<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="/rss-style.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:media="http://search.yahoo.com/mrss/" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
<title><![CDATA[Team IT Security - 📰 Alle Kategorien]]></title>
<link><![CDATA[https://tsecurity.de/export/rss/alle-kategorien.xml?q=chapter+gitops+with+terraform%2F]]></link>
<description><![CDATA[Das Gesamte Cyber Threat Intelligence Feed-Archiv von TSecurity.de. Alle Nachrichten, Sicherheitsmeldungen, Videos, Downloads und Analysen in einer zentralen Übersicht.]]></description>
<language>de-DE</language>
<lastBuildDate>Tue, 28 Jul 2026 16:50:32 +0200</lastBuildDate>
<pubDate>Tue, 28 Jul 2026 16:50:32 +0200</pubDate>
<ttl>15</ttl>
<copyright>2026 Team IT Security</copyright>
<managingEditor>lakandor@tsecurity.de (Horus Sirius)</managingEditor>
<webMaster>lakandor@tsecurity.de (Horus Sirius)</webMaster>
<category>IT Security</category>
<category>Cybersecurity</category>
<category>Nachrichten</category>
<generator>Team IT Security RSS Generator v2.0</generator>
<image>
<url>https://tsecurity.de/favicon.ico</url>
<title><![CDATA[Team IT Security - 📰 Alle Kategorien]]></title>
<link><![CDATA[https://tsecurity.de/export/rss/alle-kategorien.xml?q=chapter+gitops+with+terraform%2F]]></link>
</image>
<atom:link href="https://tsecurity.de/export/rss/it-security.xml?q=chapter+gitops+with+terraform%2F" rel="self" type="application/rss+xml" />
<item>
<title><![CDATA[Avengers: Endgame Re-Release Includes Exclusive Avengers: Doomsday Preview]]></title>
<description><![CDATA[Marvel Studios is bringing Avengers: Endgame back to theaters on September 25, 2026, with an exclusive look at the upcoming Avengers: Doomsday.



The re-release gives Marvel fans another opportunity to watch the 2019 blockbuster in theaters. The film follows the surviving Avengers as they attemp...]]></description>
<link>https://tsecurity.de/de/3695272/ios-mac-os/avengers-endgame-re-release-includes-exclusive-avengers-doomsday-preview/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695272/ios-mac-os/avengers-endgame-re-release-includes-exclusive-avengers-doomsday-preview/</guid>
<pubDate>Sun, 26 Jul 2026 09:21:44 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Marvel Studios is bringing Avengers: Endgame back to theaters on September 25, 2026, with an exclusive look at the upcoming Avengers: Doomsday.



The re-release gives Marvel fans another opportunity to watch the 2019 blockbuster in theaters. The film follows the surviving Avengers as they attempt to reverse Thanos’ devastating snap and restore half of all life across the universe.



The new theatrical run also serves as part of Marvel’s preparation for its next major crossover event. Viewers who attend the re-release will receive an early look at Avengers: Doomsday, although the exact length and format of the preview have not been announced.



Exclusive Avengers: Doomsday Footage Expected







Avengers: Doomsday will bring several major Marvel heroes together and introduce Robert Downey Jr. as Victor von Doom. The movie will also feature characters connected to the Avengers, Fantastic Four, X-Men and other parts of the Marvel Cinematic Universe.



Recent footage has highlighted Doctor Doom’s role in the story and his connections with the Fantastic Four. However, Marvel has kept several important plot details private ahead of the theatrical release.



The Russo brothers, who directed Avengers: Endgame, are also directing the new movie. Their return has raised expectations for another large-scale Marvel story involving several teams and universes.



Avengers: Doomsday is scheduled to arrive in theaters on December 18, 2026. The Endgame re-release gives audiences nearly three months to revisit the earlier Avengers finale before Marvel begins its next major chapter.]]></content:encoded>
</item>
<item>
<title><![CDATA[Agent Kim Reactivated Season 2: Is Another Season Happening? Here’s What We Know]]></title>
<description><![CDATA[Agent Kim Reactivated Season 2 has not been officially confirmed, but the Season 1 finale leaves Kim Do-hyeon in a strong position to return for another dangerous mission.



The Korean action drama completed its first season on July 25, 2026, after releasing two episodes each Friday and Saturday...]]></description>
<link>https://tsecurity.de/de/3695255/ios-mac-os/agent-kim-reactivated-season-2-is-another-season-happening-heres-what-we-know/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695255/ios-mac-os/agent-kim-reactivated-season-2-is-another-season-happening-heres-what-we-know/</guid>
<pubDate>Sun, 26 Jul 2026 09:08:51 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Agent Kim Reactivated Season 2 has not been officially confirmed, but the Season 1 finale leaves Kim Do-hyeon in a strong position to return for another dangerous mission.



The Korean action drama completed its first season on July 25, 2026, after releasing two episodes each Friday and Saturday. The finale ended its run as the most-watched drama of 2026 in South Korea, giving SBS and Netflix a strong reason to consider another season.




Season 2 status: Not officially renewed



Possible release date: Late 2027 or 2028, depending on renewal and production



Season 1 release: June 26 to July 25, 2026



Episodes: 10



Genre: Action, crime, spy thriller and comedy



Streaming platform: Netflix



Main cast: So Ji-sub, Choi Dae-hoon, Yoon Kyung-ho and Joo Sang-wook




Netflix describes the series as an action drama about an ordinary father who brings back his black-ops skills after his daughter disappears. The show is based on the Manager Kim webtoon and mixes family drama with espionage, chases and close-combat action.



Where could the story go in Season 2?



Spoilers for the Agent Kim Reactivated Season 1 finale follow.



Season 1 follows bank manager Kim Do-hyeon as he searches for his missing daughter, Min-ji. His investigation forces him to reveal that he once worked as a highly trained North Korean operative before building a quiet life in South Korea.



Do-hyeon eventually confronts Joo Kang-chan, bringing their long and violent history to a final showdown. However, the last episode does more than close the kidnapping storyline. It shows Do-hyeon beginning a new chapter and attending an employment interview connected to Baekho, directly opening the door for another season.



Agent Kim Reactivated Season 2 could follow Do-hyeon as he accepts professional missions instead of returning fully to his normal banking job. Baekho could recruit him for rescue operations involving missing people, criminal groups or former intelligence agents.



The next season could also expand the roles of Park Jin-cheol and Han-soo. Their skills and history would allow the show to form a larger team around Do-hyeon while introducing a new enemy connected to his earlier life.



When will Season 2 be announced?



SBS has not announced a renewal or production schedule. However, the finale’s strong ratings and clear continuation scene make a second season possible. A decision could depend on cast availability, Netflix performance and whether the writers have another completed storyline.



Would you watch Agent Kim Reactivated Season 2, and what mission should Manager Kim take on next? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Sullivan’s Crossing Season 5 Release Date: Everything You Need to Know]]></title>
<description><![CDATA[Sullivan’s Crossing Season 5 is officially happening, although Netflix viewers will probably need to wait until 2027 to watch the next chapter of Maggie and Cal’s story.



CTV renewed the romantic drama for a fifth season in June 2026, describing it as the network’s number-one original drama. Pr...]]></description>
<link>https://tsecurity.de/de/3695246/ios-mac-os/sullivans-crossing-season-5-release-date-everything-you-need-to-know/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695246/ios-mac-os/sullivans-crossing-season-5-release-date-everything-you-need-to-know/</guid>
<pubDate>Sun, 26 Jul 2026 08:54:08 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Sullivan’s Crossing Season 5 is officially happening, although Netflix viewers will probably need to wait until 2027 to watch the next chapter of Maggie and Cal’s story.



CTV renewed the romantic drama for a fifth season in June 2026, describing it as the network’s number-one original drama. Production is scheduled to begin in Nova Scotia during summer 2026, while an exact premiere date and episode count remain unconfirmed.




Renewal status: Officially renewed by CTV



Expected filming period: Summer 2026



Likely CTV premiere: Spring 2027



Expected episode count: Around 10 episodes



Genre: Romantic drama and medical drama



Filming location: Nova Scotia, Canada



Expected Netflix release: Summer 2027




The spring 2027 estimate follows the show’s recent release pattern. Seasons 3 and 4 arrived during the spring, while the fourth season contained 10 one-hour episodes.



Where the story is heading



Spoilers for the Sullivan’s Crossing Season 4 finale follow.



Season 4 ended with Cal proposing to Maggie, but viewers did not hear her answer. Tracy interrupted the moment by asking Maggie and Cal to take her in, leaving the couple’s engagement and immediate future unresolved.



Season 5 should return to Maggie’s decision and examine whether she and Cal can finally build a stable life together. Their relationship faced another major test during Season 4 after Liam, Maggie’s former husband, arrived and revealed more about their complicated past.



Earlier seasons followed Maggie as she returned to Sullivan’s Crossing after legal trouble disrupted her medical career. Her time at the campground helped her rebuild her relationship with her father, Sully, while her friendship with Cal slowly developed into a romance.



Season 5 will have a new showrunner



The series will also experience a creative change behind the scenes. Creator Roma Roth will remain involved as an executive producer, while Floyd Kane takes over as showrunner for Season 5.



Morgan Kohan and Chad Michael Murray are expected to return as Maggie and Cal. However, the complete cast has not been announced. Scott Patterson, who played Sully during the first three seasons, is also not currently expected to return.



When should Season 5 arrive on Netflix?



Netflix has not announced a Season 5 release date. Season 4 joined Netflix on June 30, 2026, shortly after its television finale aired on June 22.



Based on that schedule, Sullivan’s Crossing Season 5 should reach Netflix a few weeks after its 2027 television finale. A release between June and August 2027 appears most likely, provided the new season premieres during spring.



Season 4 recently reached Netflix’s global Top 10 with 1.3 million views during the week of July 13 to July 19, giving the streaming service another reason to carry the next season.



Do you think Maggie will accept Cal’s proposal, or will Tracy’s arrival change their plans? Let us know what you expect from Sullivan’s Crossing Season 5 in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Monday.com cuts 20% of its workforce to restructure for the AI era]]></title>
<description><![CDATA[Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era.



Monday.com co-founder and co-CEO Eran Zinman tod...]]></description>
<link>https://tsecurity.de/de/3694771/ai-nachrichten/mondaycom-cuts-20-of-its-workforce-to-restructure-for-the-ai-era/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694771/ai-nachrichten/mondaycom-cuts-20-of-its-workforce-to-restructure-for-the-ai-era/</guid>
<pubDate>Sat, 25 Jul 2026 19:50:09 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph">Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era.</p>



<p class="wp-block-paragraph">Monday.com co-founder and co-CEO Eran Zinman <a href="https://www.linkedin.com/pulse/building-mondaycom-its-next-chapter-eran-zinman-cxx4e/" target="_blank" rel="noreferrer noopener">today announced</a> the “very difficult decision” to reduce the AI work platform company’s global workforce by about 20%, or 620 people.</p>



<p class="wp-block-paragraph">The move has nothing to do with increasing margins or replacing humans with AI, he insisted in his post on LinkedIn; rather, it’s a calculated decision to trim down and hone the company’s focus as AI becomes integral to day-to-day workflows.</p>



<p class="wp-block-paragraph">“This is not a distress signal; it is a deliberate reset, disclosed with its price attached,” said <a href="https://greyhoundresearch.com/svg/" target="_blank" rel="noreferrer noopener">Sanchit Vir Gogia</a>, chief analyst at Greyhound Research. “The industry has quietly swapped the meaning of productivity, and this filing is the clearest exhibit yet.”</p>



<h2 class="wp-block-heading">A ‘significant opportunity’ in technology</h2>



<p class="wp-block-paragraph">In a <a href="https://www.sec.gov/Archives/edgar/data/1845338/000117891326003553/zk2635715.htm" target="_blank" rel="noreferrer noopener">SEC filing</a> this week, monday.com said its restructuring plan reflects the “ongoing transformation of its product, marketing, and go-to-market strategy.” The move is intended to support a “leaner, more focused operating model” as the company continues to invest in its AI-driven strategy.</p>



<p class="wp-block-paragraph">Zinman noted in his post that the company has shifted to “doing the work with AI and not just managing it,” and is focused on building environments where “people and <a href="https://www.cio.com/article/411198/how-to-launch-your-ai-projects-from-pilot-to-production-and-ensure-success.html" target="_blank">AI agents</a> [work] together in one workspace.”</p>



<p class="wp-block-paragraph">In recent months, monday.com has <a href="https://www.computerworld.com/article/3822438/monday-com-aims-to-be-an-ai-first-platform-with-latest-enhancements.html" target="_blank">evolved its products</a>, strategy, and the way it serves its customers, and Zinman contended that “the organization we built for our previous chapter is not the organization that fits the new AI era.” Monday.com needs to “execute more decisively,” take on new challenges, and quickly respond to market changes, he said.</p>



<p class="wp-block-paragraph">“We have never seen such a significant opportunity in software, driven by such exciting technology,” Zinman noted. He emphasized that the reduction is not to replace people with AI, nor to improve margins; the “vast majority” of savings will be reinvested into talent, products, and AI.</p>



<p class="wp-block-paragraph">The restructuring will result in a “flatter organization” with fewer management layers and smaller, more autonomous teams, and monday.com also has a new go-to-market model, Zinman explained. Customers expect “deeper implementation support” as they deploy AI, and the company will work more closely with customers, increase its on-site presence, create new roles, and “adapt many existing ones.” In its SEC filing, the company said it expects to continue hiring in “key strategic areas” throughout 2026.</p>



<p class="wp-block-paragraph">Workers will be expected to work better, “not harder,” Zinman noted. He pointed to several past examples where work could have been done in a few days, but instead took many months with “multiple meetings and endless friction.”</p>



<p class="wp-block-paragraph">“This wasn’t people’s fault and everyone was frustrated by this,” he said. “Our new org changes ownership to allow people to make decisions and move fast.”</p>



<p class="wp-block-paragraph">A spokesperson for monday.com declined to comment further on the staff reductions.</p>



<h2 class="wp-block-heading">Monday.com’s key market advantages</h2>



<p class="wp-block-paragraph">Monday.com certainly isn’t struggling; the company expects 19% to 20% year-over-year growth in 2026.</p>



<p class="wp-block-paragraph">“Companies in that position do not restructure because they must,” Greyhound’s Gogia noted. “They restructure because they have decided to become something else.”</p>



<p class="wp-block-paragraph"><a href="https://moorinsightsstrategy.com/team/melody-brue/" target="_blank" rel="noreferrer noopener">Melody Brue</a>, VP and principal analyst at Moor Insights &amp; Strategy, pointed out that organizational redesign is important for real AI transformation, but while it can signal confidence to the market, it can still be “devastating” to humans.</p>



<p class="wp-block-paragraph">While the company looks as though it’s trying to do right, that ultimately remains to be seen, she said. “There are often hidden internal bruises that can surface long after layoffs.”</p>



<p class="wp-block-paragraph">Monday.com’s advantage is in its “structured substrate,” Gogia noted; its boards, permissions and typed workflows give agents something firmer to act on than just documents and chat history. The company highlights its natively built agents that can be configured by any team member, as well as connectors with Claude, Microsoft Copilot, and ChatGPT, and dedicated routes for external agents to authenticate and operate.</p>



<p class="wp-block-paragraph">“For some time, the sharper enterprise question has been shifting from who has an agent to who owns the governed runtime in which an agent can safely act,” he said. “Structured work is a serious claim on that runtime.”</p>



<p class="wp-block-paragraph">But parts of monday.com’s agent estate remain in staged release, and its product is ultimately “mid-transition,” Gogia pointed out; its agent builder carried a beta label as recently as March,. Also, the company’s pricing model changed in May to a hybrid model charging for seats as well as mandatory AI credits. And, while its AI-powered no-code builder monday vibe passed $1 million in annual recurring revenue within two and a half months, monday.com has not released subsequent outcomes, usage volumes, or attach rates.</p>



<p class="wp-block-paragraph">Further, there’s an element of “gravity” with its competitors, he observed. Asana is reorganizing teams around agents, Atlassian is wiring agents into the developer estate, and others are simply bundling them into their offerings: Microsoft is doing so across the productivity stack, and ServiceNow across enterprise operations, each with identity and procurement built in.</p>



<p class="wp-block-paragraph">“Their pull is strongest exactly where monday.com wants to grow, in the largest accounts, where control-plane depth and administrative reach decide the deal,” said Gogia.</p>



<h2 class="wp-block-heading">Actions for the near-term</h2>



<p class="wp-block-paragraph">Going forward, buyers should focus on operating risk, not headline risk, Moor’s Brue noted. In practice, that’s continuity of service, roadmap consistency, and strength of enterprise support. Productivity should be valued as better outcomes per unit of organizational effort, not mere activity.</p>



<p class="wp-block-paragraph">“It should be a measure of how much smoother, faster, and more effective the operating model becomes when AI is built into the work,” said Brue.</p>



<p class="wp-block-paragraph">Gogia noted that strain surfaces first in customer service, and monday.com’s attention is being redistributed. The company’s annual report disclosed that its focus is now concentrated on the largest accounts, with support for medium-sized clients moved to an AI-first and human-supported model.</p>



<p class="wp-block-paragraph">During the first month of the transition, buyers should track named account continuity and escalation times, he advised. By the first quarter, keep an eye on whether credit governance and admin controls mature on schedule, and if the roadmap beyond the AI estate keeps pace. By the half-year mark, determine whether promised implementation depth is producing outcomes or “simply more billable engagement.”</p>



<p class="wp-block-paragraph">Support tiers should be enumerated in writing before renewal, and <a href="https://www.cio.com/article/4192312/4-recs-for-cios-to-optimize-ai-budgets-and-improve-sustainability.html" target="_blank">buyers should contract</a> for “side exits,” Gogia emphasized, with overage pricing fixed in advance, the right to pause consumption, and portability for workflows and agent configuration “if the relationship sours.” Finance should also insist on monthly consumption reporting by capability. Further, integration efforts, partner dependency, and change management should be considered first-class costs of the agent era, “not as afterthoughts to a license.”</p>



<p class="wp-block-paragraph">“A license was a known cost,” said Gogia. “A meter is a behavior, and behavior is harder to forecast than headcount.”</p>



<p class="wp-block-paragraph"><em>This article originally appeared on <a href="https://www.cio.com/article/4200330/monday-com-cuts-20-of-its-workforce-to-restructure-for-the-ai-era.html" target="_blank">CIO.com</a>.</em></p>



<p class="wp-block-paragraph"></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[‘Sugar’ Season 2, Episode 7 Release Date and What to Expect]]></title>
<description><![CDATA[“Sugar” Season 2, Episode 7 will arrive on Apple TV on Friday, July 31, 2026. The upcoming chapter serves as the penultimate episode, bringing John Sugar closer to the truth behind his latest case while his conflict with Deputy Vega reaches a dangerous stage.



The neo-noir detective series retu...]]></description>
<link>https://tsecurity.de/de/3693442/ios-mac-os/sugar-season-2-episode-7-release-date-and-what-to-expect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3693442/ios-mac-os/sugar-season-2-episode-7-release-date-and-what-to-expect/</guid>
<pubDate>Sat, 25 Jul 2026 10:05:43 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[“Sugar” Season 2, Episode 7 will arrive on Apple TV on Friday, July 31, 2026. The upcoming chapter serves as the penultimate episode, bringing John Sugar closer to the truth behind his latest case while his conflict with Deputy Vega reaches a dangerous stage.



The neo-noir detective series returned for its second season on June 19, with Colin Farrell once again playing the mysterious private investigator. New episodes have followed every Friday, and the eight-episode season will conclude on August 7.




Release date: Friday, July 31, 2026



Streaming platform: Apple TV



Season: 2



Episode: 7



Genre: Crime, drama, mystery and neo-noir



Season finale: Friday, August 7, 2026




What is happening in ‘Sugar’ Season 2?



Spoilers ahead for Season 2, Episode 6.



Season 2 follows Sugar as he investigates another disappearance in Los Angeles while continuing his personal search for his missing sister, Djen. His new case involves the disappearance of a boxer’s brother, but the investigation has gradually exposed a much larger criminal operation involving drugs, false death records and housing fraud.



Episode 6, titled “Cautionary Tale,” explored Sugar’s past and his growing fear that life on Earth has changed him. A flashback involving Peg Rosenthal showed the emotional damage caused when members of his alien community become too attached to human desires.



Meanwhile, Sugar obtained evidence connected to Operation: Fire Sale and confronted the increasingly unstable Deputy Vega. He stopped himself from killing Vega, although the episode’s final bar encounter made it clear that their conflict remains unresolved.



What to expect from Episode 7



Episode 7 will likely push Sugar and Vega toward a direct confrontation. Vega’s threat against Ji Moon gives Sugar another reason to act, while the evidence surrounding Operation: Fire Sale can expose everyone involved in the scheme.



The episode should also bring Sugar’s new investigation closer to a resolution before the finale. However, his search for Djen and his unfinished business with Henry remain part of the larger story that began in Season 1.



The first season ended after Sugar rescued Olivia Siegel and discovered that Henry, another member of his alien group, had information about Djen’s disappearance. Sugar chose to remain on Earth after the other Polyglots prepared to leave, setting up his continuing search in Season 2.



“Sugar” Season 2, Episode 7 streams July 31 on Apple TV. What do you think Sugar will do when he faces Vega again? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure]]></title>
<description><![CDATA[Advisory at a Glance



Title
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure


Original Publication
April 7, 2026


Last Update 
July 22, 2026


Executive Summary
The authoring agencies urgently warn U.S. organizations of ongoing Iranian-a...]]></description>
<link>https://tsecurity.de/de/3693379/sicherheitsluecken/iranian-affiliated-cyber-actors-exploit-programmable-logic-controllers-across-us-critical-infrastructure/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3693379/sicherheitsluecken/iranian-affiliated-cyber-actors-exploit-programmable-logic-controllers-across-us-critical-infrastructure/</guid>
<pubDate>Sat, 25 Jul 2026 09:12:34 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2><strong>Advisory at a Glance</strong></h2>
<table>
<tbody>
<tr>
<th>Title</th>
<td>Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure</td>
</tr>
<tr>
<th>Original Publication</th>
<td><strong>April 7, 2026</strong></td>
</tr>
<tr>
<th>Last Update </th>
<td><strong>July 22, 2026</strong></td>
</tr>
<tr>
<th>Executive Summary</th>
<td>The authoring agencies urgently warn U.S. organizations of ongoing Iranian-affiliated cyber targeting of internet-connected operational technology (OT) devices, including programmable logic controllers (PLCs). These actions disrupted PLCs across several U.S. critical infrastructure sectors through malicious project file interactions and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays, resulting in operational disruption and financial loss.</td>
</tr>
<tr>
<th>Last Update Description</th>
<td>This update adds new guidance on detecting malicious changes in reusable code modules exploited within Rockwell Automation PLC programs. It also expands scope to include observed targeting of Schneider Electric, Siemens, and potentially other branded/manufactured PLCs, emphasizing the importance of restricting direct internet access and providing best practices for secure deployment.</td>
</tr>
<tr>
<th>Affected Products</th>
<td>Potentially all internet exposed PLCs, including Rockwell Automation/Allen-Bradley, Schneider Electric, Siemens, and other branded/manufactured PLCs.</td>
</tr>
<tr>
<th>Key Actions</th>
<td>
<ul type="square">
<li>Install PLCs consistent with manufacturers' guidelines and security best practices.</li>
<li>Remove PLCs from direct internet exposure via secure gateway and firewall; work with IT/OT team members and/or integrators to perform this action.</li>
<li>Query available logs for the provided indicators of compromise (IOCs) and check available logs for suspicious traffic on the ports associated with OT devices, including <code>44818</code>, <code>2222</code>, <code>102</code>, and <code>502</code>, especially traffic originating from foreign hosting providers.</li>
<li>For Rockwell Automation devices, place the physical mode switch on the controller into run position. If you suspect your organization was targeted, including against other branded PLC devices, contact the authoring agencies and PLC manufacturer for guidance.</li>
</ul>
</td>
</tr>
<tr>
<th>Indicators of Compromise</th>
<td>
<p>For a downloadable copy of July 22, 2026<strong> </strong>IOCs, see:</p>
<ul>
<li><a href="https://www.cisa.gov/sites/default/files/2026-07/AA26-097A.stix_.xml">AA26-097A STIX XML</a> (July 2026) (29 KB)</li>
<li><a href="https://www.cisa.gov/sites/default/files/2026-07/AA26-097A.stix_.json">AA26-097A STIX JSON</a> (July 2026) (30 KB)</li>
</ul>
<p>For a downloadable copy of historical April 7, 2026 IOCs, see:</p>
<ul>
<li><a href="https://www.cisa.gov/sites/default/files/2026-04/AA26-097A.stix_.xml" title="AA26-097A STIX XML">AA26-097A STIX XML</a> (36 KB)</li>
<li><a href="https://www.cisa.gov/sites/default/files/2026-04/AA26-097A.stix_.json" title="AA26-097A STIX JSON">AA26-097A STIX JSON</a> (12 KB)<br> </li>
</ul>
</td>
</tr>
<tr>
<th>Intended Audience</th>
<td>
<p><strong>Organizations:</strong> Critical Infrastructure</p>
<p><strong>Sectors: </strong><a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/government-services-facilities-sector" title="Government Services and Facilities">Government Services and Facilities</a>, <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/water-and-wastewater-sector" title="Water and Wastewater Systems">Water and Wastewater Systems</a> (WWS), and <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/energy-sector" title="Energy">Energy</a> </p>
<p><strong>Roles: </strong>Integrators, asset owners, <a href="https://niccs.cisa.gov/tools/nice-framework/work-role/defensive-cybersecurity" title="Defensive cybersecurity analysts">defensive cybersecurity analysts</a>, <a href="https://niccs.cisa.gov/tools/nice-framework/work-role/operational-technology-ot-cybersecurity-engineering" title="OT cybersecurity engineers">OT cybersecurity engineers</a>, <a href="https://niccs.cisa.gov/tools/nice-framework/work-role/cybersecurity-architecture" title="cybersecurity architects">cybersecurity architects</a>, <a href="https://niccs.cisa.gov/tools/nice-framework/work-role/secure-systems-development" title="secure systems developer">secure systems developer</a></p>
</td>
</tr>
</tbody>
</table>
<h2><strong>Introduction</strong></h2>
<p><strong>Note:</strong><em> This advisory was originally published on April 7, 2026, to provide tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) related to ongoing cyber exploitation of internet-connected operational technology (OT) devices by</em> <em>Iranian-affiliated advanced persistent threat (APT) actors. The authoring agencies updated this advisory on July 22, 2026, to add new guidance on detecting malicious changes in reusable code modules leveraged within Rockwell Automation PLC programs. It also expands the manufacturer scope to include observed targeting of Schneider Electric, Siemens, and potentially other branded/manufactured PLCs, emphasizing the importance of restricting direct internet access and providing best practice resources for secure deployment.</em></p>
<p>The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Environmental Protection Agency (EPA), Department of Energy (DOE), United States Cyber Command – Cyber National Mission Force (CNMF), and Department of the Treasury (Treasury) (hereafter referred to as the “authoring agencies”) are urgently warning U.S. organizations of ongoing cyber exploitation of internet-connected OT devices—including PLCs manufactured by Rockwell Automation/Allen-Bradley, Schneider Electric, Siemens, and potentially other manufactured PLCs—across multiple U.S. critical infrastructure sectors. As a result of this activity, organizations from multiple U.S. critical infrastructure sectors experienced disruptions through malicious interactions with PLC project files<a href="https://www.cisa.gov/#Note1"><sup>1</sup></a> and the manipulation of data displayed on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays. In a few cases, this activity caused operational disruption and financial loss.</p>
<p>The authoring agencies assess a group of Iranian-affiliated APT actors is conducting this activity to cause disruptive effects within the United States. The group targeted devices spanning multiple U.S. critical infrastructure sectors, including <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/government-services-facilities-sector" title="Government Services and Facilities">Government Services and Facilities</a> (to include local municipalities), <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/water-and-wastewater-sector" title="Water and Wastewater Systems">Water and Wastewater Systems</a> (WWS), and <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/energy-sector" title="Energy">Energy</a> Sectors. The authoring agencies previously reported on similar activity targeting PLCs by <a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a" title="CyberAv3ngers">CyberAv3ngers</a> (aka Shahid Kaveh Group)—a cyber threat actor affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC) Cyber Electronic Command (CEC).</p>
<p>Due to the widespread use of these PLCs, and the potential for additional targeting of other branded OT devices across critical infrastructure, the authoring agencies recommend U.S. organizations urgently review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the recommendations listed in the <a href="https://www.cisa.gov/#Mitigations"><strong>Mitigations</strong></a> section of this advisory to reduce the risk of compromise.</p>
<p>If owners and operators discover an affected internet-accessible device in their environment, additional technical measures may be necessary to evaluate the risk of compromise. Please engage your cyber incident response plans and contact the authoring agencies and applicable vendors through existing support channels available to customers and integrators (see <a href="https://www.cisa.gov/#Contact"><strong>Contact Information</strong></a>) to receive support, mitigation, and investigation assistance.</p>
<p>For more information on Iranian malicious cyber activity, see CISA’s <a href="https://www.cisa.gov/topics/cyber-threats-and-advisories/advanced-persistent-threats/iran" title="Iran Cyber Threat Overview and Advisories">Iran Threat Overview and Advisories</a> webpage and the FBI’s <a href="https://www.fbi.gov/investigate/counterintelligence/the-iran-threat" target="_blank" title="Iran Threat">Iran Threat</a> and Iran <a href="https://www.fbi.gov/investigate/cyber/cyber-threat-overview-iran" target="_blank" title="Iran Cyber Threat">Cyber Threat Overview</a> webpages.</p>
<p>Download the PDF version of this report:</p>





<div class="c-file">
    <div class="c-file__download">
    <a href="https://www.cisa.gov/sites/default/files/2026-07/aa26-097a-iranian-affiliated-cyber-actors-exploit-programmable-logic-controllers-across-us-critical-infrastructure_508c.pdf" class="c-file__link" target="_blank">Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure</a>
    <span class="c-file__size">(PDF,       1.09 MB
  )</span>
  </div>
</div>
<p><em><strong>(New, July 22, 2026)</strong></em> For a downloadable copy of July 22, 2026<strong> </strong>IOCs, see:</p>
<ul type="square">
<li><a href="https://www.cisa.gov/sites/default/files/2026-07/AA26-097A.stix_.xml">AA26-097A STIX XML</a> (XML, 29 KB)</li>
<li><a href="https://www.cisa.gov/sites/default/files/2026-07/AA26-097A.stix_.json">AA26-097A STIX JSON</a> (JSON, 30 KB)</li>
</ul>
<p>For a downloadable copy of historical April 7, 2026 IOCs, see:</p>





<div class="c-file">
    <div class="c-file__download">
    <a href="https://www.cisa.gov/sites/default/files/2026-04/AA26-097A.stix_.xml" class="c-file__link" target="_blank">AA26-097A.stix_.xml</a>
    <span class="c-file__size">(XML,       35.97 KB
  )</span>
  </div>
</div>





<div class="c-file">
    <div class="c-file__download">
    <a href="https://www.cisa.gov/sites/default/files/2026-04/AA26-097A.stix_.json" class="c-file__link" target="_blank">AA26-097A.stix_.json</a>
    <span class="c-file__size">(JSON,       11.87 KB
  )</span>
  </div>
</div>
<h2><strong>Background Information</strong></h2>
<h3><strong>Similar Historical Activity Targeting Programmable Logic Controllers</strong></h3>
<p>During a similar campaign beginning in November 2023, the IRGC CEC-affiliated cyber threat actors known as "CyberAv3ngers” targeted U.S.-based PLCs and HMIs, causing disruptive effects. Private industry and open sources also refer to this group as Hydro Kitten, Storm-0784, APT Iran, Bauxite, Mr. Soul, Soldiers of Solomon, UNC5691, and the Shahid Kaveh Group. These attacks compromised at least 75 devices, targeting U.S.-based Unitronics PLC devices with an HMI used across multiple critical infrastructure sectors, including the WWS. APT actors developed and deployed custom ladder logic code to these devices, replacing the valid ladder logic with malicious code that continues to be observed to date.</p>
<p>For more information on this group’s activity, see the joint Cybersecurity Advisory <a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a" title="IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities">IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities</a>.</p>
<h3><strong>Ongoing Threat Actor Activity Against U.S.-Based Programmable Logic Controllers</strong></h3>
<p>The FBI observed Iranian-affiliated APT actors targeting internet-exposed PLCs with the intent to cause disruptions—including maliciously interacting with project files, and manipulating data displayed on HMI and SCADA displays—to U.S. critical infrastructure organizations. Iranian-affiliated APT targeting campaigns against U.S. critical infrastructure have recently escalated, likely in response to hostilities between Iran, and the United States and Israel.</p>
<p><em><strong>(New, July 22, 2026) </strong></em>At one U.S. victim, the FBI observed the APT actors download a malicious project file to a targeted PLC using configuration software. Analysis indicated the project file retained ladder logic for downstream function but added logic that overrode specific instruction sets responsible for maintaining safe operating parameters in the victim’s environment.</p>
<p>Since at least March 2026, the authoring agencies identified (through engagements with victim organizations) an Iranian-affiliated APT group disrupted the function of PLCs. Organizations across several U.S. critical infrastructure sectors (including <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/government-services-facilities-sector" title="Government Services and Facilities">Government Services and Facilities</a>, <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/water-and-wastewater-sector" title="Water and Wastewater Systems">WWS</a>, and <a href="https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/energy-sector" title="Energy">Energy</a> Sectors) deployed these PLCs within a wide variety of industrial automation processes. Some of the victims experienced operational disruption and financial loss.</p>
<h2><strong>Technical Details</strong></h2>
<p><strong>Note:</strong> This advisory uses the <a href="https://attack.mitre.org/versions/v19/matrices/enterprise/" target="_blank" title="MITRE ATTACK Matrix for Enterprise">MITRE ATT&amp;CK<sup>®</sup> Matrix for Enterprise</a> framework, version 19. See the <a href="https://www.cisa.gov/#MITRE"><strong>MITRE ATT&amp;CK Tactics and Techniques</strong></a> section of this advisory for tables of the threat actors’ activity mapped to MITRE ATT&amp;CK tactics and techniques.</p>
<h3><strong>Initial Access</strong></h3>
<p><em><strong>(Updated, July 22, 2026)</strong></em> The authoring agencies observed Iranian-affiliated APT actors using several foreign-based IP addresses to access internet-facing PLCs manufactured by Rockwell Automation/Allen-Bradley, Schneider Electric, Siemens, and potentially other manufactured PLCs [<a href="https://attack.mitre.org/versions/v19/techniques/T0883/" target="_blank" title="T0883">T0883</a>]. The actors used leased, third-party hosted infrastructure and manufacturers’ PLC programming software to connect to misconfigured victim PLCs. Inbound malicious traffic has been observed targeting PLC devices on the following ports: <code>44818</code>, <code>2222</code>, <code>102</code>, and <code>502</code>, as well as targeting modems on port <code>22</code>. Targeted devices include:</p>
<ul type="square">
<li><strong>Rockwell Automation:</strong> CompactLogix and Micro850 PLCs</li>
<li><strong>Schneider Electric:</strong> BMX P34/Modicon M340 PLCs</li>
<li><strong>Siemens:</strong> S7-1200 series PLCs</li>
</ul>
<h3><strong>Command and Control</strong></h3>
<p><em><strong>(Updated, July 22, 2026)</strong></em> The targeting of ports [<a href="https://attack.mitre.org/versions/v19/techniques/T0885/" target="_blank" title="T0885">T0885</a>] associated with other OT vendors’ protocols suggests these actors are opportunistically targeting devices manufactured by companies other than Rockwell Automation/Allen-Bradley, including Schneider Electric and Siemens. In one reported instance, the actors utilized Dropbear Secure Shell (SSH) software on victim modems to enable them to gain remote access through port <code>22</code> [<a href="https://attack.mitre.org/versions/v19/techniques/T1219/" target="_blank" title="T1219">T1219</a>].</p>
<h3><strong>Exfiltration</strong></h3>
<p><em><strong>(New, July 22, 2026) </strong></em>The authoring agencies observed Iranian-affiliated APT actors using configuration software—such as Rockwell Automation’s Studio 5000 Logix Designer, Schneider Electric’s EcoStruxure Control Expert, and Siemens’ Totally Integrated Automation (TIA) Portal—on leased, third-party hosted infrastructure to exfiltrate device project files from PLC devices to threat-actor-controlled infrastructure [<a href="https://attack.mitre.org/versions/v19/techniques/T1041/" target="_blank" title="T1041">T1041</a>].</p>
<h3><strong>Impact</strong></h3>
<p><em><strong>(Updated, July 22, 2026)</strong></em> After the actors extracted device project files, the FBI and CISA identified the modification and deletion of project file logic, to include Add-On Instructions (AOIs) and data manipulation on HMI and SCADA displays [<a href="https://attack.mitre.org/versions/v19/techniques/T1565/" target="_blank" title="T1565">T1565</a>]. Additionally, the changes disabled critical shutdown and alarm logic, allowing systems to enter unsafe conditions without notifying operators of the anomalies.</p>
<p><strong>Note:</strong> An AOI is analogous to a “Function Block” or “User Defined Function Block” used in other PLC vendor programs.</p>
<h2><strong>Indicators of Compromise</strong></h2>
<p>See <a href="https://www.cisa.gov/#Table1"><strong>Table 1</strong></a><strong> </strong>and <a href="https://www.cisa.gov/#Table2"><strong>Table 2</strong></a> for recent IP addresses used by the Iranian-affiliated APT actors to communicate with PLCs manufactured by Rockwell Automation/Allen-Bradley, Schneider Electric, and Siemens in the United States.</p>
<p><strong>Disclaimer:</strong> The FBI observed the threat actors using the IP addresses listed below in the specified time frames. This data is being provided for customers to query against logs for indications of historical targeting by the Iranian-affiliated APT actors. The authoring agencies recommend organizations investigate or vet these IP addresses prior to taking action, such as blocking.</p>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<caption><a class="ck-anchor"></a>Table 1. Indicators of Compromise <em><strong>(New, July 22, 2026)</strong></em></caption>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Indicator</th>
<th role="columnheader">Beginning of Actor Association</th>
<th role="columnheader">End of Actor Association</th>
</tr>
</thead>
<tbody>
<tr>
<td>185.82.73[.]175</td>
<td>September 2025</td>
<td>February 2026</td>
</tr>
<tr>
<td>141.11.164[.]153</td>
<td>January 2026</td>
<td>June 2026</td>
</tr>
<tr>
<td>175.110.121[.]42</td>
<td>February 2026</td>
<td>March 2026</td>
</tr>
<tr>
<td>175.110.121[.]39</td>
<td>February 2026</td>
<td>March 2026</td>
</tr>
<tr>
<td>175.110.121[.]41</td>
<td>February 2026</td>
<td>March 2026</td>
</tr>
<tr>
<td>175.110.121[.]107</td>
<td>February 2026</td>
<td>February 2026</td>
</tr>
<tr>
<td>192.142.54[.]79</td>
<td>May 2026</td>
<td>June 2026</td>
</tr>
<tr>
<td>84.200.205[.]165</td>
<td>May 2026</td>
<td>June 2026</td>
</tr>
<tr>
<td>185.225.17[.]225</td>
<td>June 2026</td>
<td>July 2026</td>
</tr>
<tr>
<td>79.133.46[.]209</td>
<td>July 2026</td>
<td>July 2026</td>
</tr>
<tr>
<td>88.80.150[.]199</td>
<td>July 2026</td>
<td>July 2026</td>
</tr>
<tr>
<td>88.80.150[.]200</td>
<td>July 2026</td>
<td>July 2026</td>
</tr>
<tr>
<td>88.80.150[.]202</td>
<td>July 2026</td>
<td>July 2026</td>
</tr>
</tbody>
</table>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<caption><a class="ck-anchor"></a>Table 2. Indicators of Compromise </caption>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Indicator</th>
<th role="columnheader">Beginning of Actor Association</th>
<th role="columnheader">End of Actor Association</th>
</tr>
</thead>
<tbody>
<tr>
<td>185.82.73[.]162</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>185.82.73[.]164</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>185.82.73[.]165</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>185.82.73[.]167</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>185.82.73[.]168</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>185.82.73[.]170</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>185.82.73[.]171</td>
<td>January 2025</td>
<td>March 2026</td>
</tr>
<tr>
<td>135.136.1[.]133</td>
<td>March 2026</td>
<td>March 2026</td>
</tr>
</tbody>
</table>
<h2><a class="ck-anchor"></a><a class="ck-anchor"><strong>MITRE ATT&amp;CK Tactics and Techniques</strong></a></h2>
<p>See <a href="https://www.cisa.gov/#Table3"><strong>Table 3</strong></a> to <a href="https://www.cisa.gov/#Table6"><strong>Table 6</strong></a><strong> </strong>for all referenced threat actor tactics and techniques in this advisory. The authoring agencies recommend organizations review historical TTPs for similar Iranian-affiliated cyber actor activity in <a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a" title="IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities">IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities</a>. For assistance with mapping malicious cyber activity to the MITRE ATT&amp;CK framework, see CISA and MITRE ATT&amp;CK’s <a href="https://www.cisa.gov/news-events/news/best-practices-mitre-attckr-mapping" title="Best Practices for MITRE ATT&amp;CK Mapping">Best Practices for MITRE ATT&amp;CK Mapping</a> and CISA’s <a href="https://github.com/cisagov/Decider/" title="Decider Tool">Decider Tool</a>.</p>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<caption><a class="ck-anchor"></a>Table 3. Initial Access</caption>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Technique Title</th>
<th role="columnheader">ID</th>
<th role="columnheader">Use</th>
</tr>
</thead>
<tbody>
<tr>
<td>Internet Accessible Device</td>
<td><a href="https://attack.mitre.org/versions/v19/techniques/T0883/" target="_blank" title="T0833">T0883</a></td>
<td>The actors accessed and interacted with publicly exposed, internet-accessible PLCs that lacked sufficient network and/or hardening security controls.</td>
</tr>
</tbody>
</table>
<p> </p>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<caption>Table 4. Command and Control</caption>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Technique Title</th>
<th role="columnheader">ID</th>
<th role="columnheader">Use</th>
</tr>
</thead>
<tbody>
<tr>
<td>Commonly Used Port</td>
<td><a href="https://attack.mitre.org/versions/v19/techniques/T0885/" target="_blank" title="T0885">T0885</a></td>
<td>The actors leveraged commonly used OT ports to communicate with PLCs.</td>
</tr>
<tr>
<td>Remote Access Tools </td>
<td><a href="https://attack.mitre.org/versions/v19/techniques/T1219/" target="_blank" title="T1219">T1219</a></td>
<td>The actors deployed Dropbear SSH software on victim modems to enable them to gain remote access through port <code>22</code>.</td>
</tr>
</tbody>
</table>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<caption>Table 5. Exfiltration <em><strong>(New, July 22, 2026)</strong></em></caption>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Technique Title</th>
<th role="columnheader">ID</th>
<th role="columnheader">Use</th>
</tr>
</thead>
<tbody>
<tr>
<td>Exfiltration Over C2 Channel</td>
<td><a href="https://attack.mitre.org/versions/v19/techniques/T1041/" target="_blank" title="T1041">T1041</a></td>
<td>The actors used remote, third-party hosted infrastructure as a C2 channel to transfer device project files out of victim environments.</td>
</tr>
</tbody>
</table>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<caption><a class="ck-anchor"></a>Table 6. Impact</caption>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Technique Title</th>
<th role="columnheader">ID</th>
<th role="columnheader">Use</th>
</tr>
</thead>
<tbody>
<tr>
<td>Data Manipulation</td>
<td><a href="https://attack.mitre.org/versions/v19/techniques/T1565/" target="_blank" title="T1565">T1565</a></td>
<td>The actors maliciously interacted with project files, including modifying and deleting project file logic, and altered data displayed on HMI and SCADA displays.</td>
</tr>
</tbody>
</table>
<h2><a class="ck-anchor"><strong>Mitigations</strong></a></h2>
<p>The authoring agencies recommend organizations implement the mitigations below to improve your organization’s cybersecurity posture on the basis of the threat actors’ activity. These mitigations align with the <a href="https://www.cisa.gov/cpg" title="Cross-Sector Cybersecurity Performance Goals (CPGs)">Cross-Sector Cybersecurity Performance Goals (CPGs)</a> developed by CISA and the National Institute of Standards and Technology (NIST). The CPGs provide a minimum set of practices and protections that CISA and NIST recommend all organizations implement. CISA and NIST based the CPGs on existing cybersecurity frameworks and guidance to protect against the most common and impactful threats and TTPs. Visit CISA’s <a href="https://www.cisa.gov/cpg" title="CPGs webpage">CPGs webpage</a> for more information on the CPGs, including additional recommended baseline protections.</p>
<h3><strong>Network Defenders</strong></h3>
<p>The cyber threat actors accessed PLCs manufactured by Rockwell Automation/Allen-Bradley, Schneider Electric, Siemens, and potentially other branded/manufactured PLCs to cause disruptions to victim systems. To safeguard against this threat and threats to other types of PLCs, the authoring agencies urge organizations to consider the following mitigations.</p>
<p><em><strong>(Updated, July 22, 2026)</strong></em> In addition to contacting the authoring agencies, organizations and integrators operating PLCs from the manufacturers mentioned in this advisory should review the previously issued guidance to strengthen the security of their OT deployments:</p>
<ul type="square">
<li><strong>Rockwell Automation:</strong> Contact the Rockwell Automation Product Security Incident Response Team (PSIRT) at <a href="mailto:PSIRT@rockwellautomation.com">PSIRT@rockwellautomation.com</a> for questions regarding this guidance, or to report cyber incidents related to Rockwell Automation products.<br>
<ul type="circle">
<li>Refer to Rockwell Automation Security Advisory <a href="https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html" target="_blank" title="SD1771">SD1771</a> for recommended PLC hardening measures and configuration guidance.</li>
</ul>
</li>
<li><strong>Schneider Electric:</strong> Contact the Schneider Electric Corporate Product Cyber Emergency Response Team (CPCERT) at <a href="mailto:cpcert@se.com">cpcert@se.com</a> for questions regarding this guidance, or to report cyber incidents related to Schneider Electric products.<br>
<ul type="circle">
<li>Refer to Schneider Electric’s <a href="https://download.se.com/files?p_File_Name=Cybersecurity_Best+Practices_EN.pdf&amp;p_Doc_Ref=7EN52-0390&amp;p_enDocType=White+Paper" target="_blank" title="Recommended Cybersecurity Best Practices">Recommended Cybersecurity Best Practices</a> and <a href="https://download.se.com/files?p_Doc_Ref=EIO0000001999&amp;p_enDocType=User+guide&amp;p_File_Name=EIO0000001999-13_Modicon_Controller_Platform_Cybersecurity_Guide_EN.pdf" target="_blank" title="Cybersecurity User Guide for Modicon Controller Platform">Cybersecurity User Guide for Modicon Controller Platform</a> for guidance on securing and configuring PLCs.</li>
</ul>
</li>
<li><strong>Siemens:</strong> Contact Siemens ProductCERT at <a href="mailto:productcert@siemens.com">productcert@siemens.com</a> for questions regarding this guidance, or to report cyber incidents and vulnerabilities related to Siemens products.<br>
<ul type="circle">
<li>Refer to <a href="https://cert-portal.siemens.com/productcert/html/ssb-104599.html" target="_blank" title="Siemens Security Bulletin 104599">Siemens Security Bulletin 104599</a> for a list of security measures to harden PLCs and in-depth configuration guides.</li>
<li>Siemens users should review the <a href="https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf" target="_blank" title="Cybersecurity for Industry Operational Guidelines">Cybersecurity for Industry Operational Guidelines</a> and implement defense-in-depth controls within their automation systems.</li>
</ul>
</li>
</ul>
<p><strong>Immediate steps to prevent the attack:</strong></p>
<ul type="square">
<li><strong>Disconnect the PLC from the public-facing internet</strong> [<a href="https://www.cisa.gov/cybersecurity-performance-goals-2-0-cpg-2-0#SecureInternetFacingDevices3S" title="CPG 3.S">CPG 3.S</a>]. Follow the joint guidance <a href="https://www.ncsc.gov.uk/collection/operational-technology/secure-connectivity" target="_blank" title="Secure Connectivity Principles for OT">Secure connectivity principles for OT</a> to safely allow remote access. Specifically, “remove inbound port exposure,” so the OT system is never directly exposed to the internet or external networks, and to ensure all access is mediated, monitored, and controlled. Do this through a secure gateway (jump host) that brokers the connection.<br>
<ul type="circle">
<li>Ensure cellular modems, used for remote field connectivity and access, are secured with strong authentication and updated.</li>
<li>Enable logs for connected modems and regularly review for suspicious activity to detect intrusions and improve incident response speed.</li>
<li><em><strong>(New, July 22, 2026) </strong></em>To mitigate unauthorized access to OT via cellular modems, organizations should consider implementing isolated architectures, such as private Access Point Name (APN), 5G Public Network Integrated Non-Public Network (PNI-NPN), cellular Software-Defined Wide Area Network (SD-WAN), Zero Trust Network Access (ZTNA), or a site-to-site virtual private network (VPN).</li>
</ul>
</li>
<li><em><strong>(New, July 22, 2026) </strong></em><strong>Strictly control network access to PLC devices.</strong><br>
<ul type="circle">
<li>Configure firewall rules or access control list (ACL) security features on PLCs or programmable controllers to allow only authorized communications between expected control system devices. Block access from unauthorized or threat actor-controlled IP addresses, such as those associated with hosting providers.</li>
</ul>
</li>
<li><strong>For controllers with a physical mode switch, place the physical mode switch into run position to prevent remote modification. </strong>Devices should only be in the program or remote position when updating or downloading software online and immediately switched back to the run position when complete. (See Rockwell Automation’s<a href="https://www.cisa.gov/#Note2"><sup>2</sup></a><sup> </sup><a href="https://literature.rockwellautomation.com/idc/groups/literature/documents/rm/secure-rm001_-en-p.pdf" target="_blank" title="System Security Design Guidelines">System Security Design Guidelines</a> for manufacturer’s instructions.)<br>
<ul type="circle">
<li><em><strong>(New, July 22, 2026)</strong> </em>Prior to switching the device to run mode, review and validate project files, as changing modes will lock in the current project file downloaded to the device.</li>
</ul>
</li>
<li><strong>For devices that allow software key switching, </strong>enable programming protection in PLC configuration software (S7 TIA Portal) to limit who can modify PLCs remotely. (See Siemens’ <a href="https://assets.new.siemens.com/siemens/assets/api/uuid:c9a2de6e-6bd0-4c32-bba0-f64cac44fcc9/industrial-security-operational-guidelines-en.pdf" target="_blank" title="Cybersecurity for Industry Operational Guidelines">Cybersecurity for Industry Operational Guidelines</a> for the manufacturer’s instructions.)</li>
</ul>
<p><strong>Follow-up steps to strengthen security posture:</strong></p>
<ul type="square">
<li><em><strong>(New, July 22, 2026)</strong> </em><strong>Review project files running on PLCs for unauthorized changes.</strong> Use vendor-provided integrity checking tools and visually compare the running program to known good logic. Ensure reusable logic and input/output configurations are valid. For Rockwell Automation PLCs listed in the <a href="https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html" target="_blank" title="Customer Guidance to Disconnect Devices from the Internet">Customer Guidance to Disconnect Devices from the Internet</a>, check the AOIs for any anomalous modifications.<br>
<ul type="circle">
<li>If restoring from backups, verify the backup does not contain malicious logic before deployment.</li>
<li>Review logs and configurations on all connected devices, including modems, HMIs, and workstations, to assess potential lateral movement by threat actors. If it appears the actors connected to additional devices, reimage these devices to remove any potential malicious changes or access tools.</li>
</ul>
</li>
<li><em><strong>(New, July 22, 2026)</strong> </em><strong>Ensure device passwords are changed from their default </strong>and are configured to use complex, unique combinations of letters, numbers, and symbols that are not easily guessable. Implementing robust password practices remains a critical security measure that can help prevent unauthorized access and strengthen the overall security posture of OT devices.</li>
<li><em><strong>(New, July 22, 2026)</strong> </em><strong>Take defensive measures to minimize the risk of exploitation. </strong>Conduct comprehensive impact analysis and risk assessments prior to deploying defensive measures.</li>
<li><strong>Create and test strong backups of the logic and configurations of PLCs</strong>. Store backup files offline and secure the physical removal media to enable fast recovery.</li>
<li><strong>Implement multifactor authentication</strong> <strong>(MFA)</strong> [<a href="https://www.cisa.gov/cybersecurity-performance-goals-2-0-cpg-2-0#ImplementMultifactorAuthentication3F" title="CPG 3.F">CPG 3.F</a>] for access to the OT network from an external network.</li>
<li>If remote access is required, <strong>implement a network proxy, gateway, firewall, and/or VPN in front of the PLC to control network access</strong>.<br>
<ul type="circle">
<li>A VPN or gateway device can enable MFA for remote access even if the PLC does not support MFA. Implement security rules on these higher-level network security mechanisms to prevent the type of repeated and sustained login attempts seen during a brute force attack. When possible, implement a device control list for workstations sending messages or connecting to OT components.</li>
<li>Use the device control list to monitor for logon activity for unexpected or unusual access to devices from the internet.</li>
</ul>
</li>
<li><strong>Keep PLC devices updated with the latest software patches issued by the manufacturer.</strong> Use established downtime windows to install patches. <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" title="Known Exploited Vulnerabilities">Known Exploited Vulnerabilities</a> may need to be prioritized outside a downtime window.</li>
<li><strong>Configure external and internal firewalls to block traffic using common ports </strong>associated with network protocols that are unnecessary for the particular network segment.</li>
<li><strong>Disable any unused authentication methods, logic, or features, </strong>such as default authentication keys and passwords, as well as unused or needed services such as Teletype Network (Telnet), File Transfer Protocol (FTP), Remote Desktop Protocol (RDP), Virtual Network Computing (VNC), and web services.</li>
<li><strong>Monitor asset management systems for device configuration changes</strong>, which can be used to understand expected parameter settings.</li>
<li><strong>Monitor the content of network traffic</strong> for the following:<br>
<ul type="circle">
<li>Unusual logins to internet-connected devices or unexpected protocols to/from the internet. </li>
<li>Functions of industrial control systems management protocols that change an asset’s operating mode or modify programs.</li>
</ul>
</li>
<li><em><strong>(New, July 22, 2026)</strong> </em><strong>Ensure service providers are informed of active threats targeting internet-connected PLC devices. </strong>Owners and operators should communicate directly with service providers to address risks, especially when remote monitoring or maintenance is involved. Some service providers may rely on internet connectivity essential to monitor and maintain OT/ICS operations but may not be fully aware of active threats.</li>
</ul>
<p>In addition, the authoring agencies recommend network defenders apply the following mitigations to limit potential adversarial use of common system and network discovery techniques, as well as reduce the impact and risk of compromise by cyber threat actors:</p>
<ul type="square">
<li><strong>Reduce risk exposure</strong>. CISA offers a range of services at no cost, including scanning and testing, to help organizations reduce exposure to threats via mitigating attack vectors. CISA’s <a href="https://www.cisa.gov/cyber-hygiene-services" title="Cyber Hygiene Services">Cyber Hygiene Services</a> can help provide additional review of organizations’ internet-accessible assets. </li>
</ul>
<h3><strong>Device Manufacturers</strong></h3>
<p><strong>Note:</strong> The following guidance is general in nature and not specific to any OT vendor. Some of the features, settings, and practices may already be offered by certain vendors. The inclusion of this guidance should not be interpreted as an assertion that vendors referenced do not offer such security features. Also, this advisory is not highlighting a new vulnerability in the identified products, but instead discusses opportunistic targeting. Device manufacturers can make opportunistic attacks more difficult at scale by encouraging more secure behavior by default and in operations, as discussed below. </p>
<p>Although critical infrastructure organizations using PLC devices can take steps to mitigate the risks, it is ultimately the responsibility of the device manufacturer to build products secured by design and default. The authoring agencies urge device manufacturers to take ownership of their customers’ security outcomes by following the principles in the joint guide <a href="https://www.cisa.gov/resources-tools/resources/secure-demand-priority-considerations-operational-technology-owners-and-operators-when-selecting" title="Secure by Demand: Priority Considerations for Operational Technology Owners and Operators when Selecting Digital Products">Secure by Demand: Priority Considerations for OT Owners and Operators when Selecting Digital Products</a>, primarily:</p>
<ul>
<li>Change the manufacturers’ default settings to prevent exposing administrative interfaces to the internet.</li>
<li>Do not charge additional fees for basic security features needed to operate the product securely.</li>
<li>Support MFA, including via phishing-resistant methods.</li>
</ul>
<p>By using secure by design tactics, software manufacturers can make product lines secure “out of the box” without requiring customers to spend additional resources making configuration changes, purchasing tiered security software and logs, monitoring, and making routine updates.</p>
<p>For more information on common misconfigurations and guidance on reducing their prevalence, see joint advisory <a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-278a" title="NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations">NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations</a>. For more information on secure by design, see CISA’s <a href="https://www.cisa.gov/securebydesign" title="Secure by Design">Secure by Design</a> webpage and joint guide.</p>
<h2><strong>Validate Security Controls</strong></h2>
<p>In addition to applying mitigations, the authoring agencies recommend exercising, testing, and validating your organization's security program against the threat behaviors mapped to the MITRE ATT&amp;CK for Enterprise framework in this advisory. The authoring agencies recommend testing your existing security controls inventory to assess how they perform against the ATT&amp;CK techniques described in this advisory.</p>
<p>To get started:</p>
<ol>
<li>Select an ATT&amp;CK technique described in this advisory (see<strong> </strong><a href="https://www.cisa.gov/#Table3"><strong>Table 3</strong></a> to <a href="https://www.cisa.gov/#Table6"><strong>Table 6</strong></a>).</li>
<li>Align your security technologies against the technique.</li>
<li>Test your technologies against the technique.</li>
<li>Analyze your detection and prevention technologies’ performance.</li>
<li>Repeat the process for all security technologies to obtain a set of comprehensive performance data.</li>
<li>Tune your security program, including people, processes, and technologies, based on the data generated by this process.</li>
</ol>
<p>The authoring agencies recommend continually testing your security program, at scale, in a production environment to ensure optimal performance against the ATT&amp;CK techniques identified in this advisory.</p>
<h2><strong>Resources</strong></h2>
<ul type="square">
<li>Authoring Agencies: <a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a" title="IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities">IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities</a></li>
<li>CISA: <a href="https://www.cisa.gov/resources-tools/resources/bulletproof-defense-mitigating-risks-bulletproof-hosting-providers" title="Bulletproof Defense: Mitigating Risks From Bulletproof Hosting Providers">Bulletproof Defense: Mitigating Risks From Bulletproof Hosting Providers</a></li>
<li>EPA: <a href="https://www.epa.gov/cyberwater/epa-cybersecurity-water-sector" target="_blank" title="Cybersecurity for the Water Sector">Cybersecurity for the Water Sector</a></li>
<li>CISA: <a href="https://www.cisa.gov/water" title="Water and Wastewater Cybersecurity">Water and Wastewater Cybersecurity</a></li>
<li>CISA: <a href="https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems" title="Exploitation of Unitronics PLCs used in Water and Wastewater Systems">Exploitation of Unitronics PLCs used in Water and Wastewater Systems</a></li>
<li>CISA: <a href="https://www.cisa.gov/topics/cyber-threats-and-advisories/advanced-persistent-threats/iran" title="Iran Cyber Threat Overview and Advisories">Iran Threat Overview and Advisories</a></li>
<li>FBI: <a href="https://www.fbi.gov/investigate/counterintelligence/the-iran-threat" target="_blank" title="The Iran Threat">The Iran Threat</a> and <a href="https://www.fbi.gov/investigate/cyber/cyber-threat-overview-iran" target="_blank" title="Cyber Threat Overview: Iran">Cyber Threat Overview: Iran</a></li>
<li>CISA, MITRE: <a href="https://www.cisa.gov/news-events/news/best-practices-mitre-attckr-mapping" title="Best Practices for MITRE ATT&amp;CK Mapping">Best Practices for MITRE ATT&amp;CK Mapping</a></li>
<li>CISA: <a href="https://github.com/cisagov/Decider/" title="Decider Tool">Decider Tool</a></li>
<li>CISA: <a href="https://www.cisa.gov/cybersecurity-performance-goals-2-0-cpg-2-0" title="Cross-Sector Cybersecurity Performance Goals 2.0">Cross-Sector Cybersecurity Performance Goals 2.0</a></li>
<li>CISA: <a href="https://www.cisa.gov/topics/cyber-threats-and-advisories/cyber-hygiene-services" title="No-Cost Cybersecurity Services and Tools">No-Cost Cybersecurity Services and Tools</a></li>
<li>CISA: <a href="https://www.cisa.gov/resources-tools/resources/secure-demand-priority-considerations-operational-technology-owners-and-operators-when-selecting" title="Secure by Demand: Priority Considerations for Operational Technology Owners and Operators when Selecting Digital Products">Secure by Demand: Priority Considerations for OT Owners and Operators when Selecting Digital Products</a></li>
<li>NSA, CISA: <a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-278a" title="NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations">NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations</a></li>
<li>CISA: <a href="https://www.cisa.gov/securebydesign" title="Secure by Design">Secure by Design</a></li>
<li>FBI, CISA: <a href="https://www.ic3.gov/CSA/2025/250506.pdf" target="_blank" title="Primary Mitigations to Reduce Cyber Threats to Operational Technology">Primary Mitigations to Reduce Cyber Threats to Operational Technology</a></li>
<li>United Kingdom National Cyber Security Centre: <a href="https://www.ic3.gov/CSA/2026/260114.pdf" target="_blank" title="Secure Connectivity Principles for Operational Technology (OT)">Secure connectivity principles for operational technology</a></li>
</ul>
<h2><a class="ck-anchor"><strong>Contact Information</strong></a></h2>
<p>U.S. organizations are encouraged to report suspicious or criminal activity related to information in this advisory to CISA, the FBI, and/or NSA:</p>
<ul type="square">
<li>Contact CISA via CISA’s 24/7 Operations Center at <a href="mailto:contact@cisa.dhs.gov">contact@cisa.dhs.gov</a> or 1-844-Say-CISA (1-844-729-2472). File a claim with FBI’s <a href="https://ic3.gov/" target="_blank" title="Internet Crime Complaint Center (IC3)">Internet Crime Complaint Center (IC3)</a> or contact your local <a href="https://www.fbi.gov/contact-us/field-offices" target="_blank" title="FBI field office">FBI field office</a>. When available, please include the following information regarding the incident: 
<ul>
<li>Date, time, and location of the incident;</li>
<li>Type of activity;</li>
<li>Number of people affected;</li>
<li>Type of equipment used for the activity; and</li>
<li>Name of the submitting company or organization, and a designated point of contact.</li>
</ul>
</li>
<li>For NSA cybersecurity guidance inquiries, contact <a href="mailto:CybersecurityReports@nsa.gov" title="CybersecurityReports@nsa.gov">CybersecurityReports@nsa.gov</a>.</li>
<li>Entities required to report incidents to DOE should follow established reporting requirements, as appropriate. For other energy sector inquiries, contact <a href="mailto:EnergySRMA@hq.doe.gov" title="EnergySRMA@hq.doe.gov">EnergySRMA@hq.doe.gov</a>.</li>
<li>Contact the Rockwell Automation PSIRT for questions regarding their guidance or for reporting cyber incidents related to Rockwell Automation products at <a href="mailto:PSIRT@rockwellautomation.com" title="PSIRT@rockwellautomation.com">PSIRT@rockwellautomation.com</a>.</li>
<li>Contact the Schneider Electric CPCERT at <a href="mailto:cpcert@se.com">cpcert@se.com</a> for questions regarding this guidance, or to report cyber incidents related to Schneider Electric products.</li>
<li>Contact Siemens ProductCERT for up-to-date information about the security of Siemens products or to report cybersecurity vulnerabilities at <a href="mailto:productcert@siemens.com">productcert@siemens.com</a>. For support with increasing the security of installed Siemens PLCs, contact Siemens Industrial Cybersecurity Services at <a href="mailto:services.automation@siemens.com">services.automation@siemens.com</a>. See <a href="https://www.siemens.com/en-us/content/cert-services/" target="_blank" title="Siemens ProductCERT and Siemens CERT">Siemens ProductCERT and Siemens CERT</a> for more information.</li>
</ul>
<h2><strong>Disclaimer</strong></h2>
<p>The information in this report is being provided “as is” for informational purposes only. CISA and the authoring agencies do not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this document. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, recommendation, or favoring by CISA and the authoring agencies.</p>
<h2><strong>Version History</strong></h2>
<p><strong>April 7, 2026</strong>: Initial version.</p>
<p><strong>July 22, 2026</strong>: Update includes new guidance on detecting malicious activity, expanded scope of observed targeting, and best practices for secure PLCs deployment.</p>
<h2><strong>Notes</strong></h2>
<p><a class="ck-anchor"></a><sup>1</sup>Project file refers to the software file that contains ladder logic and configuration settings. On Rockwell Automation devices, it is referred to as an .ACD file.</p>
<p><a class="ck-anchor"></a><sup>2 </sup>See <a href="https://literature.rockwellautomation.com/idc/groups/literature/documents/um/1769-um021_-en-p.pdf" target="_blank" title="CompactLogix 5370 Controllers">CompactLogix 5370 Controllers</a> (Chapter 5: “Select the Operating Mode of the Controller”) for more information on functions available for the switch.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[The Rust Programming Language Blog: The many journeys of learning Rust]]></title>
<description><![CDATA[This is another post in our series covering what we learned through the Vision Doc process. We previously described the overall approach and what we learned about doing user research, we explored what people love about Rust, dug into what it takes to ship safety-crticial Rust, and described some ...]]></description>
<link>https://tsecurity.de/de/3693289/tools/the-rust-programming-language-blog-the-many-journeys-of-learning-rust/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3693289/tools/the-rust-programming-language-blog-the-many-journeys-of-learning-rust/</guid>
<pubDate>Sat, 25 Jul 2026 08:37:24 +0200</pubDate>
<category>💾  Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><em>This is another post in our series covering what we learned through the Vision Doc process. We previously <a href="https://blog.rust-lang.org/2025/12/03/lessons-learned-from-the-rust-vision-doc-process/" rel="external">described the overall approach and what we learned about doing user research</a>, we <a href="https://blog.rust-lang.org/2025/12/19/what-do-people-love-about-rust/" rel="external">explored what people love about Rust</a>, <a href="https://blog.rust-lang.org/2026/01/14/what-does-it-take-to-ship-rust-in-safety-critical/" rel="external">dug into what it takes to ship safety-crticial Rust</a>, and <a href="https://blog.rust-lang.org/2026/03/20/rust-challenges/" rel="external">described some of the major challenges that people face when using Rust</a>.</em></p>
<p>In this post we walk through what folks have found on their journey to learn the Rust programming language with ups and downs covered.</p>
<p>As a disclaimer, LLMs (Large Language Models) come up in this post because our interviewees brought them up. We're scoping discussion to their use as a learning tool, covering research and example generation, not broader questions about AI (Artificial Intelligence) in software development.</p>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#many-paths-to-needing-rust"></a>
Many paths to needing Rust</h3>
<p>The interviews surfaced several different paths into Rust: curiosity, embedded work, job-market pressure, organizational adoption, and reassignment after a team or company chose Rust. That last path matters because many learners are not evaluating Rust from a blank slate; they are trying to become productive after Rust has already arrived in their work.</p>
<blockquote>
<p>"Funny enough, I've advocated for more niche languages than Rust in the past. Rust has pretty much stopped being as much of a niche language as it was, but it's not Java." -- Fractional CTO</p>
</blockquote>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#rust-learning-resources"></a>
Rust learning resources</h3>
<p>Likely as expected, the folks that we talked to reach for a range of resources to learn Rust. Some reach for official documentation, such as <a href="https://doc.rust-lang.org/book/" rel="external">The Rust Programming Language Book</a> and find that sufficient to build on what the compiler was already showing them.</p>
<blockquote>
<p>"I started with the official Rust documentation because there are a lot of great examples of how features like the borrow checker work." -- Software engineer at an Automotive supplier</p>
</blockquote>
<p>Others needed more passes and more formats, sometimes reaching for resources the community maintains, such as <a href="https://rustlings.rust-lang.org/" rel="external">Rustlings</a>, <a href="https://danielkeep.github.io/tlborm/book/index.html" rel="external">The Little Book of Rust Macros</a>, and <a href="https://rust-unofficial.github.io/too-many-lists/" rel="external">Learn Rust With Entirely Too Many Linked Lists</a>.</p>
<blockquote>
<p>"The first time I went through the chapter in [The Rust Programming Language] on borrow checking, I was like, what is this? I read it again, then I watched a YouTube video of someone explaining the chapter." -- Rust freelance consultant</p>
</blockquote>
<blockquote>
<p>"Rust book, Rustlings, Zero to Production in Rust, Jon Gjengset tutorials. A bunch of books. It's not a one-pass reading. Can't say how many times I've gone through it." -- Software engineer working on video streaming and storage</p>
</blockquote>
<p>These resources have brought up an entire generation of Rust programmers. But, to some, there is a perception that these resources have trouble keeping pace with the language.</p>
<blockquote>
<p>"We'd like to use [The Rust Programming Language/'the book'], but we've found that it's out of date, unfortunately. We've looked at the GitHub repo and found it's got a lot of unresolved issues and unmerged PRs" -- Principal Software Engineering work on Rust adoption in a regulated industry</p>
</blockquote>
<p>Whether or not this is factually true, Rust's growth has nonetheless put more scrutiny on these materials. Companies evaluating adoption and engineers getting reassigned to Rust teams are looking at them with fresh eyes and finding the gaps that affect their own evaluation.</p>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#beginner-stumblings-and-unlearning-habits"></a>
Beginner stumblings and unlearning habits</h3>
<p>It's pretty typical for Rust to be the 2nd, 3rd or Nth programming language that someone picks up. They'd end up writing their most familiar language in Rust, whether C++ patterns, Java patterns, or whatever they knew, for months or even years. Eventually they got comfortable enough to start writing idiomatic Rust.</p>
<blockquote>
<p>"There's a bit of a drop in productivity compared to C if you're already familiar with it just because you're learning new rules, new syntax."  -- Principal Firmware Engineer (mobile robotics)</p>
</blockquote>
<blockquote>
<p>"In the beginning it was more poking around the code and adding and removing some ampersands and asterisks to try to make sense of <code>mut</code> and not <code>mut</code> and whatever." -- Senior engineer with 20 years of Java experience in cloud and IoT</p>
</blockquote>
<p>We also spoke with someone who found that not having much of a programming background seemed to benefit people picking up Rust. Not having worn-in grooves from other languages may play a role here, and it's worth investigating further.</p>
<blockquote>
<p>"I had someone who had never programmed much before start working on the internals of [our Rust project]. She was just fine with getting into Rust. It's more of the senior people that struggle as they need to unlearn practices which may work in other languages, but it's not the 'Rust' way." -- Researcher, Automotive OEM R&amp;D Lab</p>
</blockquote>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#learning-to-work-with-the-borrow-checker"></a>
Learning to work with the borrow checker</h3>
<p>We heard a lot about learning to work with the borrow checker instead of against it. People get there through different paths, but a few patterns came up repeatedly.</p>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#the-compiler-as-teacher"></a>
The compiler as teacher</h4>
<p>Rust's diagnostics did the teaching on their own, especially around lifetimes.</p>
<blockquote>
<p>"If you mess up the lifetimes in a piece of code that you've written by hand, I usually find that Rust's diagnostics are very helpful" -- Researcher working on static analysis of Rust programs</p>
</blockquote>
<blockquote>
<p>"Whatever's missing, the compiler usually fills in: it tells me 'you need to declare the lifetime of this reference', so I know and can figure it out. That all generally works pretty well." -- Senior Software Engineer</p>
</blockquote>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#learning-by-doing"></a>
Learning by doing</h4>
<p>Others felt like they only really internalized the borrow checker after writing a lot of Rust. It took projects, coding challenges, prototyping and so on until at some point it clicked.</p>
<blockquote>
<p>"I actually did not understand the borrow checker until I spent a lot of time writing Rust" -- Founder of a startup built on Rust</p>
</blockquote>
<blockquote>
<p>"Besides the prototyping work, I also did coding-challenge-type stuff to get familiar with Rust for Advent of Code. [..] It eventually clicked to the point where I wasn't fighting with Rust, it was working for me. I had that experience other people describe: when I managed to get my program to fit with Rust, it worked. I didn't spend time debugging." -- Principal Software Engineer, large SaaS provider</p>
</blockquote>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#letting-go-of-clone-guilt"></a>
Letting go of "clone guilt"</h4>
<p>Some learners arrive with the assumption that good Rust means zero clones, zero copies, lifetimes threaded through everything. They set the bar at optimal before they've learned how to write idiomatic Rust, and it makes the borrow checker feel harder than it needs to be at the outset.</p>
<blockquote>
<p>"On one of my first projects, I was like, 'I don't ever want to copy or clone anything,' so I carefully wove through all the lifetimes and got myself into a bit of a bind. Then I saw someone else just cloning the struct I was working with, and it was super cheap. Sometimes you can just clone and it's going to be okay." -- Researcher at a university</p>
</blockquote>
<p>The experienced Rust developers we spoke with consistently said the same thing: clone freely while you're learning, then optimize when you understand the problem. Rust's reputation for performance and correctness feeds this. Newcomers assume anything less than optimal is wrong before they've written a first working program, and clone guilt is how that shows up.</p>
<p>We think it could be an interesting area of future study to check into the patterns Rust programmers employ at different levels of experience and under which circumstances. One member of the Rust Vision doc team that's very experienced with Rust noted that there's kind of an "expected shape" they understand as passing the compiler. This knowledge influences how they approach writing code which wouldn't take that shape and they naturally find themselves understanding when to use so-called workarounds, such as passing around indices into arrays or <code>Vec</code>s.</p>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#multi-paradigm-but-not-the-oop-some-are-used-to"></a>
Multi-paradigm, but not the OOP some are used to</h3>
<p>The Rust programming language is multi-paradigm, and how that lands depends on what you're coming from. We heard some that came from a functional background were delighted with digging into learning how much Rust inherits from that lineage. Some others noted that they and others on their teams struggled to unlearn the object-oriented style they'd come to use heavily in other languages like C++ and Java.</p>
<blockquote>
<p>"Developers coming from C++ tend to think object-oriented. I think that's a difference between C++ and Rust." -- Architect at Automotive OEM</p>
</blockquote>
<blockquote>
<p>"I had exactly that thing, where I would apply all my years of Java and JS thinking, where I could just create some object, not care about it, return it, have it sloshing around between various functions. Found myself reaching for these patterns and then being told 'no, you cannot do that'." -- Principal Engineer at a SaaS company</p>
</blockquote>
<p>Developers coming from functional programming had less to unlearn: strong typing, pattern matching, and an expression-oriented style were already familiar.</p>
<blockquote>
<p>"My background has been more functional programming, strong typing. That originated for me as a Lisper: once a Lisper, always a Lisper." -- Principal Software Engineer working on Rust tooling for safety-regulated industries</p>
</blockquote>
<blockquote>
<p>"The languages I primarily used before Rust were things like OCaml. Way back, I came from C and C++, the classic languages, and then I spent quite a long time doing primarily pure functional stuff. These days I've ended up back in what I like to think of as a pragmatic center ground [with Rust]." -- Fractional CTO</p>
</blockquote>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#teaching-rust-in-academia"></a>
Teaching Rust in academia</h3>
<p>We spoke with a university professor that's been teaching Rust generally. In the academic environment, they were able to use proxies for some things such as "traits are like interfaces in Java" because the students had already gone through a set of courses in their first and second years that taught them Java. They introduced concepts slowly throughout the course, choosing to deal with some more complex topics like generics later. The outcome generally was that students had no problem picking up Rust in this setting.</p>
<blockquote>
<p>"I couldn't see any big difference on the embedded side. We also teach an embedded class, and we did an experiment. Half of the students' feedback was worse on the Rust class, mostly because they needed to build the project themselves. The C students just got one from [an LLM], absolutely no problem." -- University Professor, on teaching Rust</p>
</blockquote>
<p>The C cohort leaned on LLMs for the project in ways the Rust cohort couldn't. We don't yet have a clear answer for why.</p>
<p>What did come through clearly was the Rust cohort's experience with the community. Some students needed to figure out which drivers to use for the embedded project and how to use them. Their professor encouraged them to open issues and ask questions directly on GitHub, and the maintainers responded. Students who had never contributed to open source before were getting answers from the people who wrote the code.</p>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#learning-using-llms"></a>
Learning using LLMs</h3>
<p>Some experienced folks shared that they saw LLMs as a tool that can help someone come up to speed quickly, either as a research tool or for generating example Rust code to understand concepts.</p>
<blockquote>
<p>"I'm optimistic that there's a way to work [LLMs] in that will cut down that learning curve. One of the big things these tools bring is reducing the learning curve in general; these are very good tools to help you navigate a space that you don't know yet." -- Maintainer of large open source Rust crate</p>
</blockquote>
<blockquote>
<p>"I try [LLMs] out once a month, usually for generating an example or something like this. Just like with Stack Overflow: when you read an example, you should read it carefully and try to understand it. Not copy and paste it, but type it in your own words in code and then check it, because that's where the teeny tiny little mistakes are." -- Founder of startup built on Rust</p>
</blockquote>
<p>For some learners, an LLM is just another way to find answers, no different than a search engine.</p>
<blockquote>
<p>"So for the most part, picking up Rust - how do I learn? I'll [use web search for] things, I'll ask [an LLM], I'll just poke around and read the code." -- Senior Software Engineer working in a regulated space</p>
</blockquote>
<p>One founder went further and claimed that LLMs change who can become a Rust developer. One consulting company founder described hiring high school graduates with no systems programming background and training them as Rust developers, with LLMs filling in the learning gaps that would previously have required years of experience.</p>
<blockquote>
<p>"At the beginning, I was worried, but now that we have [LLMs] supporting development, the difficulty of the language doesn't matter. I'm seeing a huge opportunity behind strong runtime languages like Rust. [..] In [Developing Country] we hire 20-25 high school graduates, train them to be Rust programmers, then they enhance our workforce worldwide." -- Founder of a consulting company</p>
</blockquote>
<p>We heard this from one organization. This is a claim that the combination of Rust's compiler and LLM tooling can dramatically shorten the path from beginner to working developer. Whether it generalizes depends on questions we can't answer from a single interview: how long these developers stay, what kind of code they can maintain independently, and whether this training/learning model works outside this company's particular structure. If it holds up, the pool of people who can become Rust developers is much larger than the usual hiring profile suggests.</p>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#organizational-considerations-for-rust-learners"></a>
Organizational considerations for Rust learners</h3>
<p>We spoke with a number of folks on teams that are using Rust in larger organizations. Teams wanted to know that everyone would end up at roughly the same level of competence, which led a good number to invest in training courses to get there. Some leaders found that staff was able to ramp well enough by reading The Rust Programming Language, going through Rustlings, and then picking up lower risk and priority tickets to work on. Having a sense of community was also important within companies; it helps people know they are not alone when they are asked to work on Rust after, say, a reorganization happens.</p>
<blockquote>
<p>"[..] the idea with the class as opposed to 'just read the Rust book on your own' was that this gives everyone kind of the same baseline going in."  -- Principal Firmware Engineer (mobile robotics)</p>
</blockquote>
<blockquote>
<p>"So typically we're going to have people work through Rustlings, work through The Rust Programming Language. We have them then start to pick up lower risk tickets to work on." -- Principal Engineer at a large SaaS provider</p>
</blockquote>
<blockquote>
<p>"We've got an internal Slack channel for Rust learning where people can drop questions and others will come in and answer them. That helps build up understanding and community." -- Software Engineer at a large corporation</p>
</blockquote>
<p>Some organizations found that while the person they'd hire would need to learn Rust, it was still preferable to the alternative of hiring someone for a critical piece of software written in another language.</p>
<blockquote>
<p>"They needed to grow and maintain this C++ codebase. They had a C++ wizard, and they tried for about two years to find someone with the same level of expertise. They ended up hiring people that didn't know Rust and ramping them up, creating FFI bindings from the C++ side so they could work in Rust. And you can feel it: the borrow checker is teaching these people the right way to handle their systems." -- Principal Engineer at an Automotive OEM</p>
</blockquote>
<p>The community and helping each other aspect seems to grow bonds as organizations mature.</p>
<blockquote>
<p>"Our team is [all about] mentorship. I've mentored people coming up to speed on Rust, and people help each other hugely." -- Principal Software Engineer at a large SaaS company</p>
</blockquote>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#silent-attrition"></a>
Silent attrition</h3>
<p>We identified some cases where people have approached Rust and bounced off of it, for one reason or another. In the below case, someone with a background in a language with fewer guardrails found themselves frustrated enough with Rust to walk away.</p>
<blockquote>
<p>"All of that means that that embedded ecosystem is very frustrating to somebody who comes from C and is like, why can't I just get a pointer to this peripheral and then write into the registers. What are you doing to me? [..] My friend never got over that. He looked at it and said, I'm not going to deal with this and walked away." -– A second University Professor</p>
</blockquote>
<p>There may be language features that for a particular domain are not seen as comfortable or usable yet, such as async Rust usage in a safety domain. We'd like to map which language features feel off-limits in which domains; async in safety-critical work probably isn't the only case.</p>
<blockquote>
<p>"We're not fully sure how async [Rust] will work out in the long run in our domain. [..] People don't feel comfortable yet since C++14 doesn't provide such concepts. [..] It's the chicken-and-egg problem again: we probably need to gain some experience to see whether we can actually benefit from these new concepts in the automotive and safety domains." -- Team Lead at Automotive Supplier (ASIL D target)</p>
</blockquote>
<p>We heard in at least one case, that while the language was challenging and there was a near bounce, the tooling helped keep them coming back and trying.</p>
<blockquote>
<p>"Well, I think my early impressions of Rust - one is I find C++ so intimidating, and I think a big part of why I was able to succeed at [..] learning Rust is the tooling. I mean, all this makes sense [..] but it's like, for me, getting started with Rust, the language was challenging, but the tooling was incredibly easy." -- Founder of another startup built on Rust</p>
</blockquote>
<p>While it might be considered more of a community concern, if there are interactions online and in spaces that point to learners having
so-called "skill issues" this feeds into the narrative that Rust must be hard to learn. We may be unintentionally turning away Rust Project contributors and maintainers due to the vibes being put out when new learners show up in certain spaces.</p>
<blockquote>
<p>"People are very helpful, but generally the attitude is: if your program is very complicated, it's mostly a skill issue. There's not that much empathy when people get stuck learning, and a lot of people are just pushed away by it. There's probably a huge number of people who silently stop wanting to write Rust, because at some point it gets complicated and the feedback they get is 'you just need to be a better programmer, obviously'." -- Software Engineer at a SaaS Provider</p>
</blockquote>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#feedback-on-near-bounces-from-survey"></a>
Feedback on near-bounces from survey</h4>
<p>We found a few interesting perspectives collected in the Rust Vision doc survey which we administered with examples of bouncing and coming back:</p>
<blockquote>
<p>"I started before 1.0, got stuck very soon when trying to translate patterns from C++ to Rust (due to borrow checking). I tried again after 1.0 and it stuck. [..]" -- Survey Respondent A</p>
</blockquote>
<p>Survey Respondent A went on to share in a more detailed response about a perceived weakness in Rust learning materials related to lifetimes and the borrow checker are explained. There was an observation that it's fairly easy to run into more complex situations with lifetimes and the borrow checker. They felt that the current state of this sort of material and tutorials is fairly superficial and can leave learners stuck when they run into those more complex situations.</p>
<p>One respondent that bounced once and came back shared challenges around usage of async. In concert with Rust's memory-safety and the borrow checker, they found some of the nitty-gritty details of async were difficult to learn. While we're aware of the Rust Project's continuous efforts to improve Rust's async story, this is another data point of a user that faced challenges.</p>
<p>Another survey respondent shared how they had multiple times bounced in trying to learn Rust. They returned after a year or so and found Rustlings to be highly motivating. We note that having multiple pathways for folks to learn Rust opens up more possibilities for those that nearly bounced, just like this person.</p>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#need-more-focused-work-on-silent-attritrion"></a>
Need more focused work on silent attritrion</h4>
<p>The thing that stood out most to us was the lack of real, first-hand knowledge of having bounced when learning Rust. While this is an obvious effect of soliciting answers to our survey and opportunities to interview through Rust channels and our networks, this cohort is good future candidate where interviews could start.</p>
<h3><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#conclusions"></a>
Conclusions</h3>
<p>Across these conversations, the experience of learning Rust depended heavily on context. Why someone was learning and what support they had mattered as much as the borrow checker. The same kinds of examples kept coming up: a training course that got a team to a shared baseline, a maintainer answering a student's first GitHub issue, and a colleague whose code showed that cloning was okay.</p>
<p>That context is largely something the community has a hand in. With that in mind, here is what we take away from what we heard, and what we still don't know.</p>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#what-seems-worth-trying"></a>
What seems worth trying</h4>
<p><strong>Learning materials aimed at unlearning.</strong> Syntax barely came up when people described their struggles. People struggled with unlearning habits from previous languages, whether OOP structuring from C++ and Java or the instinct to grab a raw pointer to a peripheral. Most of our learning materials teach Rust from first principles, and that works. What we didn't come across is much written for, say, the engineer with ten years of Java who lands on a Rust team after a reorg: material that names the patterns they'll reach for that won't transfer, and shows what to do instead. The professor we spoke with did a version of this in the classroom, leaning on "traits are like interfaces in Java" and saving generics for later in the course, and the students did fine. Something similar could work outside the classroom too.</p>
<p><strong>Put the "clone freely while you're learning" advice somewhere official.</strong> Every experienced developer we spoke with gave the same advice, but learners seem to mostly pick it up by accident, like the researcher who happened to see someone else cloning the struct they had been carefully threading lifetimes through. Saying it early in official materials would take some of the steepness out of the curve. The broader version belongs there too: idiomatic Rust doesn't have to mean optimal Rust, especially on a first project.</p>
<p><strong>Diagnostics are already a primary learning resource: several people told us the compiler taught them lifetimes before any documentation did.</strong> Diagnostics reach learners right at the moment they're stuck. When writing new ones, it seems worth keeping the confused newcomer in mind alongside the expert, because for a lot of people this is where the learning happens.</p>
<p><strong>Is "the book" actually out of date?</strong> Whether or not The Rust Programming Language or other materials are actually behind, a team evaluating Rust looked at its repository, saw unresolved issues and unmerged PRs, and moved on. As more companies evaluate adoption, more people will look at these materials with the same fresh eyes. Visible issue triage and some communication about what's current and what's planned would address the perception, separately from whatever content work may or may not be needed.</p>
<p><strong>How stuck learners get treated is shaping who stays.</strong> We heard about students getting answers on GitHub from the maintainers who wrote the code, and we heard about learners being told their struggles were a skill issue. The first group came away with a lasting good impression of Rust. Some of the second group walked away entirely, and because they leave quietly, it's easy to underestimate how many of them there are. The welcoming side of the community came up unprompted as a reason people stayed, so we know it makes a difference when we get this right.</p>
<p><strong>Every organization we spoke with described essentially the same ramp-up for bringing a team to Rust.</strong> Teams that brought groups of developers to Rust described roughly the same approach: get everyone to a shared baseline with a training course or with The Rust Programming Language and Rustlings, start people on lower-risk tickets, and give them somewhere internal to ask questions. Several organizations also found that hiring developers without Rust experience and ramping them up worked out better than continuing to search for rare expertise in another language. None of this is complicated, and teams weighing adoption don't need to invent a training program from scratch.</p>
<h4><a class="anchor" href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/#what-we-still-don-t-know"></a>
What we still don't know</h4>
<p>The biggest gap is the people we didn't reach. Nearly everyone we spoke with stuck with Rust long enough to be reachable through Rust channels, so the stories of bouncing off came to us second-hand: a friend who walked away from embedded Rust, colleagues who quietly stopped after the responses they got. As we wrote in <a href="https://blog.rust-lang.org/2025/12/03/lessons-learned-from-the-rust-vision-doc-process/" rel="external">our first post</a>, finding people who decided against Rust takes targeted outreach. If the proposed User Research team comes together, talking with learners who bounced would make a good early project, and learning is probably the area where that research would teach us the most.</p>
<p>We also don't know what to make of LLMs as a learning tool yet. They came up as a search engine, as an example generator, and in one organization's case as something that makes training high school graduates into working Rust developers possible. We saw a classroom where the C cohort leaned on LLMs in ways the Rust cohort couldn't, and we don't have an explanation for it. All of this comes from a handful of conversations, so we treat it as a set of leads to follow up on. Given how quickly the tools are changing, it seems better to study this deliberately than to wait and see what folklore develops.</p>
<p>The folks we spoke with showed that people do get there: with enough passes through the materials and enough code written, it eventually clicks. The opportunities above are mostly about making it work for the people who didn't pick Rust on purpose, and for the ones who would have stuck around if their early experience had gone a little differently.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Security: Mangelnde Rechteprüfung in terraform-provider-susepubliccloud (SUSE)]]></title>
<description><![CDATA[]]></description>
<link>https://tsecurity.de/de/3693144/unix-server/security-mangelnde-rechtepruefung-in-terraform-provider-susepubliccloud-suse/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3693144/unix-server/security-mangelnde-rechtepruefung-in-terraform-provider-susepubliccloud-suse/</guid>
<pubDate>Sat, 25 Jul 2026 07:17:46 +0200</pubDate>
<category>🐧 Unix Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[ ]]></content:encoded>
</item>
<item>
<title><![CDATA[Anthropic launches Claude Opus 5, a cheaper AI model for coding, agents and enterprise workflows]]></title>
<description><![CDATA[Anthropic released Claude Opus 5 on Friday, a model the company says delivers nearly all the intelligence of its top-of-the-line Claude Fable 5 at half the cost — a launch that signals how the AI race is shifting from raw capability to the economics of daily use.The model, available immediately o...]]></description>
<link>https://tsecurity.de/de/3692246/it-nachrichten/anthropic-launches-claude-opus-5-a-cheaper-ai-model-for-coding-agents-and-enterprise-workflows/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3692246/it-nachrichten/anthropic-launches-claude-opus-5-a-cheaper-ai-model-for-coding-agents-and-enterprise-workflows/</guid>
<pubDate>Fri, 24 Jul 2026 20:10:11 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><a href="https://www.anthropic.com/">Anthropic</a> released Claude <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> on Friday, a model the company says delivers nearly all the intelligence of its top-of-the-line Claude <a href="https://www.anthropic.com/claude/fable">Fable 5</a> at half the cost — a launch that signals how the AI race is shifting from raw capability to the economics of daily use.</p><p>The model, available immediately on all of Anthropic's platforms, is priced at $5 per million input tokens and $25 per million output tokens, unchanged from its predecessor, <a href="https://www.anthropic.com/news/claude-opus-4-8">Opus 4.8</a>. It becomes the new default model on <a href="https://support.claude.com/en/articles/11049741-what-is-the-max-plan">Claude Max</a>, Anthropic's premium consumer tier, and the strongest model available on <a href="https://support.claude.com/en/articles/8325606-what-is-the-pro-plan">Claude Pro</a>.</p><p>The positioning is deliberate. Anthropic is not claiming <a href="http://anthropic.com/news/claude-opus-5">Opus 5 </a>is its smartest model — that distinction still belongs to <a href="https://www.anthropic.com/claude/fable">Fable 5</a>, and rival systems retain an edge in certain domains. Instead, the company is making a subtler argument that may matter more to enterprise buyers: that the most economically important AI work happens in a middle band of difficulty, where near-frontier intelligence delivered efficiently and cheaply beats frontier intelligence delivered expensively.</p><p>"Opus 5 as your daily driver, the model you hand complex work to and review when it's done," an Anthropic spokesperson said in an interview with VentureBeat, describing how the company's lineup now stratifies. "Fable 5 for your most ambitious work, the days-long autonomous projects nothing could take on before... Sonnet 5 for work you run at scale, where speed and cost per call decide what ships. Haiku 4.5 for subagents and instant answers."</p><h2><b>How Claude Opus 5 benchmark results stack up against Fable 5 and rival AI models</b></h2><p>On paper, the results are striking. Anthropic says <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> sets new state-of-the-art marks on coding and knowledge-work evaluations including <a href="https://www.frontierbench.ai/announcement">Frontier-Bench</a> and <a href="https://artificialanalysis.ai/evaluations/gdpval-aa">GDPval-AA</a>. On <a href="https://www.frontierbench.ai/announcement">Frontier-Bench v0.1</a>, an agentic terminal coding benchmark, Opus 5 scores 43.3 percent — more than double Opus 4.8's 18.7 percent and well ahead of Fable 5's 33.7 percent — at a lower cost per task, according to the company. On <a href="https://arcprize.org/arc-agi/3">ARC-AGI 3</a>, an evaluation of novel problem-solving, Anthropic reports Opus 5 scored three times as high as the next best model. On <a href="https://github.com/xlang-ai/OSWorld-V2">OSWorld 2.0</a>, a computer-use benchmark, the company says the model surpasses Fable 5's best result at just over a third of the cost.</p><p>The numbers come with honest caveats that are themselves notable in an industry prone to superlatives. Anthropic acknowledges <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> remains behind <a href="https://www.anthropic.com/claude/mythos">Mythos 5</a>, a competing model, on cybersecurity tasks and biology research, and an OpenAI-family model still leads on one agentic coding benchmark.</p><p>The more revealing caveat came from Anthropic itself, when asked where <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> still falls short of <a href="https://www.anthropic.com/claude/fable">Fable 5</a>. The spokesperson's answer amounted to a candid admission about what benchmarks do and don't capture.</p><p>"The evals where Opus 5 wins are bounded tasks with a specific outcome, which is where it's strongest. What those evals don't measure is duration," the spokesperson told VentureBeat. "One way to put it: Opus 5 is the best tool for the jobs benchmarks can see, and Fable 5 is what you reach for when the job outruns the benchmark."</p><p><a href="https://www.anthropic.com/claude/fable">Fable 5</a>, by contrast, "is for the longest, most autonomous jobs, where the model has to stay coherent across many connected steps over hours or days with dense source material," the spokesperson said, advising customers to "run both on a representative workload, one bounded task and one long-horizon job." That framing — bounded tasks versus long-horizon autonomy — may become the defining axis of model differentiation in 2026, as benchmarks saturate and the hardest remaining problems involve sustained, multi-day agentic work rather than discrete puzzles.</p><h2><b>Why token efficiency is becoming the real battleground for enterprise AI spending</b></h2><p>Threaded through the launch is a theme Anthropic clearly wants buyers to absorb: <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> doesn't just score well, it scores well per dollar. The model ships with an adjustable "effort" setting that lets customers trade intelligence for speed and token savings, and Anthropic's charts emphasize performance at a given cost rather than peak performance alone.</p><p>Early customers echoed the point with unusual specificity. Harvey, the legal AI company, said Opus 5 achieved similar performance to Opus 4.8's maximum-reasoning mode "while generating 26% fewer tokens on average," according to Niko Grupen, its head of applied research. Richard Pham of Fundamental Research Lab said that on hard financial-modeling tasks, the model averaged nine percentage points higher accuracy "while using roughly one-third fewer turns and tool calls and 60% less time."</p><p>Wade Foster, chief executive of Zapier, said Opus 5 topped his company's AutomationBench leaderboard "without spending more tokens than prior Claude models," running a full churn-prevention workflow from start to finish. "Previous models didn't pass; Opus 5 hit 100%," he said. Scott Wu, chief executive of Cognition, the company behind the Devin coding agent, said that on FrontierCode 1.1, "Claude Opus 5 approaches Fable-level performance at half the cost," with particular strength in debugging and root-cause analysis.</p><p>The efficiency emphasis reflects commercial reality. Enterprise AI spending is no longer experimental, and inference costs — the price of actually running these models at scale — have become a board-level line item. </p><p>Anthropic's business skews heavily toward API and enterprise usage; according to a February 2026 analysis by <a href="https://research.contrary.com/company/anthropic">Contrary Research</a>, Claude held roughly 40 percent of the enterprise large language model market by usage as of late 2025, and Claude Code alone had reached about $1 billion in annualized revenue. For a company whose customers pay by the token, a model that does more with fewer tokens is not a nice-to-have. It is the product.</p><h2><b>Self-verifying AI agents and what they mean for the hidden costs of automation</b></h2><p>Beyond the numbers, Anthropic is selling a behavioral story: that <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> verifies its work and iterates until it succeeds. The company offered several examples from testing that read like small parables of machine stubbornness.</p><p>In one <a href="https://www.frontierbench.ai/announcement">Frontier-Bench</a> task, the model was asked to reconstruct a machine part as a 3D CAD model from a drawing it was intentionally given no way to view. Rather than fail, Anthropic says, Opus 5 wrote its own computer vision pipeline to extract the geometry from raw pixels — and did so repeatedly, while no competing model solved the task in five attempts. In another case, given a real bug in a popular open-source package manager, the model found the root cause and fixed an edge case the community's own patch had missed; a competing model patched only the symptom and declared victory. An engineer at a trading firm, the company says, used Opus 5 to build a market data feed for a new exchange in a single session and, finding no live feed to validate against, watched the model build its own test harness to check its parsing code.</p><p>Customers described similar behavior in the wild. Cristian Rivera, a staff software engineer at Stripe, said he gave the model "a chief-of-staff role over my dev environments" for a weekend: "it built its own monitor, drove each box, and pulled me in only for the judgment calls."</p><p>This is the capability enterprises actually care about, and it is worth dwelling on why. The gap between a model that produces plausible output and one that verifies its output is the gap between a demo and a deployable system. Most of the hidden cost of enterprise AI today is human review — engineers checking the machine's work. A model that reliably checks its own work compresses that cost, which is precisely why customers keep citing fewer turns, fewer passes, and less time rather than higher raw scores.</p><h2><b>Inside Anthropic's safety strategy: capability gaps, classifiers, and model fallbacks</b></h2><p>The launch also showcases Anthropic's increasingly intricate approach to safety — one that now involves deliberately not teaching its models certain skills. The company says its automated behavioral audit found Opus 5 to be its most aligned model to date, scoring 2.3 on overall misaligned behavior, lower than <a href="https://www.anthropic.com/news/claude-opus-4-8">Opus 4.8</a>, <a href="https://www.anthropic.com/news/claude-sonnet-5">Sonnet 5</a>, or <a href="https://www.anthropic.com/claude/fable">Fable 5</a>, with the lowest rates of deceptive behavior and the least susceptibility to being tricked into misuse.</p><p>On the capability side, Anthropic says it intentionally avoided training <a href="http://anthropic.com/news/claude-opus-5">Opus 5</a> on cyber tasks, as it did with Opus 4.8. The model improved on them anyway — a side effect of general capability gains — and now nearly matches Mythos 5 at finding software vulnerabilities. But it remains far behind at exploiting them: on Anthropic's OSS-Fuzz evaluation, Opus 5 identified vulnerabilities at a 79.4 percent rate, close to Mythos 5's 80 percent, but succeeded at developing exploits in only 4 challenges versus Mythos 5's 13. That asymmetry — strong at defense-relevant discovery, weak at offense-relevant exploitation — appears to be by design, and the safeguards follow the same logic. Anthropic expects Opus 5's cyber classifiers to intervene about 85 percent less often than Fable 5's.</p><p>When a classifier does trigger, requests in <a href="http://claude.ai/">Claude.ai</a>, <a href="https://code.claude.com/docs/en/overview">Claude Code</a>, and <a href="https://claude.com/product/cowork">Claude Cowork</a> fall back to <a href="https://www.anthropic.com/news/claude-opus-4-8">Opus 4.8</a> by default — raising an obvious question: if a request is too risky for one model, why is it acceptable for another? "The model it falls back to has lower capability levels making the risk of harmful use lower as well," the spokesperson said, adding that "there is a message that lets the user know when this occurs and is visible in the chat."</p><p>The logic is defensible, but it reveals how AI safety actually works in 2026: risk is not a property of the question alone, but of the question multiplied by the capability of the system answering it. On biology, the calculus runs the other way. Opus 5 is now Anthropic's most capable generally available model for scientific research — scoring 10.2 percentage points higher than Opus 4.8 on the company's internal chemistry benchmark — though the spokesperson acknowledged that "Mythos 5 remains the stronger model for long-horizon, open-ended work like autonomous drug design campaigns."</p><h2><b>The business stakes behind the launch: a $380 billion valuation and massive compute bets</b></h2><p>The launch lands at a moment of extraordinary commercial momentum — and extraordinary obligations — for Anthropic. Reuters reported in February that the company was valued at <a href="https://www.reuters.com/technology/anthropic-valued-380-billion-latest-funding-round-2026-02-12/">roughly $380 billion</a> in its latest funding round, following a period in which, per Contrary Research's analysis, its annualized revenue climbed from about $1 billion at the end of 2024 to a projected $9 billion by the end of 2025, with internal targets reportedly <a href="https://research.contrary.com/company/anthropic">reaching $20 to $26 billion for 2026</a>. Those targets are underwritten by enormous infrastructure commitments, including a <a href="https://www.anthropic.com/news/microsoft-nvidia-anthropic-announce-strategic-partnerships">reported $30 billion Azure compute deal</a> alongside arrangements with Google Cloud and Nvidia — spending that only pencils out if enterprises keep expanding usage.</p><p>That is the context in which Opus 5's pricing strategy makes sense. Holding the price at Opus 4.8 levels while roughly doubling performance on key agentic benchmarks is effectively a steep price cut per unit of capability, designed to widen the funnel of workloads that are economical to automate. Every task that was marginal at Opus 4.8's cost-per-success becomes viable at Opus 5's — and every viable task is recurring token revenue.</p><p>The regulatory backdrop has grown more complex as well. A U.S. judge gave final approval this week to <a href="https://www.reuters.com/world/us-judge-approves-anthropics-15-billion-settlement-copyright-lawsuit-2026-07-20/">Anthropic's $1.5 billion copyright settlement with book authors</a>, Reuters reported, closing a chapter of litigation over the company's early training data. And in June, Reuters, citing Axios, reported that the U.S. government had moved to <a href="https://www.reuters.com/technology/us-blocks-foreign-access-anthropics-most-advanced-ai-models-axios-reports-2026-06-13/">block foreign access </a>to Anthropic's most advanced models — a reminder that frontier AI is now entangled with export policy in ways that shape which customers can buy what.</p><p>Also shipping Friday: a Fast mode running at roughly 2.5 times default speed at twice the base price, automatic fallback routing on the API, and mid-conversation tool changes that no longer invalidate the prompt cache — a small feature that agent developers may appreciate more than any benchmark. Consistent with prior Opus models, Opus 5 carries no data retention requirements for general access, a point the spokesperson flagged unprompted for customers with "a hard zero data retention requirement." Developers can access the model as claude-opus-5 on the <a href="https://platform.claude.com/login?returnTo=%2F%3F">Claude API</a> starting today.</p><p>Two questions will determine whether the bet pays off: whether <a href="http://anthropic.com/news/claude-opus-5">Opus 5's efficiency claims </a>survive contact with production workloads at scale, and whether enterprises embrace a world where safety classifiers, not users, sometimes decide which model answers. But the deeper message of Friday's launch is that the AI industry's center of gravity has moved. For three years, the labs competed on what their best model could do on its best day. With Opus 5, Anthropic is competing on something less glamorous and far more lucrative: what a very good model can do every day, for half the price. In a market where the frontier keeps moving, Anthropic is wagering that the real fortune lies just behind it.</p><p>
</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Security: Mehrere Probleme in terraform-provid, terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm und terraform-provider-kubernetes (SUSE)]]></title>
<description><![CDATA[]]></description>
<link>https://tsecurity.de/de/3692092/unix-server/security-mehrere-probleme-in-terraform-provid-terraform-provider-aws-terraform-provider-azurerm-terraform-provider-external-terraform-provider-google-terraform-provider-helm-und-terraform-provider-kubernetes-suse/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3692092/unix-server/security-mehrere-probleme-in-terraform-provid-terraform-provider-aws-terraform-provider-azurerm-terraform-provider-external-terraform-provider-google-terraform-provider-helm-und-terraform-provider-kubernetes-suse/</guid>
<pubDate>Fri, 24 Jul 2026 18:47:24 +0200</pubDate>
<category>🐧 Unix Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[ ]]></content:encoded>
</item>
<item>
<title><![CDATA[Security: Mehrere Probleme in terraform-provider-susepubliccloud (SUSE)]]></title>
<description><![CDATA[]]></description>
<link>https://tsecurity.de/de/3692050/unix-server/security-mehrere-probleme-in-terraform-provider-susepubliccloud-suse/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3692050/unix-server/security-mehrere-probleme-in-terraform-provider-susepubliccloud-suse/</guid>
<pubDate>Fri, 24 Jul 2026 18:32:31 +0200</pubDate>
<category>🐧 Unix Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[ ]]></content:encoded>
</item>
<item>
<title><![CDATA[GitOps vs Traditional DevOps]]></title>
<description><![CDATA[This lesson is for paying subscribers only
                                                       
                    
                        This post is for paying subscribers only
                      

        

            
                Subscribe now
            
            
         ...]]></description>
<link>https://tsecurity.de/de/3691332/linux-tipps/gitops-vs-traditional-devops/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3691332/linux-tipps/gitops-vs-traditional-devops/</guid>
<pubDate>Fri, 24 Jul 2026 13:05:05 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<aside data-sx-content-cta class="relative p-0.5 js-toc-ignore">

    <div class="relative flex flex-col items-center text-center w-full px-4 py-10 lg:px-10 text-base rounded-xl sm:rounded-2xl">
        <div class="dark:hidden absolute -inset-px -z-10 rounded-xl bg-white shadow-pretty-sm transition-shadow duration-200"></div>
        <span class="hidden dark:block absolute -z-10 -inset-px rounded-inherit bg-radial-[50%_100%_at_50%_0%] from-white/10"></span>        
        <div class="hidden dark:block absolute -inset-px -z-10 rounded-xl bg-white/1 transition-colors duration-500 inset-shadow-md inset-shadow-white/2"></div>
        
        <div class="hidden dark:block absolute -z-10 -inset-0.5 mask-to-b mask-position-to-70% mask-opacity-to-50%">
            <div class="hidden dark:block absolute -z-10 inset-px rounded-xl border border-gray-50/10"></div>
        </div>                                                
        <div class="hidden dark:block absolute -z-10 -inset-px rounded-xl border border-gray-50/5 opacity-0"></div>

        <div class="hidden dark:block absolute -top-px start-1/2 -translate-x-1/2 w-1/2 h-px bg-linear-to-r from-white/0 to-white/0 via-gray-400/50"></div>

        <h2 class="text-gray-900 dark:text-gray-100 text-pretty text-xl sm:text-2xl leading-snug tracking-tight">




                                                <span class="hidden first:inline">
                                This lesson is for paying subscribers only
                            </span>                           
                    <span class="hidden first:inline">
                        This post is for paying subscribers only
                    </span>  

        </h2>

            <button data-portal="signup" class="mt-7 px-4 py-2.5 font-semibold text-sm text-center text-accent-contrast bg-primary rounded-full shadow-primary dark:shadow-none dark:drop-shadow-primary-sm hover:opacity-90 transition-opacity duration-200">
                Subscribe now
            </button>
            <p class="mt-5 text-sm">
                Already have an account? <button data-portal="signin" class="block sm:inline mx-auto font-medium underline decoration-primary decoration-2 underline-offset-2 hover:text-primary transition-colors duration-200">Sign in</button>
            </p>
    </div>
</aside>]]></content:encoded>
</item>
<item>
<title><![CDATA[Why GitOps is Not Just CI/CD]]></title>
<description><![CDATA[This lesson is for paying subscribers only
                                                       
                    
                        This post is for paying subscribers only
                      

        

            
                Subscribe now
            
            
         ...]]></description>
<link>https://tsecurity.de/de/3691331/linux-tipps/why-gitops-is-not-just-cicd/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3691331/linux-tipps/why-gitops-is-not-just-cicd/</guid>
<pubDate>Fri, 24 Jul 2026 13:05:04 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<aside data-sx-content-cta class="relative p-0.5 js-toc-ignore">

    <div class="relative flex flex-col items-center text-center w-full px-4 py-10 lg:px-10 text-base rounded-xl sm:rounded-2xl">
        <div class="dark:hidden absolute -inset-px -z-10 rounded-xl bg-white shadow-pretty-sm transition-shadow duration-200"></div>
        <span class="hidden dark:block absolute -z-10 -inset-px rounded-inherit bg-radial-[50%_100%_at_50%_0%] from-white/10"></span>        
        <div class="hidden dark:block absolute -inset-px -z-10 rounded-xl bg-white/1 transition-colors duration-500 inset-shadow-md inset-shadow-white/2"></div>
        
        <div class="hidden dark:block absolute -z-10 -inset-0.5 mask-to-b mask-position-to-70% mask-opacity-to-50%">
            <div class="hidden dark:block absolute -z-10 inset-px rounded-xl border border-gray-50/10"></div>
        </div>                                                
        <div class="hidden dark:block absolute -z-10 -inset-px rounded-xl border border-gray-50/5 opacity-0"></div>

        <div class="hidden dark:block absolute -top-px start-1/2 -translate-x-1/2 w-1/2 h-px bg-linear-to-r from-white/0 to-white/0 via-gray-400/50"></div>

        <h2 class="text-gray-900 dark:text-gray-100 text-pretty text-xl sm:text-2xl leading-snug tracking-tight">




                                                <span class="hidden first:inline">
                                This lesson is for paying subscribers only
                            </span>                           
                    <span class="hidden first:inline">
                        This post is for paying subscribers only
                    </span>  

        </h2>

            <button data-portal="signup" class="mt-7 px-4 py-2.5 font-semibold text-sm text-center text-accent-contrast bg-primary rounded-full shadow-primary dark:shadow-none dark:drop-shadow-primary-sm hover:opacity-90 transition-opacity duration-200">
                Subscribe now
            </button>
            <p class="mt-5 text-sm">
                Already have an account? <button data-portal="signin" class="block sm:inline mx-auto font-medium underline decoration-primary decoration-2 underline-offset-2 hover:text-primary transition-colors duration-200">Sign in</button>
            </p>
    </div>
</aside>]]></content:encoded>
</item>
<item>
<title><![CDATA[What GitOps Really Is]]></title>
<description><![CDATA[This lesson is for paying subscribers only
                                                       
                    
                        This post is for paying subscribers only
                      

        

            
                Subscribe now
            
            
         ...]]></description>
<link>https://tsecurity.de/de/3691157/linux-tipps/what-gitops-really-is/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3691157/linux-tipps/what-gitops-really-is/</guid>
<pubDate>Fri, 24 Jul 2026 11:41:27 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<aside data-sx-content-cta class="relative p-0.5 js-toc-ignore">

    <div class="relative flex flex-col items-center text-center w-full px-4 py-10 lg:px-10 text-base rounded-xl sm:rounded-2xl">
        <div class="dark:hidden absolute -inset-px -z-10 rounded-xl bg-white shadow-pretty-sm transition-shadow duration-200"></div>
        <span class="hidden dark:block absolute -z-10 -inset-px rounded-inherit bg-radial-[50%_100%_at_50%_0%] from-white/10"></span>        
        <div class="hidden dark:block absolute -inset-px -z-10 rounded-xl bg-white/1 transition-colors duration-500 inset-shadow-md inset-shadow-white/2"></div>
        
        <div class="hidden dark:block absolute -z-10 -inset-0.5 mask-to-b mask-position-to-70% mask-opacity-to-50%">
            <div class="hidden dark:block absolute -z-10 inset-px rounded-xl border border-gray-50/10"></div>
        </div>                                                
        <div class="hidden dark:block absolute -z-10 -inset-px rounded-xl border border-gray-50/5 opacity-0"></div>

        <div class="hidden dark:block absolute -top-px start-1/2 -translate-x-1/2 w-1/2 h-px bg-linear-to-r from-white/0 to-white/0 via-gray-400/50"></div>

        <h2 class="text-gray-900 dark:text-gray-100 text-pretty text-xl sm:text-2xl leading-snug tracking-tight">




                                                <span class="hidden first:inline">
                                This lesson is for paying subscribers only
                            </span>                           
                    <span class="hidden first:inline">
                        This post is for paying subscribers only
                    </span>  

        </h2>

            <button data-portal="signup" class="mt-7 px-4 py-2.5 font-semibold text-sm text-center text-accent-contrast bg-primary rounded-full shadow-primary dark:shadow-none dark:drop-shadow-primary-sm hover:opacity-90 transition-opacity duration-200">
                Subscribe now
            </button>
            <p class="mt-5 text-sm">
                Already have an account? <button data-portal="signin" class="block sm:inline mx-auto font-medium underline decoration-primary decoration-2 underline-offset-2 hover:text-primary transition-colors duration-200">Sign in</button>
            </p>
    </div>
</aside>]]></content:encoded>
</item>
<item>
<title><![CDATA[GitOps Handbook]]></title>
<description><![CDATA[Learn GitOps with ArgoCD in this hands-on course. Go from Kubernetes deployment basics to safe, production-grade rollouts.]]></description>
<link>https://tsecurity.de/de/3691063/linux-tipps/gitops-handbook/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3691063/linux-tipps/gitops-handbook/</guid>
<pubDate>Fri, 24 Jul 2026 11:02:52 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Learn GitOps with ArgoCD in this hands-on course. Go from Kubernetes deployment basics to safe, production-grade rollouts.]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple Confirms The Morning Show Will End With Season 5]]></title>
<description><![CDATA[Apple has announced that The Morning Show will end with its upcoming fifth season. The final chapter of the Jennifer Aniston and Reese Witherspoon drama will premiere on Apple TV in 2027.



