Agregátor RSS

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Telefon pro děti by měl nabízet jen základní aplikace, jako jsou telefon, zprávy nebo fotogalerie. Specializovaných telefonů je málo, především jsou ale nekvalitní. Dobře může posloužit starý iPhone.

CZC nabízí iPhone 16 za 16 615 Kč, sám Apple chce 23 tisíc. • Momentálně jde o nejvýhodnější jablečný telefon, i slabší iPhone 17e je dražší. • Šestnáctka skvěle fotí, má hezký displej, dost výkonu i slušnou výdrž.

VMware has discovered so many flaws in its products using AI that it felt the need to create a new product to help users manage them. Prashanth Shenoy, vice president of product marketing in the VMware Cloud Foundation (VCF) division of Broadcom, told The Register that VMware recently moved to deliver monthly software updates, in part to address bugs found by AI. He admitted, however, that users struggled to keep up with the pace of change before the move to monthly releases because it takes time to test the impact of patches – even though VCF allows non-disruptive live patching. Shenoy said customers therefore need "room to breathe." Enter a new tool called HyperArmor, which does three things. One is "virtual patching" – blocking attempts to exploit a vulnerability without changing the vulnerable software itself. VMware already offers virtual patching in its vDefend network security product and explains how it works by referring to CVE-2024-5806, the bug in file transfer tool MOVEIt that made waves in 2024. VMware says vDefend can detect patterns associated with attempts to exploit the authentication bypass flaw and block the traffic. HyperArmor will do similar things to block malicious traffic heading toward VCF implementations. Another job HyperArmor takes on is rejecting any actions that alter known good states in VCF. If a human approves a change, the tool will update policies to allow the altered state. The third job is multi-factor authentication (MFA). The Register put it to Shenoy that MFA is now table stakes for security. He agreed but explained that VMware designed HyperArmor to protect against attackers using stolen privileged credentials to access VMware's ESX hypervisor. To (hopefully) stop attackers using those creds to take over a host, HyperArmor requires users to input SSH credentials and a secondary time-based one-time password sent to a user with a verified identity. HyperArmor is a discrete product that VMware will sell as an add-on to VCF. That means VMware thinks its customers are going to be OK paying extra for MFA. While VMware will sell HyperArmor, it didn't create the product. Broadcom's security businesses Symantec and Carbon Black cooked it up. Broadcom's CA business (formerly Computer Associates) has done similar things. At VMware Explore on August 31, Broadcom launched AgentMinder, which aims to stop AI running inside VCF going rogue. AgentMinder came from CA but was launched as a tool for VCF (and third-party Kubernetes stacks). At VMware Explore, The Register met Ram Velaga, president of Broadcom's Infrastructure Software Group, and asked him if the group has a single strategy, or if its divisions each do their own thing. Velaga said Broadcom uses a combination of both approaches. "There's a level of focus with individual teams that you don't have if you have one very large central team," he said. "You get the speed at which you have to innovate with individual teams." Broadcom's Infrastructure Software Group therefore operates with at least six teams, and when one of those teams wants to add functions it will look for existing assets developed by another internal team rather than trying to write its own code. For broad products like VCF, the work of several Broadcom teams could therefore be relevant. The Register has no idea which team created the name HyperArmor, a question we pose as Cisco already offers a "Hypershield." Maybe this sort of name is what's needed to stop a HyperHoodie? ®

Koupíme si mobil, ale o softwaru a spouštění aplikací rozhoduje jeho výrobce • Operátor má zase pod palcem síťové funkce • Konfigurační soubor určuje, co telefon zvládne, a co mu zůstane zapovězeno

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa. The preinstalled

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa. The preinstalled Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Francouzská jaderná ponorka Le Vigilant poprvé úspěšně odpálila raketu M51.3 • Modernizovaná třístupňová střela na tuhé palivo zasáhne cíle v Atlantiku • Úspěšná zkouška potvrdila připravenost francouzských strategických sil

Už se zdálo, že se Google vzpamatoval a problémy, se kterými se potýkal na jaře, jsou minulostí. Opak je nejspíš pravdou, neboť se vyrojily zprávy o dalších potížích…

Stát Kalifornie zažaloval výrobce 3D tiskových filamentů Polymaker. Vrchní soud San Diego County tvrdí, že firma propagací svých výrobků mezi příznivci 3D tištěných zbraní podporovala výrobu takzvaných 'ghost guns' (DIY zbraní) a že její PLA filament pro 3D tiskárny lze za těchto okolností považovat za součást určenou k výrobě střelné zbraně. Žaloba požaduje mimo jiné finanční sankce a soudní zákaz činnosti, Polymaker se hájí tím, že filament je běžný a sám o sobě legální produkt. Celý text žaloby (PDF na Google Drive).

V červnu byla představena aplikace Myna pro převod řeči na text v prostředí desktopu Ubuntu. Včera byla Myna zpřístupněna širší komunitě Ubuntu formou technologické ukázky dostupné v Ubuntu 24.04 LTS, Ubuntu 26.04 LTS a Ubuntu 26.10 s GNOME na Waylandu.

An attacker could log in as another user without passing the password or signature checks meant to stop them.

You do not have to run an untrusted program for it to become dangerous.

A local user with no write permission changed a root-owned file's contents in a published XFS demonstration.

An unauthenticated visitor could make an affected WordPress site permanently delete content already in its trash by submitting a public form.

Na účet vám nečekaně přijde třeba 20 000 korun a vy nevíte proč. Máte peníze vrátit, nebo počkat, až se někdo ozve?

Notářský zápis se svolením k přímé vykonatelnosti má věřitelům i pronajímatelům ušetřit soudní řízení. Jenže nemusí vždy fungovat. Nejvyšší soud upozornil na jeho limity při vymáhání dluhů a otazníky zůstávají také u vyklizení bytů.

Na letošní konferenci LinuxDays se mluvilo o tom, že se komunikační protokol XMPP a souborový systém Ext4 stále rozvíjejí. AI může nejen škodit, ale může také pomáhat v medicíně a navracet lékařům lidskost.

Už jsme si vysvětlili všechny důležité koncepty. Nastává tedy ideální čas pro to, abychom vykreslili první skutečnou 3D scénu. Začneme jednoduchým příkladem, konkrétně zobrazením krychle reprezentované drátovým modelem (wireframe).