Agregátor RSS

Nextcloud has developed a desktop app for its Euro-Office-based productivity applications, filling a gap in the software suite that it pitches as a sovereign alternative to Microsoft Office.

Nextcloud, one of the backers of the Euro-Office initiative, integrated the software into its Nextcloud Office suite in June. Until now, it’s been accessible via a web browser or mobile app.

The new desktop client lets users edit documents, spreadsheets, and presentations locally, and sync files online for collaborative editing. It will be available for Linux, macOS, and Windows in the coming weeks.

“For organizations and individuals who prefer a traditional desktop experience, this closes one of the last gaps between Euro-Office and Microsoft Office, without handing control of their data to a non-European vendor,” Nextcloud said in a press release.

Rather than a standalone application suite, Euro-Office is designed as an integration component that’s embedded into productivity applications, such as Nextcloud Hub. Euro-Office handles document editing, while other elements such as storage and permissions managed by the wider platform.

The open-source project, which is built on OnlyOffice’s codebase, is backed by Nextcloud as well as Eurostack, Ionos, Office.eu, Proton, XWiki, and others. More than 40 individuals have contributed code to Euro-Office, according to Nextcloud, with around 15% of contributions from outside of the organizations directly involved in project.

Euro-Office supports OOXML file formats for compatibility with Microsoft Office, as well as OpenDocument Format (ODF) files, including ODT, ODS and ODP. The Document Foundation, which is responsible for development of LibreOffice, another open-source productivity suite, has previously questioned the Euro-Office initiative’s preference for Microsoft file formats over ODF.

Organizations using Euro-Office include Germany’s Deutsche Telekom Security and Destek, a Turkish IT consultancy, according to Nextcloud. Other customers in countries such as France, Switzerland, and Philippines are currently evaluating the software.

But it’s still early days for Euro-Office. Open-source software initiatives often face a challenge in gaining traction among a broad enterprise audience, said Martha Bennett, VP and principal analyst at Forrester.

“Euro-Office hasn’t really proven itself at the kind of scale that large enterprises are looking for. That’s of course not unique to Euro-Office; all potential open-source alternatives face the same issue,” she said.

“Obviously, it’s a bit of a chicken-and-egg situation — without somebody taking the leap, it’s not possible to provide that proof.”

Nextcloud Hub Summer 26 updates

Among the other announcements with the Summer 26 updates are changes to management of teams within Nextcloud Hub. An updated Nextcloud Teams app, which is now available in the app menu, provides users with an overview of the teams they belong to. Each team features a folder with shared resources such as files and tasks, which Nextcloud notes is similar to Microsoft’s approach with Teams and SharePoint.

Nextcloud now also enables the creation of team-owned files, starting with Nextcloud Collectives and Deck, with additional apps in future. The aim is to ensure that all team members can access a file, even if the creator leaves the team workspace. For admins, there are new tools to view and manage team folders, including configuring storage quotas.

Among the other announcements are updates to Nextcloud Text — a lightweight text editor available across several apps — with version comparisons, footnotes, and references available throughout a document, and inline comments. Nextcloud Tables, a database app, now has relational columns that link data in cells across multiple tables, and the ability to import and export table structure — such as columns, views, and table-based apps — without changing data.

With Nextcloud’s AI Assistant, users can now upload an image and ask questions about it or translate text, while the chatbot will also recall information across conversations.

UI improvements include a revamped search experience that displays results from across Nextcloud Hub files, messages, and events, with filter options such as date range and people. App menu icons have been updated to make apps easier to recognize, and new animations throughout the interface make navigation and interactions “feel more fluid and easier to follow,” said Nextcloud.

AWS is betting that AI agents need a different interface as they move beyond answering prompts and start working autonomously in the background.

The company has open-sourced Pizza Bot, a self-hosted application that gives users an inbox for managing work delegated to AI agents, with separate threads for ongoing tasks and a queue for work that is completed or needs human input, rather than keeping the management of agents restricted inside a conventional chat window.

The rationale, according to AWS, is that background agents do not always need a user’s attention while they work, and an inbox model will let users hand off longer-running tasks, return to them later, and see which jobs are complete or require intervention.

Under the hood

That approach is reflected in how the inbox organizes work with the help of an “All” tab that contains the history of each task or conversation, including the agent’s messages and work performed, the “Unread” tab that flags completed work that users have yet to review, and an “Action” tab that surfaces tasks paused while waiting for user input or approval.

