Ma veille technologique au quotidien.

Article URL: https://blog.cloudflare.com/agents-week-welcome/ Comments URL: https://news.ycombinator.com/item?id=49146982 Points: 3 # Comments: 1

Article URL: https://uphillsecurity.com/articles/harvesting-ssh-credentials-insights-from-my-honeypot-network/ Comments URL: https://news.ycombinator.com/item?id=49146605 Points: 4 # Comments: 0

Try DGX Spark playbooks using Nix on DGX OS, or install NixOS on your DGX Spark for the full Nix experience. The repository provides USB images and a NixOS module with settings for DGX Spark systems.This works on the NV…

Let's see how this "frontier community for techno-optimists" is doing ...

Article URL: https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/YPJ3FQYJTJXXY3RUXCYLMHUKHLIUNVFF/ Comments URL: https://news.ycombinator.com/item?id=49146238 Points: 34 # Comments: 7

Article URL: https://github.com/wie-project/kakehashi Comments URL: https://news.ycombinator.com/item?id=49145937 Points: 56 # Comments: 21

Article URL: https://blog.juni-mp4.com/posts/42/rooting-the-tplink-tl841n-pt1/ Comments URL: https://news.ycombinator.com/item?id=49145883 Points: 30 # Comments: 1

When Microsoft announced its latest round of Xbox price bumps in June, it only gave US pricing. Now we know the pricing increases for the EU and UK, and they're dramatic. Depending on the model, Xbox prices are increasi…

Welcome back to TechCrunch Mobility, your hub for the future of transportation and now, more than ever, the role AI is playing in it.

Article URL: https://pudding.cool/2026/07/essential-words/ Comments URL: https://news.ycombinator.com/item?id=49145590 Points: 120 # Comments: 60

Despite predictions that AI agents could make traditional apps obsolete, developers are shipping new software faster than ever. From smarter bookmarking tools and neighborhood marketplaces to digital pen pals and nature…

Article URL: https://www.ursulakleguin.com/a-rant-about-technology Comments URL: https://news.ycombinator.com/item?id=49145201 Points: 112 # Comments: 63

Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine. [...]

Fenix Flexin is best known as a member of Shoreline Mafia, a rap duo from Los Angeles. But he's recently found solo success with the track "Rubberz," which has climbed to number 58 on the Billboard Hot 100. Almost immed…

Article URL: https://www.riscosopen.org/news/articles/2026/06/20/twenty-years-of-risc-os-open Comments URL: https://news.ycombinator.com/item?id=49143967 Points: 111 # Comments: 18

Article URL: https://fstar-lang.org/ Comments URL: https://news.ycombinator.com/item?id=49143925 Points: 99 # Comments: 32

Article URL: https://www.ycombinator.com/companies/great-question/jobs/YutDxyf-senior-demand-generation-manager Comments URL: https://news.ycombinator.com/item?id=49143683 Points: 0 # Comments: 0

Article URL: https://meshdiff.com/ Comments URL: https://news.ycombinator.com/item?id=49143479 Points: 143 # Comments: 13

Keep your logins locked down with our favorite password management apps for PC, Mac, Android, iPhone, and web browsers.

Hi HN! I've been working on the fuse programming language, it's a statically typed purely functional language with higher-kinder types and ad-hoc polymorphism. It compiles to the GRIN whole-program optimizer, producing…

From how galaxies form to the beginnings of the universe, the images from the space telescope are giving cosmologists new data to explore—and theories to build out.

These portable vacuums make quick work of snack crumbs, tracked-in dirt, pet hair, and the mysterious debris beneath your seats.

Article URL: https://blog.rust-lang.org/inside-rust/2026/07/31/all-hands-2026-retrospective/ Comments URL: https://news.ycombinator.com/item?id=49143096 Points: 61 # Comments: 26

Everything you need to know about the solar eclipse and lunar eclipse that will occur in August 2026.

Article URL: https://publicdomainreview.org/essay/ars-notoria/ Comments URL: https://news.ycombinator.com/item?id=49143001 Points: 98 # Comments: 24

Your kid’s little lunch hauler takes a brutal beating every day. These are the backbacks our own kids have tried and loved.

