualizor control panel is used by providers and administrators to deploy and manage virtual private servers. Beginning at around 20:57 UTC on August 28, an unrelated network began announcing a block of Hetzner IP addresses used by Softaculous, diverting some traffic intended for the vendor's systems to an attacker-controlled server. German hosting provider Hetzner is one of Softaculous's upstream infrastructure providers. The affected addresses served "a number of Softaculous systems," including Virtualizor's software update endpoint and Softaculous's client and billing site. The attacker pulled off the BGP hijack by announcing a more specific IP address range than Hetzner normally advertised. Under standard BGP route selection, the more specific route took precedence wherever it was accepted. According to Softaculous, the attacker was also able to secure a valid TLS certificate from Let's Encrypt because the certificate authority's automated domain-ownership validation was routed through the hijack too. This allowed affected connections to reach the attacker's server without triggering the certificate warnings that might otherwise have alerted users. According to the vendor's timeline, the unauthorized route was initially "accepted by essentially every internet vantage point that receives it," although it flapped repeatedly rather than remaining continuously available. Softaculous said it reported the issues to Hetzner at around 08:50 UTC on August 29. The hosting provider began directly announcing the same, more-specific address range, cutting the observed diversion to almost zero for roughly 11 hours. The unauthorized announcement returned at around 20:00 UTC and was again widely accepted, beginning a second wave that lasted roughly ten hours. The route was withdrawn between 05:50 and 06:10 UTC on August 30, after which normal routing was restored globally. While either wave was active, Softaculous estimates that a given server had roughly a 72 percent chance of being on a network that routed the affected address range through the attacker. The figure is based on the proportion of RIPE routing collector peers carrying the hijacked route, not the volume of traffic intercepted, the vendor said. Anyone who logged into the Softaculous client area during the incident window is advised to reset that password immediately, as well as anywhere else it was reused. Customers who entered card details during the same window should also review their statements. Softaculous said it does not process cards on its own servers and instead uses payment gateways, but an affected session may have been diverted before reaching them. More seriously, the vendor confirmed that a malicious Virtualizor update package was delivered to a handful of installations whose update checks passed through the attacker's server. "Our product update clients did not yet cryptographically verify update packages, so a modified package would not have been rejected on that basis." Because those downloads never reached its own logs, Softaculous said it "cannot produce a definitive list" of affected installations. It is therefore telling every Virtualizor operator to treat their server as in scope for checks – not necessarily as compromised. Softaculous did not describe the malware's capabilities, but identified a systemd unit at /etc/systemd/system/java-jre-update.service as an indicator of compromise. Operators that find it are advised not to delete it immediately, but to contact the vendor so evidence can be preserved. The vendor has not identified malicious packages targeting Backuply, Softaculous, SitePad, Webuzo, or its other products, although its investigation continues. Virtualizor operators should rotate and restrict their API credentials, check for unknown SSH keys and accounts, inspect scheduled tasks and outbound connections, and regenerate client-area API keys. Softaculous is also invalidating client-area sessions created during the incident window. Softaculous did not disclose how many customers downloaded the malicious update or may have handed credentials to the attacker. It said only that the confirmed infections amounted to "a handful of servers rather than the general Virtualizor user base." ®

Uniklé návrhy ukazují změnu designu chystaného Samsungu Galaxy S27 Ultra • Nový vodorovný modul fotoaparátů má usnadnit nabíjení přes standard Qi2 • Výrobce čelí ostré kritice kvůli údajnému přebírání vzhledu konkurenčního Applu

How is it that the departure of well-known Apple designer Jony Ive undermined departmental resilience so much that former Apple staffers are now accused of stealing trade secrets and covering up the crime?

Forensic evidence

The latest chapter in the ongoing litigation between Apple and OpenAI involves fresh accusations by Apple that former engineer Chang Liu not only attempted to destroy evidence but also created an AI agent to run simulations based on confidential Apple circuit board schematics. 

