Agregátor RSS

Cyberattacks on supermarket refrigeration systems reportedly pushed temperatures as high as 50°C (122°F), affecting hundreds of stores in France and forcing retailers to discard food. Major supermarkets such as Carrefour, Coopérative U, Intermarché, Monoprix, and more were hit by the attacks, which spoiled perishable food and left stores without fresh produce. The affected equipment includes cold-storage units used to hold food before it reaches supermarket shelves. The criminals behind the attack raised temperatures to unsafe levels, spoiling food and in some cases starting fires. Some affected retailers used refrigeration controllers produced by Danish company Danfoss. Authorities have not identified the entry point or confirmed exploitation of the vulnerabilities previously disclosed by Claroty and patched in August 2025, although the manufacturer said affected stores were running outdated firmware. Experts say the previously identified vulnerabilities were easily scriptable and relied on a unique but predictable authentication method. Claroty found a hidden authentication mechanism in the AK-SM 800A platform that accepted a code generated from the device's current date, bypassing the configured administrator password. Anyone who reproduced the algorithm could generate a valid daily code and gain administrative access. "It's a zero-skill thing to pull off, I wrote the bash script while having a shit," said security pro Kevin Beaumont. The research demonstrated how compromised controllers could expose refrigeration systems to physical disruption, although the vulnerabilities' role in this week's attacks remains unconfirmed. Danfoss told reporters this week that the French supermarkets affected by the attacks "were running outdated firmware" and that the company has consistently advocated for keeping systems updated. The Register asked Danfoss if it would confirm whether the previously disclosed bugs were exploited to execute the attacks, and whether the same bug was also abused in August to compromise US military commissary refrigerators, which led to food losses. CERT-FR published an alert reporting numerous compromises of Danfoss AK-SM and AK-SC controllers, which were not mentioned in Claroty's original reporting nor in Danfoss's advisories at the time. The authority advised disconnecting or restricting network access. For suspected compromises, it recommended a factory reset, security patches, credential rotation, account checks, and full reconfiguration. For those wondering why fridges even need to be reachable via the internet, the main reason is that it allows central engineering teams to troubleshoot issues remotely, according to Claroty's researchers. "Industrial control systems such as refrigeration controllers are often assumed to be on safely isolated networks. However, our research found many of these devices are directly exposed to the public internet," said Amir Preminger, CTO at Claroty. "While this convenience significantly reduces maintenance costs by allowing engineers to troubleshoot issues remotely, it also lowers the barrier to entry for attackers. "Organizations must take proactive measures to ensure that management interfaces are not insecurely connected to the internet, and ensure that access to administrative services is restricted to trusted management networks or secured through VPNs and other appropriate network segmentation controls." Intermarché owner Groupement Les Mousquetaires said around 150 of its supermarkets were affected by the attacks, while Carrefour confirmed around 80 impacted stores. Monoprix said roughly 5 percent of its 490 stores were experiencing the same issues, and Coopérative U CEO Dominique Schelcher said 80 of the company’s 2,000 stores were hit, adding that the attack on the food sector was “unacceptable.” “Targeting equipment essential to the preservation of fresh products is an attack on the French food supply chain,” he said. “It is unprecedented, extremely serious, and unacceptable. We remain fully mobilized.” However, in a separate twist, Schelcher told French radio station RTL on Tuesday that Coopérative U is not a customer of Danfoss. The Register contacted Coopérative U for more information about what caused the attacks at its stores. Shodan searches for internet-facing Danfoss controller interfaces indicated that more than 4,500 endpoints were exposed as of Monday, with more than half of those located in France. Ahold Delhaize, a major grocery retailer in the Netherlands, announced on the same day that it was experiencing a "security issue." No link to the refrigeration attacks in France has been established. The end result is similar, however, as the company's grocery brands are reporting stock issues. Several of the group's brands have taken their websites offline and posted notices about the "cybersecurity incident." Stores remain open, but affected brands have reported disruption to websites, apps, customer services, and online deliveries. The disruption hit the company's distribution systems, although these are now being restored. Updates posted to social media on Tuesday told shoppers that staff were once again able to use digital shelf labels but stock levels may vary across stores, and long-life items were likely to be more abundant than fresh fruit and vegetables. The retailer previously suffered a cyberattack in November 2024 that disrupted its US operations. ®

The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting point for a much

The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting point for a much [email protected]

Tenhle článek by v ideálním světě byly články dva. Jeden pro znalce dvojky, jeden pro nováčky. Vypsat změny mezi nimi je totiž v podstatě jednoduchý úkol. Začněme ale s těmi čtenáři, kteří dunění kol a hukot motorů série Transport Fever uslyší poprvé.