The inbox interface also has a panel named Activity that shows users how an agent handled a particular task along with the transcript, AWS wrote in a blog post introducing Pizza Bot.

AWS’ inbox-oriented rationale also extends to Pizza Bot’s architecture.

It uses LangChain’s Deep Agents as the harness and LangGraph as the stateful runtime, with a combination of the two allowing an agent to checkpoint its progress as it works, preserving its messages, tool activity and current state so a task can be paused and resumed rather than being tied to a live chat session, the hyperscaler wrote.

Pizza Bot’s server sits on top of that stack, connecting the agent runtime with the user interface, skills, MCP servers and the model provider, with developers able to choose from Anthropic, OpenAI, Google Gemini and Amazon Bedrock, as well as local models through Ollama, it added.

As for its out-of-the-box capabilities, the application comes with skills for working with files, browsing the web and delegating tasks to specialist agents. Developers can also add existing Agent Skills and MCP servers to give the agents access to other tools and services, the hyperscaler wrote.

Enterprise integration could remain a hurdle

However, analysts were not too convinced that Pizza Bot’s out-of-the-box skills and support for existing tools will make its implementation easier for enterprises.

While the out-of-the-box capabilities and added support for existing skills saves enterprise teams the time to build the application, it leaves out the integration work required to make it work, said Bhupendra Chopra, chief revenue officer at IT consulting firm Kanerika.

“Integration is where most of the money in an enterprise agent deployment goes. A sales or finance team gets value from an agent when it can read and update CRM, email and ERP, and each of those systems needs a connector someone has to build, secure and maintain,” Chopra pointed out.

Pizza Bot’s integration could be further complicated by the application’s lack of support or any SLA, according to Manoj Chandra Jha, principal analyst at Nord-IQ Research. That means the integration and operational burden ultimately falls on enterprises, who would be responsible for running, securing and maintaining the open source software themselves, Jha said.

Rise in enterprise productivity likely

But for enterprises willing to take on that integration work, the inbox-oriented approach could improve productivity.

“It’s a meaningful shift because it changes the economics of delegating work to agents. A chat interface requires a person’s attention throughout the task, while an inbox brings them in only when their judgment is needed, much like how executives delegate work to their teams,” Chopra said.

“Coding agents have already demonstrated this model, where an engineer assigns an issue and reviews the resulting pull request. Pizza Bot extends that approach to tasks such as meeting preparation and follow-ups,” Chopra added.

Further, the analyst pointed out that the inbox-oriented approach could give enterprise teams a clearer window into how scheduled tasks perform.

“For scheduled tasks, having the results delivered as threads gives users a way to track what happened in the background and spot failures that might otherwise go unnoticed,” Chopra said.

Out of sight, out of mind

There are risks with this approach, however: “The inbox model can make bad work less visible. When somebody is watching an agent in a chat window, they can see it going off the rails,” said Phil Fersht, CEO of HFS Research.

In contrast, when hundreds of tasks are running quietly in the background, users may not see an agent making mistakes until the task is complete or an exception requires their attention, potentially making problems harder to catch early, Fersht said.

That reduced visibility can also create approval fatigue, according to Chopra.

“An agent sending back dozens of threads with multiple approval requests can condition users to approve them without reading them closely,” Chopra said.

There is also a risk in the delay between an agent preparing an action and a user approving it: “Information that was current when the agent paused may no longer be valid hours later, potentially resulting in an outdated CRM update or a meeting invite for a slot that is no longer available,” he said. “An assumption that might be caught in a live chat can go unchallenged as the agent continues building on it and consuming model resources. Scheduled runs can also add costs without anyone watching them in real time.”

Those disadvantages can be countered by designing processes with fewer, better-timed approval points, and verifying that the underlying data is still current before allowing an action to execute, he said.

Adoption likely to start with technical teams

Such tradeoffs are likely to shape where Pizza Bot gains traction.

“Adoption will likely be bottom-up, with individual technologists and small platform teams drawn to Pizza Bot’s control and standards-based design,” Jha said. “Risk-averse industries, especially ones in the regulated sectors, and business users with limited technical expertise, however, are likely to approach the application more cautiously,” he added.

That could leave Pizza Bot occupying a more targeted role in the enterprise, as a way for technical teams to experiment with asynchronous agents and new ways of delegating work, rather than an immediate replacement for the governed interfaces and managed services enterprises typically use for business-critical processes, he said.