None of these claims look good, and it’s doubtful Apple would make them if it doesn’t think they can be proved. Apple wants to obtain expedited discovery in the case, which OpenAI claims to be “meritless.” The next big date will be Oct. 1, when Judge Edward J. Davila will need to weigh OpenAI’s denials against Apple’s forensic evidence.

It is interesting that much of OpenAI’s defense seems to revolve around what I call the “cookie jar” argument that it only took information from Apple because Apple’s protections weren’t strong enough in the first place. Perhaps the judge will take the attitude that a loose lid does not justify fingers in the jar, even if it is proved that the lid was actually loose in the first place.

Ternus’ inheritance

That’s the court case, but what Apple’s new CEO, John Ternus, will need to consider as he moves into his new office is what has motivated 400+ former Apple employees — including many from its much-storied design department — to jump ship to its competitor. It’s a challenge he reportedly takes seriously, with recent reports suggesting that restoring the design group back to a cohesive whole is one of his priorities.

He’s going to have to take a very honest look at events; doing so means he will inevitably need to challenge some of Apple’s most sacred cows.

Design a team

Take Ive. There could be a reality in which some of this instability began with his departure. One argument might be that his leadership was what kept the design group together, and once he moved on the cadre collapsed. That doesn’t mean he wasn’t responsible; it was his department and it was his challenge to create a strong succession plan on his departure. Since leaving Apple and forming his own design company, Ive seemed to recruit many of his former staffers, many of whom now work at OpenAI following the sale of his AI company, io, to Apple’s competitor.

It is hard not to see that Apple’s design department post-Ive delivered little success, and while a lazy media class insisted on blaming then-CEO Tim Cook, the truth is that the CDO (Jony Ive was Apple’s Chief Design Officer before he resigned) held his throne long enough to have crafted a more successful approach. Identifying and developing successors is a key task of management anywhere, including in design departments. Problems should be managed down, not managed up.

Safe harbor

His subsequent move at his own company to rehire many of his old team — including Evans Hankey, his anointed successor as design lead at Apple (and co-founder of io), the company sold to OpenAI for over $6 billion — represented the shattering of design team cohesiveness at Apple.  

Another way of seeing it might be that Apple under Cook failed to inspire the design department to such an extent that many of its original members became disaffected and left to work with a competitor. When they did, they found themselves working with their former boss, and his chosen successor as design department lead, Hankey. 

Stepping up

The nature of reality is that one, both, or other arguments may be true. But Apple’s new CEO will need to consider all of them as he plans his next moves. Because while defending Apple’s future in the case against OpenAI is an existential necessity, Ternus must also secure the company’s future by inspiring every department to coalesce around his leadership. That task will include convincing Apple’s remaining designers that the future is better at Apple than elsewhere. That’s going to mean change and it will require a fresh vision for everyone to get behind. 

You can follow me on social media! Join me on BlueSky,  LinkedIn, Mastodon and subscribe to The Core.

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks them through opening a terminal and pasting it in. The technique is called ClickFix, and it was the most common initial access method Microsoft’s team observed last year, accounting

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks them through opening a terminal and pasting it in. The technique is called ClickFix, and it was the most common initial access method Microsoft’s team observed last year, accounting [email protected]

Since launching two years ago, Serval has positioned itself as an “AI-native” alternative to incumbent IT service management (ITSM) software vendors, promising to simplify the automation of helpdesk workflows.

Serval’s ITSM platform includes a workflow builder that uses a natural language interface to build code-based workflows. While vendors such as Freshworks and ServiceNow also have workflow automation tools in their products, Serval claims its approach makes automating a recurring task quicker than completing it manually, resulting in more tickets resolved automatically. 

Serval — whose customers now include Spotify, Fox, and Live Nation — has received significant venture funding from Sequoia and others, and was most recently valued at around $1 billion.

With its latest product update, Catalyst — made generally available last week —  Serval promises to take on more of the work needed to build and deploy workflow automations. That includes analyzing ticket histories and other data to identify processes to automate, then configuring settings and connecting integrations to help put those automations into production.