Microsoft has launched Decision-1, an AI model that returns probabilities for predefined answers, allowing software applications to use its outputs directly instead of processing a free-form response from a large language model (LLM).

The model targets tasks such as classifying requests, prioritizing incidents, and checking AI-generated responses. Microsoft says it can handle these decisions with lower costs and latency than approaches that rely on general-purpose LLMs.

“Instead of writing a free-form response, it takes a fixed set of answer options and returns a calibrated probability for each one in a single pass,” Microsoft said in a blog post.

Microsoft-Decision-1 is available through Microsoft Foundry and OpenRouter, according to the company. Microsoft built the model by post-training Qwen3.5-9B and said it plans to rebase it on other models, including Microsoft AI (MAI) and OpenAI models.

Model targets specific decisions

Decision-1 supports yes-or-no judgments, choices among predefined options, ratings, and rubric-based assessments of AI responses and agent actions, Microsoft said. Developers can use its outputs to classify inputs, rank work, verify responses, or determine the next action in an AI agent workflow.

Unlike a general-purpose LLM, which can generate explanations and other natural-language content, decision models return probabilities for the available answers. Microsoft said its Decision-1 model can also evaluate multiple decisions in parallel within a single request.

Microsoft cites benchmark results

According to Microsoft, Decision-1 achieved the highest accuracy in a comparison of 36 benchmarks covering nearly 150,000 questions kept blind from training. The company also reported that the model was about 2.5 times faster than the runner-up and 35 times faster than GPT-6 Sol.

Microsoft lists the price at 4.2 cents per million input tokens, with no charge for output tokens, according to the blog post.

In an incident-prioritization example, the company said a request using 86 input tokens and two output tokens cost approximately $0.0000036. At that rate, $1 would cover more than 275,000 similar decisions.

The benchmark results and cost calculations are Microsoft’s claims and have not been independently verified.

Charlie Dai, vice president and principal analyst at Forrester, said specialized decision models could reduce the cost and latency of agentic AI workflows.

“Routing, classification, and approval checks often represent a large share of agent interactions, so a specialized decision model can significantly reduce cost and latency while reserving general-purpose LLMs for reasoning and content generation,” Dai said.

Amit Kumar Jena, development manager for AI at Kanerika, said moving routine routing and approval checks away from large generative models represents a meaningful architectural change for enterprises scaling AI agents.

However, Jena cautioned against using Microsoft’s benchmark results to predict enterprise savings. He said organizations should measure “cost and latency per successfully completed workflow, including fallbacks and mistakes.”

Governance risks

Decision-1 returns scores but does not provide a rationale for each decision. Microsoft’s documentation also warns that results can change depending on how questions are worded, Jena said.

“My concern is that a precise-looking probability can give an uncertain decision more authority than it deserves,” he said.

Dai said the absence of reasoning can make decisions harder to explain, validate, and challenge. He recommended calibration testing, controls over question wording and score thresholds, audit logging, and human review for high-impact decisions, particularly when customer outcomes or regulatory obligations are involved.

Jena recommended beginning with reversible tasks, such as request routing and triage, and requiring meaningful human review for decisions that materially affect people.

The concerns center on how organizations interpret the model’s scores and use them to trigger actions. A probability assigned to an answer does not, by itself, explain the decision or establish that it is correct for a particular enterprise application.

The article originally appeared on InfoWorld.