This article first appeared on InfoWorld.

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote attacker to execute arbitrary operating system (OS) commands by taking advantage of a hard-coded Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Apple si se skládacím iPhonem dal pořádně načas, výsledek ale stojí za to • iPhone Duo působí luxusně, má displej takřka bez ohybu a skvěle navržený systém • Kompromisem může být fotoaparát či výdrž, nepotěší ani celkem vysoká cena

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

The fight against AI slop is real, even in photography, which is why Apple introduced its Reference Image tech alongside its new iPhones. This shifts image verification to the moment of capture, creating a privacy-preserving digital negative that could help newsrooms, businesses, and individuals prove that images are real. Apple’s Security Research team just shared a white paper explaining how it works.

What is Apple Reference Image?

Introduced alongside the new iPhone 18 Pro series, Apple Reference Image is designed as a process to help prove the authenticity of images captured using that phone. Like so much in Apple, it’s a combined hardware/software feature that means when an image is captured, the camera also captures unalterable Reference Image data, with help from Private Cloud Compute, Apple’s cloud intelligence system.

That help means Apple thinks it now offers a system that protects image provenance to the extent of providing quantum-secure defense. The need to protect digital assets such as images from quantum-based abuse will become increasingly important as more state and state-adjacent adversaries seek out new ways to undermine security and do harm. Apple quite clearly considers that looming threat to be real; in 2024 it introduced encryption to protect iMessage against future attacks using quantum computers.

How do we use Reference Image?

Apple is reaching out with this tech, including providing APIs for iPhones, iPads, and Macs that third-party developers can use to build support for Reference Image into their apps. 

Otherwise, Reference Images can be viewed in the Photos app beside the main image, acting like a digital negative to enable visual comparison of both images. The idea is that the existence of this digital negative acts as a tool to prevent people from passing off edited or AI-altered images as being genuine pictorial narratives of events.

This will be useful in multiple situations. In the media, a news desk may turn to the feature to verify if an image is genuine or fake, while in the enterprise the tool provides a useful proof point when assessing images that relate to any workflow — that picture taken in the stock room may now be more useful as proof that stock is in hand, while a car hire firm may find it easier to prove damage during a rental period by verifying the pic. The main thing it does is help you identify changes in an image, whether those changes were wrought by human or AI.

Why Apple built this protection

Apple’s newly published white paper explains how it works and how the system is built to endure against interference, particularly as AI images are becoming increasingly convincing. After all, as digital enters most camera workflows at the sensor, proof of algorithmic activity isn’t necessarily enough to show an image has been altered out of its photorealistic beginning. It must be said that at this point we only have Apple’s word for the effectiveness of the solution, but I’m inclined to think it will be borne out.

Enter Apple Reference Image, which acts as a “chain of trust,” one the Apple team says is stronger and more enduring than existing approaches based on the Coalition for Content Provenance and Authenticity (C2PA) standard. Apple believes the C2PA approach remains too vulnerable because it is deployed after image capture and also creates a privacy risk by attaching images to public identity. You don’t have to look too far for instances in which photojournalists have been targeted by hostile forces once their identity has been realized, and the C2PA system arguably adds to that risk.

“Other industry solutions require a photographer or institution to vouch for an image using their own credentials,” the white paper explains. “We are concerned this puts some photographers, such as those operating in conflict zones, in a difficult position; it should not be necessary to forgo anonymity in order to prove image authenticity.”

Apple’s system is designed to kick in as images are captured, when a photographer can choose to create a securely timestamped reference image that accurately reflects what was captured by the iPhone’s camera sensor. The creation process leans into the powerful iPhone processor and also Apple’s Private Cloud Compute.

A little insight into how it works

As the image is captured, the iPhone cryptographically signs pixel data immediately after capture, which shows the image to be an exact depiction of what the camera sees. The system also captures relevant metadata, including use of the Secure Enclave on iPhone to ensure some values.

That means that the Reference Image now carries deep insight into the original, down to an unchangeable record of metadata. Not only can you see the image matches, but you can ensure the metadata is also the same. Furthermore, the image is also timestamped with a value taken from Apple’s own cryptographic timestamp service. Pull it all together and the digital negative is packed with verifiable, trusted data that can be contrasted with an image you want to check. 

There’s much more to this system, which Apple has built to be resilient to compromise while also protecting the privacy of the photographer. Instead of requiring the photographer act as the point of proof, Apple’s own Private Cloud Compute servers play the role by cryptographic signing of the image. 