Catalyst also lets admins create long-running background agents that detect problems using historical tickets and other data, proposing fixes before employees even run into an issue, according to Serval. Use case examples include identifying security vulnerabilities, reclaiming unused software licenses, and repairing failed workflows.

Computerworld spoke to Serval CEO and co-founder Jake Stauch about the company’s approach to IT automation and how Serval believes it can differentiate from established ITSM vendors.

The following transcript has been edited and condensed for clarity.

What are the biggest challenges IT teams face when resolving employee requests? “Traditional ITSM tools are built to track tickets; Serval is built to resolve requests. These tools do a very good job of saying that you have work to do, but that doesn’t do anything for the employee. The problem with employee support is really around automation: somebody has to go and build all the automations employees need. 

“Historically, automations have been built in ITSMs as an afterthought, with drag-and-drop workflow builders. You build out these giant flow diagrams; they take months to build and then someone has to maintain them. But what happens when the business process changes, or you’ve got a new approval step for password resets? You’re doing surgery on all these different workflows. 

“Where we differentiate is making automation easier. We think that the best way to build automations is not a drag-and-drop workflow builder, but letting AI do what it does best, which is to write code. Our code generation agent builds workflows for large enterprises to automate not just simple help desk requests, such as password resets, but longer employee journeys, including onboarding and offboarding, job changes, and reporting requirements.”

What are the main components of the Serval platform? And how does Catalyst fit in? “You can think of the system as two agents, though obviously it’s more complicated than this. 

“There’s a help desk agent for employees. An employee can say, ‘I’m locked out of my computer,’ ‘What’s our Wi-Fi password?’ or ‘My laptop stopped working,’ in Slack and Teams, over the phone, or via email — and the agent resolves it right there. 

“We have a separate agent, called Catalyst, that builds those automations. Admins talk to Catalyst, which can build any automation, like password reset workflows, onboarding, offboarding, reporting. Then it helps deploy them either for the help desk agent to resolve employee requests, or for others on the team to use. It even builds background agents that do investigations, pull data from different systems, and come back with reports and propose new workflows.  

“The old Workflow Builder was more limited, in that it translated your prompt into code and created a code-based workflow. You could say, ‘I want a workflow that resets a Microsoft Entra password,’ and it could build that. 

“With Catalyst, you can say, ‘Build a bunch of password-reset workflows for all the different [identity providers] that we have,’ and it’ll build workflows for Okta, Google, and Microsoft, with awareness of what’s already been built. 

“It can also tap into other systems to build dashboards. It can analyze my ServiceNow data and build charts showing all the info, and then propose automations based on its research. It can go a step further and build user interfaces. If you say, ‘I want a form for ordering laptops for users,’ it can build that form, which you can then deploy for equipment purchases across the company. 

What happens if Serval’s AI agents don’t behave as expected? What safeguards are in place to prevent them from taking unintended actions? “Serval’s architecture is built around a separation of powers: one agent builds automations, and a separate agent uses them. Catalyst is gated to admins only and writes deterministic, code-based workflows. The help desk agent that end users interact with can call only the workflows that admins have already published; it cannot create new workflows or reach outside that pre-approved scope. 

“Every workflow carries its own permissions and approval gates that aren’t subject to LLM judgement. This means that while the help desk agent reasons freely over the employee request, any action it takes can be traced to a specific workflow run, and auditors can review both the approvals and underlying code. 

“That combination — of deterministic tools plus an air gap between the agent that builds the tools and the agent that uses tools — is what lets IT teams get the benefits of AI without handing broad system access to a model making judgment calls in real time.”

ServiceNow and other ITSM vendors are also adding AI agents and agent-building tools to their platforms. What is different about Serval’s approach, and what would prevent these firms from replicating it? “The difference isn’t that Serval has AI and legacy vendors don’t. It’s that Serval was built AI-native from day one, rather than layering agents onto two decades of custom tables, business rules, and workflow logic designed for a pre-AI world. That accumulated complexity is exactly what makes even simple automation changes slow and expensive on legacy platforms today; adding an AI layer on top doesn’t make it go away.

