Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"
Read full articleMore News
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow
What Are the Remaining Millennium Prize Problems?
OpenAI’s trove of new math results doesn’t fully solve any of these highly prestigious open questions, but it seems to make progress on some.
Soaring component costs force laptop makers to rethink shift away from China: report
Notebook manufacturers are being forced to rethink their shift out of China and consider moving production back to the manufacturing hub, as skyrocketing component costs squeeze profit margins, according to market research firm TrendForce. The Taiwan-based firm projected that the share of global notebook production outside mainland China would decline to 21 per cent this year from about 24 per cent in 2025, and drop below 20 per cent in 2027. “This suggests that brands are reassessing the...
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating a
Anthropic’s Quest to Give A.I. Morals
“For Anthropic, it was part research and part evangelism.”
Amazon launches Alexa Tablet 8, Tablet 11 and Tablet 12 Pro with Google Play Store access: Price, key specs and more
Amazon has launched the Alexa Tablet 8, Tablet 11 and Tablet 12 Pro globally with Google Play Store access, Android support and built-in Alexa+ AI features. The lineup starts at $229.99, while the flagship Tablet 12 Pro features a 12-inch 2.5K display with a 120Hz refresh rate.
This Joshua Tree highway keeps killing wildlife. Enter the poop-hunting dogs
Every year, hundreds of animals die trying to cross State Route 62, connecting L.A. and Joshua Tree. The research to fix it is a bit unconventional.
Nobel Prizes 2026: What to Know
The recipients of the six awards in science, literature, economics and peace work are being announced this week.
U.N. Warns Against Technology Used to Read Citizens’ Minds
A report by the secretary general warned that new technologies could be used to access and criminalize people’s innermost thoughts.
Fired OpenAI researchers say they were let go for 'prioritising safety'
The AI firm instead claims the researchers were fired for mishandling sensitive information.
Astronomers find most distant fast radio burst ever recorded
Astronomers find most distant fast radio burst ever recordedAstronomers in a recent breakthrough have detected the most distant burst of radio waves that travelled more than 10 years before reaching Earth. The researchers believe that this fast radio burst was released from a really faraway...
Inside Mark Zuckerberg’s Decision to Pull the Trigger on Meta’s A.I. Agent
Meta had delayed releasing Muse, its A.I. agent app, for months over safety concerns. Then new competition forced Mr. Zuckerberg’s hand.