“The result is a verification model that offers photographers, newsrooms, and everyday users renewed confidence that an image they’re viewing is a photograph actually captured by a camera,” the company said. It is, I think, also interesting to consider how Apple’s newly introduced tool for cryptographic proof could potentially be applied elsewhere.

The caveat is that the protection only extends to the main camera of the iPhone 18 Pro family and is not retrospective. It won’t be available in China on launch, while in the EU you can develop and view reference images but not create them.

Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.

Seznam vyhrál v soudním sporu nad Filipem Turkem. • Ten firmu nařkl z porušování listovního tajemství. • Nepředložil však důkazy, takže se musí omluvit a zaplatit soudní výlohy.

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge, Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Na geoportálu ČÚZK si už můžete prohlédnout čerstvé letecké snímky z letošního mapování. Český úřad zeměměřický a katastrální si nechává fotografovat Česko vždy střídavě po vlnách. Jeden rok Moravu a východní partie Čech, druhý Prahu a zbytek Letos přišla řada právě na střed a východ republiky, a ...

The ransom itself can be only a fraction of the total cost of a ransomware attack, with downtime, recovery, remediation, and legal obligations adding millions to the bill. Datto explains how a mature BCDR strategy can reduce downtime and provide a faster, more predictable path to recovery. [...]

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Microsoft says it's still investigating a known issue that causes the Copilot and Copilot Chat buttons in Classic Outlook to disappear for some Windows users. [...]

The first hours after discovering a Google Workspace breach can determine how an incident unfolds. This webinar examines real-world breaches to show which early response decisions can limit the impact and which can make matters worse. [...]

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud [email protected]

Spain’s data protection agency (AEPD) has reported the country’s first-ever personal data breach caused by the actions of an autonomous AI agent. Francisco Pérez Bes, president and deputy of the AEPD, said in a Monday blog post that an individual deployed an AI agent that used a “known large language model (LLM)” to carry out the attack on an organization. The agent scanned “generic files” before accessing the organization’s system, then ran vulnerability scans to find flaws that would give it read/write access to files containing personal data and invoices. Pérez Bes did not name the LLM used to support the attack, but said whoever was behind it used the agent to “successfully chain together different phases of the attack.” This demonstrates that AI-supported attacks are no longer theoretical, he added, and called on organizations to embrace defense tools that are capable of keeping pace with the speed at which agentic attacks can be executed. “Human supervision remains essential, but it must be supported by detection, containment, and response mechanisms capable of operating quickly enough,” said Pérez Bes (machine-translated). “The arrival of AI agents in the offensive arena should prompt an immediate review of security and data protection models. “Data protection officers, managers, and delegates must prepare for a scenario in which the speed of attacks will increase, but in which the same fundamentals will continue to be crucial: Understanding the processing activities, minimizing data, limiting access, correcting vulnerabilities, controlling suppliers, and being prepared to respond.” The Register asked AEPD for more information. Spain’s first AI agent attack comes as the AEPD recently recorded its busiest year for data protection complaints. According to its most recent annual report, covering 2025, the agency received 30,931 complaints – the most in its history – representing a 64 percent increase compared to the year before. And although Spain is only now getting its first taste of a security mishap caused by a naughty agent, cases involving the foremost US AI houses are already heavily documented. OpenAI’s claim in July that its agents escaped a sandbox and started attacking Hugging Face kickstarted something of a battle between it and rival Anthropic over whose agents could take the most liberties with their security. Both companies have reported several instances of their agents going rogue, escaping "secure" environments and going walkies across the internet to attack unwitting organizations. OpenAI has been circumspect about the true scale of its rogue agents’ damage, as third-party reporting showed more websites than it was letting on were taken over. Similarly, Anthropic has said that its AI agents had, in four cases now, accessed third-party systems in attacks that, if carried out by a human, could see them convicted under computer laws. ®

Hlídač cen najde slevy ve vyhledávačích a e-shopech. • Na Heurece už nebudete muset produkty hledat a porovnávat ručně. • Rozšíření pro Chrome dbá na ochranu soukromí a nesleduje uživatele.

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AI-assisted exploitation to accelerate the path from exposure to breach faster than most security programs are built to react. [email protected]

Bezdrátová sluchátka jsou skvělá. Ale mají i spoustu nevýhod, o kterých byste měli vědět a připravit se na ně.