“That’s the real barrier to replication. It isn’t that ServiceNow and other incumbents can’t ship agent-building features; several already have. It’s that their existing customers depend on years of customization built on the old architecture, and incumbents can’t tear that out without breaking what those customers already rely on. 

“Serval built the automation engine and the system of record together from the start, with no legacy structure, so building a workflow, enforcing governance, and capturing the data that improves future automations all happen in one place, instead of being stitched together across systems.

“That’s also why many of our customers choose to fully replace their incumbent ITSM tool rather than run Serval as an add-on layer. When Serval is the system of record, not a layer on top of one, every ticket and workflow feeds directly back into better automation suggestions over time.”

Serval can be implemented on top of ServiceNow or another ITSM tool. Can that be a long-term arrangement for customers? “It can be as a starting point – no one wants it that way [longer term]. It may have taken you six years to get ServiceNow implemented, so we don’t expect you to get off it next week. We have to give you a path to get value out of Serval on the day you start.  

“When you begin that way, Serval syncs data back into ServiceNow. You can continue to use ServiceNow — or whatever your legacy ITSM is — with Serval as the automation and orchestration layer on top. 

“While it’s doing that, Serval is also your system of record; it records requests as tickets, and builds out the configuration management database. You end up with two systems doing the same thing, one of which is also automating the work and isn’t 20 years old. 

“Some customers migrate the whole platform immediately, if their ServiceNow renewal is coming up. If their renewal is years into the future, they take a slower approach, using Serval for orchestration automation before the full migration.”

What potential do you see for other enterprise use cases outside of IT? “We don’t have any customers that only use Serval for IT. IT actually accounts for a minority of the teams in Serval today. We talk so much about IT because IT is the buyer of this product of this category; they bring it into the organization and it spreads to other departments, to HR and finance and legal. 

“A typical customer of ours has 13 different departments deployed including IT, security, finance, legal, sales, operations. So, yes, we market towards IT, but IT is really the gateway into the organization.”

What impact does increased automation have on customers’ IT teams? “For a lot of companies, the most technical — and often most expensive –\— resource is the IT team. Yet they spend their day resetting passwords and moving people into groups. It’s a waste of their talent, of their capabilities. 

“Our customers find that when admins no longer have to do that work, they can deploy them across the organization. They can bring AI to different functions, and act as internally deployed engineers that build automations for the rest of the business. You’re enabling them to be builders versus ticket takers, and transforming the IT function from a service function to a building function.”

Do customers reduce IT headcount as they automate more of this work? “What we’re consistently seeing is redeployment, not reduction. Automation frees up admins’ time — in Perplexity’s case [a Serval customer], one to two hours a day per admin — and that time gets reinvested into building automations for the rest of the business: HR, finance, legal, security, and engineering. In a lot of cases, it’s less about IT shrinking and more about IT keeping pace with headcount growth everywhere else in the company without having to add staff of its own.

“Automation doesn’t mean admins step away entirely. They’re still verifying workflows and approving the ones that touch sensitive systems. What changes is that they’re doing that instead of manually resetting a password or provisioning a Slack channel for the hundredth time. 

“What we’re seeing is an unlimited demand for the skills that IT possesses, and so when tickets get automated and IT teams can build amazing tools in Serval, they become even more valuable to their organization, not less.”

Alzácká selfie tyč Eternico S700BT Max zlevnila na 763 Kč, méně dosud nestála. • Má silný magnet, vyjímatelný ovladač a po roztažení měří 167 cm. • Takto dlouhé modely jiných značek stojí více než tisíc korun.

Tima Cooka na pozici generálního ředitele společnosti Apple dnešním dnem nahradil John Ternus, který byl dosud odpovědný za hardware. Tim Cook vedl Apple od roku 2011, kdy funkci převzal od později zesnulého spoluzakladatele společnosti Stevea Jobse. Za 15 let v čele Applu více než zdvojnásobil tržní hodnotu firmy.