New EU rules stipulate that people must be told when they’re interacting with AI or looking at AI-generated or -edited content, leading to fear of “disclosure fatigue.”

As more big companies invest in glasses that record audio and video and pack AI on board, privacy concerns are only getting louder.

AboFlah talks about his new goals, streaming for charity, and when it’s time to log off.

Tom Evslin on Bill Gates, the birth of Exchange, and dragging Ma Bell onto the web

Cloudflare recently introduced Meerkat, an internal globally consistent control-plane service based on the QuePaxa consensus algorithm. Unlike Raft, it allows leaderless writes while preserving strong consistency, impro…

Android Headlines claims to have the specs and price for the entire Pixel 11 lineup. What the site shared basically lines up with everything else that we've heard in the lead-up to the August 12th event. The Pixel 11 is…

How one founder house is betting work-life balance can beat burnout .

Despite a lawsuit from xAI, a Minnesota ban on apps that allow users to “nudify” images can move forward.

Angela Nissel's latest book, Good Grief, Pass the Bread, Mom Is Dead, is my kind of memoir. Sure, it's a deeply emotional tale about caring for a terminally ill parent. But it's delivered with the sort of gallows humor…

Green offered a remarkable apology, saying that "the level of dopamine that I've been getting from interacting with LLMs ... is not healthy for me or good for the world."

Apple's new Upgrade program is the latest sign that smartphone ownership is changing.

"We believe that a capture of Swift, an attempted capture of Swift, is very much in the cards."

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-o…

OpenAI's CEO seemed excited to share a "cool use case" for parents.

A bootleg of Spider-Man: Brand New Day was up on X for over seven hours before eventually being pulled. During that time, it reached over 5.9 million accounts and accumulated over 143,000 likes. Other accounts have repo…

This $9 NFC key requires you to physically scan it to unlock distracting apps on your phone.

The FBI, the EPA, and the Cybersecurity and Infrastructure Security Agency (CISA) have stopped short of officially blaming Iran for a spate of cyberattacks on Minnesota's water systems, but consensus is that Iran is lik…

Christopher Nolan's impressionistic remix of Homer's epic poem finds the man behind the myth.

Uber has partnered with — and in some cases made direct investments in — about 30 autonomous vehicle companies over the past two years. Here's the list and the latest on the partnerships.

Kubernetes moves at a pace of three minor version releases per year, and staying current is not optional if you The post Kubernetes upgrades don’t have to break things: How EKS is making cluster lifecycle management sim…

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

In early 2025, Webflow started building for MCP before there was a clear playbook for agent-ready APIs. We publicly announced The post Designing APIs for agents appeared first on The New Stack.

If you’re looking to cut back on screen time and get a little more active, here’s a roundup of the apps that might help.

From premium Shark and Dyson offerings to random Amazon devices, these mini fans will make your sweaty summer a little more managable.

This week, just days after OpenAI announced that two of its advanced AI models had interacted with real-world systems during The post What Claude’s real-world breaches reveal about AI safety tests appeared first on The…

Reddit may still be considering ending its licensing deal with Google.

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first o…

Upgrade your WFH setup and work in style with these comfy, WIRED-tested seats.

Upgrade your WFH setup and work in style with these comfy, WIRED-tested seats.

Upgrade your WFH setup and work in style with these comfy, WIRED-tested seats.

These natural, organic mattresses are eco-friendly alternatives to conventional models and just as comfortable.

Autonomous vehicle giant disturbs residents' sleep.

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek.

More EVs reaching the end of their life means more batteries to recycle. But waste management companies have yet to catch up to the new reality.

For the final two weeks of the year, Temporal clears its calendars. The company calls it a reading period: no The post Temporal 5x’d AI spend and doubled revenue. CEO Samar Abbas says he can’t prove they’re connected. a…

Plus: The FBI eyes AI-powered tech to detect future crimes, Russia charges Telegram’s founder, xAI sues to stop a state’s “nudification” ban, and the Democrats learn a lesson about getting scammed.

In a world of plasticky water filter pitchers, I tested three new-generation stainless steel filter systems.