A person claiming responsibility for the breach of Denmark's Central Register of Persons (CPR) says they gained access through an IT company's account protected by the password "123456." The person told Danish news outlet Politiken they had no intention of selling or leaking the data. The newspaper reported that at least three company accounts, including an administrator account, used the same password. Denmark's CPR administration confirmed a breach affecting the information belonging to 8.8 million people on October 5, adding that a Danish company's legal access to the CPR system was abused. It did not name Funen-based Pays ApS as the company in question, but managing director Sophie Laursen confirmed on October 9 that it's access had been exploited. Pays' website has been taken offline, and the business has not responded to The Register's request for more information about the password claims. Pays had authorized access to the CPR system to provide services such as validating business customers' records. The Danish government says information relating to 8.8 million people was accessed. The register contains approximately 11 million records, including those of deceased people and people who have moved abroad. The government did not respond to questions about the alleged password failings. According to documents obtained by broadcaster TV 2, the attacker gained access to the CPR system on September 10 and ran the 14 million automated searches between then and September 20. The intrusion was detected on October 2, 12 days after the last reported searches. Mikkel Leihardt, director of the government's higher education and science ministry, told reporters at a press conference that the attack was discovered after a department staffer picked up an invoice indicating unusually high activity from Pays. The Danish data protection authority, Datatilsynet, was notified on October 4, and the government disclosed the attack the following day. ®

Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware

Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Microsoft on Monday unveiled the Maia 300, its third-generation AI chip. According to Microsoft, the new chip will be optimized to handle the latest reasoning AI models and agents, which should result in lower operating costs.

“We expect Maia 300 to deliver 40% more tokens per megawatt compared to leading GPU-based systems,” said Scott Guthrie, Microsoft’s executive vice president for cloud and AI, in a blog post.

The chip’s predecessor, the Maia 200, was launched in January and now supports Microsoft Copilot workloads, with GitHub Copilot and Microsoft Foundry to follow by the end of 2026, the company said. Microsoft plans to deploy the Maia 300 after the turn of the year.

Microsoft

The Maia 300 will make Microsoft less dependent on AI chips from Nvidia and AMD as Microsoft shifts more workloads to its own AI chips, noted The Verge.

“We will scale our Azure Maia family to multi-gigawatt deployments starting in 2027, making Maia the primary inference system for Microsoft products and services,” Guthrie said.

This story originally appeared on Computer Sweden.

The world is advancing toward a future in which over 10 billion humans coexist with trillions of autonomous agents in a superintelligent universe. But as AI becomes more intelligent, humanity is being divided into those who can access intelligent tools and those who will remain isolated from one of the greatest technological revolutions in decades.

As a response, Tether is building powerful infrastructure across AI, communication, finance, and neurotechnology for a future that doesn’t exclude people based on geography or wealth.

AI should be the great equalizer, but is it?

AI brings a powerful technology to the global population, currently around 17.8% of the world’s working-age population, according to Microsoft’s Global AI Diffusion report. However, access to its benefits remains uneven.

Economies with the largest quarter-over-quarter gains in AI adoption include the United Arab Emirates, with Singapore and the North Atlantic following behind. Despite a growing wealth and intelligence gap, with barriers around cost, privacy, and availability, AI adoption continues to grow in the world’s leading economies.

Between H2 2025 and Q1 2026, the rate of AI adoption grew more than twice as much in the Global North compared to the Global South. The disparity reflects persistent structural barriers in the Global South, including limited access to reliable electricity, internet connectivity, and digital skills.

Machine translation research has largely focused on Asian and European languages with large quantities of training resources. Meanwhile, African languages spoken by hundreds of millions of people remain relatively neglected compared to their high-resource counterparts. As long as these languages remain underserved by AI tools, African adoption of the technology risks falling even further behind.

To help advance machine translation across 19 Sub-Saharan African languages, Tether has developed TranslatePsy-AfriSLM, a free collection of open-source AI resources. At just 800 million parameters, the model is small enough to run comfortably on most smartphones, enabling it to deliver courses, educational content, scientific material, and AI-powered learning tools to traditionally excluded populations in their own languages.

Technology that gives all humans access to intelligence

Over the past several years, Tether has developed and invested in AI, energy, and communications, building the systems that let humans and machines work at scale, without depending on a handful of gatekeepers. This includes Keet, brain-computer interfaces (BCI), and investments in robotics.

While many people still view Tether as a stablecoin company, it prefers to describe itself as an infrastructure provider. “It’s been a while since we’ve considered ourselves crypto,” Tether CEO Paolo Ardoino said in a recent Fortune interview.

Tether is building technology that empowers governments, businesses, and individuals alike, developing universally accessible AI that is modular enough to be embedded in the fabric of any device, system, or environment.

Alongside neurotechnology, P2P communications, and robotics, Tether has developed QVAC, a cloud-free AI platform that grants users full control over their data.