Letní prázdniny skončily, venkovní teploty konečně trošku polevily, obyvatelé a pracující ve střešních kancelářích to ale zaznamenají až s mnohatýdenním zpožděním. Nejinak je tomu i u nás v redakci uprostřed tepelného ostrova města a se střešními okny orientovanými k jihovýchodu. Zatímco Windy a ...

Microsoft is working to resolve a widespread Microsoft 365 disruption that has entered its second day, with search and other functions across Exchange Online, SharePoint, OneDrive, Teams and Microsoft 365 Copilot still affected despite the recovery of much of the Exchange Online mail flow.

The incident, according to a report published by the University of Pennsylvania’s IT department based on data from Microsoft’s admin console, began with Microsoft investigating an increase in user reports of Exchange Online problems at 11:55 a.m. UTC on August 31.

By 12:33 p.m. UTC, Microsoft said it had isolated a common failure pattern across affected Exchange Online requests associated with authentication and protocol connectivity, and was working on potential remediation options.

About an hour later, it said that a potential corrective action for the affected infrastructure had been identified and the nature of its deployment was being evaluated.

However, another hour later, it reported that the problem had extended beyond Exchange Online to other Microsoft 365 services, but stopped short of calling it a complete or total outage.

Instead, it listed a range of degraded or failed functions across services, including Exchange Online connectivity and search, SharePoint Online and OneDrive for Business search, file access, synchronization and content loading, Teams search, calendars and presence, and Microsoft 365 Copilot prompts requiring Microsoft 365 data.

A few minutes later, it listed 3:08 p.m. UTC as the official start time of that broader incident and soon attributed the root cause to “an issue within a core authentication configuration used by multiple Microsoft 365 services.”

Microsoft then spent the next few hours testing how to restore the affected authentication components and determine why they were not being deployed as expected. At 4:36 p.m. UTC, the hyperscaler said it was re-examining recent changes and exploring ways to safely restore the components, including potentially reverting an update received by affected infrastructure.

By 5:55 p.m. UTC, Microsoft said mitigation testing had produced positive results and that it was continuing to test and implement strategies to apply the necessary authentication component.

Later at 6:40 p.m. UTC, the hyperscaler began implementing a targeted mitigation to reapply core authentication components across a sample of affected infrastructure while reporting that some users were beginning to see recovery in certain impacted scenarios and that it would incrementally expand the mitigation.

Microsoft subsequently expanded the mitigation and began restarting targeted sections of infrastructure.

Mail flow recovers, but search remains affected

The recovery was not uniform for all affected enterprise customers immediately.

While Microsoft, by late Monday, was reporting widespread recovery of Exchange Online mail connectivity, it warned that some organizations could take longer to drain backlogged mail queues.

The company subsequently said it had validated persistent recovery of mail flow across the environment and shifted its focus to restoring search functionality.

That partial recovery did not, however, bring the broader incident to an end.

Microsoft continued working on search-related issues into Tuesday, restarting affected infrastructure and reapplying the targeted authentication-component fix across affected environments.

In its latest update at 2:39 a.m. UTC, the company said those efforts had “yielded progress,” with incremental improvement in service-health telemetry associated with search functionality across a sample of the affected environment.

It is still continuing the remediation across additional sections of infrastructure but the hyperscaler has not provided an estimated time for full resolution.

It has said that it would provide an estimated recovery timeline when one becomes available, leaving the duration of the disruption uncertain as the incident enters its second day. That for enterprises could delay routine business workflows and leave employees without access to critical information and tools until services are fully restored.

Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM jackpotting attacks. [...]

METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered "two notable security incidents" where external actors attempted to gain unauthorized access to its systems. No sensitive information is believed to

METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered "two notable security incidents" where external actors attempted to gain unauthorized access to its systems. No sensitive information is believed to Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]