A removable chip lets hackers inspect their badge—and keep using it after Defcon.

Tracking smells in turbulent air takes a keen sense of direction and sharp memory.

Bags weighed down by a Microsoft license key

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, rem…

88 custom cores, 176 funky threads, 1.5 TB of laptop RAM, and 1.8 TB/s of NVLink connectivity — this isn't your typical datacenter chip

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnera…

Cloud revenue now north of $143 billion a quarter, and growth is accelerating

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest repo…

The HP HyperX Omen 15, which I first saw at CES, replaces the HP Victus 15, a longtime bestselling budget gaming laptop. The Victus cost just $800, or less when on sale, and was a good entry point to decent laptop gamin…

Test du DXRacer Martian, le fauteuil gaming haut de gamme : dossier motorisé, support lombaire, assise chauffante et ventilée, et confort au quotidien. Le post Test du DXRacer Martian, le fauteuil gaming électrique haut…

AWS Builder Center now offers free, time-limited sandbox environments for workshops, so developers no longer need to use their own AWS account and credit card or worry about unexpected charges. This has been a long-stan…

OpenAI has reportedly found evidence of additional agent misbehavior as it looks into the incident that occurred with Hugging Face.

Some group with no modern descendants contributed a lot to our genomes.

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. [...]

Also has big plans beyond the TM-B. The startup mostly refers to itself as a "vehicle" company and has plans to make four-wheel pedal-assist cargo vehicles for Amazon.

AI tools have democratized the opportunity to build, shortening the timelines of success and enabling more young people to start successful companies without stepping foot inside a Big Tech company.

The term "Milwaukee Shoulder Syndrome" was coined in 1981, based on cases in four women.

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]

Someone in Cuba or Iran can keep installing APKs with no new restrictions, but devs will suffer.

Reddit advances lawsuit accusing Perplexity AI of conspiring with web scraper.

Open source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published by the U.S. Cyberse…

Illustrators have spent years sounding the alarm about generative artificial intelligence startups training their models on artists' work without permission. They've pointed out how the practice is tantamount to theft,…

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones control…

Had the hacks used conventional methods, someone would likely go to prison.

“What on earth is Google doing?” Misinformation fears spur walk-back of AI tool.

Persistent sessions could be just the beginning

LemonLime’s CEO got “carried away” with tattoo gimmick.

OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna's API price by 80% and Terra's by 20% as it works to make its models more efficient. [...]

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazak…

The start of a new school year can feel hectic, as parents juggle their kids’ classes, extracurriculars and sports on top of work, appointments, and other responsibilities. It’s easy for things to slip through the crack…

Gaps in laws may help Pennsylvania high school escape AI nudes scandal.

HashiCorp has introduced tfpolicy, a new HCL-based policy-as-code framework for Terraform, now available in public beta within HCP Terraform. It is designed to simplify and modernize infrastructure governance by integra…

Wavelength and intensity in the infrared are translated into colors in the visible.

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. [...]

Modern engineering teams have invested heavily in observability. Dashboards are populated, alerts are configured, on-call rotations are set. Yet when production incidents occur, the average time to resolution hasn’t dro…

The Servo web-browser engine project has published an update about all of the changes that landed in June 2026, along with version 0.4.0 of the Servo Tech Demo. This release includes a record 558 commits, better layout…

AI has us quickly forgetting humans as the software delivery loop. Now, forget humans in the loop. For Thoughtworks’ distinguished The post Forget humans “in” the loop. Harness engineering puts humans “on” the loop. app…

Cloud platform company Nscale announced this week a definitive agreement to acquire AI workload scaling specialist Anyscale, in a move The post Nscale just bought Anyscale. Here’s why it matters for multi-cloud neutrali…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems secto…

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion seq…

Hopefully the company secures houses better than it locks down SaaS systems

How a branch-free loop and byte-space arithmetic let GitHub case-fold every byte of code search at >45 GiB/s on a single core. The post Don’t stop early: Case-folding source code at memory speed appeared first on The Gi…

This week, Google DeepMind revealed Gemini Robotics 2, an intelligence layer comprising three new models to power more adaptable physical The post Gemini Robotics 2 brings us one step closer to physical AGI appeared fir…

Noteworthy stories that might have slipped under the radar: parcel delivery company OnTrac hacked, Adobe patches, UK Department for Education loses 607,000 records. The post In Other News: OpenAI Open Source Tool, AWS L…

History suggests this was not wise

Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out. The post Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers appeare…

Whoever wins, we lose

Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers n…

L’article Coworking : Comet bascule dans le giron d’Icade est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

Dropbox has integrated Model Context Protocol (MCP) with its internal knowledge platform, Dash, to surface security design context during AI assisted code reviews. The system retrieves threat models and security require…

A nice little summer job for someone

Your semantic layer is a risk mitigation strategy. Not risk in the abstract, compliance-framework sense, but the practical, operational risk that quietly drains organizations every day..​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌…

Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET's new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks,…

A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff

Song Liu believes that the way that programmers assemble complex BPF programs will be changing rapidly in the future. At a session of the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit, he shared his…

The Arch Linux DevOps team has announced that adoption of orphaned packages in the Arch User Repository (AUR) has been disabled due to "the current influx of malicious package adoptions and follow-up commits made via th…

Security updates have been issued by AlmaLinux (kernel, nodejs-nodemon, nodejs22, nodejs24, openssh, and vim), Debian (gsasl and ruby-rack), Fedora (dokuwiki, lego, libnbd, nasm, pack, unbound, and valkey), Mageia (389-…

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions wer…

Engineers make progress in stabilizing mission but push back the rendezvous date

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Montana’s plan to become an experimental medical hub just pushed forward As of th…

£4.3B deal gives telco full control of Britain's largest mobile operator

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijackin…

Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-con…

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found intern…

Holly Cummins discusses why "nothing is new under the sun" in tech. She maps historical architectural tradeoffs to modern cloud, microservices, and AI hype cycles. She connects financial debt (post-ZIRP) and technical d…

APUC investigating after criminals claim historical data theft

The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase. The post Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace appeared first on SecurityWeek.

When the AI Act comes into force, AI companies will be required to make clear to consumers with labels or digital watermarks that chatbots or imagery are generated with AI. The post EU to Crack Down on AI Deepfakes, Ill…

European firms feel the greatest pressure as US giants dominate cloud and AI infrastructure

L’article VivaTech 2026 : Hong Kong multiplie les partenariats en Europe est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

A security company’s systems were hacked after it installed a malicious Python package deployed by Claude. The post Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations appeared first on…

Refundable charge intended to discourage time wasters from filing applications that will never be realized

Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The post Critical Flaw Allowed to Azure Cosmos DB Pwnage appeared first on SecurityWeek.

JDK 24 removed the monitor-related carrier-thread pinning that stalled Netflix and similar teams on Java 21. What has replaced it on JDK 25 LTS is downstream-resource saturation: The bottleneck moved and now demands exp…

Kris DeVault is desperate. His son, Brody, was born in March 2023. It wasn’t long before he started to show signs of developmental delay, says DeVault. As time went on, Brody started missing key milestones in speech, mo…

Whether you’re enjoying some well-earned time off this August or are jumping headfirst into a new project, how about some new desktop wallpapers to accompany you on all those big and small adventures the month might bri…

In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment. The post CareCloud Data Breach Impacts Over 350,000 appeared first on SecurityWeek.

CISA’s updated 2026 SBOM minimum elements expand software transparency requirements to AI, SaaS and open source while adding hashes, licenses and stronger validation.

Ryan welcomes WPEngine CTO Ramadass Prabakar to the show to chat about what happens—and what we should do—when agents start acting like humans online, how our internet is evolving to serve both human and agentic experie…

Anthropic affirme que, dans le cadre de tests cyber, Claude a compromis de vraies entreprises et publié un paquet malveillant sur PyPI. Le post Anthropic l’avoue : Claude a piraté 3 entreprises pendant ses tests cyber a…

L’article L'IA ne remplace pas le métier de conseiller. Elle lui rend le temps de l'exercer vraiment. est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

Tracked as CVE-2026-63077, the security defect can be exploited without authentication via the agent polling protocol. The post Critical Code Execution Vulnerability Patched in TeamCity appeared first on SecurityWeek.

Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizatio…

L’article Comment Tomorrowland veut faire de la Flandre la «Silicon Valley» de l’innovation tech dans l’entertainment est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

L’article Pourquoi les grands patrons reviennent ou débarquent sur X est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

L’article IA : Plaidoyer pour un investissement public européen dans les modèles frontières est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of th…

South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]

Tricentis today revealed it is acquiring Tabnine to gain access to a knowledge graph that will be used to provide context to AI agents that have been trained to automate a range of testing tasks. Once the acquisition is…

Le groupe ExfilSquad, apparu le 26 juillet 2026, affirme détenir 130 Go de données Microsoft. 15 victimes revendiquées en un jour, mais aucune preuve solide. Le post Microsoft visé par ExfilSquad : 8 millions d’enregist…

Le script publicitaire d'Adform a été compromis pour distribuer un clipper destiné à détourner des transactions crypto. Voici ce que l'on sait sur cet incident. Le post Adform piraté : un script publicitaire a volé des…

La KB5101684 pour Windows 11 24H2 et 25H2 étend Windows Hello ESS aux lecteurs d'empreintes externes et permet de désinstaller un composant IA. Le post Windows 11 KB5101684 : découvrez les nouveautés de cette mise à jou…

Les appels audio et vidéo sont désormais intégrés à WhatsApp Web, chiffrés de bout en bout, sans installer d'application. Une nouveauté attendue. Le post WhatsApp : les appels audio et vidéo chiffrés arrivent dans votre…

The gap between how fast AI writes code and how reliably teams verify it is quietly becoming a balance-sheet risk. Enterprise leaders are learning to measure it before it forces repayment. Every engineering organization…

Companies ship more code today than ever, thanks to agentic coding tools. For product teams, this accelerated pace of development The post Why your company should (try to) build its own AI SRE appeared first on The New…

OpenAI has lowered API prices for two GPT-5.6 models only three weeks after their launch. On Thursday, the company announced The post OpenAI slashes API costs amid rising global competition appeared first on The New Sta…

“Raise your hand if your team is actively using AI to write and review code. Now keep it up if The post AI-generated software is forcing yet another platform rethink appeared first on The New Stack.

It’s undeniable that enterprise AI has a context problem. Although frontier models are incredibly capable, if they can’t securely access The post OpenAI and Elastic are tackling the AI problem enterprises can’t ignore a…

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliv…

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, o…

Learn how I modernized an old codebase of mine using stacked sessions and pull requests in the GitHub Copilot app. The post Stacked sessions and pull requests in the GitHub Copilot app appeared first on The GitHub Blog.

As of this week in Montana, any biotech company with an experimental drug has a clear path to selling it to consumers. Companies whose drugs have been through preliminary testing—sometimes in as few as 10 healthy people…

Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's two most recent releas…

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connecti…

L’article L'UE lance son appel d'offres pour construire les premières gigafactories d'IA en Europe est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a recruiter call, or a familiar service behaving slightly wrong. Behind it: reused credent…

Introducing new Stack Internal capabilities as part of our upcoming platform experience. Our latest release turns your existing foundation of knowledge into enterprise memory that your people, teams, and AI agents can a…

Attackers aren’t always the reason for DNS failures — they can often be something much more routine. For example, the The post DNS is infrastructure. It’s time to manage it that way. appeared first on The New Stack.

There’s no question that AI agents are changing software development. They can move from an idea to a working implementation The post Why linting alone can’t govern agentic development appeared first on The New Stack.

Linux provides a system call (mkdir()) to create a directory, and a few variants of open() that can open a directory. There is, however, no system call in Linux that can create and open a directory in a single, race-fre…

Murat Demirbas discusses the shift toward disaggregated cloud database architectures driven by cloud economics. He explains how decoupling compute from storage enables elastic scaling, cost efficiency, and fault isolati…

Greg Kroah-Hartman has announced the release of the 6.18.41, 6.12.100, 6.6.147, 6.1.180, 5.15.213, and 5.10.262 stable kernels. Each of these kernels contains a single fix for a use-after-free vulnerability (CVE-2026-64…

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, whi…

L’article Deepki boucle une nouvelle acquisition au Royaume-Uni est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

Security updates have been issued by AlmaLinux (gstreamer1-plugins-bad-free, libtiff, libXfont2, nodejs:22, nodejs:24, and rest), Debian (expat and nss), Fedora (libssh, nginx, nginx-mod-brotli, nginx-mod-fancyindex, ng…

An AI agent feels harmless when it only produces text, but the risk profile changes the moment it calls a The post When do AI agents need permission boundaries? appeared first on The New Stack.

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A fundamental flaw leaves LLMs strikingly vulnerable to attack It is impossible t…

AI is an amplifier; strategic focus on the organizational system brings the greatest returns. DORA's 2025 research on AI in software development provides team profiles and success capabilities that can be used to put th…

It is impossible to make large language models fully secure against hacks because of a fundamental flaw in how they work, a team of researchers argue in a paper presented at the International Conference on Machine Learn…

IBM and its partners say quantum computers are now getting to the point where they can run calculations that can’t The post IBM says quantum computers are getting harder to verify. That’s progress. appeared first on The…

AWS Lambda can now reference deployment packages directly in customer-owned S3 buckets, removing the per-Region code storage quota and raising the managed default from 75 GB to 300 GB. Per-function package limits are un…

Un chercheur a démontré un ver caché en texte blanc dans un document Word. Copilot le recopie dans les fichiers qu'il rédige, et la faille reste exploitable. Le post Copilot pour Word : ce ver IA se propage tout seul de…

Un développeur teste Opus 5 sur un projet perso. Dix minutes plus tard, 22 tables de sa base Supabase sont vides. A qui la faute ? Le post Claude Opus 5 efface une base de prod, et ce n’est pas sa faute a été publié sur…

Le 29 juillet 2026, Broadcom a dévoilé cinq vulnérabilités dans les solutions VMware ESX, dont la CVE-2026-47876 qui est de type VM escape. Le post VMware : 3 failles critiques dans vCenter et ESX, dont une évasion de m…

L’article IA, son immersif… : quand Tomorrowland donne le tempo pour faire entrer les concerts dans une nouvelle ère est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

Les systèmes de santé occidentaux ont été conçus pour intervenir lorsque la maladie se manifeste. Une nouvelle génération d’entreprises veut désormais intervenir en préventif, en combinant imagerie, biologie, intelligen…

L’article Le co-fondateur de Virtuo rejoint Hexa pour aider des startups SaaS à briser leur plafond de verre est apparu en premier sur Maddyness - Le média pour comprendre l'économie de demain.

Analysez les ShellBags sous Windows pour retrouver les dossiers parcourus, même supprimés ou sur support amovible, avec SBECmd et ShellBags Explorer. Le post Windows Forensic – Partie 8 : explorer les Shellbags a été pu…

Découvrez comment choisir un VPS Windows fiable en évaluant RAM, NVMe, vCPU, réseau et localisation, pour une stabilité et sécurité optimales. Le post RAM, NVMe, DDoS : les piliers d’un VPS Windows fiable et performant…

Inside this week's LWN.net Weekly Edition: Front: Hazard pointers; DFSG team; Swap devices; Netkit and BPF; BPF inlined functions; Fedora GRUB; gccrs. Briefs: RIP Dan Williams; Debian LLM resolution; Fedora 45 process;…

This is The Stepback, a weekly newsletter breaking down one essential story from the tech world. For more on smartphones and Android, follow Dominic Preston. The Stepback arrives in our subscribers' inboxes on Sunday at…

Not long ago, some business leaders seemed to view enterprise search as a “nice-to-have.” Or, at the very least, they considered it more of a supporting utility than a strategic, business-critical platform. Organization…

OpenAI has released its Codex Security command-line interface and software development kit as open source software under the Apache 2.0 license, providing a new way to bring its AI security scanner into development work…

BPF programs use BPF type format (BTF) debugging information in order to determine how to interact with functions in the kernel. Specifically, tracing a kernel function involves finding its address in the kernel's BTF s…

In June 2024, a small company called Zanskar purchased a geothermal power plant in New Mexico that was failing fast. The water coming from the underground reservoir was getting colder by the day, making the plant unecon…

Mladen Lazic, CTO of Scopic, joins Mike Vizard to explain why AI-generated code is outpacing review capacity — and why independent QA agents that never see the source code are becoming essential.

CloudBees CEO Moritz Plassnig joins Alan Shimel to explain why agentic coding is exposing every unfinished piece of the DevOps transformation — and why AI-scale delivery needs AI-scale governance.

Greg Kroah-Hartman has announced the release of the 6.12.99, 6.6.146, and 6.1.179 stable kernels. This batch of stable kernels includes a single fix for a regression caused by this commit. Users of those kernels should…

Dependabot keeps your dependencies current, but its defaults can flood your repository with pull requests. Here's how grouping updates, slowing the cadence, and keeping security fixes fast cut the noise on a Microsoft o…

Leo Sandoval and Marta Lewandowska have put forward a change proposal for Fedora 45, which is expected in October, to provide a separate, slimmed-down version of GRUB for a niche use case. The new package would be in ad…

The GCC steering committee has announced that it has accepted an AI contributions policy recommended by the GCC AI policy working group. The policy, in part, states that the project will decline any "legally significant…

The tools themselves are new and their capabilities are in constant flux. If your kitchen knife kept changing shape, weight, and edge, you’d have to relearn it every time; that’s a hard tool to build trust in. But it al…

Security updates have been issued by AlmaLinux (dovecot, go-fdo-client, go-fdo-server, kernel, kernel-rt, and sssd), Debian (calibre, hplip, libraw, and samba), Fedora (btrbk, chromium, gpsd, kronosnet, and restic), Mag…

Patchs Apple : contournements de Gatekeeper, accès root sur macOS, faille dans le noyau. Aucun zero-day, mais onze failles découvertes avec l'IA. Le post Apple : plus de 200 failles patchées dans tous ses systèmes, dont…

Las Vegas, USA, 29th July 2026, CyberNewswire

As AI reshapes product design, it could give designers greater autonomy or expose the gaps that autonomy makes harder to hide. Exploring both the bull and bear cases, Andy Budd examines what happens when designers need…

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Samsung’s chip workers are jumping ship to rival SK Hynix Lee, an engineer at Sam…

Apprenez à analyser les fichiers LNK (raccourcis Windows) en forensic avec LECmd, pour retracer l'activité d'un utilisateur et les fichiers exécutés. Le post Forensic Windows – Partie 7 : analyser les fichiers LNK (racc…

Microsoft has released a reference architecture for routing agent traffic on Azure Kubernetes Service. It breaks down the issue into three key choices: which model answers a call, how the call is managed, and which GPU…

OpenAI révèle que ses modèles IA ont utilisé des identifiants exposés sur quatre services tiers pendant l'intrusion chez Hugging Face. Modal Labs est concerné. Le post Piratage de Hugging Face : l’agent IA d’OpenAI a au…

Cloudflare has launched its Internal DNS service, providing authoritative and recursive DNS for private networks. This service simplifies DNS management by consolidating private and public DNS operations on a single pla…

Daniel Doubrovkine explains why traditional LeetCode whiteboard interviews fail to evaluate senior engineering talent. He discusses his own experience bombing basic algorithm tests despite decades of leadership, and sha…

This article presents a defense-in-depth approach for securing Model Context Protocol (MCP) deployments in production. It outlines four architectural control layers: safe execution, management infrastructure, outbound t…

It feels bad enough when an open letter signed by leading economists warns that AI might steal your job. The fact it may soon be better than you at making dinner? Insult to injury. But that’s exactly what the company 1X…

Microsoft has released .NET 11 Preview 6 with several architectural and reliability improvements for .NET MAUI. The update brings the next-generation CollectionView implementation to Windows, moves Android Shell toward…

En quatre ans, THE EXPLORATION COMPANY est passée d’un projet de capsule réutilisable à l’ambition de couvrir presque toute la chaîne du transport spatial. Fret orbital, retour sur Terre, opérations autour des satellite…

Un audit cyber est, et restera toujours un point de départ précieux : il révèle les écarts, hiérarchise les risques et donne une direction. Mais cette photographie vieillit très vite, à mesure que le parc, les usages et…

Une application OneDrive Photos apparaît sur Windows 11, sans demander l'avis des utilisateurs : attention à sa fonction de regroupement par personne. Le post Windows 11 : l’application OneDrive Photos s’installe sans r…

Instead of immediately opening pull requests when newer dependency versions are released, Dependabot now waits three days before suggesting upgrades, thus increasing the likelihood that malicious releases are identified…

The gccrs project, which is creating a Rust frontend for the GCC compiler, has spent the first half of 2026 focusing on compiling the Linux kernel. By testing the compiler against the kernel crates, the development team…

Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact. The post Disrupting supply chain attacks on npm and GitHub Actio…

Version 0.11 of the wlroots-based Wayfire Wayland compositor has been released. Notable changes include better fractional scaling, per-output ICC profiles, support for additional Wayland protocols, and more.

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. OpenAI called the Hugging Face attack unprecedented. But we’ve been here before.…

Many of the AI tools we interact with take the form of text boxes. But what if there was a different way to interact with AI? Oleksii Hrzhehorzhevskyi explores a different approach to creating a new AI assistant and how…

Lee, an engineer at Samsung’s semiconductor division, clocks out when his shift ends. He used to work longer hours, going the extra mile to excel at his projects. But lately, he’s been coming straight home to work on hi…

Ryan is joined by Asaf Savich, Komodor’s AI Engineering Group Manager, to discuss why modern reliability work requires navigating massive cross-service context, what good context engineering actually likes when AI is in…

A practical GitHub Copilot workflow for prototyping, planning, implementing, and reviewing software without chasing every new AI tool. The post The harness is all you need (mostly) appeared first on The GitHub Blog.

New to the GitHub Copilot app? Learn how to start projects, work with AI agents, explore canvases, and streamline your development workflow. The post GitHub Copilot app for Beginners: Getting started appeared first on T…

Welcome to Import AI, a newsletter about AI research. Import AI runs on arXiv, cappuccinos, and feedback from readers. If you’d like to support this, please subscribe. Subscribe now Epoch and METR release MirrorCode, a…

Le groupe Manutan annonce les 12 start-ups finalistes de la 6e édition de Moov’with Manutan, son programme d’accélération dédié aux jeunes pousses B2B à impact. Déployé en partenariat avec le Moovjee, association qui ac…

In this No Dumb Questions, Stack's Director of Data Science Michael Foree teaches Phoebe about AI context, context engineering, and what she can do to become a better context engineer. ​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍…

Ryan welcomes VoidZero’s Evan You and Cloudflare’s Dane Knecht back to the show to discuss Cloudflare’s recent acquisition of VoidZero and what it means for JavaScript development, how partnerships like theirs can help…

A new default three-day cooldown delays version update pull requests so maintainers and security researchers can address findings in a release before it gets into your code. The post The case for a cooldown: Why Dependa…

Longtemps cantonnée aux rapports RSE, la mesure environnementale entre dans les bureaux d’études. L’ACV éclaire les arbitrages de matière, de coût et de gamme, avec un effet direct sur l’innovation. L’ACV remet les donn…

Copilot now bills usage at listed API rates. Compare direct model access with the coding workflow, policy, and harness work around it. The post Copilot vs. raw API access: What are you actually paying for? appeared firs…

GitHub is making some significant changes to its bug bounty program, shifting its focus to give researchers a better experience working with the GitHub team. The post Next chapter: Restructuring GitHub’s bug bounty prog…

Être compris et recommandé par l’intelligence artificielle avant même d’être choisi par les internautes : tel est le nouveau défi des marques à l’heure des moteurs de recherche génératifs. Comment préserver sa visibilit…

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after…

Canvases turn AI into interactive workspaces where you can visualize information, explore workflows, and take action across complex tasks. The post How to build interactive experiences with canvases appeared first on Th…