Enabling peer-to-peer connections between devices, QVAC operates directly where it is needed, without intermediaries. There are no subscription fees, no vendor dependencies, and no data leakage. Open-source language models can be integrated via QVAC Fabric using a dedicated SDK or the QV.AC app. The inference runtime and fine-tuning framework let you execute, train, and personalize models directly on everyday hardware, including off-the-shelf GPUs, laptops, and smartphones.

Privacy-first infrastructure that lets users run AI locally without routing everything via centralized data centers is needed to build a more sovereign digital future.

This means making AI more accessible, more resilient, and not exposing vast quantities of personal data to a handful of giant cloud providers.

Follow Tether’s updates on AI and subscribe to the QVAC newsletter.

Vývojář Carmine Paolino byl nespokojený s klientskou aplikací Spotify pro počítače. Běží na frameworku Electron, spolkne klidně gigabajt operační paměti a není ani příliš svižná. Navrhl proto vlastní přehrávač Spotifast, který si řekne jen o zhruba 250 MB. Je napsaný v rychlém Rustu a ke stažení ...

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data [email protected]

S nástupem pokročilých AI agentů internet doslova zahltily tisíce zvajbovaných webových prográmků všeho druhu. Mnohé z nich jsou zbytečné a duplicitní, o dalších se nikdy nedozvíte, že vůbec existují. V záplavě novodobého spamu se ale občas najdou i velmi povedené kousky. Jedním z nich je čerstvý ...

The owner of Hobbs, Phase Eight, and Whistles is the latest fashion retailer to suffer a cyberattack, leaving several IT systems offline and customers facing order delays. South African retail giant The Foschini Group (TFG) confirmed on Tuesday that its UK business, TFG London, discovered a cybersecurity incident on October 11 that affected all three brands. Two days later, several systems remain unavailable, and the company is still trying to establish whether any personal or sensitive information has been compromised. The incident hasn’t forced stores to close, but TFG said some website functions may be unavailable. Customers have also been warned that orders placed on or after Sunday could be delayed, according to an email seen by The Telegraph. "Stores are open as normal but some of our brand's website capabilities may not be available as the investigation continues," the company said. "We apologize for any disruption and will provide additional updates to our customers as appropriate." TFG said it immediately activated its incident response and business continuity plans, brought in external cybersecurity specialists, and notified the relevant UK authorities. A spokesperson at the ICO told The Register: “We can confirm we have received a breach report from TFG Brands (London) Limited and we are assessing the information provided.” There is at least some good news for shoppers worried about their payment details. In an email to customers, TFG London said a third-party provider handles payment processing and that, based on its investigation so far, it has no reason to believe payment information is at risk. Whether other customer data has escaped into the wild is another matter. TFG said it is still investigating that possibility and will notify affected individuals or organizations if it finds evidence of a compromise. The company has yet to disclose how attackers gained access, whether ransomware was involved, or when it expects to have its systems fully restored, and did not respond to The Register’s questions. The disruption appears to be confined to the three fashion brands. TFG said its White Stuff and Inside Story businesses are unaffected, as are its operations in Africa and Australia, which run on separate IT systems. The attack comes during a particularly miserable spell for fashion retailers, which seem to be attracting cybercriminals almost as enthusiastically as shoppers chasing a sale. Last week, ASOS customers received an unexpected notification informing them that the online fashion retailer had been hacked. ASOS subsequently confirmed that an attacker had gained access to an employee account by impersonating a trusted contact and obtaining login credentials. Armed with those credentials, the attacker got into third-party platforms holding customer names and contact details. Meanwhile, H&M is reportedly investigating claims that it was targeted by the notorious ShinyHunters cybercrime group. According to The Times, the Swedish fashion giant is examining allegations involving a limited amount of company data, although it stressed that it had found no indication its systems had been compromised. No evidence currently links the incidents at TFG London, ASOS, and H&M, and the latter has not confirmed a breach. Still, with three major fashion businesses linked with cyber trouble in little more than a week, October's hottest retail trend appears to be incident response.®

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les MousquetairesSwati Khandelwalhttp://www.blogger.com/profile/[email protected]

V novém Outlooku je nyní k dispozici klasický vzhled. • Imituje původní Outlook, který Microsoft postupně opouští. • Kromě vzhledu nový Outlook zůstává stejnou aplikací.

Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected