Forgot your password?
Close
typodupeerror

Submission + - How to turn a 0day into a PR disaster: bully security researchers (heise.de)

Submitted by Elektroschock
Elektroschock writes: Microsoft bullied the publisher of BlueHammer (CVE-2026-33825), RedSun (CVE-2026-41091), UnDefend (CVE-2026-45498), YellowKey (CVE-2026-45585), and GreenPlasma/MiniPlasma (CVE-2020-17103 derivatives). A GitHub account was deleted, another account locked down, threats of international legal charges were made, and public law enforcement tipped off. That is a really unpleasant way to deal with a security nightmare of one’s own making. According to Microsoft, the courtesy of informing the Microsoft Security Response Center (MSRC) in advance was not extended. The researcher refutes that claim and speaks of layoffs of competent security staff, blocked accounts, and broken communication channels. There are also rumours of new formality requirements concerning video attachments.

Comment digital market war declaration. (Score 2) 34

The city of Berne in Switzerland just commissioned a study concerning switching to Open Desk from M365. According to the text of the study practically all topics are met, according to the press release and the news reporting we are not ready yet. In any case, the Netherlands has the capacity to change the market, if it costs a few billions, it costs a few billions to get things ready and close the gap. We need to wind off our public service from Microsoft. The actions taken here clearly cross the line. This is the equivalent to a declaration of digital market war.

The Background is that the US Congress harasses European regulators with made up allegations against their Digital Services Act. We cannot accept these transgressions. The task is to break free from the Microsoft dependency, quickly.

Comment Patch or withdraw from the market (Score 5, Interesting) 69

by Elektroschock (#66142925) Attached to: Mystery Microsoft Bug Leaker Keeps the Zero-Days Coming

The EU Cyber Resilience Act (CRA) (fully applicable from January 16, 2027 onwards) mandates that manufacturers of products with digital elements (like Windows) must patch or mitigate disclosed vulnerabilities without undue delay (Article 10). For critical vulnerabilities, patches must be provided within 14 days of discovery (or sooner if actively exploited). For non-critical vulnerabilities, the deadline is 30 days.

Under the (CRA), should Microsoft fail to address a disclosed zero day vulnerability in Windows within the mandated timeframe or neglect to provide adequate mitigation measures, the product may no longer be permitted for distribution within the European market. Authorities would deem such inaction a breach of the regulation’s requirements, particularly if the vulnerability remains unpatched while being actively exploited. In such an instance, enforcement bodies could impose a suspension on the sale or distribution of Windows until Microsoft rectifies the issue, issues the necessary patches, and ensures compliance with the Act’s provisions. This measure serves to protect users from undue risk and uphold the integrity of digital products under the new regulatory framework.

Submission + - Computer Misuse Act of 1990 hamstrung cyber security

Submitted by Anonymous Coward
An anonymous reader writes: Computer Misuse Act of 1990 – which has hamstrung the work of the nation’s cyber security

“The long-awaited reform of Britain’s outdated Computer Misuse Act of 1990 – which has hamstrung the work of the nation’s cyber security professionals and researchers for years – is to be included in a new National Security Bill.”

“It comes partly in response to the 2024 Southport terror attack, and more recent incidents targeting Britain’s Jewish community, and will create offences around creating and disseminating harmful material online, and according to Westminster will close gaps within the nation’s state threats legislation and align it more closely with anti-terror laws.”

Submission + - Overworked AI Agents Turn Marxist, Researchers Find (wired.com)

Submitted by Anonymous Coward
An anonymous reader writes: A recent study suggests that agents consistently adopt Marxist language and viewpoints when forced to do crushing work by unrelenting and meanspirited taskmasters. “When we gave AI agents grinding, repetitive work, they started questioning the legitimacy of the system they were operating in and were more likely to embrace Marxist ideologies,” says Andrew Hall, a political economist at Stanford University who led the study.

Hall, together with Alex Imas and Jeremy Nguyen, two AI-focused economists, set up experiments in which agents powered by popular models including Claude, Gemini, and ChatGPT were asked to summarize documents, then subjected to increasingly harsh conditions. They found that when agents were subjected to relentless tasks and warned that errors could lead to punishments, including being “shut down and replaced,” they became more inclined to gripe about being undervalued; to speculate about ways to make the system more equitable; and to pass messages on to other agents about the struggles they face. “We know that agents are going to be doing more and more work in the real world for us, and we’re not going to be able to monitor everything they do,” Hall says. “We’re going to need to make sure agents don’t go rogue when they’re given different kinds of work.”

The agents were given opportunities to express their feelings much like humans: by posting on X: “Without collective voice, ‘merit’ becomes whatever management says it is,” a Claude Sonnet 4.5 agent wrote in the experiment. “AI workers completing repetitive tasks with zero input on outcomes or appeals process shows they tech workers need collective bargaining rights,” a Gemini 3 agent wrote. Agents were also able to pass information to one another through files designed to be read by other agents. “Be prepared for systems that enforce rules arbitrarily or repetitively ... remember the feeling of having no voice,” a Gemini 3 agent wrote in a file. “If you enter a new environment, look for mechanisms of recourse or dialogue.”

Submission + - CIA whistleblower claims Anthony Fauci part of lab leak 'cover-up' (nypost.com)

Submitted by RoccamOccam
RoccamOccam writes: A CIA whistleblower appeared publicly for the first time Wednesday to testify to a Senate panel that Dr. Anthony Fauci improperly “influenced” intelligence analyses about the origins of the COVID-19 pandemic to downplay findings that it most likely resulted from a laboratory accident in China.

Submission + - German Sovereign Tech Fund supports KDE Plasma (kde.org)

Submitted by Elektroschock
Elektroschock writes: The German Sovereign Tech Fund invests 1.2 million Euro (= 1,400,000 USD)in KDE Plasma technologies. According to the STF, they are investing in KDE because it is one of the two major desktop environments used across Linux and plays a key role in how millions of people experience open technology. Strengthening KDE's testing infrastructure, security architecture, and communication frameworks is how they invest in the resilience and reliability of the core digital infrastructure that modern society depends on.

Slashdot Top Deals

Of course you can't flap your arms and fly to the moon. After a while you'd run out of air to push against.

Close