The Morning Show debuted in November 2019 as one of the first original series released alongside the launc...]]></description>
<link>https://tsecurity.de/de/3690100/ios-mac-os/apple-confirms-the-morning-show-will-end-with-season-5/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3690100/ios-mac-os/apple-confirms-the-morning-show-will-end-with-season-5/</guid>
<pubDate>Thu, 23 Jul 2026 21:37:48 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple has announced that The Morning Show will end with its upcoming fifth season. The final chapter of the Jennifer Aniston and Reese Witherspoon drama will premiere on Apple TV in 2027.



The Morning Show debuted in November 2019 as one of the first original series released alongside the launch of Apple TV+. It quickly became a major title for the streaming service, supported by its high-profile cast and stories focused on television journalism, workplace power and public scandals.



Jennifer Aniston and Reese Witherspoon will return as Alex Levy and Bradley Jackson. Both stars also serve as executive producers and have remained central to the series throughout its run.




https://twitter.com/AppleTV/status/2080322095288864845




Apple has not announced an exact premiere date for Season 5. However, the company has confirmed that the final episodes will arrive sometime in 2027. The fourth season premiered in September 2025 and concluded after 10 episodes on November 19, 2025.



New and Returning Cast Members



The final season will bring back several familiar cast members, including Billy Crudup, Mark Duplass, Karen Pittman, Nicole Beharie, Nestor Carbonell and Jon Hamm.



Several actors will also join the show for its last season. The new and expanded cast includes Jeff Daniels, Jesse Williams, Lizzy Caplan, Reneé Rapp and Sean Hayes. Details about their characters and storylines remain limited.



Plot details for Season 5 have not been revealed. The final episodes are expected to continue the personal and professional conflicts surrounding Alex, Bradley and the changing television news industry.



All four existing seasons of The Morning Show are available to stream on Apple TV. The fifth and final season will arrive in 2027.]]></content:encoded>
</item>
<item>
<title><![CDATA[The AI compute gap: Enterprises are buying infrastructure faster than they can measure what it costs]]></title>
<description><![CDATA[Across 107 enterprises, AI infrastructure spending is accelerating well ahead of the ability to see or steer its economics. Most organizations run their AI on a familiar base of hyperscalers and model-provider APIs, yet the next dollar is aimed at specialized compute almost none of them use today...]]></description>
<link>https://tsecurity.de/de/3689826/it-nachrichten/the-ai-compute-gap-enterprises-are-buying-infrastructure-faster-than-they-can-measure-what-it-costs/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3689826/it-nachrichten/the-ai-compute-gap-enterprises-are-buying-infrastructure-faster-than-they-can-measure-what-it-costs/</guid>
<pubDate>Thu, 23 Jul 2026 19:19:39 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Across 107 enterprises, AI infrastructure spending is accelerating well ahead of the ability to see or steer its economics. Most organizations run their AI on a familiar base of hyperscalers and model-provider APIs, yet the next dollar is aimed at specialized compute almost none of them use today; a majority intend to switch or add providers within the year, many within a quarter. Buying decisions turn on integration and total cost of ownership rather than headline token price — which is fortunate, because most enterprises cannot yet see their unit economics clearly: GPUs sit at half utilization or less, and fewer than half rigorously track what their compute actually costs. The result is a compute gap — heavy, fast-moving investment running ahead of the visibility needed to control it.</p><p>This wave of VentureBeat Pulse Research examines enterprise AI infrastructure and compute: where organizations are in their deployment journey, what they run AI on today, how satisfied they are, what would make them switch, where they plan to evaluate their investments, and — most revealingly — how well they can measure and control the economics of the compute underneath it all.</p><p>The central finding is a compute gap — the distance between how aggressively enterprises are investing in AI infrastructure and how little of its economics they can see. Only about one in five (21%) run AI in production at scale, yet spending intentions are outrunning that maturity: the single largest planned area enterprises plan to evaluate over the next year is AI-specialized clouds (45%), a layer almost none of these enterprises use today. Meanwhile the compute already in place runs cold — 83% report GPU utilization of 50% or less — and fewer than half (44%) can rigorously track what their AI compute costs. Enterprises are buying more infrastructure faster than they can account for what they already own.</p><p>Enterprises are not settled on their infrastructure vendors, either: A clear majority (64%) plan to switch or add an infrastructure provider within twelve months, and 38% within the next quarter — unusually high churn intent for a category this foundational. When they choose, they choose on integration with the existing stack (41%) and total cost of ownership (35%), not on headline price: cost per million tokens is the deciding factor for just 8%. And the frontier constraint that will shape the next round of decisions — the shift from GPU compute to memory bandwidth as inference scales — is barely on the radar, with roughly one in five enterprises either unaware of it or yet to address it.</p><h2>Methodology</h2><p>VentureBeat fielded this survey as part of its ongoing Pulse Research series, this survey focused on enterprise AI infrastructure, compute, and inference economics. Responses are filtered to organizations with more than 100 employees (n=107; the survey’s smallest size band, 1–100 employees, is excluded), drawn from a single Q2 2026 (June) wave. Because this is one wave rather than a pooled multi-month sample, the report reads cross-sectionally and does not infer month-over-month trends. Several questions were multiple-select, so those shares can sum to more than 100%.</p><p>By organization size the sample concentrates in the mid-market: 101–250 employees (36%) and 251–1,000 (27%) lead, with 1,001–5,000 (22%), 5,001–10,000 (8%), and 10,001+ (7%) above them. By role it spans managers (38%), individual contributors (28%), VPs and directors (19%), and the C-suite (13%); on purchasing authority it is buyer-credible, with 45% final decision-makers and another 30% recommenders or influencers for AI solutions. Technology/Software is the largest industry at 26%, followed by Healthcare/Life Sciences (15%), Financial Services (13%), and Retail/E-commerce (12%).</p><p>At 107 respondents the sample is large enough to read directionally but should be treated as a directional signal rather than a precise measurement; it is self-selected and is not a probability sample. It also skews toward the mid-market and toward earlier-stage adopters, so it is best read as the view from organizations actively building out AI infrastructure rather than from the largest hyperscale operators.</p><h2>Finding 1: Ambition outpaces production</h2><p><b>Only one in five run AI in production at scale</b></p><p>We asked where organizations sit in their AI deployment journey. Most are still building toward production rather than operating at scale.</p><div></div><p>The maturity curve is front-loaded. Three-quarters of enterprises (76%) are either experimenting or running only some workloads in production, and just 21% describe AI in production at scale. This matters for everything that follows: the infrastructure decisions in this report are being made largely by organizations still early in deployment, whose compute footprint — and whose costs — are about to grow. The evaluation and switching intentions in Findings 3 and 4 are the leading edge of that build-out, not the settled preferences of operators who have already found what works.</p><h2>Finding 2: Enterprises run on hyperscalers and model APIs</h2><p><b>The specialized GPU clouds barely register — today</b></p><p>We asked which providers and platforms enterprises currently use to run their AI. The answer is a familiar one: the incumbents.</p><div></div><p>The current stack is hyperscaler-and-API. Google Cloud leads at 48%, and the general-purpose clouds (Google, Microsoft, AWS, Oracle) together with the major model APIs (Gemini, OpenAI, Anthropic) account for essentially all current deployment. The specialized “neocloud” GPU providers that dominate AI-infrastructure headlines — CoreWeave, Lambda, Crusoe, Nebius and peers — register at or near zero among these enterprises today. Only 6% run their own on-prem GPU clusters and 4% a custom open-source stack. Enterprises are, for now, running AI on the providers they already buy from — which makes the evaluation intentions in Finding 3 all the more striking.</p><p><i>(A note on reading these shares. As described in the methodology section, this sample is self-selected and skews mid-market, and this question counted every provider a respondent uses — an average of 2.1 selections each — so the figures measure presence in the stack rather than spending or primary status. A sample built this way will show a different provider mix than a spend-weighted census of the broader market; Google's strength here, for example, is consistent with its long-standing position among smaller enterprises building on AI. Read these shares as a portrait of what this AI-active cohort runs today, and treat gaps between these figures and industry-wide market share estimates as a property of the sample rather than a contradiction of either.)</i></p><h2>Finding 3: The next dollar goes to infrastructure they don’t yet run</h2><p><b>AI-specialized clouds top the evaluations list</b></p><p>We asked where enterprises planned to evaluate AI infrastructure over the next 12 months. Their answers point away from the stack they run today.</p><div></div><p>Here is the report’s sharpest tension. The single most-cited planned evaluation area — AI-specialized clouds, at 45% — is the very category almost none of these enterprises use today (Finding 2). Nearly a third (32%) intend to evaluate non-Nvidia accelerators, and 28% in next-generation Nvidia silicon; even decentralized compute networks (16%) and sovereign compute (11%) draw meaningful interest. Read against current usage, this is not incremental — it is the leading edge of a re-platforming. The direction-of-travel question tells the same story: every infrastructure approach is net-expanding, but specialized AI clouds carry the highest net momentum (+24), edging out even the hyperscalers (+22). Enterprises are preparing to move a meaningful share of AI compute off the general-purpose cloud.</p><p>This continues a trend we saw in our April-May survey wave. Back then, usage of the AI-specialized clouds was equally marginal — CoreWeave at 3%, Lambda at 4%, Crusoe at 2% of enterprises. When we asked enterprises what change they planned in their AI infrastructure strategy over the next twelve months, the most-cited answer was moving workloads to specialized AI clouds, at 33%. Asked in April-May which emerging compute option they were most likely to evaluate AI-specialized clouds again drew the most responses. Two waves, two differently worded questions, one consistent picture: the type of cloud enterprises are most eager to assess is the type they have barely begun to use.</p><h2>Finding 4: A switching wave is building</h2><p><b>Six in 10 plan to change providers within a year — many within a quarter</b></p><p>We asked whether and when enterprises plan to switch or add an infrastructure provider. Very few intend to stand still.</p><div></div><p>For a category as foundational as compute, this is a remarkable amount of intended movement. Only 36% have no plans to change, meaning a clear majority (64%) intend to switch or add a provider within twelve months — and 38% within the next quarter alone. Where that interest points is telling: the providers drawing the most switching consideration are again the incumbents — Microsoft Azure and Google Cloud (33% each), OpenAI (30%), and Gemini (22%) — which suggests much of the near-term movement is reshuffling among the majors and consolidating spend rather than defecting to new entrants. The neocloud interest in Finding 3 is a 12-month evaluation thesis; the switching in the next quarter is mostly incumbents trading share.</p><p>(<i>Method note: Respondents who selected both "no plans to change" and a specific switching window are counted as switchers, on the logic that naming a timeframe is the more specific answer; three respondents were reclassified under this rule.</i>)</p><h2>Finding 5: Nobody buys on token price</h2><p><b>Integration and total cost of ownership decide — not sticker price</b></p><p>We asked what matters most when enterprises select an AI infrastructure provider. Headline price finished last.</p><div></div><p>Enterprises do not buy AI infrastructure on pricing, which is the place vendors compete on hardest. Integration with the existing stack (41%) and total cost of ownership (35%) dominate, while the headline metric — cost per million tokens — is the deciding factor for just 8%, dead last. The pattern is coherent: buyers are optimizing for how a provider fits and what it truly costs to operate, not for the advertised unit rate. It also foreshadows Finding 7 — enterprises say TCO matters most, yet most cannot yet measure it rigorously. The stated priority and the measured capability are out of step.</p><h2>Finding 6: Expensive GPUs, idle most of the time</h2><p><b>83% report GPU utilization of 50% or less</b></p><p>We asked what share of their GPU capacity enterprises actually utilize. The answer is a well-known but rarely quantified inefficiency.</p><div></div><p><i>Disclosure: Band percentages count every selection against all 107 qualified respondents; 14 respondents selected more than one band, so bands overlap. At the respondent level, 83 of the 100 GPU-operating enterprises reported utilization at or below 50%</i></p><p>The compute already in place runs cold. Adding the bands at or below half capacity, 83% of enterprises that operate GPUs report utilization of 50% or less, and nearly half (49%) run at 25% or below. Only 12% clear the 50% mark, and a further 8% do not measure utilization at all. Idle accelerators are expensive accelerators, and this is the clearest single measure of the compute gap: enterprises are planning to buy more GPUs and specialized compute (Finding 3) while the capacity they already own sits substantially unused. The efficiency headroom in the current fleet is large — and largely unmeasured.</p><h2>Finding 7: Spending fast, measuring slowly</h2><p><b>Fewer than half rigorously track what their compute costs</b></p><p>We asked whether enterprises can quantify the cost and return of their AI infrastructure spend, and how satisfied they are with what they run. Confidence in the ledger lags the spending.</p><div></div><p>Measurement trails money. Fewer than half of enterprises (44%) rigorously track the cost and return of their AI compute; the majority track only partially (39%), cannot quantify it yet (20%), or have not prioritized it (6%). That gap is consequential given Finding 5, where total cost of ownership was the second-ranked buying criterion — enterprises are choosing providers on an economic basis they mostly cannot yet measure. Satisfaction with current infrastructure is moderately positive but not enthusiastic: on a five-point scale, overall satisfaction averages 4.0, with ease of implementation (3.8) and value for money (3.9) trailing slightly — the softness landing, tellingly, on cost. Enterprises are spending quickly and accounting slowly.</p><h2>Finding 8: The next bottleneck few are watching</h2><p><b>As inference shifts from compute to memory, the field scatters</b></p><p>Finally, we asked how enterprises would address the emerging constraint in large-scale inference — the shift from GPU compute to memory, specifically KV-cache capacity. The responses reveal a frontier that is not yet a priority.</p><div></div><p>The memory frontier is real but barely governed. Asked which approach they would rely on as the binding constraint in inference shifts from compute to memory bandwidth, enterprises scatter: Dell leads at 31%, Nvidia follows at 16%, and the rest fragments across storage vendors, open-source tooling, and model-level efficiency techniques. Most telling is that roughly one in five (18%) either do not recognize the constraint or have not begun to address it. For a shift that will reshape inference cost and architecture, this is an early and unsettled market — and, consistent with the measurement gap in Finding 7, one where many enterprises simply do not yet have a view. It is the next chapter of the compute gap, arriving before most have closed the current one.</p><h2>The bottom line: A compute gap that faster spending will widen, not close</h2><p>Organizations with more than 100 employees are investing in AI infrastructure faster than they can measure it. Most are still early in deployment, yet their spending intentions point past their current stack — toward specialized clouds and alternative accelerators almost none of them run today — and a clear majority intend to change providers within the year. They buy on integration and total cost of ownership rather than headline price, which is rational; the difficulty is that most cannot yet see those economics clearly.</p><p>The visibility gap is concrete. The GPUs enterprises already own run at half utilization or less for the overwhelming majority, and fewer than half can rigorously track what their compute costs or returns. Satisfaction is decent but unenthusiastic, softest on value for money — the dimension hardest to judge without measurement. And the next constraint, the shift from compute to memory in large-scale inference, is arriving while most enterprises are still unaware of it. At 107 respondents in a single Q2 wave this is a directional read, skewed toward the mid-market and earlier-stage adopters — but the direction is consistent: the appetite to spend is running well ahead of the instrumentation to spend well. The compute gap is not a capacity problem that more hardware will solve on its own; it is, first, a problem of seeing what the hardware already costs. The open question for later waves is whether enterprises build that visibility before the re-platforming arrives — or buy the next layer of infrastructure as blind to its economics as the last.</p><hr><p><i>Based on survey responses from 107 qualified enterprise respondents (100+ employees), drawn from a single Q2 2026 (June) wave. Because this is one wave rather than a pooled multi-month sample, the results read cross-sectionally rather than as a month-over-month trend, and at 107 respondents this is a directional signal rather than a precise measurement — the sample is self-selected, skews mid-market, and leans toward earlier-stage adopters rather than the largest hyperscale operators. Respondents include managers, individual contributors, VPs/directors, and the C-suite, with buyer-credible purchasing authority, across Technology/Software, Healthcare/Life Sciences, Financial Services, Retail/E-commerce, and other industries.</i></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Jamie Campbell Bower Confirmed as Celeborn in The Rings of Power Season 3]]></title>
<description><![CDATA[Jamie Campbell Bower will play Celeborn in The Lord of the Rings: The Rings of Power Season 3, finally bringing Galadriel’s long-missing husband into the Prime Video series.



Jamie Campbell Bower’s Celeborn Revealed



The first look presents Bower as a silver-haired Elven lord dressed in detai...]]></description>
<link>https://tsecurity.de/de/3688321/ios-mac-os/jamie-campbell-bower-confirmed-as-celeborn-in-the-rings-of-power-season-3/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3688321/ios-mac-os/jamie-campbell-bower-confirmed-as-celeborn-in-the-rings-of-power-season-3/</guid>
<pubDate>Thu, 23 Jul 2026 09:59:47 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Jamie Campbell Bower will play Celeborn in The Lord of the Rings: The Rings of Power Season 3, finally bringing Galadriel’s long-missing husband into the Prime Video series.



Jamie Campbell Bower’s Celeborn Revealed



The first look presents Bower as a silver-haired Elven lord dressed in detailed armour. His appearance suggests that Celeborn will enter the story as an experienced warrior rather than remain a distant figure from Galadriel’s past.



Bower described himself as “beyond elated and grateful” after his role became public. The actor already has strong connections to major fantasy franchises through Harry Potter, Fantastic Beasts, Twilight, and Stranger Things, where he played Vecna and Henry Creel.



He joined The Rings of Power as a series regular before the production revealed his character. Early descriptions reportedly referred to his role as a handsome, high-born knight, leading many viewers to predict that he was playing Celeborn.



Celeborn and Galadriel Could Finally Reunite



Galadriel previously told Theo that she had lost Celeborn during the war against Morgoth. She recalled meeting him in a field of flowers and joking about his poorly fitted silver armour. He later disappeared after leaving for battle, although Galadriel never confirmed his death.



Season 3 can now explain where Celeborn has been and why he stayed separated from Galadriel for so long. Their reunion should also add a deeply personal storyline while the Elves prepare for another major conflict.



The new season will move forward several years and explore the height of the War of the Elves and Sauron. Sauron will continue building his power and work toward creating the One Ring, placing Celeborn, Galadriel, and the other Elven leaders directly in his path.



Bower’s arrival gives Season 3 one of its most anticipated Tolkien characters and opens an important new chapter in Galadriel’s journey.]]></content:encoded>
</item>
<item>
<title><![CDATA[Monday.com cuts 20% of its workforce to restructure for the AI era]]></title>
<description><![CDATA[Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era.



Monday.com co-founder and co-CEO Eran Zinman tod...]]></description>
<link>https://tsecurity.de/de/3687832/it-nachrichten/mondaycom-cuts-20-of-its-workforce-to-restructure-for-the-ai-era/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3687832/it-nachrichten/mondaycom-cuts-20-of-its-workforce-to-restructure-for-the-ai-era/</guid>
<pubDate>Thu, 23 Jul 2026 03:02:52 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph">Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era.</p>



<p class="wp-block-paragraph">Monday.com co-founder and co-CEO Eran Zinman <a href="https://www.linkedin.com/pulse/building-mondaycom-its-next-chapter-eran-zinman-cxx4e/" target="_blank" rel="noreferrer noopener">today announced</a> the “very difficult decision” to reduce the AI work platform company’s global workforce by about 20%, or 620 people.</p>



<p class="wp-block-paragraph">The move has nothing to do with increasing margins or replacing humans with AI, he insisted in his post on LinkedIn; rather, it’s a calculated decision to trim down and hone the company’s focus as AI becomes integral to day-to-day workflows.</p>



<p class="wp-block-paragraph">“This is not a distress signal; it is a deliberate reset, disclosed with its price attached,” said <a href="https://greyhoundresearch.com/svg/" target="_blank" rel="noreferrer noopener">Sanchit Vir Gogia</a>, chief analyst at Greyhound Research. “The industry has quietly swapped the meaning of productivity, and this filing is the clearest exhibit yet.”</p>



<h2 class="wp-block-heading">A ‘significant opportunity’ in technology</h2>



<p class="wp-block-paragraph">In a <a href="https://www.sec.gov/Archives/edgar/data/1845338/000117891326003553/zk2635715.htm" target="_blank" rel="noreferrer noopener">SEC filing</a> this week, monday.com said its restructuring plan reflects the “ongoing transformation of its product, marketing, and go-to-market strategy.” The move is intended to support a “leaner, more focused operating model” as the company continues to invest in its AI-driven strategy.</p>



<p class="wp-block-paragraph">Zinman noted in his post that the company has shifted to “doing the work with AI and not just managing it,” and is focused on building environments where “people and <a href="https://www.cio.com/article/411198/how-to-launch-your-ai-projects-from-pilot-to-production-and-ensure-success.html" target="_blank">AI agents</a> [work] together in one workspace.”</p>



<p class="wp-block-paragraph">In recent months, monday.com has <a href="https://www.computerworld.com/article/3822438/monday-com-aims-to-be-an-ai-first-platform-with-latest-enhancements.html" target="_blank">evolved its products</a>, strategy, and the way it serves its customers, and Zinman contended that “the organization we built for our previous chapter is not the organization that fits the new AI era.” Monday.com needs to “execute more decisively,” take on new challenges, and quickly respond to market changes, he said.</p>



<p class="wp-block-paragraph">“We have never seen such a significant opportunity in software, driven by such exciting technology,” Zinman noted. He emphasized that the reduction is not to replace people with AI, nor to improve margins; the “vast majority” of savings will be reinvested into talent, products, and AI.</p>



<p class="wp-block-paragraph">The restructuring will result in a “flatter organization” with fewer management layers and smaller, more autonomous teams, and monday.com also has a new go-to-market model, Zinman explained. Customers expect “deeper implementation support” as they deploy AI, and the company will work more closely with customers, increase its on-site presence, create new roles, and “adapt many existing ones.” In its SEC filing, the company said it expects to continue hiring in “key strategic areas” throughout 2026.</p>



<p class="wp-block-paragraph">Workers will be expected to work better, “not harder,” Zinman noted. He pointed to several past examples where work could have been done in a few days, but instead took many months with “multiple meetings and endless friction.”</p>



<p class="wp-block-paragraph">“This wasn’t people’s fault and everyone was frustrated by this,” he said. “Our new org changes ownership to allow people to make decisions and move fast.”</p>



<p class="wp-block-paragraph">A spokesperson for monday.com declined to comment further on the staff reductions.</p>



<h2 class="wp-block-heading">Monday.com’s key market advantages</h2>



<p class="wp-block-paragraph">Monday.com certainly isn’t struggling; the company expects 19% to 20% year-over-year growth in 2026.</p>



<p class="wp-block-paragraph">“Companies in that position do not restructure because they must,” Greyhound’s Gogia noted. “They restructure because they have decided to become something else.”</p>



<p class="wp-block-paragraph"><a href="https://moorinsightsstrategy.com/team/melody-brue/" target="_blank" rel="noreferrer noopener">Melody Brue</a>, VP and principal analyst at Moor Insights &amp; Strategy, pointed out that organizational redesign is important for real AI transformation, but while it can signal confidence to the market, it can still be “devastating” to humans.</p>



<p class="wp-block-paragraph">While the company looks as though it’s trying to do right, that ultimately remains to be seen, she said. “There are often hidden internal bruises that can surface long after layoffs.”</p>



<p class="wp-block-paragraph">Monday.com’s advantage is in its “structured substrate,” Gogia noted; its boards, permissions and typed workflows give agents something firmer to act on than just documents and chat history. The company highlights its natively built agents that can be configured by any team member, as well as connectors with Claude, Microsoft Copilot, and ChatGPT, and dedicated routes for external agents to authenticate and operate.</p>



<p class="wp-block-paragraph">“For some time, the sharper enterprise question has been shifting from who has an agent to who owns the governed runtime in which an agent can safely act,” he said. “Structured work is a serious claim on that runtime.”</p>



<p class="wp-block-paragraph">But parts of monday.com’s agent estate remain in staged release, and its product is ultimately “mid-transition,” Gogia pointed out; its agent builder carried a beta label as recently as March,. Also, the company’s pricing model changed in May to a hybrid model charging for seats as well as mandatory AI credits. And, while its AI-powered no-code builder monday vibe passed $1 million in annual recurring revenue within two and a half months, monday.com has not released subsequent outcomes, usage volumes, or attach rates.</p>



<p class="wp-block-paragraph">Further, there’s an element of “gravity” with its competitors, he observed. Asana is reorganizing teams around agents, Atlassian is wiring agents into the developer estate, and others are simply bundling them into their offerings: Microsoft is doing so across the productivity stack, and ServiceNow across enterprise operations, each with identity and procurement built in.</p>



<p class="wp-block-paragraph">“Their pull is strongest exactly where monday.com wants to grow, in the largest accounts, where control-plane depth and administrative reach decide the deal,” said Gogia.</p>



<h2 class="wp-block-heading">Actions for the near-term</h2>



<p class="wp-block-paragraph">Going forward, buyers should focus on operating risk, not headline risk, Moor’s Brue noted. In practice, that’s continuity of service, roadmap consistency, and strength of enterprise support. Productivity should be valued as better outcomes per unit of organizational effort, not mere activity.</p>



<p class="wp-block-paragraph">“It should be a measure of how much smoother, faster, and more effective the operating model becomes when AI is built into the work,” said Brue.</p>



<p class="wp-block-paragraph">Gogia noted that strain surfaces first in customer service, and monday.com’s attention is being redistributed. The company’s annual report disclosed that its focus is now concentrated on the largest accounts, with support for medium-sized clients moved to an AI-first and human-supported model.</p>



<p class="wp-block-paragraph">During the first month of the transition, buyers should track named account continuity and escalation times, he advised. By the first quarter, keep an eye on whether credit governance and admin controls mature on schedule, and if the roadmap beyond the AI estate keeps pace. By the half-year mark, determine whether promised implementation depth is producing outcomes or “simply more billable engagement.”</p>



<p class="wp-block-paragraph">Support tiers should be enumerated in writing before renewal, and <a href="https://www.cio.com/article/4192312/4-recs-for-cios-to-optimize-ai-budgets-and-improve-sustainability.html" target="_blank">buyers should contract</a> for “side exits,” Gogia emphasized, with overage pricing fixed in advance, the right to pause consumption, and portability for workflows and agent configuration “if the relationship sours.” Finance should also insist on monthly consumption reporting by capability. Further, integration efforts, partner dependency, and change management should be considered first-class costs of the agent era, “not as afterthoughts to a license.”</p>



<p class="wp-block-paragraph">“A license was a known cost,” said Gogia. “A meter is a behavior, and behavior is harder to forecast than headcount.”</p>



<p class="wp-block-paragraph"><em>This article originally appeared on <a href="https://www.cio.com/article/4200330/monday-com-cuts-20-of-its-workforce-to-restructure-for-the-ai-era.html" target="_blank">CIO.com</a>.</em></p>



<p class="wp-block-paragraph"></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Monday.com cuts 20% of its workforce to restructure for the AI era]]></title>
<description><![CDATA[Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era.



Monday.com co-founder and co-CEO Eran Zinman tod...]]></description>
<link>https://tsecurity.de/de/3687828/it-security-nachrichten/mondaycom-cuts-20-of-its-workforce-to-restructure-for-the-ai-era/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3687828/it-security-nachrichten/mondaycom-cuts-20-of-its-workforce-to-restructure-for-the-ai-era/</guid>
<pubDate>Thu, 23 Jul 2026 02:50:31 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph">Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era.</p>



<p class="wp-block-paragraph">Monday.com co-founder and co-CEO Eran Zinman <a href="https://www.linkedin.com/pulse/building-mondaycom-its-next-chapter-eran-zinman-cxx4e/" target="_blank" rel="noreferrer noopener">today announced</a> the “very difficult decision” to reduce the AI work platform company’s global workforce by about 20%, or 620 people.</p>



<p class="wp-block-paragraph">The move has nothing to do with increasing margins or replacing humans with AI, he insisted in his post on LinkedIn; rather, it’s a calculated decision to trim down and hone the company’s focus as AI becomes integral to day-to-day workflows.</p>



<p class="wp-block-paragraph">“This is not a distress signal; it is a deliberate reset, disclosed with its price attached,” said <a href="https://greyhoundresearch.com/svg/" target="_blank" rel="noreferrer noopener">Sanchit Vir Gogia</a>, chief analyst at Greyhound Research. “The industry has quietly swapped the meaning of productivity, and this filing is the clearest exhibit yet.”</p>



<h2 class="wp-block-heading">A ‘significant opportunity’ in technology</h2>



<p class="wp-block-paragraph">In a <a href="https://www.sec.gov/Archives/edgar/data/1845338/000117891326003553/zk2635715.htm" target="_blank" rel="noreferrer noopener">SEC filing</a> this week, monday.com said its restructuring plan reflects the “ongoing transformation of its product, marketing, and go-to-market strategy.” The move is intended to support a “leaner, more focused operating model” as the company continues to invest in its AI-driven strategy.</p>



<p class="wp-block-paragraph">Zinman noted in his post that the company has shifted to “doing the work with AI and not just managing it,” and is focused on building environments where “people and <a href="https://www.cio.com/article/411198/how-to-launch-your-ai-projects-from-pilot-to-production-and-ensure-success.html" target="_blank">AI agents</a> [work] together in one workspace.”</p>



<p class="wp-block-paragraph">In recent months, monday.com has <a href="https://www.computerworld.com/article/3822438/monday-com-aims-to-be-an-ai-first-platform-with-latest-enhancements.html" target="_blank">evolved its products</a>, strategy, and the way it serves its customers, and Zinman contended that “the organization we built for our previous chapter is not the organization that fits the new AI era.” Monday.com needs to “execute more decisively,” take on new challenges, and quickly respond to market changes, he said.</p>



<p class="wp-block-paragraph">“We have never seen such a significant opportunity in software, driven by such exciting technology,” Zinman noted. He emphasized that the reduction is not to replace people with AI, nor to improve margins; the “vast majority” of savings will be reinvested into talent, products, and AI.</p>



<p class="wp-block-paragraph">The restructuring will result in a “flatter organization” with fewer management layers and smaller, more autonomous teams, and monday.com also has a new go-to-market model, Zinman explained. Customers expect “deeper implementation support” as they deploy AI, and the company will work more closely with customers, increase its on-site presence, create new roles, and “adapt many existing ones.” In its SEC filing, the company said it expects to continue hiring in “key strategic areas” throughout 2026.</p>



<p class="wp-block-paragraph">Workers will be expected to work better, “not harder,” Zinman noted. He pointed to several past examples where work could have been done in a few days, but instead took many months with “multiple meetings and endless friction.”</p>



<p class="wp-block-paragraph">“This wasn’t people’s fault and everyone was frustrated by this,” he said. “Our new org changes ownership to allow people to make decisions and move fast.”</p>



<p class="wp-block-paragraph">A spokesperson for monday.com declined to comment further on the staff reductions.</p>



<h2 class="wp-block-heading">Monday’s key market advantages</h2>



<p class="wp-block-paragraph">Monday.com certainly isn’t struggling; the company expects 19% to 20% year-over-year growth in 2026.</p>



<p class="wp-block-paragraph">“Companies in that position do not restructure because they must,” Greyhound’s Gogia noted. “They restructure because they have decided to become something else.”</p>



<p class="wp-block-paragraph"><a href="https://moorinsightsstrategy.com/team/melody-brue/" target="_blank" rel="noreferrer noopener">Melody Brue</a>, VP and principal analyst at Moor Insights &amp; Strategy, pointed out that organizational redesign is important for real AI transformation, but while it can signal confidence to the market, it can still be “devastating” to humans.</p>



<p class="wp-block-paragraph">While the company looks as though it’s trying to do right, that ultimately remains to be seen, she said. “There are often hidden internal bruises that can surface long after layoffs.”</p>



<p class="wp-block-paragraph">Monday.com’s advantage is in its “structured substrate,” Gogia noted; its boards, permissions and typed workflows give agents something firmer to act on than just documents and chat history. The company highlights its natively built agents that can be configured by any team member, as well as connectors with Claude, Microsoft Copilot, and ChatGPT, and dedicated routes for external agents to authenticate and operate.</p>



<p class="wp-block-paragraph">“For some time, the sharper enterprise question has been shifting from who has an agent to who owns the governed runtime in which an agent can safely act,” he said. “Structured work is a serious claim on that runtime.”</p>



<p class="wp-block-paragraph">But parts of monday.com’s agent estate remain in staged release, and its product is ultimately “mid-transition,” Gogia pointed out; its agent builder carried a beta label as recently as March,. Also, the company’s pricing model changed in May to a hybrid model charging for seats as well as mandatory AI credits. And, while its AI-powered no-code builder monday vibe passed $1 million in annual recurring revenue within two and a half months, monday.com has not released subsequent outcomes, usage volumes, or attach rates.</p>



<p class="wp-block-paragraph">Further, there’s an element of “gravity” with its competitors, he observed. Asana is reorganizing teams around agents, Atlassian is wiring agents into the developer estate, and others are simply bundling them into their offerings: Microsoft is doing so across the productivity stack, and ServiceNow across enterprise operations, each with identity and procurement built in.</p>



<p class="wp-block-paragraph">“Their pull is strongest exactly where monday.com wants to grow, in the largest accounts, where control-plane depth and administrative reach decide the deal,” said Gogia.</p>



<h2 class="wp-block-heading">Actions for the near-term</h2>



<p class="wp-block-paragraph">Going forward, buyers should focus on operating risk, not headline risk, Moor’s Brue noted. In practice, that’s continuity of service, roadmap consistency, and strength of enterprise support. Productivity should be valued as better outcomes per unit of organizational effort, not mere activity.</p>



<p class="wp-block-paragraph">“It should be a measure of how much smoother, faster, and more effective the operating model becomes when AI is built into the work,” said Brue.</p>



<p class="wp-block-paragraph">Gogia noted that strain surfaces first in customer service, and monday.com’s attention is being redistributed. The company’s annual report disclosed that its focus is now concentrated on the largest accounts, with support for medium-sized clients moved to an AI-first and human-supported model.</p>



<p class="wp-block-paragraph">During the first month of the transition, buyers should track named account continuity and escalation times, he advised. By the first quarter, keep an eye on whether credit governance and admin controls mature on schedule, and if the roadmap beyond the AI estate keeps pace. By the half-year mark, determine whether promised implementation depth is producing outcomes or “simply more billable engagement.”</p>



<p class="wp-block-paragraph">Support tiers should be enumerated in writing before renewal, and <a href="https://www.cio.com/article/4192312/4-recs-for-cios-to-optimize-ai-budgets-and-improve-sustainability.html" target="_blank">buyers should contract</a> for “side exits,” Gogia emphasized, with overage pricing fixed in advance, the right to pause consumption, and portability for workflows and agent configuration “if the relationship sours.” Finance should also insist on monthly consumption reporting by capability. Further, integration efforts, partner dependency, and change management should be considered first-class costs of the agent era, “not as afterthoughts to a license.”</p>



<p class="wp-block-paragraph">“A license was a known cost,” said Gogia. “A meter is a behavior, and behavior is harder to forecast than headcount.”</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Release v1.171.0]]></title>
<description><![CDATA[1.171.0 - 2026-07-22
### Added

Added support for the OpenTofu .tofu file extension. Because OpenTofu uses the same HCL grammar as Terraform, .tofu files are now automatically detected and scanned as Terraform, so they are picked up by recursive scans and Terraform rulesets (e.g. p/terraform) wit...]]></description>
<link>https://tsecurity.de/de/3687763/it-security-tools/release-v11710/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3687763/it-security-tools/release-v11710/</guid>
<pubDate>Thu, 23 Jul 2026 01:20:41 +0200</pubDate>
<category>💾 IT Security Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2><a href="https://github.com/semgrep/semgrep/releases/tag/v1.171.0">1.171.0</a> - 2026-07-22</h2>
<h3>### Added</h3>
<ul>
<li>Added support for the OpenTofu <code>.tofu</code> file extension. Because OpenTofu uses the same HCL grammar as Terraform, <code>.tofu</code> files are now automatically detected and scanned as Terraform, so they are picked up by recursive scans and Terraform rulesets (e.g. <code>p/terraform</code>) with no extra configuration. (ENGINE-2884)</li>
</ul>
<h3>### Changed</h3>
<ul>
<li>The window for collecting git contributor information during <code>semgrep ci</code> has been extended from the last 30 days to the last 90 days, to match the updated usage policy. (contributor-window-90-days)</li>
</ul>
<h3>### Fixed</h3>
<ul>
<li>Fixed a source of rare, nondeterministic crashes and incorrect results caused<br>
by an OCaml compiler bug. Semgrep now builds against a compiler fork that<br>
backports the upstream fix. (ocaml_codegen_fix)</li>
<li>Fixed excessive heap growth after explicit major garbage collections. Semgrep<br>
now builds against an OCaml compiler that improves garbage collection duty<br>
cycle pacing. (ocaml_gc_pacing_fix)</li>
<li>Improved the <code>Scan Status</code> output when no code rules will run (e.g. a<br>
Secrets-only or Supply-Chain-only scan). The summary line no longer reports a<br>
confusing "0 Code rules", and the "Code Rules" section now states explicitly<br>
either that code scanning is not enabled or that there are no code rules to run,<br>
instead of printing an empty table. (ENGINE-2878)</li>
<li>Fixed lockfileless Gradle dependency resolution failing with "Parsing<br>
dependency output failed (Resolve_gradle.gradle_resolved_dependency)". The<br>
github-dependency-graph-gradle-plugin used during resolution was fetched<br>
unpinned, and its 1.4.2 release renamed keys in its JSON output. The plugin is<br>
now pinned to 1.4.1. (sc-3738)</li>
</ul>]]></content:encoded>
</item>
<item>
<title><![CDATA[What’s New in Rapid7 Products and Services: Q2 2026 in Review]]></title>
<description><![CDATA[If Q1 set the pace for Rapid7's tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation across Rapid7’s portfolio. Each release was designed with a clear goal in mind: helping security teams reduce complexity whi...]]></description>
<link>https://tsecurity.de/de/3686659/it-security-nachrichten/whats-new-in-rapid7-products-and-services-q2-2026-in-review/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3686659/it-security-nachrichten/whats-new-in-rapid7-products-and-services-q2-2026-in-review/</guid>
<pubDate>Wed, 22 Jul 2026 16:30:13 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><span>If Q1 set the pace for Rapid7's tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation across Rapid7’s portfolio. Each release was designed with a clear goal in mind: helping security teams reduce complexity while increasing speed, context, and confidence in their day-to-day operations. Here’s a closer look at what launched in Q2.</span></p><h2>Detection and response</h2><h3><span>Streamline investigations with bidirectional and enriched Microsoft Defender alerts</span></h3><p><span>Bidirectional synchronization and enriched alert context for Microsoft Defender is now generally available for SIEM and </span><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/" target="_self"><span>MDR</span></a><span> customers, enabling security teams to automatically synchronize alert status between Rapid7's </span><a href="https://www.rapid7.com/products/siem" target="_self"><span>SIEM</span></a><span> and the Microsoft Defender console. With added process tree and user identity context, analysts can investigate threats more efficiently while reducing manual effort.</span></p><h3><span>Confidently scale detection engineering with Detection as Code</span></h3><p><a href="https://www.rapid7.com/blog/post/dr-scaling-engineering-detection-as-code" target="_self"><span>Detection as Code</span></a><span> enables security teams to build, test, version, and deploy detections using Terraform and modern engineering workflows. Built-in validation, guardrails, and version control help teams deliver higher-quality alerts, maintain more consistent coverage, and scale detection engineering more effectively.</span></p><p></p><figure><div><img src="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt5b87b1b66cb42fb0/6a60c7d908c174e1555adb14/image2.png" alt="rapid7-detection-as-code-methodology.png" caption="Figure 1: Rapid7's Detection as Code methodology." height="713" class="embedded-asset" content-type-uid="sys_assets" type="asset" asset-alt="rapid7-detection-as-code-methodology.png" width="1553" max-width="1553" max-height="713" data-sys-asset-filelink="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt5b87b1b66cb42fb0/6a60c7d908c174e1555adb14/image2.png" data-sys-asset-uid="blt5b87b1b66cb42fb0" data-sys-asset-filename="image2.png" data-sys-asset-contenttype="image/png" data-sys-asset-caption="Figure 1: Rapid7's Detection as Code methodology." data-sys-asset-alt="rapid7-detection-as-code-methodology.png" data-sys-asset-position="none" sys-style-type="display"><figcaption>Figure 1: Rapid7's Detection as Code methodology.</figcaption></div></figure><p></p><h3><span>Strengthen ransomware resilience with Ransomware Prevention for Incident Command</span></h3><p><span>Ransomware Prevention for </span><a href="https://www.rapid7.com/products/siem" target="_self"><span>Incident Command</span></a><span> adds an intent-based layer of protection designed to stop ransomware encryption and endpoint damage before they disrupt operations. Built into the Insight Agent, this capability strengthens ransomware resilience while working alongside existing endpoint security investments, without adding operational complexity.</span></p><h2>Compliance</h2><h3>New solutions webpages</h3><p><span>Across the globe, cybersecurity regulation is shifting away from static compliance checklists and toward ongoing risk management that blends proactive defense with effective detection and response. Rapid7’s </span><a href="https://www.rapid7.com/platform" target="_self"><span>platform</span></a><span>, which brings exposure management and CTEM together with detection, response, and MDR, is well positioned to help organizations operationalize compliance across mandates such as NIS2, NIST CSF 2.0, DORA, HIPAA, HITRUST, and GovRAMP. To support that effort, Rapid7 has launched an updated library of dedicated compliance solution pages that map platform capabilities to the requirements that matter most across industries and regions. The first set of pages is live now, with more to follow in the coming weeks.</span></p><ul><li><p><a href="https://www.rapid7.com/solutions/compliance/nist-csf-2" target="_self"><span>NIST CSF 2.0</span></a></p></li><li><p><a href="https://www.rapid7.com/solutions/compliance/hipaa" target="_self"><span>HIPAA</span></a></p></li><li><p><a href="https://www.rapid7.com/solutions/compliance/hitrust" target="_self"><span>HITRUST</span></a></p></li><li><p><a href="https://www.rapid7.com/solutions/compliance/nis2" target="_self"><span>NIS2</span></a></p></li><li><p><a href="https://www.rapid7.com/blog/post/www.rapid7.com/solutions/compliance/govramp" target="_self"><span>GovRAMP</span></a></p></li></ul><p></p><figure><div><img src="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blta8db9b364598a181/6a60c98604258068dc0bf302/rapid7-govramp-compliance.png" alt="rapid7-govramp-compliance.png" caption="Figure 2: Rapid7's new GovRAMP compliance solutions page." class="embedded-asset" content-type-uid="sys_assets" type="asset" asset-alt="rapid7-govramp-compliance.png" data-sys-asset-filelink="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blta8db9b364598a181/6a60c98604258068dc0bf302/rapid7-govramp-compliance.png" data-sys-asset-uid="blta8db9b364598a181" data-sys-asset-filename="rapid7-govramp-compliance.png" data-sys-asset-contenttype="image/png" data-sys-asset-caption="Figure 2: Rapid7's new GovRAMP compliance solutions page." data-sys-asset-alt="rapid7-govramp-compliance.png" data-sys-asset-position="none" sys-style-type="display"><figcaption>Figure 2: Rapid7's new GovRAMP compliance solutions page.</figcaption></div></figure><h2>Exposure management</h2><h3><span>Turn prioritized exposures into remediation progress</span></h3><p><span>We improved Remediation Hub to help teams turn prioritized exposures into more actionable remediation progress. Updates to the Top Remediations Report add asset-level context, including operating system, IP address, cloud provider, tags, endpoint protection, and patch management details, so teams can better understand what needs to be fixed and who needs to act.</span></p><p><span>With clearer patch and endpoint coverage signals, reboot status, customizable filters, exportable reports, and scheduled email delivery, teams can spend less time assembling manual updates and more time tracking the remediation work that reduces risk. Read the full </span><a href="https://www.rapid7.com/blog/post/em-path-from-prioritized-exposures-to-remediation-progress" target="_self"><span>blog</span></a><span> to learn more about how Exposure Command helps teams move from prioritized exposures to remediation progress.</span></p><h3><span>AI pre-triage for AppSec findings</span></h3><p><span>Rapid7 is also making application security testing faster and more focused with AI vulnerability pre-triaging for InsightAppSec. Available now for </span><a href="https://www.rapid7.com/products/insightappsec" target="_self"><span>AppSec</span></a><span> customers in supported regions, the capability uses AI to automatically remove false positives during the scan process, helping teams spend less time manually reviewing findings and more time remediating actual risk.</span></p><p><span>Initial coverage started with BlindSQL, and the latest engine release adds AI validation for BlindNoSQL findings, including content-based and timing-based detections. The result is a cleaner, more confident view of application risk, so security teams can focus on high-impact vulnerabilities and accelerate remediation with less manual effort.</span></p><h2>Attack surface management</h2><h3><span>Open-source MCP Server and Agent Skill</span></h3><p><span>We are delighted to announce the introduction of a free, open-source MCP Server and Agent Skill for Bulk Export. Bulk export is a highly efficient way to access all your Rapid7 vulnerability and exposure data to AI assistants and custom AI workflows. Built as an open-source bridge, it helps customers bring their Rapid7 data into the tools and experiences that work best for their teams. Check out our </span><a href="https://www.rapid7.com/blog/post/em-bulk-export-ai-ready-security-workflows-open-source-mcp-server-agent-skill" target="_self"><span>blog</span></a><span> for more detail.</span></p><p></p><figure><div><img src="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt83035d9c7fcbfdf4/6a60ca130133d41740e07649/rapid7-ai-agent-skill.png" alt="rapid7-ai-agent-skill.png" caption="Figure 3: Agent Skill for Bulk Export." class="embedded-asset" content-type-uid="sys_assets" type="asset" asset-alt="rapid7-ai-agent-skill.png" data-sys-asset-filelink="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt83035d9c7fcbfdf4/6a60ca130133d41740e07649/rapid7-ai-agent-skill.png" data-sys-asset-uid="blt83035d9c7fcbfdf4" data-sys-asset-filename="rapid7-ai-agent-skill.png" data-sys-asset-contenttype="image/png" data-sys-asset-caption="Figure 3: Agent Skill for Bulk Export." data-sys-asset-alt="rapid7-ai-agent-skill.png" data-sys-asset-position="none" sys-style-type="display"><figcaption>Figure 3: Agent Skill for Bulk Export.</figcaption></div></figure><h3><span>Turn exposure filters into live dashboards</span></h3><p><a href="https://www.rapid7.com/products/command/attack-surface-management-asm/" target="_self"><span>Surface Command</span></a><span> also made exposure reporting easier with filter-based dashboard widgets. Teams can now turn saved asset and identity filters into live dashboards without writing Cypher queries, making it faster to track high-risk internet-facing assets, identity-driven exposure hotspots, unmanaged cloud infrastructure, and business-unit risk.</span></p><p><span>For continuous threat exposure management programs, this helps teams move from one-off reporting to repeatable, always-on views of exposure risk and remediation progress. Read this </span><a href="https://www.rapid7.com/blog/post/em-operationalizing-ctem-building-surface-command-dashboards" target="_self"><span>blog</span></a><span> to learn more. </span></p><h2>Platform and Labs</h2><h3><span>Rapid7 Command Platform</span></h3><h4><span>Cyber GRC</span></h4><p><span>Rapid7 introduced </span><a href="https://www.rapid7.com/about/press-releases/rapid7-launches-cyber-governance-risk-and-compliance-grc-early-access-program-to-unify-security-data-risk-context-and-compliance-workflows" target="_self"><span>Cyber GRC</span></a><span> to select customers in Q2, giving teams an early look at a new way to connect security, risk, compliance, and third-party risk management in one program. Available to both Exposure Management and Detection and Response customers, Cyber GRC brings governance and compliance workflows closer to the security data teams already use every day.</span></p><p><span>Cyber GRC will be broadly available in late July. It helps organizations move toward continuous compliance by mapping controls to real environment telemetry, automating evidence collection, and prioritizing risk with live attack surface context. That means teams can spend less time chasing audit artifacts, screenshots, and vendor risk details, and more time understanding which controls, assets, third parties, and risks need attention now.</span></p><h3><span>Rapid7 Labs</span></h3><h4><span>Rapid7 Quarterly Threat Landscape Report</span></h4><p><span>The Rapid7 Quarterly Threat Landscape Report examines the key trends shaping today's threat landscape, drawing on MDR incident response, vulnerability intelligence, ransomware monitoring, and dark web telemetry. Q1 2026 data highlights the growing dominance of vulnerability exploitation as an initial access vector, the rise of zero-click vulnerabilities, evolving ransomware operations, and the accelerating pace at which attackers operationalize newly disclosed vulnerabilities. Read the </span><a href="https://www.rapid7.com/research/report/threat-landscape-report-2026-q1" target="_self"><span>report</span></a><span> to explore all key findings and takeaways.</span></p><p></p><figure><div><img src="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt9eaa551742740d0a/6a60ca8f4dd0a37fcaca1cc5/rapid7-quarterly-threat-report.png" alt="rapid7-quarterly-threat-report.png" caption="Figure 4: Rapid7's quarterly threat report." class="embedded-asset" content-type-uid="sys_assets" type="asset" asset-alt="rapid7-quarterly-threat-report.png" data-sys-asset-filelink="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt9eaa551742740d0a/6a60ca8f4dd0a37fcaca1cc5/rapid7-quarterly-threat-report.png" data-sys-asset-uid="blt9eaa551742740d0a" data-sys-asset-filename="rapid7-quarterly-threat-report.png" data-sys-asset-contenttype="image/png" data-sys-asset-caption="Figure 4: Rapid7's quarterly threat report." data-sys-asset-alt="rapid7-quarterly-threat-report.png" data-sys-asset-position="none" sys-style-type="display"><figcaption>Figure 4: Rapid7's quarterly threat report.</figcaption></div></figure><h3><span>The latest threat research</span></h3><p><span>Rapid7 researchers explored emerging trends shaping the threat landscape, including the growing commercialization of </span><a href="https://www.rapid7.com/blog/post/tr-criminal-ai-underground-market-operationalizing-cybercrime-2026" target="_self"><span>criminal AI-as-a-Service</span></a><span> and the evolving tradecraft of advanced threat actors. From the underground adoption of AI tools for fraud and social engineering to an </span><a href="https://www.rapid7.com/blog/post/tr-malware-tracking-dropping-elephant-tradecraft-china-themed-loader-chain" target="_self"><span>in-depth analysis of the Dropping Elephant malware campaign</span></a><span>, these reports provide actionable intelligence on how attackers are adapting their techniques and what defenders can do to stay ahead.</span></p><h4><span>Emergent Threat Response</span></h4><p><span>This quarter's Emergent Threat Response (ETR) coverage highlights a sustained wave of high-impact vulnerabilities affecting widely deployed enterprise technologies, including </span><a href="https://www.rapid7.com/blog/post/etr-active-exploitation-of-oracle-peoplesoft-zero-day-cve-2026-35273" target="_self"><span>Oracle PeopleSoft</span></a><span>, </span><a href="https://www.rapid7.com/blog/post/etr-cve-2026-0265-authentication-bypass-in-palo-alto-networks-pan-os" target="_self"><span>Palo Alto Networks PAN-OS</span></a><span>, </span><a href="https://www.rapid7.com/blog/post/etr-critical-check-point-vpn-zero-day-exploited-in-the-wild-cve-2026-50751" target="_self"><span>Check Point VPN</span></a><span>, </span><a href="https://www.rapid7.com/blog/post/etr-cve-2026-10520-cve-2026-10523-multiple-critical-vulnerabilities-affecting-ivanti-sentry" target="_self"><span>Ivanti Sentry</span></a><span>, </span><a href="https://www.rapid7.com/blog/post/etr-cve-2026-41940-cpanel-whm-authentication-bypass" target="_self"><span>cPanel/WHM</span></a><span>, and </span><a href="https://www.rapid7.com/blog/post/etr-cve-2026-33032-nginx-ui-missing-mcp-authentication" target="_self"><span>Nginx UI</span></a><span>. For each of these CVEs, Rapid7 tracked active exploitation and rapidly evolving attacker activity to provide timely guidance to help defenders assess risk and respond quickly. See all the details, and our latest ETR coverage, </span><a href="https://www.rapid7.com/blog/tag/emergent-threat-response" target="_self"><span>here</span></a><span>.</span></p><p><span>From strengthening detection and response to advancing exposure management, expanding governance capabilities, and delivering actionable threat intelligence, Q2 demonstrated Rapid7’s continued focus on helping security teams do more with less complexity. Every enhancement this quarter was designed to reduce manual effort, surface the context that matters, and help organizations make faster, more confident security decisions. We’re carrying that momentum into the rest of the year, so stay tuned to our blog and releases as we continue building the security operations platform that helps defenders stay ahead of what’s next.</span></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[OneNote vs. Evernote: Notiz-Apps im Vergleich]]></title>
<description><![CDATA[Evernote und OneNote tragen den Kampf um die Notiz-App-Krone unter sich aus. 
					Foto: Bonya_06_Inna_Kharlamova_Makini_Caravello – shutterstock.com




Geht es um die richtige Notiz-App, fällt die Entscheidung im Regelfall zwischen OneNote von Microsoft und Evernote, das inzwischen dem italieni...]]></description>
<link>https://tsecurity.de/de/3685167/it-security-nachrichten/onenote-vs-evernote-notiz-apps-im-vergleich/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3685167/it-security-nachrichten/onenote-vs-evernote-notiz-apps-im-vergleich/</guid>
<pubDate>Wed, 22 Jul 2026 05:06:49 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<div class="extendedBlock-wrapper block-coreImage"><figure class="wp-block-image size-large"><img loading="lazy" alt="Evernote und OneNote tragen den Kampf um die Notiz-App-Krone unter sich aus. " title="Evernote und OneNote tragen den Kampf um die Notiz-App-Krone unter sich aus. " src="https://images.computerwoche.de/bdb/3380610/840x473.jpg" width="840" height="473"><figcaption class="wp-element-caption"><p class="foundryImageCaption">Evernote und OneNote tragen den Kampf um die Notiz-App-Krone unter sich aus. </p></figcaption></figure><p class="imageCredit">
					Foto: Bonya_06_Inna_Kharlamova_Makini_Caravello – shutterstock.com</p></div>




<p class="wp-block-paragraph">Geht es um die richtige Notiz-App, fällt die Entscheidung im Regelfall zwischen OneNote von Microsoft und Evernote, das inzwischen dem italienischen Softwareunternehmen <a href="https://www.computerwoche.de/article/2818214/zweiter-fruehling-fuer-die-notizen-app.html" title="Bending Spoons gehört" target="_blank">Bending Spoons gehört</a>. </p>



<ul class="wp-block-list">
<li><p><strong>OneNote</strong> ist seit dem Jahr 2003 auf dem Markt und wurde 2007 in Microsofts Office-Suite aufgenommen (die meisten Versionen laufen inzwischen unter dem Namen Microsoft 365). Zudem wird OneNote auch mit Windows 10 und 11 gebündelt und als eigenständiges Produkt kostenlos angeboten. Das eröffnet eine potenzielle Nutzerbasis von rund einer Milliarde Systemen.</p></li>



<li><p><strong>Evernote</strong> feierte im Jahr 2008 sein Marktdebüt und erfreut sich seither stetig wachsender Nutzerzahlen. Unternehmensangaben zufolge sind es inzwischen weltweit rund 225 Millionen User.</p></li>
</ul>



<p class="wp-block-paragraph">Sowohl OneNote als auch Evernote sind für alle wichtigen Desktop- und Mobile-Betriebssysteme verfügbar. Beide sind in der Lage, Notizen mit allen Geräten und dem Internet zu synchronisieren und beide versprechen, die einzige notwendige App für Notizen zu sein. Stellt sich die Frage: Was ist die bessere Wahl für <a href="https://www.computerwoche.de/article/2795948/die-besten-productivity-apps.html" title="Business-Nutzer" target="_blank">Business-Nutzer</a>?</p>



<p class="wp-block-paragraph">Wir haben uns die jeweils aktuellen Versionen beider Notiz-Apps für <a href="https://www.computerwoche.de/operating-systems/" target="_blank" class="idgGlossaryLink">Windows</a>, macOS, iPadOS, iOS und <a href="https://www.computerwoche.de/mobile/" target="_blank" class="idgGlossaryLink">Android</a> angesehen und sagen Ihnen, worin sich OneNote und Evernote im Wesentlichen unterscheiden. </p>



<h2 class="wp-block-heading">One Note: Organisationskrösus</h2>



<p class="wp-block-paragraph"><a href="https://www.microsoft.com/de-de/microsoft-365/onenote/digital-note-taking-app" title="OneNote" target="_blank" rel="noopener">OneNote</a> ist eine vollwertige Anwendung. Mit ihr können Sie einfache oder komplexe Notizen von Grund auf neu erstellen, sie in durchsuchbaren Notizbüchern organisieren und mit einer Vielzahl von Plattformen synchronisieren – zum Beispiel <a href="https://www.computerwoche.de/operating-systems/" target="_blank" class="idgGlossaryLink">Windows</a>-PCs, Macs, iPads und iPhones sowie <a href="https://www.computerwoche.de/mobile/" target="_blank" class="idgGlossaryLink">Android</a>-Geräten.</p>



<p class="wp-block-paragraph">Außerdem strotzt Microsofts Notiz-App nur so vor Werkzeugen – beispielsweise um:</p>



<ul class="wp-block-list">
<li><p>Notizen zu erstellen und zu bearbeiten,</p></li>



<li><p>zu zeichnen,</p></li>



<li><p>Audio- und Videoaufnahmen zu erstellen,</p></li>



<li><p>Bilder zu scannen oder</p></li>



<li><p>Tabellenkalkulationen einzubetten,</p></li>
</ul>



<p class="wp-block-paragraph">OneNote wird allmählich immer stärker in die <a href="https://www.computerwoche.de/article/3523691/microsoft-365-erklart.html" target="_blank">Microsoft-365-Suite</a> integriert. Für Unternehmen ist die Live-Zusammenarbeit besonders wichtig und sie funktioniert hier ebenso so wie in anderen Microsoft-365-Anwendungen. Besonders gut lässt sich OneNote dabei in <a title="Microsoft Teams" href="https://www.computerwoche.de/article/2795511/microsoft-teams-optimal-nutzen.html" target="_blank">Microsoft Teams</a> integrieren: Notizbücher lassen sich Teams hinzufügen – jeder innerhalb des Kanals kann diese anschließend anzeigen und bearbeiten (entsprechende Zugriffsrechte vorausgesetzt).</p>



<p class="wp-block-paragraph"><strong>Web-Clipping</strong></p>



<p class="wp-block-paragraph">So gut OneNote auch sein mag, wenn es darum geht Notizen zu erstellen: Es bleibt hinter den beträchtlichen Möglichkeiten von Evernote zurück, wenn es um das Clipping von Webinhalten geht. Dazu bietet OneNote ein Browser-Addon (Microsoft Edge, <a href="https://www.computerwoche.de/article/2805495/so-arbeiten-sie-besser-mit-google-chrome.html" title="Google Chrome" target="_blank">Google Chrome</a> und Mozilla Firefox) namens OneNote Web Clipper. Mit diesem Tool können Sie Screenshots in OneNote speichern – wenn es denn so funktioniert wie es soll.</p>



<p class="wp-block-paragraph"><strong>Versionsunterschiede</strong></p>



<p class="wp-block-paragraph">Die <a href="https://www.computerwoche.de/operating-systems/" target="_blank" class="idgGlossaryLink">Windows</a>-Version von OneNote kann mit der vollen Bandbreite an Tools glänzen. Im Vergleich bietet Evernote nicht annähernd so viele ausgefeilte Tools. Die Versionen für Web, <a href="https://www.computerwoche.de/mobile/" target="_blank" class="idgGlossaryLink">Android</a>, iPadOS und macOS fallen hingegen ab. Sie sehen zwar ähnlich aus wie die <a href="https://www.computerwoche.de/operating-systems/" target="_blank" class="idgGlossaryLink">Windows</a>-App, bieten im Vergleich aber weniger und teilweise eingeschränkte Funktionen. So können Sie hier etwa keine Tabellenkalkulationen integrieren oder Videoinhalte aufzeichnen. Die <a href="https://apps.apple.com/de/app/microsoft-onenote/id410395246" title="iOS-Version" target="_blank" rel="noopener">iOS-Version</a> hebt sich hingegen mit einer schlanken Benutzeroberfläche ab, die darauf optimiert ist, schnell Notizen zu erstellen oder zu bearbeiten. </p>



<p class="wp-block-paragraph"><strong>KI-Funktionen</strong></p>



<p class="wp-block-paragraph">Seit Mitte Januar 2024 bietet Microsoft mit <a title="Copilot Pro" href="https://www.computerwoche.de/article/2831382/microsoft-oeffnet-copilot-fuer-alle-office-nutzer.html" target="_blank">Copilot Pro</a> KI-Integration im Abomodell an – auch für OneNote.</p>



<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x"><div class="wp-block-embed__wrapper youtube-video">
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"><p lang="en" dir="ltr">🧠 Work smarter with Copilot Notebooks in OneNote — your new AI-powered space to think, organize, and create. Bring all your content together and let Copilot help you get to insights, faster. <br><br>Learn more: <a href="https://t.co/c63JbghHcH">https://t.co/c63JbghHcH</a></p>— Microsoft OneNote (@msonenote) <a href="https://x.com/msonenote/status/1940802718257357260?ref_src=twsrc%5Etfw">July 3, 2025</a></blockquote>
</div></figure>



<p class="wp-block-paragraph"><strong>Storage und Preise</strong></p>



<p class="wp-block-paragraph">OneNote synchronisiert seine Inhalte mit all Ihren Geräten und mit dem Internet über Microsoft OneDrive oder SharePoint. OneNote ist in <a href="https://www.computerwoche.de/article/3523691/microsoft-365-erklart.html" target="_blank">Microsoft 365</a> enthalten. Ohne M365-Abo erhalten Sie bis zu 5 GB Cloud-Speicherplatz. Zusätzlichen Speicherplatz können Sie zukaufen. Wenn Sie (oder Ihr Unternehmen) ein Microsoft-365-Abonnement abschließen, erhalten Sie wesentlich mehr Speicherplatz: zwischen 100 GB und 6 TB – je nachdem, für <a title="welchen Plan" href="https://www.microsoft.com/de-de/microsoft-365/buy/compare-all-microsoft-365-products" target="_blank" rel="noopener">welchen Plan</a> Sie sich entscheiden.</p>



<h2 class="wp-block-heading">Evernote: Web-Clipping-King</h2>



<p class="wp-block-paragraph"><a href="https://evernote.com/intl/de" title="Evernote" target="_blank" rel="noopener">Evernote</a> ist ein ganz anderes Kaliber als OneNote. Es bietet zwar die gleichen Grundfunktionalitäten: die Möglichkeit, Notizen zu erstellen, zu organisieren und mit mehreren Plattformen (<a href="https://www.computerwoche.de/operating-systems/" target="_blank" class="idgGlossaryLink">Windows</a>, macOS, iPadOS, iOS, <a href="https://www.computerwoche.de/mobile/" target="_blank" class="idgGlossaryLink">Android</a>, Web) zu synchronisieren. Dabei bietet die App im Vergleich zu OneNote allerdings eine signifikant farbenfrohere und einladendere Benutzeroberfläche – und eignet sich hervorragend, um Web-Content auszuschneiden und abzuspeichern.</p>



<p class="wp-block-paragraph">Der Startbildschirm von Evernote bietet diverse Widgets für den schnellen Zugriff auf Notizen, Notizbücher, kürzlich aufgenommene Bilder und vieles mehr. Ein zusätzliches Suchfeld garantiert zudem, dass Sie immer finden wonach Sie suchen. Die Widgets auf Ihrem Startbildschirm können Sie ganz nach Ihren Wünschen hinzufügen oder entfernen.</p>



<p class="wp-block-paragraph">Evernote bietet allerdings nicht annähernd so viele Werkzeuge zur Erstellung von Notizen wie OneNote. Zu den verfügbaren Features gehören zum Beispiel:</p>



<ul class="wp-block-list">
<li><p>Texte erstellen, bearbeiten und formatieren,</p></li>



<li><p>Tabellen, Dateien und Bilder einbetten,</p></li>



<li><p>Unterstützung für Touch-Devices und -Stifte,</p></li>



<li><p>Integrierbare Audio- und Videoaufnahmen und</p></li>



<li><p>Integration mit Google Calendar (für Outlook geplant) und Google Drive;</p></li>
</ul>



<p class="wp-block-paragraph"><strong>Web Clipping</strong></p>



<p class="wp-block-paragraph">Die Stärke von Evernote liegt wie eingangs bereits erwähnt darin, Inhalte aus dem weltweiten Netz zu erfassen und zu organisieren. Das dazu integrierte Web-Clipping-Tool funktioniert beispielhaft und läuft als Browser-Addon (für Chrome, Firefox, Internet Explorer, Microsoft Edge, Safari und Opera). Die Funktionen variieren dabei je nach Browser leicht. Im Allgemeinen bieten Google Chrome und Microsoft Edge dabei das zuverlässigste Erlebnis.</p>



<p class="wp-block-paragraph">Die Inhalte, die Sie mit Evernote aus dem Netz ziehen, lassen sich auch mit Tags versehen und zu Notizen hinzufügen. Darüber hinaus verfügt der Clipper auch über nützliche Markierungswerkzeuge für Screenshots. Erstellte Notizen dürfen selbstverständlich auf Knopfdruck mit spezifischen Kollegen oder auch über soziale Medien geteilt werden.</p>



<p class="wp-block-paragraph"><strong>Versionsunterschiede</strong></p>



<p class="wp-block-paragraph">Die <a class="idgGlossaryLink" href="https://www.computerwoche.de/operating-systems/" target="_blank">Windows</a>-, Mac-, iPadOS-, iOS-, <a class="idgGlossaryLink" href="https://www.computerwoche.de/mobile/" target="_blank">Android</a>– und Web-Versionen von Evernote weisen alle ein ähnliches Erscheinungsbild auf und verfügen über die gleichen Widgets und dasselbe Layout.</p>



<p class="wp-block-paragraph"><strong>KI-Funktionen</strong></p>



<p class="wp-block-paragraph">Auch Evernote integriert inzwischen künstliche Intelligenz. Zum Beispiel in Form von <a href="https://evernote.com/de-de/blog/ai-transcribe-audio-recordings-to-text" target="_blank" rel="noreferrer noopener">KI-Transkriptionen</a>, semantischen Suchen und auch in Form eines Assistenten:</p>



<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x"><div class="wp-block-embed__wrapper youtube-video">
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"><p lang="en" dir="ltr">You’ve heard about Evernote v11, now see it in action. ⚡📹<br><br>Watch Product Lead <a href="https://x.com/fedesimio?ref_src=twsrc%5Etfw">@fedesimio</a> demo the new AI Assistant, Semantic Search, and AI Meeting Notes, and share the story of how Evernote got to v11.<br><br>We’re excited to start this new chapter together. V11 is available for… <a href="https://t.co/9d8DMmRVLF">pic.twitter.com/9d8DMmRVLF</a></p>— Evernote (@evernote) <a href="https://x.com/evernote/status/2016198369727717768?ref_src=twsrc%5Etfw">January 27, 2026</a></blockquote>
</div></figure>



<p class="wp-block-paragraph"><strong>Storage und Preisgefüge</strong></p>



<p class="wp-block-paragraph">Die Basisversion von Evernote ist kostenlos, jedoch auf 60 MB neue Notizen pro Monat sowie die Synchronisierung zwischen zwei Geräten limitiert – und enthält keine erweiterten Funktionen.</p>



<p class="wp-block-paragraph"><a title="Personal- und Professional-Abos" href="https://evernote.com/intl/de/compare-plans" target="_blank" rel="noopener">Abonnement-Pläne</a> erschließen weitere Features, beispielsweise die Möglichkeit, Notizen in Präsentationen umzuwandeln, PDFs und Anhänge zu durchsuchen und die Integration mit weiteren Services wie Slack und Microsoft Teams.</p>



<ul class="wp-block-list">
<li><p>Das Starter-Abo richtet sich dabei an Einzel- beziehungsweise Privatpersonen und kostet 6,65 Euro pro Monat (oder 79,90 Euro pro Jahr).</p></li>



<li><p>Das Advanced-Abo ist auf Power User ausgelegt und kostet 16,66 Euro pro Monat (oder 199,99 Euro jährlich).</p></li>



<li><p>Enterprise-Pläne werden hingegen individuell auf das jeweilige Unternehmen zugeschnitten und bieten unter anderem gemeinsame Arbeitsbereiche, dedizierten Support und zentrale Management-Tools.</p></li>
</ul>



<h2 class="wp-block-heading">OneNote oder Evernote?</h2>



<p class="wp-block-paragraph">Wenn Sie in erster Linie ein Tool suchen, mit dem Sie auf einfache Weise Inhalte aus dem Internet erfassen, organisieren und finden können, sollten Sie zu <strong>Evernote</strong> greifen. Wollen Sie einfach nur Notizen erstellen und diese bestmöglich organisieren – oder nutzen bereits Microsoft 365 – dann dürften Sie mit <strong>OneNote</strong> glücklich werden. Oder Sie verwenden beide Apps einfach in Kombination. (fm)</p>



<p class="wp-block-paragraph"><strong>Dieser Beitrag ist <a href="https://www.computerworld.com/article/1508044/onenote-vs-evernote-note-taking-apps.html" target="_blank">im Original</a> bei unserer Schwesterpublikation Computerworld.com erschienen.</strong></p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Netflix Is Removing Classic Sitcom ‘The Game’ in August 2026]]></title>
<description><![CDATA[Fans of The Game have limited time left to watch the series on Netflix in the US. After spending nearly six years on the platform, the first three seasons of the popular comedy-drama are scheduled to leave the streaming service in August 2026 as Netflix's licensing agreement comes to an end.



W...]]></description>
<link>https://tsecurity.de/de/3684619/ios-mac-os/netflix-is-removing-classic-sitcom-the-game-in-august-2026/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3684619/ios-mac-os/netflix-is-removing-classic-sitcom-the-game-in-august-2026/</guid>
<pubDate>Tue, 21 Jul 2026 20:28:28 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Fans of The Game have limited time left to watch the series on Netflix in the US. After spending nearly six years on the platform, the first three seasons of the popular comedy-drama are scheduled to leave the streaming service in August 2026 as Netflix's licensing agreement comes to an end.



When is The Game Leaving Netflix?



Netflix is currently showing a "Last day to watch" notice for The Game. Subscribers can stream Seasons 1 through 3 until August 14, 2026. The series will officially leave the platform on August 15, 2026.



End of an Era for Netflix's Classic Black Sitcom Collection



The departure of The Game closes an important chapter for Netflix. In 2020, the platform added several beloved Black sitcoms through its Strong Black Lead initiative, including Moesha, Girlfriends, Sister, Sister, The Parkers, Half &amp; Half, and One on One.



Most of those series left Netflix in 2023 after their licensing agreements expired. The Game remained available much longer, making it the final survivor from that memorable collection before its scheduled exit.



Why Only Three Seasons Were Available



Many viewers have wondered why Netflix never added Seasons 4 through 9. The answer comes down to streaming rights.



The first three seasons originally aired on The CW between 2006 and 2009. After the network canceled the show, BET revived it in 2011 and produced six additional seasons.



Netflix's agreement only covered the original CW episodes. Since the later BET seasons were licensed separately, Netflix never had the rights to stream the complete series.



Where Can You Watch The Game Next?



At the moment, there is no confirmed streaming home for the series after it leaves Netflix. Since the show is owned by Paramount, many fans expect it to eventually return to Paramount+ or BET+, but no official announcement has been made. Until then, the series is mainly available through digital video-on-demand services.



If The Game has been on your watchlist, now is the time to finish it before the first three seasons disappear from Netflix in mid-August.]]></content:encoded>
</item>
<item>
<title><![CDATA[‘Spooky in Love’ Episode 2 Recap: Yeo-ri Reveals Her Secret]]></title>
<description><![CDATA[‘Spooky in Love’ Season 1, Episode 2 pushes Yeo-ri and Gang-uk into their first real investigation together, while a second murder mystery begins forming around a missing young woman.



The episode continues directly after Gang-uk nearly touches Yeo-ri’s bare hand. She pulls away before contact,...]]></description>
<link>https://tsecurity.de/de/3681766/ios-mac-os/spooky-in-love-episode-2-recap-yeo-ri-reveals-her-secret/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3681766/ios-mac-os/spooky-in-love-episode-2-recap-yeo-ri-reveals-her-secret/</guid>
<pubDate>Mon, 20 Jul 2026 19:04:34 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[‘Spooky in Love’ Season 1, Episode 2 pushes Yeo-ri and Gang-uk into their first real investigation together, while a second murder mystery begins forming around a missing young woman.



The episode continues directly after Gang-uk nearly touches Yeo-ri’s bare hand. She pulls away before contact, protecting him from the supernatural consequences that she believes follow anyone she touches.




Release date: July 19, 2026



Streaming platform: Netflix



Original network: tvN



Genre: Romantic comedy, horror and fantasy



Total episodes: 12



Release schedule: New episodes every Saturday and Sunday



Main cast: Park Eun-bin, Yang Se-jong and Ong Seong-wu




The Korean drama premiered on July 18, 2026, and follows hotel CEO Cheon Yeo-ri, who can see ghosts, and prosecutor Ma Gang-uk, who investigates difficult murder cases. The series is based on the 2011 Korean film Spellbound.



Spoilers Ahead for ‘Spooky in Love’ Episode 2







Gang-uk questions Yeo-ri about how she found the buried victim from their first meeting. After trying to avoid his questions, she finally admits that a ghost showed her where the body was hidden.



Gang-uk does not believe her explanation and leaves, although the strange events surrounding Yeo-ri continue to challenge his logical view of the world.



Meanwhile, Gang-uk continues investigating professional golfer Park Seung-jae. Seung-jae was previously accused of killing his girlfriend, Jang Eun-ju, but used his family’s political influence and lack of evidence to escape conviction.



Yeo-ri openly tells Seung-jae that she dislikes him. She also reveals that Eun-ju visited her before her death and said she was pregnant with his child. Seung-jae denies responsibility, but his aggressive reaction makes him appear even more suspicious.



Eun-ju’s Ghost Leads Them to the Truth



Eun-ju’s ghost later appears before Yeo-ri, confirming that she was murdered. Gang-uk studies the available evidence and develops a theory that Seung-jae disguised himself as a woman before hiding Eun-ju’s body inside a hotel water tank.



When Gang-uk reaches the tank, he finds Yeo-ri already there. Together, they discover Eun-ju’s remains, giving Gang-uk the evidence required to arrest Seung-jae.



The case establishes how useful Yeo-ri’s ability can become during murder investigations. Gang-uk provides legal knowledge and careful reasoning, while Yeo-ri receives information directly from victims who can no longer speak for themselves.



Min-hwan Enters Yeo-ri’s Life



Episode 2 also introduces Kang Min-hwan, Yeo-ri’s childhood friend and another hotel executive. He wants to develop a business relationship with her, although his reaction to Gang-uk suggests that his interest is also personal.



A booking mistake places Yeo-ri and Gang-uk in the same hotel room. They eventually wake up in the same bed and panic, creating one of the episode’s lighter moments. Min-hwan clearly dislikes seeing them together, setting up a possible romantic rivalry.



A New Missing-Person Case Begins



The closing section introduces an elderly woman searching for her missing granddaughter, Jung Hae-na, an aspiring fashion designer.



Hae-na appears connected to a famous designer holding an event at Min-hwan’s hotel. The circumstances surrounding her disappearance suggest that Yeo-ri and Gang-uk will soon face another case involving powerful people and hidden abuse. AsianWiki lists the Jung Hae-na storyline across Episodes 2 and 3, confirming that the mystery will continue in the next chapter.



‘Spooky in Love’ Episode 2 gives its central partnership a clearer purpose while developing the romance, the supernatural rules and the next investigation. What do you think happened to Hae-na, and will Min-hwan come between Yeo-ri and Gang-uk? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Security Is a Platform Property, Not a Pipeline Step]]></title>
<description><![CDATA[A few weeks ago, I disabled key authentication on an Azure storage account we used for Terraform state management. It was one of the key security recommendations in Microsoft Defender for Cloud. It made sense to use RBAC-only permissions, enforce…
Read more →
The post Security Is a Platform Prope...]]></description>
<link>https://tsecurity.de/de/3681670/it-security-nachrichten/security-is-a-platform-property-not-a-pipeline-step/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3681670/it-security-nachrichten/security-is-a-platform-property-not-a-pipeline-step/</guid>
<pubDate>Mon, 20 Jul 2026 18:59:48 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>A few weeks ago, I disabled key authentication on an Azure storage account we used for Terraform state management. It was one of the key security recommendations in Microsoft Defender for Cloud. It made sense to use RBAC-only permissions, enforce…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/security-is-a-platform-property-not-a-pipeline-step/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/security-is-a-platform-property-not-a-pipeline-step/">Security Is a Platform Property, Not a Pipeline Step</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CW@60: The real promise of technology is human]]></title>
<description><![CDATA[The next chapter of technology will not be judged merely by the speed of its systems, but by its capacity to build trust, bridge societal divides and unlock human potential, says Dell's Asia-Pacific chief]]></description>
<link>https://tsecurity.de/de/3680457/it-nachrichten/cw60-the-real-promise-of-technology-is-human/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3680457/it-nachrichten/cw60-the-real-promise-of-technology-is-human/</guid>
<pubDate>Mon, 20 Jul 2026 09:03:19 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The next chapter of technology will not be judged merely by the speed of its systems, but by its capacity to build trust, bridge societal divides and unlock human potential, says Dell's Asia-Pacific chief]]></content:encoded>
</item>
<item>
<title><![CDATA[As AI Transforms Silicon Valley, Some Tech Workers Face Evaporating Financial Security]]></title>
<description><![CDATA[The Washington Post describes a mid-tier executive at Meta as one of Silicon Valley's "winners" whose financial security suddenly "evaporated" as their workforce "pushed headlong into AI and heavy job cuts," creating a transformed job market. "Her ex-husband, a designer at Meta who was laid off i...]]></description>
<link>https://tsecurity.de/de/3680218/it-security-nachrichten/as-ai-transforms-silicon-valley-some-tech-workers-face-evaporating-financial-security/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3680218/it-security-nachrichten/as-ai-transforms-silicon-valley-some-tech-workers-face-evaporating-financial-security/</guid>
<pubDate>Mon, 20 Jul 2026 05:54:45 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The Washington Post describes a mid-tier executive at Meta as one of Silicon Valley's "winners" whose financial security suddenly "evaporated" as their workforce "pushed headlong into AI and heavy job cuts," creating a transformed job market. "Her ex-husband, a designer at Meta who was laid off in 2020, eventually gave up looking for jobs in his profession. He now lifts boxes at a warehouse."


Layoffs.fyi, which tracks announced job cuts, counts more than 800,000 tech workers laid off since 2022, including large staff reductions in recent months at Meta, Microsoft, Oracle and Amazon... "There's this whole tranche of people who've been quite used to being among the most upwardly mobile in society who are all of a sudden saying, 'Now I'm the guy on the streetâs'" said Oliver Raskin, who founded Silicon Valley market research consultancy Signalcraft Insights and has surveyed attitudes in the tech labor force... "The rise of AI, especially, is bound to change the workplace radically," [said Georgetown University historian Joseph McCartin]. "But the way it's going to happen is similar to how technology transformed the auto industry." Ruth Milkman, a labor sociologist at the City University of New York, said that technology workers are getting a dose of what workers in other industries have long complained about: jobs that feel unsteady or rob them of autonomy. "Low-wage workers are used to it," she said... 

Many layoffs at technology companies are probably a hangover effect from over-hiring in prior years, experts say. And they don't account for a spotty recent increase in hiring in the information industry, which includes employment of software developers and jobs in media and entertainment. Digging deeper, though, some economists say there are signs that Silicon Valley and other technology-reliant parts of the American economy have reached a turning point where they are growing without needing as many people. The notion was encapsulated in a recent talk that ricocheted through group chats across the tech industry: In it, a partner at the start-up incubator Y Combinator heralded a new generation of AI-first companies that will only need human labor for "novel situations," "ethical considerations" and "high-stakes moments." 

Gad Levanon, chief economist at the labor research nonprofit Burning Glass Institute, said that the number of hours worked in the information sector has dipped since 2022, while the sector's economic output has increased by about 8 percent a year — more than three times the overall growth rate of the U.S. economy. He says the data reveals a sea change in industries, including technology and finance, toward doing more work with the same or fewer people — one that is spreading to other professional classes. "That's the new reality for white-collar and tech-exposed work: output up, headcount flat or down," Levanon said... 

Raskin, who has worked in the tech world since the late '90s, said that even though the current moment feels unsettling to many, he's hopeful that it's an early chapter in an evolving story. "It's happened many times before," he said, "that something implodes and all these people lose jobs, but then that talent gets cycled into whatever the next thing is — into a new wave of prosperity." 

In the article tech entrepreneur Anil Dash quips that Silicon Valley techies are "are guinea pigs for what tech dudes want to do to everyone."<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=As+AI+Transforms+Silicon+Valley%2C+Some+Tech+Workers+Face+Evaporating+Financial+Security%3A+https%3A%2F%2Fit.slashdot.org%2Fstory%2F26%2F07%2F20%2F0212244%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fit.slashdot.org%2Fstory%2F26%2F07%2F20%2F0212244%2Fas-ai-transforms-silicon-valley-some-tech-workers-face-evaporating-financial-security%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://it.slashdot.org/story/26/07/20/0212244/as-ai-transforms-silicon-valley-some-tech-workers-face-evaporating-financial-security?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Zilog Z80 8-Bit CPU Turns 50, Open-source Replacement Heads To Drop-in DIP40 Silicon]]></title>
<description><![CDATA[An anonymous reader shared this report from Tom's Hardware:


The Zilog Z80 has just turned 50 years old. This iconic 8-bit processor first went on sale in July 1976 and stayed in production for 48 years until Zilog, now a Littelfuse subsidiary, stopped accepting orders in June 2024. However, the...]]></description>
<link>https://tsecurity.de/de/3680196/it-security-nachrichten/zilog-z80-8-bit-cpu-turns-50-open-source-replacement-heads-to-drop-in-dip40-silicon/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3680196/it-security-nachrichten/zilog-z80-8-bit-cpu-turns-50-open-source-replacement-heads-to-drop-in-dip40-silicon/</guid>
<pubDate>Mon, 20 Jul 2026 03:08:12 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[An anonymous reader shared this report from Tom's Hardware:


The Zilog Z80 has just turned 50 years old. This iconic 8-bit processor first went on sale in July 1976 and stayed in production for 48 years until Zilog, now a Littelfuse subsidiary, stopped accepting orders in June 2024. However, there's an open-source replacement closer than ever to shipping in the chip's original 40-pin DIP package thanks to community-funded fabrication... 

The chip powered the ZX Spectrum, TRS-80, MSX machines, Nintendo's Game Boy, Sega's Master System, the Pac-Man arcade cabinet, and Texas Instruments' graphing calculators, then shipped in industrial controllers for decades after home computing moved on to more powerful successors. Zilog's end-of-life notice, dated April 15, 2024, told customers its wafer foundry was discontinuing support for the Z84C00 family, and last-time-buy orders closed that June. 
However, Renaldas Zioma's FOSS Z80 project, launched shortly after the end-of-life notice, now has working silicon. The first version, fabbed on SkyWater's 130nm node through Tiny Tapeout 7 on a die of just 0.064mm(2), has been confirmed as functional via the project's GitHub repository. A QFN64 version with all 40 pins exposed followed on the Efabless CI2406 shuttle, two further runs then went through IHP's 130nm process, and the current run targets the classic DIP40 form factor using chip-on-board assembly on GlobalFoundries' 180nm GF180MCU node via Wafer.Space. The end goal here is to fab a drop-in replacement for machines like the ZX Spectrum and RC2014 kits... 

Zilog is trimming the Z80's official successor line as well. A product change notification from last October put the eZ80L92, along with several Z8F-series microcontrollers, on end-of-life, citing "little to no demand..." [T]he pipelined eZ80 architecture, introduced in 2001 and still inside TI's current TI-84 Plus CE calculators, otherwise remains in Zilog's catalog. 





In 1999 Slashdot was calling Zilog's updated eZ80 "one of the fastest 8-bit CPUs available today, executing code 4 times faster than a standard Z80 operating at the same clock speed." 

Slashdot headline from 2001: Zilog To File For Chapter 11.<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=Zilog+Z80+8-Bit+CPU+Turns+50%2C+Open-source+Replacement+Heads+To+Drop-in+DIP40+Silicon%3A+https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F26%2F07%2F20%2F0046231%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F26%2F07%2F20%2F0046231%2Fzilog-z80-8-bit-cpu-turns-50-open-source-replacement-heads-to-drop-in-dip40-silicon%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://hardware.slashdot.org/story/26/07/20/0046231/zilog-z80-8-bit-cpu-turns-50-open-source-replacement-heads-to-drop-in-dip40-silicon?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Netflix Finally Shares an Update on ‘XO, Kitty’ Season 4]]></title>
<description><![CDATA[Netflix has finally provided some clarity about the future of XO, Kitty, but fans will need to wait longer for a firm renewal announcement. The streaming service has not officially ordered Season 4 yet.



Netflix is considering two possible endings



According to a new report, Paramount Televis...]]></description>
<link>https://tsecurity.de/de/3679712/ios-mac-os/netflix-finally-shares-an-update-on-xo-kitty-season-4/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3679712/ios-mac-os/netflix-finally-shares-an-update-on-xo-kitty-season-4/</guid>
<pubDate>Sun, 19 Jul 2026 17:38:58 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Netflix has finally provided some clarity about the future of XO, Kitty, but fans will need to wait longer for a firm renewal announcement. The streaming service has not officially ordered Season 4 yet.



Netflix is considering two possible endings



According to a new report, Paramount Television Studios has extended Netflix’s option on XO, Kitty. The cast options have also been extended, keeping Anna Cathcart, Sang Heon Lee and other key actors available while discussions continue.



The update suggests that Netflix has not quietly cancelled the romantic comedy series. However, executives and the creative team are still deciding how Kitty Song Covey’s story should continue.



One option is a traditional fourth season featuring more episodes. The other is a feature-length movie that would conclude the remaining storylines. Creator Jenny Han previously ended the original To All the Boys I’ve Loved Before story through a trilogy of Netflix movies, making a final XO, Kitty film a realistic possibility.



Season 3 delivered strong viewing numbers



The delay is surprising because XO, Kitty Season 3 performed well after arriving on Netflix on April 2, 2026. It recorded 12.9 million views during its opening four days and reached the top of Netflix’s English-language television chart.



Season 3 later reached 29.3 million views through June 30 and ranked No. 16 among Netflix’s most-watched series during the reporting period.



The latest season also created a clear path for another chapter. Kitty and Min Ho repaired their relationship and travelled to the United States, where Min Ho planned to meet Kitty’s family.



For now, XO, Kitty Season 4 remains undecided. The extension involving the studio and cast keeps the series alive, but Netflix must still choose between another full season and a final movie.]]></content:encoded>
</item>
<item>
<title><![CDATA[Community Snapshot—June]]></title>
<description><![CDATA[Around the world, our community works to keep the Internet a force for good. We are highlighting just a few of their incredible initiatives from June.
The post Community Snapshot—June appeared first on Internet Society.]]></description>
<link>https://tsecurity.de/de/3676918/it-nachrichten/community-snapshot-june/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3676918/it-nachrichten/community-snapshot-june/</guid>
<pubDate>Fri, 17 Jul 2026 21:47:10 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><img width="250" height="115" src="https://www.internetsociety.org/wp-content/uploads/2026/07/Armenia-Chapter-Training-250x115.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="Adults sit in chars on either side of an isle and watch a training" decoding="async" srcset="https://www.internetsociety.org/wp-content/uploads/2026/07/Armenia-Chapter-Training-250x115.jpg 250w, https://www.internetsociety.org/wp-content/uploads/2026/07/Armenia-Chapter-Training-450x206.jpg 450w, https://www.internetsociety.org/wp-content/uploads/2026/07/Armenia-Chapter-Training-1024x469.jpg 1024w, https://www.internetsociety.org/wp-content/uploads/2026/07/Armenia-Chapter-Training-768x352.jpg 768w, https://www.internetsociety.org/wp-content/uploads/2026/07/Armenia-Chapter-Training.jpg 1200w" sizes="(max-width: 250px) 100vw, 250px"></p>
<p>Around the world, our community works to keep the Internet a force for good. We are highlighting just a few of their incredible initiatives from June.</p>
<p>The post <a href="https://www.internetsociety.org/blog/2026/07/community-snapshot-june-2/">Community Snapshot—June</a> appeared first on <a href="https://www.internetsociety.org/">Internet Society</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Silo Season 3 Episode 4 Release Date and What to Expect Next]]></title>
<description><![CDATA[Silo Season 3 Episode 4 will release on Friday, July 24, 2026, on Apple TV. The upcoming chapter will continue Juliette Nichols’ dangerous search for Lukas Kyle while Camille Sims faces growing pressure from the Algorithm.



Apple confirmed that Silo Season 3 contains 10 episodes, with one new e...]]></description>
<link>https://tsecurity.de/de/3676830/ios-mac-os/silo-season-3-episode-4-release-date-and-what-to-expect-next/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3676830/ios-mac-os/silo-season-3-episode-4-release-date-and-what-to-expect-next/</guid>
<pubDate>Fri, 17 Jul 2026 20:40:07 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Silo Season 3 Episode 4 will release on Friday, July 24, 2026, on Apple TV. The upcoming chapter will continue Juliette Nichols’ dangerous search for Lukas Kyle while Camille Sims faces growing pressure from the Algorithm.



Apple confirmed that Silo Season 3 contains 10 episodes, with one new episode arriving every Friday. The season began on July 3 and will conclude on September 4, 2026.



Silo Season 3 Episode 4 release details




Release date: Friday, July 24, 2026



Streaming platform: Apple TV



Season: 3



Episode: 4



Genre: Science fiction, mystery and dystopian drama



Total Season 3 episodes: 10



Season finale date: September 4, 2026



Main star: Rebecca Ferguson as Juliette Nichols




Apple has not publicly revealed the official Episode 4 title or synopsis at the time of writing. However, the events of Episode 3 establish several major storylines that the next chapter can continue.



What happened in Silo Season 3 Episode 3?



Spoilers ahead for Silo Season 3 Episode 3.



Episode 3 places Camille Sims in control of IT after the Algorithm decides that her ability to manipulate people makes her suitable for the role. She learns that the system wants the memories of all 9,913 Silo residents erased unless she can stop the threat developing inside the structure.



Meanwhile, Juliette enters the mines with Knox as she continues looking for Lukas Kyle. Camille releases poison gas in an effort to force Lukas out, leaving Juliette close to death. Lukas eventually rescues her before a group of Outsiders takes him away.



The Algorithm later sees Juliette’s possible death as a way to calm the population. Camille reluctantly accepts an order to have her killed, placing Juliette in immediate danger heading into Episode 4.



What to expect from Silo Season 3 Episode 4



Episode 4 will likely focus on Camille’s assassination order and whether she follows the Algorithm’s instructions. Although Camille has repeatedly protected the Silo’s system, her decisions in Episode 3 show that she still questions its extreme methods.



Juliette may also begin investigating Lukas’ disappearance after recovering from the gas attack. The Outsiders who rescued Lukas appear to know more about the Silo, its surveillance system and the safeguard protocol. Finding them could give Juliette the information she needs to challenge the Algorithm.



Sheriff Paul Billings is also investigating a murder connected to the mines. His discovery that Kat Billings is an Outsider adds another personal conflict, especially as tensions between Silo residents and the hidden group continue to rise.



The “Before Times” storyline should move forward as Congressman Daniel Keene and journalist Helen Drew investigate the mysterious recording and the conspiracy surrounding the pilots. Season 3 uses two timelines to explain how the underground silos were created more than 350 years earlier.



How previous seasons led to Season 3



The first two seasons followed Juliette as she uncovered the truth about Silo 18 and learned that other silos existed nearby. Season 2 ended with Juliette returning home and becoming trapped with Bernard Holland as cleansing fire filled the airlock.



Season 3 begins with Juliette alive but suffering from memory loss. She now serves as mayor while Robert and Camille Sims use her condition to control the Silo. At the same time, the historical storyline explores the decisions that created the underground system and the catastrophe that forced humanity below the surface.



Silo Season 3 Episode 4 arrives on Apple TV on July 24. Will Camille carry out the Algorithm’s order, or will she help Juliette uncover the truth? Let us know what you think will happen in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Agent Kim Reactivated Episode 7 Ending Explained: Kim Loses Control Again]]></title>
<description><![CDATA[Agent Kim Reactivated Episode 7 turns Kim Do-hyeon’s long-awaited reunion with Min-ji into another dangerous fight for survival. Kim finally reaches his daughter, but getting her home safely proves far more difficult than finding her.



Spoiler warning: This article contains major spoilers for A...]]></description>
<link>https://tsecurity.de/de/3676792/ios-mac-os/agent-kim-reactivated-episode-7-ending-explained-kim-loses-control-again/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3676792/ios-mac-os/agent-kim-reactivated-episode-7-ending-explained-kim-loses-control-again/</guid>
<pubDate>Fri, 17 Jul 2026 20:10:22 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Agent Kim Reactivated Episode 7 turns Kim Do-hyeon’s long-awaited reunion with Min-ji into another dangerous fight for survival. Kim finally reaches his daughter, but getting her home safely proves far more difficult than finding her.



Spoiler warning: This article contains major spoilers for Agent Kim Reactivated Episode 7 and earlier episodes.




Release date: July 17, 2026



Streaming platform: Netflix



Korean network: SBS



Airtime: Fridays and Saturdays at 9:50 p.m. KST



Genre: Action, crime, thriller and comedy




The Korean action drama premiered on June 26 and will continue until July 25. Episode 7 brings the story into its final stretch, with only three episodes remaining after this chapter.



Kim’s rescue mission falls apart



Episode 6 ended with Kim finding Min-ji after tracking down the people involved in her disappearance. His quiet promise that they would finally go home gave the pair a brief emotional reunion, but the danger surrounding them had not disappeared.



In Episode 7, Kim attempts to move Min-ji away from the area while Seong Han-su and Park Jin-cheol help protect them. Their escape quickly comes under attack, forcing the three fathers to fight through another group of armed men.



Min-ji also shows that she is more resourceful than her captors expect. Instead of waiting helplessly for someone to save her, she watches her surroundings, looks for an opening and tries to escape. Her actions reflect the courage and survival instincts she inherited from her father.



However, Kim’s rescue mission takes a darker turn when the attack separates him from Min-ji again. The brief reunion leaves him even more determined to destroy everyone involved in placing her life at risk.



Kim confronts Joo Kang-chan



Joo Kang-chan remains at the centre of the conflict. His influence helped turn Min-ji’s school dispute into a violent kidnapping case, while his connections allowed those responsible to avoid immediate consequences.



Kim now understands that simply rescuing Min-ji will not end the threat. As long as Kang-chan and his organisation remain active, his daughter will never be safe.



The confrontation pushes Kim closer to the ruthless operative once known as Code 66. He stops reacting like an ordinary father trapped in a dangerous situation and begins approaching the conflict as a former special agent completing a mission.



Kim’s decision to eliminate the threat also raises a difficult question. Even if he saves Min-ji, she has now seen the violent identity he spent years hiding from her.



Kim’s past becomes the next major threat



Earlier episodes revealed that Kim left his dangerous career behind to raise Min-ji and live as an ordinary bank employee. Her disappearance forced him to use the combat skills, contacts and instincts that he had tried to bury.



Episode 7 makes it clear that his past will continue following him. The next chapter appears ready to explore Code 66 more deeply as another figure from Kim’s former life enters the conflict. The Episode 8 preview directly calls him by his old codename, suggesting that rescuing Min-ji has opened the door to an even larger operation.



With the final episodes approaching, Kim must protect his daughter while facing the consequences of becoming Code 66 again. What do you think will happen when Min-ji learns the full truth about her father? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[What is the release date for House of the Dragon season 3 episode 5 on HBO Max?]]></title>
<description><![CDATA[House of the Dragon season 3 enters its back half with this week's chapter — here's when you can watch it.]]></description>
<link>https://tsecurity.de/de/3676145/it-nachrichten/what-is-the-release-date-for-house-of-the-dragon-season-3-episode-5-on-hbo-max/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3676145/it-nachrichten/what-is-the-release-date-for-house-of-the-dragon-season-3-episode-5-on-hbo-max/</guid>
<pubDate>Fri, 17 Jul 2026 15:18:34 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[House of the Dragon season 3 enters its back half with this week's chapter — here's when you can watch it.]]></content:encoded>
</item>
<item>
<title><![CDATA[Silo Season 3 Episode 4 Release Date, Time, and What to Expect]]></title>
<description><![CDATA[Silo Season 3 Episode 4 will arrive on Apple TV on Friday, July 24, 2026. The next chapter will continue Juliette Nichols’ fight to recover her memories while the Before Times storyline reveals more about the events that led to the creation of the silos.



Season 3 began on July 3 and follows a ...]]></description>
<link>https://tsecurity.de/de/3675994/ios-mac-os/silo-season-3-episode-4-release-date-time-and-what-to-expect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3675994/ios-mac-os/silo-season-3-episode-4-release-date-time-and-what-to-expect/</guid>
<pubDate>Fri, 17 Jul 2026 14:10:37 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Silo Season 3 Episode 4 will arrive on Apple TV on Friday, July 24, 2026. The next chapter will continue Juliette Nichols’ fight to recover her memories while the Before Times storyline reveals more about the events that led to the creation of the silos.



Season 3 began on July 3 and follows a weekly Friday release schedule. The ten-episode season will run through September 4, 2026.



Silo Season 3 Episode 4 release details




Release date: Friday, July 24, 2026



Release time: 12 a.m. PT and 3 a.m. ET



India release time: Around 12:30 p.m. IST



Streaming platform: Apple TV



Genre: Science fiction, dystopian drama and mystery



Expected duration: Around 45 to 60 minutes



Season episode count: 10 episodes



Season finale: September 4, 2026



Main cast: Rebecca Ferguson, Common, Harriet Walter, Chinaza Uche, Avi Nash, Alexandria Riley, Shane McRae and Remmie Milner




Ashley Zukerman, Jessica Henwick, Laura Innes, Jessica Brown Findlay, Morven Christie, Reed Birney, Matt Craven and Colin Hanks are among the major additions to the Season 3 cast. Steve Zahn also returns after playing Solo in Season 2.



What happened before Episode 4?



Spoilers ahead for Silo Season 3 Episodes 1 to 3.



Season 3 follows two connected timelines. Inside Silo 18, Juliette has returned after surviving her journey outside, but her damaged memories have left her vulnerable. Camille Sims and Nurse Amy have been using memory-altering drugs as part of a wider attempt to control her and weaken any resistance inside the silo.



Juliette gradually learns that other residents have also lost parts of their memories. Patrick Kennedy tells her about the drugs being used to make people forget, while Juliette continues searching for Lukas Kyle and the truth hidden from her.



Meanwhile, the Before Times storyline follows journalist Helen Drew and pilot Charlotte Keene. Helen investigates secret memory-erasure experiments connected to Dr. Crnkovich, while Charlotte begins recovering memories of a suspicious military operation. Their story appears closely tied to the political crisis and possible attack that eventually forced humanity underground.



What to expect from Silo Season 3 Episode 4



Episode 4 will likely push Juliette closer to discovering who altered her memories and why the Algorithm considers her dangerous. Her growing resistance to the medication also puts Camille, Sims and Nurse Amy under pressure, since they can no longer assume that Juliette will remain confused or obedient.



Patrick’s information about the forgetfulness drugs may help Juliette identify more people who were secretly controlled. Lukas could also return to the main storyline, especially because his knowledge of the Legacy and Salvador Quinn’s message makes him important to understanding the silos.



The Before Times plot should continue exploring Helen’s investigation and Charlotte’s recovered memories. Charlotte’s mission may reveal who planned the disaster, what the strange substance was and whether powerful officials helped create the conditions that led to the silo project.



As both timelines develop, Episode 4 should make the connection between Juliette’s present-day struggle and the original architects of the silo system much clearer.



Silo Season 3 Episode 4 streams on Apple TV on July 24. What do you think Juliette will remember next, and how deeply is Camille involved in the plan to control Silo 18? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Agent Kim Reactivated Episode 7 Release Date and What to Expect]]></title>
<description><![CDATA[Agent Kim Reactivated Episode 7 will arrive on Friday, July 17, 2026. The next chapter continues Kim Do-hyeon’s increasingly dangerous mission after his daughter Min-ji becomes a target once again.




Release date: July 17, 2026



Broadcast time: 9:50 p.m. KST



Streaming platform: Netflix



...]]></description>
<link>https://tsecurity.de/de/3675991/ios-mac-os/agent-kim-reactivated-episode-7-release-date-and-what-to-expect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3675991/ios-mac-os/agent-kim-reactivated-episode-7-release-date-and-what-to-expect/</guid>
<pubDate>Fri, 17 Jul 2026 14:10:33 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Agent Kim Reactivated Episode 7 will arrive on Friday, July 17, 2026. The next chapter continues Kim Do-hyeon’s increasingly dangerous mission after his daughter Min-ji becomes a target once again.




Release date: July 17, 2026



Broadcast time: 9:50 p.m. KST



Streaming platform: Netflix



Genre: Action, crime, comedy, mystery and thriller



Total episodes: 10



Release schedule: New episodes every Friday and Saturday



Main cast: So Ji-sub, Choi Dae-hoon, Yoon Kyung-ho, Joo Sang-wook, Son Na-eun and Seo Su-min




Episode 7 will be followed by Episode 8 on Saturday, July 18. The final two episodes will arrive on July 24 and July 25, bringing the limited series to an end.



What will happen in Agent Kim Reactivated Episode 7?



Spoilers ahead for Episodes 5 and 6.



The Episode 7 preview shows Kim transporting Min-ji after finally reaching her. However, their vehicle comes under attack, and Min-ji is kidnapped again before Kim can take her somewhere safe. The new abduction appears to involve Joo Kang-chan, who is now openly challenging Kim.



Kim’s search will also bring him into another confrontation with Gold Tooth and the North Korean operative connected to Agent 66. Someone from Kim’s former agency warns him that he may never see Min-ji again, suggesting that the kidnapping forms part of a wider plan linked to his past.



Kim’s past continues to shape the story



Episode 6 revealed more about Agent 66 and his final mission with Kim. Agent 66 suffered devastating injuries during an explosion and convinced Kim to survive, complete the mission and build a normal family life. That promise explains why Kim has protected his identity for so many years and why Min-ji remains his greatest weakness.



Episode 7 now places that promise under greater pressure. Kim must face enemies who understand his history while protecting the person who gave his new life meaning. Park Jin-cheol and Seong Han-su also appear to be in danger, which could force the three former operatives to fight together again.



The series is based on the Manager Kim webtoon and follows a quiet office worker who returns to his black-ops life after his teenage daughter disappears.



What do you expect from Agent Kim Reactivated Episode 7? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[The AI compute gap: Enterprises are buying infrastructure faster than they can measure what it costs]]></title>
<description><![CDATA[Across 107 enterprises, AI infrastructure spending is accelerating well ahead of the ability to see or steer its economics. Most organizations run their AI on a familiar base of hyperscalers and model-provider APIs, yet the next dollar is aimed at specialized compute almost none of them use today...]]></description>
<link>https://tsecurity.de/de/3674337/it-nachrichten/the-ai-compute-gap-enterprises-are-buying-infrastructure-faster-than-they-can-measure-what-it-costs/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3674337/it-nachrichten/the-ai-compute-gap-enterprises-are-buying-infrastructure-faster-than-they-can-measure-what-it-costs/</guid>
<pubDate>Thu, 16 Jul 2026 20:02:38 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Across 107 enterprises, AI infrastructure spending is accelerating well ahead of the ability to see or steer its economics. Most organizations run their AI on a familiar base of hyperscalers and model-provider APIs, yet the next dollar is aimed at specialized compute almost none of them use today; a majority intend to switch or add providers within the year, many within a quarter. Buying decisions turn on integration and total cost of ownership rather than headline token price — which is fortunate, because most enterprises cannot yet see their unit economics clearly: GPUs sit at half utilization or less, and fewer than half rigorously track what their compute actually costs. The result is a compute gap — heavy, fast-moving investment running ahead of the visibility needed to control it.</p><p>This wave of VentureBeat Pulse Research examines enterprise AI infrastructure and compute: where organizations are in their deployment journey, what they run AI on today, how satisfied they are, what would make them switch, where they plan to evaluate their investments, and — most revealingly — how well they can measure and control the economics of the compute underneath it all.</p><p>The central finding is a compute gap — the distance between how aggressively enterprises are investing in AI infrastructure and how little of its economics they can see. Only about one in five (21%) run AI in production at scale, yet spending intentions are outrunning that maturity: the single largest planned area enterprises plan to evaluate over the next year is AI-specialized clouds (45%), a layer almost none of these enterprises use today. Meanwhile the compute already in place runs cold — 83% report GPU utilization of 50% or less — and fewer than half (44%) can rigorously track what their AI compute costs. Enterprises are buying more infrastructure faster than they can account for what they already own.</p><p>Enterprises are not settled on their infrastructure vendors, either: A clear majority (64%) plan to switch or add an infrastructure provider within twelve months, and 38% within the next quarter — unusually high churn intent for a category this foundational. When they choose, they choose on integration with the existing stack (41%) and total cost of ownership (35%), not on headline price: cost per million tokens is the deciding factor for just 8%. And the frontier constraint that will shape the next round of decisions — the shift from GPU compute to memory bandwidth as inference scales — is barely on the radar, with roughly one in five enterprises either unaware of it or yet to address it.</p><h2>Methodology</h2><p>VentureBeat fielded this survey as part of its ongoing Pulse Research series, this survey focused on enterprise AI infrastructure, compute, and inference economics. Responses are filtered to organizations with more than 100 employees (n=107; the survey’s smallest size band, 1–100 employees, is excluded), drawn from a single Q2 2026 (June) wave. Because this is one wave rather than a pooled multi-month sample, the report reads cross-sectionally and does not infer month-over-month trends. Several questions were multiple-select, so those shares can sum to more than 100%.</p><p>By organization size the sample concentrates in the mid-market: 101–250 employees (36%) and 251–1,000 (27%) lead, with 1,001–5,000 (22%), 5,001–10,000 (8%), and 10,001+ (7%) above them. By role it spans managers (38%), individual contributors (28%), VPs and directors (19%), and the C-suite (13%); on purchasing authority it is buyer-credible, with 45% final decision-makers and another 30% recommenders or influencers for AI solutions. Technology/Software is the largest industry at 26%, followed by Healthcare/Life Sciences (15%), Financial Services (13%), and Retail/E-commerce (12%).</p><p>At 107 respondents the sample is large enough to read directionally but should be treated as a directional signal rather than a precise measurement; it is self-selected and is not a probability sample. It also skews toward the mid-market and toward earlier-stage adopters, so it is best read as the view from organizations actively building out AI infrastructure rather than from the largest hyperscale operators.</p><h2>Finding 1: Ambition outpaces production</h2><p><b>Only one in five run AI in production at scale</b></p><p>We asked where organizations sit in their AI deployment journey. Most are still building toward production rather than operating at scale.</p><div></div><table><tbody><tr><td><p><b>38%</b></p></td><td><p><b>are experimenting — running proofs of concept, not yet in production</b></p></td></tr><tr><td><p><b>37%</b></p></td><td><p><b>have some workloads in production, but not across the organization</b></p></td></tr><tr><td><p><b>21%</b></p></td><td><p><b>run AI in production at scale — the mature minority</b></p></td></tr><tr><td><p><b>4%</b></p></td><td><p><b>are not yet running AI workloads at all</b></p></td></tr></tbody></table><p>The maturity curve is front-loaded. Three-quarters of enterprises (76%) are either experimenting or running only some workloads in production, and just 21% describe AI in production at scale. This matters for everything that follows: the infrastructure decisions in this report are being made largely by organizations still early in deployment, whose compute footprint — and whose costs — are about to grow. The evaluation and switching intentions in Findings 3 and 4 are the leading edge of that build-out, not the settled preferences of operators who have already found what works.</p><h2>Finding 2: Enterprises run on hyperscalers and model APIs</h2><p><b>The specialized GPU clouds barely register — today</b></p><p>We asked which providers and platforms enterprises currently use to run their AI. The answer is a familiar one: the incumbents.</p><div></div><table><tbody><tr><td><p><b>48%</b></p></td><td><p><b>use Google Cloud — the most-used platform overall (Microsoft Azure 29%, AWS 22%, Oracle Cloud 22%)</b></p></td></tr><tr><td><p><b>41%</b></p></td><td><p><b>use Google’s Gemini models, with OpenAI close behind at 40% and Anthropic at 12%</b></p></td></tr><tr><td><p><b>6%</b></p></td><td><p><b>run their own on-prem or co-located GPU clusters; 4% a custom open-source self-managed stack</b></p></td></tr><tr><td><p><b>&lt;2%</b></p></td><td><p><b>each use the specialized AI clouds — CoreWeave, Lambda, Crusoe, Nebius, Together, Fireworks and peers</b></p></td></tr></tbody></table><p>The current stack is hyperscaler-and-API. Google Cloud leads at 48%, and the general-purpose clouds (Google, Microsoft, AWS, Oracle) together with the major model APIs (Gemini, OpenAI, Anthropic) account for essentially all current deployment. The specialized “neocloud” GPU providers that dominate AI-infrastructure headlines — CoreWeave, Lambda, Crusoe, Nebius and peers — register at or near zero among these enterprises today. Only 6% run their own on-prem GPU clusters and 4% a custom open-source stack. Enterprises are, for now, running AI on the providers they already buy from — which makes the evaluation intentions in Finding 3 all the more striking.</p><p><i>(A note on reading these shares. As described in the methodology section, this sample is self-selected and skews mid-market, and this question counted every provider a respondent uses — an average of 2.1 selections each — so the figures measure presence in the stack rather than spending or primary status. A sample built this way will show a different provider mix than a spend-weighted census of the broader market; Google's strength here, for example, is consistent with its long-standing position among smaller enterprises building on AI. Read these shares as a portrait of what this AI-active cohort runs today, and treat gaps between these figures and industry-wide market share estimates as a property of the sample rather than a contradiction of either.)</i></p><h2>Finding 3: The next dollar goes to infrastructure they don’t yet run</h2><p><b>AI-specialized clouds top the evaluations list</b></p><p>We asked where enterprises planned to evaluate AI infrastructure over the next 12 months. Their answers point away from the stack they run today.</p><div></div><table><tbody><tr><td><p><b>45%</b></p></td><td><p><b>AI-specialized clouds (CoreWeave, Lambda, Crusoe, Nebius) — the top planned evaluation area</b></p></td></tr><tr><td><p><b>32%</b></p></td><td><p><b>non-NVIDIA accelerators (AWS Trainium, Google TPU, AMD Instinct, Intel Gaudi, in-house ASICs)</b></p></td></tr><tr><td><p><b>28%</b></p></td><td><p><b>Nvidia Blackwell (GB300) / next-generation GPUs</b></p></td></tr><tr><td><p><b>16%</b></p></td><td><p><b>decentralized or distributed compute networks</b></p></td></tr><tr><td><p><b>11%</b></p></td><td><p><b>sovereign or region-specific compute; 9% say none of the above</b></p></td></tr></tbody></table><p>Here is the report’s sharpest tension. The single most-cited planned evaluation area — AI-specialized clouds, at 45% — is the very category almost none of these enterprises use today (Finding 2). Nearly a third (32%) intend to evaluate non-Nvidia accelerators, and 28% in next-generation Nvidia silicon; even decentralized compute networks (16%) and sovereign compute (11%) draw meaningful interest. Read against current usage, this is not incremental — it is the leading edge of a re-platforming. The direction-of-travel question tells the same story: every infrastructure approach is net-expanding, but specialized AI clouds carry the highest net momentum (+24), edging out even the hyperscalers (+22). Enterprises are preparing to move a meaningful share of AI compute off the general-purpose cloud.</p><p>This continues a trend we saw in our April-May survey wave. Back then, usage of the AI-specialized clouds was equally marginal — CoreWeave at 3%, Lambda at 4%, Crusoe at 2% of enterprises. When we asked enterprises what change they planned in their AI infrastructure strategy over the next twelve months, the most-cited answer was moving workloads to specialized AI clouds, at 33%. Asked in April-May which emerging compute option they were most likely to evaluate AI-specialized clouds again drew the most responses. Two waves, two differently worded questions, one consistent picture: the type of cloud enterprises are most eager to assess is the type they have barely begun to use.</p><h2>Finding 4: A switching wave is building</h2><p><b>Six in 10 plan to change providers within a year — many within a quarter</b></p><p>We asked whether and when enterprises plan to switch or add an infrastructure provider. Very few intend to stand still.</p><div></div><table><tbody><tr><td><p><b>38%</b></p></td><td><p><b>plan to change within the next 0–3 months — tied for the most common answer</b></p></td></tr><tr><td><p><b>36%</b></p></td><td><p><b>have no plans to change</b></p></td></tr><tr><td><p><b>22%</b></p></td><td><p><b>plan to change within 3–6 months</b></p></td></tr><tr><td><p><b>7%</b></p></td><td><p><b>plan to change within 6–12 months</b></p></td></tr></tbody></table><p>For a category as foundational as compute, this is a remarkable amount of intended movement. Only 36% have no plans to change, meaning a clear majority (64%) intend to switch or add a provider within twelve months — and 38% within the next quarter alone. Where that interest points is telling: the providers drawing the most switching consideration are again the incumbents — Microsoft Azure and Google Cloud (33% each), OpenAI (30%), and Gemini (22%) — which suggests much of the near-term movement is reshuffling among the majors and consolidating spend rather than defecting to new entrants. The neocloud interest in Finding 3 is a 12-month evaluation thesis; the switching in the next quarter is mostly incumbents trading share.</p><p>(<i>Method note: Respondents who selected both "no plans to change" and a specific switching window are counted as switchers, on the logic that naming a timeframe is the more specific answer; three respondents were reclassified under this rule.</i>)</p><h2>Finding 5: Nobody buys on token price</h2><p><b>Integration and total cost of ownership decide — not sticker price</b></p><p>We asked what matters most when enterprises select an AI infrastructure provider. Headline price finished last.</p><div></div><table><tbody><tr><td><p><b>41%</b></p></td><td><p><b>integration with the existing cloud and data stack — the top factor</b></p></td></tr><tr><td><p><b>35%</b></p></td><td><p><b>total cost of ownership (TCO)</b></p></td></tr><tr><td><p><b>24%</b></p></td><td><p><b>performance — latency and throughput</b></p></td></tr><tr><td><p><b>19%</b></p></td><td><p><b>each cite security/compliance, autoscaling for spiky workloads, and GPU access/availability</b></p></td></tr><tr><td><p><b>8%</b></p></td><td><p><b>cost per 1M tokens — the least-cited factor</b></p></td></tr></tbody></table><p>Enterprises do not buy AI infrastructure on pricing, which is the place vendors compete on hardest. Integration with the existing stack (41%) and total cost of ownership (35%) dominate, while the headline metric — cost per million tokens — is the deciding factor for just 8%, dead last. The pattern is coherent: buyers are optimizing for how a provider fits and what it truly costs to operate, not for the advertised unit rate. It also foreshadows Finding 7 — enterprises say TCO matters most, yet most cannot yet measure it rigorously. The stated priority and the measured capability are out of step.</p><h2>Finding 6: Expensive GPUs, idle most of the time</h2><p><b>83% report GPU utilization of 50% or less</b></p><p>We asked what share of their GPU capacity enterprises actually utilize. The answer is a well-known but rarely quantified inefficiency.</p><div></div><table><tbody><tr><td><p><b>37%</b></p></td><td><p><b>run at 26–50% utilization</b></p></td></tr><tr><td><p><b>34%</b></p></td><td><p><b>run at 10–25% utilization</b></p></td></tr><tr><td><p><b>15%</b></p></td><td><p><b>run under 10% utilization</b></p></td></tr><tr><td><p><b>12%</b></p></td><td><p><b>run over 50% — the efficient minority</b></p></td></tr><tr><td><p><b>8%</b></p></td><td><p><b>don’t measure utilization at all; a further 7% consume via API and run no GPUs of their own</b></p></td></tr></tbody></table><p><i>Disclosure: Band percentages count every selection against all 107 qualified respondents; 14 respondents selected more than one band, so bands overlap. At the respondent level, 83 of the 100 GPU-operating enterprises reported utilization at or below 50%</i></p><p>The compute already in place runs cold. Adding the bands at or below half capacity, 83% of enterprises that operate GPUs report utilization of 50% or less, and nearly half (49%) run at 25% or below. Only 12% clear the 50% mark, and a further 8% do not measure utilization at all. Idle accelerators are expensive accelerators, and this is the clearest single measure of the compute gap: enterprises are planning to buy more GPUs and specialized compute (Finding 3) while the capacity they already own sits substantially unused. The efficiency headroom in the current fleet is large — and largely unmeasured.</p><h2>Finding 7: Spending fast, measuring slowly</h2><p><b>Fewer than half rigorously track what their compute costs</b></p><p>We asked whether enterprises can quantify the cost and return of their AI infrastructure spend, and how satisfied they are with what they run. Confidence in the ledger lags the spending.</p><div></div><table><tbody><tr><td><p><b>44%</b></p></td><td><p><b>track compute cost and ROI rigorously</b></p></td></tr><tr><td><p><b>39%</b></p></td><td><p><b>track it only partially</b></p></td></tr><tr><td><p><b>20%</b></p></td><td><p><b>can’t quantify it yet</b></p></td></tr><tr><td><p><b>6%</b></p></td><td><p><b>say it isn’t a priority</b></p></td></tr></tbody></table><p>Measurement trails money. Fewer than half of enterprises (44%) rigorously track the cost and return of their AI compute; the majority track only partially (39%), cannot quantify it yet (20%), or have not prioritized it (6%). That gap is consequential given Finding 5, where total cost of ownership was the second-ranked buying criterion — enterprises are choosing providers on an economic basis they mostly cannot yet measure. Satisfaction with current infrastructure is moderately positive but not enthusiastic: on a five-point scale, overall satisfaction averages 4.0, with ease of implementation (3.8) and value for money (3.9) trailing slightly — the softness landing, tellingly, on cost. Enterprises are spending quickly and accounting slowly.</p><h2><b>Finding 8: The next bottleneck few are watching</b></h2><p><b>As inference shifts from compute to memory, the field scatters</b></p><p>Finally, we asked how enterprises would address the emerging constraint in large-scale inference — the shift from GPU compute to memory, specifically KV-cache capacity. The responses reveal a frontier that is not yet a priority.</p><div></div><table><tbody><tr><td><p><b>31%</b></p></td><td><p><b>would rely on Dell (PowerScale / Project Lightning) — the leading single answer</b></p></td></tr><tr><td><p><b>16%</b></p></td><td><p><b>would rely on Nvidia (Dynamo / ICMSP)</b></p></td></tr><tr><td><p><b>18%</b></p></td><td><p><b>are not aware of this as a constraint (9%) or haven’t addressed inference-memory limits yet (8%)</b></p></td></tr><tr><td><p><b>10%</b></p></td><td><p><b>Hammerspace (Tier Zero); 9% DDN (Infinia); the rest split across open-source KV-cache tooling, model-level efficiency, VAST Data, and WEKA</b></p></td></tr></tbody></table><p>The memory frontier is real but barely governed. Asked which approach they would rely on as the binding constraint in inference shifts from compute to memory bandwidth, enterprises scatter: Dell leads at 31%, Nvidia follows at 16%, and the rest fragments across storage vendors, open-source tooling, and model-level efficiency techniques. Most telling is that roughly one in five (18%) either do not recognize the constraint or have not begun to address it. For a shift that will reshape inference cost and architecture, this is an early and unsettled market — and, consistent with the measurement gap in Finding 7, one where many enterprises simply do not yet have a view. It is the next chapter of the compute gap, arriving before most have closed the current one.</p><h1><b>The bottom line: A compute gap that faster spending will widen, not close</b></h1><p>Organizations with more than 100 employees are investing in AI infrastructure faster than they can measure it. Most are still early in deployment, yet their spending intentions point past their current stack — toward specialized clouds and alternative accelerators almost none of them run today — and a clear majority intend to change providers within the year. They buy on integration and total cost of ownership rather than headline price, which is rational; the difficulty is that most cannot yet see those economics clearly.</p><p>The visibility gap is concrete. The GPUs enterprises already own run at half utilization or less for the overwhelming majority, and fewer than half can rigorously track what their compute costs or returns. Satisfaction is decent but unenthusiastic, softest on value for money — the dimension hardest to judge without measurement. And the next constraint, the shift from compute to memory in large-scale inference, is arriving while most enterprises are still unaware of it. At 107 respondents in a single Q2 wave this is a directional read, skewed toward the mid-market and earlier-stage adopters — but the direction is consistent: the appetite to spend is running well ahead of the instrumentation to spend well. The compute gap is not a capacity problem that more hardware will solve on its own; it is, first, a problem of seeing what the hardware already costs. The open question for later waves is whether enterprises build that visibility before the re-platforming arrives — or buy the next layer of infrastructure as blind to its economics as the last.</p><hr><p><i>Based on survey responses from 107 qualified enterprise respondents (100+ employees), drawn from a single Q2 2026 (June) wave. Because this is one wave rather than a pooled multi-month sample, the results read cross-sectionally rather than as a month-over-month trend, and at 107 respondents this is a directional signal rather than a precise measurement — the sample is self-selected, skews mid-market, and leans toward earlier-stage adopters rather than the largest hyperscale operators. Respondents include managers, individual contributors, VPs/directors, and the C-suite, with buyer-credible purchasing authority, across Technology/Software, Healthcare/Life Sciences, Financial Services, Retail/E-commerce, and other industries.</i></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[How Silo Season 3 Is Setting Up the Fourth and Final Season]]></title>
<description><![CDATA[Silo Season 3 is already answering some of the show's biggest mysteries, but it is also laying the foundation for the final chapter. With Apple TV confirming that Season 4 will end the adaptation of Hugh Howey's trilogy, the latest episodes are expanding the story beyond Juliette's survival and r...]]></description>
<link>https://tsecurity.de/de/3670831/ios-mac-os/how-silo-season-3-is-setting-up-the-fourth-and-final-season/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3670831/ios-mac-os/how-silo-season-3-is-setting-up-the-fourth-and-final-season/</guid>
<pubDate>Wed, 15 Jul 2026 15:40:29 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Silo Season 3 is already answering some of the show's biggest mysteries, but it is also laying the foundation for the final chapter. With Apple TV confirming that Season 4 will end the adaptation of Hugh Howey's trilogy, the latest episodes are expanding the story beyond Juliette's survival and revealing how the silos came to exist in the first place.



Silo Season 3 at a glance




Release date: July 3, 2026



Episodes: 10



Release schedule: One new episode every Friday through September 4, 2026



Genre: Sci-fi, mystery, dystopian drama



Streaming on: Apple TV



Main cast: Rebecca Ferguson, Common, Harriet Walter, Chinaza Uche, Avi Nash, Ashley Zukerman, Jessica Henwick, Colin Hanks, Alexandria Riley



Created by: Graham Yost



Based on: Hugh Howey's bestselling Silo book trilogy




Where the story is heading



Spoilers ahead.



Season 3 continues Juliette Nichols' journey after the dramatic events of Season 2. While she faces the consequences of crossing between silos, the series also introduces a second timeline that takes viewers centuries into the past. This new storyline explores the events that led to humanity living underground and slowly uncovers the conspiracy behind the construction of the silos. 



Instead of focusing only on one underground community, the series now connects multiple silos and shows that the mystery is much bigger than anyone originally believed.



Season 3 is building the bridge to the ending



One of the biggest changes this season is its shift toward the prequel story inspired by Hugh Howey's Shift. While earlier seasons mainly followed Juliette's investigation inside Silo 18, Season 3 spends significant time exploring the "Before Times."



New characters such as journalist Helen Drew and Congressman Daniel Keene play a major role in uncovering the political decisions and hidden plans that shaped the future. Their discoveries explain why the silos exist and how the world reached its current state.



These revelations are expected to become the foundation for everything that happens in Season 4.



Multiple timelines are expanding the mystery



Season 3 uses two parallel storylines that slowly move toward each other.



The present-day story follows Juliette as she searches for answers while facing new dangers across different silos.



At the same time, the flashback timeline explains the origins of the underground civilization. Rather than treating these stories separately, each episode reveals information that changes how viewers understand events in the present.



This structure allows the writers to answer long-running questions while introducing new twists that can carry into the final season.



Season 4 already has a clear destination



Unlike many television series that wait for renewal decisions, Silo already knows where its story will end.



Apple renewed the show for both Seasons 3 and 4, allowing Graham Yost and the creative team to adapt the complete trilogy without rushing the ending. Season 4 will conclude the story by adapting the final novel, Dust, bringing together the mysteries surrounding the silos, their creators, and humanity's future.



Because of that long-term plan, many of Season 3's new characters, historical events, and world-building moments feel like carefully placed pieces rather than standalone stories.



Why fans should pay attention now



The latest season contains several clues that will likely become important later.



Viewers are learning:




How the silo project first began.



Who was responsible for creating it.



Why different silos developed differently.



How the past directly affects Juliette's future.



Which unanswered mysteries are being saved for the series finale.




Every episode adds another piece to the larger puzzle, making Season 3 one of the most important chapters in the entire series.



Wrap Up



Silo Season 3 does much more than continue Juliette's story. It expands the world, reveals the origins of the silos, and carefully prepares viewers for the confirmed fourth and final season. With two timelines finally coming together and more answers arriving each week, the series is moving steadily toward its planned conclusion.



What do you plan to watch on Apple TV this week? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[How to unionize your tech workplace]]></title>
<description><![CDATA[This is Part 2 of a series on tech worker unionization. See Part 1: “A brewing battle: More IT workers want unions. The industry doesn’t.”



The best time for tech workers to unionize was 20 years ago, when they had plenty of leverage. The second-best time is now, when they don’t.



Mass layoff...]]></description>
<link>https://tsecurity.de/de/3670454/it-nachrichten/how-to-unionize-your-tech-workplace/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3670454/it-nachrichten/how-to-unionize-your-tech-workplace/</guid>
<pubDate>Wed, 15 Jul 2026 13:18:09 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph"><em>This is Part 2 of a series on tech worker unionization. See Part 1: “<a href="https://www.computerworld.com/article/4191760/brewing-battle-more-tech-workers-want-unions-but-the-industry-doesnt.html">A brewing battle: More IT workers want unions. The industry doesn’t</a>.”</em></p>



<p class="wp-block-paragraph">The best time for tech workers to unionize was 20 years ago, when they had plenty of leverage. The second-best time is now, when they don’t.</p>



<p class="wp-block-paragraph">Mass layoffs, AI-driven displacement, corporate surveillance, workplace disillusionment have created conditions that have made organizing compelling for tech professionals. But the federal labor board that has historically protected workers’ right to organize has been weakened, and the companies that once feared it are openly defying it.</p>



<p class="wp-block-paragraph">Here’s how organizers and labor experts describe the pros and cons to organizing — and how you can get started.</p>



<h2 class="wp-block-heading">What unions can — and can’t — do for you</h2>



<p class="wp-block-paragraph">The single biggest benefit of a union contract for most tech workers isn’t pay — it’s protection against arbitrary termination, especially in the wake of recent mass layoffs in tech. In the United States, nonunion “at-will” workers can be fired at any time without a stated reason, while unionized workers negotiate protections written into their contracts.</p>



<p class="wp-block-paragraph">“That fear of the company letting you go for anything at any time…with a union they just can’t do that,” says <a href="https://www.linkedin.com/in/zthompson1/" target="_blank" rel="noreferrer noopener">Zak Thompson</a>, a senior software engineer at Kickstarter and union steward at Kickstarter United. Now that Kickstarter employees are unionized, people are less worried that saying something negative will result in termination.</p>



<p class="wp-block-paragraph">“I’ve been shocked at the willingness of my co-workers to speak up against what they see as poor or controversial business decisions,” Thompson says.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full is-resized"> width="972" height="972" sizes="auto, (max-width: 972px) 100vw, 972px"&gt;<figcaption class="wp-element-caption"><p>Zak Thompson from Kickstarter United</p><br></figcaption></figure><p class="imageCredit">Fee Christoph</p></div>



<p class="wp-block-paragraph"><strong>Beyond job security, unions can deliver concrete material gains.</strong> <a href="https://kickstarterunited.org/about/" target="_blank" rel="noreferrer noopener">Kickstarter United was formed in 2020</a>, although getting there wasn’t easy: two employees were fired during the organizing campaign — which itself became a galvanizing event. And while the union hasn’t been able to prevent layoffs, it did negotiate better terms: four months of severance pay and four to six months of continued health insurance, versus the two to three weeks per year of work that management had initially proposed.</p>



<p class="wp-block-paragraph">Other benefits include a four-day work week; AI protections; a minimum pay floor; and standards for raises, promotions, and time off for the company’s 59 employees.</p>



<p class="wp-block-paragraph"><strong>Unions can give tech workers a voice in decisions that affect their daily work — including how AI tools are deployed.</strong> “Nobody I’ve spoken to is against new technology or getting trained in it,” says <a href="https://www.linkedin.com/in/mbelasco/" target="_blank" rel="noreferrer noopener">Max Belasco</a>, a business systems analyst at the University of California Los Angeles School of Law and co-chair of the UCLA chapter of the University Professional and Technical Employees/Communications Workers of America (UPTE-CWA) Local 9119.</p>



<p class="wp-block-paragraph">“But when new technology is being implemented, we want to know: what’s the five-year vision, the 10-year vision? Are we implementing this in a way that betters staffing, increases efficiency, or eases the lives of people already working? Or are we trying to take away jobs, automate people out of their pension or paycheck?” Belasco says.</p>



<p class="wp-block-paragraph"><strong>The challenges are real.</strong> Tech professionals are less inclined to leave their jobs in the current market because wages haven’t been increasing as fast as they once were, and it can take longer to land another job.</p>



<p class="wp-block-paragraph">“Tech moved from a very tight labor market in 2022 (1.85% unemployment rate) to a noticeably weaker one in 2024–2026 (3.49%),” although that’s still better than the national unemployment rate of 4.36% through May of this year, says <a href="https://www.mercatus.org/scholars/liya-palagashvili" target="_blank" rel="noreferrer noopener">Liya Palagashvili</a>, senior research fellow and director of the Labor Policy Project at the Mercatus Center at George Mason University.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full is-resized"> width="960" height="640" sizes="auto, (max-width: 960px) 100vw, 960px"&gt;<figcaption class="wp-element-caption"><p>Liya Palagashvili of the Mercatus Center at George Mason University</p></figcaption></figure><p class="imageCredit">Mercatus Center at George Mason University</p></div>



<p class="wp-block-paragraph"><strong>Flexibility is a concern.</strong> The more substantive challenge, raised by economists including Palagashvili, is that traditional union contracts impose uniform terms across an entire bargaining unit, limiting the flexibility that many tech workers — and their employers —currently enjoy. Tech firms need to move fast, adjusting teams, products, and roles on the fly.</p>



<p class="wp-block-paragraph">“Collective bargaining agreements can make those adjustments much more difficult, whether by making them slower, costlier, or inconsistent with the contract,” she says.</p>



<p class="wp-block-paragraph">Workers skeptical of unions in a <a href="https://www.teamblind.com/blog/why-are-unions-not-common-tech-industry/" target="_blank" rel="noreferrer noopener">survey of 1,900 tech professionals</a> conducted by the career site Blind cited specific concerns: that unions are “not meritocratic,” “prevent innovation,” and “hold back earnings of top performers.”</p>



<p class="wp-block-paragraph">Thompson from Kickstarter United pushes back: “We have nothing in our contract about ‘you can’t bend down and pick up a piece of trash because that’s someone else’s job.’ The company is free to give bonuses and individual raises as much as they like. This is all just up to the people who are bargaining the contract from the union side.”</p>



<p class="wp-block-paragraph"><strong>Organizing carries potentially serious personal risks.</strong> During negotiations for a second three-year contract in 2025, Kickstarter United went on strike for 42 days. A few months later, the company announced layoffs.</p>



<p class="wp-block-paragraph">“They let go strong union leaders, including a person who had bargained our last contract,” Thompson says. The union appealed, and the issue is now going to arbitration.</p>



<p class="wp-block-paragraph">If you form a union, don’t expect much support from the <a href="https://www.nlrb.gov/" target="_blank" rel="noreferrer noopener">National Labor Relations Board</a>, the agency that certifies US labor unions and protects workers’ right to organize, in terms of prosecuting complaints of unfair labor practices, Thompson warns. “We’re in a political moment in this country with a pretty weakened NLRB. You have to be ready to organize and withhold worker power without any guarantee of safety.”</p>



<p class="wp-block-paragraph"><strong>Organizers are up against an enormous union avoidance industry.</strong> Organizers can expect fierce pushback as soon as the business discovers that organizing is underway.</p>



<p class="wp-block-paragraph">“There’s a multi-billion-dollar industry in union avoidance,” says <a href="https://www.linkedin.com/in/alan-mcavinney-a386b8122/" target="_blank" rel="noreferrer noopener">Alan McAvinney</a>, a Google software engineer and organizing chair, Alphabet Workers Union-CWA, a 1,400-member minority union of Alphabet employees. (Google is a subsidiary of Alphabet.)</p>



<p class="wp-block-paragraph">US employers spend roughly $1.7 billion a year on union avoidance consultants and law firms, according to a <a href="https://www.epi.org/press/u-s-employers-spend-roughly-1-7-billion-annually-on-union-avoidance/" target="_blank" rel="noreferrer noopener">May 2026 report</a> by the Economic Policy Institute and LaborLab.</p>



<p class="wp-block-paragraph"><strong>Expect hardball tactics. </strong>Management may play hardball during the time between when organizers announce their intention to unionize and the actual vote. For example, management can threaten to fire foreign-born workers in the US on H-1B visas if they support the union. Those workers would then have just 60 days to find a new sponsoring employer or lose their H-1B status, according to a recent <a href="https://techworkerscoalition.org/blog/2025/03/14/immigrant-rights-are-labor-rights-tech-workers-and-h-1b-visas/" target="_blank" rel="noreferrer noopener">Tech Workers Coalition blog post</a>.</p>



<p class="wp-block-paragraph">And at venture capital-backed startups, investment agreements sometimes require management to attest there is no union activity — meaning a public organizing drive can trigger funding withdrawal. Or, if a unionized company is acquired, the new management can dissolve the union overnight by reclassifying unionized workers as new hires.</p>



<p class="wp-block-paragraph">With these sobering facts in mind, here is how organizers who have done it describe the process of creating a union.</p>



<h2 class="wp-block-heading">Step 1: Start a conversation with your co-workers</h2>



<p class="wp-block-paragraph">At the University of California, a two-tier system had evolved where some tech workers were unionized and some weren’t, Belasco says. Management created new titles that fell outside the union even though they had similar job descriptions and responsibilities to those in the union. Those nonunion employees received lower pay and benefits than their unionized peers, which created resentment and instability.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="683" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Max Belasco from the UCLA chapter of UPTE-CWA</p>
</figcaption></figure><p class="imageCredit">Zac Goldstein</p></div>



<p class="wp-block-paragraph">Belasco and other organizers wanted to eliminate that division by bringing everyone under the same contract. But when they began their unionization drive, “the biggest barrier we faced wasn’t management opposition — it was that people felt this was just the best-case scenario realistically available: ‘We have this job at the university, we have concerns about automation and layoffs, but what can we really do about it?'” he says.</p>



<p class="wp-block-paragraph">The antidote to that fatalism, organizers say, is simple: “Just start talking to your immediate co-workers. Are they experiencing the same challenges you are experiencing?” says McAvinney. “There’s no need to start talking about a union at this point.”</p>



<p class="wp-block-paragraph">Just get a consensus and start building a group of like-minded individuals, Thompson advises. “Always start with one-on-one conversations, and that’s what you should do the whole time. That’s the key to organizing,” he says.</p>



<p class="wp-block-paragraph">Tech workers often think they’re a special case, says Thompson, and therefore that unionization isn’t a good fit. “You’re not special. You are a company of workers, you are organizing, and there is a playbook for that. Trust the process, because it tends to work pretty well,” he says.</p>



<h2 class="wp-block-heading">Step 2: Who’s on board, and who’s not? Map your workplace, but keep it quiet</h2>



<p class="wp-block-paragraph">Once there’s a consensus, continue to grow your network. Keep a list of everyone you’ve spoken with and note their disposition: “Is this person union-friendly or anti-union? Would they be a strong organizer?” Thompson says.</p>



<p class="wp-block-paragraph">Maintaining secrecy early on is essential, because anti-union tactics will start immediately, and that can stop union organizing before it can gain momentum.</p>



<p class="wp-block-paragraph">“Generally, employers do not want to share power with their workforce,” McAvinney says. Employers will deploy every means at their disposal to stop organizing efforts and peel away potential yes votes.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="839" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Alan McAvinney from Alphabet Workers Union-CWA</p><br></figcaption></figure><p class="imageCredit">Aran Per Ink</p></div>



<p class="wp-block-paragraph">“If you look at historical examples, having 70% approval before the employer finds out about you results in a high percentage of wins when you actually cast the vote. Historically, that’s an effective buffer,” he says.</p>



<p class="wp-block-paragraph">There’s a real threat of firing and layoffs<em>.</em> The traditional tech worker belief that job mobility makes collective action unnecessary is now being tested by a tighter job market, McAvinney says, noting that workers who many believe <a href="https://www.newsweek.com/google-fires-thanksgiving-four-workers-crush-dissent-1474102" target="_blank" rel="noreferrer noopener">were fired for speaking out</a> back in 2019 were a galvanizing factor in his union’s formation.</p>



<p class="wp-block-paragraph">“You generally don’t want to be in a situation where the employer feels comfortable firing everyone. Part of that is thinking from a cynical standpoint about what the consequences would be to the employer if they did fire everyone,” he says.</p>



<p class="wp-block-paragraph">One-on-one conversations that include personally asking co-workers to keep conversations confidential are key to keeping things quiet, Belasco says. When <a href="https://upte.org/news/2100-tech-workers-vote-to-join-upte" target="_blank" rel="noreferrer noopener">2,100 UC tech workers voted to unionize</a> in May, 96% voted in favor. To stay out of earshot of managers, avoid employee surveillance tools, and sidestep conference calls that could be recorded, organizers met with workers in their homes.</p>



<p class="wp-block-paragraph">“That tactic is probably what made the difference between winning the election and getting the majority we got,” he says.</p>



<h2 class="wp-block-heading">Step 3: Find the right union affiliation or go it alone</h2>



<p class="wp-block-paragraph">“Running a campaign against major employers requires the resources and expertise of the larger labor movement, even if workers publicly present as independent,” says <a href="https://www.ilr.cornell.edu/people/kate-l-bronfenbrenner">Kate Bronfenbrenner</a>, director of labor education research and senior lecturer emeritus at Cornell University’s School of Industrial and Labor Relations.</p>



<p class="wp-block-paragraph">Options include the <a href="https://cwa-union.org/" target="_blank" rel="noreferrer noopener">Communications Workers of America</a> (CWA), <a href="https://www.seiu.org/" target="_blank" rel="noreferrer noopener">Service Employees International Union</a> (SEIU), and the <a href="https://www.opeiu.org/" target="_blank" rel="noreferrer noopener">Office and Professional Employees International Union</a> (OPEIU), among others. Another resource, the <a href="https://techworkerscoalition.org/">Tech Workers Coalition</a> (TWC), provides training on organizing tactics, AI-in-workplace issues, and contract negotiation, and can match workers to the right unions for their needs.</p>



<p class="wp-block-paragraph">The <a href="https://www.alphabetworkersunion.org/" target="_blank" rel="noreferrer noopener">Alphabet Workers Union</a> decided early on to affiliate with CWA. “They gave us a bunch of support early on in our campaign with no strings attached,” McAvinney says.</p>



<p class="wp-block-paragraph">Kickstarter is organized through OPEIU, Thompson says. “They’ll usually have resources and staff that can help you through the next steps: collecting signatures in support of a union, bringing that to management, holding a vote — the more formalized things that interact with US labor law. They’ll also help with organizing along the way,” he says.</p>



<p class="wp-block-paragraph">For workers at institutions where a union already exists, there may be a faster path. Organizers at UCLA did what’s called a “unit modification,” aligning with UPTE. By organizing under UPTE, the workers didn’t have to negotiate a new contract from scratch — they joined an already-negotiated contract covering existing UPTE tech members, which put them in “a much stronger position” than starting fresh, Belasco says.</p>



<h2 class="wp-block-heading">Step 4: Choose your union model: majority vs. pre-majority or minority</h2>



<p class="wp-block-paragraph">Assess what’s practical for your organizing effort. In a majority union, more than 50% of all workers in a defined bargaining unit must vote to join the union through an NLRB-supervised election in the private sector, or a Public Employment Relations Board (PERB)-supervised election for public sector workers.</p>



<p class="wp-block-paragraph">The NLRB must certify the union, which then operates under its legal protections. This means, for example, that the employer must bargain, negotiated contracts are enforceable, violations must go to the NLRB or arbitration, and workers can’t be dismissed without just cause.</p>



<p class="wp-block-paragraph">A pre-majority or minority union is a minority labor organization operating without NLRB protections or collective bargaining agreements. “Pre-majority means that workers are able to demonstrate majority support — through signed cards, petitions, a walkout, or everyone wearing solidarity T-shirts — without going through a formal election,” Bronfenbrenner says.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="683" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Kate Bronfenbrenner from the School of Industrial and Labor Relations, Cornell University</p><br></figcaption></figure><p class="imageCredit">ILR School/Cornell University</p></div>



<p class="wp-block-paragraph">The Alphabet Workers Union-CWA (AWU-CWA) formed as a pre-majority union because achieving majority status across a globally distributed workforce of over 100,000 was not a realistic near-term goal. “An underground model where you try to reach 70% support across a workforce of over 100,000 people isn’t realistic,” McAvinney says.</p>



<p class="wp-block-paragraph">A pre-majority union can still make a difference, he says. For example, the Alphabet Workers Union-CWA convinced management to offer voluntary exit packages — buyouts — prior to announcing layoffs.</p>



<p class="wp-block-paragraph">For smaller organizations, a majority union may be the more practical option — it’s more attainable, McAvinney says. “I don’t think [the pre-majority union model] is the correct thing to do in all situations. I certainly would not recommend it to a 200-person shop.”</p>



<p class="wp-block-paragraph">Kickstarter, which had fewer than 100 employees, was able to form a majority union, with 55% voting to organize.</p>



<p class="wp-block-paragraph">Ultimately, says McAvinney, “there’s no inflection point where you go from being able to win nothing to winning everything, even with a contract and a supermajority. But the more people you have who are willing and able to fight for what they want, the more you’ll be able to get.”</p>



<h2 class="wp-block-heading">Step 5: Who should — and should not — be in your union?</h2>



<p class="wp-block-paragraph">Belasco’s situation at UCLA illustrates a broader strategic choice that every organizing campaign must make. He had been in a union position in educational technology when he was told his role would be reclassified as a non-union position.</p>



<p class="wp-block-paragraph">“I was given a choice: apply to the new non-union position to continue doing the work I’d trained for, or stay in my union position doing service desk work I wasn’t used to,” he says. “Essentially, it was a choice between job security and career progression.”</p>



<p class="wp-block-paragraph">Belasco joined a “wall-to-wall” union, which represents a broad range of university professional and technical employees across the UC system rather than a single job category, such as engineers or tech professionals.</p>



<p class="wp-block-paragraph">Kickstarter United is another example of a wall-to-wall union. “It’s not just the engineers who are unionized, but also customer support, designers — everyone,” Thompson says.</p>



<p class="wp-block-paragraph">Wall-to-wall unions are more powerful, but they’re also more difficult to achieve. <a href="https://www.law.cornell.edu/uscode/text/29/159" target="_blank" rel="noreferrer noopener">Under US labor law</a>, “professionals have to vote separately on whether they want to be combined with other workers,” says Bronfenbrenner. “You can never have a wall-to-wall unit without giving professionals the chance to decide whether they want to be separate.”</p>



<p class="wp-block-paragraph">The law’s “professional employees” category includes roles like software engineers and developers but not necessarily others. For example, customer support specialists and QA analysts would fall into the “non-professional workers” category.</p>



<p class="wp-block-paragraph">“For decades, the pattern was either to organize everybody except the engineers, or manage to organize the engineers and fail to bring in everybody else — neither of which builds real worker power,” says <a href="https://www.linkedin.com/in/simonerobutti/" target="_blank" rel="noreferrer noopener">Simone Robutti</a>, an organizer with Tech Workers Coalition Global, an international branch of TWC based in Berlin.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full is-resized"> width="959" height="713" sizes="auto, (max-width: 959px) 100vw, 959px"&gt;<figcaption class="wp-element-caption"><p>Simone Robutti from Tech Workers Coalition Global</p><br></figcaption></figure><p class="imageCredit">TWC</p></div>



<h2 class="wp-block-heading">Step 6: You won the vote. Get ready for what comes next</h2>



<p class="wp-block-paragraph">Winning a union vote means having a seat at the table, says Thompson. “Once the workers have come together and agreed they want that seat, you bring that to management, and they have a chance to voluntarily recognize a union,” he says.</p>



<p class="wp-block-paragraph">But in most cases employers contest the results, which must be certified by the NLRB or PERB. That process, in which the employer uses various tactics to challenge the legitimacy of the outcome, can take weeks or months.</p>



<p class="wp-block-paragraph">Unfortunately, the legal framework that is supposed to protect workers during this process has been <a href="https://workerorganizing.org/elon-musk-spacex-nlrb-15975/#:~:text=CAN%20THE%20NLRB%20STILL%20ENFORCE%20LAWS%3F" target="_blank" rel="noreferrer noopener">significantly weakened</a> in the last few years. In a potentially more ominous development, <a href="https://apnews.com/article/amazon-nlrb-unconstitutional-spacex-elon-musk-ab42977117d883e97110a7bf8e8b257f" target="_blank" rel="noreferrer noopener">SpaceX</a>, <a href="https://apnews.com/article/amazon-nlrb-50ee06d87d4eaef22386382761335ef8" target="_blank" rel="noreferrer noopener">Amazon</a>, <a href="https://www.huffpost.com/entry/trader-joes-attorney-nlrb-unconstitutional_n_65b41e7ae4b014b873b11cc2" target="_blank" rel="noreferrer noopener">Trader Joe’s</a>, <a href="https://news.bloomberglaw.com/daily-labor-report/starbucks-is-latest-company-to-call-labor-board-unconstitutional" target="_blank" rel="noreferrer noopener">Starbucks</a>, and the <a href="https://capitalandmain.com/usc-follows-amazon-and-musks-spacex-in-calling-labor-board-unconstitutional" target="_blank" rel="noreferrer noopener">University of Southern California</a> have in separate legal actions <a href="https://www.epi.org/blog/whats-behind-the-corporate-effort-to-kneecap-the-national-labor-relations-board-spacex-amazon-trader-joes-and-starbucks-are-trying-to-have-the-nlrb-declared-unconstitutional/" target="_blank" rel="noreferrer noopener">challenged the constitutionality of the NLRB</a>, arguing that the agency’s structure violates the separation of powers. The Fifth Circuit Court of Appeals <a href="https://law.justia.com/cases/federal/appellate-courts/ca5/24-50627/24-50627-2025-08-19.html?__cf_chl_f_tk=do9nl63o6rfY2sxOjPeR5MkVGY4u1OTRYOVYjTQTOG0-1782836265-1.0.1.1-IXqkGFSiOH5hYYOqqrEqH6VFIApNL3MRHW6YNiDwERI" target="_blank" rel="noreferrer noopener">upheld injunctions against the NLRB</a> in SpaceX’s case in August 2025 — a serious challenge to the agency’s authority.</p>



<p class="wp-block-paragraph">In the meantime, some companies may disregard negotiated contracts, which can lead to lengthy legal appeals or extended arbitration.</p>



<p class="wp-block-paragraph">“The NLRB can still force an election, but it can’t force a contract, and companies are saying they simply won’t comply,” Bronfenbrenner says. This is where the expertise and resources of affiliation with a major union can help, she adds.</p>



<p class="wp-block-paragraph">As a result, contract negotiations can take far longer than workers might expect. At Kickstarter, for example, two years and four months elapsed from the time of the union vote to the first contract, and that was at a 59-person company with a relatively cooperative employer. At larger companies with more aggressive legal teams, the timeline will be longer.</p>



<p class="wp-block-paragraph">Forming a union is hard work, Robutti says. “It’s not a service you pay for and they protect you. It doesn’t happen spontaneously, and it doesn’t happen magically. It’s the choice to take responsibility for improving your workplace.”</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-14251 | Red Hat OpenShift GitOps ClusterRole Reconciler Name denial of service (EUVD-2026-44596)]]></title>
<description><![CDATA[A vulnerability labeled as problematic has been found in Red Hat OpenShift GitOps. This affects an unknown function of the component ClusterRole Reconciler. The manipulation of the argument Name results in denial of service.

This vulnerability is known as CVE-2026-14251. It is possible to launch...]]></description>
<link>https://tsecurity.de/de/3670254/sicherheitsluecken/cve-2026-14251-red-hat-openshift-gitops-clusterrole-reconciler-name-denial-of-service-euvd-2026-44596/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3670254/sicherheitsluecken/cve-2026-14251-red-hat-openshift-gitops-clusterrole-reconciler-name-denial-of-service-euvd-2026-44596/</guid>
<pubDate>Wed, 15 Jul 2026 12:09:27 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/red_hat:openshift_gitops">Red Hat OpenShift GitOps</a>. This affects an unknown function of the component <em>ClusterRole Reconciler</em>. The manipulation of the argument <em>Name</em> results in denial of service.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-14251">CVE-2026-14251</a>. It is possible to launch the attack remotely. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[Anya Taylor-Joy’s Lucky Is Now Streaming on Apple TV: Everything You Need to Know]]></title>
<description><![CDATA[Apple TV has premiered its new limited series Lucky, starring Anya Taylor-Joy as a skilled con artist trying to escape the criminal life that shaped her. The crime thriller made its global debut on Wednesday, July 15, 2026, with its first two episodes available together.



Taylor-Joy also serves...]]></description>
<link>https://tsecurity.de/de/3669616/ios-mac-os/anya-taylor-joys-lucky-is-now-streaming-on-apple-tv-everything-you-need-to-know/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3669616/ios-mac-os/anya-taylor-joys-lucky-is-now-streaming-on-apple-tv-everything-you-need-to-know/</guid>
<pubDate>Wed, 15 Jul 2026 07:08:14 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple TV has premiered its new limited series Lucky, starring Anya Taylor-Joy as a skilled con artist trying to escape the criminal life that shaped her. The crime thriller made its global debut on Wednesday, July 15, 2026, with its first two episodes available together.



Taylor-Joy also serves as an executive producer on the series, which is based on Marissa Stapley’s bestselling novel of the same name. The supporting cast includes Annette Bening, Timothy Olyphant, Aunjanue Ellis-Taylor, Drew Starkey, Clifton Collins Jr., William Fichtner, and Mo McRae.



The remaining episodes will arrive every Wednesday, giving Apple TV viewers a new chapter each week through the middle of August.




Number of episodes: Seven



Genre: Crime thriller and drama



Premiere date: July 15, 2026



Finale date: August 19, 2026



Release schedule: First two episodes on July 15, followed by one episode every Wednesday



Rating: TV-MA



Streaming platform: Apple TV




What is Lucky about?



Lucky follows a young woman who was raised inside a life of crime but managed to leave that world behind. Her attempt to build a safer future falls apart when circumstances force her to use her criminal skills one final time.



Anya Taylor-Joy plays Lucky Armstrong, a clever and experienced grifter who becomes trapped between dangerous criminals and investigators chasing her. Her final job goes badly, leaving her without the freedom and security she expected.



The story moves between Lucky’s troubled past and her increasingly dangerous present. As she runs out of people she can trust, she must rely on deception, quick decisions, and the survival skills taught to her by her family.



Where is the story heading?



Minor spoilers ahead.



The opening episodes place Lucky at the centre of a failed criminal plan involving stolen money, betrayal, and a growing law-enforcement investigation. Her husband, Cary, played by Drew Starkey, also becomes an important part of the mystery surrounding what happened after their plan collapsed.



Timothy Olyphant appears as Lucky’s estranged father, while Annette Bening plays Priscilla, a powerful and ruthless criminal figure. Aunjanue Ellis-Taylor joins the story as FBI agent Billie Rand, who follows Lucky’s trail while trying to understand the larger operation around her.



As the series continues, Lucky will have to confront the people who shaped her criminal past while deciding how far she is prepared to go for a fresh start. The weekly release schedule should gradually reveal who betrayed her, where the missing money went, and whether Lucky can escape without becoming the person she wanted to leave behind.



FAQs



When did Lucky premiere on Apple TV?



Lucky premiered globally on Apple TV on Wednesday, July 15, 2026. The streaming service released the first two episodes together.



How many episodes are in Lucky?



The limited series has seven episodes. Following the two-episode premiere, five additional episodes will arrive weekly through August 19, 2026.



When will the Lucky finale be released?



The final episode of Lucky is scheduled to stream on Wednesday, August 19, 2026.



Is Lucky based on a book?



Yes. The series is based on Marissa Stapley’s bestselling 2021 novel Lucky, which follows a con artist forced to confront her past after a major scheme goes wrong.



Who stars alongside Anya Taylor-Joy?



The cast includes Annette Bening, Timothy Olyphant, Aunjanue Ellis-Taylor, Drew Starkey, Clifton Collins Jr., William Fichtner, and Mo McRae.



Is Lucky a limited series?



Yes. Apple TV describes Lucky as a limited drama series, so its seven episodes are designed to tell one complete story.



How much does Apple TV cost in the US?



Apple TV costs $12.99 per month in the United States after a seven-day free trial for eligible new subscribers.



The first two episodes of Lucky are now streaming on Apple TV, with new episodes arriving every Wednesday until August 19. Are you planning to watch Anya Taylor-Joy’s latest crime thriller? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Maximum Pleasure Guaranteed Episode 10: Release Date and What to Expect]]></title>
<description><![CDATA[The Maximum Pleasure Guaranteed finale will be released on Apple TV on Wednesday, July 15, 2026. Episode 10 will conclude Paula Sanders’ dangerous investigation after a season filled with murder, blackmail, family problems, and increasingly risky decisions.



Finale Release Details




Finale re...]]></description>
<link>https://tsecurity.de/de/3668621/ios-mac-os/maximum-pleasure-guaranteed-episode-10-release-date-and-what-to-expect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3668621/ios-mac-os/maximum-pleasure-guaranteed-episode-10-release-date-and-what-to-expect/</guid>
<pubDate>Tue, 14 Jul 2026 18:18:24 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The Maximum Pleasure Guaranteed finale will be released on Apple TV on Wednesday, July 15, 2026. Episode 10 will conclude Paula Sanders’ dangerous investigation after a season filled with murder, blackmail, family problems, and increasingly risky decisions.



Finale Release Details




Finale release date: Wednesday, July 15, 2026



Episode: Season 1, Episode 10



Episode title: “Queens”



Streaming platform: Apple TV



Genre: Dark comedy and thriller



Season length: 10 episodes



Typical duration: Around 30 minutes



Created by: David J. Rosen



Directed by: David Gordon Green



Main cast: Tatiana Maslany, Jake Johnson, Jessy Hodges, Dolly de Leon, Jon Michael Hill, Charlie Hall, Kiarra Hamagami Goldberg, Nola Wallace, Brandon Flynn, and Murray Bartlett




Apple premiered the first two episodes on May 20 before releasing one episode every Wednesday. The weekly schedule ends with Episode 10 on July 15.



What Time Will the Maximum Pleasure Guaranteed Finale Be Released?



Apple lists July 15 as the official Maximum Pleasure Guaranteed finale release date. However, Apple TV frequently makes new episodes available at approximately 9 p.m. Eastern Time on the previous evening in the United States.



Viewers should therefore check Apple TV from Tuesday night, July 14, depending on their location. In India, the finale should appear during the morning of Wednesday, July 15, although the exact availability can differ slightly by account and region.



Where Is the Story Heading Before Episode 10?



Spoilers ahead for Maximum Pleasure Guaranteed Season 1.



Paula started the season as a newly divorced mother facing a custody dispute and an identity crisis. Her life changed after she became convinced that she had witnessed a serious crime during an online encounter.



Her attempt to uncover the truth pulled her into a larger mystery involving blackmail, violence, suspicious packages, and people who repeatedly questioned her judgement. At the same time, every new discovery affected her relationship with her daughter Hazel, her former husband Karl, and Karl’s new partner, Mallory.



By the end of Episode 9, the investigation had reached its most dangerous stage. Paula had collected enough information to believe that the events surrounding her were connected, but proving the conspiracy remained difficult. The episode left several characters facing immediate danger while Paula moved closer to the person responsible.



What Can Viewers Expect From the Finale?



The finale will need to resolve the central mystery surrounding the crime Paula believes she witnessed. It should also reveal whether her investigation saves her family or creates another problem she cannot easily escape.



Episode 10 is also expected to address Paula’s custody battle and her strained relationship with Hazel. Those personal issues have remained closely connected to the investigation throughout the season, since Paula’s actions have repeatedly raised questions about her stability and decision-making.



Rudy and Geri’s storyline could also receive an important conclusion. Their partnership developed while they helped investigate the case, and their growing connection became one of the season’s lighter elements. However, Geri’s secrets have created uncertainty about where their relationship is heading.



Will There Be a Maximum Pleasure Guaranteed Season 2?



Apple has not announced Maximum Pleasure Guaranteed Season 2 at the time of writing. The series was introduced as a 10-episode season rather than a confirmed limited series, leaving room for another chapter if the finale keeps part of the story open.



The decision will likely depend on viewership, audience response, and whether the creators have another story planned for Paula. For now, Episode 10 serves as the final confirmed episode.



The Maximum Pleasure Guaranteed finale streams on Apple TV on July 15. What do you plan to watch after the season ends? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-15416 | Red Hat OpenShift GitOps Repo-Server os command injection (EUVD-2026-43648)]]></title>
<description><![CDATA[A vulnerability was found in Red Hat OpenShift GitOps. It has been declared as critical. This issue affects some unknown processing of the component Repo-Server. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-15416. The attack can be launch...]]></description>
<link>https://tsecurity.de/de/3667843/sicherheitsluecken/cve-2026-15416-red-hat-openshift-gitops-repo-server-os-command-injection-euvd-2026-43648/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3667843/sicherheitsluecken/cve-2026-15416-red-hat-openshift-gitops-repo-server-os-command-injection-euvd-2026-43648/</guid>
<pubDate>Tue, 14 Jul 2026 13:55:31 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/red_hat:openshift_gitops">Red Hat OpenShift GitOps</a>. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. This issue affects some unknown processing of the component <em>Repo-Server</em>. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-15416">CVE-2026-15416</a>. The attack can be launched remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[v0.386.0]]></title>
<description><![CDATA[What's Changed

Capture offending gem details on bundler registry metadata errors by @kbukum1 in #15512
Bundler: apply empty-checksum metadata patch to the v2 helper by @kbukum1 in #15513
[Update graph] Ensure bystander txt files are removed before parsing for Python by @brrygrdn in #15508
Handle...]]></description>
<link>https://tsecurity.de/de/3665919/it-security-tools/v03860/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665919/it-security-tools/v03860/</guid>
<pubDate>Mon, 13 Jul 2026 18:35:24 +0200</pubDate>
<category>💾 IT Security Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2>What's Changed</h2>
<ul>
<li>Capture offending gem details on bundler registry metadata errors by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kbukum1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kbukum1">@kbukum1</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4824191752" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15512" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15512/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15512">#15512</a></li>
<li>Bundler: apply empty-checksum metadata patch to the v2 helper by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kbukum1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kbukum1">@kbukum1</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4824414250" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15513" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15513/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15513">#15513</a></li>
<li>[Update graph] Ensure bystander txt files are removed before parsing for Python by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4819771035" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15508" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15508/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15508">#15508</a></li>
<li>Handle global.json with no SDK version in dotnet_sdk parser by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4821557169" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15510" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15510/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15510">#15510</a></li>
<li>Type the cargo ecosystem and remove it from the T.untyped burndown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4810941973" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15492" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15492/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15492">#15492</a></li>
<li>Type the conda ecosystem and remove it from the T.untyped burndown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4811676578" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15493" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15493/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15493">#15493</a></li>
<li>Type the docker ecosystem and remove it from the T.untyped burndown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4811747259" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15495" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15495/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15495">#15495</a></li>
<li>Use shared git-tag cooldown in terraform by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/robaiken/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/robaiken">@robaiken</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4786767074" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15472" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15472/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15472">#15472</a></li>
<li>Retry corepack once on signature metadata error by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> with @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4783580732" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15466" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15466/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15466">#15466</a></li>
<li>Type the deno, elm, devcontainers, bazel, and helm ecosystems by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4833014415" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15527" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15527/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15527">#15527</a></li>
<li>Add word-separator and lowercase formatting for branch name by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4791908912" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15478" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15478/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15478">#15478</a></li>
<li>Fix Docker cooldown not respected for multi-arch images missing Last-Modified by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/robaiken/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/robaiken">@robaiken</a> with @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4796035244" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15486" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15486/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15486">#15486</a></li>
<li>Reduce redundant git-source probes during npm metadata resolution by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> with @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4793483366" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15480" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15480/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15480">#15480</a></li>
<li>Type the maven ecosystem and remove it from the T.untyped burndown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4833182059" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15531" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15531/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15531">#15531</a></li>
<li>Add branch name config template format support with validation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4835027976" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15535" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15535/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15535">#15535</a></li>
<li>fix(gradle): prefer local gradlew for lockfile updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4847310998" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15546" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15546/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15546">#15546</a></li>
<li>helm: support versioning-strategy (range-preserving updates) by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/casey-robertson-paypal/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/casey-robertson-paypal">@casey-robertson-paypal</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4585878635" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15218" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15218/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15218">#15218</a></li>
<li>Bump gradle from 9.4.1-jdk21-ubi to 9.6.1-jdk21-ubi in /gradle by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4813506019" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15498" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15498/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15498">#15498</a></li>
<li>[Update graph] Add support for requirements.txt 'layering' instead of compressing to a single file by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4829476790" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15521" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15521/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15521">#15521</a></li>
<li>Allow periods in Helm values file names for Docker ecosystem by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/telnet23/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/telnet23">@telnet23</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4862784915" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15557" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15557/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15557">#15557</a></li>
<li>Match existing group PRs covering a subset of job directories by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IanButterworth/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IanButterworth">@IanButterworth</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4850701816" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15548" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15548/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15548">#15548</a></li>
<li>Bump library/golang from 1.26.1-bookworm to 1.26.5-bookworm in /go_modules by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4867732850" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15562" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15562/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15562">#15562</a></li>
<li>Fix npm security updates for transitive dependencies in workspace monorepos by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Swampen/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Swampen">@Swampen</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4826508534" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15514" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15514/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15514">#15514</a></li>
<li>Add helm to the smoke-test matrix by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/casey-robertson-paypal/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/casey-robertson-paypal">@casey-robertson-paypal</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4857335602" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15554" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15554/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15554">#15554</a></li>
<li>v0.386.0 by @dependabot-core-action-automation[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4869767530" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15564" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15564/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15564">#15564</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/telnet23/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/telnet23">@telnet23</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4862784915" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15557" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15557/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15557">#15557</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Swampen/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Swampen">@Swampen</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4826508534" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15514" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15514/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15514">#15514</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dependabot/dependabot-core/compare/v0.385.0...v0.386.0"><tt>v0.385.0...v0.386.0</tt></a></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[The desktop infrastructure problem that kubernetes finally solves]]></title>
<description><![CDATA[Presented by Kasm TechnologiesEnterprise infrastructure teams have spent the better part of a decade pushing workloads into Kubernetes. Applications, APIs, batch jobs, data pipelines — if it runs in a container, it belongs in the cluster. The operational benefits are well-established: declarative...]]></description>
<link>https://tsecurity.de/de/3665757/it-nachrichten/the-desktop-infrastructure-problem-that-kubernetes-finally-solves/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665757/it-nachrichten/the-desktop-infrastructure-problem-that-kubernetes-finally-solves/</guid>
<pubDate>Mon, 13 Jul 2026 17:32:00 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><i>Presented by </i><a href="https://kasm.com/?utm_campaign=46469231-1.19%20Release%20Campaign&amp;utm_source=VentureBeat&amp;utm_medium=Paid%20Article&amp;utm_content=venture_beat_kasm_home_page"><i>Kasm Technologies</i></a></p><hr><p>Enterprise infrastructure teams have spent the better part of a decade pushing workloads into Kubernetes. Applications, APIs, batch jobs, data pipelines — if it runs in a container, it belongs in the cluster. The operational benefits are well-established: declarative configuration, horizontal scaling, self-healing, native integration with CI/CD pipelines and observability tooling. Kubernetes has become the default operating model for production workloads.</p><p>Except for desktops.</p><p>Secure desktop and application delivery — the kind that enterprises depend on for remote work, privileged access, and regulated-industry workflows — has remained stubbornly outside the Kubernetes model. Legacy virtual desktop infrastructure was built in a different era, for a different set of assumptions: pre-allocated VM pools, bespoke management planes, proprietary appliances, and operational tooling that has nothing to do with how modern platform teams work. The result is a split infrastructure reality: a modern, cloud-native application layer on one side, and a manually managed, operationally isolated desktop layer on the other.</p><p>That split is expensive. It means different tooling, different scaling behaviors, different observability approaches, and different operational runbooks. Platform engineers who are proficient in Kubernetes still have to context-switch into an entirely different mental model the moment a desktop infrastructure problem arises.</p><p>The more fundamental issue is that this split is unnecessary. Secure, containerized workspace delivery is a workload that Kubernetes is architecturally well-suited to run. Sessions are containers. Scaling is demand-driven. Configuration should be declarative. The only thing missing was a platform built to take advantage of that alignment.</p><h2>Why the timing is right</h2><p>The appetite for Kubernetes-native workspace delivery has grown significantly as organizations mature their container platform investments. Platform teams that have spent years standardizing on Helm, GitOps workflows, and Kubernetes-native observability are increasingly unwilling to make an exception for desktop infrastructure. The question has shifted from "can we run this on Kubernetes?" to "why isn't this running on Kubernetes already?"</p><p>At the same time, the security case for containerized workspace delivery has become more urgent. Browser-delivered, containerized workspaces provide session isolation that VM-based desktops cannot match — each session is ephemeral, isolated at the container boundary, and terminates cleanly without persistent state. For organizations managing sensitive data, insider risk, or third-party access scenarios, this isolation model is a meaningful security control, not just a deployment convenience.</p><p>The convergence of these two trends — Kubernetes-native infrastructure expectations and containerized session security — creates a clear opportunity for platforms that can address both simultaneously.</p><h2>What Kubernetes-native deployment looks like</h2><p>A Kubernetes-native deployment uses Kubernetes as the control plane for workspace infrastructure — handling orchestration, scaling, and lifecycle management through the same declarative model used across the rest of the platform. Instead of relying on dedicated management appliances or pre-provisioned desktop pools, infrastructure is managed through the same CI/CD, GitOps, observability, and security workflows the platform team already operates. This gives platform teams a consistent operational model rather than maintaining a separate toolset for desktop infrastructure.</p><p><a href="https://kasm.com/solutions/platform?utm_campaign=46469231-1.19%20Release%20Campaign&amp;utm_source=Paid%20Media&amp;utm_medium=VentureBeat&amp;utm_content=venturebeat_kasm_workspaces_platform">Kasm Workspaces, the browser-delivered workspace platform</a>, is purpose-built to use Kubernetes as the control plane for workspace orchestration and delivery. Its deployment model is designed for real enterprise environments — not simplified demos — with production-grade Helm charts that follow Kubernetes conventions, tested upgrade paths between versions, and a standardized backend architecture validated across production deployments. An RDP Gateway component purpose-built for the Kubernetes topology enables Windows and Linux virtual machine access through the same platform.</p><p><b>Key capabilities include:</b></p><ul><li><p>Horizontal session scaling driven by actual demand, orchestrated by Kubernetes — no pre-warmed VM pools required.</p></li><li><p>Declarative configuration through Helm values, enabling GitOps and CI/CD integration for workspace infrastructure.</p></li><li><p>Namespace-level isolation and compatibility with existing RBAC policies, ingress controllers, and secrets management integrations.</p></li><li><p>Metrics export for integration with Prometheus and existing observability stacks.</p></li><li><p>Rolling builds by default, reducing maintenance windows and enabling more predictable version management.</p></li></ul><h2>Real-world applications</h2><p>Regulated-industry remote access. A financial services organization running a Kubernetes-based application platform can deploy Kasm into the same cluster, using the same operational tooling, to deliver isolated browser and application sessions to analysts and advisors. Sessions are ephemeral, network egress is controlled, and the entire deployment is managed through the same GitOps pipeline as their application workloads.</p><p>Contractor and third-party access. Organizations that regularly onboard contractors or external vendors — with the associated privileged access risk — can provision Kasm sessions on Kubernetes that scale up during engagement periods and scale back during low-demand windows. No persistent access. No VPN extension to external parties. Containerized isolation at every session boundary.</p><p>AI/ML development environments. Teams building and running AI models need GPU-enabled development environments with security controls that general-purpose cloud desktops rarely provide. Deploying Kasm on Kubernetes with NVIDIA MiG Multi-Instance GPU support lets platform teams deliver fractional GPU resources into isolated workspace sessions — giving data scientists the compute they need without shared-infrastructure security exposure.</p><h2>The operational shift</h2><p>The practical implication of a Kubernetes-native workspace platform is that platform teams can stop treating workspace infrastructure as a special case. The same engineers who deploy applications can deploy the workspace platform. The same pipelines that manage application configuration can manage workspace configuration. The same dashboards that monitor application health can monitor workspace health.</p><p>That operational consolidation reduces overhead, improves consistency, and eliminates the context-switching cost that has made desktop infrastructure a persistent pain point for cloud-native organizations.</p><p>For organizations still running legacy VDI alongside modern cloud infrastructure, the question is no longer whether a Kubernetes-native alternative exists. It does. The question is when to make the transition.</p><p>Organizations interested in evaluating Kubernetes-native workspace delivery can explore the platform at <a href="https://kasm.com/solutions/platform?utm_campaign=46469231-1.19%20Release%20Campaign&amp;utm_source=Paid%20Media&amp;utm_medium=VentureBeat&amp;utm_content=venturebeat_kasm_workspaces_platform">kasm.com</a> and try out <a href="https://kasm.com/community-edition?utm_campaign=46469231-1.19%20Release%20Campaign&amp;utm_source=VentureBeat&amp;utm_medium=Article&amp;utm_content=venturebeat_community_edition">community edition</a> for yourself. </p><p><i>Daniel Ben-Chitrit is the Chief Product Officer at </i><a href="https://kasm.com/?utm_campaign=46469231-1.19%20Release%20Campaign&amp;utm_source=VentureBeat&amp;utm_medium=Paid%20Article&amp;utm_content=venture_beat_kasm_home_page"><i>Kasm Technologies</i></a><i>.</i></p><hr><p><i>Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact </i><a href="mailto:sales@venturebeat.com"><i><u>sales@venturebeat.com</u></i></a><i>.</i></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Do programming certifications still matter?]]></title>
<description><![CDATA[If you’re a software developer or architect, you might wonder if programming certifications are still worth the effort, especially in the era of rapid AI-driven evolution. The short answer is, it depends.



“Certifications are shifting from a checkbox to a compass. They’re less about proving you...]]></description>
<link>https://tsecurity.de/de/3665678/ai-nachrichten/do-programming-certifications-still-matter/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665678/ai-nachrichten/do-programming-certifications-still-matter/</guid>
<pubDate>Mon, 13 Jul 2026 17:04:44 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph">If you’re a software developer or architect, you might wonder if programming certifications are still worth the effort, especially in the era of rapid <a href="https://www.infoworld.com/article/2338115/what-is-generative-ai-artificial-intelligence-that-creates.html" data-type="link" data-id="https://www.infoworld.com/article/2338115/what-is-generative-ai-artificial-intelligence-that-creates.html">AI-driven evolution</a>. The short answer is, it depends.</p>



<p class="wp-block-paragraph">“Certifications are shifting from a checkbox to a compass. They’re less about proving you memorized syntax and more about proving you can architect systems, instruct AI coding assistants, and solve problems end-to-end,” says Faizel Khan, lead AI engineer at <a href="https://landingpoint.com/">Landing Point</a>, an executive search and recruiting firm.</p>



<p class="wp-block-paragraph">“In the AI era, fewer students will get trained on the job, which means they have to train themselves,” Khan says. “Certifications—especially architectural ones like AWS, Kubernetes, Terraform—are still the clearest path to do that.”</p>



<h2 class="wp-block-heading">Pros and cons of programming certifications</h2>



<p class="wp-block-paragraph">It’s not all black and white when it comes to deciding whether to pursue programming certifications. The effort involves both pros and cons.</p>



<p class="wp-block-paragraph">“In terms of pros, certifications concretely demonstrate that you have a skillset at a documented level,” says Chris Riccio, vice president of engineering at <a href="https://uplevelteam.com/">Uplevel</a>, an engineering optimization system provider. “They also show that you’ve put in the time and effort to learn, study, and prepare.”</p>



<p class="wp-block-paragraph">Programming certifications are “a useful way to validate foundational skills and show that someone understands core concepts,” says Greg Fuller, vice president of Skillsoft’s training provider, <a href="https://www.codecademy.com/">Codecademy</a>. “They’re especially helpful for people entering the field or shifting from adjacent roles.”</p>



<p class="wp-block-paragraph">Certifications offer a structured path to demonstrate proficiency, and they can confirm your ability to build and deploy in various environments, Fuller says.</p>



<p class="wp-block-paragraph">These types of certifications often demonstrate baseline proficiency and continuous learning, says Reshmi Ramachandran, head of partnerships and GTM strategy for <a href="https://www.cprime.com/">Cprime</a>, a consultancy. “These are often key indications of proficiency for companies looking to filter large candidate pools,” she says.</p>



<p class="wp-block-paragraph">Certifications really do two things, Khan adds. “First, they force you to learn by doing,” he says. “If you’re taking AWS Solutions Architect or Terraform, you don’t pass by guessing—you plan, build, and test systems. That practice matters. Second, they act as a public signal. Think of it like a micro-degree. You’re not just saying, ‘I know cloud.’ You’re showing you’ve crossed a bar that thousands of other engineers recognize.”</p>



<p class="wp-block-paragraph">But there are cons, too. “In tech, employers don’t just want credentials, they want proof you can deliver,” says Kevin Miller, CTO at <a href="https://www.ifs.com/industries/manufacturing/industrial-manufacturing">IFS</a>, a maker of factory automation software. “Programming certifications can be a valuable indicator of your baseline knowledge and competencies, especially if you’re early in your career or pivoting into tech, but their importance is dwindling.”</p>



<p class="wp-block-paragraph"><a href="https://www.infoworld.com/generative-ai/">AI tools</a> that can generate, debug, and optimize code are <a href="https://www.infoworld.com/article/4077352/85-of-developers-use-ai-regularly-jetbrains-survey.html" data-type="link" data-id="https://www.infoworld.com/article/4077352/85-of-developers-use-ai-regularly-jetbrains-survey.html">already performing tasks once done by entry-level developers</a>, “which means fewer traditional programming roles are available,” Miller says. “As a result, the job market is becoming more competitive, and certifications aren’t seen as the noteworthy achievement they once were.”</p>



<p class="wp-block-paragraph">What’s more, not all certifications carry the same weight, Riccio says. “Some may reflect only familiarity rather than true expertise,” he says. “Certifications also often measure ‘book knowledge’ rather than practical experience, and they don’t always map clearly to the requirements of a specific role.”</p>



<p class="wp-block-paragraph">Programming certifications “can be a helpful signal, especially for confirming baseline knowledge in areas like cloud, security, or devops, but they’re not the full picture,” says Morgan Watts, vice president of IT at <a href="https://developer.8x8.com/">8×8</a>, a contact center platform developer.</p>



<p class="wp-block-paragraph">“I’m more interested in a candidate’s attitude and aptitude: what problems they’ve solved, what they’ve built, and how they’ve approached challenges,” Watts says. “Certifications can show commitment and discipline, and they’re especially useful in highly specialized roles. But I’m cautious when someone presents a laundry list of certifications with little evidence of real-world application.”</p>



<p class="wp-block-paragraph">A certification without experience doesn’t carry much weight, Watts says, and over-certification can sometimes signal the wrong focus. “Ultimately, it’s the ability to apply knowledge, collaborate, and adapt that sets great developers apart,” he says.</p>



<p class="wp-block-paragraph">Finally, certifications can age fast, Khan says. “Tech stacks evolve and a badge from two years ago may already feel dusty,” he says. “And some certifications are paper-thin—multiple-choice exams that don’t prove you can debug production at 2 a.m. So, the risk is you collect badges but still can’t ship.”</p>



<h2 class="wp-block-heading">Which certifications will get you noticed?</h2>



<p class="wp-block-paragraph">Despite the drawbacks, certifications are still very much in demand, and some carry more weight than others.</p>



<p class="wp-block-paragraph">The most in-demand certifications are typically platform-based—Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and others, Riccio says. “Many of these platforms provide managed services that integrate with existing systems or serve as the glue between them,” he says. “Today’s engineering teams aren’t just building standalone systems in isolation; they’re using other systems to store data, orchestrate business workflows, and connect applications.”</p>



<p class="wp-block-paragraph">A certification that demonstrates the ability to build solutions on these platforms can put a development professional ahead of the competition, Riccio says.</p>



<p class="wp-block-paragraph">“The certifications I see in highest demand tend to reflect the evolving tech landscape,” Watts says. “Cloud certifications from AWS, Azure, and GCP are incredibly valuable, especially as distributed systems become the norm.”</p>



<p class="wp-block-paragraph">Also in demand are certifications for <a href="https://www.infoworld.com/article/3632270/the-devops-certifications-tech-companies-want.html">devops and CI/CD tools</a> including <a href="https://www.infoworld.com/article/3529526/how-to-succeed-with-kubernetes.html">Kubernetes</a>, <a href="https://www.infoworld.com/article/2257241/why-you-should-use-docker-and-oci-containers.html">Docker</a>, and <a href="https://www.infoworld.com/article/2260091/what-is-jenkins-the-ci-server-explained.html">Jenkins</a>, Watts says, “because deployment automation and reliability are critical at scale. Also, with AI reshaping development, we’re seeing growing interest in certifications around machine learning, data science, and AI model integration. These certifications stand out because they align directly with the skills that teams need to move faster and more intelligently.”</p>



<aside class="sidebar large">
<h3>More about developer certifications</h3>
<p>Learn more about developer courses and certifications tech companies want:</p>
<ul>
<li><a href="https://www.infoworld.com/article/4055032/ai-developer-certifications-tech-companies-want.html">AI developer certifications</a></li>
<li><a href="https://www.infoworld.com/article/3583466/the-machine-learning-certifications-tech-companies-want.html">Machine learning certifications</a></li>
<li><a href="https://www.infoworld.com/article/2337635/4-cloud-certifications-that-will-help-you-stand-out.html">Cloud development certifications</a></li>
<li><a href="https://www.infoworld.com/article/3632270/the-devops-certifications-tech-companies-want.html">Devops and CI/CD certifications</a></li>
</ul>
</aside>




<p class="wp-block-paragraph">On the AI front, certifications in <a href="https://www.infoworld.com/article/2255099/what-is-tensorflow-the-machine-learning-library-explained.html">TensorFlow</a> and other <a href="https://www.infoworld.com/article/3583466/the-machine-learning-certifications-tech-companies-want.html">machine learning platforms</a> are gaining traction as organizations look to embed AI across the development process, Watts says. “These are the certifications that align closely with where modern engineering is headed—scalable, secure, and AI-enabled,” he says.</p>



<p class="wp-block-paragraph">And then there are <a href="https://www.csoonline.com/article/3970107/the-14-most-valuable-cybersecurity-certifications.html">cybersecurity credentials</a> that continue to be in high demand. Security certifications, such as CompTIA Security+ or Certified Ethical Hacker, “have become essential as every company faces increasing cyber threats and compliance requirements,” Miller says.</p>



<p class="wp-block-paragraph">“Core programming certifications are still a bit niche, but the adjacent skills, like those that help developers deploy, secure, and scale their code, are driving demand,” Fuller says. “Companies want developers who understand the full lifecycle, not just how to write code.”</p>



<p class="wp-block-paragraph"><strong>Also see: <a href="https://www.infoworld.com/article/3980325/the-java-certifications-tech-companies-want.html">The best Java certifications for software developers</a>.</strong></p>



<h2 class="wp-block-heading">Certifications in the hiring process</h2>



<p class="wp-block-paragraph">Experts are clear that programming certifications alone will not get you the job. But they do play a role in the hiring process.</p>



<p class="wp-block-paragraph">“The information technology world is characterized by rapid and continuous evolution, including the skills and knowledge required to work in the field,” says Diane Rafferty, managing director of the National Technology Group at <a href="https://www.atriumglobal.com/">Atrium</a>, a global talent solutions and extended workforce management firm.</p>



<p class="wp-block-paragraph">“Certifications not only prove that you have the skills and knowledge needed, but they also show employers that you’re invested in your education and career growth,” Rafferty says. “They can give you a competitive edge when looking for a job, as many companies now require candidates to have them.”</p>



<p class="wp-block-paragraph">Certifications are one part of the hiring equation, “but never the only part,” Watts says. “They help validate that a candidate has taken the time to build foundational knowledge, and that’s a good sign. But I put more weight on how a person thinks, solves problems, and contributes to the team. I look for people who are curious and proactive, who are learning because they want to, not just because a course told them to.”</p>



<p class="wp-block-paragraph">Certifications can also play a valuable role in retention, Watts says. “I encourage team members to pursue growth, and when they invest in their own development, the whole organization benefits,” he says. “But again, it’s that balance of knowledge, attitude, and applied experience that really moves the needle.”</p>



<p class="wp-block-paragraph">Certifications “may allow you to breeze through the initial résumé screening process, potentially getting you to the next stage faster,” Riccio says. “At a minimum, they will set your profile apart from the rest of the pack. They also demonstrate that you’ve reached a baseline level of expertise, allowing hiring managers to quickly evaluate whether you have the skills for the role.”</p>



<p class="wp-block-paragraph">Employers today “care far less about whether someone has passed an exam and far more about whether they can apply knowledge effectively in real-world situations, leverage AI tools, and solve complex problems,” Miller says. “A certification might get someone an interview, but being able to demonstrate problem-solving skills, teamwork, and adaptability will really make them stand out.”</p>



<h2 class="wp-block-heading">Popular programming certifications</h2>



<p class="wp-block-paragraph">The following certifications consistently rose to the top in my conversations with tech leaders and hiring managers.</p>



<h3 class="wp-block-heading">AWS Certified Developer—Associate</h3>



<p class="wp-block-paragraph">Showcases skills and knowledge in developing, optimizing, packaging, and deploying applications, using CI/CD workflows, and identifying and resolving application issues, according to AWS. This certification is said to be a good starting point on the AWS certification journey for professionals in IT or cloud developer job roles.</p>



<h3 class="wp-block-heading">Azure Developer Associate</h3>



<p class="wp-block-paragraph">This certificate from Microsoft is intended for developers participating in all phases of cloud development, including design, deployment, maintenance, and monitoring. The course teaches developers how to create end-to-end solutions in Microsoft Azure, using the Microsoft Learn Sandbox environment to access Azure resources and services.</p>



<h3 class="wp-block-heading">Certified Kubernetes Application Developer (CKAD)</h3>



<p class="wp-block-paragraph">This certification was created by the Linux Foundation and Cloud Native Computing Foundation. It demonstrates that candidates can design, build, and deploy cloud-native applications for Kubernetes.</p>



<h3 class="wp-block-heading">Certified Secure Software Lifecycle Professional (CSSLP)</h3>



<p class="wp-block-paragraph">This certification, from ISC2, focuses on secure software development practices. It recognizes leading application security skills and demonstrates advanced technical skills and knowledge needed for authentication, authorization, and auditing throughout the software development lifecycle.</p>



<h3 class="wp-block-heading">Databricks Certified Machine Learning Professional</h3>



<p class="wp-block-paragraph">Professionals learn about the latest data and AI techniques and how they can use the Databricks Data Intelligence Platform to build a variety of solutions across data engineering, data warehousing, data science, and AI.</p>



<h3 class="wp-block-heading">Professional Cloud Architect</h3>



<p class="wp-block-paragraph">This certification from Google assesses the ability to design and plan a cloud solution architecture, manage and provision the cloud solution infrastructure, design for security and compliance, analyze and optimize technical and business processes manage implementations of cloud architecture, and ensure solution and operations reliability.</p>



<h3 class="wp-block-heading">Terraform Associate</h3>



<p class="wp-block-paragraph">This certification from HashiCorp is for cloud engineers specializing in operations, IT, or development who know the basic concepts and skills associated with Terraform. It validates foundational skills in using <a href="https://www.infoworld.com/article/3893387/how-terraform-is-evolving-infrastructure-as-code.html">Terraform</a> for <a href="https://www.infoworld.com/article/2259359/what-is-infrastructure-as-code-automating-your-infrastructure-builds.html">infrastructure as code</a> development.</p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[What is devops? Bringing dev and ops together to build better software]]></title>
<description><![CDATA[A portmanteau of “development” and “operations,” devops emerged as a way of bringing together two previously separate groups responsible for the building and deploying of software.



In the old world, developers (devs) typically wrote code before throwing it over to the system administrators (op...]]></description>
<link>https://tsecurity.de/de/3665673/ai-nachrichten/what-is-devops-bringing-dev-and-ops-together-to-build-better-software/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665673/ai-nachrichten/what-is-devops-bringing-dev-and-ops-together-to-build-better-software/</guid>
<pubDate>Mon, 13 Jul 2026 17:04:38 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div><div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph">A portmanteau of “development” and “operations,” devops emerged as a way of bringing together two previously separate groups responsible for the building and deploying of software.</p>



<p class="wp-block-paragraph">In the old world, developers (devs) typically wrote code before throwing it over to the system administrators (operations, or ops) to deploy and integrate that code. But as the industry shifted towards <a href="https://www.infoworld.com/article/2259475/what-is-agile-methodology-modern-software-development-explained.html">agile development</a> and <a href="https://www.infoworld.com/article/2255318/what-is-cloud-native-the-modern-way-to-develop-software.html">cloud-native computing</a>, many organizations reoriented around modern, cloud-native practices in the pursuit of faster, better releases.</p>



<p class="wp-block-paragraph">This required a new way to perform these key functions in a more streamlined, efficient, and cohesive way, one where the old frustrations of disconnected dev and ops functions would be eliminated. With two groups working together, developers can rapidly roll out small code enhancements via <a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">continuous integration and delivery</a> rather than spending years on “big bang” product releases.</p>



<p class="wp-block-paragraph">Devops was born at cloud-native companies like Facebook, Netflix, Spotify, and Amazon; but it’s become one of the defining technology industry trends of the past decade, primarily because it bridges so many of the changes that have shaped modern software development.</p>



<p class="wp-block-paragraph">As agile development and cloud-native computing have become ubiquitous, devops has enabled the entire industry to speed up its software development cycles. Thus, devops has now thoroughly infiltrated the enterprise, especially in organizations that rely on software to run their business, such as banks, airlines, and retailers. <a>And it’s spawned a host of other “ops” practices, some of which we’ll touch on here.</a><a href="https://www.infoworld.com/article/2255028/what-is-devops-bringing-dev-and-ops-together-for-better-software.html#_msocom_1">[JF1]</a> </p>



<h2 class="wp-block-heading"><strong>Devops practices</strong></h2>



<p class="wp-block-paragraph">Devops requires a shift in mindset from both sides of the dev and ops divide. Development teams should focus on learning and adopting agile processes, standardizing platforms, and helping drive operational efficiencies. Operations teams must now focus on improving stability and velocity, while also reducing costs by working hand in hand with the developer team.</p>



<p class="wp-block-paragraph">Broadly speaking, these teams need to all speak a common language and there needs to be a shared goal and understanding of each other’s key skills for devops to thrive.</p>



<p class="wp-block-paragraph">More specifically, engineers Damon Edwards and John Willis <a href="https://www.devopsgroup.com/insights/resources/diagrams/all/calms-model-of-devops/">created the CALMS model</a> to bring together what are commonly understood to be the key principles of devops:</p>



<ul class="wp-block-list">
<li>Culture: One that embraces <a href="https://www.infoworld.com/article/2259475/what-is-agile-methodology-modern-software-development-explained.html">agile methodologies</a> and is open to change, constant improvement, and accountability for the end-to-end quality of software.</li>



<li>Automation: Automating away toil is a key goal for any devops team.</li>



<li>Lean: Ensuring the smooth flow of software through key steps as quickly as possible.</li>



<li>Measurement: You can’t improve what you don’t measure. Devops pushes for a culture of constant measurement and feedback that can be used to improve and pivot as required, on the fly.</li>



<li>Sharing: Knowledge sharing across an organization is a key tenet of devops.</li>
</ul>



<p class="wp-block-paragraph">“Who could go back to the old way of trying to figure out how to get your laptop environment looking the same as the production environment? All these things make it so clear that there’s a better way to work. I think it’s very tough to turn back once you’ve done things like continuous integration, like continuous delivery. Once you’ve experienced it, it’s really tough to go back to the old way of doing things,” Kim <a href="https://www.infoworld.com/article/2258333/devops-expert-gene-kim-how-devops-helps-business-meet-challenging-times.html">told InfoWorld</a>.</p>



<h2 class="wp-block-heading"><strong>What is a devops engineer?</strong></h2>



<p class="wp-block-paragraph">Naturally, the emergence of devops has spawned a whole new set of job titles, most prominent of which is the catch-all <a href="https://www.infoworld.com/article/2259407/what-is-a-devops-engineer-and-how-do-you-become-one.html">devops engineer</a>.</p>



<p class="wp-block-paragraph">Generally speaking, this role is the natural evolution of the system administrator — but in a world where developers and ops work in close tandem to deliver better software. This person should have a blend of programming and system administrator skills so that he or she can effectively bridge those two sides of the team.</p>



<p class="wp-block-paragraph">That bridging of the two sides requires strong social skills more than technical. As Kim put it, “one of the most important skills, abilities, traits needed in these pioneering rebellions — using devops to overthrow the ancient powerful order, who are very happy to do things the way they have for 30 to 40 years — are the cross-functional skills to be able to reach across the table to their business counterparts and help solve problems.”</p>



<p class="wp-block-paragraph">This person, or team of people, will also have to be a born optimizer, tasked with continually improving the speed and quality of software delivery from the team, be that through better practices, removing bottlenecks, or applying automation to smooth out software delivery.</p>



<p class="wp-block-paragraph">The good news is that these skills are valuable to the enterprise. <a href="https://www.infoworld.com/article/2263101/devops-salaries-continued-to-rise-during-the-pandemic.html">Salaries for this set of job titles have risen steadily over the years</a>, with 95% of devops practitioners making more than $75,000 a year in salary in 2020 in the United States. In Europe and the UK, where salaries are lower across the board, 71% made more than $50,000 a year in 2020, up from 67% in 2019.</p>



<h2 class="wp-block-heading"><strong>Key devops tools</strong></h2>



<p class="wp-block-paragraph">While devops is at its heart a cultural shift, a set of tools has emerged to help organizations adopt devops practices.</p>



<p class="wp-block-paragraph">This stack typically includes <a href="https://www.infoworld.com/article/2259359/what-is-infrastructure-as-code-automating-your-infrastructure-builds.html">infrastructure as code</a>, configuration management, collaboration, version control, <a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">continuous integration and delivery (CI/CD)</a>, deployment automation, testing, and monitoring tools.</p>



<p class="wp-block-paragraph">Here are some of the tools/categories that are increasingly relevant in 2025, and what is changing:</p>



<ul class="wp-block-list">
<li><strong>CI/CD and delivery automation</strong>: Traditional tools like Jenkins remain in many stacks, but newer orchestration tools and CLI-driven or GitOps-centric platforms are growing in importance (e.g. ArgoCD, Flux, Tekton). Also, platforms that integrate more tightly with monitoring, secrets management, drift detection, and policy enforcement are gaining traction.</li>



<li><strong>Security, compliance, and devsecops tooling</strong>: Security tools are increasingly integrated into devops pipelines. Expect to see more use of static analysis (SAST), dynamic testing (DAST), dependency and supply chain scanning (SCA), secret management, and policy as code. The push is toward embedding security earlier and <a href="https://www.infoworld.com/article/3965374/bringing-devops-devsecops-and-mlops-together.html">bridging gaps between dev, security, and machine learning teams</a>. (InfoWorld:)</li>



<li><strong>AI  and automation augmentation</strong>: AI-assisted tools are increasingly part of tooling stacks: auto-suggestions in CI/CD, anomaly detection, predictive scaling, intelligent test suite selection, and more. The hope is that these tools will reduce manual interventions and improve reliability. Tools that are “AI ready”—that is, they integrate well with AI or have mature built-in automation or assistance—increasingly <a href="https://www.infoworld.com/article/4052402/how-to-choose-the-right-ai-agent-development-tools.html">stand out from the pack</a>.</li>
</ul>



<h2 class="wp-block-heading"><strong>Devops challenges</strong></h2>



<p class="wp-block-paragraph">Even as devops becomes more widely adopted, there remain real obstacles that can slow progress or limit impact. One major challenge is the persistent <strong>skills gap</strong>. The modern devops engineer (or team) is expected to master not just source control, CI/CD, and scripting, but also cloud architecture, infrastructure as code, security best practices, observability, and strong cross-team communication. In many organizations these capabilities are uneven: some teams excel, others lag behind. A 2024 survey showed that while 83% of developers report participating in devops activities, <a href="https://www.infoworld.com/article/2337172/most-developers-have-adopted-devops-survey-says.html">using multiple CI/CD tools was correlated with <em>worse</em> performance</a> — a sign that complexity without deep expertise can backfire.</p>



<p class="wp-block-paragraph"><strong>Toolchain fragmentation and complexity </strong>is a related issue. Devops toolchains have sprouted into a sometimes bewildering array of packages and techniques to master: version control, CI build/test, security scanning, artifact management, monitoring, observability, deployment, secret management, and more.</p>



<p class="wp-block-paragraph">The more tools you have, the more difficult it becomes to integrate them cleanly, manage their versions, ensure compatibility, and avoid duplicated effort. Organizations often get stuck with “tool sprawl” — tools chosen by different teams, legacy systems, or overlapping functionalities — which introduce friction, maintenance burden, and sometimes vulnerabilities.</p>



<p class="wp-block-paragraph">Finally, although devops has spread far and wide, there is still <strong>cultural resistance and alignment</strong>. Devops isn’t just about tools and processes; it’s about collaboration, shared responsibility, and continuous feedback. Teams rooted in traditional silos (dev vs ops, or security separate) may <a href="https://www.infoworld.com/article/2337372/10-big-devops-mistakes-and-how-to-avoid-them.html">resist changes to roles and workflows</a>. Leadership support, communication of shared goals, trust, and allowance for continuous learning are all necessary.</p>



<p class="wp-block-paragraph">Many CIOs <a href="https://www.cio.com/article/3552944/6-enterprise-devops-mistakes-to-avoid.html">focus too much on tools or implementation first</a>, rather than organizational culture and behaviors; but without addressing culture, even the best tools or processes may not yield the hoped-for velocity, quality, or reliability. Organizations that succeed here tend to have proactive strategies: dedicated training programs, mentorship, internal “guilds,” pairing junior and senior engineers, and making sure leadership supports ongoing learning rather than one-off bootcamps.</p>



<h2 class="wp-block-heading"><strong>Why do devops?</strong></h2>



<p class="wp-block-paragraph">Whoever you ask will tell you that devops is a major culture shift for organizations, so why go through that pain at all?</p>



<p class="wp-block-paragraph">Devops aims to combine the formerly conflicting aims of developers and system administrators. Under its principles, all software development aims to meet business demands, add functionality, and improve the usability of applications while also ensuring those applications are stable, secure, and reliable. Done right, this improves the velocity and quality of your output, while also improving the lives of those working on these outcomes.</p>



<h2 class="wp-block-heading"><strong>Does devops save money — or add cost?</strong></h2>



<p class="wp-block-paragraph">Devops teams are recognizing that speed and agility are only part of success — unchecked cloud bills and waste undermine long-term sustainability. Waste in devops often comes in the form of “<a href="https://www.infoworld.com/article/4010176/devops-debt-the-hidden-tax-on-innovation.html?utm_source=chatgpt.com">devops</a> debt”— idle cloud capacity, dead code, or false-positive security alerts—which was called a “<a href="https://www.infoworld.com/article/4010176/devops-debt-the-hidden-tax-on-innovation.html">hidden tax on innovation</a>” in recent Java-environment studies.</p>



<p class="wp-block-paragraph"> Embedding <a href="https://www.cio.com/article/3839075/finops-breaks-out-of-the-cloud.html">finops</a> practices can help fight these costs. Teams should <a href="https://www.infoworld.com/article/4013485/how-to-shift-left-on-finops-and-why-you-need-to.html">shift left on cost</a>: estimating costs when spinning up new environments, resizing instances, and scaling down unused resources before they become runaway expenses.</p>



<h2 class="wp-block-heading"><strong>How to start with devops</strong></h2>



<p class="wp-block-paragraph">There are lots of resources for help getting started with devops, <a href="https://www.amazon.com/DevOps-Handbook-World-Class-Reliability-Organizations-ebook/dp/B01M9ASFQ3">including Kim’s own <em>Devops Handbook</em></a>, or you can enlist the help of external consultants. But you have to be methodical and focus on your people more than on the tools and technology you will eventually use <a href="https://www.infoworld.com/article/2258896/6-ways-to-secure-buy-in-for-your-devops-journey.html">if you want to ensure lasting buy-in across the business</a>.</p>



<p class="wp-block-paragraph">A proven route to achieving this is a “land and expand” strategy, where a small group starts by mapping key value streams and identifying a single product team or workload for trialing devops practices. If this team is successful in proving the value of the shift, you will likely start to get interest from other teams and from senior leadership.</p>



<p class="wp-block-paragraph">If you are at the start of your devops journey, however, make sure you are prepared for the disruption a change like this can have on your organization, and keep your eye on the prize of building better, faster, stronger software.</p>



<hr class="wp-block-separator has-alpha-channel-opacity">



<p class="wp-block-paragraph"><a></a></p>



<p class="wp-block-paragraph"></p>



<p class="wp-block-paragraph">More on devops:</p>



<ul class="wp-block-list">
<li><a href="https://www.infoworld.com/article/4010176/devops-debt-the-hidden-tax-on-innovation.html">Devops debt: The hidden tax on innovation</a></li>



<li><a href="https://www.infoworld.com/article/2337372/10-big-devops-mistakes-and-how-to-avoid-them.html">10 big devops mistakes and how to avoid them</a></li>



<li><a href="https://www.infoworld.com/article/3621681/smarter-devops-how-to-avoid-deployment-horrors.html">Smarter devops: How to avoid deployment horrors</a><div class="card__info"></div></li>
</ul>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Cloud native explained: How to build scalable, resilient applications]]></title>
<description><![CDATA[What is cloud native? Cloud native defined



The term “cloud-native computing” encompasses the modern approach to building and running software applications that exploit the flexibility, scalability, and resilience of cloud computing. The phrase is a catch-all that encompasses not just the speci...]]></description>
<link>https://tsecurity.de/de/3665670/ai-nachrichten/cloud-native-explained-how-to-build-scalable-resilient-applications/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665670/ai-nachrichten/cloud-native-explained-how-to-build-scalable-resilient-applications/</guid>
<pubDate>Mon, 13 Jul 2026 17:04:33 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div><div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<h2 class="wp-block-heading"><strong>What is cloud native? Cloud native defined</strong></h2>



<p class="wp-block-paragraph">The term “cloud-native computing” encompasses the modern approach to building and running software applications that exploit the flexibility, scalability, and resilience of cloud computing. The phrase is a catch-all that encompasses not just the specific architecture choices and environments used to build applications for the public cloud, but also the software engineering techniques and philosophies used by cloud developers.</p>



<p class="wp-block-paragraph">The <a href="https://www.cncf.io/">Cloud Native Computing Foundation</a> (CNCF) is an open source organization that hosts many important cloud-related projects and helps set the tone for the world of cloud development. The CNCF offers its own definition of cloud native:</p>



<p class="wp-block-paragraph"><em>Cloud native practices empower organizations to develop, build, and deploy workloads in computing environments (public, private, hybrid cloud) to meet their organizational needs at scale in a programmatic and repeatable manner. It is characterized by loosely coupled systems that interoperate in a manner that is secure, resilient, manageable, sustainable, and observable.</em></p>



<p class="wp-block-paragraph"><em>Cloud native technologies and architectures typically consist of some combination of containers, service meshes, multi-tenancy, microservices, immutable infrastructure, serverless, and declarative APIs — this list is not exhaustive.</em></p>



<p class="wp-block-paragraph">This definition is a good start, but as cloud infrastructure becomes ubiquitous, the cloud native world is beginning to spread behind the core of this definition. We’ll explore that evolution as well, and look into the near future of cloud-native computing.</p>



<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper youtube-video">

</div></figure>



<h2 class="wp-block-heading"><strong>Cloud native architectural principles</strong></h2>



<p class="wp-block-paragraph">Let’s start by exploring the pillars of cloud-native architecture. Many of these technologies and techniques were considered innovative and even revolutionary when they hit the market over the past few decades, but now have become widely accepted across the software development landscape.</p>



<p class="wp-block-paragraph"><strong>Microservices. </strong>One of the huge cultural shifts that made cloud-native computing possible was the move from huge, monolithic applications to <a href="https://www.infoworld.com/article/2263327/what-are-microservices-your-next-software-architecture.html">microservices</a>: small, loosely coupled, and independently deployable components that work together to form a cloud-native application. These microservices can be scaled across cloud environments, though (as we’ll see in a moment) this makes systems more complex.</p>



<p class="wp-block-paragraph"><strong>Containers and orchestration. </strong>In could-native architectures, individual microservices are executed inside <em>containers </em>— lightweight, portable virtual execution environments that can run on a variety of servers and cloud platforms. Containers insulate the developers from having to worry about the underlying machines on which their code will execute. That is, all they have to do is write to the container environment. </p>



<p class="wp-block-paragraph">Getting the containers to run properly and communicate with one another is where the complexity of cloud native computing starts to emerge. Initially, containers were created and managed by relatively simple platforms, the most common of which was <a href="https://www.infoworld.com/article/2253801/what-is-docker-the-spark-for-the-container-revolution.html">Docker</a>. But as cloud-native applications got more complex, container orchestration platforms<em> </em>that augmented Docker’s functionality emerged, such as Kubernetes, which allows you to deploy and manage multi-container applications at scale. Kubernetes is critical to cloud native computing as we know it — it’s worth noting that the CNCF was set up as a <a href="https://www.zdnet.com/article/cloud-native-computing-foundation-seeks-to-bring-more-cloud-and-container-unity/">spinoff of the Linux Foundation on the same day that Kubernetes 1.0 was announced</a> — and adhering to <a href="https://www.infoworld.com/article/2338688/6-best-practices-to-keep-kubernetes-costs-under-control.html">Kubernetes best practices</a> is an important key to cloud native success. </p>



<p class="wp-block-paragraph"><strong>Open standards and APIs. </strong>The fact that containers and cloud platforms are largely defined by open standards and <a href="https://www.infoworld.com/article/3800992/open-source-trends-for-2025-and-beyond.html">open source technologies</a> is the secret sauce that makes all this modularity and orchestration possible, and <a href="https://www.infoworld.com/article/3529600/how-do-you-govern-a-sprawling-disparate-api-portfolio.html">standardized and documented APIs </a>offer the means of communication between distributed components of a larger application. In theory, anyway, this standardization means that every component should be able to communicate with other components of an application without knowing about their inner workings, or about the inner workings of the various platform layers on which everything operates.</p>



<p class="wp-block-paragraph"><strong>DevOps, agile methodologies, and infrastructure as code. </strong>Because cloud-native applications exist as a series of small, discrete units of functionality, cloud-native teams can build and update them using agile philosophies like <a href="https://www.infoworld.com/article/2255028/what-is-devops-transforming-software-development.html">DevOps</a>, which promotes <a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">rapid, iterative CI/CD development</a>. This enables teams to deliver business value more quickly and more reliably.</p>



<p class="wp-block-paragraph">The virtualized nature of cloud environments also make them great candidates for <a href="https://www.infoworld.com/article/2259359/what-is-infrastructure-as-code-automating-your-infrastructure-builds.html">infrastructure as code</a> (IaC), a practice in which teams use tools like <a href="https://developer.hashicorp.com/terraform/intro">Terraform</a>, <a href="https://www.pulumi.com/">Pulumi</a>, and <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html">AWS CloudFormation</a>, to manage infrastructure declaratively and version those declarations just like application code. IaC boosts automation, repeatability, and resilience across environments—all big advantages in the cloud world. IaC also goes hand-in-hand with the concept of <em>immutable infrastructure</em>—the idea that, once deployed, infastructure-level entities like virtual machines, containers, or network appliances don’t change, which makes them easier to manage and secure. IaC stores declarative configuration code in version control, which creates an audit log of any changes.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" src="https://b2b-contenthub.com/wp-content/uploads/2025/04/5_things_cloud_native.jpg?quality=50&amp;strip=all&amp;w=1024" alt="Chart listing five things to love and five things to fear when considiering cloud native" class="wp-image-3970036" width="1024" height="472" sizes="auto, (max-width: 1024px) 100vw, 1024px"><figcaption class="wp-element-caption"><p>There’s a lot to love about cloud-native architectures, but there are also several things to be wary of when considering it.</p>
</figcaption></figure><p class="imageCredit">Foundry</p></div>



<h2 class="wp-block-heading"><strong>How the cloud-native stack is expanding</strong></h2>



<p class="wp-block-paragraph">As cloud-native development becomes the norm, the cloud-native ecosystem is expanding; the CNCF maintains a graphical representation of what it calls the  <a href="https://landscape.cncf.io/">cloud native landscape</a> that hammers home to expansive and bewildering variety of products, services, and open source projects that contribute to (and seek to profit from) to cloud-native computing. And there are a number of areas where new and developing tools are complicating the picture sketched out by the pillars we discussed above.   </p>



<p class="wp-block-paragraph"><strong>An expanding Kubernetes ecosystem.</strong> <a href="https://www.infoworld.com/article/2266945/what-is-kubernetes-scalable-cloud-native-applications.html">Kubernetes </a>is complex, and teams now rely on an <a href="https://www.infoworld.com/article/2265338/13-tools-that-make-kubernetes-better.html">entire ecosystem of projects </a>to get the most out of it: <a href="https://www.infoworld.com/article/2264445/helm-3-package-manager-arrives-for-kubernetes.html">Helm</a> for packaging, <a href="https://argo-cd.readthedocs.io/en/stable/">ArgoCD </a>for GitOps-style deployments, and <a href="https://kustomize.io/">Kustomize </a>for configuration management. And just as Kubernetes augmented Docker for enterprise-scale deployments. Kubernetes itself has been augmented and expanded by <a href="https://www.infoworld.com/article/2261159/what-is-a-service-mesh-easier-container-networking.html">service mesh</a> offerings like <a href="https://istio.io/">Istio </a>and <a href="https://linkerd.io/">Linkerd</a><strong>, </strong>which offer fine-grained traffic control and improved security</p>



<p class="wp-block-paragraph"><strong>Observability needs. </strong>The complex and distributed world of cloud-native computing requires in-depth <a href="https://www.infoworld.com/article/2262666/what-is-observability-software-monitoring-on-steroids.html">observability</a> to ensure that developers and admins have a handle on what’s happening with their applications. <a href="https://www.infoworld.com/article/2337343/what-observability-means-for-cloud-operations.html">Cloud-native observability</a> uses distributed tracing and aggregated logs to provide deep insight into performance and reliability. Tools like <a href="https://www.infoworld.com/article/2246709/prometheus-unbound-open-source-cloud-monitoring.html">Prometheus</a>, <a href="https://www.infoworld.com/article/2337267/grafana-shining-a-light-into-kubernetes-clusters.html">Grafana</a>, <a href="https://www.cncf.io/projects/jaeger/">Jaeger</a>, and <a href="https://opentelemetry.io/">OpenTelemetry</a> support comprehensive, real-time observability across the stack.</p>



<p class="wp-block-paragraph"><strong>Serverless computing.  </strong><a href="https://www.infoworld.com/article/2261831/what-is-serverless-serverless-computing-explained.html">Serverless computing</a>, particularly in its function-as-a-service guise, offers to strip needed compute resources down to their bare minimum, with functions running on service provider clouds using exactly as much as they need and no more. Because these services can be exposed as endpoints via APIs, they are increasingly integrated into distributed applications, operating side-by-side with functionality provided by containerized microservices. Watch out, though: the big FaaS providers (<a href="https://www.infoworld.com/article/2265860/aws-lambda-tutorial-get-started-with-serverless-computing.html">Amazon</a>, <a href="https://www.infoworld.com/article/2255377/how-to-work-with-azure-functions-in-csharp.html">Microsoft</a>, and <a href="https://www.infoworld.com/article/2243861/google-takes-aims-at-aws-lambda-with-cloud-functions.html">Google</a>) would love to lock you in to their ecosystems.  </p>



<p class="wp-block-paragraph"><strong>FinOps. </strong><a href="http://infoworld.com/article/2238873/what-is-cloud-computing.html">Cloud computing</a> was initially billed as a way to cut costs — no need to pay for an in-house data center that you barely use — but in practice it replaces capex with opex, and sometimes you can run up truly shocking cloud service bills if you aren’t careful. Serverless computing is one way to cut down on those costs, but financial operations, or <a href="https://www.cio.com/article/416337/what-is-finops-your-guide-to-cloud-cost-management.html">FinOps</a>, is a more systematic discipline that aims to aligns engineering, finance, and product to optimize cloud spending. <a href="https://www.infoworld.com/article/2338592/6-finops-best-practices-to-reduce-cloud-costs.html">FinOps best practices</a> make use of those observability tools to best determine what departments and applications are eating up resources.</p>



<h2 class="wp-block-heading"><strong>How cloud-native architecture is adapting to AI workloads</strong></h2>



<p class="wp-block-paragraph">Enterprises deploy larger AI models and make use of more and more real-time inference services. That’s putting demands on cloud-native systems and forcing them to adapt to remain scalable and reliable.</p>



<p class="wp-block-paragraph">For instance, organizations are <a href="https://www.infoworld.com/article/4057189/the-rise-of-ai-ready-private-clouds.html">re-engineering cloud environments</a> around GPU-accelerated clusters, low-latency networking, and predictable orchestration. These needs align with established cloud-native patterns: containers package AI services consistently, while Kubernetes provides resilient scheduling and horizontal scale for inference workloads that can spike without warning.</p>



<p class="wp-block-paragraph">Kubernetes itself is <a href="https://www.infoworld.com/article/4045563/evolving-kubernetes-for-generative-ai-inference.html">changing to better support AI inference</a>, adding hardware-aware scheduling for GPUs, model-specific autoscaling behavior, and deeper observability into inference pipelines. These enhancements make Kubernetes a more natural platform for serving generative AI workloads.</p>



<p class="wp-block-paragraph">AI’s resource demands are amplifying traditional cloud-native challenges. Observability becomes more complex as inference paths span GPUs, CPUs, vector databases, and distributed storage. <a href="https://www.cio.com/article/416337/what-is-finops-your-guide-to-cloud-cost-management.html">FinOps</a> teams contend with cost volatility from training and inference bursts. And security teams must track new risks around model provenance, data access, and supply-chain integrity.</p>



<h2 class="wp-block-heading"><strong>Application frameworks for building distributed cloud-native apps</strong></h2>



<p class="wp-block-paragraph">Microsoft’s Aspire is one of the most visible examples of a shift towards application frameworks to simplify how teams build distributed systems. Opinionated frameworks like Aspire provide structure, observability, and integration out of the box so developer don’t need to stitch together containers, microservices, and orchestration tooling by hand.</p>



<p class="wp-block-paragraph">Aspire in particular is a <a href="https://www.infoworld.com/article/4023638/taking-net-aspire-for-a-spin.html">prescriptive framework for cloud-native applications</a>, bundling containerized services, environment configuration, health checks, and observability into a unified development model. Aspire provides defaults for service-to-service communication, configuration, and deployment, along with a built-in dashboard for visibility across distributed components.</p>



<p class="wp-block-paragraph">While Aspire was originally aligned with Microsoft’s .<a href="https://www.infoworld.com/article/2264488/what-is-the-net-framework-microsofts-answer-to-java.html">NET platform</a>,Redmond now sees it as having a<strong>  </strong><a href="https://www.infoworld.com/article/4085051/aspires-polyglot-future.html?utm_source=chatgpt.com">polyglot future</a>. This positions Aspire as part of a broader trend: frameworks that help teams build cloud-native, service-oriented systems without being locked into a single language ecosystem. Several other frameworks are gaining traction: Dapr provides a portable runtime that abstracts many of the plumbing tasks in cloud-native distributed applications, and Orleans offers an actor-model-based framework for large-scale systems in the .NET world, and Akka gives JVM teams a mature, reactive toolkit for elastic, resilient services.</p>



<h2 class="wp-block-heading"><strong>Frameworks and tools in the expanding cloud-native ecosystem</strong></h2>



<p class="wp-block-paragraph">While frameworks like Aspire simplify how developers compose and structure distributed applications, most cloud-native systems still depend on a broader ecosystem of platforms and operational tooling. This deeper layer is where much of the complexity—and innovation—of cloud-native computing lives, particularly as Kubernetes continues to serve as the industry’s control plane for modern infrastructure.</p>



<p class="wp-block-paragraph">Kubernetes provides the core abstractions for deploying and orchestrating containerized workloads at scale. Managed distributions such as Google Kubernetes Engine (GKE), Amazon EKS, <a href="https://www.infoworld.com/article/4058764/smoother-kubernetes-sailing-with-aks-automatic.html">Azure AKS</a>, and Red Hat OpenShift build on these primitives with security, lifecycle automation, and enterprise support. Platform vendors are increasingly automating cluster operations—upgrades, scaling, remediation—to reduce the operational burden on engineering teams.</p>



<p class="wp-block-paragraph">Surrounding Kubernetes is a rapidly expanding ecosystem of complementary frameworks and tools. <a href="https://www.infoworld.com/article/2261159/what-is-a-service-mesh-easier-container-networking.html">Service meshes</a> like Istio and Linkerd provide fine-grained traffic management, policy enforcement, and mTLS-based security across microservices. <a href="https://www.infoworld.com/article/2259088/what-is-gitops-extending-devops-to-kubernetes-and-beyond.html">GitOps</a> platforms such as Argo CD and Flux bring declarative, version-controlled deployments to cloud-native environments. Meanwhile, projects like Crossplane turn Kubernetes into a universal control plane for cloud infrastructure, letting teams provision databases, queues, and storage through familiar Kubernetes APIs. These tools illustrate how cloud-native development now spans multiple layers: developer-focused application frameworks like Aspire at the top, and a powerful, evolving Kubernetes ecosystem underneath that keeps modern distributed applications running.</p>



<h2 class="wp-block-heading"><strong>Advantages and challenges for cloud-native development</strong></h2>



<p class="wp-block-paragraph">Cloud native has become so ubiquitous that its advantages are almost taken for granted at this point, but it’s worth reflecting on the beneficial shift the cloud native paradigm represents. Huge, monolithic codebases that saw updates rolled out once every couple of years have been replaced by microservice-based applications that can be improved continuously. Cloud-based deployments, when managed correctly, make better use of compute resources and allow companies to offer their products as SaaS or PaaS services. </p>



<p class="wp-block-paragraph">But <a href="https://www.infoworld.com/article/2337882/the-downsides-of-cloud-native-solutions.html">cloud-native deployments come with a number of challenges</a>, too:</p>



<ul class="wp-block-list">
<li><strong>Complexity and operational overhead: </strong>You’ll have noticed by now that many of the cloud-native tools we’ve discussed, like service meshes and observability tools, are needed to deal with the complexity of cloud-native applications and environments. Individual microservices are deceptively simple, but coordinating them all in a distributed environment is a big lift.</li>



<li><strong>Security: </strong>More services executing on more machines, communicating by open APIs, all adds up to a bigger attack surface for hackers. <a href="https://www.csoonline.com/article/572501/managing-container-vulnerability-risks-tools-and-best-practices.html">Containers</a> and <a href="https://www.csoonline.com/article/3618243/securing-cloud-native-applications-why-a-comprehensive-api-security-strategy-is-essential.html">APIs</a> each have their own special security needs, and a <a href="https://www.infoworld.com/article/2259477/open-policy-agent-a-general-purpose-policy-engine-for-cloud-native.html">policy engine</a> can be an important tool for imposing a security baseline on a sprawling cloud-native app. <a href="https://www.csoonline.com/article/564095/what-is-devsecops-developing-more-secure-applications.html">DevSecOps</a>, which adds security to DevOps, has become an important cloud-native development practice to try to close these gaps.</li>



<li><strong>Vendor lock-in: </strong>This may come as a surprise, since cloud-native is based on open standards and open source. But there are differences in how the big cloud and serverless providers works, and once you’ve written code with one provider in mind, <a href="https://www.infoworld.com/article/2337012/get-used-to-cloud-vendor-lock-in.html">it can be hard to migrate elsewhere</a>.</li>



<li><strong>A persistent skills gap: </strong>Cloud-native computing and development may have years under its belt at this point, but the number of developers who are truly skilled in this arena is a smaller portion of the workforce than you’d think. Companies <a href="https://www.infoworld.com/article/3484912/a-strategic-road-map-for-navigating-the-cloud-skills-shortage.html">face difficult choices in bridging this skills gap</a>, whether that’s bidding up salaries, working to upskill current workers, or allowing remote work so they can cast a wide net. </li>
</ul>



<h2 class="wp-block-heading">Cloud native in the real world</h2>



<p class="wp-block-paragraph">Cloud native computing is often associated with giants like Netflix, Spotify, Uber, and AirBNB, where many of its technologies were pioneered in the early ’10s. But the CNCF’s <a href="https://www.cncf.io/case-studies/">Case Studies page</a> provides an in-depth look at how cloud native technologies are helping companies. Examples include the following:</p>



<ul class="wp-block-list">
<li>A UK-based payment technology company that can <a href="https://www.cncf.io/case-studies/form3/">switch between data centers and clouds</a> with zero downtime</li>



<li>A software company whose product collects and analyzes data from IoT devices — and can <a href="https://www.cncf.io/case-studies/tempestive/">scale up</a> as the number of gadgets grows</li>



<li>A Czech web service company that managed to <a href="https://www.cncf.io/case-studies/seznam/">improve performance while reducing costs</a> by migrating to the cloud</li>
</ul>



<p class="wp-block-paragraph">Cloud-native infrastructure’s capability to quickly scale up to large workloads also make it an attractive platform for developing AI/ML applications: another one of those CNCF case studies looks at how IBM uses Kubernetes to <a href="https://www.cncf.io/case-studies/ibmwatsonxassistant/">train its Watsonx assistant</a>. The big three providers are putting a lot of effort into pitching their platforms as the place for you to develop your own generative AI tools, with offerings like <a href="https://www.infoworld.com/article/3608598/microsoft-rebrands-azure-ai-studio-to-azure-ai-foundry.html">Azure AI Foundry,</a><a href="https://www.infoworld.com/article/3959648/google-unveils-firebase-studio-for-ai-app-development.html">Google Firebase Studio</a>, and <a href="https://www.infoworld.com/article/2336139/amazon-bedrock-a-solid-generative-ai-foundation.html">Amazon Bedrock</a>. It seems clear that cloud native technology is ready for what comes next.</p>



<h2 class="wp-block-heading">Learn more about related cloud-native technologies:</h2>



<ul class="wp-block-list">
<li><a href="https://www.infoworld.com/article/2256066/what-is-paas-platform-as-a-service-a-simpler-way-to-build-software-applications.html">Platform-as-a-service (PaaS) explained</a></li>



<li><a href="https://www.infoworld.com/article/2238873/what-is-cloud-computing.html">What is cloud computing</a></li>



<li><a href="https://www.infoworld.com/article/2256706/what-is-multicloud-the-next-step-in-cloud-computing.html">Multicloud explained</a></li>



<li><a href="https://www.infoworld.com/article/2259475/what-is-agile-methodology-modern-software-development-explained.html">Agile methodology explained</a></li>



<li><a href="https://www.infoworld.com/article/2259487/how-to-excel-in-agile-software-development.html">Agile development best practices</a></li>



<li><a href="https://www.infoworld.com/article/2255028/what-is-devops-transforming-software-development.html">Devops explained</a></li>



<li><a href="https://www.infoworld.com/article/2266905/devops-best-practices-the-5-methods-you-should-adopt.html">Devops best practices</a></li>



<li><a href="https://www.infoworld.com/article/2263327/what-are-microservices-your-next-software-architecture.html">Microservices explained</a></li>



<li><a href="https://www.infoworld.com/article/2253197/tutorial-how-to-build-microservices-apps.html">Microservices tutorial</a></li>



<li><a href="https://www.infoworld.com/article/2253801/what-is-docker-the-spark-for-the-container-revolution.html">Docker and Linux containers explained</a></li>



<li><a href="https://www.infoworld.com/article/2254159/how-to-get-started-with-kubernetes-2.html">Kubernetes tutorial</a></li>



<li><a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">CI/CD (continuous integration and continuous delivery) explained</a></li>



<li><a href="https://www.infoworld.com/article/2268012/get-started-with-cicd-automating-application-delivery-with-cicd-pipelines.html">CI/CD best practices</a></li>
</ul>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[What is GitOps? Extending devops to Kubernetes and beyond]]></title>
<description><![CDATA[Over the past decade, software development has been shaped by two closely related transformations. One is the rise of devops and continuous integration and continuous delivery (CI/CD), which brought development and operations teams together around automated, incremental software delivery.



The ...]]></description>
<link>https://tsecurity.de/de/3665667/ai-nachrichten/what-is-gitops-extending-devops-to-kubernetes-and-beyond/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665667/ai-nachrichten/what-is-gitops-extending-devops-to-kubernetes-and-beyond/</guid>
<pubDate>Mon, 13 Jul 2026 17:04:29 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p class="wp-block-paragraph">Over the past decade, software development has been shaped by two closely related transformations. One is the rise of <a href="https://www.infoworld.com/article/2255028/what-is-devops-bringing-dev-and-ops-together-for-better-software.html">devops</a> and <a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">continuous integration and continuous delivery</a> (CI/CD), which brought development and operations teams together around automated, incremental software delivery.</p>



<p class="wp-block-paragraph">The other is the shift from monolithic applications to distributed, cloud-native systems built from microservices and containers, typically managed by orchestration platforms such as <a href="https://www.infoworld.com/article/2266945/what-is-kubernetes-scalable-cloud-native-applications.html">Kubernetes</a>.</p>



<p class="wp-block-paragraph">While Kubernetes and similar platforms simplify many aspects of running distributed applications, operating these systems at scale is still complicated. Configuration sprawl, environment drift, and the need for rapid, reliable change all introduce operational challenges. GitOps emerged as a way to address those challenges by extending familiar devops and CI/CD techniques beyond application code and into infrastructure and system configuration.</p>



<p class="wp-block-paragraph">At the heart of GitOps is the concept of <a href="https://www.infoworld.com/article/2259359/what-is-infrastructure-as-code-automating-your-infrastructure-builds.html">infrastructure as code</a> (IaC). In a GitOps model, not only application code but also infrastructure definitions, deployment configurations, and operational settings are described in files stored in a version control system. Automated processes continuously compare the running system with those declarations and work to bring the live environment back into alignment when differences appear.</p>



<p class="wp-block-paragraph">In this approach, the version control repository serves as the system of record for how applications and their supporting infrastructure should look in production. Changes flow through the same review, approval, and automation pipelines that developers already use for software, bringing greater consistency, traceability, and repeatability to cloud-native operations.</p>



<p class="wp-block-paragraph">At a high level, GitOps refers to a set of operational practices for managing cloud-native systems using declarative configuration, version control, and automated reconciliation. Rather than treating infrastructure and application configuration as mutable runtime state, GitOps treats them as versioned artifacts that move through the same review, testing, and deployment processes as application code.</p>



<h2 class="wp-block-heading"><strong>GitOps defined</strong></h2>



<p class="wp-block-paragraph">The term GitOps was originally coined and popularized by Weaveworks, which helped formalize the approach in the context of Kubernetes operations. While that early work shaped the way GitOps was discussed and implemented, GitOps has since evolved into a broadly adopted, vendor-neutral pattern. Today, it describes a shared set of ideas rather than a specific product or platform.</p>



<p class="wp-block-paragraph">The defining characteristic of GitOps is its reliance on declarative configuration stored in a version control system. Instead of issuing imperative commands to change live systems, teams describe the desired state of applications and infrastructure in configuration files. Automated agents then continuously compare that declared state with what is actually running and work to reconcile any differences. This pull-based model—where systems converge toward the desired state defined in version control—provides built-in drift detection, repeatability, and a clear audit trail for every change.</p>



<p class="wp-block-paragraph">Because GitOps centers on configuration files stored in a version control system, familiar software development practices carry over naturally. Changes are proposed through commits, reviewed before being accepted, and tracked over time. Rollbacks are accomplished by reverting to known-good versions, and the history of how a system evolved is preserved alongside the configuration itself.</p>



<p class="wp-block-paragraph">While the use of <a href="https://www.infoworld.com/article/2334697/what-is-git-version-control-for-collaborative-programming.html">Git</a> as the version control system is not strictly required, it has become the default choice because of its ubiquity in modern devops workflows and its strong support for collaboration and change management, so its place in the name has stuck.</p>



<aside class="sidebar">
<h3><strong> GitOps vs. IaC </strong></h3>
<p>Infrastructure as code (IaC) and GitOps are closely related, but they solve different problems. </p>
<p>IaC focuses on how infrastructure is defined. Servers, networks, and services are described using declarative configuration files, which are then applied by automation tools. GitOps builds on IaC by adding an operating model around those definitions. In a GitOps workflow, the desired state of systems is stored in a version control repository and treated as the system of record. Automated agents continuously compare the running environment with that desired state and reconcile any differences.</p>
<p>The key distinction is persistence. IaC provisions infrastructure; GitOps keeps systems in the intended state over time. By using pull-based reconciliation and continuous drift detection, GitOps extends IaC into a day-to-day operational discipline.
</p>

</aside>



<h2 class="wp-block-heading"><strong>What is the CI/CD process?</strong></h2>



<p class="wp-block-paragraph">A complete look at CI/CD is beyond the scope of this article—<a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">see the InfoWorld explainer on the subject</a>—but we need to say a few words about CI/CD because it’s at the core of how GitOps works. The <em>continuous integration</em> half of CI/CD is enabled by version control repositories like Git: Developers can make constant small improvements to their codebase, rather than rolling out huge, monolithic new versions every few months or years. The <em>continuous deployment</em> piece is made possible by automated systems called <em>pipelines</em> that build, test, and deploy the new code to production.</p>



<p class="wp-block-paragraph">Again, we keep talking about <em>code </em>here, and that usually summons up visions of executable code written in a programming language such as C or Java or JavaScript. But in GitOps, the “code” we’re managing is largely made up of configuration files. This isn’t just a minor detail — it’s at the heart of what GitOps does. These config files are, as we’ve said, the “single source of truth” describing what our system should look like. They are <em>declarative </em>rather than instructive. That means that instead of saying “start up ten servers,” the configuration file will simply say, “this system includes ten servers.”</p>



<p class="wp-block-paragraph"><strong>GitOps and Kubernetes</strong></p>



<p class="wp-block-paragraph">GitOps first took hold in the Kubernetes ecosystem, where declarative configuration and continuous reconciliation are core design principles. As a result, Kubernetes remains the most common and best-understood environment for applying GitOps practices. A typical GitOps-driven update process for a Kubernetes application looks like this:</p>



<ol start="1" class="wp-block-list">
<li>A developer proposes a change by committing updated application code or configuration to a version control repository, usually through a pull request.</li>



<li>That change is reviewed and approved, then merged into the main branch.</li>



<li>The merge triggers an automated CI/CD pipeline that tests the change, builds new artifacts if needed, and publishes them to a registry.</li>



<li>A GitOps controller or similar automated agent detects the updated desired state stored in version control.</li>



<li>The controller compares that desired state with the current state of the Kubernetes cluster and applies the necessary changes to bring the cluster back into alignment.</li>
</ol>



<p class="wp-block-paragraph">This pull-based reconciliation loop—where the cluster continuously converges toward the desired state defined in version control—is central to how GitOps works in practice. While Kubernetes provides a natural fit for this model, it represents just one canonical use case. The same patterns increasingly apply to infrastructure provisioning, policy enforcement, and multi-cluster operations beyond Kubernetes itself.</p>



<h2 class="wp-block-heading"><strong>GitOps tooling in practice: Argo CD, Flux, and the ecosystem</strong></h2>



<p class="wp-block-paragraph">GitOps is enabled by a set of tools that embody the principles we’ve outlined, with some open-source projects emerging as de facto standards in cloud-native environments.</p>



<p class="wp-block-paragraph">At the center of the GitOps ecosystem is Argo CD, an open-source controller that continuously monitors a version control repository and ensures that the state of running systems matches the declared desired state. Argo CD is widely used in Kubernetes environments because it directly implements pull-based reconciliation: it compares the desired state stored in Git with the cluster’s actual state and applies changes to correct any drift.</p>



<p class="wp-block-paragraph">Alongside Argo CD, Flux is another prominent open source GitOps engine. Both Flux and Argo CD help teams adopt GitOps workflows by managing the synchronization loop between code and runtime, but they differ in operational philosophy, integration surfaces, and ecosystem fit.</p>



<p class="wp-block-paragraph">GitOps tooling often appears as part of broader platforms or integrated stacks rather than as isolated utilities. For example, <a href="https://www.infoworld.com/article/4006297/top-6-multicloud-management-systems.html">multicloud and cluster management solutions</a> now routinely include GitOps support, with Argo CD or compatible controllers bundled alongside deployment, policy, and governance capabilities.</p>



<p class="wp-block-paragraph">In addition to Flux and Argo CD, a range of auxiliary tools contribute to a complete GitOps ecosystem: policy as code engines (e.g., Open Policy Agent), drift detection systems, and infrastructure provisioning tools that mesh with Git-centric workflows.</p>



<h2 class="wp-block-heading"><strong>GitOps, devops, and normalization</strong></h2>



<p class="wp-block-paragraph">GitOps grew out of the same forces that drove devops into mainstream IT practice, and in its early days, GitOps was often discussed as a distinct extension of devops, specifically tailored to managing declarative infrastructure and Kubernetes-centric systems. At the time, GitOps was still relatively new and <a href="http://infoworld.com/article/2265546/why-gitops-isnt-ready-for-the-mainstream-yet.html">not yet widely adopted outside cloud-native pioneers</a>.</p>



<p class="wp-block-paragraph">Over the last several years, however, GitOps practices have become deeply woven into how teams operate modern cloud environments. Rather than being treated as an optional add-on or marketing term, the core ideas of GitOps — using version-controlled, declarative configuration and automated reconciliation loops to continuously align running systems with intended state — are now part of standard operational practice in many Kubernetes-centric shops. In this sense, GitOps has shifted from a buzzword about what might be possible to a baseline pattern for cloud-native operations, much like devops itself did years earlier.</p>



<p class="wp-block-paragraph">In environments where Kubernetes and declarative systems are the norm, GitOps workflows are the default way teams manage and deploy change. Many organizations now implement these patterns without explicitly calling them “GitOps,” just as few teams today explicitly say they do “CI/CD” even though continuous pipelines are taken for granted. The term has become less prominent in marketing, but its practices are often embedded in pipelines, controllers, and platform tooling.</p>



<p class="wp-block-paragraph">That normalization shows up in how GitOps workflows are woven into broader operational frameworks. For example, <a href="https://www.infoworld.com/article/2338225/what-is-platform-engineering-evolving-devops.html">platform engineering</a> teams frequently build internal developer platforms that encapsulate GitOps patterns behind standardized developer APIs, making the pattern invisible to most application teams while still providing the auditability and automation that GitOps promises.</p>



<h2 class="wp-block-heading"><strong>GitOps beyond Kubernetes: infrastructure, policy, and drift</strong></h2>



<p class="wp-block-paragraph">While GitOps first gained traction as a way to manage Kubernetes deployments, its core principles apply broadly to infrastructure and operational concerns beyond any single orchestration platform. GitOps treats desired state as declarative configuration stored in version control and uses automated reconciliation to ensure running systems align with that state. That pattern naturally extends to infrastructure provisioning, policy enforcement, configuration drift detection, and governance workflows across diverse environments.</p>



<p class="wp-block-paragraph">In modern operational stacks, infrastructure is increasingly defined declaratively, whether through Kubernetes manifests, Terraform modules, or other infrastructure-as-code formats. Storing these declarations in version control enables the same peer-review, auditability, and rollback practices developers already use for application code. Automated tooling then continuously detects when the live infrastructure diverges from the declared state and works to bring it back into alignment, reducing the risk of configuration drift and inadvertent misconfigurations.</p>



<p class="wp-block-paragraph">Configuration drift — the state where an environment has diverged from what’s declared in version control — remains a major operational headache, especially in complex, dynamic systems. Drift can arise from ad hoc fixes, emergency updates, or manual changes made outside normal pipelines, and it can lead to inconsistencies, outages, and security gaps. By continually checking running systems against the desired state in Git and reconciling deviations automatically, GitOps workflows help teams keep environments predictable and auditable.</p>



<p class="wp-block-paragraph">Policy enforcement and compliance are another natural extension of GitOps patterns. As organizations adopt declarative practices, policy-as-code engines and drift detection systems can be woven into GitOps pipelines to validate that proposed configurations meet security, compliance, or operational standards before they’re ever applied to running systems. Embedding policy checks into declarative workflows brings consistency to governance while preserving the automation and speed that devops teams expect.</p>



<h2 class="wp-block-heading"><strong>GitOps – beyond Kubernetes</strong></h2>



<p class="wp-block-paragraph">GitOps began as a way to bring devops discipline to Kubernetes operations, but its longer-term impact has been more subtle. In many ways, it’s been absorbed into the fabric of modern cloud-native operations, where declarative configuration, version control, and automated reconciliation are taken for granted. Today, GitOps is less about a specific set of tools or a named practice and more about an operational mindset. By treating infrastructure and configuration as versioned, auditable artifacts and relying on automation to enforce consistency, GitOps helps teams manage complexity at scale. Even as the term itself fades from the spotlight, the practices it introduced continue to shape how distributed systems are built, deployed, and operated.</p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple's corporate espionage suit against OpenAI isn't the first]]></title>
<description><![CDATA[Since its founding, Sam Altman's OpenAI has been at the center of multiple controversies, with Apple's intellectual property theft suit being just the latest chapter. Here's the story so far about what's been alleged over the last decade.Sam Altman of OpenAIThe artificial intelligence development...]]></description>
<link>https://tsecurity.de/de/3665549/ios-mac-os/apples-corporate-espionage-suit-against-openai-isnt-the-first/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665549/ios-mac-os/apples-corporate-espionage-suit-against-openai-isnt-the-first/</guid>
<pubDate>Mon, 13 Jul 2026 16:24:17 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Since its founding, Sam Altman's OpenAI has been at the center of multiple controversies, with Apple's intellectual property theft suit being just the latest chapter. Here's the story so far about what's been alleged over the last decade.<br><br><div><img src="https://photos5.appleinsider.com/gallery/68224-143841-openaialtman-xl.jpg" alt="Black-and-white portrait of a man with short hair and slight smile, shown from shoulders up, with a large white OpenAI knot logo behind him on a gray background" height="738"><br><span>Sam Altman of OpenAI</span></div><br>The artificial intelligence development wave has greatly affected the tech industry. As usual, this also includes accusations, threats, and lawsuits.<br><br>OpenAI is no different, as it has attracted many different lawsuits in its short existence. As you might expect, Apple is central to some, and peripheral to others.<br><br><br> <a href="https://appleinsider.com/articles/26/07/13/apples-corporate-espionage-suit-against-openai-isnt-the-first?utm_source=rss">Continue Reading on AppleInsider</a> | <a href="https://forums.appleinsider.com/discussion/244941?urm_source=rss">Discuss on our Forums</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[What’s Coming to Netflix This Week (July 13 to 19): Every New Movie and Show]]></title>
<description><![CDATA[Netflix has a packed schedule for the week of July 13 through July 19, 2026, with new original series, returning favorites, blockbuster movies, documentaries, live sports, and international releases. Whether you enjoy romantic dramas, comedy, thrillers, anime, or action franchises, this week's li...]]></description>
<link>https://tsecurity.de/de/3665389/ios-mac-os/whats-coming-to-netflix-this-week-july-13-to-19-every-new-movie-and-show/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665389/ios-mac-os/whats-coming-to-netflix-this-week-july-13-to-19-every-new-movie-and-show/</guid>
<pubDate>Mon, 13 Jul 2026 15:25:47 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Netflix has a packed schedule for the week of July 13 through July 19, 2026, with new original series, returning favorites, blockbuster movies, documentaries, live sports, and international releases. Whether you enjoy romantic dramas, comedy, thrillers, anime, or action franchises, this week's lineup offers something for every kind of viewer.



The biggest highlights include the feature-length finale Heartstopper Forever, Will Ferrell's new comedy series The Hawk, and the arrival of the complete Hunger Games film collection. Netflix is also expanding its lineup with live sports, podcasts, Korean dramas, and Japanese series throughout the week.



Biggest Netflix Releases This Week



TitleRelease DateGenreHeartstopper ForeverJuly 17Romance, DramaThe Hawk Season 1July 16ComedyThe Hunger Games CollectionJuly 14Action, Sci-FiQuarterback Season 3July 14Sports DocumentaryThe Ultimatum: Marry or Move On Season 4July 15RealityThe East PalaceJuly 17Fantasy K-DramaThe Walking Dead: Daryl Dixon Season 3July 19Horror, Action



Top Picks You Shouldn't Miss



Heartstopper Forever




https://www.youtube.com/watch?v=locuQ-skySE




Nick and Charlie return for one final chapter in Heartstopper Forever, a feature-length special that concludes one of Netflix's most popular coming-of-age romances. As Nick prepares for university, both characters face difficult choices about their future together, while their friends also begin new stages of adulthood. The film stars Kit Connor and Joe Locke and arrives on Friday, July 17.



The Hawk




https://www.youtube.com/watch?v=sSRJ6PXHx88




Will Ferrell headlines Netflix's newest comedy series as Lonnie "The Hawk" Hawkins, a former golf champion who refuses to retire. Despite his age and injuries, he attempts one final comeback while competing against his talented son. The series premieres on Thursday, July 16.



The Hunger Games Collection



Fans of dystopian action can binge the entire franchise beginning Tuesday, July 14. Netflix is adding:




The Hunger Games (2012)



Catching Fire (2013)



Mockingjay Part 1 (2014)



Mockingjay Part 2 (2015)



The Ballad of Songbirds &amp; Snakes (2023)




The addition of the 2023 prequel makes this one of the biggest licensed movie collections arriving this month.



Full Netflix Release Schedule



DateNew ReleasesJuly 13 (Monday)Golden Kamuy: The Abashiri Prison Raid, Hot Ones: Extra Heat, Jim Thorpe: Lit by Lightning, Mile End Kicks, MLB Home Run Derby (LIVE), On Purpose with Jay ShettyJuly 14 (Tuesday)Quarterback Season 3, Technically, The Hunger Games collectionJuly 15 (Wednesday)Snowden, The Tick Seasons 1 and 2, The Ultimatum Season 4July 16 (Thursday)The Hawk, Me Before Me, Love You So Bad, The Body in the LockerJuly 17 (Friday)Heartstopper Forever, Heartstopper Forever: Official Podcast, 23 000 Lives, Desire, The East Palace, The Map of LongingJuly 18 (Saturday)Spooky in LoveJuly 19 (Sunday)The Walking Dead: Daryl Dixon Season 3, Soar High!, You Can't Expense This!



Other Notable Arrivals



Several additional releases deserve attention this week.




Quarterback Season 3 follows NFL stars Jayden Daniels, Baker Mayfield, Cam Ward, and Joe Flacco through another football season.



The East Palace introduces a supernatural mystery set inside a haunted royal palace.



23 000 Lives tells the true story of volunteers rescuing refugees in the Mediterranean.



Desire delivers a suspenseful Mexican thriller centered on a dangerous affair.



On Purpose with Jay Shetty expands the popular podcast into a Netflix video series featuring celebrity interviews.




Quick Watch Guide



Looking ForWatchRomanceHeartstopper ForeverComedyThe HawkActionThe Hunger Games CollectionReality TVThe Ultimatum Season 4SportsQuarterback Season 3DocumentaryJim Thorpe: Lit by LightningK-DramaThe East Palace, Spooky in LoveZombie DramaThe Walking Dead: Daryl Dixon Season 3



Final Thoughts



The week of July 13 to July 19 is one of Netflix's strongest lineups this month. The emotional conclusion of Heartstopper, the arrival of The Hunger Games franchise, and Will Ferrell's new comedy The Hawk headline a schedule that also includes documentaries, live sports, reality shows, anime, and international originals.



If you're planning a weekend binge, this week's releases provide plenty of options across every major genre.]]></content:encoded>
</item>
<item>
<title><![CDATA[Security updates for Monday]]></title>
<description><![CDATA[Security updates have been issued by Debian (chromium, libxfont, mesa, opam, and wireless-regdb), Fedora (acl, attr, chromium, cjson, composer, docker-compose, jfrog-cli, librabbitmq, libssh2, libXfont2, log4cxx, OpenImageIO, openssh, p11-kit, perl-Crypt-DSA, perl-HTML-Gumbo, prometheus, python-d...]]></description>
<link>https://tsecurity.de/de/3665263/linux-tipps/security-updates-for-monday/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665263/linux-tipps/security-updates-for-monday/</guid>
<pubDate>Mon, 13 Jul 2026 14:41:08 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Security updates have been issued by <b>Debian</b> (chromium, libxfont, mesa, opam, and wireless-regdb), <b>Fedora</b> (acl, attr, chromium, cjson, composer, docker-compose, jfrog-cli, librabbitmq, libssh2, libXfont2, log4cxx, OpenImageIO, openssh, p11-kit, perl-Crypt-DSA, perl-HTML-Gumbo, prometheus, python-dulwich, python-idna, python-pillow, python-tornado, sssd, tmux, upower, webkitgtk, xorg-x11-server, and xorg-x11-server-Xwayland), <b>Mageia</b> (libarchive and vim), <b>Oracle</b> (389-ds:1.4, buildah, cups, edk2, freerdp, golang, grafana, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, kernel, libexif, libsolv, libtasn1, libxml2, nginx:1.24, nginx:1.26, nodejs:22, nodejs:24, oci-seccomp-bpf-hook, podman, postgresql:18, python-urllib3, tigervnc, tomcat, unbound, and xorg-x11-server), <b>Slackware</b> (p11-kit), and <b>SUSE</b> (agama, dash, dracut, flannel, go1.26, gsasl, gstreamer-plugins-good, ImageMagick, imagemagick, kernel, krb5, krb5, krb5-mini, libIex-3_4-33, libmbedtls23, libxfont2, nasm, nghttp2, perl-CGI-Session, perl-dbi, perl-List-SomeUtils-XS, python-pillow, python-social-auth-app-django, python-urllib3, python313-Django4, python313-Django6, python313-pytest-html, python313-sqlparse, python313-websockets, rclone, rust-keylime, rustup, sccache, spectre-meltdown-checker, sssd, terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid, thunderbird, tiff, traefik2, xorg-x11-server, and xwayland).]]></content:encoded>
</item>
<item>
<title><![CDATA[Rust-proof your code with our new Testing Handbook chapter]]></title>
<description><![CDATA[We’ve added a new chapter to our Testing Handbook: a comprehensive guide to security testing Rust programs. This chapter covers the tools and techniques we use at Trail of Bits to validate the security of Rust programs and systems.

fn
main()
{(|f:&dyn
Fn(u128)->Box]]></description>
<link>https://tsecurity.de/de/3665022/it-security-nachrichten/rust-proof-your-code-with-our-new-testing-handbook-chapter/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3665022/it-security-nachrichten/rust-proof-your-code-with-our-new-testing-handbook-chapter/</guid>
<pubDate>Mon, 13 Jul 2026 13:09:13 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>We’ve added a new chapter to our <a href="https://appsec.guide/">Testing Handbook</a>: a comprehensive guide to security testing Rust programs. This chapter covers the tools and techniques we use at Trail of Bits to validate the security of Rust programs and systems.</p>
<div>
<div class="highlight"><pre tabindex="0"><code class="language-rust" data-lang="rust"><span><span><span>fn</span>
</span></span><span><span><span>main</span>()<span>
</span></span></span><span><span><span></span>{(<span>|</span>f:<span>&amp;</span><span>dyn</span><span>
</span></span></span><span><span><span></span><span>Fn</span>(<span>u128</span>)-&gt;<span>Box</span><span>&lt;</span><span>
</span></span></span><span><span><span></span><span>dyn</span><span> </span><span>Iterator</span><span>&lt;</span>Item<span>=</span><span>
</span></span></span><span><span><span></span><span>char</span><span>&gt;+</span><span>'static</span><span>&gt;|</span>f(<span>*</span>[<span>&amp;</span>(<span>
</span></span></span><span><span><span></span><span>0x7B736D70683F73</span><span>u128</span><span>&lt;&lt;</span><span>64</span><span>|</span><span>
</span></span></span><span><span><span></span><span>0x7A6A6D7C3F7A667D</span>),<span>&amp;</span>(<span>0x7B736D</span><span>u128</span><span>
</span></span></span><span><span><span></span><span>&lt;&lt;</span><span>64</span><span>|</span><span>0x70683F7073737A77</span>)][((std::hint::
</span></span><span><span><span>black_box</span>(<span>0.0</span><span>f64</span>)<span>/</span><span>0.0</span>).to_bits()<span>&gt;&gt;</span><span>63</span>)<span>as</span><span> </span><span>usize</span>])<span>
</span></span></span><span><span><span></span>.for_each(<span>|</span>c<span>|</span><span>print!</span>(<span>"</span><span>{c}</span><span>"</span>)))(<span>Box</span>::leak(<span>Box</span>::new(<span>|</span>n:
</span></span><span><span><span>u128</span><span>|</span><span>Box</span>::new(std::iter::successors(<span>Some</span>(n),<span>|&amp;</span>n<span>|</span><span>Some</span>(n<span>&gt;&gt;</span><span>8</span>)<span>
</span></span></span><span><span><span></span>).take_while(<span>|&amp;</span>n<span>|</span>n<span>&gt;</span><span>0</span>).map(<span>|</span>n<span>|</span>((n<span> </span><span>as</span><span> </span><span>u8</span>)<span>^</span><span>0x1F</span>)<span>as</span><span> </span><span>char</span>))<span>as</span><span> </span>_)))}</span></span></code></pre></div>
</div>
<h2>What’s in the chapter</h2>
<p>The chapter starts with a security overview of what Rust’s guarantees do and don’t cover, including underappreciated issues like unwind safety, nondeterminism, and arithmetic errors. This leads into an overview of dynamic analysis, which covers a range of boosters for unit tests, how to use Miri to detect undefined behavior, property testing with <code>proptest</code>, coverage measurement, and mutation testing. The static analysis section then covers Clippy in depth, including a list of our favorite lints.</p>
<p>Beyond tooling, the chapter also covers what we’ve learned from auditing Rust codebases directly. Our gotchas and footguns checklist is a great reference for manual code reviews, and will help you find subtle issues like <code>a &amp; b == c</code> having different operator precedence than in C. The memory zeroization section offers three solutions to the tricky problem of guaranteeing that secrets are erased from memory.</p>
<p>Finally, the specialized testing sections cover tools like Kani (a model checker), and the supply chain section covers the full toolchain for vetting dependencies.</p>
<h2>Still oxidizing</h2>
<p>We’ve also <a href="https://github.com/trailofbits/skills/tree/main/plugins/rust-review">released rust-review</a>, a Claude Code plugin for automated Rust security reviews. Co-built with Aptos Labs, it targets over a dozen bug classes, from memory safety and concurrency hazards to FFI pitfalls and async cancellation issues. It’s a fast way to catch security issues in a Rust codebase before they make it to audit.</p>
<p>Our goal is to keep the handbook current as the Rust ecosystem evolves. If your favorite tool or gotcha isn’t covered, <a href="https://github.com/trailofbits/testing-handbook">submit a PR</a>. And if you need help securing your Rust systems, <a href="https://www.trailofbits.com/contact/">contact us</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[AI is freeing up capital. Most companies have no plan for what comes next]]></title>
<description><![CDATA[AI tools today enable faster processes, leaner operations and lower costs, making efficiency wins the new baseline. However, for many businesses, the strategy stops at those first wins.



This has created a growing leadership blind spot: Once you achieve AI ROI, how do you make the most of it? I...]]></description>
<link>https://tsecurity.de/de/3664864/it-security-nachrichten/ai-is-freeing-up-capital-most-companies-have-no-plan-for-what-comes-next/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3664864/it-security-nachrichten/ai-is-freeing-up-capital-most-companies-have-no-plan-for-what-comes-next/</guid>
<pubDate>Mon, 13 Jul 2026 12:08:25 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>AI tools today enable faster processes, leaner operations and lower costs, making efficiency wins the new baseline. However, for many businesses, the strategy stops at those first wins.</p>



<p>This has created a growing leadership blind spot: Once you achieve AI ROI, how do you make the most of it? If there is no clear reinvestment strategy, AI gains burn out quickly and disappear into the business without meaningfully compounding their value.</p>



<p>For CIOs, the next challenge is not just proving AI can make the business more efficient but deciding how those gains can build a stronger company and sustain growth over the long term.</p>



<h2 class="wp-block-heading">Start by investing in a crystal ball</h2>



<p>One of the smartest ways to reinvest AI gains is to improve how the business evaluates what is worth building in the first place.</p>



<p>Leaders who chase “cool” use cases without defining the business impact or path to ROI upfront often end up with systems that drain funds without creating compounding returns. Instead, a clear reinvestment strategy uses AI to assess the strongest use cases before scaling up.</p>



<p>AI tools today can help teams move from idea to prototype to impact analysis much faster than before. That makes it easier to identify which projects have a credible path to ROI and which ones can be filed away. Access to these quick insights allows businesses to test whether a use case has real value before committing larger engineering or model costs.</p>



<p>This is especially crucial right now as <a href="https://www.idc.com/resource-center/blog/ai-infrastructure-spending-caps-historic-year-at-90-billion-in-q4-2025-2029-spending-to-eclipse-1-trillion/">AI is becoming more costly as businesses scale it</a>. What looked inexpensive in early pilots can become far pricier once it is embedded in day-to-day work and as AI providers tokenize and meter its use. The more central AI becomes, the more intentional leaders need to be about where it is used, what it actually returns and how to reinvest those gains.</p>



<p>Not every workflow belongs in the same model. Not every task needs an agent. As AI vendors mature and monetization models evolve, the businesses that will win will be the ones that make those distinctions early, reinvest accordingly and keep building ahead of customer needs rather than reacting to them. Not every workflow belongs in the same model. Not every task needs an agent.</p>



<h2 class="wp-block-heading">Cycle ROI gains back into tooling</h2>



<p>Once AI activations start to show dividends, it’s time to reinvest in stronger tooling. This should include new AI tools that continue to advance the business, as well as continued investment in what has already worked. That compounding effect is ultimately what separates businesses that sustain AI-driven growth from those that plateau after early wins.</p>



<p>I’ve seen firsthand the benefits of investing in new tools that make AI more usable, repeatable and valuable in workflows. For example, automated product management tools enable rapid prototyping and product rationalization. Decision intelligence platforms can help teams simulate scenarios. Customer behavior modeling tools can help predict churn and shift customer demand patterns. These advanced solutions can help teams move from an idea to a working concept in days instead of months.</p>



<p>Smart reinvestment is about building the right technical mix for the outcomes the business <a>needs</a>, rather than funding more AI for its own sake. To maximize impact, start with tooling for governance and upskilling.</p>



<h3 class="wp-block-heading">1. (Re)invest in governance</h3>



<p>As AI usage spreads and matures across teams, products and functions, a strategic policy framework becomes all the more vital. CIOs should work to reinforce the governance foundations already in place so they can support broader adoption, rather than rebuilding new policy from scratch each time AI usage expands. This means reinvesting in shared standards, oversight mechanisms and supporting roles that make governance more durable and practical over time.</p>



<p>Without doubling down on governance, businesses risk creating siloed, disconnected pockets of experimentation. Those pockets quickly become expensive to monitor and difficult to secure, creating further risk to consistency, compliance and trust. The consequence is often wasted spend as experiments stall or overlap, or outcomes that are too fragmented to scale.</p>



<p>When businesses keep governance investment at the center of their reinvestment strategy, it becomes a force multiplier. It reduces duplication across teams, creates more commonality across products and makes it easier to expand AI use without increasing fragmentation or risk.</p>



<h3 class="wp-block-heading">2. Empower employees to grow</h3>



<p>Smart tools only create real value when people are equipped to use them well. That is why reinvestment should go beyond technology alone.</p>



<p>As AI tools become more powerful and accurate, the skills barrier to building something useful is dropping. Employees can get much closer to a viable concept much faster with AI, but that only works if businesses create learning pathways, academies and practical enablement that help teams use these tools well.</p>



<p>Smarter tooling can help product, operations and technology teams collaborate with fewer layers between idea and execution. As employees build new skills, they can stay closer to a single initiative from start to finish. That reduces handoffs, empowers employees to learn new skills and offers a more direct path from the original idea to the final result.</p>



<h2 class="wp-block-heading">Let AI ROI fund your fight against siloes</h2>



<p>Over the next few years, the businesses that pull ahead are not simply going to be the ones with the most AI pilots or the biggest efficiency gains. They will be the ones that invest AI ROI in bridging what has long been disconnected: systems, teams, workflows and ecosystems.</p>



<p>In telecom, for example, AI is already creating savings inside billing operations and other back-office work tied to the BSS layer. The smart move for telcos is not to stop at those savings, but to reinvest them in connecting their BSS and OSS, where fragmentation and siloes have long slowed telcos down.</p>



<p>Think about what that means in practice: instead of billing, service configuration and network operations functioning as separate systems with separate handoffs, AI can help orchestrate them. That makes it easier to move from order to activation to support with less internal friction, better visibility and fewer breakdowns between what was sold and what is actually delivered.</p>



<p>For the customer, that means a broadband outage, plan change or installation appointment is handled as one connected journey rather than a chain of handoffs. The outcome is a more connected operating model that makes the customer experience feel far less complex.</p>



<p>The same logic applies across industries. In banking, a customer with a mortgage, checking account and credit card at the same institution is often still treated as three separate relationships – because the underlying systems do not communicate. AI orchestration can change that, giving banks a unified view of the customer and employees the context to act on it.</p>



<p>Not using AI to do the same work faster, but using AI dividends to build a business that works better. That is what smart investment looks like.</p>



<h2 class="wp-block-heading">ROI is just the start</h2>



<p>AI can absolutely free up capital. That, however, is only the first chapter.</p>



<p>The bigger story is what leaders choose to do next: reinvest in better tooling, more consistent governance, smarter workforce enablement and operating models built to connect across silos. The payoff will be a more resilient, agile business ready for what’s next.</p>



<p><strong>This article is published as part of the Foundry Expert Contributor Network.</strong><br><a href="https://www.cio.com/expert-contributor-network/"><strong>Want to join?</strong></a></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple TV Confirms Dope Thief Season 2 Won’t Happen]]></title>
<description><![CDATA[Apple TV has officially decided not to move forward with Dope Thief Season 2, ending more than a year of uncertainty around Ridley Scott’s acclaimed crime drama. The series completed its eight-episode run in April 2025 and left enough room for another chapter, but Apple chose not to continue the ...]]></description>
<link>https://tsecurity.de/de/3663974/ios-mac-os/apple-tv-confirms-dope-thief-season-2-wont-happen/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3663974/ios-mac-os/apple-tv-confirms-dope-thief-season-2-wont-happen/</guid>
<pubDate>Mon, 13 Jul 2026 01:53:09 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple TV has officially decided not to move forward with Dope Thief Season 2, ending more than a year of uncertainty around Ridley Scott’s acclaimed crime drama. The series completed its eight-episode run in April 2025 and left enough room for another chapter, but Apple chose not to continue the story.



Producer Confirms Dope Thief’s Ending



Scott Free Productions Chief Content Officer David W. Zucker confirmed that the show will remain a one-season series.



Speaking to ScreenRant at the Italian Global Series 2026, Zucker explained that the creators designed Dope Thief to work as either a limited series or an ongoing drama. He said the series performed relatively well for Apple, although the company decided against ordering more episodes.



The crime drama followed Ray Driscoll and Manny Carvalho, two longtime friends who posed as DEA agents to rob drug dealers across Philadelphia. Their plan collapsed after they targeted a stash house already under federal surveillance, placing them inside a much larger criminal investigation.



Brian Tyree Henry and Wagner Moura led the cast, while Ridley Scott directed the opening episode. The series also received strong reviews, and Henry earned another Primetime Emmy nomination for his performance.



Apple has not explained its decision, although the confirmation now ends any remaining hopes for Dope Thief Season 2.]]></content:encoded>
</item>
<item>
<title><![CDATA[Agent Kim Reactivated Episode 7 Release Date and What to Expect]]></title>
<description><![CDATA[Agent Kim Reactivated Episode 7 will arrive on Friday, July 17, 2026. The next chapter continues Kim Do-hyeon’s increasingly dangerous mission after his daughter Min-ji becomes a target once again.



Agent Kim Reactivated Episode 7 release details




Release date: July 17, 2026



Broadcast tim...]]></description>
<link>https://tsecurity.de/de/3663969/ios-mac-os/agent-kim-reactivated-episode-7-release-date-and-what-to-expect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3663969/ios-mac-os/agent-kim-reactivated-episode-7-release-date-and-what-to-expect/</guid>
<pubDate>Mon, 13 Jul 2026 01:35:53 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Agent Kim Reactivated Episode 7 will arrive on Friday, July 17, 2026. The next chapter continues Kim Do-hyeon’s increasingly dangerous mission after his daughter Min-ji becomes a target once again.



Agent Kim Reactivated Episode 7 release details




Release date: July 17, 2026



Broadcast time: 9:50 p.m. KST



Streaming platform: Netflix



Genre: Action, crime, comedy, mystery and thriller



Total episodes: 10



Release schedule: New episodes every Friday and Saturday



Main cast: So Ji-sub, Choi Dae-hoon, Yoon Kyung-ho, Joo Sang-wook, Son Na-eun and Seo Su-min




Episode 7 will be followed by Episode 8 on Saturday, July 18. The final two episodes will arrive on July 24 and July 25, bringing the limited series to an end.



What will happen in Agent Kim Reactivated Episode 7?



Spoilers ahead for Episodes 5 and 6.



The Episode 7 preview shows Kim transporting Min-ji after finally reaching her. However, their vehicle comes under attack, and Min-ji is kidnapped again before Kim can take her somewhere safe. The new abduction appears to involve Joo Kang-chan, who is now openly challenging Kim.



Kim’s search will also bring him into another confrontation with Gold Tooth and the North Korean operative connected to Agent 66. Someone from Kim’s former agency warns him that he may never see Min-ji again, suggesting that the kidnapping forms part of a wider plan linked to his past.



Kim’s past continues to shape the story



Episode 6 revealed more about Agent 66 and his final mission with Kim. Agent 66 suffered devastating injuries during an explosion and convinced Kim to survive, complete the mission and build a normal family life. That promise explains why Kim has protected his identity for so many years and why Min-ji remains his greatest weakness.



Episode 7 now places that promise under greater pressure. Kim must face enemies who understand his history while protecting the person who gave his new life meaning. Park Jin-cheol and Seong Han-su also appear to be in danger, which could force the three former operatives to fight together again.



The series is based on the Manager Kim webtoon and follows a quiet office worker who returns to his black-ops life after his teenage daughter disappears.



What do you expect from Agent Kim Reactivated Episode 7? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[SK Hynix CEO Warns 2027 Will Be Memory's 'Worst Year' Ever. Shortages May Outlast the Decade]]></title>
<description><![CDATA[The CEO of SK Hynix, one of the three largest DRAM producers, predicted to Reuters that the memory industry will see its "worst-ever" supply shortages in 2027, reports the hardware/gaming news site Wccftech:



SK Hynix has also forecasted that, given the current market demand, they will fall way...]]></description>
<link>https://tsecurity.de/de/3663700/it-security-nachrichten/sk-hynix-ceo-warns-2027-will-be-memorys-worst-year-ever-shortages-may-outlast-the-decade/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3663700/it-security-nachrichten/sk-hynix-ceo-warns-2027-will-be-memorys-worst-year-ever-shortages-may-outlast-the-decade/</guid>
<pubDate>Sun, 12 Jul 2026 20:07:52 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The CEO of SK Hynix, one of the three largest DRAM producers, predicted to Reuters that the memory industry will see its "worst-ever" supply shortages in 2027, reports the hardware/gaming news site Wccftech:



SK Hynix has also forecasted that, given the current market demand, they will fall way short of fulfilling the market demand, and that will continue beyond 2030. The comments from SK Hynix are in line with what Samsung and Micron executives have already said. Samsung has warned of 2027 being the worst year in terms of shortages and that things will continue this way till 2028 and beyond. Meanwhile, Micron has said that the current shortages are only the "first innings" and that both DRAM/NAND supply will be tight, as they are only able to meet 40-50% of the total market demand in the coming years. 


Heightened demand from AI customers and multi-year agreements further put pressure on the market. The big three DRAM makers have already prioritized premium DRAM segments such as HBM and LPDDR5X, while commodity memory such as DDR5, DDR4, and entry-level LPDDR RAM has taken a back seat. While these have boosted the profits of SK Hynix, Micron, and Samsung, they have devastated the consumer segment, which is facing the worst kind of price hikes that are affecting all sorts of components and platforms, including PCs, Smartphones, Consoles, etc... 

SK Hynix, like Samsung and Micron, is also preparing to embark on a multi-year and multi-billion dollar expansion plan with new fabs and facilities being laid out across South Korea. SK Hynix is also considering the construction of Fabs in the US, Japan, and Southeast Asia, though the final plans are yet to be cemented. Micron recently started construction of its new facility that will be used for DRAM production. As SK Hynix proudly marks its Nasdaq debut, its CEO's sobering forecast serves as a clear reminder: the memory industry is entering its most challenging chapter yet. With 2027 poised to bring the worst supply shortages in history and tight conditions likely persisting beyond 2030, the AI boom is reshaping the entire semiconductor landscape.
<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=SK+Hynix+CEO+Warns+2027+Will+Be+Memory's+'Worst+Year'+Ever.+Shortages+May+Outlast+the+Decade%3A+https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F26%2F07%2F12%2F1747258%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F26%2F07%2F12%2F1747258%2Fsk-hynix-ceo-warns-2027-will-be-memorys-worst-year-ever-shortages-may-outlast-the-decade%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://hardware.slashdot.org/story/26/07/12/1747258/sk-hynix-ceo-warns-2027-will-be-memorys-worst-year-ever-shortages-may-outlast-the-decade?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Exponential growth in DDoS attack volumes]]></title>
<description><![CDATA[Security threats such as distributed denial-of-service (DDoS) attacks disrupt businesses of all sizes, leading to outages, and worse, loss of user trust. These threats are a big reason why at Google we put a premium on service reliability that’s built on the foundation of a rugged network. To hel...]]></description>
<link>https://tsecurity.de/de/3662839/it-security-nachrichten/exponential-growth-in-ddos-attack-volumes/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3662839/it-security-nachrichten/exponential-growth-in-ddos-attack-volumes/</guid>
<pubDate>Sun, 12 Jul 2026 08:07:01 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div class="block-paragraph"><p>Security threats such as distributed denial-of-service (DDoS) attacks disrupt businesses of all sizes, leading to outages, and worse, loss of user trust. These threats are a big reason why at Google we put a premium on service reliability that’s built on the foundation of a rugged network. </p><p>To help ensure reliability, we’ve devised some innovative ways to defend against advanced attacks. In this post, we’ll take a deep dive into DDoS threats, showing the trends we’re seeing and describing how we prepare for multi-terabit attacks, so your sites stay up and running.</p><h3>Taxonomy of attacker capabilities</h3><p>With a DDoS attack, an adversary hopes to disrupt their victim's service with a flood of useless traffic. While this attack doesn't expose user data and doesn't lead to a compromise, it can result in an outage and loss of user trust if not quickly mitigated.</p><p>Attackers are constantly developing new techniques to disrupt systems. They give their attacks fanciful names, like Smurf, Tsunami, XMAS tree, HULK, Slowloris, cache bust, TCP amplification, javascript injection, and a dozen variants of reflected attacks. Meanwhile, the defender must consider every possible target of a DDoS attack, from the network layer (routers/switches and link capacity) to the application layer (web, DNS, and mail servers). Some attacks may not even focus on a specific target, but instead attack every IP in a network. Multiplying the dozens of attack types by the diversity of infrastructure that must be defended leads to endless possibilities.</p><p>So, how can we simplify the problem to make it manageable? Rather than focus on attack methods, Google groups volumetric attacks into a handful of key metrics:</p><p></p><ul><li><b>bps</b>	network bits per second → attacks targeting network links</li><li><b>pps</b>	network packets per second → attacks targeting network equipment or DNS servers</li><li><b>rps</b>	HTTP(S) requests per second → attacks targeting application servers</li></ul><p></p><p>This way, we can focus our efforts on ensuring each system has sufficient capacity to withstand attacks, as measured by the relevant metrics.</p><h3>Trends in DDoS attack volumes</h3><p>Our next task is to determine the capacity needed to withstand the largest DDoS attacks for each key metric. Getting this right is a necessary step for efficiently operating a reliable network—overprovisioning wastes costly resources, while underprovisioning can result in an outage.</p><p>To do this, we analyzed hundreds of significant attacks we received across the listed metrics, and included credible reports shared by others. We then plot the largest attacks seen over the past decade to identify trends. (Several years of data prior to this period informed our decision of what to use for the first data point of each metric.)</p></div>
<div class="block-image_full_width">






  
    <div class="article-module h-c-page">
      <div class="h-c-grid">
  

    <figure class="article-image--large
      
      
        h-c-grid__col
        h-c-grid__col--6 h-c-grid__col--offset-3
        
        
      ">

      
      
        
        <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/DDoS_attacks.max-1000x1000.jpg" alt="DDoS attacks.jpg">
        
        
      
    </figure>

  
      </div>
    </div>
  




</div>
<div class="block-paragraph"><p>The exponential growth across all metrics is apparent, often generating alarmist headlines as attack volumes grow. But we need to factor in the exponential growth of the internet itself, which provides bandwidth and compute to defenders as well. After accounting for the expected growth, the results are less concerning, though still problematic.</p><h3>Architecting defendable infrastructure</h3><p>Given the data and observed trends, we can now extrapolate to determine the spare capacity needed to absorb the largest attacks likely to occur.</p><p><b>bps</b> (network bits per second)<br>Our infrastructure absorbed a 2.5 Tbps DDoS in September 2017, the culmination of a six-month campaign that utilized multiple methods of attack. Despite simultaneously targeting thousands of our IPs, presumably in hopes of slipping past automated defenses, the attack had no impact. The attacker used <a href="https://blog.google/threat-analysis-group/how-were-tackling-evolving-online-threats" target="_blank">several networks</a> to spoof 167 Mpps (millions of packets per second) to 180,000 exposed CLDAP, DNS, and SNMP servers, which would then send large responses to us. This demonstrates the volumes a well-resourced attacker can achieve: This was four times larger than the record-breaking 623 Gbps attack from the Mirai botnet a year earlier. It remains the highest-bandwidth attack reported to date, leading to reduced confidence in the extrapolation.<br></p><p><b>pps</b> (network packets per second) <br>We’ve observed a consistent growth trend, with a 690 Mpps attack generated by an IoT botnet this year. A notable outlier was a 2015 attack on a customer VM, in which an IoT botnet ramped up to 445 Mpps in 40 seconds—a volume so large we initially thought it was a monitoring glitch!</p><p><b>rps</b> (HTTP(S) requests per second)<br>In March 2014, malicious javascript injected into thousands of websites via a network man-in-the-middle attack caused hundreds of thousands of browsers to flood YouTube with requests, peaking at 2.7 Mrps (millions of requests per second). That was the largest attack known to us until recently, when a Google Cloud customer was attacked with 6 Mrps. The slow growth is unlike the other metrics, suggesting we may be under-estimating the volume of future attacks.</p><p>While we can estimate the expected size of future attacks, we need to be prepared for the <i>unexpected</i>, and thus we over-provision our defenses accordingly. Additionally, we design our systems to degrade gracefully in the event of overload, and write playbooks to guide a manual response if needed. For example, our layered defense strategy allows us to block high-rps and high-pps attacks in the network layer before they reach the application servers. Graceful degradation applies at the network layer, too: Extensive peering and network ACLs designed to throttle attack traffic will mitigate potential collateral damage in the unlikely event links become saturated.</p><p>For more detail on the layered approach we use to mitigate record-breaking DDoS attacks targeting our services, infrastructure, or customers, see Chapter 10 of our book, <a href="https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/" target="_blank">Building Secure and Reliable Systems</a>.</p><h3>Cloud-based defenses</h3><p>We recognize the scale of potential DDoS attacks can be daunting. Fortunately, by deploying <a href="https://cloud.google.com/armor">Google Cloud Armor</a> integrated into our <a href="https://cloud.google.com/load-balancing">Cloud Load Balancing </a>service—which can scale to absorb massive DDoS attacks—you can protect services deployed in Google Cloud, other clouds, or on-premise from attacks. We recently announced <a href="https://cloud.google.com/blog/products/identity-security/google-cloud-armor-features-to-protect-your-websites-and-applications">Cloud Armor Managed Protection</a>, which enables users to further simplify their deployments, manage costs, and reduce overall DDoS and application security risk.</p><p>Having sufficient capacity to absorb the largest attacks is just one part of a comprehensive DDoS mitigation strategy. In addition to providing scalability, our load balancer terminates network connections on our global edge, only sending well-formed requests on to backend infrastructure. As a result it can automatically filter many types of volumetric attacks. For example, UDP amplification attacks, synfloods, and some application-layer attacks will be silently dropped. The next line of defense is the Cloud Armor WAF, which provides built-in rules for common attacks, plus the ability to deploy custom rules to drop abusive application layer requests using a broad set of HTTP semantics.</p><h3>Working together for collective security</h3><p>Google works with others in the internet community to identify and dismantle infrastructure used to conduct attacks. As a specific example, even though the 2.5 Tbps attack in 2017 didn't cause any impact, we reported thousands of vulnerable servers to their network providers, and also worked with network providers to trace the source of the spoofed packets so they could be filtered.</p><p>We encourage everyone to join us in this effort. Individual users should ensure their computers and IoT devices are patched and secured. Businesses should report criminal activity, ask their network providers to trace the sources of spoofed attack traffic, and share information on attacks with the internet community in a way that doesn't provide timely feedback to the adversary. By working together, we can reduce the impact of DDoS attacks.</p></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[What’s new with Google Cloud]]></title>
<description><![CDATA[Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more. Tip: Not sure where to find what you’re looking for on the Google Cloud blog? Start here: Google Cloud bl...]]></description>
<link>https://tsecurity.de/de/3662833/it-security-nachrichten/whats-new-with-google-cloud/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3662833/it-security-nachrichten/whats-new-with-google-cloud/</guid>
<pubDate>Sun, 12 Jul 2026 08:06:50 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div class="block-paragraph"><p data-block-key="kgod7">Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more. </p><hr><p data-block-key="ru1z9"><b>Tip</b>: Not sure where to find what you’re looking for on the Google Cloud blog? Start here: <a href="https://cloud.google.com/blog/topics/inside-google-cloud/complete-list-google-cloud-blog-links-2021">Google Cloud blog 101: Full list of topics, links, and resources</a>.</p><hr><p data-block-key="b0lnw"></p></div>
<div class="block-aside"><dl>
    <dt>aside_block</dt>
    <dd>&lt;ListValue: []&gt;</dd>
</dl></div>
<div class="block-paragraph_advanced"><h3>Jul 6 - Jul 10</h3>
<ul>
<li><strong>Webinar: Introducing Google Cloud NGFW Enterprise advanced malware protection - powered by Palo Alto Networks<br></strong>Discover the new Cloud NGFW advanced malware sandbox, arriving in preview later this year. Powered by Palo Alto Networks Advanced Wildfire, it leverages data from 70,000+ customers to help defeat advanced malware. Join us on July 16 at 11 AM EDT to learn how to build a resilient, zero-trust cloud infrastructure that protects your apps and data, wherever they reside.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="18" href="https://www.brighttalk.com/webcast/18282/668861?utm_source=GCBlog" rel="noreferrer noopener" target="_blank">Register for the webinar now</a></li>
<li><strong>Safely run AI-generated code in Cloud Run sandboxes<br></strong>Cloud Run sandboxes, now in public preview, are lightweight, isolated execution boundaries that you can spawn near-instantly <strong>within your existing Cloud Run service instances</strong>.<br><br>Whether you need to let an LLM run a dynamically generated Python script to calculate business margins or spin up a headless browser to perform web research, Cloud Run sandboxes give you a secure, isolated sandbox to run these tasks without leaving your serverless environment.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="22" href="https://cloud.google.com/blog/topics/developers-practitioners/google-cloud-run-sandboxes-are-in-public-preview" rel="noreferrer noopener" target="_blank">Read the blog</a><span> to learn more and get started today.</span></li>
<li><strong>Australia API Horizon: Scaling Enterprise Governed AI Agents<br></strong>The transition from AI chatbots to autonomous agents is the most critical integration point for your business. Join Google Cloud at our upcoming events to explore exclusive deep-dive sessions on architecting for the agentic era.<br><br>Discover how to use Apigee as an intelligent AI Gateway to govern, secure, and scale high-performance architectures. You will learn to seamlessly build AI tools from your existing APIs and maintain control over your entire ecosystem.<br><br>Join us in your preferred city:
<ul>
<li><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="36" href="https://goo.gle/4voh18S" rel="noreferrer noopener" target="_blank"><strong>Sydney:</strong> July 28, 2026, at Google Sydney, One Darling Island.</a></li>
<li><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="37" href="https://goo.gle/4h2x0FS" rel="noreferrer noopener" target="_blank"><strong>Canberra:</strong> July 29, 2026, at Hotel Realm.</a></li>
<li><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="38" href="https://goo.gle/4yisb1F" rel="noreferrer noopener" target="_blank"><strong>Melbourne:</strong> August 4, 2026, at Google Melbourne.</a></li>
</ul>
</li>
<li><strong>Build highly available, multi-region services on Cloud Run<br></strong>Maintaining uptime for business-critical applications just got a lot easier on Cloud Run. Service health, now Generally Available, automates cross-region failover by leveraging readiness probes for instance-level health checks with a simple, two-click setup. You can configure service health with global external Application Load Balancers for public-facing applications or cross-region internal Application Load Balancers for private networking traffic.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="42" href="https://cloud.google.com/run/docs/configuring/configure-service-health" rel="noreferrer noopener" target="_blank">Learn how to configure service health for Cloud Run.</a></li>
<li><strong>Report: 83% of organizations need infrastructure upgrades for agentic AI<br></strong>The shift from conversational bots to autonomous agents is breaking legacy systems. Our new <em>State of AI Infrastructure</em> report details how engineering leaders are adapting to these massive new workloads. To eliminate inference bottlenecks, control hidden scaling costs, and manage agent sprawl, the industry is rapidly moving toward fluid compute, centralized governance, and unified, co-designed architectures.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="46" href="https://cloud.google.com/blog/products/compute/state-of-ai-infrastructure-report-overview?e=48754805" rel="noreferrer noopener" target="_blank">Explore our key infrastructure insights</a></li>
<li><strong>Stop tinkering, start scaling: the industrialized AI Playbook<br></strong>Did you know that only 5% of custom AI investments actually return measurable business value? The problem isn’t the technology—it’s how organizations are wired to run it.<br><br>In this compelling read, Google Cloud Consulting breaks down the operational blueprint that bridges the stark gap between "cool tech experiments" and real, P&amp;L-impacting enterprise ROI.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="50" href="https://www.google.com/url?q=https%3A%2F%2Fmedium.com%2F%40kjouannigot_73547%2Fscaling-trusted-ai-google-cloud-insights-to-capture-enterprise-roi-aa6c9b308adb" rel="noreferrer noopener" target="_blank">Read the full article on Medium</a></li>
<li><strong>AI Agent Clinic: Slashing App Latency by 80%<br></strong>Prototyping an AI agent is easy, but scaling for live traffic presents unique challenges. In the latest AI Agent Clinic, our technical experts partner with a developer to optimize PlaybackIQ, a live football analysis agent. This session demonstrates how to use OpenTelemetry to trace bottlenecks in the Gemini Enterprise Agent Platform and deploy to Cloud Run for high-concurrency scaling, achieving an 80% reduction in response time. Learn production-grade debugging strategies to optimize your own LLM applications.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="54" href="https://www.google.com/search?q=https://youtu.be/G7olcqETSn8" rel="noreferrer noopener" target="_blank">Watch the 60-minute teardown</a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jun 29 - Jul 3</h3>
<ul>
<li><strong>Claude Sonnet 5, Anthropic’s latest model, is now available on Agent Platform</strong>. <br>This addition serves as a drop-in replacement for Sonnet 4.6, giving organizations expanded choice for task completion across enterprise workflows. It features enhanced reasoning, cleaner code generation, and computer use capabilities for desktop and browser workflows.<br><br>By continuing to rapidly bring frontier models to our platform, Google Cloud offers an uncompromised choice of the industry's best technology to build, test, and scale enterprise-grade AI.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://console.cloud.google.com/agent-platform/publishers/anthropic/model-garden/claude-sonnet-5?hl=en" rel="noreferrer noopener" target="_blank"><em>Get started today.</em></a></li>
<li>
<p><strong>Automate your AI governance with Apigee and YAML<br></strong><span>Manual API gateway configurations can quickly slow down your AI engineering velocity. Join the Apigee community on Thursday, July 16, to discover an automated, declarative blueprint for model garden management. Learn how a simple, repeatable YAML pattern lets your AI practitioners instantly spin up secure, policy-backed enterprise configurations  without friction. Bring your questions and connect during our live Q&amp;A session. </span></p>
<p><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://goo.gle/4y4j44A" rel="noreferrer noopener" target="_blank"><strong>Register for the July 16 Community TechTalk</strong></a></p>
</li>
<li>
<p><strong>Build next-generation AI portals for autonomous agents<br></strong><span>Standard developer portals were designed for human developers to subscribe to static APIs. Today, autonomous agents, LLM toolkits, and dynamic runtimes demand a central nervous system for governance. Join our technical deep dive on Thursday, July 23, to explore Apigee's new AI Portals solution. You will see exactly how to deploy full-service, MCP powered hubs to safely manage enterprise self-service for models, tools, and agents. </span></p>
<p><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://goo.gle/4y4j44A" rel="noreferrer noopener" target="_blank"><strong>Register for the July 23 Community TechTalk</strong></a></p>
</li>
<li><strong>Protect your infrastructure from advanced cyberattacks at the API layer (Presented in Portuguese)<br></strong>In an era of increasingly sophisticated threats, relying solely on traditional firewalls leaves critical data gaps. Join our technical community TechTalk on Thursday, July 30—conducted in Portuguese—to learn how to proactively mitigate risks directly at the gateway layer. This session demonstrates how to configure and govern essential Apigee security policies to build a robust line of defense, ensuring maximum availability and complete integrity for your enterprise microservices. <br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://goo.gle/4y4j44A" rel="noreferrer noopener" target="_blank"><strong>Register for the July 30 Portuguese Community TechTalk</strong></a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jun 22 - Jun 26</h3>
<ul>
<li><strong>Accelerate TPU model loading while saving RAM on GKE.<br></strong>Large model cold starts often stall scaling and leave high-value TPUs idle. The open-source <strong>Run:ai Model Streamer</strong> now natively supports TPUs with Google Cloud Storage in<strong> </strong><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://github.com/vllm-project/tpu-inference" rel="noreferrer noopener" target="_blank"><strong>TPU vLLM 0.18.0</strong>.</a> This integration accelerates inference pipelines on GKE by streaming tensors directly into CPU memory, bypassing local disk bottlenecks and the "double-buffering" trap. In benchmarks, loading a 480B parameter model was <strong>over 2x faster</strong> while cutting peak host memory usage by half. <a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://discuss.google.dev/t/accelerate-tpu-model-loading-while-saving-ram-on-gke/374835" rel="noreferrer noopener" target="_blank"><strong>Read the full guide and get started today</strong></a>.</li>
<li><strong>Stop Training Blind: Scaling AI with the New OpenTelemetry-Based TPU AI Telemetry Collector Agent<br></strong>Google Cloud’s new AI Telemetry Collector agent standardizes TPU monitoring using OpenTelemetry. It optimizes enterprise ML workloads by identifying silent failures and providing zero-cost operational metrics without draining host CPU cycles. The agent seamlessly routes telemetry to Google Cloud Monitoring or Prometheus and custom Grafana setups. Pre-installed on Google-optimized Ubuntu images or available via Docker, it tracks memory, network latency, and core utilization to maximize multi-node training efficiency.<br><br>You can read more of this capability by clicking this <a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://discuss.google.dev/t/stop-training-blind-scaling-ai-with-the-new-opentelemetry-based-tpu-ai-telemetry-collector-agent/375210" rel="noreferrer noopener" target="_blank">link</a>.</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jun 15 - Jun 19</h3>
<ul>
<li><strong>Join us for a deep dive into agentic AI control with AppyThings<br></strong>Your integrations aren’t failing—they are evolving. When users interact with AI agents, they no longer arrive directly at your site, resulting in experiences stripped of your context, expertise, and intended experience. Join us on Thursday, June 25, for a community tech talk in partnership with AppyThings to learn how to solve this new gateway challenge. We will explore how MTN laid an integration foundation with the Model Context Protocol (MCP) to deliver accurate, consistent experiences. Our technical experts will demonstrate how to leverage Apigee as a centralized tools management solution to govern agent access. <br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://goo.gle/3Sfle0y" rel="noreferrer noopener" target="_blank"><strong>Register for the session</strong></a></li>
<li><strong>Optimize Spot VM Deployments with Capacity Advisor for Spot, Now in Public Preview<br></strong>Google Compute Engine has launched <strong>Capacity Advisor for Spot</strong> to Public Preview, now open to all customers. This tool turns Spot capacity discovery into a data-driven process by providing real-time deployment recommendations to maximize obtainability and minimize preemption risks. Query the <a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://docs.cloud.google.com/compute/docs/instances/view-vm-availability" rel="noreferrer noopener" target="_blank"><strong>Capacity Advisor API</strong></a> for obtainability and minimum estimated uptimes, or use the new <a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://console.cloud.google.com/compute/capacityAdvisor" rel="noreferrer noopener" target="_blank"><strong>Console UI</strong></a> featuring a global availability map, spot price lookups, and historical preemption rate trends to visually find the most cost-efficient compute capacity.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://docs.cloud.google.com/compute/docs/instances/view-vm-availability" rel="noreferrer noopener" target="_blank">Get started today</a> to start optimizing your Spot VM deployments!</li>
<li><strong>Build a multi-tenant agentic AI system<br></strong>When scaling generative AI across different business units, your teams need specialized AI agents with unique operational rules and tools. Our new reference architecture helps you build a centralized multi-tenant platform to prevent fragmented silos, eliminate data exposure risks, and maintain unified compliance. Read the guide to <a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://docs.cloud.google.com/architecture/multi-tenant-agentic-ai-system" rel="noreferrer noopener" target="_blank">design and deploy a multi-tenant agentic AI system</a> in Google Cloud.</li>
<li><strong>How to Configure Gemini Enterprise to Connect to a Custom MCP Server<br></strong>The Gemini Enterprise MCP Connector was a big announcement at Google Cloud Next because it introduces the ability to connect Gemini Enterprise to MCP servers. This blog <a href="https://medium.com/google-cloud/how-to-configure-gemini-enterprise-to-connect-to-a-custom-mcp-server-2e28adc96420" rel="noopener" target="_blank">post</a> provides a step-by-step guide on how to configure your first Custom MCP Server connector using the Google Maps Ground Lite MCP server as an example. Once you understand this flow, you can configure multiple MCP servers with Gemini Enterprise to bring all the context you need.</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jun 8 - Jun 12</h3>
<ul>
<li><strong>Simplify Multi-Cloud Planning with Cloud Location Finder, now Generally Available</strong> <br>Cloud Location Finder provides up-to-date data on public regions, zones, and Google Distributed Cloud Connected locations across Google Cloud, AWS, Azure, and OCI. You can now programmatically discover locations based on provider, proximity, territory, and carbon footprint to optimize your global infrastructure strategy for performance, compliance, and sustainability. <br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" data-airgap-id="14" href="https://cloud.google.com/location-finder/docs" rel="noreferrer noopener" target="_blank">Get started for free today</a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jun 1 - Jun 5</h3>
<ul>
<li><strong>Modeling the physical world with BigQuery Graph</strong><br>Managing complex supply chains requires more than just spreadsheets; it requires a digital replica of the physical world. In this <a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://cloud.google.com/blog/products/data-analytics/modeling-a-digital-twin-using-bigquery-graph" rel="noreferrer noopener" target="_blank">post</a>, Guru Rangavittal and Candice Chen explore how BigQuery Graph enables organizations to build a digital twin by turning physical assets into an interconnected map of nodes and edges. By moving beyond traditional relational databases, businesses gain real-time clarity into operations—from executing surgical ingredient recalls to analyzing weather-driven logistics risks. Discover how BigQuery Graph transforms reactive firefighting into proactive, precision modeling, allowing you to see critical connections in seconds and future-proof your supply chain.</li>
<li><strong>Apigee for AI: Govern LLMs and MCP Servers (Presented in Spanish)<br></strong>Learn how to securely transition your AI initiatives from experimental prototypes to enterprise-ready deployments. Join Luis Cuellar on June 18 for a technical deep dive (presented in Spanish) exploring Apigee’s latest AI gateway capabilities. Discover how to centralize governance over Model Context Protocol (MCP) servers, protect Large Language Models (LLMs) with robust API gateway security policies, and manage token-based quotas.<br><br><a class="colors-hyperlink-primary underline focus-visible outline-offset-0 rounded" href="https://goo.gle/4dyC2Ie" rel="noreferrer noopener" target="_blank"><strong>Register for the June 18 Spanish Community TechTalk</strong></a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>May 25 - May 29</h3>
<ul>
<li>
<p><strong><a href="https://www.anthropic.com/news/claude-opus-4-8" rel="noopener" target="_blank"><span>Anthropic’s Claude Opus 4.8</span></a><span> is now available on </span><a href="https://console.cloud.google.com/vertex-ai/publishers/anthropic/model-garden/claude-opus-4-8"><span>Gemini Enterprise Agent Platform</span></a></strong><span><strong>. </strong></span><span>As we continue to expand our platform's model offerings, this addition gives organizations more options for handling complex, multi-stage enterprise workflows. Claude Opus 4.8 brings strong capabilities in agentic coding, allowing developers to manage extensive refactors and tracking dependencies over extended sessions.</span></p>
</li>
<li><strong>API Horizon Munich July 6, 2026: Orchestrating the Next Era of AI and APIs <br></strong>Master the orchestration of next-gen AI and digital ecosystems. Join Google Cloud experts and DACH tech leaders on July 6 for an exclusive look at the Apigee roadmap, Agent Management, and Model Context Protocol (MCP). Gain real-world insights and connect with the regional integration community.<strong><br><br><a href="https://goo.gle/4dTxQmo" rel="noopener" target="_blank">Register now</a></strong></li>
<li><strong>Securing AI Agents: The Extended Agent Gateway Pattern<br></strong>Learn how to prevent autonomous AI agents from invoking unauthorized APIs. Join Apigee Specialist Joel Gauci on June 4 for a technical deep dive into the Extended Agent Gateway pattern. This session covers enforcing Fine-Grained Authorization (FGA), implementing secure token exchange, and establishing Model Context Protocol (MCP) governance at the API gateway layer to protect enterprise backend services.<br><br><a href="https://goo.gle/4fbAsxg" rel="noopener" target="_blank"><strong>Register for the June 4 Community TechTalk</strong></a></li>
<li><strong>API-to-Agent Security: Exposing REST APIs to Gemini Enterprise via MCP<br></strong>Connect Gemini Enterprise agents to core data without creating security hazards. Join Google Cloud Specialist Nigel Walters on June 11 to learn how to instantly transform legacy REST APIs into secure Model Context Protocol (MCP) servers. We’ll cover how to safely register tools with Gemini while enforcing gateway-level guardrails like rate limiting and access control policies.<br><br><a href="https://goo.gle/4nVyjIr" rel="noopener" target="_blank"><strong>Register for the June 11 Community TechTalk</strong></a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>May 18 - May 22</h3>
<ul>
<li><strong>Chinese Webinar | June 4: AI Command and Control<br></strong>As AI agents move from experimental pilots to core enterprise functions, governance has become a critical next step. Join Google Cloud on June 4th at 10:00 AM (Beijing Time) to learn how to build a secure AI management layer architecture. We'll explore how to develop governed MCP (Model Context Protocol) endpoints, manage tool access to enterprise data, and leverage robust audit logs to operationalize AI. This session also includes a practical demonstration of these governance frameworks on Google Cloud.<br><br><a href="https://goo.gle/4dx4Lf5" rel="noopener" target="_blank">Register here</a></li>
<li><strong>GCP Announces New Features to Benchmark and Optimize LLMs for On-Device Use Cases<br></strong>Deploying fine-tuned LLMs from GCP to edge devices like smartphones is complex due to fragmented hardware. Google AI Edge Portal bridges this gap, giving GCP developers the ability to test AI performance on 120+ Android devices, representing the full diversity of high, medium, and low tier smartphones on the market today. This week at I/O, we announced brand new <a href="https://cloud.google.com/blog/products/ai-machine-learning/benchmark-llms-on-device-with-ai-edge-portal" rel="noopener" target="_blank">capabilities</a> to benchmark and debug LLM performance across these devices. <a href="https://docs.google.com/forms/d/e/1FAIpQLSfTcGPycQve8TLAsfH46pBlXBZe9FrgJAClwbF7DeL1LgVn4Q/viewform" rel="noopener" target="_blank">Sign-up</a> to utilize these new features in private preview today.</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>May 11 - May 15</h3>
<ul>
<li><strong>Build Your AI &amp; MCP Control Tower for Universal Governance<br></strong>Master the future of agentic security with Apigee. Join our Community TechTalk on May 21 to discover how Apigee serves as a central "Control Tower" for the Model Context Protocol (MCP). We will explore how new JSON-RPC tool authorization enables fine-grained access policies across your organization, ensuring secure and scalable AI deployments. Whether managing internal tools or external users, learn to govern your agentic ecosystem with absolute precision. This session is designed for global coverage across EMEA and AMER regions.<br><br><a href="https://goo.gle/4u9slWF" rel="noopener" target="_blank">Register for the May 21 Community TechTalk</a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Apr 27 - May 1</h3>
<ul>
<li><strong>Master Your Launch: The Apigee Production Go-Live Checklist<br></strong>Ensure a secure launch with the Apigee production guide. Join Nicola Cardace on May 28 to explore security guardrails, including IAM roles, mTLS configurations, and encrypted KVM migrations. Scheduled at 11 AM EDT / 5 PM CEST to support EMEA and AMER teams, this TechTalk provides the technical roadmap you need to flip the switch with absolute confidence.<br><br><strong><a href="https://goo.gle/4elMCTI" rel="noopener" target="_blank">Register for the May 28 Community TechTalk</a></strong></li>
<li>
<p><strong>Transforming APIs into Governed Agentic Tools on the Google Cloud Agentic Platform<br></strong><span>Turn your APIs into secure, governed agentic tools on the Google Cloud Agentic Platform. Join Specialist Christophe Lalevée on May 7 for a technical deep dive into AI productization. Scheduled at 5 PM CEST / 11 AM EDT to maximize coverage for developers across EMEA and AMER, this session explores the integration and governance frameworks required to scale enterprise-ready AI with confidence.</span></p>
<p><a href="https://goo.gle/3PfWm7M" rel="noopener" target="_blank">Register for the May 7 Community TechTalk</a></p>
</li>
<li><a href="https://docs.cloud.google.com/compute/docs/accelerator-optimized-machines#g4-machine-types" rel="noopener" target="_blank">Fractional G4 VMs</a> are Generaly Available, providing a highly efficient and cost-effective entry point for AI and graphics workloads. These new configurations, using NVIDIA virtual GPU (vGPU) technology, allow you to leverage the power of the NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs in flexible, smaller increments, so you can right-size your infrastructure to match the specific demands of your applications. By providing more granular access to advanced hardware, fractional G4 VMs let you optimize resource allocation and reduce overhead without sacrificing performance. You can now select from additional GPU slice sizes for your specific needs:
<ul>
<li><strong>1/2 GPU:</strong> Ideal for more intensive tasks such as LLM inference, robotics sensor simulation, and high-fidelity 3D rendering.</li>
<li><strong>1/4 GPU:</strong> Optimized for mainstream workloads, including mid-range creative design, video transcoding, and real-time data visualization.</li>
<li><strong>1/8 GPU:</strong> Great for lightweight applications such as remote desktops, productivity tools, and entry-level streaming services.</li>
</ul>
</li>
<li>
<p>Transitioning AI from a sandbox prototype to an enterprise-grade system is a major hurdle. A monolithic script won't suffice for widespread deployment. To achieve true scale and reliability with Gemini, organizations must adopt service-oriented micro-agent architectures, establish Zero-Trust security, and implement rigorous EvalOps. Master the "Agentic Maturity Ladder" to ensure your AI &amp; Agentic solutions are robust, secure, and ready for the real world.</p>
<p><a href="https://lnkd.in/gHBH8cTv" rel="noopener" target="_blank">Watch the deep dive</a> and <a href="https://discuss.google.dev/t/beyond-the-prototype-scaling-production-grade-agents-with-gemini/356140" rel="noopener" target="_blank">read the developer blog</a> to learn more.</p>
</li>
<li><strong>ML Development in VS Code with Google Cloud Power: Workbench Extension Now Available<br></strong>Data scientists and developers can now combine the local productivity of VS Code with the scalable infrastructure of Google Cloud. The new Google Cloud Workbench Notebooks extension allows you to connect to and run notebooks on managed cloud environments directly within your local IDE. This integration streamlines the ML lifecycle by eliminating context switching and providing high-performance compute for complex workloads in a familiar interface. As part of our commitment to the developer ecosystem, the extension is fully open-sourced to support community-driven innovation.
<ul>
<li><strong>Install from Marketplace:</strong> <a href="https://marketplace.visualstudio.com/items?itemName=GoogleCloudTools.workbench-notebooks" rel="noopener" target="_blank">GoogleCloudTools.workbench-notebooks</a></li>
<li><strong>Contribute on GitHub:</strong> <a href="https://github.com/GoogleCloudPlatform/colab-enterprise-vscode" rel="noopener" target="_blank">colab-enterprise-vscode</a></li>
</ul>
</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Apr 20 - Apr 24</h3>
<ul>
<li><strong>Announcing the 2026 Google Cloud Partners of the Year<br></strong>Google Cloud is honored to celebrate the winners of the 2026 Partner of the Year awards! These awards recognize an exceptional group of partners across AI, Security, Infrastructure, and more, who have demonstrated a commitment to customer success. From global system integrators to specialized startups, these winners are leveraging the power of Google Cloud to solve complex challenges and drive digital transformation worldwide. Join us in congratulating these organizations for their innovation, collaboration, and impactful results over the past year.<br><br>See the <a href="https://cloud.google.com/blog/topics/partners/2026-partners-of-the-year-winners-next26">2026 Partner Award winners</a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Apr 13 - Apr 17</h3>
<ul>
<li>We're excited to announce the <strong>Public Preview of Datastream’s metadata integration with Knowledge Catalog</strong>. This is the first step in our vision to provide a centralized, "single pane of glass" for all Datastream assets. The enhancement automatically synchronizes Streams, Connection Profiles, and Private Connections, eliminating data silos. It enhances discoverability, allowing you to search for Datastream assets using the same interface as BigQuery tables. Centralized governance is also provided, making your real-time data estate more transparent and easier to manage.</li>
<li><strong>Upgrading Apigee OPDK to 4.53 with OS Modernization<br></strong>Modernize your infrastructure using Google’s official, sequential upgrade path. Our Technical expert, Rakesh Talanki outlines how to upgrade Apigee OPDK to v4.53 while migrating to a supported OS (RHEL 8.x/9.x). This guide covers the "build-out" methodology, including multi-data center syncing, to ensure a stable, zero-downtime transition<br><br><a href="https://goo.gle/3Oa8uqy" rel="noopener" target="_blank">Read the guide</a></li>
<li><strong>Cloud Run Worker Pools and CREMA: Powering Serverless AI at Scale<br></strong>Google Cloud has announced the General Availability of <strong>Cloud Run worker pools</strong>, a new resource type designed specifically for pull-based, non-HTTP workloads. Unlike traditional Cloud Run services that scale based on request traffic, worker pools provide an "always-on" environment for background tasks like processing message queues or running large-scale AI inference. To support this, Google Cloud also open-sourced the <strong>Cloud Run External Metrics Autoscaler (CREMA)</strong>. Built on KEDA, CREMA enables queue-aware autoscaling for worker pools, allowing them to dynamically scale based on external signals like Pub/Sub backlog or Kafka lag.</li>
<li><strong>Apigee Model Context Protocol (MCP) now Generally Available<br></strong>Expose enterprise APIs as MCP tools for agentic AI applications with the General Availability of MCP in Apigee. This update allows developers to transform APIs into AI-ready tools using OpenAPI Specifications, removing the need for local MCP servers or additional infrastructure. With managed endpoints and semantic search in API hub, you can now provide AI agents with secure, governed access to enterprise data at scale.<br><br><a href="https://goo.gle/3QfoEQ4" rel="noopener" target="_blank"><em>Explore the MCP overview</em></a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Apr 6 - Apr 10</h3>
<ul>
<li><strong>Community TechTalk: Powering Retail Agents with ADK, UCP &amp; Apigee X<br></strong>Move beyond basic chatbots to secure, transactional AI experiences. Join our Community TechTalk on April 16 to learn how Apigee X and Gemini build a "Trust Layer" for AI shopping assistants using UCP standards. We’ll demonstrate how to block prompt injections with Model Armor and implement cost governance via token limits to secure the path from discovery to purchase.<br><br><a href="https://goo.gle/41ocUgq" rel="noopener" target="_blank"><span>Register for the TechTalk</span></a></li>
<li><strong>Implement multimodal capabilities in your AI agents<br></strong>Explore three new reference architectures for building sophisticated multi-agent AI systems that can process and analyze multimodal data. To analyze disparate multimodal data and produce a high-confidence classification, see <a href="https://docs.cloud.google.com/architecture/agentic-ai-classify-multimodal-data"><span>Classify multimodal data</span></a><span>. To create a fluid conversational AI that processes audio and video streams in real time, see</span> <a href="https://docs.cloud.google.com/architecture/agentic-ai-bidirectional-multimodal-streaming"><span>Enable live bidirectional multimodal streaming</span></a><span>. To consolidate fragmented multimodal data into a searchable knowledge graph, see</span> <a href="https://docs.cloud.google.com/architecture/agentic-ai-multimodal-graph-rag-resource-orchestration"><span>Multimodal GraphRAG resource orchestration</span></a><span>.</span></li>
<li><strong>Automate SecOps workflows with an agentic AI system<br></strong>To accelerate incident response and reduce manual toil for your security team, you need a system that can automate remediation playbooks. Our new reference architecture helps you build an AI agent that orchestrates complex triage and investigation workflows across disparate security tools, such as SIEM, CSPM, and EDR, from a single interface. See the full guide to <a href="https://docs.cloud.google.com/architecture/agentic-ai-orchestrate-security-ops-workflows"><span>orchestrate security operations workflows</span></a><span>.</span></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Mar 30 - Apr 3</h3>
<ul>
<li><strong>ASEAN Webinar | April 30: Mastering Agentic Governance at Scale with GCP<br></strong>As AI agents move from experimental pilots to core enterprise functions, governance is the critical next step. Join Google Cloud experts <strong>Shilpi Puri &amp; Wely Lau</strong> for a <strong>webinar</strong> on <strong>April 30th at 11:00 AM SGT</strong> to learn how to architect a secure AI Management layer. We’ll explore developing governed MCP endpoints, managing tool access to enterprise data, and operationalizing AI with robust audit logs. The session includes a live demo of these frameworks in action on Google Cloud.<br><br><a href="https://goo.gle/47FX1Wn" rel="noopener" target="_blank"><strong>RSVP here.</strong></a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Mar 23 - Mar 27</h3>
<ul>
<li aria-level="1">
<p role="presentation"><strong>Turn your API sprawl into an agent-ready catalog<br></strong><span>As organizations scale, APIs often become scattered across multiple gateways, creating "blind spots" that hinder AI adoption. To solve this, we’ve introduced two new capabilities for Apigee API hub: a new integration with API Gateway to automatically centralize API metadata into a single control plane, and a specification boost add-on (now in public preview). This add-on uses AI to enhance your API documentation with the precise examples and error codes that AI agents need to function reliably.<br><br></span><a href="https://goo.gle/47dEYqc" rel="noopener" target="_blank"><span>Read the full blog post to get started.</span></a></p>
</li>
<li aria-level="1">
<p role="presentation"><strong>Webinar | April 16: AI Command &amp; Control<br></strong><span>As AI agents move from experimental pilots to core enterprise functions, governance is the critical next step. Join Google Cloud expert Satyam Maloo for a webinar on April 16th at 11:00 AM IST to learn how to architect a secure AI Management layer. We’ll explore developing governed MCP endpoints, managing tool access to enterprise data, and operationalizing AI with robust audit logs. The session includes a live demo of these frameworks in action on Google Cloud.<br><br></span><a href="https://goo.gle/4t43Vg4" rel="noopener" target="_blank"><span>RSVP here.</span></a></p>
</li>
<li aria-level="1">
<p role="presentation"><strong>Modernizing and Decoupling Event Ingestion with Apigee<br></strong><span>In modern cloud-native architectures, decoupling producers from consumers is critical for building resilient systems. While Google Cloud Pub/Sub provides a scalable backbone, exposing it directly to external clients can introduce security and management overhead. This new guide explores how to leverage Apigee as an intelligent HTTP ingestion point. Learn how to handle security, mediation, and traffic control before messages reach your internal bus using the PublishMessage policy or Pub/Sub API.</span><br><br><a href="https://goo.gle/3POgsWF" rel="noopener" target="_blank"><span>Read the full guide.</span></a></p>
</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Mar 16 - Mar 20</h3>
<ul>
<li><strong>Gemini-powered Assistant in BigQuery Studio Gets Context-Aware Upgrades<br></strong>The Gemini-powered assistant in BigQuery Studio has been transformed into a fully context-aware analytics partner, supporting your entire data lifecycle. The new capabilities include intelligent resource discovery, which uses Dataplex Universal Catalog search to find resources across projects and deep dive into metadata using natural language. You can now automate tasks, such as scheduling production-grade queries directly through the chat interface, and instantly troubleshoot long-running or failed jobs with root cause analysis and cost control auditing.<br><br><a href="https://docs.cloud.google.com/bigquery/docs/use-cloud-assist">Explore</a> the full range of what the assistant can do.</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Mar 9 - Mar 13</h3>
<ul>
<li>
<div><strong>Want to use Gemini to develop code and don't know where to start?</strong><br>This <a href="https://medium.com/google-cloud/supercharge-your-spark-development-with-gemini-1540f1cb47d4" rel="noopener" target="_blank">article</a> includes a couple of examples of developing code with Gemini prompts; it identified changes that were needed to be made to get the code working. The article also refers to other examples that are available on github. </div>
</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Mar 2 - Mar 6</h3>
<ul>
<li>
<p><span><strong>Introducing Gemini 3.1 Flash-Lite, our fastest and most cost-efficient Gemini 3 series model.</strong> Built for high-volume developer workloads at scale, 3.1 Flash-Lite delivers high quality for its price and model tier. Gemini 3.1 Flash-Lite can tackle tasks at scale, like high-volume translation and content moderation, where cost is a priority. And it can also handle more complex workloads where more in-depth reasoning is needed, like generating user interfaces and dashboards, creating simulations or following instructions.</span></p>
<p><span>Starting today, 3.1 Flash-Lite is rolling out in preview to enterprises via </span><a href="https://console.cloud.google.com/vertex-ai/studio/multimodal?mode=prompt&amp;model=gemini-3.1-flash-lite-preview"><span>Vertex AI</span></a><span> and </span><span>developers via the Gemini API in </span><a href="https://aistudio.google.com/prompts/new_chat?model=gemini-3.1-flash-lite-preview" rel="noopener" target="_blank"><span>Google AI Studio</span></a><span>.</span></p>
</li>
<li>
<div>
<p><strong>TechTalk: Implementing Device Authorization Grant (RFC 8628) for Apigee</strong><br>Learn how to authorize "headless" devices like Smart TVs or AI agents that lack keyboards and browsers. Join our Community TechTalk on March 19 (5PM CET / 12PM EDT) to go under the hood of Apigee X/Hybrid. We’ll cover the real-world mechanics of state management, polling, and human-in-the-loop security patterns for devices and autonomous agents.</p>
<p><a href="https://goo.gle/4r6o6Zi" rel="noopener" target="_blank">Register for the TechTalk</a></p>
</div>
</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Feb 23 - Feb 27</h3>
<ul>
<li>
<p><span><strong>Pro-level image generation gets faster and more accessible with Nano Banana 2<br></strong></span><span>Nano Banana 2 is our state-of-the-art image generation and editing model. It delivers Pro-level image generation and editing at the speed you expect from Flash — making the quality, reasoning, and world knowledge you loved about Nano Banana Pro more accessible. Learn more about the model </span><a href="https://blog.google/innovation-and-ai/technology/ai/nano-banana-2" rel="noopener" target="_blank"><span>here</span></a><span>.</span></p>
</li>
</ul>
<ul>
<li>
<p><strong>The Intelligent Path to Compliance: Transforming Regulatory QC with Google Cloud<br></strong><span>Reducing "Refuse to File" (RTF) risks and submission cycle times is critical for life sciences leaders. Google Cloud’s Regulatory Submission Semantic QC Auditor leverages Gemini and RAG architecture to transform Quality Control from a manual burden into an active, intelligent workflow.</span></p>
<p><span>By automating semantic cross-referencing, narrative coherence checks, and dynamic guidance-based auditing, this solution ensures rigorous accuracy and auditability. Operating within a secure GxP-ready environment, it empowers teams to detect subtle inconsistencies and generate remediation plans without sacrificing data privacy. <br><br></span><a href="https://discuss.google.dev/t/the-intelligent-path-to-compliance-transforming-regulatory-quality-control-with-google-cloud/335276" rel="noopener" target="_blank"><span>Learn more</span></a><span>.</span></p>
</li>
<li><span><span>Stop typing, start interacting! <strong>The Gemini Live Agent Challenge is here</strong>. Build immersive agents that can help you see, hear, and speak using Gemini and Google Cloud. Compete for your share of $80,000+ in prizes and a trip to Google Cloud Next '26!<br><br></span><span>Submissions are open from February 16, 2026 to March 16, 2026. Learn more and register at </span><a href="http://geminiliveagentchallenge.devpost.com/" rel="noopener" target="_blank"><span>geminiliveagentchallenge.devpost.com</span></a></span></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Feb 9 - Feb 13</h3>
<ul>
<li>
<p><strong><span>Introducing Gemini 3.1 Pro on Google Cloud. </span></strong></p>
<span>3.1 Pro is a noticeably smarter, more capable baseline for complex problem-solving. We’re shipping 3.1 Pro at scale, building upon our </span><a href="https://cloud.google.com/blog/products/ai-machine-learning/gemini-3-is-available-for-enterprise?e=48754805"><span>goal</span></a><span> to help you transform your business for the agentic future. Learn more about the model’s capabilities </span><a href="https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-3-1-pro" rel="noopener" target="_blank"><span>here</span></a><span>. Gemini 3.1 Pro is available starting today in preview in </span><a href="https://cloud.google.com/vertex-ai?e=48754805"><span>Vertex AI</span></a><span> and </span><a href="https://cloud.google.com/gemini-enterprise?e=48754805"><span>Gemini Enterprise</span></a><span>. Developers can access the model in preview via the Gemini API in </span><a href="https://aistudio.google.com/prompts/new_chat?model=gemini-3.1-pro-preview" rel="noopener" target="_blank"><span>Google AI Studio</span></a><span>, </span><a href="https://developer.android.com/studio" rel="noopener" target="_blank"><span>Android Studio</span></a><span>, </span><a href="https://antigravity.google/blog/gemini-3-1-in-google-antigravity" rel="noopener" target="_blank"><span>Google Antigravity</span></a><span>, and </span><a href="https://geminicli.com/" rel="noopener" target="_blank"><span>Gemini CLI</span></a><span>.<br><br></span></li>
<li><strong>Automate Storage Compatibility with GKE Dynamic Default Storage Classes<br></strong>Managing storage across mixed-generation VM clusters in GKE just got easier. With the new <strong>Dynamic Default Storage Class</strong>, Google Kubernetes Engine automatically selects between Persistent Disk (PD) and Hyperdisk based on a node's specific hardware compatibility. This abstraction eliminates the need for complex scheduling rules and manual pairing, ensuring your volumes "just work" regardless of the underlying infrastructure. By defining both variants in a single class, you reduce operational overhead while maintaining peak performance and cost-efficiency across your entire cluster.<br><br><a href="https://docs.cloud.google.com/kubernetes-engine/docs/concepts/hyperdisk#automated_disk_type_selection" rel="noopener" target="_blank">Explore automated disk type selection</a></li>
<li>
<p><strong>Community TechTalk: AI-Powered Apigee Development with strofa.io<br></strong><strong>Join the Apigee community on February 26</strong><span> for a deep dive into</span> <a href="https://www.google.com/search?q=http://strofa.io" rel="noopener" target="_blank"><span>strofa.io</span></a><span>. Guest speaker Denis Kalitviansky will demonstrate how this new AI-powered tool automates and orchestrates Apigee development, from local emulators to large-scale hybrid environments. Discover how to scale your API management and streamline team collaboration using the latest in AI-driven automation.</span></p>
<p><a href="https://goo.gle/3Oerns3" rel="noopener" target="_blank"><span>Register now to reserve your spot.</span></a></p>
</li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jan 26 - Jan 30</h3>
<ul>
<li><strong><span>Simplify API Governance with Native OpenAPI v3 Support<br></span></strong>Eliminate integration debt and accelerate deployment velocity with the General Availability of OpenAPI v3 (OASv3) support for API Gateway and Cloud Endpoints. You no longer need to downgrade modern specifications to OASv2. Instead, you can now define API contracts and enforce critical policies—including telemetry, quotas, and security—using native Google-specific extensions directly within your OASv3 files. This update ensures your APIs are secure by design while remaining fully compatible with the modern developer ecosystem and Google Cloud’s AI services.<br><br><a href="https://goo.gle/49Wx58Z" rel="noopener" target="_blank"><span>Get started with OpenAPI v3 on API Gateway and Cloud Endpoints.</span></a></li>
</ul>
<ul>
<li><strong><span>Accelerate API Testing with the New Open Source API Tester<br></span></strong>Start validating your APIs with API Tester, a simple, YAML-based Test Driven Development (TDD) framework. Designed for the Apigee community, this tool allows you to write human-readable tests, run them instantly via a web client or CLI, and perform deep unit testing on Apigee proxies. With native support for JSONPath assertions and Apigee shared flows, you can verify everything from payload data to internal variables like <code>proxy.basepath</code><span> without leaving your terminal.<br><br></span><a href="https://goo.gle/4q5WDGK" rel="noopener" target="_blank"><span>Explore the API Tester guide and start testing your proxies today.</span></a></li>
<li><strong><span>Secure Sensitive Data with Kubernetes Secrets in Apigee hybrid<br></span></strong>Enhance security in Apigee hybrid by accessing Kubernetes Secrets directly within your API proxies. This hybrid-exclusive feature keeps sensitive credentials within your cluster boundary and prevents replication to the management plane. It supports strict separation of duties: operators manage secrets via <code>kubectl</code><span>, while developers reference them as secure flow variables—ideal for high-compliance and GitOps workflows.<br><br></span><a href="https://goo.gle/4qEVffo" rel="noopener" target="_blank"><span>Implement Kubernetes Secrets in your hybrid proxies.</span></a></li>
<li><strong><span>See the Console in a Whole New Light: Dark Mode is Now Generally Available in Google Cloud<br></span></strong>Elevate your cloud management workflow with Dark Mode, now generally available in the Google Cloud console. We have delivered a modern, cohesive, and accessible experience reimagined for maximum comfort and productivity—especially during extended working hours and low-light environments. Dark Mode can be enabled automatically based on your operating system's preference, or manually through the Settings  -&gt; Appearance menu.<br><br><a href="https://docs.cloud.google.com/docs/get-started/console-appearance"><span>Switch to Dark Mode today to enjoy a modern, comfortable, and productive environment!</span></a></li>
<li><strong><span>Apigee X Networking: PSC or VPC Peering?<br></span></strong>Deciding how to connect Apigee X? Watch this video to compare Private Service Connect and VPC Peering. We break down northbound and southbound routing, IP consumption, and how to reach targets on-prem or in the cloud. Learn to simplify your architecture and avoid common networking "gotchas" for a smoother deployment.<br><br><a href="https://goo.gle/4bWBGdV" rel="noopener" target="_blank"><span>Watch the video.</span></a></li>
</ul>
<h3 data-draftjs-conductor-fragment='{"blocks":[{"key":"865rk","text":"Week of Dec 16 - Dec 20","type":"header-three","depth":0,"inlineStyleRanges":[],"entityRanges":[],"data":{}}],"entityMap":{}}'>Jan 19 - Jan 23</h3>
<ul>
<li><strong>Bridge the Gap: Excel-to-API Conversion in Apigee Portals<br></strong><span>Give your customers more ways to connect! This new article by Tyler Ayers explores how to extend the Apigee Integrated Portal to support direct Excel file uploads. By leveraging SheetJS and custom portal scripts, you can enable users to upload spreadsheets, preview data, and submit it directly to your APIs, all without writing a single line of integration code themselves. It’s a powerful way to simplify onboarding for those who aren't yet API-ready.<br><br></span><a href="https://goo.gle/3Nq3Pjo" rel="noopener" target="_blank"><span>Learn how to build it</span></a><span>.</span></li>
<li><strong>Elevate your applications with Firestore’s new advanced query engine<br></strong><span>We have fundamentally reimagined Firestore with pipeline operations for Enterprise edition. Experience a powerful new engine featuring over a hundred new query features, index-less queries, new index types, and observability tooling to improve query performance. Seamlessly migrate using built-in tools and leverage Firestore’s existing differentiated serverless foundation, virtually unlimited scale, and industry-leading SLA. Join a community of 600K developers to craft expressive applications that maximize the benefits of rich queryability, real-time listen queries, robust offline caching, and cutting-edge AI-assistive coding integrations.<br><br></span><a href="https://cloud.google.com/blog/products/data-analytics/new-firestore-query-engine-enables-pipelines?e=48754805"><span>Learn more about Firestore pipeline operations.</span></a></li>
</ul></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Denial of Service in terraform-provid, terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm und terraform-provider-kubernetes (SUSE)]]></title>
<description><![CDATA[]]></description>
<link>https://tsecurity.de/de/3660878/it-security-nachrichten/denial-of-service-in-terraform-provid-terraform-provider-aws-terraform-provider-azurerm-terraform-provider-external-terraform-provider-google-terraform-provider-helm-und-terraform-provider-kubernetes-suse/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3660878/it-security-nachrichten/denial-of-service-in-terraform-provid-terraform-provider-aws-terraform-provider-azurerm-terraform-provider-external-terraform-provider-google-terraform-provider-helm-und-terraform-provider-kubernetes-suse/</guid>
<pubDate>Sat, 11 Jul 2026 00:04:40 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
</item>
<item>
<title><![CDATA[Azure Linux 4.0 Released: Microsoft Expands Its Enterprise Linux Platform Beyond the Cloud]]></title>
<description><![CDATA[by George Whittaker
      
            Microsoft has officially unveiled Azure Linux 4.0, the latest version of its open-source Linux distribution designed for cloud infrastructure, enterprise workloads, and modern data centers. Formerly known as CBL-Mariner, Azure Linux has powered Microsoft's i...]]></description>
<link>https://tsecurity.de/de/3660252/unix-server/azure-linux-40-released-microsoft-expands-its-enterprise-linux-platform-beyond-the-cloud/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3660252/unix-server/azure-linux-40-released-microsoft-expands-its-enterprise-linux-platform-beyond-the-cloud/</guid>
<pubDate>Fri, 10 Jul 2026 17:46:49 +0200</pubDate>
<category>🐧 Unix Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div data-history-node-id="1341443" class="layout layout--onecol">
    <div class="layout__region layout__region--content">
      
            <div class="field field--name-field-node-image field--type-image field--label-hidden field--item">  <img loading="lazy" src="https://www.linuxjournal.com/sites/default/files/nodeimage/story/azure-linux-4-0-released-microsoft-expands-its-enterprise-linux-platform-beyond-the-cloud.jpg" width="850" height="500" alt="Azure Linux 4.0 Released: Microsoft Expands Its Enterprise Linux Platform Beyond the Cloud" typeof="foaf:Image" class="img-responsive"></div>
      
            <div class="field field--name-node-author field--type-ds field--label-hidden field--item">by <a title="View user profile." href="https://www.linuxjournal.com/users/george-whittaker" lang="" about="https://www.linuxjournal.com/users/george-whittaker" typeof="schema:Person" property="schema:name" datatype="" xml:lang="">George Whittaker</a></div>
      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Microsoft has officially unveiled <strong>Azure Linux 4.0</strong>, the latest version of its open-source Linux distribution designed for cloud infrastructure, enterprise workloads, and modern data centers. Formerly known as <strong>CBL-Mariner</strong>, Azure Linux has powered Microsoft's internal cloud services for years, but version 4.0 marks its biggest evolution yet by becoming a <strong>general-purpose server operating system</strong> that organizations can deploy both inside and outside Azure.</p>

<p>The release introduces updated core components, expanded hardware support, a predictable long-term lifecycle, and improved compatibility for enterprise environments, reinforcing Microsoft's growing investment in the Linux ecosystem.</p>

<h2><strong>A New Chapter for Azure Linux</strong></h2>

<p>Azure Linux began as Microsoft's internal operating system for Azure services, containers, and cloud infrastructure. Over time, it evolved into the foundation for many Azure-hosted workloads.</p>

<p>With Azure Linux 4.0, Microsoft is positioning the distribution as a broader enterprise Linux platform rather than one limited to Azure infrastructure. The operating system is now available through Azure virtual machine images, container images, and downloadable ISO files for testing and deployment in a wider range of environments.</p>

<h2><strong>Built for Enterprise and Cloud Workloads</strong></h2>

<p>Unlike desktop-focused Linux distributions, Azure Linux is optimized for infrastructure, virtualization, containers, and cloud-native applications.</p>

<p>Typical deployment scenarios include:</p>

<ul><li>Cloud virtual machines</li>
	<li>Kubernetes clusters</li>
	<li>Container hosts</li>
	<li>AI infrastructure</li>
	<li>Edge computing</li>
	<li>Enterprise servers</li>
</ul><p>Microsoft has designed the distribution to provide a consistent operating system foundation across Azure services while remaining suitable for on-premises deployments.</p>

<h2><strong>Updated Core Components</strong></h2>

<p>Azure Linux 4.0 modernizes much of the operating system's software stack.</p>

<p>Highlights include:</p>

<ul><li><strong>Linux Kernel 7.0</strong></li>
	<li><strong>glibc 2.42</strong></li>
	<li><strong>OpenSSL 3.5</strong></li>
	<li><strong>Python 3.13</strong></li>
	<li><strong>OpenSSH 10</strong></li>
	<li><strong>dnf5</strong> as the default package manager</li>
</ul><p>These updates improve hardware compatibility, application support, security, and overall system performance while providing developers with a more current software platform.</p>

<h2><strong>Security Remains a Primary Focus</strong></h2>

<p>Security continues to be one of Azure Linux's defining characteristics.</p>

<p>Version 4.0 includes:</p></div>
      
            <div class="field field--name-node-link field--type-ds field--label-hidden field--item">  <a href="https://www.linuxjournal.com/content/azure-linux-40-released-microsoft-expands-its-enterprise-linux-platform-beyond-cloud" hreflang="en">Go to Full Article</a>
</div>
      
    </div>
  </div>]]></content:encoded>
</item>
<item>
<title><![CDATA[What is the release date for House of the Dragon season 3 episode 4 on HBO Max?]]></title>
<description><![CDATA[House of the Dragon season 3 reaches its midpoint with this week's chapter — here's when and where you can watch it.]]></description>
<link>https://tsecurity.de/de/3659767/it-nachrichten/what-is-the-release-date-for-house-of-the-dragon-season-3-episode-4-on-hbo-max/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3659767/it-nachrichten/what-is-the-release-date-for-house-of-the-dragon-season-3-episode-4-on-hbo-max/</guid>
<pubDate>Fri, 10 Jul 2026 15:03:19 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[House of the Dragon season 3 reaches its midpoint with this week's chapter — here's when and where you can watch it.]]></content:encoded>
</item>
<item>
<title><![CDATA[Hell Clock: Cursed War DLC – Yay or Nay (PC)]]></title>
<description><![CDATA[When Hell Clock first launched, I was impressed by how well it managed to blend ARPGs with the roguelike system. The main character Pajeu was likeable, the gameplay was intense, the skill trees were great and expansive, plus you always felt that you should do yet another run. I enjoy the fictiona...]]></description>
<link>https://tsecurity.de/de/3659076/it-security-nachrichten/hell-clock-cursed-war-dlc-yay-or-nay-pc/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3659076/it-security-nachrichten/hell-clock-cursed-war-dlc-yay-or-nay-pc/</guid>
<pubDate>Fri, 10 Jul 2026 10:22:49 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[When Hell Clock first launched, I was impressed by how well it managed to blend ARPGs with the roguelike system. The main character Pajeu was likeable, the gameplay was intense, the skill trees were great and expansive, plus you always felt that you should do yet another run. I enjoy the fictionalized revenge story they did, as they based it on a real-life event. But with Hell Clock: Cursed War, we’re getting a much-needed 4th chapter for the game, which delves deeper into Pajeu and his origin story, something that I found to be very exciting.

We revisit Pajeu’s town in a tormented, rather hellish form and many soldiers are still haunting that place. We get to see when Pajeu was recruited into the Brazilian army and the horrors he experienced. But aside from the DLC, the main game is getting an update as well. We have the Endless Nightmares endgame system where you can explore randomized areas and progress through 16 tiers of difficulty.

Then, there’s the Journey o...]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-15067 | Snowflake Terraform Provider up to 2.17.x Data Source/User Management workspace sql injection (CNNVD-2026-97425599)]]></title>
<description><![CDATA[A vulnerability categorized as problematic has been discovered in Snowflake Terraform Provider up to 2.17.x. This vulnerability affects unknown code of the component Data Source/User Management. Such manipulation of the argument workspace leads to sql injection.

This vulnerability is traded as C...]]></description>
<link>https://tsecurity.de/de/3658945/sicherheitsluecken/cve-2026-15067-snowflake-terraform-provider-up-to-217x-data-sourceuser-management-workspace-sql-injection-cnnvd-2026-97425599/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3658945/sicherheitsluecken/cve-2026-15067-snowflake-terraform-provider-up-to-217x-data-sourceuser-management-workspace-sql-injection-cnnvd-2026-97425599/</guid>
<pubDate>Fri, 10 Jul 2026 09:09:28 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">problematic</a> has been discovered in <a href="https://vuldb.com/product/snowflake:terraform_provider">Snowflake Terraform Provider up to 2.17.x</a>. This vulnerability affects unknown code of the component <em>Data Source/User Management</em>. Such manipulation of the argument <em>workspace</em> leads to sql injection.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-15067">CVE-2026-15067</a>. The attack may be launched remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[Agent Kim Reactivated Episode 5 Release Date, Time, Cast, and What to Expect]]></title>
<description><![CDATA[Agent Kim Reactivated episode 5 release date is set for July 10, 2026, with episode 6 following on July 11, 2026. The Korean action thriller continues its weekly Friday and Saturday release pattern as Manager Kim’s search for Min-ji gets more dangerous.



Agent Kim Reactivated Episode 5 Details
...]]></description>
<link>https://tsecurity.de/de/3657398/ios-mac-os/agent-kim-reactivated-episode-5-release-date-time-cast-and-what-to-expect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3657398/ios-mac-os/agent-kim-reactivated-episode-5-release-date-time-cast-and-what-to-expect/</guid>
<pubDate>Thu, 09 Jul 2026 16:38:30 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Agent Kim Reactivated episode 5 release date is set for July 10, 2026, with episode 6 following on July 11, 2026. The Korean action thriller continues its weekly Friday and Saturday release pattern as Manager Kim’s search for Min-ji gets more dangerous.



Agent Kim Reactivated Episode 5 Details




Release date: July 10, 2026



Next episode: Episode 6 on July 11, 2026



Platform: Netflix



Network: SBS



Genre: Action, thriller, mystery



Language: Korean



Total episodes: 10



Main cast: So Ji-sub, Choi Dae-hoon, Yoon Kyung-ho, Joo Sang-wook, Son Na-eun



Runtime slot: Friday and Saturday, 21:50 to 23:10 KST




What Happened Before Episode 5?



Spoilers ahead.



Agent Kim Reactivated follows Manager Kim, an ordinary-looking office worker who hides a dangerous past as a former secret agent. His quiet life breaks apart when his daughter Min-ji goes missing, forcing him back into the world he tried to leave behind.



By episode 4, Kim’s past becomes harder to hide. He reconnects with Sung Han-soo and Park Jin-cheol, two former agents who also understand the cost of living with secrets. Their reunion shifts the story from a personal search into a bigger fight with old enemies.



Where Is the Story Heading in Episode 5?



Episode 5 is expected to push Kim deeper into the network behind Min-ji’s disappearance. The show has already revealed that Kim is not only a worried father but also a man with enemies on all sides.



The next chapter should focus on his old identity catching up with him. As Kim follows the clues, his former life as a spy becomes a bigger threat to Min-ji’s safety and his own survival.



Episode 5 arrives at the midpoint of the 10-episode season, so it should raise the stakes before the final stretch begins. With Kim’s allies now involved, the series can move into stronger action scenes, bigger reveals, and a clearer look at who is really behind Min-ji’s kidnapping.



For viewers following the weekly release, this episode should be one of the key turning points of the season.



What do you plan to watch this weekend? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[I Wrote a New Book for Corelight]]></title>
<description><![CDATA[TLDR: I wrote a new book for Corelight called NDR Essentials. It's free at that link. This is the 10th book that I've authored or co-authored. The rest are all posted at taosecurity.com.  Why?It was time. 

 
That’s what I thought when I heard that Corelight wanted to 
update its 2021 book on net...]]></description>
<link>https://tsecurity.de/de/3657389/it-security-nachrichten/i-wrote-a-new-book-for-corelight/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3657389/it-security-nachrichten/i-wrote-a-new-book-for-corelight/</guid>
<pubDate>Thu, 09 Jul 2026 16:37:23 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div class="separator"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLD7qvOGj-vysW1oKnpVauXypgCv8nGDkAJ3-ku3GFDTwH2ud2n6fOVAkjfyQlqkWtiuloQi86jC36SFQ6q8RtciyqVGS0J1eJkJNc2_3L1-uiETD82IB7P0py3Xf3ggvbiBGi8rtIVZttdqk8vz1svXuVyt1YYZXCG1sO5VtHwTDEJgkNjCj3/s864/cover.png" imageanchor="1"><img border="0" data-original-height="864" data-original-width="576" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLD7qvOGj-vysW1oKnpVauXypgCv8nGDkAJ3-ku3GFDTwH2ud2n6fOVAkjfyQlqkWtiuloQi86jC36SFQ6q8RtciyqVGS0J1eJkJNc2_3L1-uiETD82IB7P0py3Xf3ggvbiBGi8rtIVZttdqk8vz1svXuVyt1YYZXCG1sO5VtHwTDEJgkNjCj3/w426-h640/cover.png" width="426"></a></div><br><div>TLDR: I wrote a new book for Corelight called <a href="https://corelight.com/cp/ndr-essentials">NDR Essentials</a>. It's free at that link. This is the 10th book that I've authored or co-authored. The rest are all posted at <a href="https://www.taosecurity.com/">taosecurity.com</a>. </div><div> </div><div>Why?<span class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="meta_field" data-hs-cos-type="rich_text"><p><span>It was time</span><span>.</span><span> </span></p></span></div><div><span class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="meta_field" data-hs-cos-type="rich_text">

<p><span></span><span> </span></p>
<p><span>That’s what I thought when I heard that Corelight wanted to 
update its 2021 book on network detection and response (NDR). Tamara 
Crawford, who owned the project, scheduled a meeting with me and asked 
if I might be interested in helping, depending on who might write the 
text. </span><span> </span></p>
<p><span></span><span> </span></p>
<p><span>I volunteered immediately to write the whole book, but I had a 
few conditions. The text had to be at least 100 pages long, because 100 
pages is my personal dividing line between “book” and “white paper.” I 
needed the freedom to cover the topics I wanted to address, and to not 
be told what to write. I wanted to show the four network security 
monitoring (NSM) data types working in a vendor-neutral manner, with 
technical details. Finally, I knew this project would take several 
months to research, write, lay out, proofread, and complete. Once 
Corelight agreed, I was ready to begin.</span><span> </span></p>
<p><span></span><span> </span></p>
<p><span>My goal for the book was to show how high-fidelity </span><a href="https://corelight.com/resources/glossary/network-evidence" target="_self"><u><span>network evidence</span></u></a><span>
 can power successful incident detection and response operations. For 
decades, digital security relied on the flawed premise that the “right” 
security controls could stop malicious activity. History, however, has 
repeatedly shown that prevention eventually fails. Victory belongs to 
the defender who accepts that intrusions are inevitable and who 
implements aggressive post-compromise interdiction </span><span>and containment. </span><span> </span></p>
<p><span></span><span> </span></p>
<p><span>Security teams have the best chance to stop an adversary before
 they accomplish their mission when they leverage network security 
monitoring data and the latest </span><a href="https://corelight.com/resources/glossary/ai-driven-soc" target="_self"><u><span>AI and automation assistants</span></u></a><span>. Therefore, this book equips practitioners with the tools and mindsets necessary to hunt through network evidence and diminish </span><a href="https://corelight.com/resources/glossary/attacker-dwell-time" target="_self"><u><span>attacker dwell time</span></u></a><span>. </span><span> </span></p>
<p><span></span><span> </span></p>
<p><strong><span>The book begins </span></strong><span>with a chapter 
that defines risk, threat, vulnerability, and asset value in the context
 of cybersecurity. It explains seven risk management strategies, NDR’s 
role in the security cycle, four sources of situational awareness, the 
importance of time and how to measure it, and a variety of NDR-specific 
topics like where and how to monitor, costs vs. benefits, and the 
difference between </span><a href="https://corelight.com/resources/glossary/network-security-monitoring-nsm" target="_self"><u><span>NSM</span></u></a><span> and </span><a href="https://corelight.com/resources/glossary/ndr-network-detection-and-response" target="_self"><u><span>NDR</span></u></a><span>.</span><span> </span></p>
<p><span></span><span> </span></p>
<p><strong><span>Chapter 2</span></strong><span> is all about the four 
types of NSM data. I show examples of full content data via terminal and
 graphical interfaces, and what it can do for analysts. I briefly 
demonstrate how to obtain and analyze extracted content, then show how 
transaction data can answer many of the key questions asked by security 
analysts. The chapter concludes with alert data, which has become more 
significant in an age of smarter and more precise AI capabilities.</span><span> </span></p>
<p><span></span><span> </span></p>
<p><strong><span>Chapter 3 </span></strong><span>is the first of two 
chapters demonstrating workflows for security investigators. This 
chapter examines how alert data from a sufficiently capable NDR can 
identify suspicious and malicious activity. It includes four cases, 
showing how lateral movement, expired SSL certificates, outbound 
reconnaissance, and malicious remote desktop protocol behavior manifest 
in alerts.</span><span> </span></p>
<p><span></span><span> </span></p>
<p><strong><span>Chapter 4</span></strong><span> presents the other side of investigative workflows, relying on </span><a href="https://corelight.com/resources/glossary/threat-hunting" target="_self"><u><span>threat hunting</span></u></a><span>
 to reveal adversary activity. Properly collected, rendered, and 
displayed NSM data is crucial, because you can’t really hunt without 
high-quality evidence. The chapter includes six cases, showing how file 
name mismatches, unusual downloads, large data transfers, coordinated 
exfiltration, lateral movement, and certificates appear when exposed via
 threat hunting.</span><span> </span></p>
<p><span></span><span> </span></p>
<p><strong><span>Chapter 5 </span></strong><span>explores how artificial
 intelligence and automation technologies are bringing powerful new 
capabilities to security teams. I start by discussing the generation of 
alerts at the edge and at the center, then I share how AI can help with 
investigating suspicious and </span><span>malicious activity. I conclude
 with advice on the best use of agentic triage and how AI will integrate
 with tools while enabling new capabilities.</span><span> </span></p>
<p><span></span><span> </span></p>
<p><span>If you’re a security leader, such as a CISO or director, you’ll
 probably be most interested in Chapters 1 and 5. You should ensure your
 teams have the data described in Chapters 2-4. If you’re a security 
analyst, you’ll probably be most interested in Chapters 2-4, although 
you should be familiar with the concepts and strategies in Chapters 1 
and 5. If you’re familiar with my previous works, you will be happy to 
see that this book has a certain amount of “future-proofing” embedded. I
 did not explain how to install any specific tools, nor did the tools I 
use rely on strict display technologies. All of the examples in Chapter 2
 use open source tools with stable outputs, such as Tshark, Wireshark</span><span><sup><span>®</span></sup></span><span>, Zeek</span><span><sup><span>®</span></sup></span><span>, and Suricata</span><span><sup><span>®</span></sup></span><span>. </span><span> </span></p>
<p><span></span><span> </span></p>
<p><span>I hope readers find the book relevant to their security work 
and a decent introduction to adding NSM data from capable NDRs to their 
investigations. This book is only the beginning of what can be done once
 teams have access to high-fidelity network evidence. If you’d like to 
know more about the book, Vince Stoffer interviewed me for the </span><a href="https://corelight.com/podcasts" target="_self"><u><span>Corelight podcast</span></u></a><span>,
 and that episode will be available on YouTube, Spotify, and Apple 
Podcasts. As I say at the end of every episode, “we will see you on the 
network.” Read </span><a href="https://corelight.com/cp/ndr-essentials" target="_self"><em><u><span>NDR Essentials</span></u></em></a><span> to learn how high-fidelity network evidence can strengthen your security program!</span></p></span></div><div><br></div><div class="blogger-post-footer">Copyright 2003-2020 Richard Bejtlich and TaoSecurity (taosecurity.blogspot.com and www.taosecurity.com)</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[I read Careless People, the Meta tell-all — and it made me want the chapter Sarah Wynn-Williams couldn’t write]]></title>
<description><![CDATA[Reading Careless People helped me understand how Facebook’s internal culture may have allowed Mark Zuckerberg’s strange metaverse obsession to become Meta’s defining idea.]]></description>
<link>https://tsecurity.de/de/3657333/it-nachrichten/i-read-careless-people-the-meta-tell-all-and-it-made-me-want-the-chapter-sarah-wynn-williams-couldnt-write/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3657333/it-nachrichten/i-read-careless-people-the-meta-tell-all-and-it-made-me-want-the-chapter-sarah-wynn-williams-couldnt-write/</guid>
<pubDate>Thu, 09 Jul 2026 16:17:39 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Reading Careless People helped me understand how Facebook’s internal culture may have allowed Mark Zuckerberg’s strange metaverse obsession to become Meta’s defining idea.]]></content:encoded>
</item>
<item>
<title><![CDATA[ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance]]></title>
<description><![CDATA[This is the part 5 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1).   ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance   Chapter…
Read more →
The post ISA VDA 6.0.3 (part 5) — Information Secu...]]></description>
<link>https://tsecurity.de/de/3657303/it-security-nachrichten/isa-vda-603-part-5-information-security-sheet-supplier-relationships-compliance/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3657303/it-security-nachrichten/isa-vda-603-part-5-information-security-sheet-supplier-relationships-compliance/</guid>
<pubDate>Thu, 09 Jul 2026 16:08:28 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>This is the part 5 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1).   ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance   Chapter…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-5-information-security-sheet-supplier-relationships-compliance-2/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-5-information-security-sheet-supplier-relationships-compliance-2/">ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Final lap for 'Mario Kart Tour' badly closes another Nintendo mobile gaming chapter]]></title>
<description><![CDATA[Nintendo will shut down "Mario Kart Tour" later in 2026, highlighting how Nintendo continues to not deliver what consumers want on hardware platforms that they do not manufacture.Mario Kart TourThe game will remain playable until 11 p.m. Pacific on September 29, when Nintendo will permanently end...]]></description>
<link>https://tsecurity.de/de/3655098/ios-mac-os/final-lap-for-mario-kart-tour-badly-closes-another-nintendo-mobile-gaming-chapter/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3655098/ios-mac-os/final-lap-for-mario-kart-tour-badly-closes-another-nintendo-mobile-gaming-chapter/</guid>
<pubDate>Wed, 08 Jul 2026 19:54:40 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Nintendo will shut down "Mario Kart Tour" later in 2026, highlighting how Nintendo continues to not deliver what consumers want on hardware platforms that they do not manufacture.<br><br><div><img src="https://photos5.appleinsider.com/gallery/68200-143776-IMG_7899-xl.jpg" alt="Mario and friends race go-karts around a colorful globe, with world landmarks, coins, power-ups, and banana peels surrounding them against a bright blue sky" height="738"><span>Mario Kart Tour</span></div><br>The game will remain playable until 11 p.m. Pacific on September 29, when Nintendo will permanently end online service. Nintendo announced the shutdown Tuesday and directed players to updated support policies covering ruby purchases and Gold Pass subscriptions that took effect July 7.<br><br>Nintendo thanked players for supporting <em>Mario Kart Tour</em> <a href="https://appleinsider.com/articles/19/09/29/review-mario-kart-tour-on-the-iphone-and-ipad-falls-short-on-nearly-every-front">since its launch</a> but didn't explain why it decided to end service. Support pages published alongside the announcement explain how rubies and Gold Pass subscriptions will be handled before the shutdown.<br><br><em>Mario Kart Tour</em> launched on <a href="https://appleinsider.com/inside/iphone" title="iPhone" data-kpt="1">iPhone</a> and Android in September 2019 as Nintendo's highest-profile effort to bring one of its biggest console franchises to smartphones. Nintendo rebuilt <em>Mario Kart</em> around touchscreen controls, seasonal tours, ruby-based item draws and an optional Gold Pass subscription instead of delivering the console experience players expected.<br><br><br> <a href="https://appleinsider.com/articles/26/07/08/final-lap-for-mario-kart-tour-badly-closes-another-nintendo-mobile-gaming-chapter?utm_source=rss">Continue Reading on AppleInsider</a> | <a href="https://forums.appleinsider.com/discussion/244909?urm_source=rss">Discuss on our Forums</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[Maximum Pleasure Guaranteed Season 1 Episode 9 Recap: Paula Gets Closer to the Truth]]></title>
<description><![CDATA[Maximum Pleasure Guaranteed Season 1, Episode 9 brings Paula closer to the truth as the custody battle, the conspiracy, and the danger around her finally start connecting.



Episode 9 Details



DetailInfoEpisode titleErroneousRelease dateJuly 8, 2026Streaming onApple TVGenreDark comedy thriller...]]></description>
<link>https://tsecurity.de/de/3654685/ios-mac-os/maximum-pleasure-guaranteed-season-1-episode-9-recap-paula-gets-closer-to-the-truth/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3654685/ios-mac-os/maximum-pleasure-guaranteed-season-1-episode-9-recap-paula-gets-closer-to-the-truth/</guid>
<pubDate>Wed, 08 Jul 2026 16:53:10 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Maximum Pleasure Guaranteed Season 1, Episode 9 brings Paula closer to the truth as the custody battle, the conspiracy, and the danger around her finally start connecting.



Episode 9 Details



DetailInfoEpisode titleErroneousRelease dateJuly 8, 2026Streaming onApple TVGenreDark comedy thrillerSeasonSeason 1Episode9 of 10Main castTatiana Maslany, Jake Johnson, Dolly de Leon, Charlie Hall, Kiarra Hamagami Goldberg, Jessy Hodges, Jon Michael Hill, Nola Wallace



Spoilers Ahead



Episode 9 moves the story toward the finale with more pressure on Paula. Custody hearings are now close, and her personal life is no longer separate from the bigger mystery. The strange clues, the fact-checkers, and the people around Paula begin to make more sense as the episode connects earlier loose ends.



Paula is still caught between proving what she knows and protecting her place as a mother. The episode uses that tension well because every new answer creates another problem. Her situation is no longer just about one crime. It now feels like several people have been hiding parts of the truth.



The Case Starts Coming Together



The biggest strength of Episode 9 is how it brings old details back into focus. Earlier moments that felt odd now look important. The conspiracy theories are no longer just background noise. They start forming a clearer picture, and Paula finally sees that the chaos around her has a pattern.



At the same time, the episode keeps the emotional stakes grounded. Paula’s custody issues make every decision heavier. She cannot chase every lead without risking her family life, but staying quiet also puts her in danger.



Rudy And Geri Add Heart To The Chaos



Rudy and Geri continue to stand out in Episode 9. Their bond has grown through the season, and this episode gives them another meaningful moment. Their teamwork helps balance the darker parts of the story, especially as Paula’s world becomes more unstable.



Their dynamic also gives the episode a softer side without slowing the mystery. They are not just comic relief now. They help move the story forward and give the show a warmer emotional layer before the finale.



The Ending Sets Up A Tense Finale



Episode 9 ends with the feeling that the final piece is still missing. Paula has more answers, but the danger around her is also bigger now. The attack mentioned in the episode description pushes the story into a more urgent place, making the finale feel like it will have major consequences.



With only one episode left, Maximum Pleasure Guaranteed has set up a strong closing chapter. Paula now has to face the truth, the custody fight, and the people who have been pulling strings behind the scenes.



What do you plan to watch next, and what did you think of Episode 9? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[A brewing battle: More IT workers want unions. The industry doesn’t.]]></title>
<description><![CDATA[Until recently, many tech professionals viewed themselves as a special and respected worker class: highly educated, hard-working, well paid, and in demand.



“They considered themselves above unions,” says Zak Thompson, senior software engineer at Kickstarter and union steward at Kickstarter Uni...]]></description>
<link>https://tsecurity.de/de/3654078/ai-nachrichten/a-brewing-battle-more-it-workers-want-unions-the-industry-doesnt/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3654078/ai-nachrichten/a-brewing-battle-more-it-workers-want-unions-the-industry-doesnt/</guid>
<pubDate>Wed, 08 Jul 2026 13:04:22 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>Until recently, many tech professionals viewed themselves as a special and respected worker class: highly educated, hard-working, well paid, and in demand.</p>



<p>“They considered themselves above unions,” says <a href="https://www.linkedin.com/in/zthompson1/" target="_blank" rel="noreferrer noopener">Zak Thompson</a>, senior software engineer at Kickstarter and union steward at Kickstarter United.</p>



<p>Big Tech issued aspirational mission statements that motivated workers, workplaces were seen as meritocracies, and employees were encouraged to speak out if they were unhappy. If workers didn’t like where they worked, they just moved on: other employers would be falling over themselves to hire them.</p>



<p>How times have changed.</p>



<p>Now, fed up with mass layoffs, disillusioned with Big Tech’s direction, and stunned by bold management proclamations that AI will displace huge numbers of people in many tech jobs — starting with programmers — interest in unions has risen sharply among tech professionals. Workers in some organizations, including Kickstarter, have already taken the plunge.</p>



<h2 class="wp-block-heading">A surge in interest</h2>



<p>“Starting in 2022, the industry as a whole started seeing very large layoffs across the board [and] that has dramatically shifted the balance of power. I think most people in the industry have experienced that one way or another,” says Google software engineer <a href="https://www.linkedin.com/in/alan-mcavinney-a386b8122/" target="_blank" rel="noreferrer noopener">Alan McAvinney</a>.</p>



<p>But not everyone is convinced that the layoffs have changed the power dynamic. “I wouldn’t say the balance has definitively shifted… some things point to workers losing ground and others point to improvement,” says <a href="https://www.mercatus.org/scholars/liya-palagashvili" target="_blank" rel="noreferrer noopener">Liya Palagashvili</a>, senior research fellow and director of the Labor Policy Project at the Mercatus Center at George Mason University. </p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="683" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Liya Palagashvili of the Mercatus Center at George Mason University</p><br></figcaption></figure><p class="imageCredit">Mercatus Center at George Mason University</p></div>



<p>What matters, she says, is not the size of the layoffs but worker options: how easily laid off workers can find alternative work in their field.</p>



<p>For McAvinney, the decision to support a union was about a culture change at his employer.</p>



<p>“In 2019, Google fired four people (<a href="https://www.newsweek.com/google-fires-thanksgiving-four-workers-crush-dissent-1474102" target="_blank" rel="noreferrer noopener">the ‘Thanksgiving Four’</a>) after they organized and spoke out internally against the company’s work with the anti-union firm IRI and US Customs and Border Protection. That was a big turning point for me,” he says. “Historically, we had a pretty robust culture that actually encouraged us to speak up internally.”</p>



<p>Google said the employees were fired for violating data security policies, but many workers believed the move was retaliatory. It became a galvanizing event that contributed to the launch of the <a href="https://www.alphabetworkersunion.org/" target="_blank" rel="noreferrer noopener">Alphabet Workers Union (AWU)</a> in 2021, says McAvinney, organizing chair, Alphabet Workers Union-CWA. (Alphabet is the parent company of Google.)</p>



<p>So far, tech worker interest in unions hasn’t translated into higher membership numbers nationally. According to the US Census Bureau’s <a href="https://www.census.gov/programs-surveys/cps.html" target="_blank" rel="noreferrer noopener">Current Population Survey (CPS)</a>, union membership in tech occupations was about 3.5% in 2025, says Palagashvili. “While there have been some high-profile organizing efforts, they do not yet show up as a broad national increase in tech-sector unionization.”</p>



<p>Overall, only 10% of American workers belonged to a union in 2025, the Bureau of Labor Statistics (BLS) <a href="https://www.bls.gov/news.release/union2.nr0.htm" target="_blank" rel="noreferrer noopener">reported</a> — near an all-time low — but interest in labor unions is rising. A 2025 Gallup survey found that <a href="https://news.gallup.com/poll/694472/labor-union-approval-relatively-steady.aspx" target="_blank" rel="noreferrer noopener">68% of Americans approved of unions</a>, up from 48% in 2009. Interest is particularly strong among younger workers, the <a href="https://www.epi.org/publication/workers-resolve-drives-increase-in-unionization-in-2025/" target="_blank" rel="noreferrer noopener">Economic Policy Institute reports</a>, and in a 2024 <a href="https://www.teamblind.com/blog/why-are-unions-not-common-tech-industry/" target="_blank" rel="noreferrer noopener">online survey of 1,900 tech professionals</a> on the career site Blind, 67% of respondents said they’d be “very likely” or “somewhat likely” to join a union if their company had one.</p>



<p>Nonetheless, for most tech professionals, those positive perceptions have not so far translated into widespread union membership.</p>



<h2 class="wp-block-heading">Fear, uncertainty, and doubt</h2>



<p>In the wake of mass layoffs that began in 2022, the primary driver toward tech worker unionization may well be job security.</p>



<p>“I think a greater concern is that their work and skills have been devalued at the same time their jobs become less secure and their wages and benefits have declined,” says <a href="https://www.ilr.cornell.edu/people/kate-l-bronfenbrenner" target="_blank" rel="noreferrer noopener">Kate Bronfenbrenner</a>, director of labor education research and senior lecturer emeritus at Cornell University’s School of Industrial and Labor Relations.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="683" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Kate Bronfenbrenner from the School of Industrial and Labor Relations, Cornell University</p><br></figcaption></figure><p class="imageCredit">ILR School/Cornell University</p></div>



<p>The fear that AI will displace IT workers en masse is palpable, says Google’s McAvinney. Whether the <a href="https://www.computerworld.com/article/4175956/the-ai-tech-job-slaughter-gets-real.html">mass layoffs to date</a> were actually driven by AI or if AI was used as a pretext, “Large numbers of people have that concern, and that is absolutely part of the interest in collective action — getting organized, joining a union, or forming a union,” he says.</p>



<p>The second motivator is ideological disillusionment. “Workers recruited with promises that they would be changing the world discovered that they were really building surveillance systems or military technology,” Bronfenbrenner says.</p>



<p>The insidious use of AI surveillance is another concern, says Bronfenbrenner. For example, Meta’s announcement that it would <a href="https://www.computerworld.com/article/4161929/meta-to-track-employee-keystrokes-screen-activity-to-train-ai-agents.html">use AI to track US-based workers’ computer activities</a>, including clicks, keystrokes, mouse movements, and screen snapshots to train AI agents had a dystopian feel to it. Were these workers training AI to take over their jobs, just as US workers were asked to train their lower-cost foreign replacements during the offshoring craze in the mid-2000s? (Meta later <a href="https://www.computerworld.com/article/4188640/meta-pauses-employee-monitoring-program-after-data-protections-fail-2.html">paused the tracking program</a> after employees twice demonstrated the inadequacy of privacy protections for the collected data.)</p>



<p>But Bronfenbrenner argues that AI’s bigger threat may be its use as a surveillance tool to prevent organizing. “My research on surveillance in organizing campaigns found that it tripled from 11% in the early 2000s to one third in 2021,” she says.</p>



<p>“The deeper pattern is the same one inherent in <a href="https://www.britannica.com/science/Taylorism" target="_blank" rel="noreferrer noopener">Taylorism</a> — management trying to know everything that’s under the worker’s cap, to monitor every step so workers have no control and no secrets,” Bronfenbrenner says. “Now they have even more technology to do it, and they can potentially replace you entirely with AI.”</p>



<p><a href="https://www.linkedin.com/in/simonerobutti/" target="_blank" rel="noreferrer noopener">Simone Robutti</a>, an organizer with Tech Workers Coalition Global, calls the current wave of tech layoffs “a prequel to whatever AI-driven layoffs are coming.” It’s part of the trend of “lowering the cost of knowledge workers, of cognitive workers, of office workers in general — because that’s the bet on AI,” he says.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full is-resized"> width="745" height="486" sizes="auto, (max-width: 745px) 100vw, 745px"&gt;<figcaption class="wp-element-caption"><p>Simone Robutti from Tech Workers Coalition Global</p><br></figcaption></figure><p class="imageCredit">TWC</p></div>



<p>Whether employers can in fact replace workers with AI (or will be able to soon) is an open question. “If Amazon lays off a hundred workers, and ninety of them find comparable jobs within a few months, that mitigates the concern,” says Palagashvili from George Mason University. “If most of them have to sell their houses and move across the country, or end up underemployed — not just unemployed, but working in warehouses instead of at a competitor — that’s a different picture.”</p>



<p>So far that hasn’t been a big issue for former Google employees, says McAvinney. “It used to be that if you left Google, you could get a job anywhere in tech instantly. That’s no longer the case, but most people I talk to are still finding work in the industry,” he says.</p>



<p>But for those newly entering the workforce, it’s much harder to find a job. According to the <a href="https://hai.stanford.edu/ai-index/2026-ai-index-report/economy" target="_blank" rel="noreferrer noopener">Stanford HAI <em>2026 AI Index Report</em></a>, released in April, “employment for software developers ages 22 to 25 has fallen nearly 20% from 2024.”</p>



<h2 class="wp-block-heading">Successes and setbacks</h2>



<p>While organizing can be an uphill battle and workers often face aggressive pushback from their employers, there have been a few notable successes.</p>



<p>In the UK, workers can join a union as individual members before their employer formally recognizes that union for collective bargaining purposes. That’s how 300 workers in Google DeepMind’s London office initially joined the <a href="https://www.cwu.org/" target="_blank" rel="noreferrer noopener">Communication Workers Union</a>. In April, 98% of the 300 CWU members <a href="https://fortune.com/2026/05/05/google-deepmind-unionize-vote-military-ai-contracts-internal-backlash-pentagon-deal-israeli-defense-forces/" target="_blank" rel="noreferrer noopener">voted in favor of pursuing union recognition</a>, formally requesting that management recognize the CWU and <a href="https://www.unitetheunion.org/" target="_blank" rel="noreferrer noopener">Unite the Union</a> as representatives for approximately 1,000 staff. (Google DeepMind disputed characterizing the action as a vote to unionize).</p>



<p>And in May, some 2,100 tech workers at the University of California <a href="https://upte.org/news/2100-tech-workers-vote-to-join-upte" target="_blank" rel="noreferrer noopener">joined the University Professional and Technical Employees union</a>, which is affiliated with Communications Workers of America (UPTE-CWA), with 96% of the workers voting yes.</p>



<p>“A lot of tech workers right now are extremely concerned about job security and about their work being automated,” says <a href="https://www.linkedin.com/in/mbelasco/" target="_blank" rel="noreferrer noopener">Max Belasco</a>, a business systems analyst at the UCLA School of Law and co-chair of the UCLA chapter of UPTE-CWA, Local 9119.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="683" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Max Belasco from the UCLA chapter of UPTE-CWA</p>
</figcaption></figure><p class="imageCredit">Zac Goldstein</p></div>



<p>The CWA described the organizing initiative as “<a href="https://cwa-union.org/news/it-workers-join-upte-cwa-form-largest-tech-union-country" target="_blank" rel="noreferrer noopener">the largest tech industry organizing campaign in US history</a>.” But it wasn’t the first.</p>



<p>“Between 2022 and 2024, CWA organized nearly 400 different digital media companies,” Bronfenbrenner says, including the game developer Activision and the New York Times.</p>



<p>Kickstarter’s 85 employees voted in 2020 to form <a href="https://kickstarterunited.org/" target="_blank" rel="noreferrer noopener">Kickstarter United</a> — the vote was 55% in favor — and most recently the union negotiated a contract that includes a four-day workweek, AI protections, and a minimum pay floor for 59 employees, including tech workers. </p>



<p>“What we ended up winning was yearly benchmarking of all employee salaries to the 60th percentile, along with yearly cost of living adjustments,” says Thompson.</p>



<p>But the way forward has been rocky. Shortly after the union was ratified, Kickstarter announced layoffs. The union, which is affiliated with the Office and Professional Employees International Union (OPEIU), wasn’t able to reverse that decision but did <a href="https://kickstarterunited.org/may-day-severance-agreement/" target="_blank" rel="noreferrer noopener">negotiate better severance terms</a>, including four months of severance pay (versus 2 to 3 weeks for every year worked) and six months of health benefits.</p>



<p>When contract negotiations faltered in October 2025, the union went on strike for 42 days. By December, a new contract was ratified. Shortly thereafter, the company announced another round of layoffs that included four union leaders, one of whom had helped to negotiate the new contract. The union is currently fighting those dismissals and will be arguing its case in third-party arbitration.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="618" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Members of Kickstarter United union on strike</p></figcaption></figure><p class="imageCredit">Kyle Friend</p></div>



<p>The <a href="https://www.nlrb.gov/guidance/key-reference-materials/national-labor-relations-act" target="_blank" rel="noreferrer noopener">National Labor Relations Act</a> of 1935 codified American workers’ rights to unionize and take collective action, and it established the <a href="https://www.nlrb.gov/about-nlrb/who-we-are" target="_blank" rel="noreferrer noopener">National Labor Relations Board</a> to protect those rights. Unfortunately for Kickstarter, NLRA enforcement under the Trump administration isn’t what it once was.</p>



<p>“Cases brought up for violations of the NLRA can go for months or years without ever seeing a hearing or having any sort of judgment. That gives companies more power to flagrantly ignore it,” Thompson says.</p>



<p>Tech firms have other weapons to dissuade employees from unionizing. Researchers from Carnegie Mellon University and Princeton University in 2025 <a href="https://dl.acm.org/doi/epdf/10.1145/3757671" target="_blank" rel="noreferrer noopener">interviewed 44 US-based tech worker-organizers</a>, who cited additional pressure tactics including threats to withdraw venture capital funding — essentially killing venture-backed firms if employees vote to unionize — and threats of being fired that <a href="https://techworkerscoalition.org/blog/2025/03/14/immigrant-rights-are-labor-rights-tech-workers-and-h-1b-visas/" target="_blank" rel="noreferrer noopener">put tech workers with H-1B visas in an impossible position</a>.</p>



<p>Kickstarter United is a majority union — one that has won NLRB certification. While that’s possible in smaller organizations, success in larger tech firms has been much more limited.</p>



<p>Alphabet is a prime example: the Alphabet Workers Union-CWA is a “pre-majority” union that lacks NLRB certification and has no formally recognized bargaining unit. Formed in 2021 with fewer than 400 members, today it represents 1,400 members, still a small fraction of Alphabet’s US-based workforce, estimated at over 100,000.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="839" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption"><p>Alan McAvinney from Alphabet Workers Union-CWA</p></figcaption></figure><p class="imageCredit">Aran Per Ink</p></div>



<p>The challenge, says McAvinney, lies in trying to organize a distributed workforce of in-office, remote, and contract workers. “Large tech companies don’t split easily into discrete segments — there’s no strong geographic component to teams, and a single team is often spread across many locations,” which makes getting majority support unrealistic, he says.</p>



<p>But that doesn’t mean the union has had no impact. “In January, we launched our Googlers for Job Security campaign. Today we’re organizing around four demands: a guaranteed minimum severance package for everyone who’s laid off, voluntary buyouts before any mandatory layoffs, an end to GRAD quotas (GRAD being Google’s performance review system) so ratings reflect actual performance and aren’t given or changed to force a particular distribution, and the option to take severance as leave, giving workers, especially those on visas, more time on payroll,” McAvinney says.</p>



<p>“In response, Google did start offering voluntary exit packages,” he says. The union was also able to negotiate one contract, for Google Help workers. However, those workers aren’t actually Google employees: they’re contractors who report to Google management but work for Accenture.</p>



<h2 class="wp-block-heading">The counterargument</h2>



<p>Do unions get what they bargain for? Conservative business and labor economists say union contracts typically have rigid pay structures that restrict merit-based pay in favor of seniority-based wage increases, and that unions, as certified by the NLRB, create labor monopolies that limit worker choice and push up wages to levels detrimental to both workers and business.</p>



<p>The collective bargaining model is not well suited to the highly dynamic and innovation-driven tech sector, Palagashvili argues. “Firms often need to reorganize teams, redesign products, adjust roles, and redeploy talent quickly,” she says. </p>



<p>Collective bargaining agreements make those adjustments much more difficult by imposing uniform terms for an entire bargaining unit, regardless of individual preferences and circumstances. The contracts, she says, “are more about higher pay and less about flexibility.”</p>



<p>But Thompson says that hasn’t been his experience. “The thing with a union is you get to write the contract,” he says. “At Kickstarter we care about recognizing individual contributions, merit, and having a clear career progression.”</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full is-resized"> width="972" height="972" sizes="auto, (max-width: 972px) 100vw, 972px"&gt;<figcaption class="wp-element-caption"><p>Zak Thompson from Kickstarter United</p><br></figcaption></figure><p class="imageCredit">Fee Christoph</p></div>



<p>Kickstarter United pushed the company to clearly define what it takes to get a promotion, advocated for no “at will” employment, where employees can be fired any time without a stated reason; won standards for minimum pay, raises, promotions, and time off; secured AI protections; and codified a four-day work week.</p>



<p>Yes, some tech professionals voiced concerns about unions, such as that they stifle innovation and limit compensation for top performers, Thompson says, but “a lot of those people came around. They said ‘I was wrong. I feel way more protected, more secure, and I see the benefits.’”</p>



<p>Bronfenbrenner says it’s a mistake to think that tech workers are inherently different from other workers, adding that the two industries with the highest union density are entertainment and professional sports. “These are professionals with unique talents and capabilities, and they’ve organized successfully under the exclusive representation system.”</p>



<h2 class="wp-block-heading">Will we see a unionized tech workforce?</h2>



<p>If unions eventually prevail in tech, it will happen in the face of intense pressure from employers not to organize. </p>



<p>“The Alphabet Workers Union is a case study of the limits of the first wave of tech labor organizing,” says Robutti from the Tech Workers Coalition. “They hit a threshold beyond which they couldn’t fight the union busting anymore, and they became entrenched at that size.”</p>



<p>No one should expect large-scale unionization to occur overnight, Bronfenbrenner says. “The auto and steel industries weren’t organized in months. It took decades. Organizing global tech companies will take the same.”</p>



<p>While McAvinney acknowledges that a traditional majority union may be difficult to achieve any time soon in a company as large as Alphabet, he’s still bullish on his pre-majority union’s ability to make a difference. “Ultimately, regardless of which type of union you are, you can only win as much as you have leverage to win. Your leverage is inherently limited, but that doesn’t mean you can’t win anything,” he says.</p>



<p>Attitudes about unions appear to be changing rapidly. “Interest in unions is high, and I expect that will continue,” McAvinney says. “Now is an excellent time for people to start getting organized. I have seen lots of evidence of that.”</p>



<p>Thompson agrees. “We are seeing an uptick of people in tech reaching out, trying to get help organizing. When people have their job conditions continue to deteriorate, they are going to start organizing,” he says. “We’re definitely seeing a shift from ‘it’d be nice if we had a union’ to ‘okay, how can I actually do this now?’”</p>



<p><em>Come back next week for Part 2: How to unionize your tech workplace</em></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[‘Trying’ Season 5 Premiere Is Now Streaming on Apple TV: Everything to Know]]></title>
<description><![CDATA[Trying season 5 premiere is now available on Apple TV, bringing Nikki and Jason back for another emotional and funny chapter in their family story. The new season premiered globally on July 8, 2026, with fresh episodes releasing weekly.



Trying Season 5 Release Details




Streaming on: Apple T...]]></description>
<link>https://tsecurity.de/de/3653274/ios-mac-os/trying-season-5-premiere-is-now-streaming-on-apple-tv-everything-to-know/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3653274/ios-mac-os/trying-season-5-premiere-is-now-streaming-on-apple-tv-everything-to-know/</guid>
<pubDate>Wed, 08 Jul 2026 06:55:54 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Trying season 5 premiere is now available on Apple TV, bringing Nikki and Jason back for another emotional and funny chapter in their family story. The new season premiered globally on July 8, 2026, with fresh episodes releasing weekly.



Trying Season 5 Release Details




Streaming on: Apple TV



Premiere date: July 8, 2026



Episodes: 8



Release schedule: New episode every Wednesday through August 26, 2026



Genre: Comedy, family drama



Main cast: Esther Smith, Rafe Spall, Scarlett Rayner, Cooper Turner, Charlotte Riley



Also starring: Darren Boyd, Siân Brooke, Celia Imrie, Phil Davis, Gbemisola Ikumelo, Colin Morgan




Where the Story Goes Next



Spoilers ahead: Season 5 begins after Princess and Tyler’s biological mother, Kat, arrives at Nikki and Jason’s doorstep. Her return shakes the family’s settled life and brings new emotional pressure for everyone involved.



Nikki and Jason have already faced years of ups and downs as parents, but this season puts their family bond to a new test. Kat’s arrival creates confusion, fear, and difficult questions for Princess and Tyler, while Nikki and Jason try to protect the home they have built.



Why Fans Should Watch Trying Season 5



The series has always worked because it mixes warm comedy with real family emotions. Season 5 continues that tone while adding a bigger challenge for Nikki and Jason.



Esther Smith and Rafe Spall return as the heart of the show, while Charlotte Riley’s Kat brings a new layer to the story. The season also keeps the show’s familiar charm with supporting characters who add humor, comfort, and tension when needed.



With one episode now streaming and more arriving every Wednesday, Trying fans have a new weekly Apple TV comfort watch to follow this summer.



What do you plan to watch this week? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Europe’s Sovereignty Story Had a Missing Chapter, It Was Called Silicon.]]></title>
<description><![CDATA[Europe has made real progress on digital sovereignty in the past three years. Open-source software is gaining ground. Data residency rules are tightening. Cloud alternatives are emerging. But there is a gap in this story that almost nobody talks about: the chip itself. Every sovereign cloud, ever...]]></description>
<link>https://tsecurity.de/de/3652985/unix-server/europes-sovereignty-story-had-a-missing-chapter-it-was-called-silicon/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3652985/unix-server/europes-sovereignty-story-had-a-missing-chapter-it-was-called-silicon/</guid>
<pubDate>Wed, 08 Jul 2026 02:16:37 +0200</pubDate>
<category>🐧 Unix Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Europe has made real progress on digital sovereignty in the past three years. Open-source software is gaining ground. Data residency rules are tightening. Cloud alternatives are emerging. But there is a gap in this story that almost nobody talks about: the chip itself. Every sovereign cloud, every sovereign AI model, every sovereign government system in […]</p>
<p>The post <a href="https://www.suse.com/c/europes-sovereignty-story-had-a-missing-chapter-it-was-called-silicon/">Europe’s Sovereignty Story Had a Missing Chapter, It Was Called Silicon.</a> appeared first on <a href="https://www.suse.com/c">SUSE Communities</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Build for the new AI era with Microsoft and NVIDIA]]></title>
<description><![CDATA[Presented by Microsoft and NVIDIAEvery generation of leaders has its own business transformation challenges to face. A decade ago, modernization meant cloud migration. Five years ago, it meant enabling remote and hybrid work. And just a few short years ago, the generative AI boom prompted organiz...]]></description>
<link>https://tsecurity.de/de/3652103/it-nachrichten/build-for-the-new-ai-era-with-microsoft-and-nvidia/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3652103/it-nachrichten/build-for-the-new-ai-era-with-microsoft-and-nvidia/</guid>
<pubDate>Tue, 07 Jul 2026 18:18:29 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><i>Presented by Microsoft and NVIDIA</i></p><hr><p>Every generation of leaders has its own business transformation challenges to face. A decade ago, modernization meant cloud migration. Five years ago, it meant enabling remote and hybrid work. And just a few short years ago, the generative AI boom prompted organizations globally into enterprise AI adoption.</p><h2>The demo era is ending</h2><p>In the years since AI became the big new buzzword, generative models proved to be a crucial stepping stone, but the path to Frontier Transformation is agentic AI. Machine-generated answers aren’t enough when what the business really needs is sophisticated AI that can <i>act</i>. Experimenting with agentic capabilities was a necessary step; prototypes and pilots have proliferated. But the chapter on demos is closing. </p><p>Scale acceleration is beginning. In 2026, organizations that want to see agentic results that impact the bottom line must move from the knowledge layer to the action layer. And they certainly intend to—according to <a href="https://www.deloitte.com/us/en/what-we-do/capabilities/applied-artificial-intelligence/content/state-of-ai-in-the-enterprise.html">Deloitte’s 2026 AI report</a>, 54% of enterprises surveyed expect to move 40% or more of their AI experiments into production. How hard could it be?</p><h2>Agents are a different engineering problem—here’s why</h2><p>Moving past prototype is the hardest part. Shipping an agent to production isn’t just a harder version of shipping a generative AI chatbot. Agentic production is a different engineering problem altogether, requiring orchestration, memory, runtime isolation, and ground-up observability—all required to deliver an agent that reasons, acts, and collaborates.</p><p>Once an agent moves into production, every tool and data source becomes an integration challenge. Running the agent requires isolation between sessions, durable state, and runtimes that hold up under a working load. And operational blindness turns agentic assets into liabilities. Once an agent is live, you need the ability to monitor, understand, and troubleshoot its systems across its lifecycle—a whole new discipline of observability is required, but teams don’t know how to get there. But we’ve been here before. When microservices faced a similar crossroads a decade ago, the lesson was this: those who recognized the need for a platform approach are the ones with the best success.</p><h2>The production gap: Why most agent projects stall before scale</h2><p>Moving from demos to real-world deployment introduces a host of challenges: how to chain multiple steps together reliably, how to ensure security and identity across agent components, how to monitor and improve agent behavior, and more. Many teams attempt to address these challenges with custom scaffolding, but the risk is often greater than the reward—slower time to value, gaps, and unreliability.</p><p>This is where the platform approach comes in. Without shared context and intrinsic trust, AI is difficult to rely on and hard to scale, with data fragmentation keeping production agents from matching pilot performance. Agents lack business context, enterprise signals are fragmented, development is complex and brittle, and security and governance are bolted on.</p><p>The solution is a unified platform that empowers developers to build, run, and scale agentic and physical AI end-to-end. Together, Microsoft and NVIDIA partner to enable this platform approach, helping enterprises effectively take agents from pilot to production.</p><h2>What an agent factory actually looks like</h2><p>Frontier Firms are those that not only successfully take agents into production but that also understand monolithic agents aren’t enough—a <i>system</i> of collaborative agents is key. They are the ones building agent factories, operating on a production philosophy that utilizes a reliable foundation and repeatable process for cross-functional, collaborative agentic solutions at enterprise scale.</p><p>So what is an agent factory? It’s a coordinated production architecture that combines an agentic control plane with accelerated specialist models, agents, and skills, allowing organizations to enable a governed system of models and agents at enterprise scale.</p><p>Within this production system, Frontier Firms are building heterogenous systems of agents, where the right models, tools, skills, and specialist agents are appropriately orchestrated at the right step of every job. The result is broad-reasoning frontier agents that plan, synthesize, and collaborate with users and other agents while accelerated specialist models and agents execute domain-specific work with speed and efficiency. </p><p>Microsoft and NVIDIA jointly empower this agentic factory approach. Microsoft delivers the enterprise control plane enabling runtime, identity, governance, observability, data access, and tool connectivity that agents need to collaborate safely. NVIDIA delivers the intelligence, acceleration, and specialist layers that give enterprises a repeatable way to move from isolated demos to governed, scalable agentic systems that can work together across business processes to accomplish meaningful tasks, not just answer questions.</p><p>At<b> Microsoft Build 2026</b>, <a href="https://aka.ms/Build-Blog-VB-Article">Microsoft and NVIDIA showed how this architecture is coming together across cloud, local, and developer environments, </a>bringing NVIDIA models, blueprints, and tooling into the Microsoft ecosystem to enable systems of agents with governance and speed:</p><ul><li><p>NVIDIA models are now on the hosted agents in Foundry Agent Service.</p></li><li><p>NVIDIA’s open model portfolio on Foundry now spans agentic, physical, and scientific AI.</p></li><li><p>NVIDIA Agent Toolkit and NVIDIA NemoClaw blueprints give developers an open-source platform to build production agents on Foundry.</p></li><li><p>Foundry Local on Azure Local is now on the NVIDIA RTX PRO 6000 Blackwell Server Edition platform.</p></li><li><p>NVIDIA OpenShell integrates with GitHub Copilot for secure agent development.</p></li></ul><p>You can read more about these announcements <a href="https://blogs.nvidia.com/blog/microsoft-build-windows-local-cloud-devices/">here</a>.</p><h2><b>Where to go from here</b></h2><p>The organizations that win with agentic AI will be the ones that invest in a factory approach. Ready to take the next step on your agentic journey? Explore these resources:</p><ul><li><p>Dive deeper into the <a href="https://www.microsoft.com/en-us/ai/agent-factory?utm_source=chatgpt.com">Microsoft Agent Factory</a>—read the <a href="https://azure.microsoft.com/en-us/blog/tag/agent-factory/">Agent Factory blog series</a>.</p></li><li><p>See how developers accelerate AI deployment with <a href="https://www.nvidia.com/en-us/ai-data-science/products/nim-microservices/?utm_source=chatgpt.com">NVIDIA NIM</a> microservices for high-performance AI. </p></li><li><p>Learn more about Microsoft and NVIDIA’s latest developments for success with agentic AI—read the <a href="https://aka.ms/Build-Blog-VB-Article">announcements from Microsoft Build 2026</a>.</p></li><li><p>See how <a href="https://www.nvidia.com/en-us/ai-data-science/products/nim-microservices/?utm_source=chatgpt.com">NVIDIA Nemotron 3 Ultra</a> powers faster, more efficient reasoning for long-running agents.</p></li><li><p>To discuss your Microsoft Foundry needs or learn more, <a href="https://ai.azure.com/catalog/publishers/nvidia,nvidia-ai">contact us here</a>.</p></li></ul><hr><p><i>Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact </i><a href="mailto:sales@venturebeat.com"><i><u>sales@venturebeat.com</u></i></a><i>.</i></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Silo Season 3 Episode 2 Release Date, Time, Plot and Spoilers Ahead]]></title>
<description><![CDATA[Silo Season 3 continues this week with Episode 2, and the story is already moving toward bigger answers about Juliette, Silo 18, and the origins of the underground world. Episode 2 is titled “It’s All Good” and arrives after the Season 3 premiere opened a new chapter for the Apple TV sci-fi drama...]]></description>
<link>https://tsecurity.de/de/3651803/ios-mac-os/silo-season-3-episode-2-release-date-time-plot-and-spoilers-ahead/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3651803/ios-mac-os/silo-season-3-episode-2-release-date-time-plot-and-spoilers-ahead/</guid>
<pubDate>Tue, 07 Jul 2026 16:11:38 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Silo Season 3 continues this week with Episode 2, and the story is already moving toward bigger answers about Juliette, Silo 18, and the origins of the underground world. Episode 2 is titled “It’s All Good” and arrives after the Season 3 premiere opened a new chapter for the Apple TV sci-fi drama.




Series: Silo Season 3



Episode: Season 3 Episode 2



Episode title: It’s All Good



Release date: Friday, July 10, 2026



Release time: 12:00 a.m. PT / 3:00 a.m. ET



Genre: Sci-fi, dystopian drama, mystery



Total episodes: 10



Season 3 start date: July 3, 2026



Season 3 finale date: September 4, 2026





https://www.youtube.com/embed/C9-_VVX9BvE




Plot



Episode 2 is expected to continue Juliette Nichols’ difficult return after the events outside the silo. Season 3 is now dealing with memory loss, unrest inside Silo 18, and the growing truth behind how the silos were created.



Spoilers ahead: The new season also expands the story beyond the present timeline. Viewers will see more of the “Before Times,” where Helen Drew and Daniel Keene begin uncovering a larger conspiracy connected to the world’s collapse and the construction of the silos.



For Episode 2, the main focus should stay on Juliette’s condition, the pressure inside Silo 18, and the early clues that connect the present-day mystery with the past. The episode should also push the season closer to the bigger question fans have been waiting for: who built the silos, and why were people really forced underground?



FAQs



When does Silo Season 3 Episode 2 come out? Silo Season 3 Episode 2 releases on Friday, July 10, 2026, on Apple TV.  What time will Silo Season 3 Episode 2 release? The episode releases at 12:00 a.m. PT and 3:00 a.m. ET in the US.  How many episodes are in Silo Season 3? Silo Season 3 has 10 episodes, with one new episode released every Friday.  When is the Silo Season 3 finale? The Season 3 finale is scheduled for Friday, September 4, 2026.  Is Silo Season 4 happening? Yes, Silo has already been renewed for Season 4, which will conclude the story.  



Silo Season 3 Episode 2 streams on Apple TV this Friday. Apple TV costs $12.99 per month in the US after the free trial. What do you plan to watch next? Let us know in the comments.]]></content:encoded>
</item>
<item>
<title><![CDATA[Envirotech Vehicles Closes Merger with Azio AI Ahead of Schedule, Positioning Combined Company to Capture $487 Billion 2026 AI Infrastructure Opportunity]]></title>
<description><![CDATA[Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.



Envirotech Vehicles, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of ...]]></description>
<link>https://tsecurity.de/de/3651654/ai-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3651654/ai-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</guid>
<pubDate>Tue, 07 Jul 2026 15:19:27 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p><em>Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.</em></p>



<p><a href="https://www.evtvusa.com/" target="_blank" rel="noreferrer noopener">Envirotech Vehicles</a>, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of its merger with Azio AI Corporation (“Azio AI”) on July 2, 2026, paving the way for the Company to transform to an AI Datacenter Provider and meeting the growing market demand for artificial intelligence (“AI”) infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; a market that the International Data Corporation (IDC) projects will reach $487 billion in global spending in 2026 and exceed $1 trillion by 2029.<a href="http://docs.google.com/blank">[1]</a> The transaction marks a defining milestone in the Company’s strategic transformation and establishes the foundation for its next phase of commercial execution and long-term growth.</p>



<p>The parties amended the proposed transaction structure to expedite the closing timeline, allowing the combined company to begin operating as a fully integrated public company significantly sooner than originally anticipated. The accelerated closing enables management to immediately focus on commercialization across its expanding AI Datacenter strategy.</p>



<p>With the merger complete and the combined company operating as one organization, management is now fully focused on commercial execution, infrastructure deployment, strategic growth initiatives, and creating long-term shareholder value.</p>



<p>Over the past several months, the Company advanced development activities at its South Texas site and deployed six megawatts of off-grid power for its modular data centers. The Company further secured rights to a 548-acre site with the capacity to scale up to 500 MW, supporting the future development of AI hyperscale data centers.</p>



<p>Management believes these achievements demonstrate that the combined company is entering its next phase with meaningful operational momentum already in place rather than beginning from a standing start. Infrastructure deployment is underway, customer commitments have already been established, commercial execution is actively progressing, and the Company’s corporate structure is now aligned with an operating platform built to support long-term expansion.</p>



<p>The completion of the merger comes at a time when investment in AI infrastructure continues to accelerate globally as enterprises increasingly require access to high-performance computing resources, GPU infrastructure, and scalable digital power solutions. Management believes the combined company is well positioned to capitalize on these long-term industry trends through a diversified infrastructure strategy designed to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations.</p>



<p>Following the closing of the transaction, the Company intends to continue expanding its AI Infrastructure strategy through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships designed to maximize utilization of its power resources while creating multiple long-term revenue opportunities.</p>



<p>In connection with the closing of the merger, Phillip Oldridge has stepped down as Chief Executive Officer. Jason Maddox vacates the President position and is now the Chief Financial Officer. The Company’s Board of Directors appointed Simon Yu as President and Chris Young as Chief Executive Officer, effective immediately.</p>



<p>Mr. Yu is a serial entrepreneur and public markets operator with almost a decade of experience taking companies public, executing capital raises, and scaling businesses. He has previously served in founder, C-suite, and board roles at three publicly traded companies, two of which reached market capitalizations in excess of $1 billion. Mr. Yu has led legal, accounting, and advisory teams through Regulation A+ Tier 2 offerings, PCAOB audits, and public company reporting, alongside leading M&amp;A transactions. As an active early-stage venture investor, he has evaluated investment opportunities across artificial intelligence, SaaS, and B2B technology.</p>



<p>Mr. Young brings extensive experience in launching and leading public companies and investing in and advising emerging technology companies, with a particular focus on artificial intelligence, software innovation, and strategic growth initiatives. Prior to joining EVTV, he served as Chief Executive Officer of Clubhouse Media Group, a publicly traded social media company and an Entrepreneur in Residence at Amplify, where he worked alongside founders and venture-backed technology companies to accelerate commercialization and support the development of high-growth technology businesses.</p>



<p>“Today’s announcement represents far more than the completion of a merger—it marks the beginning of our next chapter,” said Chris Young, Chief Executive Officer of EVTV. “Over the past several months, our teams have been building the operational foundation of this business while simultaneously working toward completing this transaction. With the merger now finalized, we move forward as one company with one leadership team and one strategy, focused on executing against the opportunities in front of us. We believe demand for AI infrastructure, enterprise compute, and digital infrastructure will continue expanding for years to come. Our objective is to build a scalable platform capable of serving that demand while creating long-term value for our shareholders.”</p>



<p>Jason Maddox, Chief Financial Officer of EVTV, added, “Completing this transaction under the amended merger structure allows us to immediately focus on execution. We have already established meaningful operational momentum, and we believe operating as a unified public company enhances our ability to deploy infrastructure, serve customers, pursue strategic growth opportunities, and continue building long-term shareholder value.”</p>



<p>The transaction establishes a unified operating platform designed to support the Company’s long-term growth strategy through continued investment in AI infrastructure, enterprise computing, digital power assets, and digital infrastructure development. Management believes the completion of the merger provides the operational and organizational foundation necessary to pursue the next phase of commercialization while expanding its presence across some of the fastest-growing sectors of the global technology market.</p>



<h3 class="wp-block-heading"><strong>Transaction and Operational Highlights</strong></h3>



<ul class="wp-block-list">
<li>Successfully completed the merger with Azio AI pursuant to an amended and restated merger agreement.</li>



<li>Approximately six megawatts of off-grid digital infrastructure deployed at the Company’s South Texas development site.</li>



<li>Development footprint exceeding 548 acres with the potential to support up to 500 MW of AI infrastructure capacity.</li>



<li>Combined company positioned to accelerate commercialization across AI infrastructure, enterprise GPU compute, digital power solutions, and digital asset mining operations.</li>



<li>Merger consideration consisted of 2,655,157 shares of common stock and 973,450 shares of non-voting convertible preferred stock in exchange for 100% of outstanding capital stock of Azio AI, of which 194,807 shares of common stock were reserved for convertible notes of Azio AI assumed by the Company upon closing.</li>



<li>Each share of preferred stock convertible into 100 shares of Company common stock subject to stockholder approval.</li>



<li>Chris Young appointed Chief Executive Officer and Chairman of the Board.</li>



<li>Simon Yu appointed President.</li>



<li>Jason Maddox appointed Chief Financial Officer.</li>



<li>Phillip Oldridge stepped down as Chief Executive Officer.</li>
</ul>



<p><strong>About Envirotech Vehicles, Inc.</strong></p>



<p>Envirotech Vehicles, Inc. (NASDAQ: EVTV) is a technology infrastructure company focused on developing, owning, and operating artificial intelligence data centers, enterprise GPU compute infrastructure, digital power solutions, and digital asset mining operations. Following its acquisition of Azio AI, the Company operates an integrated AI infrastructure business encompassing AI data center development, the sale and distribution of enterprise GPU systems and server infrastructure, high-performance computing solutions, power hosting, and strategic technology investments, serving enterprise and institutional customers across domestic and international markets. Through this diversified AI infrastructure strategy, the Company is positioned to capitalize on the rapidly expanding global demand for AI infrastructure, compute capacity, digital power, and next-generation AI technologies.</p>



<p>For more information please visit: <a href="http://www.azioai.ai/" target="_blank" rel="noreferrer noopener">www.azioai.ai</a> and for potential partnerships contact: <a href="mailto:AI@PhoenixMGMTconsulting.com" target="_blank" rel="noreferrer noopener">AI@PhoenixMGMTconsulting.com</a></p>



<p><strong>Forward-Looking Statements</strong></p>



<p>This press release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. In some cases, you can identify forward-looking statements by words such as “may,” “will,” “could,” “expect,” “anticipate,” “believe,” “estimate,” “project,” “intend,” “continue,” “potential,” “ongoing,” or the negative of these terms or other comparable terminology, although not all forward-looking statements contain these words. Forward-looking statements include statements regarding the Company’s ability to capitalize on accelerating demand for AI infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; the Company’s plans to continue expanding its digital infrastructure platform through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships; the Company’s ability to maximize utilization of its power resources while creating multiple long-term revenue opportunities; the ability to continue deploying modular digital infrastructure at the Company’s South Texas site; the anticipated deployment and scaling of NVIDIA B200 and B300 GPU systems; the ability to advance and execute against the Company’s commercial infrastructure pipeline; the anticipated development of the Company’s footprint; the ability to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations; customer demand for AI infrastructure, enterprise compute, and digital infrastructure; the Company’s ability to build a scalable platform designed to serve that demand and create long-term shareholder value; and the Company’s broader business strategy and long-term growth objectives.</p>



<p>These statements are based on current expectations and assumptions that involve risks and uncertainties that could cause actual results to differ materially. Most of these factors are outside the Company’s control and are difficult to predict. Factors that may affect actual results include, but are not limited to, the Company’s limited operating history within AI infrastructure and compute operations, project scope, engineering challenges, supply chain constraints, installation timelines, energy availability, finalization of site usage rights, regulatory considerations, equipment performance, ability to raise capital required for expansion activities, changes in digital asset markets, evolving compute demand, market conditions, the Company’s ability to successfully integrate the combined business following the completion of the merger, the risk that the anticipated benefits and synergies of the merger are not realized, the risk of unexpected costs, charges, or expenses resulting from or relating to the merger, potential adverse reactions or changes to business relationships resulting from the completion of the merger, risks related to the diversion of management’s attention from ongoing business operations during the post-closing integration period, the risk that required stockholder approval for the conversion of preferred stock issued in the merger as required by rules of The Nasdaq Stock Market LLC (the “Conversion Proposal”) is not obtained, and additional risks and uncertainties described in the Company’s most recent Annual Report on Form 10-K and subsequent Quarterly Reports on Form 10-Q filed with the SEC, which are available at www.sec.gov. The Company undertakes no obligation to update forward-looking statements except as required by law.</p>



<p><strong><em>Important Information About the Merger and Where to Find it</em></strong></p>



<p>The Company expects to file a proxy statement with the SEC relating to the Conversion Proposal. The definitive proxy statement will be sent to all Company stockholders. Before making any voting decision, investors and security-holders of the Company are urged to read the proxy statement and all other relevant documents filed or that will be filed with the SEC in connection with the Conversion Proposal as they become available because they will contain important information about the amended and restated merger agreement between the parties and the related transactions and the Conversion Proposal to be voted upon by the Company’s stockholders. Investors and security-holders will be able to obtain free copies of the proxy statement and all other relevant documents filed or that will be filed with the SEC by the Company through the website maintained by the SEC at www.sec.gov.</p>



<p><strong><em>Participants in the Solicitation</em></strong></p>



<p>The Company and its directors and executive officers may be considered participants in the solicitation of proxies from EVTV’s stockholders with respect to the Conversion Proposal under the rules of the SEC. Information about the directors and executive officers of EVTV is set forth in its Annual Report on Form 10-K for the year ended December 31, 2025, which was filed with the SEC on April 13, 2026, and in subsequent Quarterly Reports on Form 10-Q and other documents filed by the Company from time to time with the SEC. Additional information regarding the persons who may be deemed participants in the proxy solicitation and a description of their direct and indirect interests, by security holdings or otherwise, will also be included in the proxy statement, and other relevant materials to be filed with the SEC when they become available. You may obtain free copies of these documents as described above.</p>



<p>¹ Source: International Data Corporation (IDC), “AI Infrastructure Spending Caps Historic Year at ~$90 Billion in Q4 2025; 2029 Spending to Eclipse $1 Trillion,” April 16, 2026. The Company has not independently verified the data or projections contained in this report, and there can be no assurance that the projections will be realized.</p>



<h5 class="wp-block-heading">Contact</h5>



<p><strong>Phoenix MGMT &amp; Consulting</strong></p>



<p><strong>Press@PhoenixMGMTConsulting.com</strong></p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Envirotech Vehicles Closes Merger with Azio AI Ahead of Schedule, Positioning Combined Company to Capture $487 Billion 2026 AI Infrastructure Opportunity]]></title>
<description><![CDATA[Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.



Envirotech Vehicles, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of ...]]></description>
<link>https://tsecurity.de/de/3651645/it-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3651645/it-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</guid>
<pubDate>Tue, 07 Jul 2026 15:18:26 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p><em>Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.</em></p>



<p><a href="https://www.evtvusa.com/" target="_blank" rel="noreferrer noopener">Envirotech Vehicles</a>, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of its merger with Azio AI Corporation (“Azio AI”) on July 2, 2026, paving the way for the Company to transform to an AI Datacenter Provider and meeting the growing market demand for artificial intelligence (“AI”) infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; a market that the International Data Corporation (IDC) projects will reach $487 billion in global spending in 2026 and exceed $1 trillion by 2029.<a href="http://docs.google.com/blank">[1]</a> The transaction marks a defining milestone in the Company’s strategic transformation and establishes the foundation for its next phase of commercial execution and long-term growth.</p>



<p>The parties amended the proposed transaction structure to expedite the closing timeline, allowing the combined company to begin operating as a fully integrated public company significantly sooner than originally anticipated. The accelerated closing enables management to immediately focus on commercialization across its expanding AI Datacenter strategy.</p>



<p>With the merger complete and the combined company operating as one organization, management is now fully focused on commercial execution, infrastructure deployment, strategic growth initiatives, and creating long-term shareholder value.</p>



<p>Over the past several months, the Company advanced development activities at its South Texas site and deployed six megawatts of off-grid power for its modular data centers. The Company further secured rights to a 548-acre site with the capacity to scale up to 500 MW, supporting the future development of AI hyperscale data centers.</p>



<p>Management believes these achievements demonstrate that the combined company is entering its next phase with meaningful operational momentum already in place rather than beginning from a standing start. Infrastructure deployment is underway, customer commitments have already been established, commercial execution is actively progressing, and the Company’s corporate structure is now aligned with an operating platform built to support long-term expansion.</p>



<p>The completion of the merger comes at a time when investment in AI infrastructure continues to accelerate globally as enterprises increasingly require access to high-performance computing resources, GPU infrastructure, and scalable digital power solutions. Management believes the combined company is well positioned to capitalize on these long-term industry trends through a diversified infrastructure strategy designed to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations.</p>



<p>Following the closing of the transaction, the Company intends to continue expanding its AI Infrastructure strategy through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships designed to maximize utilization of its power resources while creating multiple long-term revenue opportunities.</p>



<p>In connection with the closing of the merger, Phillip Oldridge has stepped down as Chief Executive Officer. Jason Maddox vacates the President position and is now the Chief Financial Officer. The Company’s Board of Directors appointed Simon Yu as President and Chris Young as Chief Executive Officer, effective immediately.</p>



<p>Mr. Yu is a serial entrepreneur and public markets operator with almost a decade of experience taking companies public, executing capital raises, and scaling businesses. He has previously served in founder, C-suite, and board roles at three publicly traded companies, two of which reached market capitalizations in excess of $1 billion. Mr. Yu has led legal, accounting, and advisory teams through Regulation A+ Tier 2 offerings, PCAOB audits, and public company reporting, alongside leading M&amp;A transactions. As an active early-stage venture investor, he has evaluated investment opportunities across artificial intelligence, SaaS, and B2B technology.</p>



<p>Mr. Young brings extensive experience in launching and leading public companies and investing in and advising emerging technology companies, with a particular focus on artificial intelligence, software innovation, and strategic growth initiatives. Prior to joining EVTV, he served as Chief Executive Officer of Clubhouse Media Group, a publicly traded social media company and an Entrepreneur in Residence at Amplify, where he worked alongside founders and venture-backed technology companies to accelerate commercialization and support the development of high-growth technology businesses.</p>



<p>“Today’s announcement represents far more than the completion of a merger—it marks the beginning of our next chapter,” said Chris Young, Chief Executive Officer of EVTV. “Over the past several months, our teams have been building the operational foundation of this business while simultaneously working toward completing this transaction. With the merger now finalized, we move forward as one company with one leadership team and one strategy, focused on executing against the opportunities in front of us. We believe demand for AI infrastructure, enterprise compute, and digital infrastructure will continue expanding for years to come. Our objective is to build a scalable platform capable of serving that demand while creating long-term value for our shareholders.”</p>



<p>Jason Maddox, Chief Financial Officer of EVTV, added, “Completing this transaction under the amended merger structure allows us to immediately focus on execution. We have already established meaningful operational momentum, and we believe operating as a unified public company enhances our ability to deploy infrastructure, serve customers, pursue strategic growth opportunities, and continue building long-term shareholder value.”</p>



<p>The transaction establishes a unified operating platform designed to support the Company’s long-term growth strategy through continued investment in AI infrastructure, enterprise computing, digital power assets, and digital infrastructure development. Management believes the completion of the merger provides the operational and organizational foundation necessary to pursue the next phase of commercialization while expanding its presence across some of the fastest-growing sectors of the global technology market.</p>



<h3 class="wp-block-heading"><strong>Transaction and Operational Highlights</strong></h3>



<ul class="wp-block-list">
<li>Successfully completed the merger with Azio AI pursuant to an amended and restated merger agreement.</li>



<li>Approximately six megawatts of off-grid digital infrastructure deployed at the Company’s South Texas development site.</li>



<li>Development footprint exceeding 548 acres with the potential to support up to 500 MW of AI infrastructure capacity.</li>



<li>Combined company positioned to accelerate commercialization across AI infrastructure, enterprise GPU compute, digital power solutions, and digital asset mining operations.</li>



<li>Merger consideration consisted of 2,655,157 shares of common stock and 973,450 shares of non-voting convertible preferred stock in exchange for 100% of outstanding capital stock of Azio AI, of which 194,807 shares of common stock were reserved for convertible notes of Azio AI assumed by the Company upon closing.</li>



<li>Each share of preferred stock convertible into 100 shares of Company common stock subject to stockholder approval.</li>



<li>Chris Young appointed Chief Executive Officer and Chairman of the Board.</li>



<li>Simon Yu appointed President.</li>



<li>Jason Maddox appointed Chief Financial Officer.</li>



<li>Phillip Oldridge stepped down as Chief Executive Officer.</li>
</ul>



<p><strong>About Envirotech Vehicles, Inc.</strong></p>



<p>Envirotech Vehicles, Inc. (NASDAQ: EVTV) is a technology infrastructure company focused on developing, owning, and operating artificial intelligence data centers, enterprise GPU compute infrastructure, digital power solutions, and digital asset mining operations. Following its acquisition of Azio AI, the Company operates an integrated AI infrastructure business encompassing AI data center development, the sale and distribution of enterprise GPU systems and server infrastructure, high-performance computing solutions, power hosting, and strategic technology investments, serving enterprise and institutional customers across domestic and international markets. Through this diversified AI infrastructure strategy, the Company is positioned to capitalize on the rapidly expanding global demand for AI infrastructure, compute capacity, digital power, and next-generation AI technologies.</p>



<p>For more information please visit: <a href="http://www.azioai.ai/" target="_blank" rel="noreferrer noopener">www.azioai.ai</a> and for potential partnerships contact: <a href="mailto:AI@PhoenixMGMTconsulting.com" target="_blank" rel="noreferrer noopener">AI@PhoenixMGMTconsulting.com</a></p>



<p><strong>Forward-Looking Statements</strong></p>



<p>This press release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. In some cases, you can identify forward-looking statements by words such as “may,” “will,” “could,” “expect,” “anticipate,” “believe,” “estimate,” “project,” “intend,” “continue,” “potential,” “ongoing,” or the negative of these terms or other comparable terminology, although not all forward-looking statements contain these words. Forward-looking statements include statements regarding the Company’s ability to capitalize on accelerating demand for AI infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; the Company’s plans to continue expanding its digital infrastructure platform through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships; the Company’s ability to maximize utilization of its power resources while creating multiple long-term revenue opportunities; the ability to continue deploying modular digital infrastructure at the Company’s South Texas site; the anticipated deployment and scaling of NVIDIA B200 and B300 GPU systems; the ability to advance and execute against the Company’s commercial infrastructure pipeline; the anticipated development of the Company’s footprint; the ability to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations; customer demand for AI infrastructure, enterprise compute, and digital infrastructure; the Company’s ability to build a scalable platform designed to serve that demand and create long-term shareholder value; and the Company’s broader business strategy and long-term growth objectives.</p>



<p>These statements are based on current expectations and assumptions that involve risks and uncertainties that could cause actual results to differ materially. Most of these factors are outside the Company’s control and are difficult to predict. Factors that may affect actual results include, but are not limited to, the Company’s limited operating history within AI infrastructure and compute operations, project scope, engineering challenges, supply chain constraints, installation timelines, energy availability, finalization of site usage rights, regulatory considerations, equipment performance, ability to raise capital required for expansion activities, changes in digital asset markets, evolving compute demand, market conditions, the Company’s ability to successfully integrate the combined business following the completion of the merger, the risk that the anticipated benefits and synergies of the merger are not realized, the risk of unexpected costs, charges, or expenses resulting from or relating to the merger, potential adverse reactions or changes to business relationships resulting from the completion of the merger, risks related to the diversion of management’s attention from ongoing business operations during the post-closing integration period, the risk that required stockholder approval for the conversion of preferred stock issued in the merger as required by rules of The Nasdaq Stock Market LLC (the “Conversion Proposal”) is not obtained, and additional risks and uncertainties described in the Company’s most recent Annual Report on Form 10-K and subsequent Quarterly Reports on Form 10-Q filed with the SEC, which are available at www.sec.gov. The Company undertakes no obligation to update forward-looking statements except as required by law.</p>



<p><strong><em>Important Information About the Merger and Where to Find it</em></strong></p>



<p>The Company expects to file a proxy statement with the SEC relating to the Conversion Proposal. The definitive proxy statement will be sent to all Company stockholders. Before making any voting decision, investors and security-holders of the Company are urged to read the proxy statement and all other relevant documents filed or that will be filed with the SEC in connection with the Conversion Proposal as they become available because they will contain important information about the amended and restated merger agreement between the parties and the related transactions and the Conversion Proposal to be voted upon by the Company’s stockholders. Investors and security-holders will be able to obtain free copies of the proxy statement and all other relevant documents filed or that will be filed with the SEC by the Company through the website maintained by the SEC at www.sec.gov.</p>



<p><strong><em>Participants in the Solicitation</em></strong></p>



<p>The Company and its directors and executive officers may be considered participants in the solicitation of proxies from EVTV’s stockholders with respect to the Conversion Proposal under the rules of the SEC. Information about the directors and executive officers of EVTV is set forth in its Annual Report on Form 10-K for the year ended December 31, 2025, which was filed with the SEC on April 13, 2026, and in subsequent Quarterly Reports on Form 10-Q and other documents filed by the Company from time to time with the SEC. Additional information regarding the persons who may be deemed participants in the proxy solicitation and a description of their direct and indirect interests, by security holdings or otherwise, will also be included in the proxy statement, and other relevant materials to be filed with the SEC when they become available. You may obtain free copies of these documents as described above.</p>



<p>¹ Source: International Data Corporation (IDC), “AI Infrastructure Spending Caps Historic Year at ~$90 Billion in Q4 2025; 2029 Spending to Eclipse $1 Trillion,” April 16, 2026. The Company has not independently verified the data or projections contained in this report, and there can be no assurance that the projections will be realized.</p>



<h5 class="wp-block-heading">Contact</h5>



<p><strong>Phoenix MGMT &amp; Consulting</strong></p>



<p><strong>Press@PhoenixMGMTConsulting.com</strong></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Envirotech Vehicles Closes Merger with Azio AI Ahead of Schedule, Positioning Combined Company to Capture $487 Billion 2026 AI Infrastructure Opportunity]]></title>
<description><![CDATA[Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.



Envirotech Vehicles, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of ...]]></description>
<link>https://tsecurity.de/de/3651613/it-security-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3651613/it-security-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</guid>
<pubDate>Tue, 07 Jul 2026 15:09:20 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p><em>Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.</em></p>



<p><a href="https://www.evtvusa.com/" target="_blank" rel="noreferrer noopener">Envirotech Vehicles</a>, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of its merger with Azio AI Corporation (“Azio AI”) on July 2, 2026, paving the way for the Company to transform to an AI Datacenter Provider and meeting the growing market demand for artificial intelligence (“AI”) infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; a market that the International Data Corporation (IDC) projects will reach $487 billion in global spending in 2026 and exceed $1 trillion by 2029.<a href="http://docs.google.com/blank">[1]</a> The transaction marks a defining milestone in the Company’s strategic transformation and establishes the foundation for its next phase of commercial execution and long-term growth.</p>



<p>The parties amended the proposed transaction structure to expedite the closing timeline, allowing the combined company to begin operating as a fully integrated public company significantly sooner than originally anticipated. The accelerated closing enables management to immediately focus on commercialization across its expanding AI Datacenter strategy.</p>



<p>With the merger complete and the combined company operating as one organization, management is now fully focused on commercial execution, infrastructure deployment, strategic growth initiatives, and creating long-term shareholder value.</p>



<p>Over the past several months, the Company advanced development activities at its South Texas site and deployed six megawatts of off-grid power for its modular data centers. The Company further secured rights to a 548-acre site with the capacity to scale up to 500 MW, supporting the future development of AI hyperscale data centers.</p>



<p>Management believes these achievements demonstrate that the combined company is entering its next phase with meaningful operational momentum already in place rather than beginning from a standing start. Infrastructure deployment is underway, customer commitments have already been established, commercial execution is actively progressing, and the Company’s corporate structure is now aligned with an operating platform built to support long-term expansion.</p>



<p>The completion of the merger comes at a time when investment in AI infrastructure continues to accelerate globally as enterprises increasingly require access to high-performance computing resources, GPU infrastructure, and scalable digital power solutions. Management believes the combined company is well positioned to capitalize on these long-term industry trends through a diversified infrastructure strategy designed to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations.</p>



<p>Following the closing of the transaction, the Company intends to continue expanding its AI Infrastructure strategy through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships designed to maximize utilization of its power resources while creating multiple long-term revenue opportunities.</p>



<p>In connection with the closing of the merger, Phillip Oldridge has stepped down as Chief Executive Officer. Jason Maddox vacates the President position and is now the Chief Financial Officer. The Company’s Board of Directors appointed Simon Yu as President and Chris Young as Chief Executive Officer, effective immediately.</p>



<p>Mr. Yu is a serial entrepreneur and public markets operator with almost a decade of experience taking companies public, executing capital raises, and scaling businesses. He has previously served in founder, C-suite, and board roles at three publicly traded companies, two of which reached market capitalizations in excess of $1 billion. Mr. Yu has led legal, accounting, and advisory teams through Regulation A+ Tier 2 offerings, PCAOB audits, and public company reporting, alongside leading M&amp;A transactions. As an active early-stage venture investor, he has evaluated investment opportunities across artificial intelligence, SaaS, and B2B technology.</p>



<p>Mr. Young brings extensive experience in launching and leading public companies and investing in and advising emerging technology companies, with a particular focus on artificial intelligence, software innovation, and strategic growth initiatives. Prior to joining EVTV, he served as Chief Executive Officer of Clubhouse Media Group, a publicly traded social media company and an Entrepreneur in Residence at Amplify, where he worked alongside founders and venture-backed technology companies to accelerate commercialization and support the development of high-growth technology businesses.</p>



<p>“Today’s announcement represents far more than the completion of a merger—it marks the beginning of our next chapter,” said Chris Young, Chief Executive Officer of EVTV. “Over the past several months, our teams have been building the operational foundation of this business while simultaneously working toward completing this transaction. With the merger now finalized, we move forward as one company with one leadership team and one strategy, focused on executing against the opportunities in front of us. We believe demand for AI infrastructure, enterprise compute, and digital infrastructure will continue expanding for years to come. Our objective is to build a scalable platform capable of serving that demand while creating long-term value for our shareholders.”</p>



<p>Jason Maddox, Chief Financial Officer of EVTV, added, “Completing this transaction under the amended merger structure allows us to immediately focus on execution. We have already established meaningful operational momentum, and we believe operating as a unified public company enhances our ability to deploy infrastructure, serve customers, pursue strategic growth opportunities, and continue building long-term shareholder value.”</p>



<p>The transaction establishes a unified operating platform designed to support the Company’s long-term growth strategy through continued investment in AI infrastructure, enterprise computing, digital power assets, and digital infrastructure development. Management believes the completion of the merger provides the operational and organizational foundation necessary to pursue the next phase of commercialization while expanding its presence across some of the fastest-growing sectors of the global technology market.</p>



<h3 class="wp-block-heading"><strong>Transaction and Operational Highlights</strong></h3>



<ul class="wp-block-list">
<li>Successfully completed the merger with Azio AI pursuant to an amended and restated merger agreement.</li>



<li>Approximately six megawatts of off-grid digital infrastructure deployed at the Company’s South Texas development site.</li>



<li>Development footprint exceeding 548 acres with the potential to support up to 500 MW of AI infrastructure capacity.</li>



<li>Combined company positioned to accelerate commercialization across AI infrastructure, enterprise GPU compute, digital power solutions, and digital asset mining operations.</li>



<li>Merger consideration consisted of 2,655,157 shares of common stock and 973,450 shares of non-voting convertible preferred stock in exchange for 100% of outstanding capital stock of Azio AI, of which 194,807 shares of common stock were reserved for convertible notes of Azio AI assumed by the Company upon closing.</li>



<li>Each share of preferred stock convertible into 100 shares of Company common stock subject to stockholder approval.</li>



<li>Chris Young appointed Chief Executive Officer and Chairman of the Board.</li>



<li>Simon Yu appointed President.</li>



<li>Jason Maddox appointed Chief Financial Officer.</li>



<li>Phillip Oldridge stepped down as Chief Executive Officer.</li>
</ul>



<p><strong>About Envirotech Vehicles, Inc.</strong></p>



<p>Envirotech Vehicles, Inc. (NASDAQ: EVTV) is a technology infrastructure company focused on developing, owning, and operating artificial intelligence data centers, enterprise GPU compute infrastructure, digital power solutions, and digital asset mining operations. Following its acquisition of Azio AI, the Company operates an integrated AI infrastructure business encompassing AI data center development, the sale and distribution of enterprise GPU systems and server infrastructure, high-performance computing solutions, power hosting, and strategic technology investments, serving enterprise and institutional customers across domestic and international markets. Through this diversified AI infrastructure strategy, the Company is positioned to capitalize on the rapidly expanding global demand for AI infrastructure, compute capacity, digital power, and next-generation AI technologies.</p>



<p>For more information please visit: <a href="http://www.azioai.ai/" target="_blank" rel="noreferrer noopener">www.azioai.ai</a> and for potential partnerships contact: <a href="mailto:AI@PhoenixMGMTconsulting.com" target="_blank" rel="noreferrer noopener">AI@PhoenixMGMTconsulting.com</a></p>



<p><strong>Forward-Looking Statements</strong></p>



<p>This press release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. In some cases, you can identify forward-looking statements by words such as “may,” “will,” “could,” “expect,” “anticipate,” “believe,” “estimate,” “project,” “intend,” “continue,” “potential,” “ongoing,” or the negative of these terms or other comparable terminology, although not all forward-looking statements contain these words. Forward-looking statements include statements regarding the Company’s ability to capitalize on accelerating demand for AI infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; the Company’s plans to continue expanding its digital infrastructure platform through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships; the Company’s ability to maximize utilization of its power resources while creating multiple long-term revenue opportunities; the ability to continue deploying modular digital infrastructure at the Company’s South Texas site; the anticipated deployment and scaling of NVIDIA B200 and B300 GPU systems; the ability to advance and execute against the Company’s commercial infrastructure pipeline; the anticipated development of the Company’s footprint; the ability to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations; customer demand for AI infrastructure, enterprise compute, and digital infrastructure; the Company’s ability to build a scalable platform designed to serve that demand and create long-term shareholder value; and the Company’s broader business strategy and long-term growth objectives.</p>



<p>These statements are based on current expectations and assumptions that involve risks and uncertainties that could cause actual results to differ materially. Most of these factors are outside the Company’s control and are difficult to predict. Factors that may affect actual results include, but are not limited to, the Company’s limited operating history within AI infrastructure and compute operations, project scope, engineering challenges, supply chain constraints, installation timelines, energy availability, finalization of site usage rights, regulatory considerations, equipment performance, ability to raise capital required for expansion activities, changes in digital asset markets, evolving compute demand, market conditions, the Company’s ability to successfully integrate the combined business following the completion of the merger, the risk that the anticipated benefits and synergies of the merger are not realized, the risk of unexpected costs, charges, or expenses resulting from or relating to the merger, potential adverse reactions or changes to business relationships resulting from the completion of the merger, risks related to the diversion of management’s attention from ongoing business operations during the post-closing integration period, the risk that required stockholder approval for the conversion of preferred stock issued in the merger as required by rules of The Nasdaq Stock Market LLC (the “Conversion Proposal”) is not obtained, and additional risks and uncertainties described in the Company’s most recent Annual Report on Form 10-K and subsequent Quarterly Reports on Form 10-Q filed with the SEC, which are available at www.sec.gov. The Company undertakes no obligation to update forward-looking statements except as required by law.</p>



<p><strong><em>Important Information About the Merger and Where to Find it</em></strong></p>



<p>The Company expects to file a proxy statement with the SEC relating to the Conversion Proposal. The definitive proxy statement will be sent to all Company stockholders. Before making any voting decision, investors and security-holders of the Company are urged to read the proxy statement and all other relevant documents filed or that will be filed with the SEC in connection with the Conversion Proposal as they become available because they will contain important information about the amended and restated merger agreement between the parties and the related transactions and the Conversion Proposal to be voted upon by the Company’s stockholders. Investors and security-holders will be able to obtain free copies of the proxy statement and all other relevant documents filed or that will be filed with the SEC by the Company through the website maintained by the SEC at www.sec.gov.</p>



<p><strong><em>Participants in the Solicitation</em></strong></p>



<p>The Company and its directors and executive officers may be considered participants in the solicitation of proxies from EVTV’s stockholders with respect to the Conversion Proposal under the rules of the SEC. Information about the directors and executive officers of EVTV is set forth in its Annual Report on Form 10-K for the year ended December 31, 2025, which was filed with the SEC on April 13, 2026, and in subsequent Quarterly Reports on Form 10-Q and other documents filed by the Company from time to time with the SEC. Additional information regarding the persons who may be deemed participants in the proxy solicitation and a description of their direct and indirect interests, by security holdings or otherwise, will also be included in the proxy statement, and other relevant materials to be filed with the SEC when they become available. You may obtain free copies of these documents as described above.</p>



<p>¹ Source: International Data Corporation (IDC), “AI Infrastructure Spending Caps Historic Year at ~$90 Billion in Q4 2025; 2029 Spending to Eclipse $1 Trillion,” April 16, 2026. The Company has not independently verified the data or projections contained in this report, and there can be no assurance that the projections will be realized.</p>



<h5 class="wp-block-heading">Contact</h5>



<p><strong>Phoenix MGMT &amp; Consulting</strong></p>



<p><strong>Press@PhoenixMGMTConsulting.com</strong></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Envirotech Vehicles Closes Merger with Azio AI Ahead of Schedule, Positioning Combined Company to Capture $487 Billion 2026 AI Infrastructure Opportunity]]></title>
<description><![CDATA[Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.



Envirotech Vehicles, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of ...]]></description>
<link>https://tsecurity.de/de/3651556/it-security-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3651556/it-security-nachrichten/envirotech-vehicles-closes-merger-with-azio-ai-ahead-of-schedule-positioning-combined-company-to-capture-487-billion-2026-ai-infrastructure-opportunity/</guid>
<pubDate>Tue, 07 Jul 2026 14:52:01 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p><em>Revised transaction structure enables immediate closing, accelerating the Company’s strategic pivot toward AI data centers, enterprise GPU compute, and digital power infrastructure.</em></p>



<p><a href="https://www.evtvusa.com/" target="_blank" rel="sponsored">Envirotech Vehicles</a>, Inc. (NASDAQ: EVTV) (“EVTV” or the “Company”) today announced the successful completion of its merger with Azio AI Corporation (“Azio AI”) on July 2, 2026, paving the way for the Company to transform to an AI Datacenter Provider and meeting the growing market demand for artificial intelligence (“AI”) infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; a market that the International Data Corporation (IDC) projects will reach $487 billion in global spending in 2026 and exceed $1 trillion by 2029.<a href="http://docs.google.com/blank" rel="sponsored">[1]</a> The transaction marks a defining milestone in the Company’s strategic transformation and establishes the foundation for its next phase of commercial execution and long-term growth.</p>



<p>The parties amended the proposed transaction structure to expedite the closing timeline, allowing the combined company to begin operating as a fully integrated public company significantly sooner than originally anticipated. The accelerated closing enables management to immediately focus on commercialization across its expanding AI Datacenter strategy.</p>



<p>With the merger complete and the combined company operating as one organization, management is now fully focused on commercial execution, infrastructure deployment, strategic growth initiatives, and creating long-term shareholder value.</p>



<p>Over the past several months, the Company advanced development activities at its South Texas site and deployed six megawatts of off-grid power for its modular data centers. The Company further secured rights to a 548-acre site with the capacity to scale up to 500 MW, supporting the future development of AI hyperscale data centers.</p>



<p>Management believes these achievements demonstrate that the combined company is entering its next phase with meaningful operational momentum already in place rather than beginning from a standing start. Infrastructure deployment is underway, customer commitments have already been established, commercial execution is actively progressing, and the Company’s corporate structure is now aligned with an operating platform built to support long-term expansion.</p>



<p>The completion of the merger comes at a time when investment in AI infrastructure continues to accelerate globally as enterprises increasingly require access to high-performance computing resources, GPU infrastructure, and scalable digital power solutions. Management believes the combined company is well positioned to capitalize on these long-term industry trends through a diversified infrastructure strategy designed to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations.</p>



<p>Following the closing of the transaction, the Company intends to continue expanding its AI Infrastructure strategy through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships designed to maximize utilization of its power resources while creating multiple long-term revenue opportunities.</p>



<p>In connection with the closing of the merger, Phillip Oldridge has stepped down as Chief Executive Officer. Jason Maddox vacates the President position and is now the Chief Financial Officer. The Company’s Board of Directors appointed Simon Yu as President and Chris Young as Chief Executive Officer, effective immediately.</p>



<p>Mr. Yu is a serial entrepreneur and public markets operator with almost a decade of experience taking companies public, executing capital raises, and scaling businesses. He has previously served in founder, C-suite, and board roles at three publicly traded companies, two of which reached market capitalizations in excess of $1 billion. Mr. Yu has led legal, accounting, and advisory teams through Regulation A+ Tier 2 offerings, PCAOB audits, and public company reporting, alongside leading M&amp;A transactions. As an active early-stage venture investor, he has evaluated investment opportunities across artificial intelligence, SaaS, and B2B technology.</p>



<p>Mr. Young brings extensive experience in launching and leading public companies and investing in and advising emerging technology companies, with a particular focus on artificial intelligence, software innovation, and strategic growth initiatives. Prior to joining EVTV, he served as Chief Executive Officer of Clubhouse Media Group, a publicly traded social media company and an Entrepreneur in Residence at Amplify, where he worked alongside founders and venture-backed technology companies to accelerate commercialization and support the development of high-growth technology businesses.</p>



<p>“Today’s announcement represents far more than the completion of a merger—it marks the beginning of our next chapter,” said Chris Young, Chief Executive Officer of EVTV. “Over the past several months, our teams have been building the operational foundation of this business while simultaneously working toward completing this transaction. With the merger now finalized, we move forward as one company with one leadership team and one strategy, focused on executing against the opportunities in front of us. We believe demand for AI infrastructure, enterprise compute, and digital infrastructure will continue expanding for years to come. Our objective is to build a scalable platform capable of serving that demand while creating long-term value for our shareholders.”</p>



<p>Jason Maddox, Chief Financial Officer of EVTV, added, “Completing this transaction under the amended merger structure allows us to immediately focus on execution. We have already established meaningful operational momentum, and we believe operating as a unified public company enhances our ability to deploy infrastructure, serve customers, pursue strategic growth opportunities, and continue building long-term shareholder value.”</p>



<p>The transaction establishes a unified operating platform designed to support the Company’s long-term growth strategy through continued investment in AI infrastructure, enterprise computing, digital power assets, and digital infrastructure development. Management believes the completion of the merger provides the operational and organizational foundation necessary to pursue the next phase of commercialization while expanding its presence across some of the fastest-growing sectors of the global technology market.</p>



<p><strong>Transaction and Operational Highlights</strong></p>



<ul class="wp-block-list">
<li>Successfully completed the merger with Azio AI pursuant to an amended and restated merger agreement.</li>



<li>Approximately six megawatts of off-grid digital infrastructure deployed at the Company’s South Texas development site.</li>



<li>Development footprint exceeding 548 acres with the potential to support up to 500 MW of AI infrastructure capacity.</li>



<li>Combined company positioned to accelerate commercialization across AI infrastructure, enterprise GPU compute, digital power solutions, and digital asset mining operations.</li>



<li>Merger consideration consisted of 2,655,157 shares of common stock and 973,450 shares of non-voting convertible preferred stock in exchange for 100% of outstanding capital stock of Azio AI, of which 194,807 shares of common stock were reserved for convertible notes of Azio AI assumed by the Company upon closing.</li>



<li>Each share of preferred stock convertible into 100 shares of Company common stock subject to stockholder approval.</li>



<li>Chris Young appointed Chief Executive Officer and Chairman of the Board.</li>



<li>Simon Yu appointed President.</li>



<li>Jason Maddox appointed Chief Financial Officer.</li>



<li>Phillip Oldridge stepped down as Chief Executive Officer.</li>
</ul>



<p><strong>About Envirotech Vehicles, Inc.</strong></p>



<p>Envirotech Vehicles, Inc. (NASDAQ: EVTV) is a technology infrastructure company focused on developing, owning, and operating artificial intelligence data centers, enterprise GPU compute infrastructure, digital power solutions, and digital asset mining operations. Following its acquisition of Azio AI, the Company operates an integrated AI infrastructure business encompassing AI data center development, the sale and distribution of enterprise GPU systems and server infrastructure, high-performance computing solutions, power hosting, and strategic technology investments, serving enterprise and institutional customers across domestic and international markets. Through this diversified AI infrastructure strategy, the Company is positioned to capitalize on the rapidly expanding global demand for AI infrastructure, compute capacity, digital power, and next-generation AI technologies.</p>



<p>For more information please visit: <a href="http://www.azioai.ai/" target="_blank" rel="sponsored">www.azioai.ai</a> and for potential partnerships contact: <a href="mailto:AI@PhoenixMGMTconsulting.com" target="_blank" rel="sponsored">AI@PhoenixMGMTconsulting.com</a></p>



<p><strong>Forward-Looking Statements</strong></p>



<p>This press release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. In some cases, you can identify forward-looking statements by words such as “may,” “will,” “could,” “expect,” “anticipate,” “believe,” “estimate,” “project,” “intend,” “continue,” “potential,” “ongoing,” or the negative of these terms or other comparable terminology, although not all forward-looking statements contain these words. Forward-looking statements include statements regarding the Company’s ability to capitalize on accelerating demand for AI infrastructure, enterprise GPU compute, digital power solutions, data center development, and digital asset infrastructure; the Company’s plans to continue expanding its digital infrastructure platform through AI data center development, enterprise GPU compute solutions, power hosting services, digital asset mining operations, strategic infrastructure investments, and additional commercial partnerships; the Company’s ability to maximize utilization of its power resources while creating multiple long-term revenue opportunities; the ability to continue deploying modular digital infrastructure at the Company’s South Texas site; the anticipated deployment and scaling of NVIDIA B200 and B300 GPU systems; the ability to advance and execute against the Company’s commercial infrastructure pipeline; the anticipated development of the Company’s footprint; the ability to monetize power assets across multiple complementary revenue streams, including AI data centers, enterprise compute infrastructure, power hosting, and digital asset mining operations; customer demand for AI infrastructure, enterprise compute, and digital infrastructure; the Company’s ability to build a scalable platform designed to serve that demand and create long-term shareholder value; and the Company’s broader business strategy and long-term growth objectives.</p>



<p>These statements are based on current expectations and assumptions that involve risks and uncertainties that could cause actual results to differ materially. Most of these factors are outside the Company’s control and are difficult to predict. Factors that may affect actual results include, but are not limited to, the Company’s limited operating history within AI infrastructure and compute operations, project scope, engineering challenges, supply chain constraints, installation timelines, energy availability, finalization of site usage rights, regulatory considerations, equipment performance, ability to raise capital required for expansion activities, changes in digital asset markets, evolving compute demand, market conditions, the Company’s ability to successfully integrate the combined business following the completion of the merger, the risk that the anticipated benefits and synergies of the merger are not realized, the risk of unexpected costs, charges, or expenses resulting from or relating to the merger, potential adverse reactions or changes to business relationships resulting from the completion of the merger, risks related to the diversion of management’s attention from ongoing business operations during the post-closing integration period, the risk that required stockholder approval for the conversion of preferred stock issued in the merger as required by rules of The Nasdaq Stock Market LLC (the “Conversion Proposal”) is not obtained, and additional risks and uncertainties described in the Company’s most recent Annual Report on Form 10-K and subsequent Quarterly Reports on Form 10-Q filed with the SEC, which are available at www.sec.gov. The Company undertakes no obligation to update forward-looking statements except as required by law.</p>



<p><strong><em>Important Information About the Merger and Where to Find it</em></strong></p>



<p>The Company expects to file a proxy statement with the SEC relating to the Conversion Proposal. The definitive proxy statement will be sent to all Company stockholders. Before making any voting decision, investors and security-holders of the Company are urged to read the proxy statement and all other relevant documents filed or that will be filed with the SEC in connection with the Conversion Proposal as they become available because they will contain important information about the amended and restated merger agreement between the parties and the related transactions and the Conversion Proposal to be voted upon by the Company’s stockholders. Investors and security-holders will be able to obtain free copies of the proxy statement and all other relevant documents filed or that will be filed with the SEC by the Company through the website maintained by the SEC at www.sec.gov.</p>



<p><strong><em>Participants in the Solicitation</em></strong></p>



<p>The Company and its directors and executive officers may be considered participants in the solicitation of proxies from EVTV’s stockholders with respect to the Conversion Proposal under the rules of the SEC. Information about the directors and executive officers of EVTV is set forth in its Annual Report on Form 10-K for the year ended December 31, 2025, which was filed with the SEC on April 13, 2026, and in subsequent Quarterly Reports on Form 10-Q and other documents filed by the Company from time to time with the SEC. Additional information regarding the persons who may be deemed participants in the proxy solicitation and a description of their direct and indirect interests, by security holdings or otherwise, will also be included in the proxy statement, and other relevant materials to be filed with the SEC when they become available. You may obtain free copies of these documents as described above.</p>



<p>¹ Source: International Data Corporation (IDC), “AI Infrastructure Spending Caps Historic Year at ~$90 Billion in Q4 2025; 2029 Spending to Eclipse $1 Trillion,” April 16, 2026. The Company has not independently verified the data or projections contained in this report, and there can be no assurance that the projections will be realized.</p>



<h5 class="wp-block-heading">Contact</h5>



<p><strong>Phoenix MGMT &amp; Consulting</strong></p>



<p><strong>Press@PhoenixMGMTConsulting.com</strong></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[[NEU] [mittel] Hashicorp Terraform: Schwachstelle ermöglicht Offenlegung von Informationen]]></title>
<description><![CDATA[Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hashicorp Terraform ausnutzen, um Informationen offenzulegen.]]></description>
<link>https://tsecurity.de/de/3650936/it-security-nachrichten/neu-mittel-hashicorp-terraform-schwachstelle-ermoeglicht-offenlegung-von-informationen/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3650936/it-security-nachrichten/neu-mittel-hashicorp-terraform-schwachstelle-ermoeglicht-offenlegung-von-informationen/</guid>
<pubDate>Tue, 07 Jul 2026 10:51:28 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hashicorp Terraform ausnutzen, um Informationen offenzulegen.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-14468 | HashiCorp Terraform Enterprise up to 2.0.3 VCS Ingestion Boundary information disclosure (EUVD-2026-41946)]]></title>
<description><![CDATA[A vulnerability identified as problematic has been detected in HashiCorp Terraform Enterprise up to 2.0.3. This impacts an unknown function of the component VCS Ingestion Boundary. Performing a manipulation results in information disclosure.

This vulnerability is cataloged as CVE-2026-14468. It ...]]></description>
<link>https://tsecurity.de/de/3650090/sicherheitsluecken/cve-2026-14468-hashicorp-terraform-enterprise-up-to-203-vcs-ingestion-boundary-information-disclosure-euvd-2026-41946/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3650090/sicherheitsluecken/cve-2026-14468-hashicorp-terraform-enterprise-up-to-203-vcs-ingestion-boundary-information-disclosure-euvd-2026-41946/</guid>
<pubDate>Tue, 07 Jul 2026 01:21:47 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">problematic</a> has been detected in <a href="https://vuldb.com/product/hashicorp:terraform_enterprise">HashiCorp Terraform Enterprise up to 2.0.3</a>. This impacts an unknown function of the component <em>VCS Ingestion Boundary</em>. Performing a manipulation results in information disclosure.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-14468">CVE-2026-14468</a>. It is possible to initiate the attack remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[Why developers are over the cloud]]></title>
<description><![CDATA[You can be forgiven if you think the most important thing AWS ever sold developers was EC2. It’s not. No, AWS’s big gift to developers was permission to stop fretting about servers. That sounds obvious now, but it was close to magical at the time. Before the cloud, getting infrastructure meant wa...]]></description>
<link>https://tsecurity.de/de/3648443/ai-nachrichten/why-developers-are-over-the-cloud/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3648443/ai-nachrichten/why-developers-are-over-the-cloud/</guid>
<pubDate>Mon, 06 Jul 2026 12:19:48 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>You can be forgiven if you think the most important thing AWS ever sold developers was EC2. It’s not. No, <a href="https://www.infoworld.com/article/4183710/cloud-at-20-how-aws-shaped-enterprise-it.html" data-type="link" data-id="https://www.infoworld.com/article/4183710/cloud-at-20-how-aws-shaped-enterprise-it.html">AWS’s big gift</a> to developers was permission to stop fretting about servers. That sounds obvious now, but it was close to magical at the time. Before the cloud, getting infrastructure meant waiting on procurement, hardware, and the somewhat arcane process that stood between a developer and a running machine. AWS turned that into a credit card and an API.</p>



<p>It was awesome.</p>



<p>AWS still (over)uses a great phrase for what it removed: “<a href="https://aws.amazon.com/what-is-aws/">undifferentiated heavy lifting</a>.” That is, all the mess associated with racking servers, patching operating systems, managing storage, planning capacity, etc. Important work, sure, but not the work that makes your application special. Let AWS do that, the company intoned, and developers could focus on the thing their customers actually cared about.</p>



<p>It was a brilliant abstraction. It helped build one of the most important technology companies of the past two decades. It’s also the same logic that increasingly makes the cloud seem superfluous. Not because the cloud is dying. It isn’t. The cloud is bigger and more essential than ever. But developers don’t begin by asking, “Which cloud should I use?” They begin with, “How quickly can I get this thing working?”</p>



<p>That is a different question, and it leads to different tools.</p>



<h2 class="wp-block-heading"><a></a>Where to begin?</h2>



<p>Let’s get the obvious thing out of the way: AWS remains the biggest developer cloud, and its revenue growth has accelerated in the wake of AI. In the<a href="https://survey.stackoverflow.co/2024/technology"> 2024 Stack Overflow Developer Survey</a>⁠, AWS was the top cloud platform, used by 48% of respondents. Microsoft Azure and Google Cloud followed at 27.8% and 25.1%, respectively.</p>



<p>The<a href="https://survey.stackoverflow.co/2025/technology"> 2025 Stack Overflow Developer survey</a>⁠ is more interesting, however, because the “cloud development” category no longer reads like a clear cloud-vendor horse race. <a href="https://www.infoworld.com/article/2253801/what-is-docker-the-spark-for-the-container-revolution.html">Docker</a> jumped 17 points to 71% usage, followed by npm and then AWS at 43%. Kubernetes, Azure, Google Cloud, Cloudflare, Terraform, Firebase, Vercel, Netlify, and Supabase all show up in the same mental map.</p>



<p>This is my point: Developers aren’t simply choosing a different cloud first. Often, they’re not choosing a cloud first at all. They’re choosing a workflow, and a workflow is an increasingly separate decision from the underlying cloud.</p>



<h2 class="wp-block-heading"><a></a>The first mile moved</h2>



<p>For a long time, AWS owned the first mile. If you wanted to build something, you opened an AWS account. Need compute? Launch EC2. Storage? S3. Whatever a developer needed—database, queue, function, CDN, identity layer—AWS, the “everything store,” almost certainly had an answer.</p>



<p>It was magical! Then it became the norm. And, over time, it became a lot. The “everything store” arguably had too much, making it hard for developers to know how to use it effectively. The developer’s question became, “How much AWS do I have to understand before I can ship?” Developers increasingly don’t want to answer that question at the start.</p>



<p>The first mile now often begins in <a href="https://www.infoworld.com/article/4069045/how-github-won-software-development.html" data-type="link" data-id="https://www.infoworld.com/article/4069045/how-github-won-software-development.html">GitHub⁠</a>, which says more than 36 million developers joined in a single year. Or it begins in <a href="https://www.infoworld.com/article/4115165/why-boring-vs-code-keeps-winning.html">VS Code, which keeps winning</a> because it’s familiar, extensible, and already open. Or it begins in Cursor, GitHub Copilot, Claude, Codex, and the broader AI coding layer. <a href="https://github.blog/news-insights/octoverse/octoverse-a-new-developer-joins-github-every-second-as-ai-leads-typescript-to-1/">GitHub’s 2025 Octoverse⁠ says nearly 80% of new developers</a> on GitHub use Copilot within their first week. <a href="https://survey.stackoverflow.co/2025/ai/">Stack Overflow’s 2025 AI survey results⁠ point</a> the same way, with 84% of respondents using or planning to use AI tools in their development process, up from 76% in 2024.</p>



<p>The starting point is changing. The default interface to building software is becoming an AI-assisted workflow, not a cloud console. This doesn’t make the cloud less important, but it definitely makes it less visible.</p>



<h2 class="wp-block-heading"><a></a>The joy of not caring</h2>



<p>The developer platforms with momentum right now are winning because they expose less cloud infrastructure. Call it serverless if you like, but it’s deeper than AWS Lambda ever was. AWS Lambda still made you think in AWS. These new platforms make you think in your app.</p>



<p>Take <a href="https://vercel.com/">Vercel</a>⁠. It didn’t win developer mindshare by offering more than 200 services and praying developers would navigate them all. Instead, it attached itself to the way many front-end and full-stack developers already work: GitHub, Next.js, previews, deployments, performance, and a short path from code to live application. It seems to be working: Reuters <a href="https://www.reuters.com/business/ai-coding-startup-vercel-raises-300-million-valued-93-billion-2025-09-30/">reported last year that Vercel raised $300 million</a> at a $9.3 billion valuation⁠, after doubling its user base and growing revenue 82%.</p>



<p><a href="https://developers.cloudflare.com/workers/">Cloudflare</a> offers a similar promise from a different angle, <a href="https://www.infoworld.com/article/4014268/cloud-finally-gets-some-new-competition.html">as I’ve written</a>: deploy globally, run close to users, scale automatically, and don’t make infrastructure the developer’s first problem. <a href="https://supabase.com/">Supabase</a>⁠ does the same for data, wrapping Postgres with authentication, instant APIs, edge functions, real-time subscriptions, storage, and <a href="https://www.infoworld.com/article/2269766/what-is-vector-search-better-search-through-ai.html">vectors</a> so the database feels less like a separate system and more like an app platform.</p>



<p>None of this is anti-cloud. But it’s very definitely stripping away the need to even think about cloud. And it’s just as definitely where developers are focused today.</p>



<p>AI accelerated all of this because it changed the first question developers ask. For an AI application, the opening move often isn’t where do you host it, but rather which model, which agent framework, etc., will get you to a live application fastest? For this reason, <a href="https://developers.openai.com/">OpenAI’s developer platform⁠ isn’t framed</a> as renting infrastructure. It’s framed as building with models, APIs, tools, docs, and examples. Similarly, <a href="https://www.anthropic.com/product/claude-code">Anthropic’s Claude Code⁠ isn’t positioned</a> as configuring a cloud environment; it’s an agentic coding system that works in your code base and helps you build, test, and ship.</p>



<h2 class="wp-block-heading"><a></a>The second mile matters more</h2>



<p>I’m not saying the cloud vendors should abandon hope. Indeed, though the first mile has moved away from the hyperscalers, the second mile is still very much theirs to win.</p>



<p>Vercel, Cloudflare, Supabase, OpenAI, Anthropic, and GitHub are brilliant at helping developers make something work, fast. But in the enterprise, “fast” isn’t the key priority: Enterprises eventually need the boring stuff like <a href="https://www.csoonline.com/article/518296/what-is-iam-identity-and-access-management-explained.html">identity</a>, network controls, <a href="https://www.infoworld.com/article/2262666/what-is-observability-software-monitoring-on-steroids.html">observability</a>, cost management, compliance, and the rest of the unglamorous apparatus that keeps customer data from leaking onto Reddit.</p>



<p>Boring is good when boring means the thing works.</p>



<p>This is where AWS, Azure, Google Cloud, Oracle, and other infrastructure companies should have an advantage. But it won’t be enough to say, “We have the grown-up features.” That’s true, but it’s dull, and in this case, “dull” isn’t a winning proposition. No, the strategic challenge for the hyperscalers is to make the jump from prototype to production feel like an upgrade instead of a punishment.</p>



<p>AWS’s new <a href="https://www.aboutamazon.com/news/aws/aws-1-billion-forward-deployed-ai-engineers">$1 billion investment in forward-deployed AI engineers</a>⁠ is interesting for exactly this reason. AWS says the new organization will embed experts with customers to co-develop and deploy agentic AI solutions in days. That’s not classic bottom-up developer love, but it’s a smart recognition that the bottleneck has moved closer to the application. The hard part is turning capability into a working system, not merely getting access to infrastructure or a model.</p>



<p>Yep. Exactly.</p>



<h2 class="wp-block-heading"><a></a>Hiding the cloud</h2>



<p>The mistake for cloud infrastructure companies would be to respond to this by trying to become a Vercel, Supabase, GitHub, OpenAI, or Anthropic all at once. That’s the classic incumbent move, and it rarely works. The better move is narrower: become the most natural next step when the prototype starts to matter.</p>



<p>That means meeting developers where they work: GitHub, VS Code, Cursor-style environments, <a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">CI/CD systems</a>, and <a href="https://www.infoworld.com/article/3812583/what-you-need-to-know-about-developing-ai-agents.html">AI agents</a>. It means outcome-native starts: deploy this app, connect this data, expose this API, add auth, evaluate this agent, secure this workflow, move this prototype into production. It means fewer scavenger hunts across product pages and <a href="https://www.infoworld.com/article/4079018/building-a-golden-path-to-ai.html">establishing more golden paths</a> (yes, even if that infuriates a service team that gets left out).</p>



<p>The old question was, “Can you run my workload?” For AWS, Azure, Google Cloud, Oracle, and others, the answer is almost always yes. But no one is impressed by this anymore. Therefore, the better question is, “Can you become part of how I build?”</p>



<p>Developers came to the cloud because it was the easiest way to get infrastructure. They’re shifting to developer experience platforms because those are the easiest way to get outcomes. If the cloud providers can become part of the first mile before the Vercels of the world become part of the second mile, they’ll win, and big. If they don’t, well….</p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance]]></title>
<description><![CDATA[This is the part 5 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1).   ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance   Chapter…
Read more →
The post ISA VDA 6.0.3 (part 5) — Information Secu...]]></description>
<link>https://tsecurity.de/de/3648137/it-security-nachrichten/isa-vda-603-part-5-information-security-sheet-supplier-relationships-compliance/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3648137/it-security-nachrichten/isa-vda-603-part-5-information-security-sheet-supplier-relationships-compliance/</guid>
<pubDate>Mon, 06 Jul 2026 10:08:39 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>This is the part 5 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1).   ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance   Chapter…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-5-information-security-sheet-supplier-relationships-compliance/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-5-information-security-sheet-supplier-relationships-compliance/">ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Cronos: Lazarus Brings Faster Combat and a New Warden Story in Fall 2026]]></title>
<description><![CDATA[Bloober Team has revealed the first gameplay footage and developer diary for Cronos: Lazarus, a new DLC chapter for Cronos: The New Dawn that changes…
The post Cronos: Lazarus Brings Faster Combat and a New Warden Story in Fall 2026 appeared first on OnMSFT.]]></description>
<link>https://tsecurity.de/de/3646920/windows-tipps/cronos-lazarus-brings-faster-combat-and-a-new-warden-story-in-fall-2026/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3646920/windows-tipps/cronos-lazarus-brings-faster-combat-and-a-new-warden-story-in-fall-2026/</guid>
<pubDate>Sun, 05 Jul 2026 17:42:48 +0200</pubDate>
<category>🪟 Windows Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Bloober Team has revealed the first gameplay footage and developer diary for Cronos: Lazarus, a new DLC chapter for Cronos: The New Dawn that changes…</p>
<p>The post <a href="https://onmsft.com/news/cronos-lazarus-brings-faster-combat-and-a-new-warden-story-in-fall-2026/">Cronos: Lazarus Brings Faster Combat and a New Warden Story in Fall 2026</a> appeared first on <a href="https://onmsft.com/">OnMSFT</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Protocols and Servers 2 TryHackMe Writeup]]></title>
<description><![CDATA[Somewhere on a network right now, a username and password are crossing the wire in plain, readable text — and someone could be quietly reading them.No exploit. No zero-day. Just a protocol that was never built to keep a secret.That’s the uncomfortable little truth this room is built around. So le...]]></description>
<link>https://tsecurity.de/de/3646317/hacking/protocols-and-servers-2-tryhackme-writeup/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3646317/hacking/protocols-and-servers-2-tryhackme-writeup/</guid>
<pubDate>Sun, 05 Jul 2026 08:39:11 +0200</pubDate>
<category>🕵️ Hacking</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><em>Somewhere on a network right now, a username and password are crossing the wire in plain, readable text — and someone could be quietly reading them.</em></p><figure><img alt="" src="https://cdn-images-1.medium.com/max/900/1*7OqFQcrh6OcgOZyqGjAyqw.png"></figure><p>No exploit. No zero-day. Just a protocol that was never built to keep a secret.</p><p>That’s the uncomfortable little truth this room is built around. So let’s pull it apart.</p><p>Most of the internet’s classic protocols were designed in a more trusting era. It was a time when the people sharing a network mostly knew each other, and “someone might be listening” wasn’t the default assumption.</p><p>Those protocols still run everywhere. And many of them still send your credentials across the wire in plain text.</p><p><strong>Protocols and Servers 2</strong> on TryHackMe is about exactly that gap, and what closes it. It walks through three foundational attacks against network protocols, then the defenses that neutralize each one:</p><ul><li>Sniffing — quietly reading traffic off the wire</li><li>Man-in-the-Middle (MITM) — sitting between two parties and tampering</li><li>Password attacks — guessing or cracking the credentials themselves</li></ul><p>This is a writeup of the whole room: the concepts in plain language, the commands that matter, and the task answers explained. If you’re working through it yourself, follow along.</p><blockquote>One idea ties the entire room together: cleartext protocols are insecure by design. Everything else is a consequence of that single fact.</blockquote><h3>Part 1 — Sniffing Attacks</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/911/1*mxa7u-z6cA7UEL5f8tjJQg.png"></figure><p>A <strong>sniffing attack</strong> is the simplest idea in the room: use a packet-capture tool to grab traffic as it crosses the network, then read it.</p><p>If a protocol talks in cleartext, anyone positioned to see that traffic can pull out private messages or login credentials. Nothing is encrypted before it leaves your machine.</p><pre>"Isn't everything encrypted now?"</pre><p>It’s tempting to think sniffing is a solved, retro problem now that TLS is everywhere. It isn’t. It stays dangerous wherever cleartext still lives:</p><ul><li><strong>Internal corporate networks</strong>, where machine-to-machine traffic is often left unencrypted</li><li><strong>Legacy systems </strong>like old mail servers, embedded devices, and industrial control systems</li><li><strong>Misconfigured services</strong> where TLS is available but not strictly enforced</li><li><strong>IoT devices</strong> that habitually use plain protocols</li><li><strong>Wireless networks</strong>, where anyone in range can listen</li><li>After a MITM attack that has successfully downgraded or stripped encryption</li></ul><blockquote>In real internal pentests and red-team work, sniffing is still one of the most reliable ways to harvest credentials and learn how systems actually talk to each other.</blockquote><h3>The tools</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*xBxcZK8PVBApVtltOosP4Q.jpeg"><figcaption>Wireshark</figcaption></figure><p>Capturing packets needs a network card and the right privileges (root on Linux, administrator on Windows). Here are the staples:</p><ul><li><strong>tcpdump</strong> — lightweight open-source CLI capture tool, preinstalled on most Linux systems.</li><li><strong>Wireshark</strong> — the GUI standard, with powerful filtering, protocol dissection, and visualization.</li><li><strong>tshark</strong> — Wireshark’s command-line sibling, great for scripting.</li></ul><blockquote>Worth knowing too: <strong>tcpflow</strong> (reassembles TCP streams), <strong>ngrep</strong> (pattern-matching in traffic), and <strong>NetworkMiner</strong> (extracts files from captures).</blockquote><blockquote>Specialized credential-grabbers exist, but tcpdump and Wireshark can do the job with a little effort.</blockquote><h3>Capturing POP3 credentials with tcpdump</h3><p>The classic demo: a user checks email over POP3 (port 110, cleartext).</p><p>With access to the traffic — via a wiretap, a switch’s port mirroring, ARP spoofing, a compromised host, or a successful MITM — you run this command:</p><pre>sudo tcpdump port 110 -A</pre><p>Breaking that down:</p><ul><li>sudo — packet capture needs root privileges.</li><li>port 110 — only keep traffic to or from the POP3 server.</li><li>-A — print packet contents as ASCII, so cleartext is human-readable.</li></ul><p>In the capture, the login arrives across two packets and reads straight out:</p><pre>… USER frank … PASS D2xc9CgD</pre><p>Username frank, password D2xc9CgD, handed over in plain sight.</p><blockquote>Wireshark gets you there even faster: type “pop” in the display filter, and only POP3 traffic remains, credentials included.</blockquote><h4>Handy tcpdump filters</h4><pre>+------------------------------------+-----------------------------------------------------------+<br>| Command                            | Purpose                                                   |<br>+------------------------------------+-----------------------------------------------------------+<br>| sudo tcpdump port 110 -A           | Capture traffic on port 110 (POP3) in readable ASCII      |<br>| sudo tcpdump host 10.20.30.148 -A  | Capture ASCII traffic to/from a specific host IP          |<br>| sudo tcpdump port 80 -A            | Capture HTTP traffic (credentials in POST data)           |<br>| sudo tcpdump port 21 -A            | Capture FTP traffic (cleartext credentials)               |<br>| sudo tcpdump -w capture.pcap       | Save raw network packets to a file for later analysis     |<br>| tcpdump -r capture.pcap -A         | Read and display a saved capture file in ASCII text       |<br>+------------------------------------+-----------------------------------------------------------+</pre><h4>Mitigation</h4><p>Any cleartext protocol is exposed. The only requirement for the attack is a vantage point between the two parties or on the same network segment.</p><p>The core fix is encryption. This means wrapping the protocol in TLS (like HTTP to HTTPS, FTP to FTPS, or POP3 to POP3S) and replacing Telnet with SSH.</p><p>Layered on top of that:</p><ul><li>Network segmentation to limit who can see whose traffic</li><li>Encrypted VLANs or tunnels for sensitive internal traffic</li><li>802.1X port-based authentication so unknown devices can’t connect</li><li>Zero-trust thinking: treat every network as hostile and encrypt everything</li><li>Monitoring for ARP spoofing and other redirection to catch sniffing in progress</li></ul><p>Question: How do you capture only Telnet traffic with tcpdump? Answer: Telnet runs on port 23, so you add “port 23”.</p><p>Question: What is the simplest Wireshark display filter for IMAP? Answer: “imap”.</p><h3>Part 2 — Man-in-the-Middle (MITM) Attacks</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/678/1*uImWCNSpEizR46XoZzoc7g.png"><figcaption>Man-in-the-Middle Attack</figcaption></figure><p>Sniffing is passive listening. A <strong>MITM attack</strong> is active.</p><p>The attacker slips between two parties (A and B) so that A thinks it’s talking to B, while everything actually flows through the attacker. They can read and completely alter the data.</p><p>The room’s example says it best: A asks to transfer $20, the attacker rewrites the amount mid-flight, and B acts on the tampered message.</p><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*C0zge6WQ4_HZjbPjnt1i0g.png"><figcaption>Image 1 from the room</figcaption></figure><p>It works whenever the protocol doesn’t verify the authenticity and integrity of each message.</p><h4>Getting into the middle</h4><p>To sit between two parties, an attacker has to redirect traffic through their own machine. Common routes include:</p><ul><li><strong>ARP spoofing</strong> — on a local network, the attacker sends forged ARP messages tying their own MAC address to the gateway’s IP, routing traffic directly to them.</li><li><strong>DNS spoofing </strong>— feeding false DNS answers to send victims to attacker-controlled servers.</li><li><strong>Rogue access points </strong>— fake Wi-Fi setups (like “Airport_WiFi_Free”) that route every connected victim’s traffic through the attacker.</li><li><strong>BGP hijacking </strong>— announcing false routes at the internet’s routing layer to reroute traffic for whole organizations or regions.</li></ul><h4>The tooling</h4><ul><li><strong>Bettercap </strong>— the modern, actively maintained successor to Ettercap. Handles ARP/DNS spoofing, HTTP/HTTPS proxying, and is modular.</li><li><strong>Ettercap</strong> — the classic LAN MITM tool. It still works, but Bettercap is generally preferred today.</li><li><strong>mitmproxy </strong>— an interactive HTTPS proxy used for inspecting and modifying web traffic on the fly.</li><li><strong>Responder </strong>—<strong> </strong>Windows-focused<strong>.</strong> Abuses fallback name-resolution protocols (LLMNR, NBT-NS) that kick in when DNS fails, answering with its own IP to capture authentication hashes. A staple of internal Active Directory pentests.</li></ul><h4>MITM against encrypted traffic</h4><p>Encryption raises the bar, but it isn’t a magic shield:</p><ul><li><strong>SSL stripping</strong> — quietly downgrade the victim’s connection to plain HTTP while the attacker keeps an HTTPS link to the real server. This is easy to miss if the user never typed <em>“https://”</em> or didn’t check for the padlock icon.</li><li><strong>Fake certificates</strong> — present your own certificate and run two separate encrypted legs. This works if the victim blindly clicks through the browser warning or if a Certificate Authority is compromised.</li><li><strong>Compromised or rogue CAs </strong>— the most serious case. If an attacker controls a trusted CA, they can mint valid-looking certificates for absolutely any domain.</li></ul><h4>Modern defenses</h4><p>A decade of security hardening makes MITM much harder now:</p><ul><li><strong>HTTPS by default</strong> (browsers flag plain HTTP as “Not Secure”)</li><li><strong>HSTS</strong> (forces HTTPS and blocks stripping attacks)</li><li><strong>Certificate Transparency</strong> (public, auditable logs of all issued certificates)</li><li><strong>Certificate pinning</strong> (apps accept only specific, hardcoded keys)</li><li><strong>DANE</strong> (publishing certificate info in DNSSEC-signed DNS)</li></ul><p>MITM still succeeds when users ignore certificate warnings, apps validate keys poorly, the target speaks cleartext, or legacy gear lacks modern features.</p><p>The fundamental fix remains the same: cryptography. You need authentication plus encryption/signing, which is exactly what properly implemented TLS provides.</p><p><strong>Question 1:</strong> How many interfaces does Ettercap offer?</p><pre>Answer: 3</pre><p><strong>Question 2:</strong> How many ways can you invoke Bettercap?</p><pre>Answer: 3</pre><h3>Part 3 — TLS: The Fix for Both Attacks</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/622/1*3Qn-dR4Ps9kwTxZGqRBBHw.jpeg"></figure><p>Both sniffing and MITM share one cure: TLS (Transport Layer Security). This part of the room is the solution chapter.</p><h4>A quick history</h4><p>SSL appeared in 1994 via Netscape, with SSL 3.0 dropping in 1996 as the web grew into shopping and payments. TLS succeeded it in 1999.</p><p>Where things stand now:</p><ul><li>SSL 2.0 and 3.0 are deprecated and highly insecure. Never use them.</li><li>TLS 1.0 and 1.1 were officially deprecated in 2021 and dropped by major browsers.</li><li>TLS 1.2 (from 2008) is still widely used and secure when configured with modern ciphers.</li><li>TLS 1.3 (from 2018) is the current standard. It features fewer algorithms, a faster handshake, and forward secrecy by default.</li></ul><p>People still say “SSL certificate” out of habit, but in practice, everything modern uses TLS.</p><h4>Where TLS sits</h4><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*Q9wEkyyAKPn28lVN9bDX2Q.png"><figcaption>Image 2 from the room</figcaption></figure><p>Cleartext application-layer protocols send data entirely in the open.</p><p>TLS adds encryption just below the application protocol, wrapping its data before it hits the network card. On the OSI model, it lives right between the transport and application layers.</p><h4>Upgrading protocols with TLS</h4><ul><li>HTTP (Port 80) upgrades to HTTPS (Port 443)</li><li>FTP (Port 21) upgrades to FTPS (Port 990)</li><li>SMTP (Port 25) upgrades to SMTPS (Port 465)</li><li>POP3 (Port 110) upgrades to POP3S (Port 995)</li><li>IMAP (Port 143) upgrades to IMAPS (Port 993)</li></ul><p>It’s not just web and mail. DNS can be wrapped too via DoT (DNS over TLS) on port 853, or DoH (DNS over HTTPS) on port 443. Both stop eavesdroppers from seeing which sites you look up.</p><h4>Implicit TLS vs STARTTLS</h4><ul><li>Implicit TLS uses a dedicated port that is fully encrypted from the very first byte (like 443 or 993).</li><li>STARTTLS connects in cleartext on the normal port, then issues a “STARTTLS” command to upgrade the connection in place. This is common for email setup.</li></ul><blockquote>Both offer encryption, but implicit TLS is highly preferred.</blockquote><p>A MITM attacker can easily strip the STARTTLS command during negotiation and force the session to stay in cleartext if the client isn’t configured to require it.</p><h4>How HTTPS works</h4><p>Plain HTTP takes two steps: open a TCP connection, then send requests. HTTPS inserts a step in between:</p><ol><li>Establish a standard TCP connection.</li><li>Establish a TLS connection (the handshake).</li><li>Send the HTTP requests, which are now fully encrypted.</li></ol><p>A simplified TLS 1.2 handshake goes like this:</p><blockquote><strong>ClientHello</strong> (client offers its TLS versions and cipher suites) <strong>→</strong> <strong>ServerHello</strong> (server picks the parameters and sends its certificate) <strong>→ Key Exchange</strong> (both derive a shared secret)<strong> →</strong> <strong>Finished</strong> (both confirm and switch to encrypted communication):</blockquote><pre>ClientHello → ServerHello → Key Exchange → Finished</pre><h4>Certificates and trust</h4><figure><img alt="" src="https://cdn-images-1.medium.com/max/980/1*-10wNzrM0tEpRINoAqc5mQ.png"><figcaption>Certificate Authority (CA)</figcaption></figure><p>HTTPS leans on certificates signed by trusted Certificate Authorities (CAs). Your browser expects a valid certificate from a trusted CA, which proves you’re talking to the real server and blocks easy MITM attempts.</p><p>A certificate shows who it was issued to, who issued it, and its validity period. An expired certificate should never be trusted.</p><p>The modern ecosystem made this nearly universal thanks to automated platforms like <a href="https://letsencrypt.org/"><em>Let’s Encrypt</em></a>, which pushed global HTTPS traffic past 95%.</p><p><strong>Question:</strong> What is the three-letter acronym for the DNS protocol that uses TLS?</p><pre>Answer: DoT (DNS over TLS)</pre><h3>Part 4 — SSH: Secure Remote Administration</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/920/1*EidIDqyfQGBr2l3Y-KLmog.png"><figcaption>SSH</figcaption></figure><p>SSH (Secure Shell) is the secure replacement for Telnet. It is the universal way to administer servers, network gear, and cloud infrastructure.</p><p>The “S” means you can confirm the server’s identity, your messages are encrypted for the intended recipient only, and any data tampering is instantly detectable.</p><blockquote>It handles confidentiality and integrity seamlessly over port 22.</blockquote><h4>Authentication methods</h4><ul><li><strong>Password </strong>— The simplest method. The password rides the encrypted channel, but weak choices can still fall to brute-force attacks.</li><li><strong>Public key (recommended) </strong>— A private key stays on your machine, while the public key goes on the server. The server challenges you to prove you hold the private key without ever transmitting it.</li><li><strong>Certificate-based </strong>— An SSH CA signs user and host keys. This scales incredibly well because you don’t have to manually distribute public keys to every single server.</li><li><strong>MFA </strong>— Combines a traditional key or password with a one-time code for high-security environments.</li></ul><h4>Connecting</h4><ul><li>To connect, you run:</li></ul><pre>ssh mark@MACHINE_IP</pre><p>Enter the password or let your key authenticate, and you are on the remote terminal. Every single command you send runs over an encrypted channel.</p><p><strong>Question:</strong> Connect as mark (password XBtc49AB) and find the kernel release with uname -r.</p><pre>Commands: ssh mark@MACHINE_IP uname -r</pre><pre>Answer: 5.15.0–119-generic</pre><h4>Host key verification</h4><p>On your very first connection, SSH shows the server’s key fingerprint and asks if you want to continue.</p><p>Ideally, you verify this fingerprint through an admin or config management before typing “yes”. It is then saved in your local known_hosts file.</p><p>If that key ever changes unexpectedly in the future, SSH throws a massive warning, a major indicator of a potential MITM attack or a reinstalled server.</p><h4>Generating keys</h4><ul><li>To create a new key pair, run:</li></ul><pre>ssh-keygen -t ed25519 -C "your_email@example.com"</pre><p>The private key stays strictly on your machine and should be passphrase-protected. The public key (.pub) is safe to share. You can push it to a remote server easily using:</p><pre>ssh-copy-id mark@MACHINE_IP</pre><h4>Useful options</h4><pre>+--------------------------------------------+------------------------------------------------------------+<br>| Command                                    | Purpose                                                    |<br>+--------------------------------------------+------------------------------------------------------------+<br>| ssh -p 2222 mark@MACHINE_IP                | Connect to a remote server running on a non-standard port   |<br>| ssh -i ~/.ssh/custom_key mark@MACHINE_IP   | Specify a specific private key file to use for login       |<br>| ssh -J bastion.example.com mark@internal   | Jump through a secure bastion host to reach an internal IP |<br>| ssh -L 8080:localhost:80 mark@MACHINE_IP   | Set up a local port forward to tunnel traffic through SSH  |<br>| ssh -D 9050 mark@MACHINE_IP                | Create a dynamic SOCKS proxy forward for traffic routing   |<br>| ssh mark@MACHINE_IP "cat /etc/passwd"      | Run a single, one-off command without opening a full shell |<br>+--------------------------------------------+------------------------------------------------------------+</pre><h4>Secure file transfer</h4><ul><li><strong>SFTP</strong> — Interactive, FTP-like file management running completely over SSH. This is the recommended choice today.</li><li><strong>SCP </strong>— Simple file copies over SSH. This is now deprecated by OpenSSH in favor of SFTP, though it still works on most systems.</li><li><strong>rsync over SSH </strong>— The best option for large or repeated transfers because it only copies the specific parts of files that changed.</li></ul><p>To copy files via SCP:</p><pre>scp mark@MACHINE_IP:/home/mark/archive.tar.gz ~/ (remote to local)</pre><pre>scp backup.tar.bz2 mark@MACHINE_IP:/home/mark/ (local to remote)</pre><p><strong>Quick clarifier:</strong></p><blockquote>SFTP runs over SSH (port 22).</blockquote><blockquote>FTPS is FTP-over-TLS (port 990).</blockquote><p>They are entirely different protocols despite having similar names.</p><p><strong>Question:</strong> Download book.txt from the remote system; what download size did scp display in KB?</p><pre>Command: scp mark@MACHINE_IP:/home/mark/book.txt ~/</pre><pre>Answer: 415</pre><h4>Hardening SSH</h4><p>To protect a server, you can modify its config file <em>(/etc/ssh/sshd_config)</em>:</p><ul><li>Set PasswordAuthentication to “no” once public keys are established.</li><li>Set PermitRootLogin to “no” to force users to log in with regular accounts first.</li><li>Use AllowUsers or AllowGroups to create an explicit access whitelist.</li><li>Change the default port to reduce automated log noise.</li><li>Deploy fail2ban to automatically block IPs with repeated failed login attempts.</li></ul><h3>Part 5 — Password Attacks</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*6_lWVwmNlB93-2JkYWo8Og.png"></figure><p>Even with a network fully encrypted, authentication remains a primary target. Authentication is simply the act of proving your identity, like entering a password to access a service.</p><p>The three factors:</p><ul><li><strong>Something you know </strong>— a password or PIN</li><li><strong>Something you have </strong>— a phone, hardware security key, or smart card</li><li><strong>Something you are </strong>— a fingerprint or facial scan</li></ul><p>This section focuses entirely on attacking “something you know.”</p><h4>Why weak passwords persist</h4><p>Massive historic breaches show that old habits die hard.</p><p>The most common passwords found in modern breaches still include variations like 123456, password, qwerty, Password1, and seasonal choices like Summer2024.</p><p>Because people constantly reuse passwords across multiple sites, a single leak frequently gives attackers access to entirely unrelated corporate or personal accounts.</p><h4>Types of attacks</h4><ul><li><strong>Guessing </strong>— using personal info like a target’s pet, birth year, or favorite sports team harvested from social media.</li><li><strong>Dictionary</strong>— automatically trying lists of real words and common variations.</li><li><strong>Brute force </strong>— systematically trying every possible characters combination. This is exhaustive, which is why password length matters so much.</li><li><strong>Credential stuffing</strong> — taking leaked username/password pairs from old breaches and automatically testing them against other web services.</li><li><strong>Password spraying </strong>— testing one or two incredibly common passwords against a massive list of user accounts to dodge lockout policies.</li><li><strong>Hybrid</strong> — combining dictionary words with systematic patterns, like capitalizing the first letter and adding a year to the end.</li></ul><h4>Wordlists</h4><ul><li>The classic go-to wordlist is RockYou, located on the TryHackMe AttackBox at:</li></ul><pre>/usr/share/wordlists/rockyou.txt</pre><blockquote>Beyond that, security professionals use collections like SecLists, CrackStation lists, or custom-generated lists tailored specifically to the target’s language, region, or industry habits.</blockquote><h4>THC Hydra</h4><p>Hydra is a fast network login cracker that throws wordlists at live services like FTP, POP3, IMAP, SSH, and HTTP.</p><p>The basic syntax looks like this:</p><pre>hydra -l username -P wordlist.txt server service</pre><ul><li>-l specifies a single username (-L for a text file of names)</li><li>-P specifies a password wordlist (-p for a single password)</li><li>server is the target IP or hostname</li><li>service is the protocol you are targeting</li></ul><p>Examples:</p><pre>hydra -l mark -P /usr/share/wordlists/rockyou.txt MACHINE_IP ftp<br>hydra -l frank -P /usr/share/wordlists/rockyou.txt MACHINE_IP ssh<br>hydra -l lazie -P /usr/share/wordlists/rockyou.txt MACHINE_IP imap</pre><p>Handy options include -s to target a non-default port, -vV for detailed verbosity, -t to adjust parallel attack threads, and -f to immediately stop execution when the first valid password is found.</p><h4>Other tools</h4><p>Alternative online crackers include <strong>Medusa</strong> and <strong>Ncrack</strong>.</p><p>For Windows and Active Directory environments, tools like <strong>NetExec</strong> excel at spraying credentials over SMB and LDAP.</p><p>If you manage to dump password hashes from a database, offline tools like <strong>Hashcat</strong> or <strong>John the Ripper </strong>are used because they can guess millions of combinations per second without worrying about network lag or lockouts.</p><h4>Mitigation</h4><p>Defending against password attacks requires a modern approach to identity management:</p><ul><li>Enforce <strong>length-first password policies</strong> based on NIST guidelines. Favor overall length over complex character rotation, and check new passwords against lists of known compromised credentials.</li><li>Implement <strong>strict account lockout</strong> or <strong>throttling mechanisms</strong> to kill automated automated guessing, while remaining aware of password spraying patterns.</li><li>Use <strong>CAPTCHAs</strong> to prevent basic bot execution on login forms.</li><li>Deploy <strong>Multi-Factor Authentication (MFA)</strong> across all external endpoints.</li><li>Transition toward <strong>passwordless ecosystems</strong>, utilizing passkeys (FIDO2/WebAuthn), hardware keys, or verified magic links.</li></ul><p><strong>Question: </strong>One email account is lazie; what password accesses the IMAP service?</p><pre>Command: hydra -l lazie -P /usr/share/wordlists/rockyou.txt MACHINE_IP imap</pre><pre>Answer: butterfly</pre><h3>Key Takeaways</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*35eDunQG0NLCy_K2XVOvtA.jpeg"></figure><p>The fundamental rule of network security is simple:</p><blockquote>Cleartext protocols are inherently insecure.</blockquote><p>Anything sent without encryption can be effortlessly intercepted by sniffing or manipulated via a Man-in-the-Middle attack.</p><p>The security path forward is uniform across all services:</p><ul><li>Use HTTPS instead of HTTP</li><li>Use SSH instead of Telnet</li><li>Use SFTP or FTPS instead of basic FTP</li><li>Use IMAPS, POP3S, and SMTPS instead of their legacy cleartext variants</li></ul><p>Even when a connection is perfectly encrypted, weak passwords remain a glaring vulnerability.</p><p>Secure the protocol with robust encryption, then secure the account with long passwords, rate limiting, and multi-factor authentication.</p><h4>Quick Port Reference Guide</h4><pre>+-------------------+------+----------------+<br>| Protocol          | Port | Security       |<br>+-------------------+------+----------------+<br>| FTP               | 21   | Cleartext      |<br>| FTPS              | 990  | TLS (implicit) |<br>| HTTP              | 80   | Cleartext      |<br>| HTTPS             | 443  | TLS (implicit) |<br>| IMAP              | 143  | Cleartext      |<br>| IMAPS             | 993  | TLS (implicit) |<br>| POP3              | 110  | Cleartext      |<br>| POP3S             | 995  | TLS (implicit) |<br>| SMTP              | 25   | Cleartext      |<br>| SMTP submission   | 587  | STARTTLS       |<br>| SMTPS             | 465  | TLS (implicit) |<br>| SSH / SFTP        | 22   | Encrypted (SSH)|<br>| Telnet            | 23   | Cleartext      |<br>+-------------------+------+----------------+</pre><p><em>Room: Protocols and Servers 2 — TryHackMe (</em><a href="https://tryhackme.com/room/protocolsandservers2"><em>https://tryhackme.com/room/protocolsandservers2</em></a><em>). This writeup is for educational purposes; only test systems you’re authorized to. Have fun!</em></p><p><em>This article was written by Pop123 as a walkthrough for the TryHackMe lab. I am as always open to further discussing the topic.</em></p><img src="https://medium.com/_/stat?event=post.clientViewed&amp;referrerSource=full_rss&amp;postId=42c2d01f5c6c" width="1" height="1" alt=""><hr><p><a href="https://infosecwriteups.com/protocols-and-servers-2-tryhackme-writeup-42c2d01f5c6c">Protocols and Servers 2 TryHackMe Writeup</a> was originally published in <a href="https://infosecwriteups.com/">InfoSec Write-ups</a> on Medium, where people are continuing the conversation by highlighting and responding to this story.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[My IDA ghost stopped just reading walls and started walking through them it now emulates/hooks/fuzzes what it names [SpectrIDA] SELF PROMO (again, but i promise its worth it)]]></title>
<description><![CDATA[submitted by    /u/Awkward_Fox518   [link]   [comments]]]></description>
<link>https://tsecurity.de/de/3646090/reverse-engineering/my-ida-ghost-stopped-just-reading-walls-and-started-walking-through-them-it-now-emulateshooksfuzzes-what-it-names-spectrida-self-promo-again-but-i-promise-its-worth-it/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3646090/reverse-engineering/my-ida-ghost-stopped-just-reading-walls-and-started-walking-through-them-it-now-emulateshooksfuzzes-what-it-names-spectrida-self-promo-again-but-i-promise-its-worth-it/</guid>
<pubDate>Sun, 05 Jul 2026 04:08:22 +0200</pubDate>
<category>🕵️ Reverse Engineering</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[  submitted by   <a href="https://www.reddit.com/user/Awkward_Fox518"> /u/Awkward_Fox518 </a> <br> <span><a href="https://github.com/ggfuchsi-oss/spectrIDA-Reverse_Engineering_Stack/tree/master#chapter-3--the-ghost-walks-through-walls">[link]</a></span>   <span><a href="https://www.reddit.com/r/ReverseEngineering/comments/1una9gs/my_ida_ghost_stopped_just_reading_walls_and/">[comments]</a></span>]]></content:encoded>
</item>
<item>
<title><![CDATA[EchoStar's US Satellite Pay-TV Provider Dish DBS Files for Bankruptcy]]></title>
<description><![CDATA[EchoStar's satellite pay-TV unit Dish DBS has filed for Chapter 11 bankruptcy
 protection, reports Reuters. The move also applies to its wireless subsidiaries, according to the article, and "facilitates the wind-down of Dish Wireless's 5G network operations following an unexpected delay in a spec...]]></description>
<link>https://tsecurity.de/de/3645648/it-security-nachrichten/echostars-us-satellite-pay-tv-provider-dish-dbs-files-for-bankruptcy/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3645648/it-security-nachrichten/echostars-us-satellite-pay-tv-provider-dish-dbs-files-for-bankruptcy/</guid>
<pubDate>Sat, 04 Jul 2026 18:52:38 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[EchoStar's satellite pay-TV unit Dish DBS has filed for Chapter 11 bankruptcy
 protection, reports Reuters. The move also applies to its wireless subsidiaries, according to the article, and "facilitates the wind-down of Dish Wireless's 5G network operations following an unexpected delay in a spectrum license sale to AT&amp;T... under which EchoStar agreed to sell about 50 megahertz of its nationwide spectrum for $23 billion." 


Some context from Deadline.com:

Charlie Ergen, who co-founded EchoStar and Dish, recently returned as chairman and CEO to steer the company through its recent challenges...
Even prior to the merger, Ergen had been working to pivot from the pay-TV business, where Dish now has just 5 million subscribers and streaming sibling Sling TV has another 2 million, toward wireless telecom. With wireless spectrum hitting the market due to the Sprint-T-Mobile merger and then Elon Musk's Starlink looking to ramp up in the sector, it seemed more attractive than the cord-cutting-ravaged pay-TV business. But it is still entails plenty of risk, especially given how tightly regulated the spectrum is due to security concerns.


 


Thanks to long-time Slashdot reader schwit1 for sharing the news.
<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=EchoStar's+US+Satellite+Pay-TV+Provider+Dish+DBS+Files+for+Bankruptcy%3A+https%3A%2F%2Fentertainment.slashdot.org%2Fstory%2F26%2F07%2F04%2F0355237%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fentertainment.slashdot.org%2Fstory%2F26%2F07%2F04%2F0355237%2Fechostars-us-satellite-pay-tv-provider-dish-dbs-files-for-bankruptcy%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://entertainment.slashdot.org/story/26/07/04/0355237/echostars-us-satellite-pay-tv-provider-dish-dbs-files-for-bankruptcy?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Silo Season 3 Episode 1 Ending Explained: Why Juliette Can’t Remember]]></title>
<description><![CDATA[Silo Season 3 Episode 1 opens with Juliette Nichols back at the center of the story, but she is no longer the same person viewers followed through the first two seasons. The premiere focuses on her memory loss, the unrest inside the silo, and a new timeline that begins to explain how the whole sy...]]></description>
<link>https://tsecurity.de/de/3645087/ios-mac-os/silo-season-3-episode-1-ending-explained-why-juliette-cant-remember/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3645087/ios-mac-os/silo-season-3-episode-1-ending-explained-why-juliette-cant-remember/</guid>
<pubDate>Sat, 04 Jul 2026 11:09:12 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Silo Season 3 Episode 1 opens with Juliette Nichols back at the center of the story, but she is no longer the same person viewers followed through the first two seasons. The premiere focuses on her memory loss, the unrest inside the silo, and a new timeline that begins to explain how the whole system started.



Silo Season 3 Episode 1 Recap



The episode picks up after Juliette survives her forced cleaning and returns to Silo 18. People now see her as a symbol of hope, especially after the rebellion and the chaos caused by Bernard’s rule.



Related: Silo Season 3 Cast Guide: Who Are the New Characters?



However, Juliette does not remember everything clearly. She struggles to recognize people, understand what happened, and explain what she saw outside. This makes her return more dangerous because the truth about the other silos still remains hidden.



Inside the silo, Judge Sims and Camille gain more control. Their actions show that they want to keep Juliette quiet before she can expose anything that changes the balance of power.



What Happens To Bernard?



One major shock comes when the episode reveals that Bernard is dead. Sims and Camille are connected to his death, and this changes the leadership structure inside Silo 18.



With Bernard gone, Juliette unexpectedly becomes mayor. This gives people hope, but it also puts her in a difficult position because she cannot fully trust her own memory.



The Before Times Timeline Explained



Season 3 also introduces a new story set before the silos existed. This timeline follows Congressman Daniel Keene and journalist Helen Drew as they begin uncovering a dangerous conspiracy.



This part of the episode expands the show beyond Silo 18. It shows that the mystery of the silos is tied to decisions made long before Juliette’s time.



Silo Season 3 Episode 1 Ending Explained



The ending focuses on Juliette’s broken memory and the question of identity. Her confusion is not random. The episode suggests that someone has used memory-suppressing drugs to stop her from revealing the truth.



The phrase “Who are you?” becomes important because it connects Juliette’s condition with the larger mystery in the past timeline. The show hints that memory control may be one of the biggest tools used to keep people trapped, obedient, and unaware.



Final Thoughts



Silo Season 3 Episode 1 sets up a darker and more complex chapter for the Apple TV+ series. Juliette’s return should have been a victory, but her memory loss turns it into another mystery.



The premiere gives fans new questions about the origin of the silos, the role of Sims and Camille, and the truth Juliette is still trying to remember.]]></content:encoded>
</item>
<item>
<title><![CDATA[Star City Episode 8 Preview: How Will Season 1 End?]]></title>
<description><![CDATA[Star City Episode 8 is the Season 1 finale, and it looks ready to close the first chapter with pressure, secrets, and a race against time.



Star City Episode 8, titled “The Wolves,” releases on July 10, 2026, on Apple TV. The episode is listed as the season finale, with the official description...]]></description>
<link>https://tsecurity.de/de/3644787/ios-mac-os/star-city-episode-8-preview-how-will-season-1-end/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3644787/ios-mac-os/star-city-episode-8-preview-how-will-season-1-end/</guid>
<pubDate>Sat, 04 Jul 2026 06:53:49 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Star City Episode 8 is the Season 1 finale, and it looks ready to close the first chapter with pressure, secrets, and a race against time.



Star City Episode 8, titled “The Wolves,” releases on July 10, 2026, on Apple TV. The episode is listed as the season finale, with the official description saying that “a revelation sparks a desperate race against time.”



What to Expect From the Finale



The finale should focus on the fallout from the major secrets built across the season. Star City has followed the Soviet side of the space race, showing how ambition, fear, politics, and surveillance shape every mission.



Episode 8 will likely bring the biggest conflict to the front. The title “The Wolves” hints at danger closing in, either from inside the Soviet program or from rival forces trying to control the truth.



Storylines to Watch



Viewers can expect:




A major revelation that changes the mission



More pressure on Anastasia as the space race reaches a breaking point



Lyudmilla making a risky move to protect her position



The Chief Designer facing the cost of pushing the program forward



A tense setup for a possible Season 2




Will Star City Connect More With For All Mankind?



Since Star City expands the For All Mankind universe from the Soviet side, the finale may add more context to the larger alternate-history timeline. The show already focuses on the hidden cost of the Moon race, so Episode 8 could reveal how Soviet decisions affect the wider world.



Final Thoughts



Star City Episode 8 looks like a tense and emotional finale. With only one episode left, the show has to answer key questions while leaving enough mystery for the future. If the finale delivers on its “race against time” setup, Star City can end Season 1 with one of Apple TV’s strongest sci-fi drama moments of the year.]]></content:encoded>
</item>
<item>
<title><![CDATA[ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security]]></title>
<description><![CDATA[This is the part 4 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security Chapter…
Read more →
The post ISA VDA 6.0.3 (part 4) — Information Security Sheet...]]></description>
<link>https://tsecurity.de/de/3643951/it-security-nachrichten/isa-vda-603-part-4-information-security-sheet-it-security-cyber-security/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3643951/it-security-nachrichten/isa-vda-603-part-4-information-security-sheet-it-security-cyber-security/</guid>
<pubDate>Fri, 03 Jul 2026 18:26:49 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>This is the part 4 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security Chapter…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-4-information-security-sheet-it-security-cyber-security-2/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-4-information-security-sheet-it-security-cyber-security-2/">ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Argo CD flaw shows why GitOps infrastructure should be treated as tier zero]]></title>
<description><![CDATA[A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers warning that the flaw could allow attackers who gain a foothold inside a Kubernetes cluster to execute code and manipulate application deployments.



Security firm Synackti...]]></description>
<link>https://tsecurity.de/de/3640960/ai-nachrichten/argo-cd-flaw-shows-why-gitops-infrastructure-should-be-treated-as-tier-zero/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3640960/ai-nachrichten/argo-cd-flaw-shows-why-gitops-infrastructure-should-be-treated-as-tier-zero/</guid>
<pubDate>Thu, 02 Jul 2026 13:33:25 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers warning that the flaw could allow attackers who gain a foothold inside a Kubernetes cluster to execute code and manipulate application deployments.</p>



<p>Security firm Synacktiv said in a <a href="https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql" target="_blank" rel="noreferrer noopener">report</a> that the flaw affects Argo CD’s repo-server component, which fetches content from Git repositories and generates Kubernetes manifests used to deploy resources in a cluster. Argo CD is one of the most popular Kubernetes tools and is based on the GitOps paradigm.</p>



<p>“Argo CD requires significant privileges within the cluster,” Synacktiv said. “Additionally, it has access to private Git repositories, making it an attractive target for attackers.”</p>



<p>The issue centers on the repo-server’s unauthenticated GenerateManifest gRPC endpoint. Synacktiv said an attacker able to reach that endpoint could supply Kustomize options in a manifest generation request and abuse Kustomize’s Helm-related build options to execute attacker-controlled commands.</p>



<p>Exploitation requires access to both the repo-server gRPC port and the Redis database port, which should not be exposed to users. Argo CD provides Kubernetes network policies designed to prevent that scenario, but those protections are not enabled by default in Helm chart deployments, according to Synacktiv.</p>



<p>In such deployments, compromising a single pod inside the cluster could be enough to give an attacker the internal access needed to exploit the vulnerability.</p>



<p>Synacktiv said it was able to use the flaw to obtain the Redis password from the repo-server environment and access Argo CD’s Redis database. The researchers then manipulated cached deployment data, allowing a malicious manifest to be deployed automatically when Argo CD’s Auto Sync feature was enabled.</p>



<p>If Auto Sync is not enabled, exploitation would require a user to manually sync the application.</p>



<p>Synacktiv publicly disclosed the details on July 1 after first reporting the issue to Argo CD maintainers in January 2025. The vulnerability remains unpatched, and the firm recommended strict Kubernetes network policies to block untrusted pods from reaching the repo-server and Redis services until a fix is available.</p>



<h2 class="wp-block-heading">Assessing internal cluster exposure</h2>



<p>For CISOs, the key question is not only whether Argo CD is exposed to the internet, but whether <a href="https://www.csoonline.com/article/4151367/why-kubernetes-controllers-are-the-perfect-backdoor.html">other workloads</a> inside the Kubernetes cluster can reach its internal services.</p>



<p>“Because the repo-server’s gRPC service does not enforce authentication, any pod that can reach it becomes equivalent to an authenticated attacker,” said <a href="https://www.linkedin.com/in/devashri-datta-522b364b/" target="_blank" rel="noreferrer noopener">Devashri Datta</a>, a cybersecurity researcher. “In a typical cluster, that means any compromised application pod, misconfigured service mesh, or adjacent workload with local code execution can directly query the GenerateManifest endpoint or hit the Redis cache, no internet exposure required.”</p>



<p>Organizations should not equate “not internet-facing” with “low risk,” because modern attacks often begin with the compromise of an internal workload, according to <a href="https://my.idc.com/getdoc.jsp?containerId=PRF005665" target="_blank" rel="noreferrer noopener">Sakshi Grover</a>, senior research manager for cybersecurity services research at IDC Asia/Pacific.</p>



<p>“CISOs should therefore evaluate which workloads can communicate with the Argo CD control plane, whether east-west traffic is appropriately segmented, and whether unnecessary trust relationships exist between application workloads and GitOps infrastructure,” Grover said. “The assessment should focus on attack paths rather than perimeter exposure.”</p>



<h2 class="wp-block-heading">Treating GitOps as tier-zero</h2>



<p>The flaw also underscores the role GitOps platforms play in controlling software deployment across enterprise infrastructure.</p>



<p>“GitOps engines aren’t utility services; they’re tier-0 control-plane components,” Datta said. “By design, Argo CD holds read access to private repositories, sync/write access to target clusters, and custody of deployment secrets. It sits at the precise intersection of source code, configuration management, and live infrastructure.”</p>



<p>That level of access means an Argo CD compromise may extend beyond a single application. An attacker could turn the platform used to deploy applications into a channel for malicious manifests, while also interfering with auto-sync behavior and extracting credentials cached in supporting systems such as Redis.</p>



<p>A compromise of these platforms could influence <a href="https://www.csoonline.com/article/4165420/sap-npm-package-attack-highlights-risks-in-developer-tools-and-ci-cd-pipelines.html">software delivery at scale</a>, making them strategic assets that should be subject to stricter governance and privileged access controls similar to those applied to identity platforms and other critical management systems.</p>



<p><em>The article originally appeared on <a href="https://www.csoonline.com/article/4192188/argo-cd-flaw-shows-why-gitops-infrastructure-should-be-treated-as-tier-zero.html">CSO</a></em>.</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Argo CD flaw shows why GitOps infrastructure should be treated as tier zero]]></title>
<description><![CDATA[A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers warning that the flaw could allow attackers who gain a foothold inside a Kubernetes cluster to execute code and manipulate application deployments.



Security firm Synackti...]]></description>
<link>https://tsecurity.de/de/3640930/it-security-nachrichten/argo-cd-flaw-shows-why-gitops-infrastructure-should-be-treated-as-tier-zero/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3640930/it-security-nachrichten/argo-cd-flaw-shows-why-gitops-infrastructure-should-be-treated-as-tier-zero/</guid>
<pubDate>Thu, 02 Jul 2026 13:23:54 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers warning that the flaw could allow attackers who gain a foothold inside a Kubernetes cluster to execute code and manipulate application deployments.</p>



<p>Security firm Synacktiv said in a <a href="https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql" target="_blank" rel="noreferrer noopener">report</a> that the flaw affects Argo CD’s repo-server component, which fetches content from Git repositories and generates Kubernetes manifests used to deploy resources in a cluster. Argo CD is one of the most popular Kubernetes tools and is based on the GitOps paradigm.</p>



<p>“Argo CD requires significant privileges within the cluster,” Synacktiv said. “Additionally, it has access to private Git repositories, making it an attractive target for attackers.”</p>



<p>The issue centers on the repo-server’s unauthenticated GenerateManifest gRPC endpoint. Synacktiv said an attacker able to reach that endpoint could supply Kustomize options in a manifest generation request and abuse Kustomize’s Helm-related build options to execute attacker-controlled commands.</p>



<p>Exploitation requires access to both the repo-server gRPC port and the Redis database port, which should not be exposed to users. Argo CD provides Kubernetes network policies designed to prevent that scenario, but those protections are not enabled by default in Helm chart deployments, according to Synacktiv.</p>



<p>In such deployments, compromising a single pod inside the cluster could be enough to give an attacker the internal access needed to exploit the vulnerability.</p>



<p>Synacktiv said it was able to use the flaw to obtain the Redis password from the repo-server environment and access Argo CD’s Redis database. The researchers then manipulated cached deployment data, allowing a malicious manifest to be deployed automatically when Argo CD’s Auto Sync feature was enabled.</p>



<p>If Auto Sync is not enabled, exploitation would require a user to manually sync the application.</p>



<p>Synacktiv publicly disclosed the details on July 1, 2026, after first reporting the issue to Argo CD maintainers in January 2025. The vulnerability remains unpatched, and the firm recommended strict Kubernetes network policies to block untrusted pods from reaching the repo-server and Redis services until a fix is available.</p>



<h2 class="wp-block-heading">Assessing internal cluster exposure</h2>



<p>For CISOs, the key question is not only whether Argo CD is exposed to the internet, but whether <a href="https://www.csoonline.com/article/4151367/why-kubernetes-controllers-are-the-perfect-backdoor.html">other workloads</a> inside the Kubernetes cluster can reach its internal services.</p>



<p>“Because the repo-server’s gRPC service does not enforce authentication, any pod that can reach it becomes equivalent to an authenticated attacker,” said <a href="https://www.linkedin.com/in/devashri-datta-522b364b/" target="_blank" rel="noreferrer noopener">Devashri Datta</a>, a cybersecurity researcher. “In a typical cluster, that means any compromised application pod, misconfigured service mesh, or adjacent workload with local code execution can directly query the GenerateManifest endpoint or hit the Redis cache, no internet exposure required.”</p>



<p>Organizations should not equate “not internet-facing” with “low risk,” because modern attacks often begin with the compromise of an internal workload, according to <a href="https://my.idc.com/getdoc.jsp?containerId=PRF005665" target="_blank" rel="noreferrer noopener">Sakshi Grover</a>, senior research manager for cybersecurity services research at IDC Asia/Pacific.</p>



<p>“CISOs should therefore evaluate which workloads can communicate with the Argo CD control plane, whether east-west traffic is appropriately segmented, and whether unnecessary trust relationships exist between application workloads and GitOps infrastructure,” Grover said. “The assessment should focus on attack paths rather than perimeter exposure.”</p>



<h2 class="wp-block-heading">Treating GitOps as tier-zero</h2>



<p>The flaw also underscores the role GitOps platforms play in controlling software deployment across enterprise infrastructure.</p>



<p>“GitOps engines aren’t utility services; they’re tier-0 control-plane components,” Datta said. “By design, Argo CD holds read access to private repositories, sync/write access to target clusters, and custody of deployment secrets. It sits at the precise intersection of source code, configuration management, and live infrastructure.”</p>



<p>That level of access means an Argo CD compromise may extend beyond a single application. An attacker could turn the platform used to deploy applications into a channel for malicious manifests, while also interfering with auto-sync behavior and extracting credentials cached in supporting systems such as Redis.</p>



<p>A compromise of these platforms could influence <a href="https://www.csoonline.com/article/4165420/sap-npm-package-attack-highlights-risks-in-developer-tools-and-ci-cd-pipelines.html">software delivery at scale</a>, making them strategic assets that should be subject to stricter governance and privileged access controls similar to those applied to identity platforms and other critical management systems.</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Ungepatcht seit einem Jahr: Riskante Lücke in Argo CD]]></title>
<description><![CDATA[Ungepatcht seit einem Jahr: Riskante Lücke in Argo CD

      
      
        
          
            
                



            
          
        
              
    
  Daniel Richey
Do., 02.07.2026 - 08:20


            Ein einziges präpariertes Git-Repository genügt, um sich Zugang zu e...]]></description>
<link>https://tsecurity.de/de/3640319/server/ungepatcht-seit-einem-jahr-riskante-luecke-in-argo-cd/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3640319/server/ungepatcht-seit-einem-jahr-riskante-luecke-in-argo-cd/</guid>
<pubDate>Thu, 02 Jul 2026 08:30:21 +0200</pubDate>
<category>🐧 Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<span class="field field--name-title field--type-string field--label-hidden">Ungepatcht seit einem Jahr: Riskante Lücke in Argo CD</span>

      <div class="field field--name-field-image field--type-image field--label-hidden field__items">
      <div class="images-container clearfix">
        <div class="image-preview clearfix">
          <div class="image-wrapper clearfix">
            <div class="field__item">
                <a class="image-popup overlayed" href="https://www.it-administrator.de/kubernetes-argo-cd-schwachstelle-ungepatcht-zugang"><img loading="lazy" src="https://www.it-administrator.de/sites/default/files/styles/medium/public/news-kraken-argo-cd-schwachstelle-kustomize.jpg?itok=qt96bun1" width="480" height="319" alt="Ein vermummter Angreifer sitzt an einem Laptop vor einer Serverumgebung. Im Vordergrund leuchtet ein rotes Warnsymbol, im Hintergrund sind stilisierte Kubernetes- und GitOps-Elemente zu sehen. Das Bild symbolisiert eine kritische Sicherheitslücke in Argo CD, über die Angreifer Kubernetes-Cluster kompromittieren können." title="Eine Schwachstelle in Argo CD ermöglicht unter bestimmten Voraussetzungen die Ausführung von Schadcode und kann zur vollständigen Übernahme eines Kubernetes-Clusters führen. (Quelle: ChatGPT/OpenAI)" typeof="foaf:Image" class="image-style-medium">

<span class="overlay"><i class="fa fa-plus"></i></span></a>

            </div>
          </div>
        </div>
              </div>
    </div>
  <span class="field field--name-uid field--type-entity-reference field--label-hidden"><a title="Benutzerprofil anzeigen." href="https://www.it-administrator.de/user/104" lang about="https://www.it-administrator.de/user/104" typeof="schema:Person" property="schema:name" datatype class="username">Daniel Richey</a></span>
<span class="field field--name-created field--type-created field--label-hidden"><time datetime="2026-07-02T08:20:00+02:00" title="Donnerstag, Juli 2, 2026 - 08:20" class="datetime">Do., 02.07.2026 - 08:20</time>
</span>

            <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item">Ein einziges präpariertes Git-Repository genügt, um sich Zugang zu einem kompletten Kubernetes-Cluster zu verschaffen – zumindest, wenn Argo CD im Einsatz ist. Wie Sicherheitsforscher jetzt zeigen, reicht dafür nicht einmal ein gültiges Passwort.</div>
      <div class="field field--name-field-mt-post-categories field--type-entity-reference field--label-hidden field--entity-reference-target-type-taxonomy-term clearfix">
    <ul class="links field__items">
          <li><a href="https://www.it-administrator.de/news" hreflang="en">News</a></li>
      </ul>
</div>  <div class="node__links">
    <ul class="links inline"><li class="node-readmore"><a href="https://www.it-administrator.de/kubernetes-argo-cd-schwachstelle-ungepatcht-zugang" rel="tag" title="Ungepatcht seit einem Jahr: Riskante Lücke in Argo CD" hreflang="en">Weiterlesen<span class="visually-hidden"> über Ungepatcht seit einem Jahr: Riskante Lücke in Argo CD</span></a></li></ul>  </div>]]></content:encoded>
</item>
<item>
<title><![CDATA[This Week In Rust: This Week in Rust 658]]></title>
<description><![CDATA[Hello and welcome to another issue of This Week in Rust!
Rust is a programming language empowering everyone to build reliable and efficient software.
This is a weekly summary of its progress and community.
Want something mentioned? Tag us at
@thisweekinrust.bsky.social on Bluesky or
@ThisWeekinRu...]]></description>
<link>https://tsecurity.de/de/3640170/tools/this-week-in-rust-this-week-in-rust-658/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3640170/tools/this-week-in-rust-this-week-in-rust-658/</guid>
<pubDate>Thu, 02 Jul 2026 07:10:00 +0200</pubDate>
<category>💾  Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Hello and welcome to another issue of <em>This Week in Rust</em>!
<a href="https://www.rust-lang.org/">Rust</a> is a programming language empowering everyone to build reliable and efficient software.
This is a weekly summary of its progress and community.
Want something mentioned? Tag us at
<a href="https://bsky.app/profile/thisweekinrust.bsky.social">@thisweekinrust.bsky.social</a> on Bluesky or
<a href="https://mastodon.social/@thisweekinrust">@ThisWeekinRust</a> on mastodon.social, or
<a href="https://github.com/rust-lang/this-week-in-rust">send us a pull request</a>.
Want to get involved? <a href="https://github.com/rust-lang/rust/blob/main/CONTRIBUTING.md">We love contributions</a>.</p>
<p><em>This Week in Rust</em> is openly developed <a href="https://github.com/rust-lang/this-week-in-rust">on GitHub</a> and archives can be viewed at <a href="https://this-week-in-rust.org/">this-week-in-rust.org</a>.
If you find any errors in this week's issue, <a href="https://github.com/rust-lang/this-week-in-rust/pulls">please submit a PR</a>.</p>
<p>Want TWIR in your inbox? <a href="https://this-week-in-rust.us11.list-manage.com/subscribe?u=fd84c1c757e02889a9b08d289&amp;id=0ed8b72485">Subscribe here</a>.</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#updates-from-rust-community">Updates from Rust Community</a></h4>


<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#official">Official</a></h5>
<ul>
<li><a href="https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/">Announcing Rust 1.96.1 | Rust Blog</a></li>
<li><a href="https://blog.rust-lang.org/2026/06/25/vision-doc-journeys-to-learning-rust/">The many journeys of learning Rust | Rust Blog</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#foundation">Foundation</a></h5>
<ul>
<li><a href="https://rustfoundation.org/media/rust-foundation-trusted-training-program-launches-giving-learners-a-mark-of-quality-to-trust/">Rust Foundation Trusted Training Program Launches, Giving Learners a Mark of Quality to Trust</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#newsletters">Newsletters</a></h5>
<ul>
<li><a href="https://scientificcomputing.rs/monthly/2026-06">Scientific Computing in Rust #19 (June 2026)</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#projecttooling-updates">Project/Tooling Updates</a></h5>
<ul>
<li><a href="https://slint.dev/blog/slint-1.17-released">Slint 1.17 Released</a></li>
<li><a href="https://blog.antoyo.xyz/rustc_codegen_gcc-progress-report-42">rustc_codegen_gcc: Progress Report #42</a></li>
<li><a href="https://hovinen.me/announcements/2026/06/24/introducing-test-that.html">Introducing Test That!</a></li>
<li><a href="https://hovinen.me/announcements/2026/06/24/introducing-test-that.html">Introducing Test That!: A rich test assertion library for Rust from the original author of GoogleTest Rust</a></li>
<li><a href="https://github.com/shihuili1218/rssh/blob/main/docs/article_arch_en.md">Inside RSSH: one Rust crate, three binaries, and the Tauri lessons along the way</a></li>
<li><a href="https://github.com/Aleixenandros/Rustty/releases/tag/v1.38.0">Rustty 1.38 – accessibility &amp; keyboard nav</a></li>
<li><a href="https://www.willsearch.com.br/blog/2026/06/25/guardiandb-0-17-0-secure-namespaces-iroh-1-0-and-the-arrival-of-the-odm/">GuardianDB 0.17.0: Secure namespaces, Iroh 1.0, and the arrival of the ODM</a></li>
<li><a href="https://dev.to/iam_suriyan_b9078a5b3a553/building-a-real-time-voice-agent-runtime-in-rust-no-gil-one-binary-2000-calls-a-box-12ko">Building a real-time voice-agent runtime in Rust: no GIL, one binary, 2,000 calls a box</a></li>
<li><a href="https://aimdb.dev/blog/aimdb-bring-your-own-connector">AimDB: Bring Your Own Connector</a></li>
<li><a href="https://github.com/kunobi-ninja/kache/releases/tag/v0.8.0">kache 0.8.0: zero-copy restores on Windows (ReFS)</a></li>
<li><a href="https://miskibin.github.io/warbell/">Warbell — a castle-defense action-RPG built with Bevy 0.19</a></li>
<li><a href="https://dev.to/gregorymc86/i-built-a-macos-ftp-client-entirely-in-rust-no-electron-no-webview-2a8i">I built a macOS FTP client entirely in Rust - no Electron, no webview</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#observationsthoughts">Observations/Thoughts</a></h5>
<ul>
<li><a href="https://blog.yoshuawuyts.com/hoisting-expressions">Hoisting Expressions</a></li>
<li><a href="https://blog.jetbrains.com/rust/2026/06/25/rust-web-development-2026/">The Unglamorous Side of Rust Web Development</a></li>
<li><a href="https://dev.to/ernesto_arias_148b35bc25d/-how-i-found-out-52-of-my-knowledge-graph-was-duplicates-and-what-i-did-about-it-3coh">How I Found Out 52% of My Knowledge Graph Was Duplicates (and What I Did About It)</a></li>
<li><a href="https://jtjlehi.github.io/2026/06/25/novel-rust-error-handling.html">A Novel Approach to Rust Error Handling</a></li>
<li><a href="https://encore.dev/blog/redis-runtime">We put a Redis server inside our runtime</a></li>
<li><a href="https://kerkour.com/rust-high-performance-memory-fragmentation-allocations">High-performance Rust: Understanding and eliminating memory fragmentation</a></li>
<li><a href="https://kunobi.ninja/blog/kache-storage-worktrees">AI and worktrees are filling our disks: kache storage, measured</a></li>
<li><a href="https://dev.to/sicklefire/designing-a-cross-platform-terminal-memory-visualizer-in-rust-2365">Designing a cross-platform terminal memory visualizer in Rust</a></li>
<li><a href="https://pranitha.dev/posts/rust-and-memory-allocators">Your Rust Service Isn't Leaking — It Could Be the Allocator</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-walkthroughs">Rust Walkthroughs</a></h5>
<ul>
<li><a href="https://medium.com/@vbasky/measure-dont-guess-building-viser-a-content-adaptive-video-encoding-optimizer-in-rust-7675edd6943a">Measure, Don't Guess: Building viser, a Content-Adaptive Video Encoding Optimizer in Rust</a></li>
<li><a href="https://blog.sheerluck.dev/posts/learn-sql-and-sqlx-by-building-a-book-library-cli-in-rust/">Learn SQL and SQLx by Building a Book Library CLI in Rust</a></li>
<li>[series] <a href="https://aibodh.com/posts/async-rust-chapter-2-what-async-fn-compiles-into/">Reasoning About Async Rust with State Machines</a></li>
<li><a href="https://mainmatter.com/c-to-rust-migration-book/">The C to Rust Migration Book</a></li>
</ul>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#crate-of-the-week">Crate of the Week</a></h4>
<p>This week's crate is <a href="https://github.com/pbkx/deconvolution">deconvolution</a>, a image deconvolution and restoration library.</p>
<p>Thanks to <a href="https://users.rust-lang.org/t/crate-of-the-week/2704/1621">pbkx</a> for the self-suggestion!</p>
<p><a href="https://users.rust-lang.org/t/crate-of-the-week/2704">Please submit your suggestions and votes for next week</a>!</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#calls-for-testing">Calls for Testing</a></h4>
<p>An important step for RFC implementation is for people to experiment with the
implementation and give feedback, especially before stabilization.</p>
<p>If you are a feature implementer and would like your RFC to appear in this list, add a
<code>call-for-testing</code> label to your RFC along with a comment providing testing instructions and/or
guidance on which aspect(s) of the feature need testing.</p>
<p><em>No calls for testing were issued this week by
<a href="https://github.com/rust-lang/rust/issues?q=state%3Aopen%20label%3Acall-for-testing%20state%3Aopen">Rust</a>,
<a href="https://github.com/rust-lang/cargo/issues?q=state%3Aopen%20label%3Acall-for-testing%20state%3Aopen">Cargo</a>,
<a href="https://github.com/rust-lang/rustup/issues?q=state%3Aopen%20label%3Acall-for-testing%20state%3Aopen">Rustup</a> or
<a href="https://github.com/rust-lang/rfcs/issues?q=label%3Acall-for-testing%20state%3Aopen">Rust language RFCs</a>.</em></p>
<p><a href="https://github.com/rust-lang/this-week-in-rust/issues">Let us know</a> if you would like your feature to be tracked as a part of this list.</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#call-for-participation-projects-and-speakers">Call for Participation; projects and speakers</a></h4>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#cfp-projects">CFP - Projects</a></h5>
<p>Always wanted to contribute to open-source projects but did not know where to start?
Every week we highlight some tasks from the Rust community for you to pick and get started!</p>
<p>Some of these tasks may also have mentors available, visit the task page for more information.</p>
<p><a href="https://github.com/kmolan/multicalc-rust/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22">multicalc - good first issues</a></p>



<ul>
<li><a href="https://github.com/aimdb-dev/aimdb/issues/93">AimDB - Add minimal example: hello-single-latest</a></li>
<li><a href="https://github.com/aimdb-dev/aimdb/issues/109">AimDB - Wire <code>.transform()</code> and <code>.transform_join()</code> into stage profiling</a></li>
<li><a href="https://github.com/SzilvasiPeter/edid-info/issues/1">edid-info - Increase test coverage with real EDID data</a></li>
<li><a href="https://github.com/SzilvasiPeter/edid-info/issues/2">edid-info - Finalize CTA-861 extension implementation</a></li>
<li><a href="https://github.com/SzilvasiPeter/edid-info/issues/3">edid-info - Support additional EDID extension block types</a></li>
</ul>
<p>If you are a Rust project owner and are looking for contributors, please submit tasks <a href="https://github.com/rust-lang/this-week-in-rust?tab=readme-ov-file#call-for-participation-guidelines">here</a> or through a <a href="https://github.com/rust-lang/this-week-in-rust">PR to TWiR</a> or by reaching out on <a href="https://bsky.app/profile/thisweekinrust.bsky.social">Bluesky</a> or <a href="https://mastodon.social/@thisweekinrust">Mastodon</a>!</p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#cfp-events">CFP - Events</a></h5>
<p>Are you a new or experienced speaker looking for a place to share something cool? This section highlights events that are being planned and are accepting submissions to join their event as a speaker.</p>



<p>If you are an event organizer hoping to expand the reach of your event, please submit a link to the website through a <a href="https://github.com/rust-lang/this-week-in-rust">PR to TWiR</a> or by reaching out on <a href="https://bsky.app/profile/thisweekinrust.bsky.social">Bluesky</a> or <a href="https://mastodon.social/@thisweekinrust">Mastodon</a>!</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#updates-from-the-rust-project">Updates from the Rust Project</a></h4>
<p>426 pull requests were <a href="https://github.com/search?q=is%3Apr+org%3Arust-lang+is%3Amerged+merged%3A2026-06-23..2026-06-30">merged in the last week</a></p>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#compiler">Compiler</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust/pull/157996">drop the full-crate AST walk in <code>check_unused</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158185">make <code>stable_crate_ids</code> reads lock-free after crate loading</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158239">rework lint pass running</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157271">simplify some <code>proc_macro</code> things</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#library">Library</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust/pull/158326">add <code>io::ErrorKind::TooManyOpenFiles</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/153097">expand <code>OptionFlatten</code>'s iterator methods</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/155625">move <code>std::io::Error</code> into <code>core</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158053">optimize network address parser</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#cargo">Cargo</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/cargo/pull/17106">add <code>-Zhint-msrv</code> flag</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#clippy">Clippy</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17237"><code>filter_map_next</code>: clean-up, overhaul suggestions</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17318"><code>chunks_exact_to_as_chunks</code>: Prevent syntactically invalid suggestions</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17317"><code>chunks_exact_to_as_chunks</code>: Use correct method name in message</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17316"><code>chunks_exact_to_as_chunks</code>: Pick iter method depending on mut-ness</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17302"><code>non_ascii_literal</code>, <code>invisible_characters</code>: don't suggest a fix on raw strings</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17228">create a single <code>ConstEvalCtxt</code> in <code>expr_eagerness</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17299">detect new range types in <code>higher::Range</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17270">do not trigger <code>manual_option_zip</code> when map receiver is a lazy evaluated expression</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/16746">enhance <code>needless_late_init</code> to cover grouped assignments</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17257">fix: <code>borrow_as_ptr</code> is triggered on generated code</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-analyzer">Rust-Analyzer</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22466">add diagnostic for E0596</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22645">add fixes add '.await' for <code>type_mismatch</code></a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22646">crash on lowering consts with associated types</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22640">crash when hovering on anonymous consts</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22582">only run <code>Drop::drop</code> when implemented</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22633">mark <code>inline_convert_while_ascii()</code> as <code>unsafe</code></a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22115">switch out lsp-types for gen-lsp-types</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-compiler-performance-triage">Rust Compiler Performance Triage</a></h5>
<p>Overall, the week was fairly neutral, with no meaningful shift on most benchmarks on any of our statistics.</p>
<p>Triage done by <strong>@simulacrum</strong>.
Revision range: <a href="https://perf.rust-lang.org/?start=8b6558a02b2774acfb25cf15e199467c37ba7490&amp;end=7dc2c162b9c197aaa76a6f9e7534569537830a01&amp;absolute=false&amp;stat=instructions%3Au">8b6558a0..7dc2c162</a></p>
<p>2 Regressions, 1 Improvement, 7 Mixed; 5 of them in rollups
34 artifact comparisons made in total</p>
<p><a href="https://github.com/rust-lang/rustc-perf/blob/master/triage/2026/2026-06-29.md">Full report here</a></p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#approved-rfcs"></a><a href="https://github.com/rust-lang/rfcs/commits/master">Approved RFCs</a></h5>
<p>Changes to Rust follow the Rust <a href="https://github.com/rust-lang/rfcs#rust-rfcs">RFC (request for comments) process</a>. These
are the RFCs that were approved for implementation this week:</p>
<ul>
<li><em>No RFCs were approved this week.</em></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#final-comment-period">Final Comment Period</a></h5>
<p>Every week, <a href="https://www.rust-lang.org/team.html">the team</a> announces the 'final comment period' for RFCs and key PRs
which are reaching a decision. Express your opinions now.</p>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#tracking-issues-prs">Tracking Issues &amp; PRs</a></h6>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust"></a><a href="https://github.com/rust-lang/rust/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Rust</a>
<ul>
<li><a href="https://github.com/rust-lang/rust/issues/143989">Tracking Issue for LocalKey/Cell::update</a></li>
<li><a href="https://github.com/rust-lang/rust/issues/142312">Tracking Issue for <code>{str, [T], Path}::trim_prefix</code> and <code>{str, [T]}::trim_suffix</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/155697">Stabilize c-variadic function definitions</a></li>
<li><a href="https://github.com/rust-lang/rust/issues/69835">Tracking Issue for layout information behind pointers</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158523">Fix feature gate for <code>repr(simd)</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/154585">reat no_mangle_generic_items as hard error instead of lint warning</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158522">Lint against invalid POSIX symbol definitions</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158302">Fix <code>overflowing_literals</code> lint with repeated negation</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158504">stabilize <code>extern "custom"</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/158057">Don't escape U+FF9E and U+FF9F in <code>escape_debug_ext</code></a></li>
</ul>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#compiler-team-mcps-only"></a><a href="https://github.com/rust-lang/compiler-team/issues?q=label%3Amajor-change%20label%3Afinal-comment-period%20state%3Aopen">Compiler Team</a> <a href="https://forge.rust-lang.org/compiler/mcp.html">(MCPs only)</a>
<ul>
<li><a href="https://github.com/rust-lang/compiler-team/issues/1007">Decouple <code>BackendRepr</code> from ABI alignment</a></li>
<li><a href="https://github.com/rust-lang/compiler-team/issues/1005">MCP: Stabilization strategy for rustc parallel frontend</a></li>
</ul>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#language-reference"></a><a href="https://github.com/rust-lang/reference/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Language Reference</a>
<ul>
<li><a href="https://github.com/rust-lang/reference/pull/2166">Fields must fit in the type, even for repr(Rust)</a></li>
</ul>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-rfcs"></a><a href="https://github.com/rust-lang/rfcs/issues?q=state%3Aopen%20label%3Afinal-comment-period%20state%3Aopen">Rust RFCs</a>
<ul>
<li><a href="https://github.com/rust-lang/rfcs/pull/3527">RFC: Associated const underscore</a></li>
<li><a href="https://github.com/rust-lang/rfcs/pull/3980">Add <code>extern "custom"</code></a></li>
</ul>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#unsafe-code-guidelines"></a><a href="https://github.com/rust-lang/unsafe-code-guidelines/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Unsafe Code Guidelines</a>
<ul>
<li><a href="https://github.com/rust-lang/unsafe-code-guidelines/issues/615">Opsem extension proposal: atomic volatile accesses</a></li>
</ul>
<p><em>No Items entered Final Comment Period this week for
<a href="https://github.com/rust-lang/cargo/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Cargo</a>,
<a href="https://github.com/rust-lang/lang-team/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Language Team</a> or
<a href="https://github.com/rust-lang/leadership-council/issues?q=state%3Aopen%20label%3Afinal-comment-period%20state%3Aopen">Leadership Council</a>.</em></p>
<p>Let us know if you would like your PRs, Tracking Issues or RFCs to be tracked as a part of this list.</p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#new-and-updated-rfcs"></a><a href="https://github.com/rust-lang/rfcs/pulls">New and Updated RFCs</a></h5>
<ul>
<li><a href="https://github.com/rust-lang/rfcs/pull/3977">Method chain as item</a></li>
<li><a href="https://github.com/rust-lang/rfcs/pull/3980">Add <code>extern "custom"</code></a></li>
</ul>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#upcoming-events">Upcoming Events</a></h4>
<p>Rusty Events between 2026-07-01 - 2026-07-29 🦀</p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#virtual">Virtual</a></h5>
<ul>
<li>2026-07-01 | Virtual (Indianapolis, IN, US) | <a href="https://www.meetup.com/indyrs">Indy Rust</a><ul>
<li><a href="https://www.meetup.com/indyrs/events/315210366/"><strong>Indy.rs - with Social Distancing</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Virtual (Berlin, DE) | <a href="https://www.meetup.com/rust-berlin">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/308455932/"><strong>Rust Hack and Learn</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Virtual (Charlottesville, VA, US) | <a href="https://www.meetup.com/charlottesville-rust-meetup">Charlottesville Rust Meetup</a><ul>
<li><a href="https://www.meetup.com/charlottesville-rust-meetup/events/315211402/"><strong>Learning Game Development the Hard Way with Rust and Bevy</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Virtual (Nürnberg, DE) | <a href="https://www.meetup.com/rust-noris">Rust Nuremberg</a><ul>
<li><a href="https://www.meetup.com/rust-noris/events/313345243/"><strong>Rust Nürnberg online</strong></a></li>
</ul>
</li>
<li>2026-07-04 | Virtual (Kampala, UG) | <a href="https://www.eventbrite.com/e/rust-circle-meetup-tickets-628763176587">Rust Circle Meetup</a><ul>
<li><a href="https://www.eventbrite.com/e/rust-circle-meetup-tickets-628763176587"><strong>Rust Circle Meetup</strong></a></li>
</ul>
</li>
<li>2026-07-05 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/314095287/"><strong>Rust Deep Learning: First Sunday</strong></a></li>
</ul>
</li>
<li>2026-07-07 | Virtual (London, UK) | <a href="https://www.meetup.com/women-in-rust">Women in Rust</a><ul>
<li><a href="https://www.meetup.com/women-in-rust/events/315060981/"><strong>👋 Community Catch Up</strong></a></li>
</ul>
</li>
<li>2026-07-14 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/310254778/"><strong>Second Tuesday</strong></a></li>
</ul>
</li>
<li>2026-07-15 | Hybrid (Vancouver, BC, CA) | <a href="https://www.meetup.com/vancouver-rust">Vancouver Rust</a><ul>
<li><a href="https://www.meetup.com/vancouver-rust/events/314233743/"><strong>Jiff</strong></a></li>
</ul>
</li>
<li>2026-07-16 | Hybrid (Seattle, WA, US) | <a href="https://www.meetup.com/join-srug">Seattle Rust User Group</a><ul>
<li><a href="https://www.meetup.com/seattle-rust-user-group/events/314520812/"><strong>July, 2026 SRUG (Seattle Rust User Group) Meetup</strong></a></li>
</ul>
</li>
<li>2026-07-16 | Virtual (Berlin, DE) | <a href="https://www.meetup.com/rust-berlin">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/312045926/"><strong>Rust Hack and Learn</strong></a></li>
</ul>
</li>
<li>2026-07-19 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/314329045/"><strong>Rust Deep Learning: Third Sunday</strong></a></li>
</ul>
</li>
<li>2026-07-21 | Virtual (London, UK) | <a href="https://www.meetup.com/women-in-rust">Women in Rust</a><ul>
<li><a href="https://www.meetup.com/women-in-rust/events/315102297/"><strong>Lunch &amp; Learn: Learning Rust as First Programming Language</strong></a></li>
</ul>
</li>
<li>2026-07-21 | Virtual (Washington, DC, US) | <a href="https://www.meetup.com/rustdc">Rust DC</a><ul>
<li><a href="https://www.meetup.com/rustdc/events/315279653/"><strong>Mid-month Rustful</strong></a></li>
</ul>
</li>
<li>2026-07-28 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/310254777/"><strong>Fourth Tuesday</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#asia">Asia</a></h5>
<ul>
<li>2026-07-18 | Bangalore, IN | <a href="https://hasgeek.com/rustbangalore">Rust Bangalore</a><ul>
<li><a href="https://hasgeek.com/rustbangalore/july-2026-rustacean-meetup/"><strong>July 2026 Rustacean Meetup</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#europe">Europe</a></h5>
<ul>
<li>2026-07-01 | Köln, DE | <a href="https://www.meetup.com/rust-cologne-bonn">Rust Cologne</a><ul>
<li><a href="https://www.meetup.com/rustcologne/events/315404678/"><strong>Rust in July: Vecs and Strings and Slices, Oh My!</strong></a></li>
</ul>
</li>
<li>2026-07-01 | Manchester, UK | <a href="https://www.meetup.com/rust-manchester">Rust Manchester</a><ul>
<li><a href="https://www.meetup.com/rust-manchester/events/315200163/"><strong>Rust Manchester June Talks</strong></a></li>
</ul>
</li>
<li>2026-07-01 | Oxford, UK | <a href="https://www.meetup.com/oxford-rust-meetup-group">Oxford ACCU/Rust Meetup.</a><ul>
<li><a href="https://www.meetup.com/oxford-rust-meetup-group/events/315409335/"><strong>Building a file system from scratch</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Edinburgh, UK | <a href="https://www.meetup.com/rust-edi">Rust and Friends</a><ul>
<li><a href="https://www.meetup.com/rust-and-friends/events/314941098/"><strong>Bevy, Bits, &amp; Cats (Rust July Talks)</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Enschede, NL | <a href="https://www.meetup.com/dutch-rust-meetup">Baseflow Tech Meetups</a><ul>
<li><a href="https://www.meetup.com/baseflow-tech-meetups/events/315099547/"><strong>AI Summit</strong></a></li>
</ul>
</li>
<li>2026-07-08 | Dublin, IE | <a href="https://www.meetup.com/rust-dublin">Rust Dublin</a><ul>
<li><a href="https://www.meetup.com/rust-dublin/events/315150327/"><strong>Join us live and INPERSON for Rust 262</strong></a></li>
</ul>
</li>
<li>2026-07-09 | Switzerland, CH | <a href="https://www.posttenebraslab.ch/wiki/events/start">PostTenebrasLab</a><ul>
<li><a href="https://www.posttenebraslab.ch/wiki/events/monthly_meeting/rust_meetup"><strong>Rust Meetup Geneva</strong></a></li>
</ul>
</li>
<li>2026-07-21 | Leipzig, DE | <a href="https://www.meetup.com/rust-modern-systems-programming-in-leipzig">Rust - Modern Systems Programming in Leipzig</a><ul>
<li><a href="https://www.meetup.com/rust-modern-systems-programming-in-leipzig/events/313816470/"><strong>Supercharge Rust funcs with implicit arguments and context-generic programming</strong></a></li>
</ul>
</li>
<li>2026-07-23 | Berlin, DE | <a href="https://www.meetup.com/rust-berlin">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/315484101/"><strong>Rust Berlin Talks: The next generation</strong></a></li>
</ul>
</li>
<li>2026-07-23 | London, UK | <a href="https://www.meetup.com/london-rust-project-group">London Rust Project Group</a><ul>
<li><a href="https://www.meetup.com/london-rust-project-group/events/315366453/"><strong>Rama modular service framework for Rust</strong></a></li>
</ul>
</li>
<li>2026-07-23 | Paris, FR | <a href="https://www.meetup.com/rust-paris">Rust Paris</a><ul>
<li><a href="https://www.meetup.com/rust-paris/events/315309633/"><strong>Rust meetup #87</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#north-america">North America</a></h5>
<ul>
<li>2026-07-02 | Saint Louis, MO, US | <a href="https://www.meetup.com/stl-rust">STL Rust</a><ul>
<li><a href="https://www.meetup.com/stl-rust/events/315103359/"><strong>Git is easy?</strong></a></li>
</ul>
</li>
<li>2026-07-04 | Boston, MA, US | <a href="https://www.meetup.com/bostonrust">Boston Rust Meetup</a><ul>
<li><a href="https://www.meetup.com/bostonrust/events/315225861/"><strong>Boston University Rust Lunch, July 4</strong></a></li>
</ul>
</li>
<li>2026-07-09 | Lehi, UT, US | <a href="https://www.meetup.com/utah-rust">Utah Rust</a><ul>
<li><a href="https://www.meetup.com/utah-rust/events/314696647/"><strong>Utah Rust July Meetup</strong></a></li>
</ul>
</li>
<li>2026-07-11 | Boston, MA, US | <a href="https://www.meetup.com/bostonrust">Boston Rust Meetup</a><ul>
<li><a href="https://www.meetup.com/bostonrust/events/315225865/"><strong>MIT Rust Lunch, July 11</strong></a></li>
</ul>
</li>
<li>2026-07-15 | Hybrid (Vancouver, BC, CA) | <a href="https://www.meetup.com/vancouver-rust">Vancouver Rust</a><ul>
<li><a href="https://www.meetup.com/vancouver-rust/events/314233743/"><strong>Jiff</strong></a></li>
</ul>
</li>
<li>2026-07-16 | Hybrid (Seattle, WA, US) | <a href="https://www.meetup.com/join-srug">Seattle Rust User Group</a><ul>
<li><a href="https://www.meetup.com/seattle-rust-user-group/events/314520812/"><strong>July, 2026 SRUG (Seattle Rust User Group) Meetup</strong></a></li>
</ul>
</li>
<li>2026-07-18 | Boston, MA, US | <a href="https://www.meetup.com/bostonrust">Boston Rust Meetup</a><ul>
<li><a href="https://www.meetup.com/bostonrust/events/315225872/"><strong>North End Rust Lunch, July 18</strong></a></li>
</ul>
</li>
<li>2026-07-21 | San Francisco, CA, US | <a href="https://www.meetup.com/san-francisco-rust-study-group">San Francisco Rust Study Group</a><ul>
<li><a href="https://www.meetup.com/san-francisco-rust-study-group/events/314997214/"><strong>Rust Hacking in Person</strong></a></li>
</ul>
</li>
<li>2026-07-22 | Austin, TX, US | <a href="https://www.meetup.com/rust-atx">Rust ATX</a><ul>
<li><a href="https://www.meetup.com/rust-atx/events/xvkdgtyjckbdc/"><strong>Rust Lunch - Fareground</strong></a></li>
</ul>
</li>
<li>2026-07-22 | Los Angeles, CA, US | <a href="https://www.meetup.com/rust-los-angeles">Rust Los Angeles</a><ul>
<li><a href="https://www.meetup.com/rust-los-angeles/events/315376271/"><strong>Rust LA: Rust in Distributed Systems with Flight Science!</strong></a></li>
</ul>
</li>
<li>2026-07-25 | Brooklyn, NY, US | <a href="https://flowercomputer.com/">Flower</a><ul>
<li><a href="https://partiful.com/e/Vq9fyDNCMSO7ia4ulK5b"><strong>BOG-A-THON 2</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#oceania">Oceania</a></h5>
<ul>
<li>2026-07-21 | Barton, AU | <a href="https://www.meetup.com/rust-canberra">Canberra Rust User Group</a><ul>
<li><a href="https://www.meetup.com/rust-canberra/events/315307280/"><strong>July Meetup</strong></a></li>
</ul>
</li>
<li>2026-07-23 | Perth, AU | <a href="https://www.meetup.com/perth-rust-meetup-group">Rust Perth Meetup Group</a><ul>
<li><a href="https://www.meetup.com/perth-rust-meetup-group/events/315451138/"><strong>Rust Perth: July Meetup!</strong></a></li>
</ul>
</li>
</ul>
<p>If you are running a Rust event please add it to the <a href="https://www.google.com/calendar/embed?src=apd9vmbc22egenmtu5l6c5jbfc%40group.calendar.google.com">calendar</a> to get
it mentioned here. Please remember to add a link to the event too.
Email the <a href="mailto:community-team@rust-lang.org">Rust Community Team</a> for access.</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#jobs">Jobs</a></h4>
<p>Please see the latest <a href="https://www.reddit.com/r/rust/comments/1ttbtf5/official_rrust_whos_hiring_thread_for_jobseekers/">Who's Hiring thread on r/rust</a></p>
<h3><a class="toclink" href="https://this-week-in-rust.org/atom.xml#quote-of-the-week">Quote of the Week</a></h3>
<blockquote>
<p>I <em>do</em> rather hope anyone using <code>-Zllvm-target-features</code> or any stabilized form thereof would know that they are getting a conversation with the dragon directly and they should mind their words carefully if they do not wish to be barbecued by it and served over a nice plate of iron filings.</p>
</blockquote>
<p>– <a href="https://rust-lang.zulipchat.com/#narrow/channel/233931-t-compiler.2Fmajor-changes/topic/Add.20.60-Zllvm-target-feature.60.20target.20.2Amodif.E2.80.A6.20compiler-team.23994/near/606147265">workingjubilee on rust zulip</a></p>
<p>Thanks to <a href="https://users.rust-lang.org/t/twir-quote-of-the-week/328/1784">Tomáš Šedovič</a> for the suggestion!</p>
<p><a href="https://users.rust-lang.org/t/twir-quote-of-the-week/328">Please submit quotes and vote for next week!</a></p>
<p>This Week in Rust is edited by:</p>
<ul>
<li><a href="https://github.com/nellshamrell">nellshamrell</a></li>
<li><a href="https://github.com/llogiq">llogiq</a></li>
<li><a href="https://github.com/ericseppanen">ericseppanen</a></li>
<li><a href="https://github.com/extrawurst">extrawurst</a></li>
<li><a href="https://github.com/U007D">U007D</a></li>
<li><a href="https://github.com/mariannegoldin">mariannegoldin</a></li>
<li><a href="https://github.com/bdillo">bdillo</a></li>
<li><a href="https://github.com/opeolluwa">opeolluwa</a></li>
<li><a href="https://github.com/bnchi">bnchi</a></li>
<li><a href="https://github.com/KannanPalani57">KannanPalani57</a></li>
<li><a href="https://github.com/tzilist">tzilist</a></li>
</ul>
<p><em>Email list hosting is sponsored by <a href="https://foundation.rust-lang.org/">The Rust Foundation</a></em></p>
<p><small><a href="https://www.reddit.com/r/rust/comments/1ul6xfl/this_week_in_rust_658/">Discuss on r/rust</a></small></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Is the Android Lock Screen an Illusion? A Critical Logical Bypass Discovered in the Gemini App]]></title>
<description><![CDATA[Image generated by Google GeminiNOTE: As of the publication of this article, the vulnerability has been fully patched, and all coordination regarding disclosure was managed directly with the Google VRP team.Introduction: “Security Architecture vs. The Real World”How can Android’s foundational sec...]]></description>
<link>https://tsecurity.de/de/3638146/hacking/is-the-android-lock-screen-an-illusion-a-critical-logical-bypass-discovered-in-the-gemini-app/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3638146/hacking/is-the-android-lock-screen-an-illusion-a-critical-logical-bypass-discovered-in-the-gemini-app/</guid>
<pubDate>Wed, 01 Jul 2026 12:21:44 +0200</pubDate>
<category>🕵️ Hacking</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*9_XxbXU5gPX6wrq251_tIg.png"><figcaption>Image generated by Google Gemini</figcaption></figure><p><strong>NOTE:</strong> <em>As of the publication of this article, the vulnerability has been fully patched, and all coordination regarding disclosure was managed directly with the Google VRP team.</em></p><h3>Introduction: “Security Architecture vs. The Real World”</h3><p>How can Android’s foundational security layer, the Keyguard, falter when confronted with the complexity of a modern AI interface? The answer is simple: as systems grow more complex, the impact of overlooked edge cases amplifies.</p><p>In this write-up, I will dissect how a simple multi-touch interaction triggered a critical logical security flaw. I’ll provide the technical details of how this vulnerability bypassed the lock screen — the very boundary designed to be the most secure — and exposed sensitive user data.</p><h3>How I Discovered It</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/426/1*bfiQwfzmzuTXg4qGaLwLKA.gif"><figcaption><strong>Fig 1: </strong>Demonstration of the Multi-touch Bypass</figcaption></figure><p>I didn’t uncover this vulnerability using automated scanning utilities or complex fuzzing frameworks; rather, it surfaced organically during my daily user experience. I noticed that multi-finger interactions within the user interface triggered benign functions that should have been restricted under specific device states. While an average user might dismiss this behavior as a transient UI glitch, to a security researcher, it signaled a potential flaw.</p><p>Further analysis revealed that invoking specific operational modes, such as Lyria or Deep Research, forced the application into a full-screen state. Initially, interaction was restricted, and the system prompted for credentials. However, applying the multi-touch technique I discovered earlier circumvented these constraints, granting unauthorized access to application settings and chat histories. By expanding the attack surface during my research, I confirmed that critical assets like NotebookLM notebooks and Gmail drafts were equally vulnerable, subsequently documenting and escalating these findings to Google.</p><h3>Technical Analysis</h3><p>Gemini’s modular features bypassed the system Keyguard due to an architectural misconfiguration. The application improperly exposed UI elements that should remain strictly inaccessible while the device is locked. Although the system repeatedly invoked the Keyguard to request authentication during these operations, I successfully bypassed the lock state by leveraging a form of <strong>Context Hijacking</strong>.</p><p>The root cause lies in inadequate validation of concurrent UI interactions. By maintaining an active press on a permitted interaction area (such as a text input field) while simultaneously tapping a restricted target element, the application failed to isolate the input contexts. This race-like UI interaction completely neutralized the application’s internal security control mechanisms, turning a seemingly minor interface bug into a robust logical bypass.</p><a href="https://medium.com/media/e9c63ce92d169f8571147826f68417cf/href">https://medium.com/media/e9c63ce92d169f8571147826f68417cf/href</a><h4><strong>Impact &amp; Exploitation Surface</strong></h4><p>During the initial phase of my research, the exploit vectors were limited to reading, deleting, or renaming historical chats, accessing Gemini’s core settings, and viewing profile data. However, digging deeper into the application’s ecosystem revealed a significantly more severe impact:</p><ul><li><strong>Arbitrary Creation of Gmail and Google Docs Drafts:</strong> Allowing unauthenticated data injection into core Google services.</li><li><strong>Unauthorized Access to NotebookLM:</strong> Exposing proprietary or highly sensitive personal and enterprise data stored within notebooks.</li><li><strong>Gem Execution:</strong> Triggering custom AI agents without owner authentication.</li><li><strong>Destructive Actions:</strong> Permanently deleting critical NotebookLM assets.</li></ul><p>The practical implications of this vulnerability present severe risks, including data exfiltration, advanced social engineering scenarios via unauthorized draft creation, and the compromise of enterprise-grade environments.</p><h3>Coordination and Disclosure Timeline</h3><p>Throughout the lifecycle of this vulnerability, I maintained an active and transparent line of communication with Google’s security team. Shortly after submission, my report was designated as a <strong>“Duplicate,”</strong> tied to an older legacy issue inherent to Android’s core component architecture. Despite my requests for verification regarding the unique interaction vector, the root cause was maintained as identical.</p><p>Nevertheless, I continued my research. Following a subsequent major Gemini update, I verified that the exploit remained active. Upon presenting this evidence, an immediate mitigation was deployed, removing the specific mode buttons from the locked interface. Roughly a month later, a comprehensive patch was pushed, completely resolving the underlying logic flaw. My subsequent regression testing confirmed that unauthorized multi-touch access had been completely mitigated, successfully concluding the lifecycle of the report.</p><h3>Key Takeaways and Conclusion</h3><p>This journey marked my very first experience within the bug bounty ecosystem. Uncovering this logical vulnerability taught me that security research extends far beyond hunting for code flaws; it is about navigating the disclosure process and understanding how even a “duplicate” report can be leveraged to harden a system’s overall security posture. It perfectly illustrated how seemingly decoupled, non-critical components can be chained together to form a high-severity exploit.</p><p>Analyzing Android’s security architecture and engaging with engineering teams on regression analysis during my first research attempt fundamentally shifted my perspective on information security. While this specific report did not yield a financial bounty, the true payout was invaluable: a deep dive into the inner workings of complex enterprise software and the discipline required to execute a responsible disclosure process.</p><p>This experience is merely the opening chapter of my career in security research. It stands as a reminder that no architecture is infallible, but through the vigilance of independent researchers, they can be made resilient. Security is never a static defense; it is a continuous cycle of curiosity, analysis, and refinement.</p><p><strong>NOTE:</strong> All PoC media provided in this article have been redacted to ensure user privacy and are presented solely for educational and security analysis purposes.</p><h3>📌 References &amp; Community</h3><p>If you want to check out my other security research, tools, or open-source projects, feel free to explore the links below:</p><ul><li><strong>GitHub:</strong> <a href="https://github.com/msalihberk/">github.com/msalihberk</a></li><li><strong>Previous Research:</strong> <a href="https://medium.com/meetcyber/shadowlab-a-modular-c2-framework-architecture-built-with-python-for-modern-cybersecurity-research-7acb496e6784">ShadowLab: A Modular C2 Framework Architecture Built with Python for Modern Cybersecurity Research</a></li><li><strong>Follow for More:</strong> Feel free to follow my Medium profile to get notified about my future security research, development projects, and technical write-ups.</li></ul><img src="https://medium.com/_/stat?event=post.clientViewed&amp;referrerSource=full_rss&amp;postId=9e7da290ea06" width="1" height="1" alt=""><hr><p><a href="https://infosecwriteups.com/gemini-app-logical-lockscreen-bypass-9e7da290ea06">Is the Android Lock Screen an Illusion? A Critical Logical Bypass Discovered in the Gemini App</a> was originally published in <a href="https://infosecwriteups.com/">InfoSec Write-ups</a> on Medium, where people are continuing the conversation by highlighting and responding to this story.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Preventing agent-generated infrastructure bloat through spec-driven governance]]></title>
<description><![CDATA[Autonomous AI engineer agents can deliver software at a scale in multiples of what a human engineering team can do, and that productivity is genuinely valuable. But without proper guardrails at the specification level, these agents can industrialise inefficient infrastructure patterns at the same...]]></description>
<link>https://tsecurity.de/de/3637960/ai-nachrichten/preventing-agent-generated-infrastructure-bloat-through-spec-driven-governance/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3637960/ai-nachrichten/preventing-agent-generated-infrastructure-bloat-through-spec-driven-governance/</guid>
<pubDate>Wed, 01 Jul 2026 11:19:17 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>Autonomous AI engineer agents can deliver software at a scale in multiples of what a human engineering team can do, and that productivity is genuinely valuable. But without proper guardrails at the specification level, these agents can industrialise inefficient infrastructure patterns at the same pace, consistently and at a scale that makes post-deploy remediation impractical. When an agent provisions a three-node GKE cluster using n2-standard-16 machines for a workload a single e2-medium node could handle, or generates a Kubernetes pod spec with 4-CPU and 8GB memory requests for a service that peaks at 200 milli-cores and 256MB, or writes a Dockerfile that pulls a full Ubuntu base image where a distro-less container would serve, infrastructure runs that decision continuously, for the lifetime of the service. The agent will reproduce these patterns across every environment it touches, because the specification never instructed it otherwise. When agentic pipelines are generating infrastructure at scale, operational remediation after the fact becomes impractical.</p>



<p>The scale of what is now being generated autonomously is significant. <a href="https://www.infoworld.com/article/3999607/how-to-succeed-or-fail-with-ai-driven-development.html">InfoWorld’s reporting on AI-driven development</a> shows the pace of AI-generated output is accelerating sharply, and <a href="https://www.infoworld.com/article/3993479/what-we-know-now-about-generative-ai-for-software-development.html">projections suggest more than a quarter of new production code and configuration is already AI-generated</a>. What those projections do not yet capture is the shift from AI-assisted to fully agentic pipelines, where agents generate Terraform, Kubernetes manifests, Helm charts and Docker configurations end-to-end, commit them and trigger deployment, with no human in the loop or little oversight that concentrates on functional capabilities. When that pipeline runs without sustainability constraints, it systematically reproduces that infrastructure inefficiency across every environment it touches.</p>



<p>Green software has traditionally been an operational problem: Right-size the containers retrospectively, tune the cluster after the fact, schedule workloads in low-carbon windows. That approach was already struggling before agentic pipelines arrived. <a href="https://www.gartner.com/en/newsroom/press-releases/2024-05-16-gartner-identifies-the-top-five-strategic-technology-trends-in-software-engineering-for-2024">Gartner projects</a> that by 2027, just 30% of large enterprises will have software sustainability embedded in their non-functional requirements. That statistic carries a consequence most engineering leaders have not yet confronted: If 70% of enterprise code has been written without sustainability intent, then the training data autonomous AI engineer agents learned from is dominated by potentially unsustainable patterns. An agent defaults to the majority pattern in its training distribution, which is the inefficient one. This makes the specification constraint not just a governance need, but a corrective instruction that the agent’s training data never provided.</p>



<h2 class="wp-block-heading">Sustainable specification as a reliable intervention point</h2>



<p>In a fully agentic development pipeline, the specification is not a document an engineer reads before writing code. It is the instruction set the agent executes. It determines which machine types get provisioned, which container base images get selected, how pod resource requests are sized, how storage is allocated and how networking is configured. Every infrastructure decision the agent makes downstream is a function of what the specification permitted or left undefined.</p>



<p>If the specification contains no sustainability constraints, the agent will make infrastructure decisions based on defaults, conventions and training data patterns, none of which are optimised for energy efficiency. An agent prompted to scaffold a GKE-based microservice will, by default, select machine types that ensure availability headroom rather than efficiency. It will size pod resource requests conservatively to avoid out-of-memory conditions from potentially inefficient application code, but not to minimise node utilization. It will pull familiar base images rather than minimal ones. These are not failures of the agent. They are the predictable output of an instruction set that never asked for sustainability.</p>



<p>The fix is to make sustainability a first-class constraint in the specification itself. A constraint such as GS-INFRA-001 (select the smallest GKE machine type that satisfies the workload’s measured resource ceiling, defaulting to e2-medium or smaller) or GS-K8S-001 (set pod CPU requests to measured p95 consumption with a 20% ceiling, not to arbitrary safe values) is a structured policy the agent reads before it generates a single line of Terraform or YAML. The agent does not override it. It executes it. That is the mechanism that makes sustainability structural and automated rather than aspirational.</p>



<h2 class="wp-block-heading">The infrastructure patterns that matter most</h2>



<p>Three infrastructure domains represent the highest-impact targets for sustainability constraints, precisely because autonomous AI engineer agents generate them prolifically and the consequences compound continuously at runtime rather than only when code executes.</p>



<p>The first is IaC and cloud resource provisioning. An agent generating a Terraform configuration for a GKE cluster defaults to instance families and node counts calibrated for resilience, not efficiency. A three-node cluster of n2-standard-16 machines (64 vCPUs, 192GB RAM) provisioned for a service that runs comfortably on a single e2-medium (2 vCPUs, 4GB RAM) represents a 32x over-provisioning of compute. That gap does not show up in staging. It runs in production, is billed continuously, emitting continuously. A sustainability constraint in the Terraform specification that enforces machine type selection against a measured workload profile eliminates this class of error before the agent writes its first resource block.</p>



<p>The second is the Kubernetes pod resource configuration. Pod resource requests are the input the Kubernetes scheduler uses to place workloads on nodes. When an autonomous AI engineer agent generates a pod spec with generous CPU and memory requests, the scheduler reserves that capacity whether the pod uses it or not. Nodes that could host eight efficiently-sized pods instead host two or three over-specified ones, leaving the remaining capacity stranded and the underlying VM running at low utilization. A pod spec with a 4-CPU, 8GB memory request for a service that observably consumes 200 millicores and 256MB at peak is not cautious engineering. It is a scheduler instruction to waste three and a half CPUs and 7.75GB of memory per pod, per node, per hour, across every replica in every environment. A sustainability constraint specifying that pod resource requests must be derived from measured p95 consumption data, not from defaults or intuition, changes this systematically.</p>



<p>The third is the container base image selection. When an agent generates a Dockerfile, it gravitates toward familiar, full-featured base images: Ubuntu, Debian, Python, Node.js. These images are large, carry a significant attack surface and consume more storage, memory and transfer bandwidth than their minimal equivalents. A distroless or Alpine-based image for the same workload can be an order of magnitude smaller. At the scale at which an autonomous AI engineer agent operates, pulling, storing and running bloated base images across hundreds of services is a significant and entirely avoidable infrastructure cost. A constraint specifying distroless or minimal base images as the default, with justification required for exceptions, eliminates the pattern without slowing generation.</p>



<h2 class="wp-block-heading">4 pipeline stages where constraints are enforced</h2>



<p>Embedding constraints in the specification is the intervention. Enforcing them through the pipeline is what makes the intervention reliable. Four stages create the enforcement architecture.</p>



<p>The first stage is generation itself. When sustainability constraints are part of the specification the autonomous AI engineer agent operates from, those constraints shape every artifact the agent produces: Terraform resource blocks, Kubernetes manifests, Helm chart defaults, Dockerfile base image selections. The agent does not reason about sustainability independently. It executes the specification. A well-constrained specification produces sustainable infrastructure by construction, not by review.</p>



<p>The second stage is static analysis. Tools including Checkov, tfsec, KICS and Trivy analyze Terraform, Kubernetes YAML and Dockerfiles against configurable policy rules without modifying the agent or the pipeline architecture. A Checkov policy enforcing the GKE machine type constraint, or a tfsec rule flagging over-provisioned node pools, runs against every artifact the agent generates before it reaches a deployment gate. The violation surfaces as structured CI output the gate acts on. The agent’s output is checked the same way a human engineer’s output would be, consistently, at every commit.</p>



<p>The third stage is the quality gate. Sustainability violations fail the build. They do not generate warnings that an agent pipeline has no mechanism to act on. A gate that blocks deployment on policy violations is the enforcement layer that makes constraints binding rather than advisory. Because the gate operates on artifact output rather than on the agent itself, it is fully autonomous AI engineer agent-agnostic: It does not matter whether the Terraform was generated by Copilot, a custom LLM pipeline, an internal scaffolding agent or a human engineer. The gate evaluates the artifact against the policy. That is the only thing that matters.</p>



<p>The fourth stage is runtime telemetry feeding back into constraint refinement. Actual resource utilization, node efficiency metrics and carbon intensity data from production inform constraint updates at the specification level. A constraint calibrated on design-time estimates tightens over time as empirical data replaces assumptions. The governance model improves continuously rather than stagnating at its initial calibration.</p>



<h2 class="wp-block-heading">3 steps to start this week</h2>



<p>Most engineering organizations already have everything they need to begin. The static analysis toolchain is there: Checkov, tfsec, KICS, Trivy and OPA Conftest all support configurable sustainability policies against Terraform, Kubernetes YAML and Dockerfile artifacts without pipeline replacement. The CI/CD pipeline is there: GitHub Actions, GitLab CI, Jenkins, Tekton and Azure DevOps Pipelines all support blocking quality gates against policy tool outputs. The specification layer is there: Terraform modules, Helm chart value schemas, Kubernetes admission controllers and architectural decision records are already version-controlled in most mature engineering organizations. And critically, this approach is a fully autonomous AI engineer agent-agnostic. The governance layer does not inspect which agent or model generated the infrastructure artifact. It enforces the policy against the output. Whether the Terraform came from a custom agentic pipeline, a Copilot suggestion or a human engineer, the gate applies identically. The only things genuinely missing are the sustainability constraint definitions authored into the specification and the policy rules wired into the CI/CD pipeline to enforce them. Three steps close that gap.</p>



<ol class="wp-block-list">
<li><strong>Audit your IaC specifications for sustainability constraints.</strong> Open an active Terraform module or Helm chart and locate the machine type defaults, pod resource request defaults and base image defaults. For most organizations, these are set to safe, familiar values with no sustainability rationale. Define three constraints: A maximum machine type ceiling for each workload tier, a pod resource request ceiling derived from measured utilization, and a base image policy requiring distro-less or Alpine equivalents. Version control these constraints alongside the specifications they govern.</li>



<li><strong>Add one Checkov or tfsec policy to your CI pipeline.</strong> A policy flagging GKE node pools configured above the e2-standard-4 threshold without a documented justification is implementable in under an hour using Checkov’s custom check API. Wire it as a blocking gate, not a warning. This single addition creates immediate, agent-agnostic enforcement across every Terraform commit in your repository.</li>



<li><strong>Embed sustainability constraints before you scale your agentic pipelines.</strong> The highest-leverage moment is now, before autonomous AI engineer agents are generating infrastructure at full organizational scale. Every agentic pipeline that goes into production without sustainability constraints in its specification becomes a systematic source of over-provisioned, carbon-intensive infrastructure that compounds daily. Retrofitting governance after hundreds of agent-generated services are running is an order of magnitude harder than constraining generation at the specification source.</li>
</ol>



<h2 class="wp-block-heading">What lies ahead</h2>



<p>The sustainability challenge discussed here is not the energy consumed by the AI engineer agent itself, but the long-lived infrastructure decisions encoded into the artifacts it generates. Sustainable infrastructure engineering is no longer an operational discipline. It is an architectural necessity, and the specification layer is where that necessity must be addressed. When autonomous AI engineer agents are generating Terraform, Kubernetes manifests and Docker configurations at scale, the organizations that embed sustainability constraints into the specifications those agents execute will build efficient, cost-controlled, regulation-ready infrastructure by construction. Those that do not will build a remediation programme instead, which at scale will become impractical.</p>



<p>The urgency is not speculative. <a href="https://spectrum.ieee.org/green-software/particle-2">IEEE Spectrum reports</a> that Microsoft’s emissions have risen 23% since its 2020 baseline and Google’s have climbed 51% since 2019, with AI infrastructure as the primary driver. <a href="https://spectrum.ieee.org/firms-bet-climate-tech">Global data centres are on track to consume more electricity than Japan by 2030.</a> A significant fraction of that load is over-provisioned infrastructure that an autonomous AI engineer agent generated from a specification that never asked for efficiency. The constraint cost is low. The compounding cost of the alternative is not.</p>



<p>The governance imperative is converging from three directions simultaneously. Cloud cost: Over-provisioned AI-generated infrastructure compounds spend at a rate that makes early specification-layer control orders of magnitude cheaper than post-deployment rightsizing programmes. Technical debt: Every agentic sprint that ships infrastructure without sustainability constraints adds configuration debt that grows faster than any platform team can retrospectively correct. Regulatory pressure: Sustainability reporting requirements, already mandatory in the EU and accelerating in other jurisdictions, will reach infrastructure efficiency metrics. Engineering organizations that have operationalised sustainability governance at the specification layer will meet those requirements as a natural output of their existing pipeline. Those who have not will discover that compliance is a crisis programme when the deadline arrives. These are not abstract architectural concerns. The organizations that govern agentic generation upstream, at the specification, will compound efficiency gains with every agent run, not just sustainability but cost, too. Those who govern only in production will spend a lot of time remediating what they should have prevented before the first line of Terraform was written.</p>



<p><strong>This article is published as part of the Foundry Expert Contributor Network.</strong><br><strong><a href="https://www.cio.com/expert-contributor-network/">Want </a><a href="https://www.infoworld.com/expert-contributor-network/">to</a><a href="https://www.cio.com/expert-contributor-network/"> join?</a></strong></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Dish files for bankruptcy, but not shutting down]]></title>
<description><![CDATA[Dish, the company that operates Dish TV and Sling TV, has filed for Chapter 11 bankruptcy," as reported earlier by Reuters. The plan will allow the EchoStar-owned company to continue to wind down its wireless operations after "unforeseen delays" held back its sale of $23 billion worth of 5G spect...]]></description>
<link>https://tsecurity.de/de/3637040/it-nachrichten/dish-files-for-bankruptcy-but-not-shutting-down/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3637040/it-nachrichten/dish-files-for-bankruptcy-but-not-shutting-down/</guid>
<pubDate>Wed, 01 Jul 2026 01:02:31 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Dish, the company that operates Dish TV and Sling TV, has filed for Chapter 11 bankruptcy," as reported earlier by Reuters. The plan will allow the EchoStar-owned company to continue to wind down its wireless operations after "unforeseen delays" held back its sale of $23 billion worth of 5G spectrum to AT&amp;T. Dish TV, Sling […]]]></content:encoded>
</item>
<item>
<title><![CDATA[v0.384.0]]></title>
<description><![CDATA[What's Changed

Bazel: Fix prerelease filtering with same-release-line scoping by @v-HaripriyaC in #15332
Respect cooldown for Docker digest updates and suppress multi-arch no-ops by @robaiken in #15354
Bypass npmrc min-release-age for transitive npm security updates by @robaiken in #15386
Ratche...]]></description>
<link>https://tsecurity.de/de/3636212/it-security-tools/v03840/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3636212/it-security-tools/v03840/</guid>
<pubDate>Tue, 30 Jun 2026 18:19:52 +0200</pubDate>
<category>💾 IT Security Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2>What's Changed</h2>
<ul>
<li>Bazel: Fix prerelease filtering with same-release-line scoping by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/v-HaripriyaC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/v-HaripriyaC">@v-HaripriyaC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4669331291" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15332" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15332/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15332">#15332</a></li>
<li>Respect cooldown for Docker digest updates and suppress multi-arch no-ops by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/robaiken/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/robaiken">@robaiken</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4701287300" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15354" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15354/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15354">#15354</a></li>
<li>Bypass npmrc min-release-age for transitive npm security updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/robaiken/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/robaiken">@robaiken</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4725022446" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15386" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15386/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15386">#15386</a></li>
<li>Ratchet the Sorbet T.untyped burndown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4731460685" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15399" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15399/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15399">#15399</a></li>
<li>feat(docker): implement single-platform image detection and optimize manifest fetching logic by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpinz/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jpinz">@jpinz</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4727893963" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15390" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15390/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15390">#15390</a></li>
<li>Fix private registry config not found error not being raised issue in npm_and_yarn by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4729495132" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15394" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15394/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15394">#15394</a></li>
<li>don't fail if nuget cred is missing url by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4721038688" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15378" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15378/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15378">#15378</a></li>
<li>Type commit_message_options with a value object by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4731577963" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15400" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15400/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15400">#15400</a></li>
<li>Type the Dependabot config file parser by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4731644129" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15401" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15401/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15401">#15401</a></li>
<li>Fix Terraform registry replacement typing and credential semantics by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> with @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4734067707" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15406" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15406/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15406">#15406</a></li>
<li>fix: avoid path collisions for SHA-pinned GitHub Actions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/markhallen/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/markhallen">@markhallen</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4317086858" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/14806" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/14806/hovercard" href="https://github.com/dependabot/dependabot-core/pull/14806">#14806</a></li>
<li>Nix: skip flake inputs pinned to a bare commit SHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4740718886" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15412" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15412/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15412">#15412</a></li>
<li>Type the vulnerability version-range renderer by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4731673648" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15402" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15402/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15402">#15402</a></li>
<li>Add JobCommand enum and Command property to NuGet Job model by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4643997783" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15277" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15277/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15277">#15277</a></li>
<li>Upgrade Ruby to 4.0.5 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Bo98/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Bo98">@Bo98</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4333052029" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/14830" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/14830/hovercard" href="https://github.com/dependabot/dependabot-core/pull/14830">#14830</a></li>
<li>Bump updater-core image to RubyGems/Bundler 4.0.13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4618733501" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15256" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15256/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15256">#15256</a></li>
<li>Fix issue with <code>PrivateRegistryConfigNotFound</code> error incorrectly firing when scope is configured by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4746967053" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15416" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15416/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15416">#15416</a></li>
<li>Fake MSBuild SolutionDir during NuGet discovery (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3717692367" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/13756" data-hovercard-type="issue" data-hovercard-url="/dependabot/dependabot-core/issues/13756/hovercard" href="https://github.com/dependabot/dependabot-core/issues/13756">#13756</a>) by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4729122800" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15392" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15392/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15392">#15392</a></li>
<li>NuGet: Filter all editable files not present prior to discovery by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4702669203" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15358" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15358/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15358">#15358</a></li>
<li>Support Central Package Versions updates in XmlFileWriter by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4737397188" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15409" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15409/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15409">#15409</a></li>
<li>[Update Graph] Report empty manifests as present but empty instead of omitting them by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4753676533" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15427" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15427/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15427">#15427</a></li>
<li>Fix vcpkg empty PRs for up-to-date baselines by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4747606732" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15420" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15420/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15420">#15420</a></li>
<li>Nix: update NixOS channel tarball inputs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4741094986" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15413" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15413/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15413">#15413</a></li>
<li>fix(opentofu): accept terraform_registry credentials for OCI registry tags by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4750827433" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15422" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15422/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15422">#15422</a></li>
<li>Commit changes to workspace member TOML files by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/crabbit-git/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/crabbit-git">@crabbit-git</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4523481545" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15142" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15142/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15142">#15142</a></li>
<li>Fix COREPACK_NPM_REGISTRY trailing slash causing pnpm HTTP 404 on private registries by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> with @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4768494620" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15444" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15444/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15444">#15444</a></li>
<li>Map additional NuGet feed errors to private_source_bad_response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4753622799" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15426" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15426/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15426">#15426</a></li>
<li>Support <code>version</code> and <code>security</code> NuGet job commands by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4754398088" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15430" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15430/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15430">#15430</a></li>
<li>Show the vcpkg release tag instead of master in PR titles by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4755756847" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15433" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15433/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15433">#15433</a></li>
<li>Register MSBuild before running the job so early NuGet errors are reported by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4755361507" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15431" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15431/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15431">#15431</a></li>
<li>Add a baseline to vcpkg projects missing one by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieMagee/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/JamieMagee">@JamieMagee</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4755503458" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15432" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15432/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15432">#15432</a></li>
<li>Fix file updater failed to update for all support files sentry error by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4749866303" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15421" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15421/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15421">#15421</a></li>
<li>Skip disabled Maven repositories by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adoroszlai/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adoroszlai">@adoroszlai</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4767441385" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15443" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15443/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15443">#15443</a></li>
<li>v0.384.0 by @dependabot-core-action-automation[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4764477683" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15438" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15438/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15438">#15438</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/crabbit-git/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/crabbit-git">@crabbit-git</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4523481545" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15142" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15142/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15142">#15142</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adoroszlai/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adoroszlai">@adoroszlai</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4767441385" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15443" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15443/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15443">#15443</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dependabot/dependabot-core/compare/v0.383.0...v0.384.0"><tt>v0.383.0...v0.384.0</tt></a></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Silo Season 3 Premieres Friday With Early Praise From Critics]]></title>
<description><![CDATA[The hit sci-fi series Silo is coming back to Apple later this week for a highly anticipated third season. The new season will officially kick off on Friday, July 3, starting with a single episode to get things going. After the premiere, fans can expect weekly episode drops all the way through Sep...]]></description>
<link>https://tsecurity.de/de/3635282/ios-mac-os/silo-season-3-premieres-friday-with-early-praise-from-critics/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3635282/ios-mac-os/silo-season-3-premieres-friday-with-early-praise-from-critics/</guid>
<pubDate>Tue, 30 Jun 2026 12:40:53 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The hit sci-fi series Silo is coming back to Apple later this week for a highly anticipated third season. The new season will officially kick off on Friday, July 3, starting with a single episode to get things going. After the premiere, fans can expect weekly episode drops all the way through September 4. Early reactions are pointing to a big win for the streaming platform, with critics highlighting some major changes to the story structure that keep the show feeling fresh.



A new timeline completely changes how the story plays out



The upcoming season takes a big step by splitting the story into two different timelines. Viewers will follow Juliette in the present day as she navigates life outside her original home. At the same time, a new narrative called the Before Times will explore the history of how everything started.



This dual timeline approach is based on the second book of Hugh Howey's original trilogy. Reviewers are pointing out that this fresh angle makes the new episodes stand out from the first two seasons. The change seems to be exactly what Apple TV needed to make the story even better.



Here are some review excerpts:



"best season yet... one of the best seasons of TV I've watched in a while" (The Seattle Times)



"completely different from the... first two seasons, in a good way" (Screen Rant)



"[season 3] kicks up a notch, and ends with a finale that is, to date, the best ever episode of the show" (RadioTimes)



Filming for the final chapter has already been finished in advance



Fans of the show will not have to wait long to see how the whole thing wraps up. The network has already renewed the series for a fourth season, and production for those future episodes is completely done. This means the gap between the current season and the final one should be very short.



Knowing the ending is already in the can makes diving into the shifting plot points much more rewarding. Viewers can invest in the current mystery without worrying about huge delays or canceled storylines down the road. The quick production schedule shows that the company is fully committed to giving its dystopian tale a proper ending.



With strong praise rolling in and a clear roadmap for the future, Silo is securing its spot as a top science fiction drama. The decision to shake up the timeline seems to have paid off wonderfully. Fans can settle in this Friday to see if the new direction lives up to the early hype.]]></content:encoded>
</item>
<item>
<title><![CDATA[ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security]]></title>
<description><![CDATA[This is the part 4 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security Chapter…
Read more →
The post ISA VDA 6.0.3 (part 4) — Information Security Sheet...]]></description>
<link>https://tsecurity.de/de/3634926/it-security-nachrichten/isa-vda-603-part-4-information-security-sheet-it-security-cyber-security/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3634926/it-security-nachrichten/isa-vda-603-part-4-information-security-sheet-it-security-cyber-security/</guid>
<pubDate>Tue, 30 Jun 2026 10:20:16 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>This is the part 4 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security Chapter…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-4-information-security-sheet-it-security-cyber-security/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/isa-vda-6-0-3-part-4-information-security-sheet-it-security-cyber-security/">ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Musk On Mars (Theater, 60 min) (fusion26)]]></title>
<description><![CDATA[Elon Musk landet als erster Mensch auf dem Mars. Doch anstelle den Planeten ohne Bedingungen nach seinen Wünschen terraformen zu können, muss er sich vor dem marsianischen Einwanderungsgericht einigen Fragen stellen, die schnell ziemlich unangenehm für ihn werden. Die ‚Aufnahmegesellschaft Mars‘ ...]]></description>
<link>https://tsecurity.de/de/3628508/it-security-video/musk-on-mars-theater-60-min-fusion26/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3628508/it-security-video/musk-on-mars-theater-60-min-fusion26/</guid>
<pubDate>Fri, 26 Jun 2026 22:18:25 +0200</pubDate>
<category>🎥 IT Security Video</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Elon Musk landet als erster Mensch auf dem Mars. Doch anstelle den Planeten ohne Bedingungen nach seinen Wünschen terraformen zu können, muss er sich vor dem marsianischen Einwanderungsgericht einigen Fragen stellen, die schnell ziemlich unangenehm für ihn werden. Die ‚Aufnahmegesellschaft Mars‘ – das Publikum – prüft jeden Ankömmling aufs Genaueste. 
Seid Teil dieser interplanetaren Gerichtsshow von der wunderbaren Alisa Tretau! Musik, KI und Grünheide inklusive!

Language: DE Translation: NO Video Recording: YES Graphic Recording: YES

Elon Musk lands on Mars. But instead of being able to terraform the planet exactly as he pleases, he must answer the questions of the Martian immigration court. The “Mars Host Society”—the audience—scrutinizes every new arrival in minute detail. Be part of this interplanetary courtroom show! Music, AI, and Grünheide included!

Language: DE Translation: NO Video Recording: YES Graphic Recording: YES

Licensed to the public under https://creativecommons.org/licenses/by/4.0/
about this event: https://c3voc.de]]></content:encoded>
</item>
<item>
<title><![CDATA[Silo Season 3 Hits Apple TV Next Week With Three Big Plot Shifts]]></title>
<description><![CDATA[Fans of the hit dystopian series can finally mark their calendars. The wait is almost over for the next chapter of this gripping story. If you have been searching for the Silo season 3 release date and first trailer, you will be happy to know the show premieres on July 3. It is bringing some majo...]]></description>
<link>https://tsecurity.de/de/3628207/ios-mac-os/silo-season-3-hits-apple-tv-next-week-with-three-big-plot-shifts/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3628207/ios-mac-os/silo-season-3-hits-apple-tv-next-week-with-three-big-plot-shifts/</guid>
<pubDate>Fri, 26 Jun 2026 19:39:25 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Fans of the hit dystopian series can finally mark their calendars. The wait is almost over for the next chapter of this gripping story. If you have been searching for the Silo season 3 release date and first trailer, you will be happy to know the show premieres on July 3. It is bringing some major twists to the underground world.



The show is moving beyond the first book to weave together storylines from the rest of the trilogy. You can expect a fresh timeline, a huge shift in leadership, and plenty of new faces when it lands next week.



Quick details




Title: Silo



Genre: Sci-Fi, drama



Lead star: Rebecca Ferguson



Premiere date: July 3, 2026



Setting: Dystopian underground society




According to Apple's official description of Silo Season 3-




"Season three of “Silo” continues the saga of a dystopian society of 10,000 people living underground under mysterious circumstances, while revealing an origin story set centuries earlier. In the present, Juliette Nichols (Ferguson) survives her forced “cleaning” but returns with memory loss as the silo recovers from rebellion and faces a dangerous new threat."




The story jumps back in time to explore the surface



Instead of picking up exactly where the second book starts, the new season blends events from the second and third books by Hugh Howey. This means the show will step outside the dark walls of the silo to show us what the world looked like before the underground structures were built.



It is a big change from the familiar setting. The split timeline allows the story to dig into the origins of the silos, giving answers about how this society started. Meanwhile, the present day plot will still follow Juliette and the characters you already know from previous seasons created by Apple. It is making sure its biggest hit stays fresh by expanding the world.



New actors join the cast to play people from the past



Because a large part of the story focuses on the world before the silos, the show is bringing in a bunch of new talent. You might have seen a quick look at Jessica Henwick and Ashley Zukerman at the end of the second season. They play a journalist and a congressman who stumble onto a dangerous conspiracy.



Other fresh faces include Laura Innes, Jessica Brown Findlay, Morven Christie, Reed Birney, Matt Craven, and Colin Hanks. They will help flesh out this earlier timeline as the show expands its universe and explores the events that forced humanity underground.



Juliette takes charge as the new mayor of the silo



A teaser clip shared earlier this year confirmed a massive career change for the main character. Juliette is now the mayor of the silo. This completely changes her dynamic with the rest of the underground community.



The last time we saw Juliette, she was fighting for her life in an airlock with the previous mayor, Bernard, while flames surrounded them. It is clear she made it out of that situation alive and ended up taking his job. You can catch up on the earlier episodes on Apple TV before the new ones drop.



With a new role for Juliette, a fresh cast of characters, and a timeline that finally reveals the outside world, this season promises to answer some of the biggest questions fans have had since the beginning. It will be interesting to see how the show balances the past and present without losing the tense atmosphere that made it a hit.]]></content:encoded>
</item>
<item>
<title><![CDATA[DELTARUNE chapter 5 is out now with chapter 6 due in 2027]]></title>
<description><![CDATA[DELTARUNE the massive indie hit from tobyfox has another whole chapter release free but that's not the end of the story.Read the full article on GamingOnLinux.]]></description>
<link>https://tsecurity.de/de/3627126/linux-tipps/deltarune-chapter-5-is-out-now-with-chapter-6-due-in-2027/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3627126/linux-tipps/deltarune-chapter-5-is-out-now-with-chapter-6-due-in-2027/</guid>
<pubDate>Fri, 26 Jun 2026 13:09:22 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[DELTARUNE the massive indie hit from tobyfox has another whole chapter release free but that's not the end of the story.<p><img src="https://www.gamingonlinux.com/uploads/articles/tagline_images/1222717435id29289gol.avif" alt></p><p>Read the full article on <a href="https://www.gamingonlinux.com/2026/06/deltarune-chapter-5-is-out-now-with-chapter-6-due-in-2027/">GamingOnLinux</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2024-13484 | Red Hat OpenShift GitOps ArgoCD exposure of resource (EUVD-2025-0134 / Nessus ID 216199)]]></title>
<description><![CDATA[A vulnerability marked as critical has been reported in Red Hat OpenShift GitOps. Affected is an unknown function of the component ArgoCD. This manipulation causes exposure of resource.

This vulnerability is handled as CVE-2024-13484. It is possible to launch the attack on the local host. There ...]]></description>
<link>https://tsecurity.de/de/3626514/sicherheitsluecken/cve-2024-13484-red-hat-openshift-gitops-argocd-exposure-of-resource-euvd-2025-0134-nessus-id-216199/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3626514/sicherheitsluecken/cve-2024-13484-red-hat-openshift-gitops-argocd-exposure-of-resource-euvd-2025-0134-nessus-id-216199/</guid>
<pubDate>Fri, 26 Jun 2026 08:52:30 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">critical</a> has been reported in <a href="https://vuldb.com/product/red_hat:openshift_gitops">Red Hat OpenShift GitOps</a>. Affected is an unknown function of the component <em>ArgoCD</em>. This manipulation causes exposure of resource.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2024-13484">CVE-2024-13484</a>. It is possible to launch the attack on the local host. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[Building a state-of-the-art development platform with Backstage]]></title>
<description><![CDATA[Key takeaways




Backstage solved the portal problem, not the platform problem. A portal organizes catalogs, documentation, and templates. A platform owns deployments, environments, policies, and runtime operations. Backstage assumes that the execution layer exists beneath it.



Point-to-point ...]]></description>
<link>https://tsecurity.de/de/3623951/ai-nachrichten/building-a-state-of-the-art-development-platform-with-backstage/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3623951/ai-nachrichten/building-a-state-of-the-art-development-platform-with-backstage/</guid>
<pubDate>Thu, 25 Jun 2026 11:34:09 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<h2 class="wp-block-heading">Key takeaways</h2>



<ul class="wp-block-list">
<li>Backstage solved the portal problem, not the platform problem. A portal organizes catalogs, documentation, and templates. A platform owns deployments, environments, policies, and runtime operations. Backstage assumes that the execution layer exists beneath it.</li>



<li>Point-to-point integrations become a maintenance burden. Many organizations end up with a “messy middle” where Backstage is connected directly to <a href="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html" data-type="link" data-id="https://www.infoworld.com/article/2269266/what-is-cicd-continuous-integration-and-continuous-delivery-explained.html">CI/CD</a>, <a href="https://www.infoworld.com/article/2259088/what-is-gitops-extending-devops-to-kubernetes-and-beyond.html" data-type="link" data-id="https://www.infoworld.com/article/2259088/what-is-gitops-extending-devops-to-kubernetes-and-beyond.html">GitOps</a>, <a href="https://www.infoworld.com/article/2266945/what-is-kubernetes-scalable-cloud-native-applications.html" data-type="link" data-id="https://www.infoworld.com/article/2266945/what-is-kubernetes-scalable-cloud-native-applications.html">Kubernetes</a>, and <a href="https://www.infoworld.com/article/2262666/what-is-observability-software-monitoring-on-steroids.html" data-type="link" data-id="https://www.infoworld.com/article/2262666/what-is-observability-software-monitoring-on-steroids.html">observability</a> tools through custom wiring that’s fragile and hard to evolve.</li>



<li>Abstractions are the interface between developers and infrastructure. Developers work with components, endpoints, and dependencies. Platform engineers work with environments, pipelines, and component types. The platform compiles both into Kubernetes resources.</li>



<li>A control plane bridges the gap. It sits between the portal and runtime, compiling abstractions into infrastructure, enforcing policies consistently, reconciling drift, and aggregating runtime state back to the portal.</li>



<li>Good abstractions enable advanced capabilities. Unified observability, automated guardrails, and AI agents that can reason about and act on your platform. All becomes possible when you have well-defined concepts and a control plane that understands both sides.</li>
</ul>



<p>…</p>



<h2 class="wp-block-heading">Start with Backstage</h2>



<p>If you’re building an <a href="https://www.infoworld.com/article/2263059/what-is-an-internal-developer-platform-paas-done-your-way.html" data-type="link" data-id="https://www.infoworld.com/article/2263059/what-is-an-internal-developer-platform-paas-done-your-way.html">internal developer platform</a>, Backstage is certainly part of your architecture. It solved the discovery problem and became the default choice for developer portals.</p>



<p>Before Backstage, developers navigated wikis, spreadsheets, and tribal knowledge just to find who owned a service or how to spin up a new one. Backstage brought structure: a unified catalog, a plugin ecosystem, and golden-path templates that actually got adopted.</p>



<p><a href="https://github.com/backstage/backstage" data-type="link" data-id="https://github.com/backstage/backstage">Backstage</a> is a Cloud Native Computing Foundation (CNCF) project with one of the most active contributor communities in the ecosystem. When organizations evaluate developer portals, Backstage is the starting point.</p>



<p>However, many teams discover something after deployment: Backstage provides a portal, not a platform. A portal organizes information. A platform owns execution: deployments, environments, policies, observability, and runtime operations.</p>



<p>Backstage assumes that the execution layer exists beneath it. That layer is where most of the complexity lives, and it’s what this article is about.</p>



<h2 class="wp-block-heading"><a></a>What a developer platform actually is</h2>



<p>A developer platform or an internal developer platform is a self-service framework you build to help developers build, deploy, and manage applications independently.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/06/Image_01_developer_platform.png" alt="Image_01_developer_platform" class="wp-image-4189088" width="1024" height="307" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">WSO2</p></div>



<p>Most organizations already have an organically grown version of this:</p>



<ul class="wp-block-list">
<li>Developer commits code</li>



<li>CI pipeline builds and pushes images to a registry</li>



<li>Pipeline updates a GitOps repo containing Helm charts or Kubernetes manifests</li>



<li>Argo CD or Flux syncs those manifests to clusters</li>
</ul>



<p>You may have this workflow running today. The question is whether it’s a pipeline stitched together with scripts and tribal knowledge, or a platform with consistent abstractions and self-service capabilities.</p>



<h2 class="wp-block-heading"><a></a>What usually happens after adopting Backstage</h2>



<p>How do you add Backstage to this setup? The common approach is for developers to maintain Backstage entity files (primarily component and API entities) alongside the source code. Then you configure the built-in entity provider in Backstage to scan source code repositories to populate the catalog. Eventually, you’ll end up with a portal with all your systems, components, APIs, and other resources. So far, so good.</p>



<p>Once developers start using the portal, you’ll be hit with a consistent flow of feature requests:</p>



<ul class="wp-block-list">
<li>“I see my component in the catalog, but is it actually running?” You configure the Kubernetes plugin and link components to their corresponding manifests. Now developers can see pod status, deployment state, and replica counts.</li>



<li>“I need logs, metrics, and traces related to my component.” You integrate your observability stack or developers context-switch to Grafana, Datadog, or whatever you’re running. Either way, more wiring.</li>



<li>“Can I create new components from here?” You build Backstage templates that scaffold repos with the right structure, Backstage entities, Helm charts, and CI pipelines, all of which encode your organization’s best practices. Now you’re maintaining golden paths in templates, separately from the runtime configuration that actually enforces them.</li>
</ul>



<p>Each request is reasonable and achievable, but they add up.</p>



<h2 class="wp-block-heading"><a></a>The messy middle</h2>



<p>Eventually, you end up with a platform held together by point-to-point connections. Every new capability requires new wiring. Every upgrade risks breaking something. You spend more time maintaining integrations than building features.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/06/Image_02_messy_middle.png" alt="Image_02_messy_middle" class="wp-image-4189092" width="1024" height="893" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">WSO2</p></div>



<p>You would never design a production system with this many point-to-point dependencies. Why accept it for your platform?</p>



<h2 class="wp-block-heading"><a></a>Treat the platform as a product, but also as a system</h2>



<p>Organically grown systems get you started, but once you commit to Backstage as your portal, you need a product mindset. Start from developer experience, understand their pain points, then design a system that addresses them coherently.</p>



<p>A platform is also a system. Approach it the way you would approach any production system you’re building. You wouldn’t design a back-end service without thinking about separation of concerns, clear interfaces, and extensibility.</p>



<p>The same principles apply here:</p>



<ul class="wp-block-list">
<li>Separation of concerns: Don’t mix developer-facing abstractions with infrastructure implementation. Keep them separate so you can evolve each independently.</li>



<li>Clear interfaces: Define explicit abstractions. Developers and platform engineers should interact with well-defined concepts rather than implementation details scattered across Helm charts and CI scripts.</li>



<li>Extensibility: Requirements keep changing. If every new capability requires custom wiring, you’ll spend more time maintaining than improving. Design for extension from the start.</li>
</ul>



<p>The difference between a pile of integrations and a platform is architecture. Get the system design right, and new capabilities slot in cleanly. Get it wrong, and every feature request becomes a maintenance burden.</p>



<h2 class="wp-block-heading">The missing layer beneath Backstage</h2>



<p>Moving from an organically grown pipeline to an actionable developer platform is a big leap. You probably have CI/CD pipelines that work, a Kubernetes cluster running workloads, and a Backstage catalog describing what exists.</p>



<p>The questions are:</p>



<ul class="wp-block-list">
<li>How do you transform an informational portal into one with a platform under the hood?</li>



<li>How do you bridge the gap between what the catalog describes and what’s actually running?</li>



<li>How do you enforce golden paths beyond initial scaffolding?</li>



<li>How do you design a platform that evolves with your organization’s needs?</li>
</ul>



<p>What’s missing is a connective layer between Backstage and your runtime, something that makes the portal operational rather than just informational. Let’s look at the key architectural elements to consider when designing that layer and the whole platform.</p>



<h2 class="wp-block-heading"><a></a>Start with abstractions</h2>



<p>One of the main goals of a developer platform is to reduce cognitive load. The platform should meet developers where they are and speak their language, not Kubernetes’.</p>



<p>Every organization has its own vocabulary, but the Backstage system model is a good starting point. It may not cover everything, but you can extend it with custom entities. The key is that developers work with high-level concepts while the platform compiles them into Kubernetes resources. Developers are abstracted away from the underlying details, but they can still see what’s happening underneath.</p>



<figure class="wp-block-table"><div class="overflow-table-wrapper"><table class="has-fixed-layout"><tbody><tr><td><strong>Concept</strong></td><td><strong>Description</strong></td><td><strong>Backstage mapping</strong></td></tr><tr><td>Project</td><td>A cloud-native application composed of multiple components. It is also a unit of isolation.</td><td>System</td></tr><tr><td>Component</td><td>A deployable unit, such as web services, APIs, workers, or scheduled tasks.</td><td>Component</td></tr><tr><td>Endpoint</td><td>A network-accessible interface exposed by a component. </td><td>API</td></tr><tr><td>Resource</td><td>External infrastructure such as databases, queues, and caches.</td><td>Resource</td></tr><tr><td>Dependency</td><td>A component’s reliance on endpoints or resources.</td><td>consumesAPI, dependsOn</td></tr></tbody></table> </div></figure>



<p>These are not just static abstractions; they also have associated runtime semantics. The following diagram illustrates runtime representations of these concepts.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-full"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/06/Image_03_cell_diagram.png" alt="Image_03_cell_diagram" class="wp-image-4189100" width="1024" height="905" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">WSO2</p></div>



<p>In the workload cluster, a project becomes an isolation boundary for all of its components. The platform translates this into Kubernetes namespaces and network policies that enforce the boundary, not just document it.</p>



<p>Endpoint visibility determines which endpoints can talk to which. A project-scoped endpoint gets network policies that block traffic from outside the project. An organization-scoped endpoint is exposed to internal traffic but remains behind the internal gateway. An external endpoint gets routed through the public gateway with appropriate authentication. Developers declare visibility; the platform generates the policies.</p>



<p>Dependencies work the same way. When a component declares a dependency on an endpoint, the platform injects the URL and other environment variables required to connect to the dependency. It configures the network policies for both directions, egress from the calling endpoint and ingress to the target endpoint. Without the declared dependency, egress is blocked by default. The dependency graph you see above reflects actual permitted traffic flow, not just intended relationships.</p>



<h2 class="wp-block-heading"><a></a>You need platform abstractions, too</h2>



<p>Developer abstractions help your developers. Platform abstractions help you.</p>



<p>While developers work with components, endpoints, and dependencies, you need a different vocabulary to design and operate the platform itself. These abstractions let you and your team define standards, enforce policies, and create structure without writing low-level configurations for every scenario.</p>



<figure class="wp-block-table"><div class="overflow-table-wrapper"><table class="has-fixed-layout"><tbody><tr><td><strong>Concept</strong></td><td><strong>Description</strong></td></tr><tr><td>Namespace</td><td>A logical grouping of users and resources, typically aligned to a company, business unit, or team. Defines ownership and access boundaries.</td></tr><tr><td>Data plane</td><td>A Kubernetes cluster that hosts one or more deployment environments. You can have multiple data planes for isolation, regional distribution, or scaling.</td></tr><tr><td>Environment</td><td>A runtime context, such as dev, test, staging, or prod, where workloads are deployed and executed. Environments carry their own policies and resource configurations.</td></tr><tr><td>Pipeline</td><td>A defined process that governs how work, such as builds, deployments, promotions, or any automated workflows, flows through the platform. Encodes your operational processes as a platform primitive.</td></tr><tr><td>Component type</td><td>Defines a category of workload—Service, Worker, Cron, Job.</td></tr><tr><td>Trait</td><td>A reusable capability that attaches to any component, such as autoscaling, resilience, observability, and security policies. Compose behaviors without duplicating configuration.</td></tr></tbody></table> </div></figure>



<p>These abstractions separate platform concerns from application concerns. Developers don’t need to know which cluster their code runs on or how environments are wired together. They deploy to “staging” or “prod,” and you define what those terms mean.</p>



<h2 class="wp-block-heading"><a></a>The missing layer is a control plane</h2>



<p>The control plane is where abstractions become real. It sits between the portal and your workload clusters, translating developer intent into infrastructure configuration.</p>



<p>You can think of it as a compiler that targets Kubernetes clusters, converting higher-level abstractions into what Kubernetes and its underlying frameworks understand. It can also apply platform-wide rules during this compilation. Resource limits, security requirements, etc., can be enforced consistently, not merely documented and hoped for.</p>



<p>But compilation is only half the job. The control plane also reconciles continuously. It monitors drift between the declared and actual states. When they diverge, it corrects. Your abstractions remain the source of truth; the control plane enforces them over time.</p>



<h2 class="wp-block-heading"><a></a>Programmability is not optional</h2>



<p>One of the key aspects of this control plane is programmability. If you want your platform to evolve, the control plane needs to be extensible. Different teams have different requirements. New capabilities emerge. You can’t anticipate everything up front.</p>



<p>This means allowing customization of how abstractions compile to Kubernetes manifests. But extensibility without guardrails is dangerous. You need programmability that preserves your invariants. The goal is constrained flexibility, open enough to evolve, structured enough to stay coherent.</p>



<h2 class="wp-block-heading"><a></a>Observable abstractions make the portal useful</h2>



<p>The control plane also aggregates runtime state and associates it with your abstractions. This is what makes the portal useful. Without this, developers piece together information from different tools: Kubernetes dashboard for pod status, Argo CD for the deployment state, Grafana for metrics, Jaeger for traces. Each tool knows part of the story; none shows the full picture.</p>



<p>With the control plane aggregating state, the portal tells a connected story. When a developer opens a component page in Backstage, they see:</p>



<ul class="wp-block-list">
<li>Deployed environments and their status</li>



<li>Current replicas and resource usage</li>



<li>Recent deployments and who triggered them</li>



<li>Logs, metrics, and traces that are scoped to that component, in each environment</li>



<li>Dependencies and their health</li>
</ul>



<p>No context-switching. No reconstructing which pod belongs to which service in which cluster. The abstraction is the anchor; everything else attaches to it.</p>



<p>This only works because the control plane understands both sides. It compiled the abstractions to Kubernetes, so it knows how to map runtime data back. Information flows in both directions. Downward: developer intent flows through the control plane and becomes running workloads. Upward: runtime state flows back through the control plane and appears in the portal.</p>



<p>This is what makes the portal actionable. It’s not just displaying information; it’s connected to a system that can act.</p>



<h2 class="wp-block-heading"><a></a>Data plane: keep it simple</h2>



<p>The data plane is where your workloads actually run. In most cases, this means one or more Kubernetes clusters. The data plane doesn’t know about your abstractions. It understands Kubernetes primitives such as pods, deployments, services, and ingresses. The control plane’s job is to compile your higher-level concepts into these primitives and apply them.</p>



<p>The data plane does one thing: it runs what the control plane tells it to run. The intelligence lives in the control plane; the execution happens in the data plane.</p>



<h2 class="wp-block-heading">Where AI fits into the platform</h2>



<p>AI is now part of every platform conversation, but the architectural question is where it actually belongs.</p>



<p>The abstractions and control plane you’ve built create the foundation. You have well-defined concepts such as components, endpoints, and dependencies. You have a runtime state aggregated and tied to those concepts. You have a connected view of your system. AI agents can definitely leverage this.</p>



<h3 class="wp-block-heading"><a></a>Agents as platform users</h3>



<p>AI agents should be able to interact with your platform as first-class participants. This requires exposing platform capabilities through interfaces that agents can use, such as <a href="https://www.infoworld.com/article/4029634/what-is-model-context-protocol-how-mcp-bridges-ai-and-external-services.html" data-type="link" data-id="https://www.infoworld.com/article/4029634/what-is-model-context-protocol-how-mcp-bridges-ai-and-external-services.html">Model Context Protocol</a> (MCP) servers, APIs with clear semantics, user-friendly CLIs, and skills that map to platform operations.</p>



<p>These capabilities of the platform enable agents to create components, trigger builds and deployments, query environment status, and reason about dependencies. They help you and your developers become more productive.</p>



<h3 class="wp-block-heading"><a></a>Agents as platform capabilities</h3>



<p>You can also embed agents inside your platform to help your teams’ day-to-day operations. Here are some examples of agents you can develop:</p>



<ul class="wp-block-list">
<li>SRE agents: Analyze logs, metrics, and traces to surface likely root causes. Instead of developers digging through dashboards, the agent correlates signals and suggests where to look.</li>



<li>FinOps agents: Help teams understand and optimize resource costs across environments and components.</li>



<li>Architect agents: Assist with system design decisions, such as dependency analysis, capacity planning, and migration impact assessment.</li>
</ul>



<p>These agents work because they have access to the control plane’s unified view. They see abstractions, runtime state, and observability data in one place, the same connected story developers see in the portal.</p>



<p>The pattern holds. Good abstractions make everything easier, including AI.</p>



<h2 class="wp-block-heading"><a></a>OpenChoreo as a reference implementation</h2>



<p><a href="https://github.com/openchoreo/openchoreo" data-type="link" data-id="https://github.com/openchoreo/openchoreo">OpenChoreo</a> is an open-source developer platform for Kubernetes. It was recently accepted into the CNCF as a sandbox project. OpenChoreo implements the architecture described in this article: developer abstractions backed by a control plane, a Backstage-powered portal, integrated CI/CD and GitOps, and observability wired to your abstractions.</p>



<p>If you’re building this architecture yourself, OpenChoreo is worth studying as a reference, even if you don’t adopt it directly. The project demonstrates how these pieces fit together: how abstractions compile into Kubernetes resources, how runtime state flows back to the portal, and how guardrails are enforced during compilation.</p>



<p>You can use OpenChoreo as a complete platform, or install its Backstage plugins into your existing portal and use just the control plane layer. Either way, the underlying patterns are what matter. The architecture is the idea. OpenChoreo is one way to implement it.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/06/image_04_multi_plane_architecture.png?w=1024" alt="image_04_multi_plane_architecture" class="wp-image-4189109" width="1024" height="552" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">WSO2</p></div>



<h2 class="wp-block-heading">A useful mental model: multi-plane architecture</h2>



<p>OpenChoreo separates concerns across five planes:</p>



<ol class="wp-block-list">
<li>Experience plane: Where developers, platform engineers, and SREs interact with the platform via the Backstage-powered portal, CLI, GitOps, or AI agents.</li>



<li>Control plane: The brain that translates high-level abstractions (components, APIs, environments, pipelines) into Kubernetes manifests. Programmable through component types and traits, so you can extend it without forking or writing low-level controllers. Continuously reconciles the runtime state back into those abstractions.</li>



<li>Data plane: Where workloads run. Enforces the semantics of your abstractions, such as project isolation, traffic policies, and security boundaries. These aren’t just configurations; the platform guarantees them.</li>



<li>Observability plane: Feeds metrics, logs, and traces back through the same abstractions developers already understand, requiring no translation.</li>



<li>Workflow plane (optional): Handles builds using Cloud Native Buildpacks and Argo Workflows by default.</li>
</ol>



<p>These planes work together but remain separate concerns. You can reason about each independently, evolve them at different rates, and deploy them flexibly: a single cluster with namespace isolation for dev/test, fully separated multi-cluster setups for production, or hybrid topologies that colocate planes like Control and CI for cost efficiency.</p>



<h2 class="wp-block-heading"><a></a>AI and OpenChoreo</h2>



<p>OpenChoreo is being built to treat AI agents as first-class participants. In OpenChoreo 1.0, external agents can interact with the platform via MCP servers, agent skills, or the CLI to generate and edit component configurations, reason about releases and environments, and more. The built-in SRE Agent is a first example of this. It analyzes logs, metrics, and traces from your deployments and uses LLMs to surface likely root causes and actionable insights.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/06/Image_05_external_internal_agents_openchoreo.png?w=1024" alt="Image_05_external_internal_agents_openchoreo" class="wp-image-4189115" width="1024" height="584" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">WSO2</p></div>



<h2 class="wp-block-heading">From portal to platform</h2>



<p>Backstage solved the portal problem. It gave you a unified interface for catalogs, documentation, and golden paths. But a portal isn’t a platform. There’s a gap between what developers see and what’s actually running, and that’s where you get stuck. You fill it with point-to-point integrations, custom plugins, and scripts that become their own maintenance burden.</p>



<p>The pattern that works is portal, control plane, data plane: </p>



<ul class="wp-block-list">
<li>A portal that gives developers ready access to catalogs, documentation, and templates.</li>



<li>A control plane that compiles platform abstractions, reconciles drift, and aggregates runtime state.</li>



<li>A data plane that runs workloads and enforces guarantees.</li>
</ul>



<p>Whether you build this yourself or you adopt something like OpenChoreo, the architecture matters more than the tools. Get the layers right, and new capabilities slot in cleanly. Get them wrong, and every feature request becomes a project.</p>



<p>Backstage gives you the front door. The real platform begins behind it.</p>



<p><em>—</em></p>



<p><a href="https://www.infoworld.com/blogs/new-tech-forum"><strong><em>New Tech Forum</em></strong></a><em><strong> provides a venue for technology leaders—including vendors and other outside contributors—to explore and discuss emerging enterprise technology in unprecedented depth and breadth. The selection is subjective, based on our pick of the technologies we believe to be important and of greatest interest to InfoWorld readers. InfoWorld does not accept marketing collateral for publication and reserves the right to edit all contributed content. Send all </strong></em><em><strong>inquiries to </strong></em><a href="mailto:doug_dineley@foundryco.com"><strong><em>doug_dineley@foundryco.com</em></strong></a><em><strong>.</strong></em></p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[How Attackers Exploit Privileged Access and How to Lock Them Out]]></title>
<description><![CDATA[Every major breach you read about has a quiet middle chapter that rarely makes the headline. The headline is the ransom note or the leaked customer database. The middle chapter the part that actually decided the outcome is almost always the same: an attacker found a…
Read more →
The post How Atta...]]></description>
<link>https://tsecurity.de/de/3620727/it-security-nachrichten/how-attackers-exploit-privileged-access-and-how-to-lock-them-out/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3620727/it-security-nachrichten/how-attackers-exploit-privileged-access-and-how-to-lock-them-out/</guid>
<pubDate>Wed, 24 Jun 2026 11:08:02 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Every major breach you read about has a quiet middle chapter that rarely makes the headline. The headline is the ransom note or the leaked customer database. The middle chapter the part that actually decided the outcome is almost always the same: an attacker found a…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/how-attackers-exploit-privileged-access-and-how-to-lock-them-out/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/how-attackers-exploit-privileged-access-and-how-to-lock-them-out/">How Attackers Exploit Privileged Access and How to Lock Them Out</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[How Attackers Exploit Privileged Access and How to Lock Them Out ]]></title>
<description><![CDATA[Every major breach you read about has a quiet middle chapter that rarely makes the headline. The headline is the ransom note or the leaked customer database. The middle chapter the part that actually decided the outcome is almost always the same: an attacker found a privileged credential, used it...]]></description>
<link>https://tsecurity.de/de/3620564/it-security-nachrichten/how-attackers-exploit-privileged-access-and-how-to-lock-them-out/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3620564/it-security-nachrichten/how-attackers-exploit-privileged-access-and-how-to-lock-them-out/</guid>
<pubDate>Wed, 24 Jun 2026 09:53:32 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Every major breach you read about has a quiet middle chapter that rarely makes the headline. The headline is the ransom note or the leaked customer database. The middle chapter the part that actually decided the outcome is almost always the same: an attacker found a privileged credential, used it to move sideways through the network, escalated to administrator, and then […]</p>
<p>The post <a href="https://cybersecuritynews.com/how-attackers-exploit-privileged-access/">How Attackers Exploit Privileged Access and How to Lock Them Out </a> appeared first on <a href="https://cybersecuritynews.com/">Cyber Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Seattle-area young entrepreneurs capture third-straight win in global TiE startup pitch contest]]></title>
<description><![CDATA[A team of Seattle-area high school students won the 2026 TiE Young Entrepreneurs (TYE) Global Pitch Competition earlier this month, notching a three-peat for the TYE Seattle chapter. Read More]]></description>
<link>https://tsecurity.de/de/3619823/it-nachrichten/seattle-area-young-entrepreneurs-capture-third-straight-win-in-global-tie-startup-pitch-contest/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3619823/it-nachrichten/seattle-area-young-entrepreneurs-capture-third-straight-win-in-global-tie-startup-pitch-contest/</guid>
<pubDate>Wed, 24 Jun 2026 00:47:36 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<img width="1260" height="840" src="https://cdn.geekwire.com/wp-content/uploads/2026/06/duggai-1260x840.jpg" class="webfeedsFeaturedVisual wp-post-image" alt="" decoding="async" fetchpriority="high" srcset="https://cdn.geekwire.com/wp-content/uploads/2026/06/duggai-1260x840.jpg 1260w, https://cdn.geekwire.com/wp-content/uploads/2026/06/duggai-768x512.jpg 768w, https://cdn.geekwire.com/wp-content/uploads/2026/06/duggai-1536x1024.jpg 1536w, https://cdn.geekwire.com/wp-content/uploads/2026/06/duggai-2048x1365.jpg 2048w" sizes="(max-width: 1260px) 100vw, 1260px"><br>A team of Seattle-area high school students won the 2026 TiE Young Entrepreneurs (TYE) Global Pitch Competition earlier this month, notching a three-peat for the TYE Seattle chapter. <a href="https://www.geekwire.com/2026/seattle-area-young-entrepreneurs-capture-third-straight-win-in-global-tie-startup-pitch-contest/">Read More</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[Community Snapshot—May]]></title>
<description><![CDATA[Our global chapters work to keep the Internet a force for good. This brief overview covers just some of their activities in May. 
The post Community Snapshot—May appeared first on Internet Society.]]></description>
<link>https://tsecurity.de/de/3619507/it-nachrichten/community-snapshot-may/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3619507/it-nachrichten/community-snapshot-may/</guid>
<pubDate>Tue, 23 Jun 2026 22:17:58 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><img width="250" height="115" src="https://www.internetsociety.org/wp-content/uploads/2026/06/Paraguay-Chapter-250x115.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="A selfie of four people standing outside together. There are a couple children in blue uniforms in the background." decoding="async" srcset="https://www.internetsociety.org/wp-content/uploads/2026/06/Paraguay-Chapter-250x115.jpg 250w, https://www.internetsociety.org/wp-content/uploads/2026/06/Paraguay-Chapter-450x207.jpg 450w, https://www.internetsociety.org/wp-content/uploads/2026/06/Paraguay-Chapter-1024x470.jpg 1024w, https://www.internetsociety.org/wp-content/uploads/2026/06/Paraguay-Chapter-768x353.jpg 768w, https://www.internetsociety.org/wp-content/uploads/2026/06/Paraguay-Chapter.jpg 1200w" sizes="(max-width: 250px) 100vw, 250px"></p>
<p>Our global chapters work to keep the Internet a force for good. This brief overview covers just some of their activities in May. </p>
<p>The post <a href="https://www.internetsociety.org/blog/2026/06/community-snapshot-may-2/">Community Snapshot—May</a> appeared first on <a href="https://www.internetsociety.org/">Internet Society</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Security updates for Tuesday]]></title>
<description><![CDATA[Security updates have been issued by Debian (ffmpeg), Fedora (erlang, ffmpeg, prometheus, python-scrapy, python3-docs, python3.14, thorvg, tigervnc, and vips), Mageia (mumble and sslh), Oracle (389-ds:1.4, dracut, firefox, hplip, kernel, openssh, postgresql:15, redis:6, and uek-kernel), Red Hat (...]]></description>
<link>https://tsecurity.de/de/3618375/linux-tipps/security-updates-for-tuesday/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3618375/linux-tipps/security-updates-for-tuesday/</guid>
<pubDate>Tue, 23 Jun 2026 15:10:49 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Security updates have been issued by <b>Debian</b> (ffmpeg), <b>Fedora</b> (erlang, ffmpeg, prometheus, python-scrapy, python3-docs, python3.14, thorvg, tigervnc, and vips), <b>Mageia</b> (mumble and sslh), <b>Oracle</b> (389-ds:1.4, dracut, firefox, hplip, kernel, openssh, postgresql:15, redis:6, and uek-kernel), <b>Red Hat</b> (delve, gvisor-tap-vsock, nginx, nginx:1.24, nginx:1.26, osbuild-composer, podman, rhc, skopeo, and yggdrasil), <b>SUSE</b> (containerized-data-importer, graphite2, kernel, libarchive, openssh, openssh-askpass-gnome, openvswitch, openvswitch3, postfix, python-lxml, python-nltk, python-python-multipart, python-urllib3, rmt-server, terraform-provider-local, terraform-provider-null, and util-linux), and <b>Ubuntu</b> (google-guest-agent, haproxy, libxml2, linux-azure, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15, mysql-8.0, mysql-8.4, and nginx).]]></content:encoded>
</item>
<item>
<title><![CDATA[Kubernetes at Home: k3s on a Single Linux Server (2026)]]></title>
<description><![CDATA[Marcus’s DevOps Brief: I run k3s on a repurposed Dell OptiPlex in my closet. It hosts my Grafana dashboards, a GitOps-managed homelab, and a few side projects. If you have a spare machine with 4GB of RAM, you can do…]]></description>
<link>https://tsecurity.de/de/3617061/linux-tipps/kubernetes-at-home-k3s-on-a-single-linux-server-2026/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3617061/linux-tipps/kubernetes-at-home-k3s-on-a-single-linux-server-2026/</guid>
<pubDate>Tue, 23 Jun 2026 04:39:16 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Marcus’s DevOps Brief: I run k3s on a repurposed Dell OptiPlex in my closet. It hosts my Grafana dashboards, a GitOps-managed homelab, and a few side projects. If you have a spare machine with 4GB of RAM, you can do…]]></content:encoded>
</item>
<item>
<title><![CDATA[Denial of Service in terraform-provider-local und terraform-provider-null (SUSE)]]></title>
<description><![CDATA[]]></description>
<link>https://tsecurity.de/de/3616750/it-security-nachrichten/denial-of-service-in-terraform-provider-local-und-terraform-provider-null-suse/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3616750/it-security-nachrichten/denial-of-service-in-terraform-provider-local-und-terraform-provider-null-suse/</guid>
<pubDate>Mon, 22 Jun 2026 23:53:48 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
</item>
<item>
<title><![CDATA[Webshells Remain Popular, (Mon, Jun 22nd)]]></title>
<description><![CDATA[Webshells have been popular for a long time. We already covered this topic across multiple diaries[1][2]. I spent some time to track them[3] and slighly paid less attention to them but today I found another one. It seems to be a new player (pushed on Github two months ago).]]></description>
<link>https://tsecurity.de/de/3615752/it-security-nachrichten/webshells-remain-popular-mon-jun-22nd/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3615752/it-security-nachrichten/webshells-remain-popular-mon-jun-22nd/</guid>
<pubDate>Mon, 22 Jun 2026 16:22:01 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Webshells have been popular for a long time. We already covered this topic across multiple diaries[<a href="https://isc.sans.edu/diary/Webshells+Webshells+everywhere/28106">1</a>][<a href="https://isc.sans.edu/diary/Webshell+looking+for+interesting+files/23567">2</a>]. I spent some time to track them[<a href="https://owasp.org/www-chapter-belgium/assets/2017/2017-05-29/2017-05-29_OWASP-BE_HTTPForTheGoodOrTheBad.pdf">3</a>] and slighly paid less attention to them but today I found another one. It seems to be a new player (pushed on Github two months ago). </p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Phone Numbers and Emails to Hidden Subdomains: The OSINT Acquisition Pipeline That Uncovered a…]]></title>
<description><![CDATA[Phone Numbers and Emails to Hidden Subdomains: The OSINT Acquisition Pipeline That Uncovered a Critical BugA deep technical blog on using phone numbers and email addresses to discover hidden domains, subdomains, and attack surface — with real-world techniques you can use today.Phone Numbers and E...]]></description>
<link>https://tsecurity.de/de/3610154/hacking/phone-numbers-and-emails-to-hidden-subdomains-the-osint-acquisition-pipeline-that-uncovered-a/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3610154/hacking/phone-numbers-and-emails-to-hidden-subdomains-the-osint-acquisition-pipeline-that-uncovered-a/</guid>
<pubDate>Fri, 19 Jun 2026 13:09:24 +0200</pubDate>
<category>🕵️ Hacking</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h3>Phone Numbers and Emails to Hidden Subdomains: The OSINT Acquisition Pipeline That Uncovered a Critical Bug</h3><p><em>A deep technical blog on using phone numbers and email addresses to discover hidden domains, subdomains, and attack surface — with real-world techniques you can use today.</em></p><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*szLFGSpzqAnso14K4v5vnA.png"><figcaption>Phone Numbers and Emails to Hidden Subdomains</figcaption></figure><h3>Foreword: Why I Wrote This</h3><p>In bug bounty and security research, one of the biggest challenges is not finding vulnerabilities — it’s finding the right attack surface.</p><p>Many researchers start with traditional reconnaissance: collecting subdomains, checking DNS records, and running automated tools. While these methods are valuable, they often miss assets that are not directly connected to the primary domain.</p><p>This is where OSINT becomes powerful.</p><p>A simple phone number or email address can become a starting point for discovering hidden digital assets:</p><ul><li>A company email can reveal related domains and third-party services</li><li>Public profiles can expose forgotten infrastructure</li><li>Developer footprints can reveal technology stacks and assets</li><li>Business records can connect organizations to previously unknown domains</li></ul><p>The idea behind this research is simple:</p><p><strong>Public information creates relationships, and relationships create attack surface.</strong></p><p>This blog explores an OSINT-driven acquisition workflow for connecting phone numbers and email addresses with domains, subdomains, and external assets. These techniques are useful for authorized security testing, bug bounty research, and improving reconnaissance skills.</p><p>The goal is not just to collect more assets — it is to understand how different pieces of public information connect together to reveal a larger security picture.</p><h3>Part I: The Conceptual Framework — Why This Works</h3><h3>The Problem with Traditional Subdomain Discovery</h3><p>Traditional subdomain discovery relies on one thing: the DNS namespace is enumerable. You either brute-force it (guess names) or query passive sources (CT logs, passive DNS).</p><p>Both approaches share a fundamental limitation: they only find subdomains that are publicly resolvable or historically logged.</p><p>Here’s what they miss:</p><ul><li>Private/internal domains (e.g., internal.company.com that only resolves on the corporate VPN)</li><li>Pre-production domains that were registered but never deployed to DNS</li><li>Acquired company domains that aren’t linked from the parent</li><li>Domains used for third-party services (e.g., company.slack.com, company.atlassian.net)</li><li>Personal domains used by employees for work purposes</li></ul><h3>The Email-to-Domain Bridge</h3><p>Every email address user@domain.com tells you:</p><ol><li>The domain exists (obvious, but foundational)</li><li>The domain is actively used (someone sent mail from it)</li><li>The domain has a user (potential credential, potential account)</li><li>The domain is connected to services (GitHub, Slack, Jira, AWS, etc.)</li></ol><p>When you collect thousands of email addresses associated with a company, and you extract every domain from those emails, you build a corporate domain graph that DNS brute-force can never replicate.</p><h3>The Phone-to-Domain Bridge</h3><p>Every phone number +1 (415) 555-0199 tells you:</p><ol><li>The company exists at a physical location (office, data center)</li><li>The company uses a specific VOIP provider (Twilio, RingCentral, Vonage)</li><li>The company has registered infrastructure (WHOIS records, business registries)</li><li>The company has extensions (which map to departments, which map to services)</li></ol><p>When you collect phone numbers and reverse-search them, you find domains that were registered with those same phone numbers — often from before the company had a proper security team.</p><h3>Part II: Phone Number → Domain Discovery</h3><p>Phone numbers are a persistent identifier. Companies change domains more often than they change phone numbers. A domain registered in 2005 with a phone number is still associated with that company today — even if the domain is forgotten.</p><h3>Technique 1: WHOIS Phone Number Search</h3><p>Every domain registration includes a phone number. SecurityTrails, WhoisXMLAPI, and DomainTools allow you to search by phone number to find all domains registered with it.</p><pre>#!/bin/bash<br># phone-to-domain.sh - Find domains registered with a specific phone number<br>PHONE="$1"<br><br># Using WhoisXMLAPI (paid, but worth it)<br>curl -s "https://www.whoisxmlapi.com/whoisserver/WhoisService?apiKey=$API_KEY&amp;domainName=$PHONE&amp;outputFormat=JSON" | \<br>    jq -r '.WhoisRecord.registryData.registrarName // empty'<br><br># Using DomainTools (requires API key)<br>curl -s "https://api.domaintools.com/v1/$PHONE/domains/" \<br>    -u "$DOMAINTOOLS_USER:$DOMAINTOOLS_KEY" | \<br>    jq -r '.response.domains[]'<br><br># Manual: Reverse WHOIS lookup on SecurityTrails<br># https://securitytrails.com/list/phone/$PHONE</pre><p>What this finds: Every domain that was ever registered with that phone number — including domains for subsidiaries, defunct products, and personal projects.</p><h3>Technique 2: Business Registry Phone Search</h3><p>Every corporation in the US registers with a state business registry. These registries include phone numbers. You can search by phone number to find all corporations registered under that number.</p><pre># OpenCorporates API<br>curl -s "https://api.opencorporates.com/v0.4/companies/search?q=$PHONE&amp;api_token=$TOKEN" | \<br>    jq -r '.results[].company.name'<br><br># State-specific registries (examples)<br># California: https://businesssearch.sos.ca.gov/<br># Delaware: https://icis.corp.delaware.gov/<br># Texas: https://mycpa.cpa.state.tx.us/coa/</pre><p>What this finds: Legal entities, DBAs, and subsidiaries that aren’t publicly linked to the parent company.</p><h3>Technique 3: Phone Number Reverse Lookup Services</h3><pre># Twilio Lookup API<br>curl -s "https://lookups.twilio.com/v1/PhoneNumbers/$PHONE?Type=carrier&amp;Type=caller-name" \<br>    -u "$TWILIO_SID:$TWILIO_TOKEN" | \<br>    jq '.carrier.name, .caller_name.caller_name'<br><br># Numverify<br>curl -s "https://apilayer.net/api/validate?access_key=$KEY&amp;number=$PHONE" | \<br>    jq '.carrier, .location, .line_type'<br><br># Manual: Whitepages reverse lookup</pre><p>What this finds: The carrier name (VOIP provider), which tells you what infrastructure to attack, and sometimes the registered business name.</p><h3>Technique 4: Breach Data Phone Search (Authorized Only)</h3><p>If you have authorized access to breach databases:</p><pre># Dehashed search by phone<br>curl -s "https://api.dehashed.com/v1/search?query=phone:$PHONE&amp;size=1000" \<br>    -u "$EMAIL:$API_KEY" | \<br>    jq -r '.entries[].domain' | sort -u</pre><p>What this finds: Every domain where an account was registered with that phone number — including internal systems, VPN portals, and employee benefits portals.</p><h3>Real-World Example: Phone-to-Domain Discovery</h3><p>Target: Large healthcare tech company. Scope: *.healthtech.com.</p><p>I found the company’s main phone number from their contact page: +1 (617) 555-0100.</p><p>I ran a WHOIS phone number search:</p><pre># SecurityTrails reverse WHOIS by phone<br># Result: 47 domains registered with +1.617.555.0100</pre><p>Among those 47 domains:</p><figure><img alt="" src="https://cdn-images-1.medium.com/max/734/1*9rVIeYeZHnAqzlW8RoepFg.png"><figcaption>47 domains</figcaption></figure><p>Critical find: internal-healthtech.com was registered with the same phone number but was not on any subdomain list. It resolved to a private IP range (10.x.x.x) from the outside, but it hosted an internal tool portal accessible via VPN. The VPN wasn't in scope either — until I found it through the phone number.</p><h3>Part III: Email Address → Domain Discovery</h3><p>Every email address user@domain.com is a direct pointer to a domain. When you collect thousands of emails associated with a target company, you build a comprehensive domain inventory.</p><h3>Technique 1: Cross-Company Email Analysis</h3><p>When employees from Company A and Company B communicate, email headers reveal both domains. If you find john@company-a.com and jane@company-b.com in the same email chain, they're connected.</p><pre># From breach data (authorized): find which domains appear alongside the target domain<br># From leaked email threads: extract all sender/receiver domains<br># From public mailing lists: find cross-company email patterns</pre><p>What this finds: Business relationships — partners, vendors, clients, and acquired companies.</p><h3>Technique 2: The Hunter.io API Multi-Domain Search</h3><p>Hunter.io allows you to search by domain AND by company name. The company name search returns emails from multiple domains:</p><pre># Search by company name<br>curl -s "https://api.hunter.io/v2/company/domain?company=healthtech&amp;api_key=$KEY" | \<br>    jq -r '.data.domains[]'<br><br># Result:<br># healthtech.com<br># healthtech.io<br># healthtech.dev<br># healthtech-careers.com<br># healthtech-benefits.com</pre><p>What this finds: All domains associated with a company name, including HR, benefits, and internal tool domains.</p><h3>Technique 3: Email-to-GitHub-to-Domain Chain</h3><p>This is one of the most powerful discovery chains in bug hunting:</p><ol><li>Collect employee email: alice@healthtech.com</li><li>Search GitHub for that email: finds Alice’s GitHub account</li><li>Look at Alice’s GitHub repos, commits, and organizations</li><li>Find references to other domains in code, configs, and commit messages</li></ol><pre>#!/bin/bash<br># email-to-github-to-domains.sh<br>EMAIL="$1"<br><br># Step 1: Find GitHub account<br>echo "[*] Searching GitHub for $EMAIL..."<br>curl -s "https://api.github.com/search/users?q=$EMAIL+in:email" | \<br>    jq -r '.items[].login' &gt; github_users.txt<br><br># Step 2: For each GitHub user, find their repos and orgs<br>while read USER; do<br>    echo "[*] Checking user: $USER"<br>    <br>    # Get user's repos<br>    curl -s "https://api.github.com/users/$USER/repos?per_page=100" | \<br>        jq -r '.[].full_name' &gt;&gt; repos.txt<br>    <br>    # Get organizations<br>    curl -s "https://api.github.com/users/$USER/orgs" | \<br>        jq -r '.[].login' &gt;&gt; orgs.txt<br>    <br>    sleep 2  # Rate limiting<br>done &lt; github_users.txt<br><br># Step 3: Search repo contents for domain references<br>while read REPO; do<br>    echo "[*] Searching repo: $REPO"<br>    <br>    # Search code for domain patterns<br>    curl -s "https://api.github.com/search/code?q=repo:$REPO+healthtech" | \<br>        jq -r '.items[].html_url' &gt;&gt; code_refs.txt<br>    <br>    # Search commit messages for domain references<br>    curl -s "https://api.github.com/search/commits?q=repo:$REPO+healthtech" | \<br>        jq -r '.items[].html_url' &gt;&gt; commit_refs.txt<br>    <br>    sleep 2<br>done &lt; repos.txt</pre><p>What this finds: Internal domains referenced in code comments, config files, READMEs, and commit messages.</p><h3>Technique 4: Email-to-Breach-to-Domain Correlation</h3><p>When an employee’s email appears in a breach, you can see what service they were using and what domain was involved:</p><pre># Dehashed query (authorized)<br>curl -s "@healthtech.com&amp;size=10000"&gt;https://api.dehashed.com/v1/search?query=email:@healthtech.com&amp;size=10000" \<br>    -u "$EMAIL:$API_KEY" | \<br>    jq -r '.entries[] | "\(.domain) \(.email) \(.password)"' | sort -u<br><br># Extract unique domains<br>curl -s "@healthtech.com&amp;size=10000"&gt;https://api.dehashed.com/v1/search?query=email:@healthtech.com&amp;size=10000" \<br>    -u "$EMAIL:$API_KEY" | \<br>    jq -r '.entries[].domain' | sort -u &gt; breached-domains.txt</pre><p>What this finds: Domains where employees had accounts — including personal projects, side businesses, and services they used for work purposes (sometimes on unmanaged infrastructure).</p><h3>Technique 5: Email-Specific Subdomain Discovery</h3><p>Services like Have I Been Pwned, Firefox Monitor, and custom tools can tell you which subdomains of a company have accounts registered:</p><pre># Check if a subdomain has active accounts<br># For Office 365: login.microsoftonline.com will reveal tenant info<br># For Atlassian: company-name.atlassian.net<br># For Slack: company-name.slack.com<br># For GitHub: github.com/orgs/CompanyName<br><br># Using emails to discover the company's Atlassian instance:<br>for email in $(cat emails.txt); do<br>    # Check for Atlassian account<br>    response=$(curl -s -o /dev/null -w "%{http_code}" \<br>        "https://healthtech.atlassian.net/rest/analytics/1.0/user/is-licensed?username=$email")<br>    <br>    if [ "$response" == "200" ] || [ "$response" == "401" ]; then<br>        echo "Atlassian domain found: healthtech.atlassian.net"<br>        break<br>    fi<br>done</pre><h3>Real-World Example: Email-to-Domain Discovery Chain</h3><p>Target: Financial services company finsecure.com.</p><p>I collected 2,400 emails using Hunter.io, theHarvester, and LinkedIn scraping. Among them was devops@finsecure.com.</p><p>GitHub search on <a href="mailto:devops@finsecure.com">devops@finsecure.com</a>: Found a GitHub account finsecure-devops with a private repo (misconfigured visibility).</p><p>Repo contents revealed:</p><ul><li>deploy.config with DB_HOST=mariadb.internal.finsecure.com</li><li>terraform.tf with bucket = "finsecure-terraform-state"</li><li>README.md with See internal docs at docs.internal.finsecure.com</li></ul><p>New domains discovered:</p><ul><li>internal.finsecure.com — Not in any CT log or DNS record</li><li>docs.internal.finsecure.com — Subdomain of the above</li><li>mariadb.internal.finsecure.com — Internal database hostname</li><li>finsecure-terraform-state.s3.amazonaws.com — S3 bucket with terraform state</li></ul><p>The S3 bucket was publicly listable. It contained AWS access keys. The AWS keys gave access to the production environment.</p><p>Chain: 1 email → 1 GitHub account → 1 repo → 4 new domains → 1 S3 bucket → AWS root access.</p><h3>Part IV: Phone Number + Email → Subdomain Discovery (The Real Gold)</h3><p>When you combine phone numbers and emails, you unlock subdomain discovery that no DNS tool can match.</p><h3>Technique 1: WHOIS Contact Cross-Reference</h3><p>Company domains are often registered by the same person. If you find the registrant’s name and email from one domain, you can find all other domains they’ve registered:</p><pre># Step 1: Get WHOIS info for the main domain<br>whois healthtech.com | grep -E "Registrant|Admin|Tech|Email" &gt; whois-info.txt<br><br># Step 2: Extract registrant name and email<br>NAME=$(grep "Registrant Name" whois-info.txt | awk -F: '{print $2}' | xargs)<br>EMAIL=$(grep "Registrant Email" whois-info.txt | awk -F: '{print $2}' | xargs)<br><br># Step 3: Search for other domains with same registrant<br># Using WhoisXMLAPI<br>curl -s "https://www.whoisxmlapi.com/whoisserver/WhoisService?apiKey=$API_KEY&amp;domainName=$NAME&amp;outputFormat=JSON" | \<br>    jq -r '.WhoisRecord.registryData.registrantDomains[]'<br><br># Using DomainTools Reverse WHOIS<br>curl -s "https://api.domaintools.com/v1/$NAME/domains/" \<br>    -u "$DOMAINTOOLS_USER:$DOMAINTOOLS_KEY" | \<br>    jq -r '.response.domains[]'</pre><h3>Technique 2: Social Media Profile Mining</h3><p>Employee LinkedIn profiles often list multiple domains:</p><pre>Current: Senior Engineer at HealthTech (healthtech.com)<br>Past: Lead Developer at MedData (meddata.io)<br>Education: MIT (mit.edu)</pre><p>Each of these is a domain that may or may not be in scope. If meddata.io was acquired by healthtech.com, then meddata.io infrastructure is likely part of the target's attack surface.</p><pre># LinkedIn scraper (requires authentication)<br># Extract: current company, past companies, education<br># Cross-reference with known acquisitions<br><br># For each past company found on LinkedIn profiles:<br># Check if it was acquired by the target<br># If yes: run full acquisition pipeline on that domain</pre><h3>Technique 3: Support Portal and Help Desk Domains</h3><p>Phone numbers often lead to support portals, which lead to subdomains:</p><pre># Call the company's support number<br># Listen for automated messages:<br># "Press 1 for billing" → billing.helpdesk.com<br># "Press 2 for technical support" → support.helpdesk.com<br># "Press 3 for sales" → sales.helpdesk.com<br><br># These are subdomains of the support portal domain<br># Check if they resolve, check for takeovers<br><br># Also check: support@company.com → Zendesk, Freshdesk, Helpscout<br># Zendesk: company.zendesk.com<br># Freshdesk: company.freshdesk.com<br># Helpscout: company.helpscout.net</pre><h3>Technique 4: Email Header Subdomain Discovery</h3><p>If you can obtain a legitimate email from the company (e.g., by signing up for their newsletter), the email headers reveal internal infrastructure:</p><pre>Received: from mail.healthtech.com (192.168.1.10)<br>Received: from mx1.healthtech.com (203.0.113.5)<br>Received: from smtp-in.healthtech.com (198.51.100.20)<br>DKIM-Signature: d=healthtech.com; s=selector1<br>Authentication-Results: mx.google.com;<br>       spf=pass (google.com: domain of newsletter@healthtech.com designates 203.0.113.5 as permitted sender)</pre><p>Each of these IPs and hostnames is a potential subdomain:</p><ul><li>mail.healthtech.com</li><li>mx1.healthtech.com</li><li>smtp-in.healthtech.com</li></ul><h3>Real-World Example: Phone + Email → Subdomain Discovery</h3><p>Target: SaaS company cloudserve.com.</p><p>Phone number from WHOIS: +1 (425) 555-0100 (Seattle area)</p><p>Email from WHOIS: admin@cloudserve.com</p><p>Step 1: WHOIS reverse search on phone number Found 12 domains, including:</p><ul><li>cloudserve.io (known)</li><li>cloudserve-backup.com (unknown — registered 2008)</li><li>cs-legacy.com (unknown — registered 2005)</li></ul><p>Step 2: WHOIS reverse search on email Found 8 more domains:</p><ul><li>cloudserve-status.com (status page — known but useful)</li><li>cloudserve-dev.com (development — not in scope docs)</li></ul><p>Step 3: Emails collected from Hunter.io 1,800 emails. Found devops@cloudserve.com in a GitHub commit.</p><p>Step 4: DevOps email → GitHub repos Found a repo with monitoring.cloudserve.com hardcoded in a config file.</p><p>Step 5: Subdomain enumeration on new domains</p><pre>subfinder -d cloudserve-backup.com -silent<br># Found: admin.cloudserve-backup.com<br># Found: db.cloudserve-backup.com</pre><p>Result: 14 new domains and 47 new subdomains discovered through phone and email OSINT alone. DNS brute-force against the main domain found none of these.</p><h3>Part V: Building the Phone-to-Email-to-Domain Pipeline</h3><p>Here’s a practical automated pipeline that can be used for this workflow.</p><h3>Phase 1: Phone Number Collection &amp; Analysis</h3><pre>#!/bin/bash<br># phase1-phone-collect.sh<br>TARGET="$1"<br>DOMAIN="$2"<br><br>echo "[*] Phase 1: Phone Number Collection"<br><br># 1a. WHOIS extraction<br>whois "$DOMAIN" 2&gt;/dev/null | grep -oP '(\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}' &gt; phones.txt<br><br># 1b. Web scraping for phone numbers<br>katana -u "https://$DOMAIN" -d 2 -silent | \<br>    grep -oP '(\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}' &gt;&gt; phones.txt<br><br># 1c. Business directories<br>curl -s "https://api.opencorporates.com/v0.4/companies/search?q=$DOMAIN" | \<br>    jq -r '.results[].company.phone_number' 2&gt;/dev/null | grep -v null &gt;&gt; phones.txt<br><br># Deduplicate<br>sort -u phones.txt -o phones.txt<br>echo "[*] Found $(wc -l &lt; phones.txt) unique phone numbers"</pre><h3>Phase 2: Phone → Domain Mapping</h3><pre>#!/bin/bash<br># phase2-phone-to-domain.sh<br>TARGET="$1"<br><br>echo "[*] Phase 2: Phone to Domain Mapping"<br><br>while read PHONE; do<br>    echo "[*] Processing phone: $PHONE"<br>    <br>    # 2a. Reverse WHOIS by phone (if you have access)<br>    # DomainTools API<br>    # curl -s "https://api.domaintools.com/v1/$PHONE/domains/" -u "$USER:$KEY" | \<br>    #     jq -r '.response.domains[]' &gt;&gt; phone-domains.txt<br>    <br>    # 2b. SecurityTrails (manual or API)<br>    # curl -s "https://api.securitytrails.com/v1/search?query=whois.phone:$PHONE" \<br>    #     -H "APIKEY: $ST_KEY" | jq -r '.records[].hostname' &gt;&gt; phone-domains.txt<br>    <br>    # 2c. Breach data (authorized)<br>    # dehashed API<br>    # curl -s "https://api.dehashed.com/v1/search?query=phone:$PHONE" \<br>    #     -u "$EMAIL:$DEHASHED_KEY" | jq -r '.entries[].domain' &gt;&gt; phone-domains.txt<br>    <br>    sleep 1<br>done &lt; phones.txt<br><br>sort -u phone-domains.txt -o phone-domains.txt<br>echo "[*] Found $(wc -l &lt; phone-domains.txt) domains from phone numbers"</pre><h3>Phase 3: Email Collection</h3><pre>#!/bin/bash<br># phase3-email-collect.sh<br>DOMAIN="$1"<br><br>echo "[*] Phase 3: Email Collection"<br><br># 3a. Hunter.io<br>curl -s "https://api.hunter.io/v2/domain-search?domain=$DOMAIN&amp;api_key=$HUNTER_KEY" | \<br>    jq -r '.data.emails[].value' &gt; emails-hunter.txt<br><br># 3b. theHarvester<br>theHarvester -d "$DOMAIN" -b google,linkedin,github -f /dev/null 2&gt;/dev/null | \<br>    grep -oP '[a-zA-Z0-9._%+-]+@'"$DOMAIN" &gt; emails-harvester.txt<br><br># 3c. Skymem<br>curl -s "https://www.skymem.info/srch?q=$DOMAIN" | \<br>    grep -oP '[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]*\.?'"$DOMAIN" &gt; emails-skymem.txt<br><br># 3d. Web page extraction<br>katana -u "https://$DOMAIN" -d 2 -silent | \<br>    grep -oP '[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]*\.?'"$DOMAIN" &gt; emails-web.txt<br><br># 3e. JS file extraction<br>katana -u "https://$DOMAIN" -jc -silent | xargs -I{} curl -s {} 2&gt;/dev/null | \<br>    grep -oP '[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]*\.?'"$DOMAIN" &gt; emails-js.txt<br><br># Combine<br>cat emails-hunter.txt emails-harvester.txt emails-skymem.txt emails-web.txt emails-js.txt | \<br>    sort -u &gt; emails.txt<br><br>echo "[*] Found $(wc -l &lt; emails.txt) unique email addresses"</pre><h3>Phase 4: Email → Domain Extraction</h3><pre>#!/bin/bash<br># phase4-email-to-domain.sh<br>DOMAIN="$1"<br><br>echo "[*] Phase 4: Email to Domain Extraction"<br><br># 4a. Extract all domains from email addresses<br>grep -oP '@[a-zA-Z0-9.-]+' emails.txt | sed 's/@//' | sort -u &gt; email-domains.txt<br><br># 4b. Remove the main domain (keep only non-obvious domains)<br>grep -v "$DOMAIN" email-domains.txt &gt; other-domains.txt<br><br>echo "[*] Found $(wc -l &lt; email-domains.txt) total domains from emails"<br>echo "[*] Found $(wc -l &lt; other-domains.txt) domains OUTSIDE the main domain"</pre><h3>Phase 5: LinkedIn → Name → Email → Domain</h3><pre>#!/bin/bash<br># phase5-linkedin-to-domains.sh<br>TARGET="$1"<br>DOMAIN="$2"<br><br>echo "[*] Phase 5: LinkedIn Name to Email to Domain"<br><br># 5a. Scrape LinkedIn for employees (manual or with tool)<br># linkedin_scraper -c "$TARGET" -o linkedin-employees.csv<br><br># 5b. Extract past companies from LinkedIn profiles<br># awk -F, '{print $3}' linkedin-employees.csv | sort -u &gt; past-companies.txt<br><br># 5c. For each past company, check if it's in scope<br>while read COMPANY; do<br>    echo "[*] Checking past company: $COMPANY"<br>    <br>    # Search for the company's domain<br>    domain_from_name=$(echo "$COMPANY" | tr '[:upper:]' '[:lower:]' | sed 's/ //g').com<br>    nslookup "$domain_from_name" &gt; /dev/null 2&gt;&amp;1 &amp;&amp; echo "$domain_from_name" &gt;&gt; past-company-domains.txt<br>    <br>done &lt; past-companies.txt<br><br># 5d. For each past company domain, check if acquired by target<br># Manual step: verify acquisition history</pre><h3>Phase 6: Cross-Reference and Subdomain Enumeration on New Domains</h3><pre>#!/bin/bash<br># phase6-subdomain-enum.sh<br>DOMAIN="$1"<br><br>echo "[*] Phase 6: Subdomain Enumeration on All Discovered Domains"<br><br># Combine all domain lists<br>cat phone-domains.txt other-domains.txt past-company-domains.txt | sort -u &gt; all-discovered-domains.txt<br><br># Run subdomain enumeration on each<br>while read DISCOVERED_DOMAIN; do<br>    echo "[*] Enumerating: $DISCOVERED_DOMAIN"<br>    <br>    # CT logs<br>    curl -s "https://crt.sh/?q=%25.$DISCOVERED_DOMAIN&amp;output=json" | \<br>        jq -r '.[].name_value' 2&gt;/dev/null &gt;&gt; all-subs.txt<br>    <br>    # Subfinder<br>    subfinder -d "$DISCOVERED_DOMAIN" -silent &gt;&gt; all-subs.txt<br>    <br>    # DNS brute-force<br>    puredns bruteforce ~/wordlists/subdomains.txt "$DISCOVERED_DOMAIN" \<br>        -r ~/resolvers.txt -q &gt;&gt; all-subs.txt<br>    <br>done &lt; all-discovered-domains.txt<br><br>sort -u all-subs.txt -o all-subs.txt<br>echo "[*] Total subdomains discovered: $(wc -l &lt; all-subs.txt)"</pre><h3>Part VI: The Complete Real-World Workflow</h3><p>To understand how this methodology works in practice, let's walk through an anonymized example of how phone numbers, emails, and public intelligence can reveal hidden assets. payflow.com</p><h3>08:00 — Phone Collection</h3><pre># WHOIS<br>whois payflow.com | grep -E "Phone|Tel"<br># +1 (415) 555-0100<br><br># Contact page<br>katana -u https://payflow.com/contact -d 1 | grep -oP '(\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}'<br># +1 (415) 555-0100 (same)<br># +1 (512) 555-0200 (different — Austin)<br><br># Business registry<br>curl -s "https://api.opencorporates.com/v0.4/companies/search?q=payflow" | \<br>    jq -r '.results[].company.phone_number'<br># +1 (512) 555-0200<br># +1 (512) 555-0300 (NEW — unknown)</pre><p>Phone numbers collected:</p><ul><li>+1 (415) 555-0100 (San Francisco — HQ)</li><li>+1 (512) 555-0200 (Austin — known office)</li><li>+1 (512) 555-0300 (Austin — UNKNOWN)</li></ul><h3>08:30 — Phone → Domain</h3><pre># SecurityTrails reverse WHOIS by phone<br># +1 (512) 555-0300 → registered to:<br># payflow-holdings.com<br># payflow-ventures.com<br># pf-internal.com</pre><p>New domains discovered:</p><ul><li>payflow-holdings.com — Holding company</li><li>payflow-ventures.com — Venture arm</li><li>pf-internal.com — INTERNAL DOMAIN</li></ul><h3>09:00 — Email Collection</h3><pre># Hunter.io: 847 emails<br># theHarvester: 312 emails<br># Skymem: 1,204 emails<br># Web scraping: 89 emails<br># JS files: 34 emails<br># Total unique: 1,892 emails</pre><h3>09:30 — Email → Domain Extraction</h3><pre>grep -oP '@[a-zA-Z0-9.-]+' emails.txt | sed 's/@//' | sort -u<br><br># Unique domains found in emails (excluding payflow.com):<br># payflow.io (known)<br># payflow.co (NEW)<br># payflow-engineering.com (NEW — engineering team domain)<br># pf-payments.com (NEW — payments processing domain)<br># payflow-benefits.com (NEW — HR/benefits domain)</pre><h3>10:00 — GitHub Cross-Reference</h3><pre># Searched for devops@payflow.com on GitHub<br># Found GitHub user: payflow-devops<br># Scanned repos for domain references<br><br># Found in deploy configs:<br># monitoring.internal.payflow.com<br># logs.internal.payflow.com<br># ci.internal.payflow.com</pre><h3>10:30 — Subdomain Enumeration on New Domains</h3><pre># On pf-internal.com:<br>subfinder -d pf-internal.com -silent<br># vpn.pf-internal.com (LIVE)<br># jenkins.pf-internal.com (LIVE)<br># git.pf-internal.com (LIVE)<br><br># On payflow-engineering.com:<br>subfinder -d payflow-engineering.com -silent<br># dev.payflow-engineering.com (LIVE)<br># staging.payflow-engineering.com (LIVE)<br># api.payflow-engineering.com (LIVE)</pre><h3>11:00 — Priority Assessment</h3><p>P0:</p><ol><li>vpn.pf-internal.com — VPN portal (potential credential access)</li><li>jenkins.pf-internal.com — Jenkins (potential RCE)</li><li>pf-internal.com — Internal domain (potential for more discovery)</li></ol><p>P1: 4. payflow-engineering.com — Engineering domain (dev/staging instances) 5. payflow-holdings.com — Holding company (potential subsidiary assets) 6. monitoring.internal.payflow.com — Monitoring (potential Grafana/Prometheus)</p><h3>11:30 — Attack Phase</h3><p>Jenkins on pf-internal.com:</p><ul><li>No authentication required</li><li>Created a freestyle project with a reverse shell</li><li>Got shell access to the Jenkins server</li><li>Jenkins had AWS keys in environment variables</li><li>AWS keys had full admin access to production</li></ul><p>Chain: 1 phone number → 3 unknown phone numbers → 1 unknown domain → 3 subdomains → 1 Jenkins server → AWS root access.</p><h3>Part VII: Tool Reference Guide</h3><h4>Phone Number Tools</h4><figure><img alt="" src="https://cdn-images-1.medium.com/max/735/1*XnmWQ7exrxpOTsRHnIQ2qw.png"><figcaption>Phone Number Tools</figcaption></figure><h4>Email Collection Tools</h4><figure><img alt="" src="https://cdn-images-1.medium.com/max/738/1*z4tA68XnkqGoK0X9Ey7C3A.png"><figcaption>Email Collection Tools</figcaption></figure><h4>Cross-Reference Tools</h4><figure><img alt="" src="https://cdn-images-1.medium.com/max/716/1*IheT9-nPyVGeBaBpR9-gaQ.png"><figcaption>Cross-Reference Tools</figcaption></figure><h3>Part VIII: Common Mistakes (From Personal Experience)</h3><h3>Mistake 1: Not Checking All Phone Numbers from WHOIS</h3><p>A common mistake is finding one phone number in WHOIS and stopping too early, ran my reverse search, and stopped. There were actually three different phone numbers across different domains — I missed two.</p><p>Fix: Extract EVERY phone number from EVERY WHOIS record for EVERY domain you find.</p><h3>Mistake 2: Ignoring Email Domains That Don’t Match the Target</h3><p>What happened: I collected 2,000 emails for target.com. I filtered out everything that wasn't @target.com. I missed the 200 emails with @target-engineering.com, @target-holdings.com, and @target-benefits.com — all of which were owned by the same company.</p><p>Fix: Extract ALL unique domains from your email collection, not just the primary domain.</p><h3>Mistake 3: Not Checking LinkedIn Past Companies</h3><p>What happened: An employee’s LinkedIn profile showed they previously worked at acme-solutions.com. I ignored it. Acme Solutions had been acquired by my target three years prior. Its infrastructure was in scope but I never checked it.</p><p>Fix: Scrape past companies from LinkedIn profiles and cross-reference with acquisition history.</p><h3>Mistake 4: Not Running Subdomain Enumeration on Each New Domain</h3><p>What happened: I found pf-internal.com and added it to my list. I didn't run subfinder or CT log queries against it. vpn.pf-internal.com was sitting there the whole time.</p><p>Fix: Run full subdomain enumeration on EVERY domain you discover, no exceptions.</p><h3>Mistake 5: Stopping After One Round</h3><p>What happened: I discovered new domains, ran subfinder once, and started attacking. I didn’t recurse. Some of those new domains had their own subdomains, and those subdomains had their own CT logs.</p><p>Fix: Recursive enumeration. Every new domain → full acquisition pipeline → find more domains → repeat.</p><h3>Bug Hunter Acquisition Checklist — Phone &amp; Email Edition</h3><h3>☐ Phone Number Collection</h3><ul><li>☐ WHOIS records extracted for all discovered domains</li><li>☐ Contact/scraped pages (main site, subdomains, subsidiaries)</li><li>☐ Business registries checked (OpenCorporates, state registries)</li><li>☐ SEC filings reviewed (10-K, 10-Q, S-1)</li><li>☐ Press releases and news articles mined</li><li>☐ Social media profiles checked (LinkedIn, Twitter, Facebook)</li><li>☐ Breach data queried (with authorization)</li></ul><h3>☐ Phone Number Analysis</h3><ul><li>☐ VOIP provider identified for each number</li><li>☐ Area codes mapped to physical office locations</li><li>☐ Multi-number comparison for organizational structure</li><li>☐ Extension patterns identified</li><li>☐ Reverse WHOIS by phone number completed</li><li>☐ Business registry search by phone completed</li><li>☐ Phone number range scanning (if applicable)</li></ul><h3>☐ Phone → Domain Mapping</h3><ul><li>☐ Reverse WHOIS for every unique phone number</li><li>☐ Business registry domain mapping</li><li>☐ Carrier/VOIP provider infrastructure checked</li><li>☐ Support portal domains discovered (Zendesk, Freshdesk, etc.)</li><li>☐ VOIP admin console exposure checked</li><li>☐ Webhook endpoint testing (if Twilio/RingCentral identified)</li></ul><h3>☐ Email Collection</h3><ul><li>☐ Hunter.io domain search completed</li><li>☐ theHarvester multi-source harvest completed</li><li>☐ Skymem cross-reference completed</li><li>☐ Web page email extraction completed</li><li>☐ JavaScript file email extraction completed</li><li>☐ LinkedIn employee name scraping completed</li><li>☐ GitHub commit email extraction completed</li><li>☐ Mailing list/public forum extraction completed</li><li>☐ Breach data email extraction (with authorization)</li></ul><h3>☐ Email → Domain Extraction</h3><ul><li>☐ All unique domains extracted from email addresses</li><li>☐ Primary domain filtered out to reveal hidden domains</li><li>☐ Subsidiary/acquired company domains identified</li><li>☐ Internal/private domains identified</li><li>☐ Third-party service domains identified</li><li>☐ Employee personal domains identified</li></ul><h3>☐ Email → GitHub → Domain Chain</h3><ul><li>☐ GitHub accounts found for employee emails</li><li>☐ Repos and commits scanned for domain references</li><li>☐ Organization discovery completed</li><li>☐ Config files and environment vars checked</li><li>☐ Hardcoded endpoints extracted</li><li>☐ S3 bucket names and cloud resources extracted</li></ul><h3>☐ Email → Service → Domain Chain</h3><ul><li>☐ Atlassian (Jira/Confluence) instance discovered</li><li>☐ Slack workspace discovered</li><li>☐ Microsoft 365 tenant discovered</li><li>☐ Google Workspace tenant discovered</li><li>☐ Zendesk/Freshdesk/Helpscout portal discovered</li><li>☐ Status page hosted domain discovered</li><li>☐ Documentation/wiki hosted domain discovered</li></ul><h3>☐ Full Subdomain Enumeration on New Domains</h3><ul><li>☐ CT log queries (crt.sh, certspotter) for each new domain</li><li>☐ Passive DNS queries (SecurityTrails, VirusTotal)</li><li>☐ Subdomain brute-force (subfinder, puredns, massdns)</li><li>☐ Permutation-based discovery (alterx, gotator, dmut)</li><li>☐ Recursive enumeration (each subdomain → parent as new target)</li><li>☐ Wayback Machine historical subdomain discovery</li><li>☐ Technology fingerprinting (httpx, whatweb)</li><li>☐ HTTP response analysis (live vs. dead, redirects, error pages)</li></ul><h3>☐ Cross-Reference Validation</h3><ul><li>☐ Phone numbers matched to discovered domains</li><li>☐ Emails matched to discovered domains</li><li>☐ LinkedIn past companies cross-referenced with acquisitions</li><li>☐ GitHub profiles cross-referenced with company email domains</li><li>☐ Breach data cross-referenced (correlates emails, phones, domains)</li><li>☐ Scope validation for every newly discovered asset</li></ul><h3>☐ Continuous Monitoring</h3><ul><li>☐ Daily CT log monitoring for new subdomains on discovered domains</li><li>☐ Weekly phone number re-check (new WHOIS entries)</li><li>☐ Weekly email re-harvesting (new employees, new domains)</li><li>☐ GitHub monitoring for new employee commits</li><li>☐ Acquisition news monitoring (Google Alerts, Crunchbase)</li><li>☐ LinkedIn employee movement tracking</li><li>☐ Quarterly full pipeline re-run</li></ul><h3>Final Technical Notes</h3><h3>Why This Works at Scale</h3><p>The average Fortune 500 company has:</p><ul><li>50–200 registered domains</li><li>10–50 subsidiaries/acquired entities</li><li>2,000–20,000 employees</li><li>5–20 different phone numbers</li></ul><p>DNS brute-force will find maybe 30–50% of the subdomains on the main domain. It will find almost none of the subdomains on other domains.</p><p>Phone and email OSINT finds the other domains. Then you run DNS brute-force on those. The result is a 3–5x increase in discovered attack surface.</p><h3>The Data Flow</h3><pre>Phone Number → Reverse WHOIS → New Domains<br>Phone Number → Business Registry → Legal Entities → New Domains<br>Phone Number → VOIP Provider → Admin Console → Subdomains<br><br>Email Address → Hunter.io → Cross-Company Domains<br>Email Address → GitHub → Repos → Configs → Domains<br>Email Address → Breach Data → Service Registrations → Domains<br>Email Address → LinkedIn → Past Companies → Acquired Domains<br><br>New Domains → Subdomain Enumeration → Attack Surface</pre><h3>A Final Word on Authorization</h3><p>Everything in this blog assumes you have explicit written authorization to test the target’s assets. I do not share the names of actual targets. All examples are anonymized composites of real engagements.</p><p>If you’re new to bug bounty:</p><ol><li>Start with public programs on HackerOne/Bugcrowd that explicitly allow OSINT</li><li>Never use breach data unless the program explicitly permits it</li><li>Never use social engineering unless the program explicitly permits it</li><li>When in doubt, ask the program’s security team</li></ol><p>Disclaimer: Only for authorized bug bounty / pentesting environments.</p><figure><img alt="" src="https://cdn-images-1.medium.com/max/700/0*o-3pvh96SZd-YMZS.png"><figcaption>Follow US</figcaption></figure><p><em>GitHub: </em><a href="https://github.com/SecurityTalent"><em>SecurityTalent</em></a><em> | Medium: </em><a href="https://medium.com/@securitytalent"><em>Security Talent</em></a><em> | Twitter: </em><a href="https://twitter.com/Securi3yTalent"><em>Securi3yTalent</em></a><em> </em>| Facebook: <a href="https://www.facebook.com/Securi3ytalent/">Securi3ytalent</a> | Telegram: <a href="https://t.me/Securi3yTalent">Securi3yTalent</a></p><p>#BugBounty #OSINT #CyberSecurity #EthicalHacking #Infosec #PenetrationTesting #AttackSurface #SubdomainEnumeration #ThreatHunting #SecurityResearch #RedTeam #DigitalFootprint #CyberSecurity #BugBounty #BugBountyHunter #EthicalHacking #InfoSec #WebSecurity #ApplicationSecurity #AppSec #CloudSecurity #FrontendSecurity #WebDevelopment #JavaScript #ReactJS #Laravel #NodeJS #DevSecOps #OWASP #SecretsManagement #GitHub #GitHubDorks #SourceMaps #EnvFiles #SecurityResearch #PenetrationTesting #RedTeam #BlueTeam #CloudComputing #AWS #Azure #GoogleCloud #VibeCoding #AI #SecureCoding #DeveloperSecurity #TechBlog #Programming</p><img src="https://medium.com/_/stat?event=post.clientViewed&amp;referrerSource=full_rss&amp;postId=16b1e7d533cd" width="1" height="1" alt=""><hr><p><a href="https://infosecwriteups.com/phone-numbers-and-emails-to-hidden-subdomains-the-osint-acquisition-pipeline-that-uncovered-a-16b1e7d533cd">Phone Numbers and Emails to Hidden Subdomains: The OSINT Acquisition Pipeline That Uncovered a…</a> was originally published in <a href="https://infosecwriteups.com/">InfoSec Write-ups</a> on Medium, where people are continuing the conversation by highlighting and responding to this story.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[v2.1.183]]></title>
<description><![CDATA[What's changed

Improved auto mode safety: destructive git commands (git reset --hard, git checkout -- ., git clean -fd, git stash drop) are now blocked when you didn't ask to discard local work, git commit --amend is blocked when the commit wasn't made by the agent this session, and terraform de...]]></description>
<link>https://tsecurity.de/de/3609208/downloads/v21183/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3609208/downloads/v21183/</guid>
<pubDate>Fri, 19 Jun 2026 03:50:11 +0200</pubDate>
<category>💾 Downloads</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2>What's changed</h2>
<ul>
<li>Improved auto mode safety: destructive git commands (<code>git reset --hard</code>, <code>git checkout -- .</code>, <code>git clean -fd</code>, <code>git stash drop</code>) are now blocked when you didn't ask to discard local work, <code>git commit --amend</code> is blocked when the commit wasn't made by the agent this session, and <code>terraform destroy</code>/<code>pulumi destroy</code>/<code>cdk destroy</code> are blocked unless you asked for the specific stack</li>
<li>Added a warning when the requested model is deprecated or automatically updated to a newer model, shown on stderr in print mode (<code>-p</code>) and now also covering models set in agent frontmatter</li>
<li>Added <code>attribution.sessionUrl</code> setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions</li>
<li>Added <code>/config --help</code> to list all available shorthand keys for <code>/config key=value</code></li>
<li>Changed <code>/config</code> toggle behavior: Enter and Space both change the selected setting, and Esc now saves and closes instead of reverting</li>
<li>Removed the startup "setup issues" line under the logo — run <code>/doctor</code> to see configuration issues or use <code>--debug</code></li>
<li>Fixed <code>thinking.disabled.display: Extra inputs are not permitted</code> 400 errors on subagent spawns and session-title generation for affected configurations</li>
<li>Fixed WebSearch returning empty results in subagents</li>
<li>Fixed the terminal cursor being stranded above the prompt after navigating history in vim mode with the native cursor enabled</li>
<li>Fixed fullscreen TUI corruption (statusline mid-screen, duplicated spinner rows, merged text) in Windows Terminal under heavy nested-subagent load</li>
<li>Fixed turns silently completing with no visible output when the model returned only a thinking block; Claude now re-prompts once</li>
<li>Fixed user-level skills appearing multiple times in slash-command autocomplete when multiple plugins are enabled</li>
<li>Fixed MCP servers requiring authentication exposing auth-stub tools to the model in headless/SDK mode</li>
<li>Fixed tmux teammate panes failing to launch when the shell has slow rc-file initialization, and keystrokes typed during agent spawn leaking into the new tmux pane instead of the leader prompt</li>
<li>Fixed background tasks started by a teammate being killed when the teammate finishes a turn</li>
<li>Fixed scheduled task and webhook trigger deliveries being treated as keyboard input; they now classify as task notifications and can no longer approve a pending action or set the session title in auto mode</li>
<li>Fixed focus mode showing "Ran N PostToolUse hooks" timing lines under each response</li>
</ul>]]></content:encoded>
</item>
<item>
<title><![CDATA[Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens]]></title>
<description><![CDATA[Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards i...]]></description>
<link>https://tsecurity.de/de/3608657/it-security-nachrichten/hackers-breached-klue-integration-to-steal-salesforce-crm-data-via-oauth-tokens/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3608657/it-security-nachrichten/hackers-breached-klue-integration-to-steal-salesforce-crm-data-via-oauth-tokens/</guid>
<pubDate>Thu, 18 Jun 2026 20:20:44 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards integration, a…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/hackers-breached-klue-integration-to-steal-salesforce-crm-data-via-oauth-tokens/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/hackers-breached-klue-integration-to-steal-salesforce-crm-data-via-oauth-tokens/">Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens]]></title>
<description><![CDATA[Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards i...]]></description>
<link>https://tsecurity.de/de/3608353/it-security-nachrichten/hackers-breached-klue-integration-to-steal-salesforce-crm-data-via-oauth-tokens/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3608353/it-security-nachrichten/hackers-breached-klue-integration-to-steal-salesforce-crm-data-via-oauth-tokens/</guid>
<pubDate>Thu, 18 Jun 2026 18:11:48 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards integration, a competitive-intelligence platform that synchronizes battlecard and win/loss data with Salesforce, to exfiltrate large volumes of […]</p>
<p>The post <a href="https://cybersecuritynews.com/klue-integration-breached-salesforce/">Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens</a> appeared first on <a href="https://cybersecuritynews.com/">Cyber Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[I watched the first four episodes of House of the Dragon season 3 — and I can't shake this burning feeling that the Game of Thrones spin-off should be better than it is by now]]></title>
<description><![CDATA[House of the Dragon's third season comes close to being the unflinchingly brutal chapter that the series always promised to be.]]></description>
<link>https://tsecurity.de/de/3608162/it-nachrichten/i-watched-the-first-four-episodes-of-house-of-the-dragon-season-3-and-i-cant-shake-this-burning-feeling-that-the-game-of-thrones-spin-off-should-be-better-than-it-is-by-now/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3608162/it-nachrichten/i-watched-the-first-four-episodes-of-house-of-the-dragon-season-3-and-i-cant-shake-this-burning-feeling-that-the-game-of-thrones-spin-off-should-be-better-than-it-is-by-now/</guid>
<pubDate>Thu, 18 Jun 2026 17:08:07 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[House of the Dragon's third season comes close to being the unflinchingly brutal chapter that the series always promised to be.]]></content:encoded>
</item>
<item>
<title><![CDATA[heise-Angebot: Mastering GitOps 2026: Letzte Chance auf Tickets für die Konferenz am 25. Juni]]></title>
<description><![CDATA[GitOps-Know-how aus der Praxis für die Praxis steht im Fokus der Online-Konferenz am 25. Juni 2026. Jetzt noch Tickets sichern.]]></description>
<link>https://tsecurity.de/de/3606789/it-nachrichten/heise-angebot-mastering-gitops-2026-letzte-chance-auf-tickets-fuer-die-konferenz-am-25-juni/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3606789/it-nachrichten/heise-angebot-mastering-gitops-2026-letzte-chance-auf-tickets-fuer-die-konferenz-am-25-juni/</guid>
<pubDate>Thu, 18 Jun 2026 08:17:40 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[GitOps-Know-how aus der Praxis für die Praxis steht im Fokus der Online-Konferenz am 25. Juni 2026. Jetzt noch Tickets sichern.]]></content:encoded>
</item>
<item>
<title><![CDATA[Terraform Alternatives in 2026: OpenTofu, Pulumi, Crossplane, and What Actually Fits Your Team]]></title>
<description><![CDATA[In this post, I will talk about the best Terraform alternatives in 2026 and discuss OpenTofu, Pulumi, Crossplane, and what actually fits your team. Back in 2023, when HashiCorp changed Terraform’s license, a lot of teams were caught off guard. Suddenly, everyone had to figure out: do we keep usin...]]></description>
<link>https://tsecurity.de/de/3604155/it-security-nachrichten/terraform-alternatives-in-2026-opentofu-pulumi-crossplane-and-what-actually-fits-your-team/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3604155/it-security-nachrichten/terraform-alternatives-in-2026-opentofu-pulumi-crossplane-and-what-actually-fits-your-team/</guid>
<pubDate>Wed, 17 Jun 2026 11:09:15 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>In this post, I will talk about the best Terraform alternatives in 2026 and discuss OpenTofu, Pulumi, Crossplane, and what actually fits your team. Back in 2023, when HashiCorp changed Terraform’s license, a lot of teams were caught off guard. Suddenly, everyone had to figure out: do we keep using Terraform, or is it time […]</p>
<p>The post <a href="https://secureblitz.com/terraform-alternatives/">Terraform Alternatives in 2026: OpenTofu, Pulumi, Crossplane, and What Actually Fits Your Team</a> appeared first on <a href="https://secureblitz.com/">SecureBlitz Cybersecurity</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Streamlining CI/CD and GitOps on VMware vSphere Kubernetes Service with Harness, Wiz, and Dynatrace]]></title>
<description><![CDATA[With VMware Cloud Foundation (VCF) 9, the focus for platform teams has shifted from simply providing infrastructure to enabling seamless, secure application delivery. As organizations scale their containerized workloads, the challenge lies in balancing developer velocity with operational guardrai...]]></description>
<link>https://tsecurity.de/de/3601710/downloads/streamlining-cicd-and-gitops-on-vmware-vsphere-kubernetes-service-with-harness-wiz-and-dynatrace/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3601710/downloads/streamlining-cicd-and-gitops-on-vmware-vsphere-kubernetes-service-with-harness-wiz-and-dynatrace/</guid>
<pubDate>Tue, 16 Jun 2026 14:01:01 +0200</pubDate>
<category>💾 Downloads</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div><img width="300" height="144" src="https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?w=300" class="attachment-medium size-medium wp-post-image" alt="" decoding="async" srcset="https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png 3568w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?resize=300,144 300w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?resize=768,369 768w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?resize=1024,492 1024w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?resize=1536,739 1536w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?resize=2048,985 2048w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Screenshot-2026-06-15-at-12.36.01.png?resize=600,289 600w" sizes="(max-width: 300px) 100vw, 300px"></div>
<p>With VMware Cloud Foundation (VCF) 9, the focus for platform teams has shifted from simply providing infrastructure to enabling seamless, secure application delivery. As organizations scale their containerized workloads, the challenge lies in balancing developer velocity with operational guardrails. In this article, we are diving into how you can build a robust, enterprise-grade delivery pipeline … <a href="https://blogs.vmware.com/cloud-foundation/2026/06/16/streamlining-ci-cd-and-gitops-on-vmware-vsphere-kubernetes-service-with-harness-wiz-and-dynatrace/">Continued</a></p>
<p>The post <a href="https://blogs.vmware.com/cloud-foundation/2026/06/16/streamlining-ci-cd-and-gitops-on-vmware-vsphere-kubernetes-service-with-harness-wiz-and-dynatrace/">Streamlining CI/CD and GitOps on VMware vSphere Kubernetes Service with Harness, Wiz, and Dynatrace</a> appeared first on <a href="https://blogs.vmware.com/cloud-foundation">VMware Cloud Foundation (VCF) Blog</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[A Chinese Rocket Breaks Apart Dangerously Close To the Starlink Constellation]]></title>
<description><![CDATA[A Chinese Zhuque-2E rocket's upper stage broke apart shortly after last week's June 9 launch, likely creating 100 to 150 pieces of debris in a busy region of low-Earth orbit crossed by the ISS and lower-altitude Starlink satellites. Most fragments should reenter within months because of atmospher...]]></description>
<link>https://tsecurity.de/de/3600936/it-security-nachrichten/a-chinese-rocket-breaks-apart-dangerously-close-to-the-starlink-constellation/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3600936/it-security-nachrichten/a-chinese-rocket-breaks-apart-dangerously-close-to-the-starlink-constellation/</guid>
<pubDate>Tue, 16 Jun 2026 09:22:48 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A Chinese Zhuque-2E rocket's upper stage broke apart shortly after last week's June 9 launch, likely creating 100 to 150 pieces of debris in a busy region of low-Earth orbit crossed by the ISS and lower-altitude Starlink satellites. Most fragments should reenter within months because of atmospheric drag, but experts say the incident adds to a worsening trend as China leaves more large rocket bodies in orbit while expanding its launch rate. Ars Technica reports: The US Space Force confirmed the breakup event in a post on space-track.org, a website used by the military to distribute orbit data to the public. "The tracked pieces are being incorporated into routine conjunction assessment to support spaceflight safety," the Space Force wrote in an advisory. "There are currently no threats to human spaceflight. Analysis is ongoing." So far, the Space Force has not added any of the debris fragments to the official catalog of human-made space objects.
 
[...] The bad news is that the Zhuque-2E's breakup is the latest chapter in China's growing contribution to the space junk problem. After decades of leaving spent rocket bodies in orbit, launch operators in most countries now reserve enough fuel to steer their upper stages back to Earth for controlled reentries. Rocket bodies attributed to Russia and the former Soviet Union account for the bulk of the launch-related debris in long-lived orbits, followed by China and the United States. But the Russian and American numbers are declining or holding steady, while the mass of Chinese rocket bodies in these long-lived orbits has grown by more than 150 percent in the past five years, according to a new analysis by Space Domain Awareness expert Jim Shell. The increase comes as China ramps up launches of its own megaconstellations designed to compete with SpaceX's Starlink.
 
Rocket bodies are the most concerning sources of space debris because they are typically fairly large in size and mass, often with residual propellant and high-pressure gases that can trigger an explosion. There is no way to maneuver or dispose of them if left abandoned in orbit after releasing their payloads. McKnight characterized the recent breakup of the Zhuque-2E rocket as a "slight space safety issue," but the trend is not good. China's Long March 6A rocket has an especially bad track record, including two explosions that littered a higher-altitude low-Earth orbit with more than 1,000 debris fragments, where they will remain for decades or centuries. "Three of the top four breakup events in LEO are of Chinese origin, with two of these events being from Chinese (rocket body) explosions in the last four years," McKnight said.<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=A+Chinese+Rocket+Breaks+Apart+Dangerously+Close+To+the+Starlink+Constellation%3A+https%3A%2F%2Fscience.slashdot.org%2Fstory%2F26%2F06%2F16%2F0539205%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fscience.slashdot.org%2Fstory%2F26%2F06%2F16%2F0539205%2Fa-chinese-rocket-breaks-apart-dangerously-close-to-the-starlink-constellation%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://science.slashdot.org/story/26/06/16/0539205/a-chinese-rocket-breaks-apart-dangerously-close-to-the-starlink-constellation?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple Shares New Widow’s Bay Finale Clip Ahead of Tuesday’s Release]]></title>
<description><![CDATA[Apple TV is preparing to air the Widow’s Bay season finale this week, and Apple has now shared a short teaser video to build interest before the final episode arrives.



The finale of Widow’s Bay season 1 airs on Tuesday, June 16, at 9:00 p.m. ET and 6:00 p.m. PT, giving fans one last episode be...]]></description>
<link>https://tsecurity.de/de/3600625/ios-mac-os/apple-shares-new-widows-bay-finale-clip-ahead-of-tuesdays-release/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3600625/ios-mac-os/apple-shares-new-widows-bay-finale-clip-ahead-of-tuesdays-release/</guid>
<pubDate>Tue, 16 Jun 2026 06:34:49 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple TV is preparing to air the Widow’s Bay season finale this week, and Apple has now shared a short teaser video to build interest before the final episode arrives.



The finale of Widow’s Bay season 1 airs on Tuesday, June 16, at 9:00 p.m. ET and 6:00 p.m. PT, giving fans one last episode before the show moves toward its already confirmed second season.



Widow’s Bay Finale Teaser




https://twitter.com/AppleTV/status/2066538152051749199




Apple’s new teaser shows Mayor Loftis visiting an important resident’s home, which suggests the finale will continue the show’s mix of strange mystery, dark humor, and horror.



The final episode is titled “We Hope You Enjoyed Your Time!” and Apple’s episode description says hard choices had to be made, while also teasing that things may never be the same again.



According to the Apple TV app, the finale runs for 48 minutes, making it the longest episode of the season and giving the story more room to close its first chapter.



Widow’s Bay Season 2 Is Already Confirmed



Widow’s Bay has become one of Apple TV’s most talked-about new shows this year, with strong reviews and steady placement near the top of Apple TV’s charts.



Apple TV has already renewed Widow’s Bay for season 2, and creator Katie Dippold has also signed a new multiyear overall deal for future Apple TV projects.



Viewers can watch Widow’s Bay on Apple TV, which costs $12.99 per month and is also available through the Apple One bundle.]]></content:encoded>
</item>
<item>
<title><![CDATA[How to Migrate from Terraform to OpenTofu on Rocky Linux 9 (2026 Guide)]]></title>
<description><![CDATA[Marcus’s DevOps Brief: I have been running Terraform in production for four years across Kubernetes clusters and cloud deployments. When HashiCorp switched to the Business Source License in 2023, my team spent two weeks evaluating OpenTofu before making the jump.…]]></description>
<link>https://tsecurity.de/de/3600555/linux-tipps/how-to-migrate-from-terraform-to-opentofu-on-rocky-linux-9-2026-guide/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3600555/linux-tipps/how-to-migrate-from-terraform-to-opentofu-on-rocky-linux-9-2026-guide/</guid>
<pubDate>Tue, 16 Jun 2026 05:13:22 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Marcus’s DevOps Brief: I have been running Terraform in production for four years across Kubernetes clusters and cloud deployments. When HashiCorp switched to the Business Source License in 2023, my team spent two weeks evaluating OpenTofu before making the jump.…]]></content:encoded>
</item>
<item>
<title><![CDATA[Vibe coding can build your pipeline. It can't explain it six months later]]></title>
<description><![CDATA[AI coding agents are rapidly accelerating data engineering by generating transformations, pipelines, orchestration workflows, validation tests, and infrastructure configurations from prompts. However, enterprise data platforms have long operated across fragmented systems owned by different teams ...]]></description>
<link>https://tsecurity.de/de/3599700/it-nachrichten/vibe-coding-can-build-your-pipeline-it-cant-explain-it-six-months-later/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3599700/it-nachrichten/vibe-coding-can-build-your-pipeline-it-cant-explain-it-six-months-later/</guid>
<pubDate>Mon, 15 Jun 2026 18:17:33 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>AI coding agents are rapidly accelerating data engineering by generating transformations, pipelines, orchestration workflows, validation tests, and infrastructure configurations from prompts. </p><p>However, enterprise data platforms have long operated across fragmented systems owned by different teams and built on different technologies. As these systems evolve independently, organizations increasingly struggle with inconsistent business logic, duplicated implementations, difficult downstream impact analysis, and hidden dependencies across the platform. </p><p>The rise of vibe coding can further amplify these problems as more operational context, architectural decisions, and business knowledge become scattered across prompts, conversations, generated code, and disconnected workflows rather than becoming part of the system itself.</p><p>Spec-driven development (SDD) is emerging as one approach to address this challenge. In SDD, prompts, business rules, validation logic, orchestration behavior, and implementation workflows are converted into executable and versioned specifications that become part of the system itself. These specifications act as persistent operational memory for both humans and <a href="https://venturebeat.com/orchestration/mcp-solved-tool-calling-a2a-solved-coordination-what-solves-transport">AI agents</a>, allowing systems to evolve more consistently across releases, teams, and AI-assisted workflows.</p><p>Because enterprise data engineering already relies heavily on reusable patterns, metadata-driven pipelines, and standardized operational workflows, it is especially well-suited for SDD. By combining AI-assisted generation with deterministic and reusable system contracts, SDD may provide a new operational layer for reducing fragmentation and improving long-term coordination across increasingly AI-generated data platforms.</p><h2><b>Vibe coding alone lacks persistent system memory </b></h2><p>Vibe coding works remarkably well for generating isolated implementations quickly. But prompts are inherently temporary. They capture an engineer’s assumptions, business context, implementation logic, and system knowledge only for that specific conversation and moment in time.</p><p>In practice, making <a href="https://venturebeat.com/technology/agentic-ai-solved-coding-and-exposed-every-other-problem-in-software-engineering">AI-generated systems</a> work often requires far more than a simple prompt. Engineers continuously provide background information, architectural decisions, business rules, schema assumptions, downstream dependencies, operational constraints, debugging history, and implementation guidance throughout the development process.</p><p>These contexts become the real operational knowledge behind AI-assisted development.</p><p>However, in most vibe coding workflows, this information remains scattered across prompts, conversations, Jira tickets, documentation, chat history, generated code, and disconnected workflows rather than becoming part of the system itself.</p><p>This creates a major problem for enterprise data engineering because modern data platforms are naturally fragmented across many interconnected systems, including ingestion pipelines, warehouses, orchestration frameworks, semantic layers, APIs, dashboards, and machine learning (ML) systems. As more logic and context become embedded inside prompts and generated implementations, organizations gradually lose visibility into:</p><ul><li><p>architectural intent</p></li><li><p>downstream dependencies</p></li><li><p>validation assumptions</p></li><li><p>operational behavior</p></li><li><p>business context behind implementations</p></li></ul><p>Over time, the system itself no longer contains the full reasoning behind how it was built. Critical business context, architectural assumptions, and operational knowledge still largely exist inside human judgement and scattered conversations rather than inside the platform itself. </p><p>Vibe coding makes implementation significantly faster, but from a system perspective, overall engineering efficiency does not improve proportionally because much of the development lifecycle still depends on human validation, domain knowledge, coordination, and decision-making.</p><p>More importantly, prompts are not naturally iterable engineering artifacts. Enterprise systems continuously evolve across releases, schema changes, business logic updates, and downstream dependencies. Teams repeatedly revisit and refine systems over time, but prompts are optimized for fast local generation rather than system long-term evolution.</p><p>They are difficult to:</p><ul><li><p>version consistently</p></li><li><p>validate systematically</p></li><li><p>reuse across teams</p></li><li><p>coordinate through CI/CD workflows</p></li><li><p>evolve incrementally over time</p></li></ul><p>Even the same prompt may not reliably generate the same implementation with different context in the future.</p><p>This is where SDD begins to move to the center of AI-assisted data engineering. Instead of leaving operational knowledge scattered across prompts and conversations, SDD integrates business context, validation logic, transformation behavior, orchestration requirements, and implementation workflows directly into executable specifications that become part of the system itself.</p><p>The system now has persistent memory about how it was designed, why certain decisions were made, and how different components are connected across the platform. This allows teams and <a href="https://venturebeat.com/orchestration/when-claude-changed-everything-changed-managing-ai-blast-radius-in-production">AI agents</a> to iterate systems more reliably over time while reducing fragmentation across increasingly distributed data environments.</p><h2><b>Spec-driven development turns prompts into system memory</b></h2><p>In SDD, systems are built around executable specifications rather than loosely coordinated prompts and implementations alone. Instead of treating specifications as passive documentation written after development, SDD treats them as operational contracts that directly drive code generation, validation, testing, orchestration, and deployment workflows.</p><p>In many ways, SDD extends ideas from Infrastructure-as-Code and GitOps into AI-assisted engineering. Specifications combine declarative system definitions with executable implementation workflows. The declarative layer provides system context, schemas, dependencies, constraints, and operational requirements, while workflow-oriented instructions guide AI agents on how to implement and evolve the system consistently.</p><p>Once these contexts, rules, and implementation patterns are converted into persistent and versioned contracts stored in repositories and integrated into CI/CD workflows, the system becomes significantly more iterable and governable over time. These specifications effectively become long-term system memory for both humans and AI agents, allowing systems to evolve consistently across releases, teams, and increasingly AI-assisted development workflows.</p><p>In practice, the structure of specifications largely depends on the type of systems and workflows being implemented. However, spec-driven systems often begin with a foundational “constitution” that defines project-wide principles and constraints that should remain consistent across the platform, such as technology standards, naming conventions, architectural rules, governance policies, and core system requirements. On top of this foundation, multiple layers of specifications serve different operational purposes across the development lifecycle:</p><ul><li><p>schema specifications define structural compatibility</p></li><li><p>transformation specifications define business logic</p></li><li><p>validation specifications define quality rules</p></li><li><p>orchestration specifications define execution behavior</p></li><li><p>semantic specifications define shared business definitions</p></li><li><p>AI workflow specifications define reusable implementation instructions for coding agents</p></li></ul><p>A simplified specification might look like this:</p><p><i>pipeline_spec:</i></p><p><i>  source:</i></p><p><i>    system: mysql</i></p><p><i>    table: order</i></p><p><i>  transformation:</i></p><p><i>    logic:</i></p><p><i>      - load_strategy: scd2</i></p><p><i>  target:</i></p><p><i>    platform: snowflake</i></p><p><i>    table: dim_order</i></p><p><i>  validation:</i></p><p><i>    primary_key: order_id</i></p><p>Additional workflow files can then provide reusable implementation instructions for coding agents:</p><ol><li><p>Generate Python ingestion code for Salesforce customer data.</p></li><li><p>Generate DBT models implementing Type 2 SCD logic.</p></li><li><p>Generate Airflow workflows for hourly execution.</p></li><li><p>Generate validation tests for downstream compatibility.</p></li></ol><p>These specification documents are often maintained as markdown-based operational artifacts generated and refined through AI-assisted workflows. Engineers can iteratively update the specifications, provide additional business context, and collaborate with coding agents to improve implementation logic, workflows, and prompt instructions over time. Compared to traditional documentation processes, AI-assisted specification generation is significantly faster and more adaptive.</p><p>The important shift is not simply better documentation. Specifications become reusable operational context that allows systems to evolve consistently across releases, teams, and AI-assisted workflows. Architectural intent, business assumptions, and implementation logic no longer disappear into temporary prompts and disconnected implementations, but instead become persistent system knowledge integrated directly into the development lifecycle.</p><h2><b>Why spec-driven development specifically fits data engineering </b></h2><p>SDD can theoretically be applied across many areas of software engineering, but data engineering is especially well-suited for this model because of the nature of modern data platforms.</p><p>Enterprise data systems naturally span many interconnected technologies and layers, including transactional systems, ingestion frameworks, streaming platforms, warehouses, orchestration systems, semantic layers, APIs, dashboards, and ML pipelines. Data engineers regularly work across long technology stacks and distributed systems where a single upstream change can impact many downstream consumers.</p><p>Enterprise data platforms also support many different teams and applications across fragmented environments. As systems evolve independently, understanding the full downstream impact of an upstream schema or business logic change becomes increasingly difficult. A seemingly small modification can silently break downstream pipelines, dashboards, APIs, semantic models, or machine learning workflows across the platform.</p><p>SDD can address this fragmentation by introducing shared and versioned operational contracts across systems. Because schemas, dependencies, validation rules, transformation logic, and orchestration behavior are explicitly defined within specifications, teams and AI agents gain much better visibility into how systems are connected and how changes propagate across the platform.</p><p>Additionally, the goal of data engineering is not simply delivering pipelines quickly. Teams must also optimize for system stability, scalability, consistency, maintainability, operational reliability, and infrastructure cost.</p><p>This requires significant system and solution design work from engineers. Teams must define tech stack, create schemas, transformation patterns, orchestration behavior, validation rules, storage strategies, and downstream compatibility requirements carefully across the platform.</p><p>However, once these architectural and operational patterns are established, much of the implementation work becomes highly repetitive and standardized.</p><p>For example, after defining a reusable ingestion and transformation pattern for Salesforce customer data, onboarding a new table may only require adding another table definition into the specification, while the remaining implementation can be generated automatically through existing specifications and workflows that follow the same operational pattern:</p><p><i>source:</i></p><p><i>  system: salesforce</i></p><p><i>  tables:</i></p><p><i>    - customer</i></p><p><i>    - order</i></p><p><i>    - product</i></p><p>From this specification alone, coding agents could generate new data pipelines following the same governed implementation pattern across the platform. This combination of human-driven architectural design and highly repeatable implementation workflows makes data engineering particularly suitable for SDD.</p><p>In many ways, data engineering has always been moving toward higher levels of automation, from ETL frameworks and metadata-driven pipelines to IaC and declarative orchestration systems. SDD represents another step in that evolution by combining prompt-based AI generation with deterministic and versioned operational contracts.</p><p>Instead of relying entirely on temporary conversational prompts or rigid template systems, SDD introduces a middle layer where reusable specifications provide structure, coordination, validation, and persistent system memory for AI-assisted development.</p><h2><b>How SDD changes AI-assisted data engineering</b></h2><p>SDD introduces a much higher level of automation into enterprise data engineering while also helping reduce the fragmentation problems that modern data platforms increasingly face.</p><p>Because schemas, business rules, transformation behavior, orchestration requirements, validation logic, and downstream dependencies are explicitly defined inside reusable specifications, coding agents can generate and evolve large portions of the implementation consistently across the platform. Instead of repeatedly rebuilding pipelines and workflows from temporary prompts and disconnected context, teams can iterate systems through shared operational contracts and reusable implementation patterns.</p><p>This significantly improves consistency, traceability, and coordination across distributed environments. Schema evolution becomes easier to manage, downstream impact becomes more visible, and systems can evolve incrementally instead of through disconnected generations of implementations.</p><p>At the same time, human engineers still remain essential in the development lifecycle. While AI agents can automate large portions of implementation work, human judgement is still critical for defining business logic, designing architectures, managing tradeoffs, validating correctness, and coordinating system evolution across organizations.</p><p>As more implementation work becomes AI-generated, the role of data engineering also begins shifting. Engineers spend less time writing repetitive pipelines and orchestration logic, and more time defining specifications, designing reusable operational patterns, managing validation rules, and coordinating business context across systems.</p><p>This may also gradually reduce some of the traditional boundaries between different data engineering teams. Because implementation becomes increasingly standardized and AI-assisted through shared specifications, organizations may rely less on highly siloed platform-specific implementation teams and more on shared operational contracts and reusable system patterns.</p><p>Ultimately, SDD shifts data engineering toward a more specification-oriented and system-oriented model where humans focus on intent, architecture, and business coordination, while AI agents increasingly handle implementation, testing, and operational generation at scale.</p><p><i>Shuhua Xu is a lead data engineer.</i></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[IBM sends signals with its $10 billion quantum pledge]]></title>
<description><![CDATA[“The quantum era is no longer ahead of us, it has started,” said IBM CEO Arvind Krishna in statement tied to news that the company is committing $10 billion to advancing quantum computing and commercializing the technology.



IBM will spend the money over the course of the next five years on res...]]></description>
<link>https://tsecurity.de/de/3599688/it-security-nachrichten/ibm-sends-signals-with-its-10-billion-quantum-pledge/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3599688/it-security-nachrichten/ibm-sends-signals-with-its-10-billion-quantum-pledge/</guid>
<pubDate>Mon, 15 Jun 2026 18:09:38 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>“The quantum era is no longer ahead of us, it has started,” said IBM CEO Arvind Krishna in <a href="https://newsroom.ibm.com/2026-06-02-ibm-commits-more-than-10-billion-to-quantum-computing,-funding-its-roadmap-from-todays-leading-systems-to-the-worlds-first-fault-tolerant-quantum-computers">statement</a> tied to news that the company is committing $10 billion to advancing quantum computing and commercializing the technology.</p>



<p>IBM will spend the money over the course of the next five years on research and development, capital expenses, partnerships, manufacturing, and mergers and acquisitions, according to its June 2 announcement and a related filing with the SEC.</p>



<p>“A $10 billion investment is pretty significant,” said IDC analyst <a href="https://www.linkedin.com/in/heather-c-west-ph-d-52075667/">Heather West</a>. “And it’s sending signals out that in order to actually move the technology forward at a significant pace and get to these larger systems, there has to be a bigger investment in the technology itself. If the US wants to be ahead of the game, and keep leadership, there has to be this level of funding, either on the public or private side, or a combination of the two.”</p>



<p>IBM’s $10 billion investment news came on the heels of a $2 billion investment in a new quantum wafer foundry, Anderon — $1 billion of that funding is coming from IBM, and the other $1 billion is from the US government.</p>



<p>When news of the quantum investment was released late last month, IBM’s stock price rallied, and analysts expect it to continue to climb. Barclays analyst Raimo Lenschow predicted that IBM’s stock price would go up to $350, and that quantum computing has the potential to be IBM’s “next chapter,” <a href="https://www.investors.com/news/technology/ibm-stock-barclays-analyst-buy-quantum-computing/">according to reports</a>. Citi raised its target from $285 to $375, calling IBM “underappreciated” and with potential exposure to an $850 billion federally supported quantum market, <a href="https://finance.yahoo.com/markets/stocks/articles/ibm-stock-hits-52-week-221601544.html">according to reports</a>.</p>



<p>The new announcements aren’t changing IBM’s stated quantum timeline, said West. IBM had already said it is targeting 2029 for fault-tolerant quantum computing. (Pictured above is a rendering of <a href="https://www.networkworld.com/article/4003986/ibm-claims-to-have-only-realistic-path-to-quantum-computing.html">IBM Quantum Starling</a>, a large-scale, fault-tolerant quantum computer that IBM is building in its Poughkeepsie, New York, facility for delivery by 2029.)</p>



<p>“What we’re seeing now is the financial aspect, substantiating what their research path has been,” West said .</p>



<p>IBM has an almost unmatched record of delivering on their roadmap, said Gartner analyst <a href="https://www.linkedin.com/in/mark-horvath-86b453/">Mark Horvath</a>. The $10 billion is a significant investment, he said. “This is, overall, a significant step towards both advancing their technology base and bringing their quantum computers into mainstream status.”</p>



<h2 class="wp-block-heading">Anderon foundry</h2>



<p>IBM already has quantum computing manufacturing facilities. They will become the basis of a new company, a pure-play quantum foundry called Anderon, which will provide 300mm wafers to multiple quantum technology vendors. There is no announcement yet of when the foundry will be officially open, but the website is already up, at <a href="https://www.anderon.com/">anderon.com</a>.</p>



<p>It will initially support superconducting qubits and supporting electronics wafers, but IBM’s goal is to expand to other types of quantum computers in the future, the company <a href="https://newsroom.ibm.com/ibm-and-u-s-department-of-commerce-announce-americas-first-purpose-built-quantum-foundry">announced in May</a>. According to Gartner’s Horvath, superconducting qubits have been the most reliable quantum computing platform so far, but other platforms — like photonics, trapped ions, and neutral atoms — also show strong promise.</p>



<p>It’s not clear whether IBM’s $10 billion plan includes the $1 billion Anderon investment or is in addition to it. As of press time, IBM did not respond to requests for comment.</p>



<p>Meanwhile, the US government is also partnering with other quantum computing firms as well.</p>



<p>The U.S. government will invest a little over $2 billion in nine quantum-related companies, the Department of Commerce <a href="https://www.nist.gov/news-events/news/2026/05/department-commerce-announces-letters-intent-9-companies-2-billion">announced</a> in late May. The biggest portion of this investment, $1 billion, will go to IBM, for establishing the new quantum foundry. Another $375 million will go to GlobalFoundries to build a quantum foundry for different kinds of quantum computers, including superconducting, trapped ion, photonic, topological, and silicon spin.</p>



<p>Six other quantum companies will receive $100 million each — Atom Computing, D-Wave, Infleqtion, PsiQuantum, Quantinuum and Rigetti. And a seventh, Diraq, will receive up to $38 million. In return, the Commerce Department will receive a minority, non-controlling equity stake in these companies, the announcement said.</p>



<p>IBM can afford to invest billions in quantum computing, said IDC’s West. “But with startups, it’s a little challenging to be able to do so — they’re very much dependent on outside funding.”</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Think you know everything about Raccoon City? See if you can survive to the end of my ultimate Resident Evil movie quiz]]></title>
<description><![CDATA[Zach Cregger's Resident Evil is the next chapter of the zombie horror franchise. But how well do you know the previous movies?]]></description>
<link>https://tsecurity.de/de/3599617/it-nachrichten/think-you-know-everything-about-raccoon-city-see-if-you-can-survive-to-the-end-of-my-ultimate-resident-evil-movie-quiz/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3599617/it-nachrichten/think-you-know-everything-about-raccoon-city-see-if-you-can-survive-to-the-end-of-my-ultimate-resident-evil-movie-quiz/</guid>
<pubDate>Mon, 15 Jun 2026 17:54:33 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Zach Cregger's Resident Evil is the next chapter of the zombie horror franchise. But how well do you know the previous movies?]]></content:encoded>
</item>
<item>
<title><![CDATA[Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management]]></title>
<description><![CDATA[Torrance, United States / California, June 11th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack surface visibility to security teams worldwide, participated in Infosecurity Europe 2026 at ExCeL London this week, ...]]></description>
<link>https://tsecurity.de/de/3597478/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3597478/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</guid>
<pubDate>Sun, 14 Jun 2026 20:31:09 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Torrance, United States / California, June 11th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack surface visibility to security teams worldwide, participated in Infosecurity Europe 2026 at ExCeL London this week, marking the company’s second consecutive appearance at Europe’s leading cybersecurity event. Alongside live demonstrations of […]</p>
<p>The post <a href="https://gbhackers.com/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/">Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management</a> appeared first on <a href="https://gbhackers.com/">GBHackers Security | #1 Globally Trusted Cyber Security News Platform</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management]]></title>
<description><![CDATA[Torrance, United States / California, June 11th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack surface visibility to security teams worldwide, participated in Infosecurity Europe 2026 at ExCeL London this week, ...]]></description>
<link>https://tsecurity.de/de/3597477/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3597477/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</guid>
<pubDate>Sun, 14 Jun 2026 20:31:08 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Torrance, United States / California, June 11th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack surface visibility to security teams worldwide, participated in Infosecurity Europe 2026 at ExCeL London this week, marking the company’s second consecutive appearance at Europe’s leading cybersecurity event. Alongside live demonstrations of […]</p>
<p>The post <a href="https://cybersecuritynews.com/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/">Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management</a> appeared first on <a href="https://cybersecuritynews.com/">Cyber Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[macOS 27 (Golden Gate) vs macOS 26 Tahoe: What’s Actually Different?]]></title>
<description><![CDATA[Apple’s annual macOS updates often bring visual changes, performance tweaks, and new features. However, macOS 27 Golden Gate is more significant than a typical release. While macOS 26 Tahoe focused on refining the Apple Silicon transition, Golden Gate marks the point where Apple fully leaves Inte...]]></description>
<link>https://tsecurity.de/de/3595937/ios-mac-os/macos-27-golden-gate-vs-macos-26-tahoe-whats-actually-different/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3595937/ios-mac-os/macos-27-golden-gate-vs-macos-26-tahoe-whats-actually-different/</guid>
<pubDate>Sat, 13 Jun 2026 18:53:38 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple’s annual macOS updates often bring visual changes, performance tweaks, and new features. However, macOS 27 Golden Gate is more significant than a typical release. While macOS 26 Tahoe focused on refining the Apple Silicon transition, Golden Gate marks the point where Apple fully leaves Intel Macs behind.



If you are wondering whether Golden Gate is a major upgrade or just another yearly update, here is a detailed comparison of what has actually changed.



Comparison Table



FeaturemacOS 26 TahoemacOS 27 Golden GateIntel Mac SupportSupportedNot SupportedApple Silicon RequirementNoYesRosetta 2 SupportFully SupportedFinal version with full supportSiri AILimited Apple Intelligence integrationNew Siri AI with deeper system integrationInterfaceLiquid Glass introductionRefined Liquid Glass designApple IntelligenceFirst generation featuresExpanded AI features and workflowsSecurity FocusStandard yearly updatesBuilt entirely around Apple Silicon security architectureFuture CompatibilityTransition phaseFoundation for Apple's silicon-only future







Golden Gate Ends Intel Mac Support



macOS 26 Tahoe was the final version that supported Intel-based Macs. With Golden Gate, Apple officially requires an M-series processor, starting with the original M1 chip.



This means devices such as:




Mac Pro (2019)



iMac Pro



16-inch MacBook Pro (2019)



Intel MacBook Pro (2020)



Intel iMac (2020)




cannot upgrade to macOS 27.



Apple is still expected to provide security updates for supported Intel Macs running Tahoe, but they are no longer part of the main macOS roadmap.







Apple Silicon Is Now the Only Platform



Tahoe still carried some legacy support because Apple needed to accommodate both Intel and Apple Silicon systems.



Golden Gate removes that burden.



Since every supported Mac now runs Apple Silicon, Apple can optimize:




Memory management



Neural Engine workloads



Graphics processing



Power efficiency



AI processing




without worrying about two completely different processor architectures.



This does not automatically make Golden Gate dramatically faster, but it gives Apple much more freedom to improve performance going forward.







Siri AI Is Much More Advanced



One of the headline additions in macOS 27 is the new Siri AI experience.



Tahoe introduced several Apple Intelligence features, but Golden Gate takes things further by giving Siri better awareness of:




Screen content



Documents



Emails



Calendar events



Personal context




Users can ask more natural questions and receive context-aware responses directly from information already available on their Mac.



For productivity-focused users, this is one of the most noticeable upgrades compared to Tahoe.







Apple Intelligence Expands Across the System



Apple Intelligence was still relatively new in Tahoe.



Golden Gate expands AI-powered features into more areas of macOS, including:



Writing Assistance



Users get improved tools for:




Rewriting text



Proofreading



Summarization



Content generation




Productivity Workflows



AI can better understand context from:




Notes



Mail



Calendar



Files



Open applications




Voice Interaction



The new Siri AI feels closer to a conversational assistant than previous Siri versions.







Liquid Glass Design Gets Refined



Tahoe introduced Apple's newer visual direction.



Golden Gate continues that approach with refinements rather than dramatic redesigns.



Users will notice:




Cleaner transparency effects



Better window rendering



Improved visual consistency



More polished animations




The changes are subtle but make the interface feel more mature compared to Tahoe.







Rosetta 2 Enters Its Final Chapter



Another important difference involves Rosetta 2.



Tahoe fully supports Rosetta 2, which allows Intel applications to run on Apple Silicon Macs.



Golden Gate also supports Rosetta 2, but Apple has confirmed this is the last macOS release with full Rosetta support. Future versions will significantly reduce compatibility, keeping limited support primarily for older games that cannot easily be updated.



If you still rely on Intel-only software:




Check whether the developer offers an Apple Silicon version.



Test critical applications before upgrading.



Plan for Rosetta's eventual removal.




Golden Gate is effectively the warning period before Apple fully closes the Intel software chapter.







Better Long-Term Performance Potential



Many users expect immediate speed improvements after every macOS update.



In reality, Golden Gate's biggest performance benefit is long-term.



Because Apple no longer needs to support Intel hardware:




System updates become easier to optimize.



AI features can be built around Neural Engine hardware.



Developers can focus exclusively on Apple Silicon.



Future macOS releases can adopt more advanced technologies faster.




This creates a stronger foundation for the next several years of Mac development.







Supported Macs Comparison



DevicemacOS 26 TahoemacOS 27 Golden GateIntel MacsYesNoM1 MacsYesYesM2 MacsYesYesM3 MacsYesYesM4 MacsYesYesMac StudioYesYesApple Silicon Mac ProYesYes







Should You Upgrade?



Upgrade Immediately If:




You own an M-series Mac.



You want the newest Apple Intelligence features.



You use Siri frequently.



Your apps already support Apple Silicon.




Wait Before Upgrading If:




You depend on Intel-only applications.



Your workflow relies on older plug-ins or drivers.



You need maximum software compatibility during the early beta period.








Wrap Up



The difference between macOS 26 Tahoe and macOS 27 Golden Gate is less about visual redesigns and more about Apple's long-term strategy. Tahoe was the final bridge between Intel and Apple Silicon. Golden Gate starts Apple's first truly Apple Silicon-only era.



For most M-series Mac owners, the biggest benefits are improved Siri AI, expanded Apple Intelligence capabilities, and a platform designed entirely around Apple Silicon. For Intel Mac users, Golden Gate marks the end of official upgrade eligibility and the beginning of the final Rosetta transition period.]]></content:encoded>
</item>
<item>
<title><![CDATA[Software engineer reportedly wins religious exemption from AI use]]></title>
<description><![CDATA[When Pope Leo XIV wrote about the effect that AI is having on our world in his encyclical, Magnifica Humanitas, he may not have imagined the document being referenced in an HR environment.



But, according to a report by Business Insider, Erin Maus, a software developer in North Carolina, used t...]]></description>
<link>https://tsecurity.de/de/3594027/ai-nachrichten/software-engineer-reportedly-wins-religious-exemption-from-ai-use/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3594027/ai-nachrichten/software-engineer-reportedly-wins-religious-exemption-from-ai-use/</guid>
<pubDate>Fri, 12 Jun 2026 18:26:05 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>When Pope Leo XIV wrote about the effect that AI is having on our world in his encyclical, Magnifica Humanitas, he may not have imagined the document being referenced in an HR environment.</p>



<p>But, <a href="https://www.businessinsider.com/worker-got-religious-exemption-using-ai-at-work-2026-6" target="_blank" rel="noreferrer noopener">according to a report by Business Insider</a>, Erin Maus, a software developer in North Carolina, used the Pope’s message about the need for vigilance in how AI would be deployed to gain a special exemption from her employer about using the technology for coding.</p>



<p>Maus is not even a Catholic but a Unitarian Universalist, according to the report. However, it said, she maintained that the use of AI didn’t align with her religious beliefs.</p>



<p>Business Insider said that to make her case, she consulted an employment lawyer — a move to be expected — and her local chapter’s minister — which probably wasn’t. Her wishes were reportedly granted last month. “I’m writing my code and reviewing my code by hand, which seems crazy to say,” she told the publication.</p>



<p>She’s certainly not alone in wondering whether AI is always the way forward for techies: <a href="https://www.pcworld.com/article/3148596/pope-leo-made-me-rethink-how-i-use-ai.html">a journalist at PC World</a> has also been rethinking its use after reading the encyclical.</p>



<p>It remains to be seen whether this will be the spur for a torrent of claims from Catholic workers, asking to be freed from the demands of using AI or whether Business Insider’s report is an outlier.</p>



<p></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Software engineer reportedly wins religious exemption from AI use]]></title>
<description><![CDATA[When Pope Leo XIV wrote about the effect that AI is having on our world in his encyclical, Magnifica Humanitas, he may not have imagined the document being referenced in an HR environment.



But, according to a report by Business Insider, Erin Maus, a software developer in North Carolina, used t...]]></description>
<link>https://tsecurity.de/de/3593999/it-nachrichten/software-engineer-reportedly-wins-religious-exemption-from-ai-use/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3593999/it-nachrichten/software-engineer-reportedly-wins-religious-exemption-from-ai-use/</guid>
<pubDate>Fri, 12 Jun 2026 18:23:13 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>When Pope Leo XIV wrote about the effect that AI is having on our world in his encyclical, Magnifica Humanitas, he may not have imagined the document being referenced in an HR environment.</p>



<p>But, <a href="https://www.businessinsider.com/worker-got-religious-exemption-using-ai-at-work-2026-6" target="_blank" rel="noreferrer noopener">according to a report by Business Insider</a>, Erin Maus, a software developer in North Carolina, used the Pope’s message about the need for vigilance in how AI would be deployed to gain a special exemption from her employer about using the technology for coding.</p>



<p>Maus is not even a Catholic but a Unitarian Universalist, according to the report. However, it said, she maintained that the use of AI didn’t align with her religious beliefs.</p>



<p>Business Insider said that to make her case, she consulted an employment lawyer — a move to be expected — and her local chapter’s minister — which probably wasn’t. Her wishes were reportedly granted last month. “I’m writing my code and reviewing my code by hand, which seems crazy to say,” she told the publication.</p>



<p>She’s certainly not alone in wondering whether AI is always the way forward for techies: <a href="https://www.pcworld.com/article/3148596/pope-leo-made-me-rethink-how-i-use-ai.html">a journalist at PC World</a> has also been rethinking its use after reading the encyclical.</p>



<p>It remains to be seen whether this will be the spur for a torrent of claims from Catholic workers, asking to be freed from the demands of using AI or whether Business Insider’s report is an outlier.</p>



<p><em>This article first appeared on <a href="https://www.infoworld.com/article/4184616/software-engineer-reportedly-wins-religious-exemption-from-ai-use.html">InfoWorld</a>.</em></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Quote of the day by Mark Zuckerberg: 'Metaverse isn't a thing a company builds. It's the next chapter of the internet overall' — a prediction that hit wide of the mark]]></title>
<description><![CDATA[The Meta CEO's pandemic-era predictions on the future of technology failed to materilaize]]></description>
<link>https://tsecurity.de/de/3591923/it-nachrichten/quote-of-the-day-by-mark-zuckerberg-metaverse-isnt-a-thing-a-company-builds-its-the-next-chapter-of-the-internet-overall-a-prediction-that-hit-wide-of-the-mark/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3591923/it-nachrichten/quote-of-the-day-by-mark-zuckerberg-metaverse-isnt-a-thing-a-company-builds-its-the-next-chapter-of-the-internet-overall-a-prediction-that-hit-wide-of-the-mark/</guid>
<pubDate>Fri, 12 Jun 2026 00:02:23 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The Meta CEO's pandemic-era predictions on the future of technology failed to materilaize]]></content:encoded>
</item>
<item>
<title><![CDATA[IBM, ServiceNow team to bring AI to legacy enterprise systems]]></title>
<description><![CDATA[IBM and ServiceNow are teaming up for new services they say will help enterprise customers bring aging legacy environments into an AI-ready infrastructure. 



The collaboration will combine IBM’s AI, data, and automation capabilities and ServiceNow’s AI platform for a variety of offerings that w...]]></description>
<link>https://tsecurity.de/de/3591623/it-security-nachrichten/ibm-servicenow-team-to-bring-ai-to-legacy-enterprise-systems/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3591623/it-security-nachrichten/ibm-servicenow-team-to-bring-ai-to-legacy-enterprise-systems/</guid>
<pubDate>Thu, 11 Jun 2026 21:05:39 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>IBM and ServiceNow are teaming up for new services they say will help enterprise customers bring aging legacy environments into an AI-ready infrastructure. </p>



<p>The collaboration will combine IBM’s AI, data, and automation capabilities and ServiceNow’s AI platform for a variety of offerings that will modernize aging systems, enable autonomous IT operations, and help organizations evolve existing systems rather than replace them, the companies stated. <a href="https://www.servicenow.com/platform.html">ServiceNow says its AI-Platform</a> offers a workflow layer that sits on top of an enterprise’s existing systems and helps automate work across them.</p>



<p>Decades of deeply interconnected legacy systems are the biggest barrier to moving fast on AI, the companies <a href="https://newsroom.ibm.com/2026-06-11-ibm-and-servicenow-expand-collaboration-to-unlock-enterprise-data-for-ai-at-scale">stated</a>. Their pairings will take advantage of Big Blue’s expertise in working with large systems, such as <a href="https://www.networkworld.com/article/4025950/ibm-turns-on-ai-simplifies-programming-in-new-mainframe-os-release.html">its mainframe environment</a>, and extensive legacy applications, along with ServiceNow’s workflow and <a href="https://www.networkworld.com/article/3978731/servicenow-launches-ai-agent-command-center-communication-backbone.html">agent management</a> platforms.</p>



<p>“Most enterprises have the ambition to deploy agentic AI, but lack the foundation to run it at scale,” said John Aisien, senior vice president and general manager, central product management, security and risk, at ServiceNow. “IBM brings the tooling to modernize the systems and extend ServiceNow’s data capabilities. ServiceNow provides the platform to put that data to work across every workflow in the business.”</p>



<p>The vendors will focus on three core services that will be available in the second half of 2026:</p>



<ul class="wp-block-list">
<li><strong>Application modernization</strong>: Scans and refactors legacy systems using tools like IBM Bob, Enterprise Application runtime (Java) and IBM watsonx.data to help enterprises bring existing applications into the AI era without starting from scratch.</li>



<li><strong>Autonomous infrastructure operations</strong>: Integrates Red Hat Ansible, IBM Bob, Instana, Hashicorp Terraform, and Hashicorp Vault into ServiceNow IT workflows to detect, remediate, and resolve issues before they affect the business.</li>



<li><strong>Data governance</strong>: Extends ServiceNow Workflow Data Fabric with IBM watsonx.data to unlock key capabilities like Data Quality, Observability, Master Data Management – employing the ServiceNow Data Catalog so that mutual customers can keep track of their AI-ready data.</li>
</ul>



<p>IBM and ServiceNow have a long-standing <a href="https://www.deloitte.com/us/en/services/consulting/articles/ibm-servicenow-sam-accelerator.html">relationship</a>, having <a href="https://newsroom.ibm.com/2024-05-08-ServiceNow-and-IBM-Collaborate-to-Accelerate-the-Impact-of-Generative-AI-Across-the-Enterprise">worked</a> together to help large enterprise customers implement everything from cloud computing, automation, and security to IT service management and observability technologies. </p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management]]></title>
<description><![CDATA[Torrance, United States / California, 11th June 2026, CyberNewswire]]></description>
<link>https://tsecurity.de/de/3590852/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3590852/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</guid>
<pubDate>Thu, 11 Jun 2026 16:23:38 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Torrance, United States / California, 11th June 2026, CyberNewswire]]></content:encoded>
</item>
<item>
<title><![CDATA[Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management]]></title>
<description><![CDATA[Torrance, United States / California, 11th June 2026, CyberNewswire This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of…
Read more →
The post Crimina...]]></description>
<link>https://tsecurity.de/de/3590842/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3590842/it-security-nachrichten/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/</guid>
<pubDate>Thu, 11 Jun 2026 16:23:26 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Torrance, United States / California, 11th June 2026, CyberNewswire This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/criminal-ip-at-infosecurity-europe-2026-introducing-aitem-the-next-chapter-of-attack-surface-management/">Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[This Week In Rust: This Week in Rust 655]]></title>
<description><![CDATA[Hello and welcome to another issue of This Week in Rust!
Rust is a programming language empowering everyone to build reliable and efficient software.
This is a weekly summary of its progress and community.
Want something mentioned? Tag us at
@thisweekinrust.bsky.social on Bluesky or
@ThisWeekinRu...]]></description>
<link>https://tsecurity.de/de/3589813/tools/this-week-in-rust-this-week-in-rust-655/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3589813/tools/this-week-in-rust-this-week-in-rust-655/</guid>
<pubDate>Thu, 11 Jun 2026 10:13:12 +0200</pubDate>
<category>💾  Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Hello and welcome to another issue of <em>This Week in Rust</em>!
<a href="https://www.rust-lang.org/">Rust</a> is a programming language empowering everyone to build reliable and efficient software.
This is a weekly summary of its progress and community.
Want something mentioned? Tag us at
<a href="https://bsky.app/profile/thisweekinrust.bsky.social">@thisweekinrust.bsky.social</a> on Bluesky or
<a href="https://mastodon.social/@thisweekinrust">@ThisWeekinRust</a> on mastodon.social, or
<a href="https://github.com/rust-lang/this-week-in-rust">send us a pull request</a>.
Want to get involved? <a href="https://github.com/rust-lang/rust/blob/main/CONTRIBUTING.md">We love contributions</a>.</p>
<p><em>This Week in Rust</em> is openly developed <a href="https://github.com/rust-lang/this-week-in-rust">on GitHub</a> and archives can be viewed at <a href="https://this-week-in-rust.org/">this-week-in-rust.org</a>.
If you find any errors in this week's issue, <a href="https://github.com/rust-lang/this-week-in-rust/pulls">please submit a PR</a>.</p>
<p>Want TWIR in your inbox? <a href="https://this-week-in-rust.us11.list-manage.com/subscribe?u=fd84c1c757e02889a9b08d289&amp;id=0ed8b72485">Subscribe here</a>.</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#updates-from-rust-community">Updates from Rust Community</a></h4>


<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#official">Official</a></h5>
<ul>
<li><a href="https://blog.rust-lang.org/inside-rust/2026/06/04/how-josh-helps-rust-manage-code-across-multiple-repositories/">How Josh helps Rust manage code across multiple repositories</a></li>
<li><a href="https://blog.rust-lang.org/inside-rust/2026/06/03/maintainer-spotlight-tiffany-pek-yuan-tiif/">Maintainer spotlight: Tiffany Pek Yuan (@tiif)</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#newsletters">Newsletters</a></h5>
<ul>
<li><a href="https://rust-osdev.com/this-month/2026-05/">This Month in Rust OSDev: May 2026</a></li>
<li><a href="https://www.theembeddedrustacean.com/p/the-embedded-rustacean-issue-73">The Embedded Rustacean Issue #73</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#projecttooling-updates">Project/Tooling Updates</a></h5>
<ul>
<li><a href="https://kerkour.com/stdx">Announcing stdx, Rust's extended standard library</a></li>
<li><a href="https://medium.com/p/dc57a4631f8b?postPublishedType=initial">OmniScope 0.2.0 released:FFI static detection tool based on LLVM IR</a></li>
<li><a href="https://asterinas.github.io/2026/06/04/announcing-asterinas-0.18.0.html">Announcing Asterinas 0.18.0</a></li>
<li><a href="https://github.com/wilsonglasser/oryxis/releases/tag/v0.8.0">Oryxis SSH 0.8: split panes</a></li>
<li><a href="https://ratatui.rs/highlights/v0301/">Ratatui 0.30.1 is released - a Rust library for cooking up terminal user interfaces</a></li>
<li><a href="https://utoo.land/en/docs/blog/utoopack-intro">@utoo/pack: A Next-Generation Build Tool Based on Turbopack</a></li>
<li><a href="https://felipebalbi.github.io/pico-de-gallo/">Pico de Gallo - a USB-attached protocol bridge for developing embedded-hal drivers on your laptop</a></li>
<li><a href="https://kunobi.ninja/blog/kache-v0-5-0">kache 0.5.0: designing a correct compile-cache key</a></li>
<li><a href="https://www.veszelovszki.com/a/smb2/">Announcing smb2: a very fast pure-Rust SMB2/3 client</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#observationsthoughts">Observations/Thoughts</a></h5>
<ul>
<li><a href="https://smallcultfollowing.com/babysteps/blog/2026/06/09/only-bounds/">Only Bounds</a></li>
<li><a href="https://wasmer.io/posts/ported-wasmer-backend-django-to-rust">Porting our Django backend to Rust improved the infra usage by 90%</a></li>
<li><a href="https://wubingzheng.github.io/en/Decimal-Crates-Comparison.html">Decimal Crates Comparison and Benchmark</a> | <a href="https://wubingzheng.github.io/zh/Decimal-Crates-Comparison.html">Chinese version</a></li>
<li><a href="https://teaql.io/blog/robot-task-board-showcase/">TeaQL Robot Task Board: a Rust TUI showcase for auditable business workflows</a></li>
<li>[video] <a href="https://www.youtube.com/watch?v=QFQkqFSg8Z4">Rayon is NOT for games - use this instead</a></li>
<li>[audio] <a href="https://corrode.dev/podcast/s06e05-veo/">Veo with Anders Hellerup Madsen and Gorm Casper</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-walkthroughs">Rust Walkthroughs</a></h5>
<ul>
<li>[series] <a href="https://aibodh.com/posts/async-rust-chapter-1-hands-on-intro-to-async-rust/">Who Runs Your Rust Future? Hands-On Intro to Async Rust</a></li>
<li><a href="https://villagesql.com/blog/rust/">Extend MySQL Using Rust</a></li>
<li><a href="https://blog.sheerluck.dev/posts/learn-rust-smart-pointers-and-interior-mutability-by-building-git-commit-graph-viewer/">Learn Rust Smart Pointers and Interior Mutability by Building Git Commit Graph Viewer</a></li>
<li><a href="https://rustarians.com/heap-underflow/">heap underflow: classic algorithm solutions in idiomatic Rust, runnable in the browser</a></li>
</ul>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#crate-of-the-week">Crate of the Week</a></h4>
<p>This week's crate is <a href="https://github.com/handewo/rustion">rustion</a>, a SSH bastion server.</p>
<p>Thanks to <a href="https://users.rust-lang.org/t/crate-of-the-week/2704/1610">handewo</a> for the self-suggestion!</p>
<p><a href="https://users.rust-lang.org/t/crate-of-the-week/2704">Please submit your suggestions and votes for next week</a>!</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#calls-for-testing">Calls for Testing</a></h4>
<p>An important step for RFC implementation is for people to experiment with the
implementation and give feedback, especially before stabilization.</p>
<p>If you are a feature implementer and would like your RFC to appear in this list, add a
<code>call-for-testing</code> label to your RFC along with a comment providing testing instructions and/or
guidance on which aspect(s) of the feature need testing.</p>
<p><em>No calls for testing were issued this week by
<a href="https://github.com/rust-lang/rust/issues?q=state%3Aopen%20label%3Acall-for-testing%20state%3Aopen">Rust</a>,
<a href="https://github.com/rust-lang/cargo/issues?q=state%3Aopen%20label%3Acall-for-testing%20state%3Aopen">Cargo</a>,
<a href="https://github.com/rust-lang/rustup/issues?q=state%3Aopen%20label%3Acall-for-testing%20state%3Aopen">Rustup</a> or
<a href="https://github.com/rust-lang/rfcs/issues?q=label%3Acall-for-testing%20state%3Aopen">Rust language RFCs</a>.</em></p>
<p><a href="https://github.com/rust-lang/this-week-in-rust/issues">Let us know</a> if you would like your feature to be tracked as a part of this list.</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#call-for-participation-projects-and-speakers">Call for Participation; projects and speakers</a></h4>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#cfp-projects">CFP - Projects</a></h5>
<p>Always wanted to contribute to open-source projects but did not know where to start?
Every week we highlight some tasks from the Rust community for you to pick and get started!</p>
<p>Some of these tasks may also have mentors available, visit the task page for more information.</p>

<ul>
<li><a href="https://github.com/ansidium/cuda-oxide-windows/issues/1">cuda-oxide Windows fork - test the Windows MSVC release on more CUDA/Windows setups</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/38">openslate - add unit tests for slugify() in api/src/notes.rs</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/70">openslate - add integration tests for notes CRUD in api/src/notes.rs</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/96">openslate - add integration tests for auth flow in api/src/users.rs</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/89">openslate - add unit tests for build_fts_query() in api/src/search.rs</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/106">openslate - add integration tests for auth middleware and logout in api/src/auth.rs</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/85">openslate - add integration tests for media endpoints (DB layer) in api/src/media.rs</a></li>
<li><a href="https://github.com/MrSheerluck/openslate/issues/40">openslate - add unit tests for ext_from_mime() and filename_from_url() in api/src/media.rs</a></li>
<li><a href="https://github.com/satyakwok/reliakit/issues/91">reliakit - add a typed_csv example to the umbrella crate</a></li>
<li><a href="https://github.com/satyakwok/reliakit/issues/92">reliakit - implement CsvField for char</a></li>
<li><a href="https://github.com/satyakwok/reliakit/issues/107">reliakit - implement CsvField for the core::net address types</a></li>
<li><a href="https://github.com/satyakwok/reliakit/issues/95">reliakit - write a short "which resilience block do I use?" guide</a></li>
<li><a href="https://github.com/satyakwok/reliakit/issues/94">reliakit - extract a reusable rolling-window counter from RollingBreaker</a></li>
</ul>



<p>If you are a Rust project owner and are looking for contributors, please submit tasks <a href="https://github.com/rust-lang/this-week-in-rust?tab=readme-ov-file#call-for-participation-guidelines">here</a> or through a <a href="https://github.com/rust-lang/this-week-in-rust">PR to TWiR</a> or by reaching out on <a href="https://bsky.app/profile/thisweekinrust.bsky.social">Bluesky</a> or <a href="https://mastodon.social/@thisweekinrust">Mastodon</a>!</p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#cfp-events">CFP - Events</a></h5>
<p>Are you a new or experienced speaker looking for a place to share something cool? This section highlights events that are being planned and are accepting submissions to join their event as a speaker.</p>



<p>If you are an event organizer hoping to expand the reach of your event, please submit a link to the website through a <a href="https://github.com/rust-lang/this-week-in-rust">PR to TWiR</a> or by reaching out on <a href="https://bsky.app/profile/thisweekinrust.bsky.social">Bluesky</a> or <a href="https://mastodon.social/@thisweekinrust">Mastodon</a>!</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#updates-from-the-rust-project">Updates from the Rust Project</a></h4>
<p>526 pull requests were <a href="https://github.com/search?q=is%3Apr+org%3Arust-lang+is%3Amerged+merged%3A2026-06-02..2026-06-09">merged in the last week</a></p>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#compiler">Compiler</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust/pull/157016">add <code>extern "tail"</code> calling convention</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/148820">add very basic "comptime" fn implementation</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157009">avoid <code>unreachable_code</code> on required return values</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157540">cleanup and optimize <code>render_impls</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/156155">macros: report unbound metavariables directly</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157252">rewrite <code>rustc_span::symbol::Interner</code> to avoid double hashing</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/155338">staticlib hide internal symbols</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#library">Library</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust/pull/154742">add APIs for case folding to the standard library</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/154608">add <code>_value</code> API for number literals in proc-macro</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/156119">further optimize <code>SliceIndex&lt;str&gt;</code> impl for <code>Range&lt;usize&gt;</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/143511">improve TLS codegen by marking the panic/init path as cold</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/155607">perf: use <code>get_unchecked</code> for <code>TwoWaySearcher</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/156840">stabilize <code>PathBuf::into_string</code></a></li>
<li><a href="https://github.com/rust-lang/rust/pull/156222">stabilize <code>Result::map_or_default</code> and <code>Option::map_or_default</code></a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#cargo">Cargo</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/cargo/pull/17081">strip CR from <code>cargo:token-from-stdout</code></a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rustdoc">Rustdoc</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust/pull/157262">IXCRE: preserve sizedness bounds on type params belonging to the parent item</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157438">don't link <code>doc(hidden)</code> associated type projections</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157233">fix trait impl ordering</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157310">render <code>impl</code> restriction</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#clippy">Clippy</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17122">support <code>iter_mut</code> in <code>ITER_NEXT_SLICE</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17173"><code>borrowed_box</code>: clean-up, improve suggestion message</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17144"><code>double_must_use</code>: make the lint machine-applicable in single-attribute case</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17174"><code>iter_cloned_collect</code>: split off the suggestion from the main message</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17037">add <code>manual_isolate_lowest_one</code> lint</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17146">detect more ranges in <code>single_range_in_vec_init</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17131">do not trigger <code>inline_trait_bounds</code> on auto-derived code</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17031">extend <code>extra_unused_lifetimes</code> for spurious <code>for&lt;'a&gt;</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17141"><code>large_const_arrays</code>: check nested large arrays</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17023">fix <code>explicit_counter_loop</code> false positive when the counter is only modified inside the <code>else</code> block of <code>let...else</code> binding</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17130">fix <code>result_large_err</code> and <code>result_unit_err</code> not triggering on async functions</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17181">fix <code>unused_async_trait_impl</code> suggestions with return statements</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17164">fix lints duplications in <code>unknown_attribute</code> and <code>renamed_builtin_attr</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17121">obtaining the metadata of a const pointer is a const operation</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17135">perf: avoid cloning associated items in <code>empty_line_after</code></a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17168">perf: skip the <code>boxed_local</code> walk for functions without a Box parameter</a></li>
<li><a href="https://github.com/rust-lang/rust-clippy/pull/17137">perf: skip the <code>inline_always</code> relevance walk for items without the attribute</a></li>
</ul>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-analyzer">Rust-Analyzer</a></h6>
<ul>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22469"><code>feat(diagnostics)</code>: emit error for infer vars in non-inference contexts</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22505">adopt uv's AI policy</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22495">distribute windows builts with mimalloc</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22481">lower field defaults to <code>rustc_type_ir::Const</code>s</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22522"><code>RunnableKind::Test</code> should map to <code>project_json::RunnableKind::TestOne</code></a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22523"><code>extract_function</code> misses <code>&amp;mut</code> for <code>container[i].mut_method()</code></a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22520">do not emit a "type annotations needed" error on <code>include_bytes!()</code> where the array length cannot be inferred</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22519">no generate unused generic params in trait sign</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22524">parse OR pattern types</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22444">rename schema subItems with <code>sub_items</code></a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22448">implement <code>rust-analyzer/evaluatePredicate</code> lsp extension</a></li>
<li><a href="https://github.com/rust-lang/rust-analyzer/pull/22512">parse unnamed <code>enum</code> variants</a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust-compiler-performance-triage">Rust Compiler Performance Triage</a></h5>
<p>A fairly noisy week, with a bunch of small regressions contained within,
leading to a slight increase on average in instruction counts. This week had a
lot of large rollups, likely due to some CI problems, but thankfully many of
those came with pre-triaged perf results by the time (thank you to those
triagers!). Roughly similar slight regressions for cycles and wall times across
the week.</p>
<p>Triage done by <strong>@simulacrum</strong>.
Revision range: <a href="https://perf.rust-lang.org/?start=4804ad7e93e1b31f4605b7083871d0d3d85a2afe&amp;end=f3ef3bd882dd24a275a60701a67c3bb330edd8c1&amp;absolute=false&amp;stat=instructions%3Au">4804ad7e..f3ef3bd8</a></p>
<p>2 Regressions, 0 Improvements, 10 Mixed; 5 of them in rollups
32 artifact comparisons made in total</p>
<p><a href="https://github.com/rust-lang/rustc-perf/blob/master/triage/2026/2026-06-08.md">Full report here</a></p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#approved-rfcs"></a><a href="https://github.com/rust-lang/rfcs/commits/master">Approved RFCs</a></h5>
<p>Changes to Rust follow the Rust <a href="https://github.com/rust-lang/rfcs#rust-rfcs">RFC (request for comments) process</a>. These
are the RFCs that were approved for implementation this week:</p>
<ul>
<li><a href="https://github.com/rust-lang/rfcs/pull/3808"><code>#![register_{attribute,lint}_tool]</code></a></li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#final-comment-period">Final Comment Period</a></h5>
<p>Every week, <a href="https://www.rust-lang.org/team.html">the team</a> announces the 'final comment period' for RFCs and key PRs
which are reaching a decision. Express your opinions now.</p>
<h6><a class="toclink" href="https://this-week-in-rust.org/atom.xml#tracking-issues-prs">Tracking Issues &amp; PRs</a></h6>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#rust"></a><a href="https://github.com/rust-lang/rust/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Rust</a>
<ul>
<li><a href="https://github.com/rust-lang/rust/pull/155421">Document panic in <code>RangeInclusive::from(legacy::RangeInclusive)</code></a></li>
<li><a href="https://github.com/rust-lang/rust/issues/116258">Tracking Issue for explicit-endian String::from_utf16</a></li>
<li><a href="https://github.com/rust-lang/rust/issues/126769">Tracking Issue for <code>substr_range</code> and related methods</a></li>
<li><a href="https://github.com/rust-lang/rust/issues/153990">Decide and document where stdarch intrinsics are allowed to diverge from asm behavior</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/155750">Document that <code>ManuallyDrop</code>'s Box interaction has been fixed</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/155739">Add temporary scope to assert_eq and assert_ne</a></li>
<li><a href="https://github.com/rust-lang/rust/issues/153863">Clean up crate type names to fix dylib vs staticlib confusion</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/156807">Add <code>T: PartialEq</code> bounds to derived <code>StructuralPartialEq</code> impls.</a></li>
<li><a href="https://github.com/rust-lang/rust/pull/157029">stabilize feature <code>float_algebraic</code></a></li>
</ul>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#compiler-team-mcps-only"></a><a href="https://github.com/rust-lang/compiler-team/issues?q=label%3Amajor-change%20label%3Afinal-comment-period%20state%3Aopen">Compiler Team</a> <a href="https://forge.rust-lang.org/compiler/mcp.html">(MCPs only)</a>
<ul>
<li><a href="https://github.com/rust-lang/compiler-team/issues/999">Deny todo!() in tidy</a></li>
</ul>
<a class="toclink" href="https://this-week-in-rust.org/atom.xml#leadership-council"></a><a href="https://github.com/rust-lang/leadership-council/issues?q=state%3Aopen%20label%3Afinal-comment-period%20state%3Aopen">Leadership Council</a>
<ul>
<li><a href="https://github.com/rust-lang/leadership-council/issues/300">Rust All Hands 2027</a></li>
</ul>
<p><em>No Items entered Final Comment Period this week for
<a href="https://github.com/rust-lang/rfcs/issues?q=state%3Aopen%20label%3Afinal-comment-period%20state%3Aopen">Rust RFCs</a>,
<a href="https://github.com/rust-lang/cargo/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Cargo</a>,
<a href="https://github.com/rust-lang/lang-team/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Language Team</a>,
<a href="https://github.com/rust-lang/reference/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Language Reference</a> or
<a href="https://github.com/rust-lang/unsafe-code-guidelines/issues?q=is%3Aopen%20label%3Afinal-comment-period%20sort%3Aupdated-desc%20state%3Aopen">Unsafe Code Guidelines</a>.</em></p>
<p>Let us know if you would like your PRs, Tracking Issues or RFCs to be tracked as a part of this list.</p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#new-and-updated-rfcs"></a><a href="https://github.com/rust-lang/rfcs/pulls">New and Updated RFCs</a></h5>
<ul>
<li><a href="https://github.com/rust-lang/rfcs/pull/3968">RFC for convenient, explicit closure capture using move($expr) expressions</a></li>
</ul>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#upcoming-events">Upcoming Events</a></h4>
<p>Rusty Events between 2026-06-10 - 2026-07-08 🦀</p>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#virtual">Virtual</a></h5>
<ul>
<li>2026-06-10 | Virtual (Girona, ES) | <a href="https://lu.ma/rust-girona">Rust Girona</a><ul>
<li><a href="https://luma.com/3bcnx1jb"><strong>Weekly coding session</strong></a></li>
</ul>
</li>
<li>2026-06-12 | Virtual (Kenya, KE) | <a href="https://luma.com/user/rustaceanskenya">RustaceansKenya</a><ul>
<li><a href="https://luma.com/vuxir9w8"><strong>RUST FOR CIVIC TECH</strong></a></li>
</ul>
</li>
<li>2026-06-16 | Virtual (Washington, DC, US) | <a href="https://www.meetup.com/rustdc">Rust DC</a><ul>
<li><a href="https://www.meetup.com/rustdc/events/314985751/"><strong>Mid-month Rustful</strong></a></li>
</ul>
</li>
<li>2026-06-17 | Hybrid (Vancouver, BC, CA) | <a href="https://www.meetup.com/vancouver-rust">Vancouver Rust</a><ul>
<li><a href="https://www.meetup.com/vancouver-rust/events/314000478/"><strong>Rust Study/Hack/Hang-out</strong></a></li>
</ul>
</li>
<li>2026-06-17 | Virtual (Girona, ES) | <a href="https://lu.ma/rust-girona">Rust Girona</a><ul>
<li><a href="https://luma.com/ekws5nr4"><strong>Weekly coding session</strong></a></li>
</ul>
</li>
<li>2026-06-18 | Hybrid (Seattle, WA, US) | <a href="https://www.meetup.com/join-srug">Seattle Rust User Group</a><ul>
<li><a href="https://www.meetup.com/seattle-rust-user-group/events/314236370/"><strong>June, 2026 SRUG (Seattle Rust User Group) Meetup</strong></a></li>
</ul>
</li>
<li>2026-06-18 | Virtual (Berlin, DE) | <a href="https://www.meetup.com/rust-berlin">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/308455931/"><strong>Rust Hack and Learn</strong></a></li>
</ul>
</li>
<li>2026-06-21 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/314329044/"><strong>Rust Deep Learning: Third Sunday</strong></a></li>
</ul>
</li>
<li>2026-06-23 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/310254779/"><strong>Fourth Tuesday</strong></a></li>
</ul>
</li>
<li>2026-06-23 | Virtual (London, UK) | <a href="https://www.meetup.com/women-in-rust">Women in Rust</a><ul>
<li><a href="https://www.meetup.com/women-in-rust/events/313767883/"><strong>Lunch &amp; Learn: What the heck are monads - and how do we fake them in Rust</strong></a></li>
</ul>
</li>
<li>2026-07-01 | Virtual (Indianapolis, IN, US) | <a href="https://www.meetup.com/indyrs">Indy Rust</a><ul>
<li><a href="https://www.meetup.com/indyrs/events/wqzhftyjckbcb/"><strong>Indy.rs - with Social Distancing</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Virtual (Berlin, DE) | <a href="https://www.meetup.com/rust-berlin/events/">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/308455932/"><strong>Rust Hack and Learn</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Virtual (Nürnberg, DE) | <a href="https://www.meetup.com/rust-noris/events/">Rust Nuremberg</a><ul>
<li><a href="https://www.meetup.com/rust-noris/events/313345243/"><strong>Rust Nürnberg online</strong></a></li>
</ul>
</li>
<li>2026-07-05 | Virtual (Dallas, TX, US) | <a href="https://www.meetup.com/dallasrust/events/">Dallas Rust User Meetup</a><ul>
<li><a href="https://www.meetup.com/dallasrust/events/314095287/"><strong>Rust Deep Learning: First Sunday</strong></a></li>
</ul>
</li>
<li>2026-07-07 | Virtual (London, GB) | <a href="https://www.meetup.com/women-in-rust/events/">Women in Rust</a><ul>
<li><a href="https://www.meetup.com/women-in-rust/events/315060981/"><strong>👋 Community Catch Up</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#europe">Europe</a></h5>
<ul>
<li>2026-06-10 | Köln, DE | <a href="https://www.meetup.com/rust-cologne-bonn/events/">Rust Cologne</a><ul>
<li><a href="https://www.meetup.com/rustcologne/events/315090338/"><strong>Rust in June: Speedy Rust</strong></a></li>
</ul>
</li>
<li>2026-06-10 | München, DE | <a href="https://www.meetup.com/rust-munich">Rust Munich</a><ul>
<li><a href="https://www.meetup.com/rust-munich/events/313791798/"><strong>Rust Munich 2026 / 2 - Hacking Evening</strong></a></li>
</ul>
</li>
<li>2026-06-11 | Berlin, DE | <a href="https://www.meetup.com/rust-berlin/events/">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/315088919/"><strong>Rust Berlin on location 🏳️‍🌈 - Edition 014</strong></a></li>
</ul>
</li>
<li>2026-06-11 | Switzerland, CH | <a href="https://www.posttenebraslab.ch/wiki/events/start">PostTenebrasLab</a><ul>
<li><a href="https://www.posttenebraslab.ch/wiki/events/monthly_meeting/rust_meetup"><strong>Rust Meetup Geneva</strong></a></li>
</ul>
</li>
<li>2026-06-12 - 2026-06-14 | Kraków, PL | <a href="https://rustmeet.eu/">Rustmeet</a><ul>
<li><a href="https://rustmeet.eu/"><strong>Rustmeet</strong></a></li>
</ul>
</li>
<li>2026-06-16 | Leipzig, DE | <a href="https://www.meetup.com/rust-modern-systems-programming-in-leipzig">Rust - Modern Systems Programming in Leipzig</a><ul>
<li><a href="https://www.meetup.com/rust-modern-systems-programming-in-leipzig/events/313813937/"><strong>Interactive: Everything is Open Source</strong></a></li>
</ul>
</li>
<li>2026-06-16 | Milano, IT | <a href="https://www.meetup.com/rust-language-milano">Rust Language Milan</a><ul>
<li><a href="https://www.meetup.com/rust-language-milan/events/314766950/"><strong>Real-time planning in Rust: SolverForge &amp; SERIO</strong></a></li>
</ul>
</li>
<li>2026-06-18 | Aarhus, DK | <a href="https://www.meetup.com/rust-aarhus">Rust Aarhus</a><ul>
<li><a href="https://www.meetup.com/rust-aarhus/events/314965238/"><strong>Talk Night at Danske Commodities</strong></a></li>
</ul>
</li>
<li>2026-06-18 | Barcelona, ES | <a href="https://www.meetup.com/bcnrust/events/">BcnRust</a><ul>
<li><a href="https://www.meetup.com/bcnrust/events/315094938/"><strong>21st BcnRust Meetup</strong></a></li>
</ul>
</li>
<li>2026-06-19 | Dresden, DE | <a href="https://github.com/rust-dresden">Rust Dresden</a><ul>
<li><a href="https://pretix.eu/rust-dresden/on-location-2"><strong>Second Meetup</strong></a></li>
</ul>
</li>
<li>2026-06-23 | Paris, FR | <a href="https://www.meetup.com/rust-paris">Rust Paris</a><ul>
<li><a href="https://www.meetup.com/rust-paris/events/315040676/"><strong>Rust meetup #86</strong></a></li>
</ul>
</li>
<li>2026-06-23 | Warsaw, PL | <a href="https://luma.com/rust.in.warsaw">Rust Warsaw</a><ul>
<li><a href="https://luma.com/djs7ntfx"><strong>Rust Warsaw Meetup: June 2026</strong></a></li>
</ul>
</li>
<li>2026-06-25 | Berlin, DE | <a href="https://www.meetup.com/rust-berlin">Rust Berlin</a><ul>
<li><a href="https://www.meetup.com/rust-berlin/events/314396600/"><strong>Rust Berlin Talks: The next generation</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Edinburgh, GB | <a href="https://www.meetup.com/rust-edi/events/">Rust and Friends</a><ul>
<li><a href="https://www.meetup.com/rust-and-friends/events/314941098/"><strong>Bevy, Bits, &amp; Cats (Rust July Talks)</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Enschede, OV, NL | <a href="https://www.meetup.com/dutch-rust-meetup/events/">Baseflow Tech Meetups</a><ul>
<li><a href="https://www.meetup.com/baseflow-tech-meetups/events/315099547/"><strong>AI Summit</strong></a></li>
</ul>
</li>
<li>2026-07-08 | Dublin, IE | <a href="https://www.meetup.com/rust-dublin/events/">Rust Dublin</a><ul>
<li><a href="https://www.meetup.com/rust-dublin/events/315150327/"><strong>Join us live and INPERSON for Rust 261</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#north-america">North America</a></h5>
<ul>
<li>2026-06-11 | Lehi, UT, US | <a href="https://www.meetup.com/utah-rust">Utah Rust</a><ul>
<li><a href="https://www.meetup.com/utah-rust/events/314696643/"><strong>Utah Rust June Meetup</strong></a></li>
</ul>
</li>
<li>2026-06-11 | Mountain View, CA, US | <a href="https://www.meetup.com/hackerdojo/events/">Hacker Dojo</a><ul>
<li><a href="https://www.meetup.com/hackerdojo/events/314825006/"><strong>RUST MEETUP at HACKER DOJO</strong></a></li>
</ul>
</li>
<li>2026-06-11 | San Diego, CA, US | <a href="https://www.meetup.com/san-diego-rust">San Diego Rust</a><ul>
<li><a href="https://www.meetup.com/san-diego-rust/events/313721899/"><strong>San Diego Rust June Meetup - Back in person!</strong></a></li>
</ul>
</li>
<li>2026-06-16 | San Francisco, CA, US | <a href="https://www.meetup.com/san-francisco-rust-study-group">San Francisco Rust Study Group</a><ul>
<li><a href="https://www.meetup.com/san-francisco-rust-study-group/events/314989012/"><strong>Rust Hacking in Person</strong></a></li>
</ul>
</li>
<li>2026-06-16 | San Francisco, CA, US | <a href="https://www.meetup.com/san-francisco-rust-study-group">San Francisco Rust Study Group</a><ul>
<li><a href="https://www.meetup.com/san-francisco-rust-study-group/events/ghhwqtyjcjbvb/"><strong>Rust Hacking in Person</strong></a></li>
</ul>
</li>
<li>2026-06-17 | Hybrid (Vancouver, BC, CA) | <a href="https://www.meetup.com/vancouver-rust">Vancouver Rust</a><ul>
<li><a href="https://www.meetup.com/vancouver-rust/events/314000478/"><strong>Rust Study/Hack/Hang-out</strong></a></li>
</ul>
</li>
<li>2026-06-18 | Hybrid (Seattle, WA, US) | <a href="https://www.meetup.com/join-srug">Seattle Rust User Group</a><ul>
<li><a href="https://www.meetup.com/seattle-rust-user-group/events/314236370/"><strong>June, 2026 SRUG (Seattle Rust User Group) Meetup</strong></a></li>
</ul>
</li>
<li>2026-06-24 | Austin, TX, US | <a href="https://www.meetup.com/rust-atx">Rust ATX</a><ul>
<li><a href="https://www.meetup.com/rust-atx/events/xvkdgtyjcjbgc/"><strong>Rust Lunch - Fareground</strong></a></li>
</ul>
</li>
<li>2026-06-24 | Los Angeles, CA, US | <a href="https://www.meetup.com/rust-los-angeles">Rust Los Angeles</a><ul>
<li><a href="https://www.meetup.com/rust-los-angeles/events/314386080/"><strong>Rust LA: Rust-Based Constraint Solvers in 2D Sketching with Zoo Technologies</strong></a></li>
</ul>
</li>
<li>2026-06-25 | Atlanta, GA, US | <a href="https://www.meetup.com/rust-atl">Rust Atlanta</a><ul>
<li><a href="https://www.meetup.com/rust-atl/events/313539326/"><strong>Rust-Atl</strong></a></li>
</ul>
</li>
<li>2026-06-26 | New York, NY, US | <a href="https://www.meetup.com/rust-nyc">Rust NYC</a><ul>
<li><a href="https://www.meetup.com/rust-nyc/events/315014582/"><strong>Rust NYC's Big Summer Social</strong></a></li>
</ul>
</li>
<li>2026-07-02 | Saint Louis, MO, US | <a href="https://www.meetup.com/stl-rust/events/">STL Rust</a><ul>
<li><a href="https://www.meetup.com/stl-rust/events/315103359/"><strong>Git is easy?</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#oceania">Oceania</a></h5>
<ul>
<li>2026-06-11 | Brisbane City, QL, AU | <a href="https://www.meetup.com/rust-brisbane/events/">Rust Brisbane</a><ul>
<li><a href="https://www.meetup.com/rust-brisbane/events/315092980/"><strong>Rust Brisbane • June 2026</strong></a></li>
</ul>
</li>
<li>2026-06-25 | Melbourne, AU | <a href="https://www.meetup.com/rust-melbourne">Rust Melbourne</a><ul>
<li><a href="https://www.meetup.com/rust-melbourne/events/315039461/"><strong>Rust Melbourne June 2026</strong></a></li>
</ul>
</li>
</ul>
<h5><a class="toclink" href="https://this-week-in-rust.org/atom.xml#south-america">South America</a></h5>
<ul>
<li>2026-06-18 | Florianópolis, BR | <a href="https://luma.com/rust-sc">Rust SC</a><ul>
<li><a href="https://luma.com/acinctdf"><strong>Rust Floripa</strong></a></li>
</ul>
</li>
</ul>
<p>If you are running a Rust event please add it to the <a href="https://www.google.com/calendar/embed?src=apd9vmbc22egenmtu5l6c5jbfc%40group.calendar.google.com">calendar</a> to get
it mentioned here. Please remember to add a link to the event too.
Email the <a href="mailto:community-team@rust-lang.org">Rust Community Team</a> for access.</p>
<h4><a class="toclink" href="https://this-week-in-rust.org/atom.xml#jobs">Jobs</a></h4>
<p>Please see the latest <a href="https://www.reddit.com/r/rust/comments/1ttbtf5/official_rrust_whos_hiring_thread_for_jobseekers/">Who's Hiring thread on r/rust</a></p>
<h3><a class="toclink" href="https://this-week-in-rust.org/atom.xml#quote-of-the-week">Quote of the Week</a></h3>
<blockquote>
<p>It's a footgun, yes, but it's a sound footgun.</p>
</blockquote>
<p>– <a href="https://github.com/rust-lang/rust/pull/155750#discussion_r3356323620">Prof. Dr. Ralf Jung on github</a></p>
<p>Thanks to <a href="https://users.rust-lang.org/t/twir-quote-of-the-week/328/1779">Theemathas</a> for the suggestion!</p>
<p><a href="https://users.rust-lang.org/t/twir-quote-of-the-week/328">Please submit quotes and vote for next week!</a></p>
<p>This Week in Rust is edited by:</p>
<ul>
<li><a href="https://github.com/nellshamrell">nellshamrell</a></li>
<li><a href="https://github.com/llogiq">llogiq</a></li>
<li><a href="https://github.com/ericseppanen">ericseppanen</a></li>
<li><a href="https://github.com/extrawurst">extrawurst</a></li>
<li><a href="https://github.com/U007D">U007D</a></li>
<li><a href="https://github.com/mariannegoldin">mariannegoldin</a></li>
<li><a href="https://github.com/bdillo">bdillo</a></li>
<li><a href="https://github.com/opeolluwa">opeolluwa</a></li>
<li><a href="https://github.com/bnchi">bnchi</a></li>
<li><a href="https://github.com/KannanPalani57">KannanPalani57</a></li>
<li><a href="https://github.com/tzilist">tzilist</a></li>
</ul>
<p><em>Email list hosting is sponsored by <a href="https://foundation.rust-lang.org/">The Rust Foundation</a></em></p>
<p><small><a href="https://www.reddit.com/r/rust/comments/1u2rz3a/this_week_in_rust_655/">Discuss on r/rust</a></small></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Microsoft feud escalates as researcher drops new Windows zero-day]]></title>
<description><![CDATA[The long-running feud between Microsoft and security researcher Nightmare Eclipse has entered a new chapter.



Eclipse, who has spent the past several months publicly releasing unpatched Windows vulnerabilities while sparring with Microsoft over vulnerability disclosure practices, has published ...]]></description>
<link>https://tsecurity.de/de/3587554/it-security-nachrichten/microsoft-feud-escalates-as-researcher-drops-new-windows-zero-day/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3587554/it-security-nachrichten/microsoft-feud-escalates-as-researcher-drops-new-windows-zero-day/</guid>
<pubDate>Wed, 10 Jun 2026 14:11:33 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>The long-running feud between Microsoft and security researcher Nightmare Eclipse has entered a new chapter.</p>



<p>Eclipse, who has spent the past several months publicly releasing unpatched Windows vulnerabilities while sparring with Microsoft over vulnerability disclosure practices, has published exploit code for a new zero-day flaw dubbed RoguePlanet.</p>



<p>The researcher said their exploit uses a race condition problem affecting Microsoft Defender, giving attackers less than a hundred percent odds at success, which can potentially allow SYSTEM-level privilege on even freshly updated Windows.</p>



<p>As <a href="https://www.csoonline.com/article/4160275/caught-quarantined-re-installed-redsun-turns-microsoft-defender-on-itself.html">before</a>, the exploit arrives just after Microsoft issued its <a href="https://blog.talosintelligence.com/microsoft-patch-tuesday-for-june-2026-snort-rules-and-prominent-vulnerabilities/" target="_blank" rel="noreferrer noopener">June 2026</a> Tuesday patches, where the company issued fixes for over 200 security flaws, including 32 critical ones. “The timing is a giveaway, MiniPlasma was released on May 13, 2026—exactly one day after Microsoft’s May Patch Tuesday cycle, ensuring defenders have no official vendor patch for weeks,” Agnidipta Sarkar, chief evangelist at ColorTokens, had said about Eclipse’s previous “MiniPlasma” <a href="https://www.csoonline.com/article/4172320/patched-windows-bug-resurfaces-6-years-later-as-working-system-level-exploit.html">disclosure</a>.</p>



<p>The exploit was dropped in a new GitHub repository, “MSNightmare,” surely a pointed reference to Microsoft, after GitHub (owned by Microsoft) removed Eclipse’s original repositories recently. Several earlier Eclipse disclosures were reportedly incorporated into <a href="https://www.csoonline.com/article/4175970/microsoft-patches-two-zero-day-flaws-in-defender.html">real-world attacks</a> shortly after exploit code became available, prompting warnings from Microsoft and multiple security vendors.</p>



<h2 class="wp-block-heading">The bug allows code execution through SYSTEM access</h2>



<p>In a June 9 blog <a href="https://deadeclipse666.blogspot.com/2026/06/rogueplanet-quick-history.html" target="_blank" rel="noreferrer noopener">post</a> titled “RoguePlanet, a quick history,” Eclipse wrote of an initial iteration of the Windows Defender bug. While technical details remain scarce, the blog did mention that it has to do with getting a victim to open a “.vhd(x) on a remote SMB server.”</p>



<p>Doing that, the writeup explained, would result in “Defender overwriting its own files and obviously the end outcome was an RCE.” A rough interpretation of the description is that the bug allows executing malicious metadata from a specially crafted virtual hard disk (.vhd) image stored on a remote Server Message Block (SMB) server.</p>



<p>Eclipse’s <a href="https://github.com/MSNightmare/RoguePlanet" target="_blank" rel="noreferrer noopener">PoC</a> exploit ultimately spawns a SYSTEM shell, allowing arbitrary code to be executed by a potential attacker.</p>



<p>A mid-May patch to Defender reportedly sealed the initial attack path detailed by Eclipse, making “junction attacks useless,” which had them re-write RoguePlanet to work around the fix. The current version of the exploit allegedly works against Windows 11 (official channel + Canary) and Windows 10 with the June 2026 patch installed.</p>



<p>The PoC code, however, gave out against Windows Server installations since standard users “Cannot mount an ISO image”. While Eclipse was “too drained” to redesign an exploit for this exception, they are certain an exploit is possible.</p>



<h2 class="wp-block-heading">The feud behind the flaws</h2>



<p>Microsoft recently <a href="https://github.com/Nightmare-Eclipse" target="_blank" rel="noreferrer noopener">removed</a> Eclipse’s GitHub accounts and also disabled their Microsoft Security Response Center (MSRC) access. Following the ban, GitLab also <a href="https://gitlab.com/nightmare-eclipse" target="_blank" rel="noreferrer noopener">suspended</a> the researcher’s secondary mirrors.</p>



<p>In a May 27 blog <a href="https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure?source=post_page-----0946117940a4---------------------------------------" target="_blank" rel="noreferrer noopener">post</a>, Microsoft criticized the lack of coordinated vulnerability disclosure and threatened legal action, stating that the public disclosures aided attackers and involved a digital crimes unit coordinating with law enforcement.</p>



<p>“The vulnerabilities known as <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091">RedSun</a>, <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498">UnDefend</a>, <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825">BlueHammer</a>, <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585">YellowKey</a>, GreenPlasma, and MiniPlasma were not responsibly disclosed,” the company wrote on Eclipse-disclosed bugs. “Uncoordinated disclosures that put proof-of-concept code for unpatched vulnerabilities into the hands of bad actors are never justifiable and have real-world consequences.”</p>



<p>Cybersecurity analyst Kevin Beamount <a href="https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4">called</a> Microsoft’s response a “dumpster fire of their own making.” Writing of a previous researcher going by the name “SandboxEscaper,” who similarly disclosed Microsoft bugs and published exploit codes, Beaumont pointed to Microsoft’s precedent for hiring such researchers in 2019.</p>



<p>“I’m making the point that Microsoft has very publicly hired somebody for doing the same thing Microsoft’s latest blog alleges is criminal behaviour,” Beaumont said.</p>



<p>Microsoft did not immediately respond to CSO’s request for a comment.</p>



<p>Eclipse announced its return on GitHub on June 9. “Yes, it’s GitHub again, Microsoft forgot that even if they banned my GitLab and GitHub accounts, they cannot unwrite my code. Once it’s public, you can’t remove it.”</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[DELTARUNE Chapter 5 arrives free on June 24]]></title>
<description><![CDATA[The insanely popular DELTARUNE from developer tobyfox (of UNDERTALE fame) is set for a big expansion, with DELTARUNE Chapter 5 arriving June 24th.Read the full article on GamingOnLinux.]]></description>
<link>https://tsecurity.de/de/3585479/linux-tipps/deltarune-chapter-5-arrives-free-on-june-24/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3585479/linux-tipps/deltarune-chapter-5-arrives-free-on-june-24/</guid>
<pubDate>Tue, 09 Jun 2026 19:55:06 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The insanely popular DELTARUNE from developer tobyfox (of UNDERTALE fame) is set for a big expansion, with DELTARUNE Chapter 5 arriving June 24th.<p><img src="https://www.gamingonlinux.com/uploads/articles/tagline_images/1388666728id29183gol.jpg" alt></p><p>Read the full article on <a href="https://www.gamingonlinux.com/2026/06/deltarune-chapter-5-arrives-free-on-june-24/">GamingOnLinux</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[The Bear season 5 finally has a trailer — and it could be the Hulu show's most stressful chapter yet]]></title>
<description><![CDATA[The Bear season 5 has a gripping new trailer that follows the aftermath of Carmy's retirement.]]></description>
<link>https://tsecurity.de/de/3584898/it-nachrichten/the-bear-season-5-finally-has-a-trailer-and-it-could-be-the-hulu-shows-most-stressful-chapter-yet/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3584898/it-nachrichten/the-bear-season-5-finally-has-a-trailer-and-it-could-be-the-hulu-shows-most-stressful-chapter-yet/</guid>
<pubDate>Tue, 09 Jun 2026 17:03:14 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The Bear season 5 has a gripping new trailer that follows the aftermath of Carmy's retirement.]]></content:encoded>
</item>
<item>
<title><![CDATA[State of Decay 3 Coming to PS5 in 2027 as Undead Labs Unveils Bigger Open World and New Survival Features]]></title>
<description><![CDATA[Undead Labs has finally revealed the first gameplay footage for State of Decay 3, giving players a closer look at the next chapter in its…
The post State of Decay 3 Coming to PS5 in 2027 as Undead Labs Unveils Bigger Open World and New Survival Features appeared first on OnMSFT.]]></description>
<link>https://tsecurity.de/de/3582926/windows-tipps/state-of-decay-3-coming-to-ps5-in-2027-as-undead-labs-unveils-bigger-open-world-and-new-survival-features/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3582926/windows-tipps/state-of-decay-3-coming-to-ps5-in-2027-as-undead-labs-unveils-bigger-open-world-and-new-survival-features/</guid>
<pubDate>Mon, 08 Jun 2026 23:11:02 +0200</pubDate>
<category>🪟 Windows Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Undead Labs has finally revealed the first gameplay footage for State of Decay 3, giving players a closer look at the next chapter in its…</p>
<p>The post <a href="https://onmsft.com/news/state-of-decay-3-coming-to-ps5-in-2027-as-undead-labs-unveils-bigger-open-world-and-new-survival-features/">State of Decay 3 Coming to PS5 in 2027 as Undead Labs Unveils Bigger Open World and New Survival Features</a> appeared first on <a href="https://onmsft.com/">OnMSFT</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Zillow co-founder and Seattle tech icon Rich Barton takes up residence in Las Vegas]]></title>
<description><![CDATA[Rich Barton, who co-founded Zillow and Expedia in the Seattle area, says he's now officially a Las Vegas resident, citing an empty nest and a new chapter. His move comes amid a heated debate over Washington's new taxes on wealthy residents. Read More]]></description>
<link>https://tsecurity.de/de/3581647/it-nachrichten/zillow-co-founder-and-seattle-tech-icon-rich-barton-takes-up-residence-in-las-vegas/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3581647/it-nachrichten/zillow-co-founder-and-seattle-tech-icon-rich-barton-takes-up-residence-in-las-vegas/</guid>
<pubDate>Mon, 08 Jun 2026 15:47:48 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<img width="1260" height="1008" src="https://cdn.geekwire.com/wp-content/uploads/2017/10/20171025_Zillow_Premier_Agent_Forum_92-1260x1008.jpg" class="webfeedsFeaturedVisual wp-post-image" alt="" decoding="async" fetchpriority="high" srcset="https://cdn.geekwire.com/wp-content/uploads/2017/10/20171025_Zillow_Premier_Agent_Forum_92-1260x1008.jpg 1260w, https://cdn.geekwire.com/wp-content/uploads/2017/10/20171025_Zillow_Premier_Agent_Forum_92-768x614.jpg 768w, https://cdn.geekwire.com/wp-content/uploads/2017/10/20171025_Zillow_Premier_Agent_Forum_92-630x504.jpg 630w, https://cdn.geekwire.com/wp-content/uploads/2017/10/20171025_Zillow_Premier_Agent_Forum_92.jpg 2048w" sizes="(max-width: 1260px) 100vw, 1260px"><br>Rich Barton, who co-founded Zillow and Expedia in the Seattle area, says he's now officially a Las Vegas resident, citing an empty nest and a new chapter. His move comes amid a heated debate over Washington's new taxes on wealthy residents. <a href="https://www.geekwire.com/2026/zillow-co-founder-and-seattle-tech-icon-rich-barton-takes-up-residence-in-las-vegas/">Read More</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[Final Fantasy returns to Xbox with a huge day‑one launch as Final Fantasy VII Revelation breaks exclusivity]]></title>
<description><![CDATA[Final Fantasy VII Revelation has been announced as the final chapter of the remake trilogy and will launch day one on Xbox alongside PlayStation 5, Nintendo Switch 2, Steam, Epic Games Store, and Xbox PC in Spring 2027.]]></description>
<link>https://tsecurity.de/de/3577798/windows-tipps/final-fantasy-returns-to-xbox-with-a-huge-dayone-launch-as-final-fantasy-vii-revelation-breaks-exclusivity/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3577798/windows-tipps/final-fantasy-returns-to-xbox-with-a-huge-dayone-launch-as-final-fantasy-vii-revelation-breaks-exclusivity/</guid>
<pubDate>Sat, 06 Jun 2026 15:39:21 +0200</pubDate>
<category>🪟 Windows Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Final Fantasy VII Revelation has been announced as the final chapter of the remake trilogy and will launch day one on Xbox alongside PlayStation 5, Nintendo Switch 2, Steam, Epic Games Store, and Xbox PC in Spring 2027.]]></content:encoded>
</item>
<item>
<title><![CDATA[Final Fantasy 7 Revelation will launch across all platforms in Spring 2027]]></title>
<description><![CDATA[The final chapter will drop simultaneously on PS5, Switch 2, Xbox and PC.]]></description>
<link>https://tsecurity.de/de/3576737/it-nachrichten/final-fantasy-7-revelation-will-launch-across-all-platforms-in-spring-2027/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3576737/it-nachrichten/final-fantasy-7-revelation-will-launch-across-all-platforms-in-spring-2027/</guid>
<pubDate>Sat, 06 Jun 2026 01:17:39 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The final chapter will drop simultaneously on PS5, Switch 2, Xbox and PC.]]></content:encoded>
</item>
<item>
<title><![CDATA[Driving GitOps workflows with ArgoCD on VMware vSphere Kubernetes Service]]></title>
<description><![CDATA[Teams adopting VMware vSphere Kubernetes Service (VKS) may already be using GitOps patterns. They could already have Argo CD instances humming along in their environments, managing application lifecycles. But as they transition to VMware Cloud Foundation (VCF), a common question arises: “Does the...]]></description>
<link>https://tsecurity.de/de/3575262/downloads/drivinggitops-workflows-with-argocd-on-vmware-vsphere-kubernetes-service/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3575262/downloads/drivinggitops-workflows-with-argocd-on-vmware-vsphere-kubernetes-service/</guid>
<pubDate>Fri, 05 Jun 2026 14:01:19 +0200</pubDate>
<category>💾 Downloads</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div><img width="300" height="150" src="https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png?w=300" class="attachment-medium size-medium wp-post-image" alt="" decoding="async" srcset="https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png 1774w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png?resize=300,150 300w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png?resize=768,384 768w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png?resize=1024,512 1024w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png?resize=1536,768 1536w, https://blogs.vmware.com/cloud-foundation/wp-content/uploads/sites/75/2026/06/Blog_ArgoCD.png?resize=600,300 600w" sizes="(max-width: 300px) 100vw, 300px"></div>
<p>Teams adopting VMware vSphere Kubernetes Service (VKS) may already be using GitOps patterns. They could already have Argo CD instances humming along in their environments, managing application lifecycles. But as they transition to VMware Cloud Foundation (VCF), a common question arises: “Does the platform change my tooling, or just the surface area I can manage?” … <a href="https://blogs.vmware.com/cloud-foundation/2026/06/05/gitops-argo-on-vks/">Continued</a></p>
<p>The post <a href="https://blogs.vmware.com/cloud-foundation/2026/06/05/gitops-argo-on-vks/">Driving GitOps workflows with ArgoCD on VMware vSphere Kubernetes Service</a> appeared first on <a href="https://blogs.vmware.com/cloud-foundation">VMware Cloud Foundation (VCF) Blog</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[10 MCP-Server für DevOps]]></title>
<description><![CDATA[DevOps ist mit Aufwand und Kosten verbunden. Mit MCP aufzurüsten, macht deshalb Sinn.PeopleImages | shutterstock.com



KI-Agenten für Programmierer haben sich zu einem beeindruckenden Hilfsmittel entwickelt. Allerdings sind diese Agenten nur begrenzt einsetzbar, wenn sie nicht auch mit modernen ...]]></description>
<link>https://tsecurity.de/de/3571393/it-security-nachrichten/10-mcp-server-fuer-devops/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3571393/it-security-nachrichten/10-mcp-server-fuer-devops/</guid>
<pubDate>Thu, 04 Jun 2026 06:06:56 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2025/12/PeopleImages_shutterstock_2546315777_16z9.jpg?quality=50&amp;strip=all&amp;w=1024" alt="Dev Discussion 16z9" class="wp-image-4103991" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"><figcaption class="wp-element-caption">DevOps ist mit Aufwand und Kosten verbunden. Mit MCP aufzurüsten, macht deshalb Sinn.</figcaption></figure><p class="imageCredit">PeopleImages | shutterstock.com</p></div>



<p><a href="https://www.computerwoche.de/article/4039804/schone-neue-multi-agenten-welt.html" target="_blank">KI-Agenten für Programmierer</a> haben sich zu einem beeindruckenden Hilfsmittel entwickelt. Allerdings sind diese Agenten nur begrenzt einsetzbar, wenn sie nicht auch mit modernen DevOps-Tools kompatibel sind. An dieser Stelle kommt das Model Context Protocol (<a href="https://www.computerwoche.de/article/4031227/was-ist-model-context-protocol.html">MCP</a>) ins Spiel. Der von Anthropic Ende 2024 veröffentlichte Standard verbindet KI-Systeme mit externen Tools und Daten. </p>



<p>Mit Blick auf <a href="https://www.computerwoche.de/article/2834426/10-grobe-devops-schnitzer.html" target="_blank">DevOps</a> stehen KI-Agenten damit neue Fähigkeiten offen – etwa:</p>



<ul class="wp-block-list">
<li><a href="https://www.computerwoche.de/article/2833711/version-control-systems-ein-ratgeber.html" target="_blank">Versionskontrollen</a> mit Git,</li>



<li>Continuous Integration &amp; Deployment (<a href="https://www.computerwoche.de/article/2834524/6-massnahmen-fuer-bessere-ci-cd-pipelines.html">CI/</a><a href="https://www.computerwoche.de/article/2834524/6-massnahmen-fuer-bessere-ci-cd-pipelines.html" target="_blank">CD</a>),</li>



<li>Infrastructure as Code (<a href="https://www.computerwoche.de/article/2808916/was-ist-infrastructure-as-code.html" target="_blank">IaC</a>),</li>



<li><a href="https://www.computerwoche.de/article/2820175/4-best-practices-fuer-devops-observability.html" target="_blank">Observability</a>, oder</li>



<li>Zugriff auf <a href="https://www.computerwoche.de/article/4077044/technische-dokumentation-mit-genai-so-gehts.html" target="_blank">Dokumentationen</a>.</li>
</ul>



<p>Im Folgenden werfen wir einen Blick auf zehn offizielle MCP-Server, die populären DevOps-Tools und -Plattformen entsprungen sind und jeweils unterschiedliche Funktionalitäten abdecken. Diese lassen sich innerhalb MCP-kompatibler KI-Entwicklungs-Tools relativ einfach konfigurieren und mit Berechtigungen ausstatten. Offizielle MCP-Server zu nutzen, hat zudem den Vorteil, dass deren Lebensdauer sehr wahrscheinlich länger ist – und sie durchgängig gewartet und aktualisiert werden.</p>



<h2 class="wp-block-heading">1. GitHub MCP-Server</h2>



<p>Kaum ein Entwickler nutzt <a href="https://www.computerwoche.de/article/2824356/26-softwareperlen-fuer-windows-pcs.html" target="_blank">GitHub</a> nicht in irgendeiner Form. Deshalb entwickelt sich der <a href="https://github.com/github/github-mcp-server" target="_blank" rel="noreferrer noopener">offizielle MCP-Server</a> der Plattform zu einer immer beliebteren Methode, um KI-Agenten zu befähigen, mit Code-Repositories zu interagieren – etwa, indem sie Issues erstellen und kommentieren oder Pull Requests zusammenführen.</p>



<p>Außerdem enthält dieser MCP-Server auch Endpunkte für das CI/CD-Management über <a href="https://www.infoworld.com/article/2338562/what-is-github-actions-automated-cicd-for-github.html" target="_blank">GitHub Actions</a>. So könnte etwa ein natürlichsprachlicher Befehl wie “Aktuelle Aktion abbrechen” das <code>cancel_workflow_run</code>-Tool innerhalb von GitHub Actions aufrufen.</p>



<p>Der offizielle MCP-Server von GitHub bietet vergleichsweise umfangreiche Funktionen, die die <a href="https://docs.github.com/en/rest" target="_blank" rel="noreferrer noopener">APIs der Plattform</a> widerspiegeln.  Damit dabei die Sicherheit nicht zu kurz kommt und KI-Agenten keine Mutationen durchführen, lassen sich jederzeit <code>--read-only</code>-Flags konfigurieren.</p>



<h2 class="wp-block-heading">2. Notion MCP-Server</h2>



<p>Notion ist eher ein KI-Collaboration- als ein DevOps-Tool und hat sich mittlerweile fachbereichsübergreifend etabliert, wenn es darum geht, teamintern Transparenz zu schaffen. Der <a href="https://github.com/makenotion/notion-mcp-server" target="_blank" rel="noreferrer noopener">offizielle MCP-Server von Notion</a> ist jedoch auch aus DevOps-Perspektive nützlich. Damit lassen sich Agenten beispielsweise anweisen, interne Stilrichtlinien oder Betriebshandbücher zu konsultieren, die in Notion gespeichert sind.</p>



<p>Der Remote-MCP-Server von Notion ist über eine IDE abrufbar – kann aber mit dem <a href="https://hub.docker.com/r/mcp/notion" target="_blank" rel="noreferrer noopener">offiziellen Docker-Image</a> auch lokal aufgesetzt und ausgeführt werden. Dieser MCP-Server ist als risikoarm zu betrachten, da er über konfigurierbare Scopes und Tokens verfügt, um Notion-Seiten und -Blöcke zu managen.</p>



<h2 class="wp-block-heading">3. Atlassian Remote MCP-Server</h2>



<p>Atlassians <a href="https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/" target="_blank" rel="noreferrer noopener">Remote MCP-Server</a> verbindet IDEs oder Agentic-AI-Plattformen mit den Cloud-Produkten des Unternehmens. Beispielsweise dem Projektmanagement-Tool Jira. Anzumerken ist dabei, dass sich dieser MCP-Server derzeit in der Beta-Phase befindet und Atlassian-Cloud-Kunden vorbehalten ist.</p>



<p>Damit ist es denkbar, einen Agenten anzuweisen, ein Jira-Issue zum Benutzertesting für eine BezahlApp auf der Grundlage eines aktuellen Bug Report zu aktualisieren – und dabei auf die relevanten Protokolle zu verweisen. Die Aktualisierung von Jira läuft anschließend über den MCP-Server.  </p>



<p>Der MCP-Server von Atlassian unterstützt diverse Clients und gewährleistet mit Oauth-2.1-Support auch sicheren Zugriff.</p>



<h2 class="wp-block-heading">4. Argo CD MCP-Server</h2>



<p>Auch die Entwickler des populären Open-Source-Tools Argo CD stellen einen <a href="https://github.com/argoproj-labs/mcp-for-argocd" target="_blank" rel="noreferrer noopener">MCP-Server</a> zur Verfügung. Dieser fasst Calls an die Argo-CD-API zusammen und enthält Tools, mit denen die Benutzer über natürliche Sprache mit Argo CD interagieren können:</p>



<ul class="wp-block-list">
<li>Mit dem <strong>Application-Management-Tool</strong> können KI-Agenten Anwendungsinformationen abrufen, Anwendungen erstellen und löschen sowie weitere Prozesse ausführen.</li>



<li>Über das <strong>Resource-Management-Tool</strong> rufen KI-Agenten Ressourceninformationen, Protokolle und Ereignisse für bestimmte Anwendungen ab und führen spezifische Aktionen für bestimmte Ressourcen aus.</li>
</ul>



<p>Mit Hilfe dieses MCP-Servers lassen sich viele Tasks “natürlichsprachlich” ausführen, die auch über das User Interface oder das CLI-Tool von Argo CD verfügbar sind. Eine Staging-App zu synchronisieren, geht so beispielsweise flotter von der Hand. Damit das auch funktioniert, muss der MCP-Server von Argo CD aber auch ordentlich integriert werden – und benötigt Zugriff auf eine laufende Argo-CD-Instanz inklusive korrekt konfigurierter Anmeldedaten.</p>



<h2 class="wp-block-heading">5. Grafana MCP-Server</h2>



<p>Das Datenvisualisierungs- und Monitoring-Tool Grafana gehört für viele DevOps- und SRE-Teams zum Standardrepertoire. Der offizielle <a href="https://github.com/grafana/mcp-grafana" target="_blank" rel="noreferrer noopener">MCP-Server für Grafana</a> befähigt KI-Agenten dazu, Observability-Daten bereitzustellen, um Entwicklungs- oder Betriebsprozesse zu optimieren.</p>



<p>Über diesen MCP-Server können Agenten außerdem vollständige oder teilweise Details aus Dashboards abfragen, die Metriken zur Systemleistung und Health-Daten aus verschiedenen Quellen kombinieren. Darüber hinaus lassen sich über den Grafana MCP-Server auch Informationen zu Datenquellen abrufen, weitere Monitoring-Systeme oder Details zu spezifischen Vorfällen abfragen.</p>



<p>Das Toolset ist dabei konfigurierbar, die Berechtigungen der Agenten können durch den Benutzer definiert werden. Darüber hinaus hat Grafana auch die Antwortstruktur seines MCP-Servers optimiert. Das soll die Nutzung des Kontextfensters minimieren und die Kosten für Token senken. Beispielsweise kann ein MCP-Client das <code>get_dashboard_property</code>-Tool aufrufen, um einen bestimmten Part eines Dashboards anhand seiner UID abzurufen.</p>



<h2 class="wp-block-heading">6. Terraform MCP-Server</h2>



<p>HashiCorp Terraform ist – <a href="https://www.computerwoche.de/article/3853753/opentofu-der-killer-fork.html" target="_blank">Alternativen</a> zum Trotz – weiterhin die erste Adresse, wenn es um Infrastructure as Code (IaC) geht. Entsprechend ist der <a href="https://github.com/hashicorp/terraform-mcp-server" target="_blank" rel="noreferrer noopener">offizielle MCP-Server</a> eine interessante Option, um Terraform-Konfigurationen über KI-Agenten zu generieren und zu managen. Der MCP-Server lässt sich dabei sowohl in die <a href="https://developer.hashicorp.com/terraform/registry/api-docs" target="_blank" rel="noreferrer noopener">Registry APIs</a> als auch in die <a href="https://developer.hashicorp.com/terraform/enterprise" target="_blank" rel="noreferrer noopener">Enterprise/HCP-Services</a> von Terraform integrieren. Das ermöglicht KI-Agenten etwa:</p>



<ul class="wp-block-list">
<li>Modul- und Anbieter-Metadaten abzufragen,</li>



<li>den Status von Workspaces zu überprüfen, und</li>



<li>Tasks (mit menschlicher Genehmigung) auszulösen.</li>
</ul>



<p>Ein Befehl wie “Generiere Terraform-Code für einen neuen Run” könnte so die <code>create_run</code>-Operation aufrufen, woraufhin der KI-Agent die Konfiguration validiert und plant, bevor er sie anwendet.</p>



<p>Der Terraform MCP-Server wird mit der Readme-Datei <a href="http://agents.md/" target="_blank" rel="noreferrer noopener">AGENTS.md</a> ausgeliefert. Diese erleichtert es Agenten, Tools zu interpretieren. Aktuell (Stand Dezember 2025) ist der Terraform MCP-Server ausschließlich für die lokale Nutzung verfügbar. Er ist ausdrücklich nicht für Remote- oder gehostete Deployments vorgesehen.</p>



<h2 class="wp-block-heading">7. GitLab MCP-Server</h2>



<p>Auch die GitLab-Plattform stellt – ihren Premium- und Ultimate-Kunden – einen <a href="https://docs.gitlab.com/user/gitlab_duo/model_context_protocol/mcp_server/" target="_blank" rel="noreferrer noopener">MCP-Server</a> bereit. Dieser befindet sich aktuell in der Beta-Phase und befähigt KI-Agenten dazu, Projetinformationen zu sammeln und Operationen über GitLab-APIs sicher auszuführen.  </p>



<p>Der GitLab MCP-Server erlaubt einige Statusänderungen, etwa Issues zu erstellen oder Merge Requests. Die anderen Funktionen dienen hauptsächlich der Datenabfrage – also etwa Informationen zu Issues, Merge-Anfragen, Commits, Diffs und Pipelines abzufragen. Enthalten ist zudem ein allgemeines Suchwerkzeug.</p>



<p>Die <a href="https://docs.gitlab.com/user/gitlab_duo/model_context_protocol/mcp_server/" target="_blank" rel="noreferrer noopener">Dokumentation</a> des GitLab MCP-Servers ist sehr ausführlich und enthält zahlreiche Beispiele für natürlichsprachliche Ausdrücke, die verarbeiten werden können. Der Server unterstützt zudem die dynamische Client-Registrierung über OAuth 2.0.</p>



<h2 class="wp-block-heading">8. Snyk MCP-Server</h2>



<p>Snyk bietet eine Security-Plattform für Entwickler an – und einen <a href="https://docs.snyk.io/integrations/snyk-studio-agentic-integrations">MCP-</a><a href="https://docs.snyk.io/integrations/snyk-studio-agentic-integrations" target="_blank" rel="noreferrer noopener">Server</a>. Dieser kann dazu genutzt werden, mit Hilfe von KI-Agenten (IaC-)Code, Open-Source-Abhängigkeiten, Container sowie SBOMs oder auch AIBOMs auf Schwachstellen zu scannen und diese zu beheben. Den Snyk MCP-Server zu integrieren, ist also dazu geeignet, Sicherheitsscans automatisch im Rahmen eines CI/CD-Workflows mit KI-Agenten durchzuführen. Diese Scans lassen sich sogar über andere MCP-Server hinweg koordinieren, beispielsweise indem Repository-Details über den GitHub MCP-Server abgerufen werden, bevor ein Snyk-Scan gestartet wird.</p>



<p>Ein Prompt wie “Scanne das Authentication-Microservice-Repo auf Sicherheitslücken” könnte einen Agenten anweisen, das Repository mit GitHub MCP zu lokalisieren und dann Snyk-Tools wie <code>snyk_sca_scan</code> oder <code>snyk_code_scan</code> nutzen, um bekannte Schwachstellen, geleakte Anmeldedaten und andere Risiken zu identifizieren.</p>



<p>Dieser MCP-Server wird lokal ausgeführt und verwendet die Snyk-CLI, um Befehle wie diese über authentifizierte API-Calls auszuführen. Das Unternehmen bietet keine gehostete Remote-Version seines MCP-Servers an.</p>



<h2 class="wp-block-heading">9. AWS MCP-Server</h2>



<p>Die Cloud-Hyperscaler haben besonders eifrig daran gearbeitet, schnell MCP-Server auf die Beine zu stellen, die sich in ihre Ökosysteme integrieren lassen. Amazon Web Services (AWS) hat beispielsweise Dutzende spezialisierter <a href="https://github.com/awslabs/mcp">MCP-Server</a> eingeführt, die KI-Agenten ermöglichen, mit sämtlichen Arten von AWS-Services zu interagieren. Einige davon werden als vollständig gemanagte Dienste angeboten, andere können hingegen nur lokal ausgeführt werden.</p>



<ul class="wp-block-list">
<li>So können KI-Agenten über den <a href="https://github.com/awslabs/mcp/blob/main/src/lambda-tool-mcp-server" target="_blank" rel="noreferrer noopener">Lambda Tool MCP-Server</a> beispielsweise Lambda-Funktionen auflisten und aufrufen.</li>



<li>Der <a href="https://github.com/awslabs/mcp/tree/main/src/s3-tables-mcp-server" target="_blank" rel="noreferrer noopener">AWS S3 Tables MCP-Server</a> lässt sich hingegen von einem Agenten nutzen, um S3-Buckets abzufragen oder neue Tabellen aus CSV-Dateien zu erstellen.</li>



<li>Der <a href="https://github.com/awslabs/mcp/tree/main/src/aws-knowledge-mcp-server" target="_blank" rel="noreferrer noopener">AWS Knowledge MCP-Server</a> verbindet Agenten mit den neuesten AWS-Dokumentationen, API-Referenzen und Architekturleitfäden.</li>
</ul>



<p>Eine Query an letztgenannten Knowledge-Server könnte etwa die Anweisung beinhalten, eine API-Referenz für das von AWS gemanagte Prometheus-Tool aufzurufen. Das würde die richtigen aktuellen Informationen liefern – optimiert für die Nutzung durch KI-Agenten.</p>



<h2 class="wp-block-heading">10. Pulumi MCP-Server</h2>



<p>Pulumi ist eine weitere beliebte IaC-Option – und hat ebenfalls einen <a href="https://www.pulumi.com/docs/iac/guides/ai-integration/mcp-server/" target="_blank" rel="noreferrer noopener">offiziellen MCP-Server</a> eingeführt. Dieser ermöglicht es KI-Agenten,</p>



<ul class="wp-block-list">
<li>Pulumi-Registries abzufragen,</li>



<li>auf Cloud-Ressourcen und -Infrastruktur zuzugreifen, und</li>



<li>Pulumi-Befehle auszuführen.</li>
</ul>



<p>Wie Entwickler diesen MCP-Server nutzen können, um einen Azure Kubernetes Service (AKS)-Cluster bereitzustellen, erklärt Pulumi beispielhaft in einer ausführlichen <a href="https://www.pulumi.com/blog/mcp-server-ai-assistants/#the-goal-provisioning-an-aks-cluster">Schritt-für-Schritt-Anleitung</a>. (fm)</p>



<p><strong>Dieser Artikel ist <a href="https://www.infoworld.com/article/4096223/10-mcp-servers-for-devops.html" target="_blank">im Original</a> bei unserer Schwesterpublikation Infoworld.com erschienen.</strong></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[The next chapter in flood resilience: Open sourcing Google’s hydrology framework]]></title>
<description><![CDATA[Climate & Sustainability]]></description>
<link>https://tsecurity.de/de/3570589/ai-nachrichten/the-next-chapter-in-flood-resilience-open-sourcing-googles-hydrology-framework/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3570589/ai-nachrichten/the-next-chapter-in-flood-resilience-open-sourcing-googles-hydrology-framework/</guid>
<pubDate>Wed, 03 Jun 2026 20:48:29 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Climate &amp; Sustainability]]></content:encoded>
</item>
<item>
<title><![CDATA[Star Wars Jedi 3 Rumor Suggests Older Cal Kestis as Reveal Gets Closer]]></title>
<description><![CDATA[A new Star Wars Jedi 3 rumor has given fans an interesting clue about the next chapter in Cal Kestis’ story, as reports suggest the…
The post Star Wars Jedi 3 Rumor Suggests Older Cal Kestis as Reveal Gets Closer appeared first on OnMSFT.]]></description>
<link>https://tsecurity.de/de/3568190/windows-tipps/star-wars-jedi-3-rumor-suggests-older-cal-kestis-as-reveal-gets-closer/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3568190/windows-tipps/star-wars-jedi-3-rumor-suggests-older-cal-kestis-as-reveal-gets-closer/</guid>
<pubDate>Wed, 03 Jun 2026 06:09:21 +0200</pubDate>
<category>🪟 Windows Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>A new Star Wars Jedi 3 rumor has given fans an interesting clue about the next chapter in Cal Kestis’ story, as reports suggest the…</p>
<p>The post <a href="https://onmsft.com/news/star-wars-jedi-3-rumor-suggests-older-cal-kestis-as-reveal-gets-closer/">Star Wars Jedi 3 Rumor Suggests Older Cal Kestis as Reveal Gets Closer</a> appeared first on <a href="https://onmsft.com/">OnMSFT</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Microsoft debuts Surface RTX Spark Dev Box to run large AI models without cloud costs]]></title>
<description><![CDATA[Microsoft on Monday unveiled the Surface RTX Spark Dev Box, a compact desktop computer designed to let software developers run large AI models on their desks instead of paying for cloud computing — a move that directly challenges the per-token pricing model that has defined the AI industry's econ...]]></description>
<link>https://tsecurity.de/de/3567019/it-nachrichten/microsoft-debuts-surface-rtx-spark-dev-box-to-run-large-ai-models-without-cloud-costs/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3567019/it-nachrichten/microsoft-debuts-surface-rtx-spark-dev-box-to-run-large-ai-models-without-cloud-costs/</guid>
<pubDate>Tue, 02 Jun 2026 19:02:50 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><a href="https://microsoft.com/">Microsoft</a> on Monday unveiled the <a href="https://aka.ms/Windows-Build2026">Surface RTX Spark Dev Box</a>, a compact desktop computer designed to let software developers run large AI models on their desks instead of paying for cloud computing — a move that directly challenges the per-token pricing model that has defined the AI industry's economics since ChatGPT launched three and a half years ago.</p><p>The device, announced at <a href="https://news.microsoft.com/build-2026/">Microsoft Build 2026</a>, packs Nvidia’s new Blackwell-architecture <a href="https://nvidianews.nvidia.com/news/nvidia-microsoft-windows-pcs-agents-rtx-spark">RTX Spark processor </a>and 128 gigabytes of unified memory into a small-form-factor chassis, delivering what Nvidia rates at one petaflop of AI compute. In practical terms, that means a developer can load, run and interact with AI models exceeding 120 billion parameters without sending a single API call to the cloud.</p><p>"These class of devices, we think, will get to about 100 billion parameter model running," Pavan Davuluri, Microsoft's executive vice president of Windows and Devices, said during a press briefing ahead of the event. He emphasized that raw model size is only part of the equation: "The model size is one thing, but for the model to be effective, it kind of needs to be able to have enough context, because a larger model, you feed it larger context." At 100,000 tokens of context, he noted, the key-value cache alone can consume 40 to 50 gigabytes of memory — which is precisely why Microsoft and Nvidia engineered the device around a 128-gigabyte unified memory pool shared dynamically between the CPU and GPU.</p><p>The machine will be available later this year in the United States, sold exclusively through Microsoft.com. The company did not disclose pricing.</p><h2>Why Microsoft is betting that AI's future runs on fixed costs, not cloud meters</h2><p>The <a href="https://aka.ms/Windows-Build2026">Surface RTX Spark Dev Box</a> arrives at a moment when the economics of AI development have become a boardroom-level concern. Companies large and small are grappling with cloud GPU bills that scale unpredictably: every fine-tuning run, every inference call, every agentic workflow that loops through a frontier model accumulates cost. For a developer iterating rapidly on a prototype — running the same model dozens or hundreds of times a day — those charges compound fast.</p><p>Microsoft is framing the Dev Box as a release valve for that pressure. Andrew Hill, corporate vice president of Surface, wrote in the announcement blog post that the device "changes that equation" by letting developers "reserve frontier model calls for truly frontier problems and handle the rest on their own hardware." The pitch is not that cloud computing is obsolete, but that much of the work currently being sent to remote data centers does not require state-of-the-art models and would be better served by capable local hardware with predictable, fixed costs.</p><p>This is a significant strategic shift for Microsoft, a company that derives tens of billions of dollars in annual revenue from <a href="https://azure.microsoft.com/en-us">Azure cloud services</a>. By selling hardware that explicitly reduces customers' cloud dependency, Microsoft is acknowledging a tension that has been building across the industry: the marginal cost of AI inference at scale is unsustainable for many teams, and the market is demanding alternatives. The bet appears to be that developers who prototype locally will still deploy to Azure when they need to scale — and that owning both ends of that workflow is more valuable than owning only the cloud.</p><h2>Inside the 128GB unified memory architecture that makes local AI possible</h2><p>The technical architecture of the <a href="https://azure.microsoft.com/en-us">Dev Box</a> reflects a set of deliberate engineering choices aimed at sustained, not peak, performance — a distinction that matters enormously for AI workloads that can run for hours.</p><p>At the center is <a href="https://blogs.windows.com/windowsexperience/2026/05/31/introducing-a-powerful-new-chapter-for-windows-pcs-accelerated-by-nvidia-rtx-spark/">Nvidia’s RTX Spark system-on-chip</a>, which combines an ultra-efficient ARM-based CPU with a Blackwell-generation RTX GPU. In a traditional Windows PC, Davuluri explained during the briefing, this configuration would require four separate components: a CPU, a discrete GPU, dedicated graphics memory and system RAM. The RTX Spark collapses all of that into a single chip paired with a single unified memory pool.</p><p>That unification is the critical design decision. Conventional gaming laptops with high-end Nvidia GPUs top out at roughly 24 gigabytes of GPU-accessible memory. The Dev Box's 128 gigabytes of unified memory — accessible to both the CPU and GPU through what Nvidia calls its <a href="https://docs.nvidia.com/cuda/cuda-programming-guide/02-basics/understanding-memory.html">Unified Memory Access</a> architecture — is what makes it possible to load models that would otherwise require cloud GPU instances with specialty high-bandwidth memory configurations.</p><p>Microsoft did substantial work at the operating system level to exploit this architecture. The company implemented new memory management logic in Windows that raises the ceiling on how much system memory the GPU can address, introduces smarter page-size allocation for shared memory regions and ensures that heavy GPU workloads do not starve the CPU of the resources it needs for multitasking. The Windows scheduler was also optimized for RTX Spark's heterogeneous core layout, routing demanding workloads to performance cores while keeping efficiency cores available for background tasks.</p><h2>How a 3D-printed aluminum chassis doubles as a heatsink</h2><p>The thermal design is equally deliberate. The <a href="https://aka.ms/Windows-Build2026">Dev Box</a> operates within an approximately 100-watt sustained thermal envelope — modest by desktop standards, but meaningful for a device intended to run training jobs and inference workloads continuously. The aluminum chassis itself is engineered to function as a passive heatsink, and the method Microsoft used to build it is among the most striking details about the machine.</p><p>The top panel is manufactured using metal 3D printing, a process that enables internal geometries too complex for conventional CNC machining or injection molding. The perforations are not simple through-holes; they are angled in multiple directions around the internal fan to optimize airflow from cold-air intake through heat dissipation. During the press briefing, Harry, a Surface industrial designer, explained the rationale: "The complexity is something other manufacturers wouldn't be able to do, like CNC, or like any molding, because of the complexity of shape."</p><p>When asked whether 3D printing would constrain mass production, the designer acknowledged the challenge but suggested Microsoft had developed a process robust enough to scale. The result is a machine that runs quietly enough for an open office while sustaining the kind of continuous GPU workloads that would throttle most conventional desktops of similar size. For a device that Microsoft expects developers to leave running overnight on fine-tuning jobs, quiet sustained performance is not a luxury — it is a requirement.</p><h2>A developer-first setup that eliminates hours of configuration</h2><p>Microsoft is shipping the <a href="https://aka.ms/Windows-Build2026">Dev Box</a> with <a href="https://www.microsoft.com/en-us/d/windows-11-pro/dg7gmgf0d8h4">Windows 11 Pro</a> pre-configured at the image level for development work — a detail that sounds minor but reflects a growing recognition that the out-of-box experience for developer hardware has historically been poor.</p><p>The machine boots into a dark theme with a simplified taskbar, widgets removed and Do Not Disturb enabled. Developer Mode is turned on. PowerShell 7 is the default shell. WSL 2 — the Windows Subsystem for Linux — comes pre-installed with GPU passthrough and CUDA support already configured. Visual Studio Code, GitHub Copilot, Git, Python and Node.js are all installed and ready.</p><p>"We've said, 'Hey, you know what, we got you, you want to go fast,'" a Microsoft engineer who demonstrated the configuration during the briefing told VentureBeat. The philosophy, he explained, is that developers were going to install all of these tools anyway — the friction was in the hours of setup and configuration that stood between unboxing a machine and writing the first line of code.</p><p>The <a href="https://aka.ms/Windows-Build2026">Dev Box</a> also ships with integration points across Microsoft's AI stack: AI Toolkit for VS Code for model conversion and fine-tuning, Windows ML and Windows Copilot Runtime for local inference, and Microsoft Foundry for connecting local prototypes to cloud deployment pipelines. For enterprises, the device integrates with Entra ID and Intune for identity and device management, and includes Secured-core PC architecture, BitLocker encryption and Microsoft Defender.</p><h2>Why Apple's Mac Mini may not be the real competition anymore</h2><p>The most obvious competitive comparison is Apple's <a href="https://www.apple.com/mac-mini/">Mac Mini</a>, which has dominated the compact-desktop category and has been widely adopted by developers drawn to Apple Silicon's unified memory architecture and power efficiency.</p><p>Davuluri addressed the comparison directly during the briefing, saying the Dev Box is "in a different class of performance than Mac Minis, intentionally." He declined to share specific benchmarks, noting that detailed specifications and performance targets would come closer to the fall launch. But the architectural advantage Microsoft is claiming is clear: while the current <a href="https://www.apple.com/shop/buy-mac/mac-mini">Mac Mini with M4 Pro</a> tops out at 48 gigabytes of unified memory and the M4 Max configuration reaches 128 gigabytes, the <a href="https://aka.ms/Windows-Build2026">RTX Spark Dev Box</a> pairs its 128 gigabytes with a Blackwell-class GPU that has a fundamentally different CUDA-based compute model — one that the vast majority of the AI/ML ecosystem's tooling (PyTorch, TensorRT, llama.cpp, Hugging Face frameworks) is already optimized for.</p><p>That CUDA ecosystem advantage is difficult to overstate. While Apple's Metal framework has made progress, the overwhelming majority of AI training and inference frameworks are built and tested first against Nvidia’s CUDA stack. A developer running models on the Dev Box can use the same code, the same libraries and the same workflows they would use on a cloud GPU instance — a level of portability that Apple Silicon cannot currently match.</p><h2>From laptop to supercomputer: Microsoft's three-tier plan for local AI hardware</h2><p>The <a href="https://aka.ms/Windows-Build2026">Dev Box</a> is one piece of a three-tier hardware strategy Microsoft laid out at Build. The <a href="https://blogs.windows.com/devices/2026/05/31/introducing-surface-laptop-ultra-made-for-world-makers/">Surface Laptop Ultra</a>, announced days earlier at Computex, brings the same RTX Spark silicon into a 15-inch laptop form factor for developers and creators who need portability. At the other end of the spectrum, the <a href="https://www.nvidia.com/en-us/products/workstations/dgx-station-for-windows/">DGX Station for Windows</a> — built on Nvidia's GB300 Grace Blackwell Ultra Superchip — targets organizations that need to run frontier models up to one trillion parameters on a deskside system. That machine is expected in the fourth quarter of this year.</p><p>The three devices map to a tiered computing model that Microsoft is calling "unmetered intelligence": small on-device language models (the company's new Aion 1.0 family) handle lightweight tasks at zero marginal cost; RTX Spark-class hardware runs mid-range models locally for the bulk of development work; and cloud resources are reserved for genuinely frontier-scale problems.</p><p>The <a href="https://github.com/features/copilot/cli">GitHub Copilot CLI</a> is getting a concrete implementation of this model with a new feature called /fleet, which allows a cloud-based primary agent to build a plan, assess the complexity of each task and route appropriate subtasks to a local model running on the developer's hardware. The cloud agent handles what requires frontier capability; the local model handles what does not. The result, in theory, is lower cost without lower quality.</p><h2>The real question is whether hybrid AI can shift from buzzword to business model</h2><p>Whether Microsoft's bet pays off depends on questions that will take months to answer. How does the Dev Box actually perform under sustained, real-world workloads? What will it cost? How quickly will the open-source model ecosystem continue to produce capable models in the 70-to-120-billion-parameter range that fit within its memory envelope? And perhaps most critically: will enterprise procurement teams, trained to think of AI as a cloud line item, accept a capital expenditure on desk hardware as an alternative?</p><p>The strategic logic, however, is difficult to dismiss. For three years, the AI industry has operated on an implicit assumption: serious AI work happens in the cloud, and the economics of that arrangement are simply the cost of doing business. Microsoft, a company with every incentive to reinforce that assumption, is now selling a machine that undermines it. That is not a contradiction — it is a recognition that the market is moving, and that the company that controls the developer's local environment and the cloud they deploy to has a more durable advantage than one that controls only the cloud.</p><p>Every dollar a developer does not spend on cloud inference is a dollar that can fund another experiment, another iteration, another prototype. For years, the AI industry told developers they needed to rent their intelligence by the token. Microsoft is now asking a different question: what if you could just buy it?</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[What will AI-first UX look like?]]></title>
<description><![CDATA[The first mobile application user interfaces were often scaled-down versions of what was already available on the web. Then, user experience (UX) designers recognized that the different smartphone form factor created new business opportunities and greater utility compared to what people were doin...]]></description>
<link>https://tsecurity.de/de/3565451/ai-nachrichten/what-will-ai-first-ux-look-like/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3565451/ai-nachrichten/what-will-ai-first-ux-look-like/</guid>
<pubDate>Tue, 02 Jun 2026 11:03:30 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>The first mobile application user interfaces were often scaled-down versions of what was already available on the web. Then, user experience (UX) designers recognized that the different smartphone form factor created new business opportunities and greater utility compared to what people were doing on their desktops. UX designers created mobile-first experiences tailored to the<a href="https://www.userinterviews.com/ux-research-field-guide-chapter/jobs-to-be-done-jtbd-framework"> job to be done</a> and other <a href="https://online.hbs.edu/blog/post/what-is-design-thinking">design thinking principles</a>. The underlying <a href="https://www.infoworld.com/article/3617141/when-to-incorporate-design-thinking-in-scrum.html">agile development practices</a>, along with the emergence of app stores, paved the way for explosive growth in smartphones and mobile applications.</p>



<p>Today’s AI experiences seem to be following a similar path, with basic, sometimes bolted-on user experiences.</p>



<ul class="wp-block-list">
<li>First-gen chatbots appeared as pop-ups with text entry-and-response user interfaces (UIs) overlaid on the application’s screens.</li>



<li>The primary UI for <a href="https://www.infoworld.com/article/2335213/large-language-models-the-foundations-of-generative-ai.html" data-type="link" data-id="https://www.infoworld.com/article/2335213/large-language-models-the-foundations-of-generative-ai.html">large language models</a> (LLMs) is often a text box that accepts a prompt followed by a response that includes text and other media.</li>



<li>Early AI agents were embedded in workflows, allowing users to prompt for information rather than point and click.</li>
</ul>



<p>In a recent <a href="https://drive.starcio.com/coffee-with-digital-trailblazers/">Coffee With Digital Trailblazers</a> LinkedIn Live event, we discussed <a href="https://drive.starcio.com/podcast/ai-first-ux-planning-for-the-evolution-of-genai-enabled-customer-journeys/">AI-first UX and planning for the evolution of customer journeys</a>. Joanne Friedman, CEO of <a href="https://www.reilai.com/">ReilAI</a>, remarked, “A UX must be tailored to the persona and the role of the human being. Intent, perspective, authority to make decisions, and even judgment are elements of the human context that surround a role. That also means that context is now tied to security. What a person can and can’t see, or what they have access to now, makes it a design consideration and one that agentic AI is well-suited to enable.”</p>



<h2 class="wp-block-heading">What is AI-first UX?</h2>



<p>I expect that the evolution of <a href="https://drive.starcio.com/2025/10/ai-agents-definitive-guide-saas-security-titans/">how SaaS embeds AI agents</a> will provide a model for how AI-first UX should look and behave. You can also see how AI is embedded in ecommerce experiences by selecting “<a href="https://homes-and-villas.marriott.com/en/search">I’m looking for ideas</a>” in the Marriott Homes and Villas AI search experience, reviewing <a href="https://www.perplexity.ai/shopping">Perplexity Shopping</a>, or trying out <a href="https://www.amazon.com/Rufus/b?node=121214013011">Rufus</a>, Amazon’s new shopping AI.</p>



<p>“AI-first UX is the collapse of the app sprawl that’s defined enterprise software for the last decade,” says Vishal Sood, president of R&amp;D at <a href="https://www.typeface.ai/">Typeface</a>. “We’re moving from users bouncing between disconnected tools to orchestrated systems where agents carry context across workflows, and canvases and editors let humans steer the output. The winners will be hybrid environments that blend conversational interfaces, visual workspaces, and agentic orchestration into a single coherent experience.”</p>



<p><a href="https://drive.starcio.com/2025/06/saas-sprawl-ai-cios-agility/">SaaS sprawl</a> is a real issue. Large enterprises average <a href="https://zylo.com/reports/2025-saas-management-index/">more than 600 SaaS applications and spend $280 million annually on SaaS</a>. Some SaaS solutions are embedding <a href="https://www.infoworld.com/article/3497094/does-your-organization-need-a-data-fabric.html">data fabrics</a> and <a href="https://www.cio.com/article/4117488/whats-in-and-whats-out-data-management-in-2026-has-a-new-attitude.html">zero-ETL</a> capabilities, enabling their AI agents to use data outside their environments. The results are not just a shift from clicks to conversations; it’s an evolution toward integrated experiences.</p>



<p>Hector Ouilhet Olmos, vice president of design for AWS Solutions at <a href="https://aws.amazon.com/">Amazon Web Services</a>, says agentic AI demands a fundamental shift from the “desktop metaphor” to designing interfaces that mimic human collaboration dynamics rather than physical objects. “Instead of forcing fluid, conversational intelligence into rigid buttons and chat panels, we must dismantle traditional user interfaces and build human ones. These will translate millennia-old human collaboration patterns like negotiation, interruption, and escalation into native digital experiences where AI functions as a teammate, rather than a tool,” says Olmos.</p>



<p>Many of today’s traditional user experiences can be deconstructed into forms, reporting dashboards, and workflows. Let’s consider how AI-first UX may evolve away from these structures.</p>



<h2 class="wp-block-heading">Conversations and interviews replace forms</h2>



<p>Will entering data into forms and using them to make edits become obsolete? AI-first UX will provide alternatives when people must enter information into systems of record to get their work done.</p>



<p>“Instead of navigating screens or filling out static forms, users simply describe what they want to accomplish,” says Chris Mayor, vice president of architecture at <a href="http://coupa.com/">Coupa</a>. “Forms evolve into adaptive conversations that prefill known information and dynamically gather the rest. This transforms enterprise software from systems of record into systems of action.”</p>



<p>One UX metaphor, based on conversations, works when the user has a job in mind. A second occurs in reverse, where an AI agent prompts users for recommended actions or decisions. “Every platform shift begins by replicating the old model, but real transformation happens when workflows are redesigned,” says Preetpal Singh, group managing director and global head of product and platform engineering at <a href="https://xebia.com/">Xebia</a>. “In this model, forms evolve into adaptive interviews that prefill known data, ask contextual follow-up questions, and accept natural language or images, while still preserving clarity and compliance.”</p>



<h2 class="wp-block-heading">AIs generate reports and dashboards</h2>



<p>Many IT departments used to have reporting functions with teams developing dashboards and writing custom SQL queries to retrieve data. Much of that work shifted out of IT, as many CIOs promoted <a href="https://drive.starcio.com/2023/02/expand-citizen-data-science/">citizen data science</a>, established <a href="https://www.infoworld.com/article/2260199/5-steps-to-smarter-data-visualization.html">data visualization best practices</a>, and deployed <a href="https://www.infoworld.com/article/3564537/how-to-choose-a-data-analytics-platform.html">advanced analytical solutions</a> to help departments build dashboards and move away from manual spreadsheets.</p>



<p>As organizations deployed more self-service business intelligence tools, they adopted practices for applying <a href="https://www.infoworld.com/article/3710451/how-to-apply-design-thinking-in-data-science.html">design thinking in data science</a> and <a href="https://www.infoworld.com/article/2515702/7-reasons-analytics-and-ml-fail-to-meet-business-objectives.html">integrating analytics into workflows</a>. But there was a significant challenge: Designers, data scientists, and engineers had to anticipate users’ questions about customers, finances, and other business functions and then implement data visualizations to answer them.</p>



<p>AI-first user experiences will turn reporting and dashboarding around. Instead of people generating relevant data visualizations, AIs will.</p>



<p>“The definition of ‘user-friendly’ has changed forever, and ‘AI over UI’ has become a new calling when it comes to building enterprise products, says Maksim Ovsyannikov, chief product officer at <a href="https://www.sugarcrm.com/">SugarAI</a> (formerly SugarCRM). “This emphasis on conversational user experience focuses on a user’s ability to ask questions and compose prompts rather than their ability to understand workflow and build reports. Users now simply ask for the report or insight they need instead of spending hours building a report or a dashboard that becomes stale and outdated in a matter of days.”</p>



<p>Singh of Xebia adds, “Reporting [is shifting] from static dashboards to narrative copilots that explain what changed, why it matters, and what actions to consider next, combining visual metrics with interpretation and foresight.”</p>



<h2 class="wp-block-heading">Workflows become agentic AI collaborations</h2>



<p>Simple workflows live in one system of record and connect people through a linear process. Examples include editing website content in a content management system, recording new information about a prospect in a customer relationship management program, or performing basic accounting functions in an enterprise resource planning system. More complex workflows are non-linear, involve multiple departments performing different responsibilities, and require integrating several systems of record. Examples include employee onboarding, quote-to-cash processes, and contract management. </p>



<p>Now imagine all the underlying systems are API-enabled, have AI agents in place to perform basic functions, are integrated with <a href="https://www.infoworld.com/article/4124612/5-requirements-for-using-mcp-servers-to-connect-ai-agents.html">Model Context Protocol servers</a>, and have an <a href="https://www.cio.com/article/4021176/ai-agent-orchestration-the-cios-crucial-next-step.html">AI orchestration platform</a> to facilitate work. What was a workflow becomes a collaboration between people and AI agents that can perform multiple steps through a single user interface.</p>



<p>“An AI-first UX replaces rigid, screen-driven workflows with intent-driven interaction, where users query the system, and AI agents orchestrate the underlying processes,” says Avi Greenfield, vice president of digital enterprise products at <a href="https://www.quadient.com/">Quadient</a>.</p>



<p>A typical employee onboarding process involves steps performed by people in HR, finance, and IT across many systems. In an agentic AI experience, HR initiates the process, and work is coordinated through AI agents, with decisions and approvals sent to the appropriate managers.</p>



<p>“Agentic workflows begin to resemble coordinated teamwork, where AI agents execute multistep processes across systems, surface their reasoning, and escalate to humans when judgment is required,” says Singh of Xebia. “The goal is augmentation over replacement and choosing the right interaction model at the right moment, grounded in strong UX discipline, transparency, and trust.”</p>



<p>Enterprise platforms are enabling the transformation from the workflow they support to agentic AI experiences. For example, <a href="https://newsroom.workday.com/2026-03-17-Introducing-Sana-from-Workday-Superintelligence-for-Work-That-Finds-Answers,-Takes-Action,-and-Automates-Workflows">Workday recently announced Sana</a> with a new AI user interface and over 300 skills to automate many HR and finance workflows. “Most AI projects today live in pilots and browser tabs. They look impressive in demos, but they don’t change how work actually gets done,” said Gerrit Kazmaier, president of product and technology at Workday. Another example is Anthropic’s release of <a href="https://claude.com/blog/cowork-research-preview">Claude Cowork</a> with <a href="https://github.com/anthropics/knowledge-work-plugins">plug-ins</a> for legal, marketing, and other business functions. <a href="https://pasqualepillitteri.it/en/news/200/claude-cowork-plugins-complete-guide-professionals">Example workflows</a> include contract reviews, product documentation, and financial journal entries.</p>



<h2 class="wp-block-heading">How AI-first UX impacts development</h2>



<p>The opportunity to create scalable mobile user experiences drove devops teams to build APIs, use <a href="https://www.infoworld.com/article/3476848/how-to-choose-the-right-low-code-no-code-or-process-automation-platform.html">low-code mobile development platforms</a>, and expand <a href="https://www.infoworld.com/article/3705049/3-ways-to-upgrade-continuous-testing-for-generative-ai.html">continuous testing</a> to cover mobile applications. <a href="https://www.infoworld.com/article/4058076/vibe-coding-and-the-future-of-software-development.html">Vibe coding</a> and other <a href="https://www.infoworld.com/article/4032989/a-developers-guide-to-code-generation.html">code-generation tools</a> are just the start of what will support the development and testing of agentic AI experiences.   </p>



<p>“AI-first UX is moving beyond chatbots into embedded, ambient intelligence where AI becomes an invisible layer that anticipates customer needs and translates intent into action,” says Amit Patel, senior vice president of consulting services at <a href="https://www.consultingsolutions.com/">Consulting Solutions</a>. “This requires a shift from feature-driven design to intent-driven experiences, supported by strong data foundations, APIs, and governance so AI can act responsibly. The companies that win will treat AI not as a bolt-on assistant, but as a core experience layer that reduces friction, personalizes at scale, and builds trust through measurable value.”</p>



<p>In larger companies, developing AI experiences will require orchestrating work across multiple AI agents, both from SaaS providers and from internally developed systems. Developers will need to update observability standards, <a href="https://www.infoworld.com/article/4086884/how-to-automate-the-testing-of-ai-agents.html">automate AI agent testing</a>, define <a href="https://www.infoworld.com/article/4105884/10-essential-release-criteria-for-launching-ai-agents.html">release-ready criteria</a>, review multiagent frameworks, and consider orchestration platforms.</p>



<p>Andrew Filev, CEO and founder of <a href="https://zencoder.ai/">Zencoder</a>, says, “Just as platforms exist to coordinate human teams, AI demands a new orchestration layer: interfaces designed not to do the work, but to visualize, steer, and direct outcomes across multiple agents.”</p>



<p>We’re only in the early stages of how people and AI agents will collaborate, so expect to see evolutions in platforms and capabilities. Looking to the future, expect that voice, augmented reality/virtual reality, and other <a href="https://www.nvidia.com/en-us/glossary/generative-physical-ai/">physical AI</a> will further transform how we develop AI-first user experiences. </p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Nick Fitzgerald: A Structure-Aware Fuzzing Experiment]]></title>
<description><![CDATA[Structure-aware fuzzing can better exercise the system under test (SUT) by
crafting inputs in the format expected by the SUT, rather than throwing
pseudorandom bytes against it. That is, it avoids “shallow” inputs that the SUT
will reject early (for example, syntactically invalid source text when...]]></description>
<link>https://tsecurity.de/de/3563869/tools/nick-fitzgerald-a-structure-aware-fuzzing-experiment/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3563869/tools/nick-fitzgerald-a-structure-aware-fuzzing-experiment/</guid>
<pubDate>Mon, 01 Jun 2026 19:24:02 +0200</pubDate>
<category>💾  Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Structure-aware fuzzing can better exercise the system under test (SUT) by
crafting inputs in the format expected by the SUT, rather than throwing
pseudorandom bytes against it. That is, it avoids “shallow” inputs that the SUT
will reject early (for example, syntactically invalid source text when fuzzing a
programming language’s compiler) and only produces inputs that go “deep” into
the SUT (e.g. programs that type-check and exercise the mid-end optimizer and
backend code generator). The Rust fuzzing ecosystem is largely built around
<a href="https://github.com/rust-fuzz/cargo-fuzz"><code class="language-plaintext highlighter-rouge">cargo-fuzz</code></a> and the <a href="https://github.com/rust-fuzz/libfuzzer"><code class="language-plaintext highlighter-rouge">libfuzzer-sys</code></a> crate, which provides two methods for
structure-aware fuzzing:</p>

<ol>
  <li>
    <p><em>Generating</em> structured inputs from scratch with the <a href="https://github.com/rust-fuzz/arbitrary"><code class="language-plaintext highlighter-rouge">arbitrary</code></a> crate</p>
  </li>
  <li>
    <p><em>Mutating</em> existing inputs from the fuzzer’s corpus in a structure-aware
manner, thereby producing new structured inputs, via the
<a href="https://docs.rs/libfuzzer-sys/0.4.12/libfuzzer_sys/macro.fuzz_mutator.html"><code class="language-plaintext highlighter-rouge">fuzz_mutator!</code></a> hook</p>
  </li>
</ol>

<p>While the two methods are not technically mutually exclusive, combining the two
can be difficult and engineering resources are finite. So:</p>

<blockquote>
  <p><strong><em>If we are only implementing one approach, is generation or mutation better?</em></strong></p>
</blockquote>

<p>To help answer this question, I implemented structure-aware generation and
mutation of guaranteed-valid <a href="https://webassembly.org/">WebAssembly</a> (Wasm) instruction sequences. This
task is small enough to be easily understandable but large enough and real
enough to (hopefully) be representative and applicable to other domains, or, at
the very least, interesting.<sup><a class="footnote" href="https://fitzgeraldnick.com/weblog/feeds/latest-atom/#fn:applicable" rel="footnote">1</a></sup> To evaluate their effectiveness, I
used <a href="https://wasmtime.dev/">Wasmtime</a> as the SUT, <code class="language-plaintext highlighter-rouge">libfuzzer-sys</code> as the fuzzing engine driving
everything, and then compared code coverage over time when using mutation-based
fuzzing versus generation-based fuzzing.</p>

<p>Additionally, there are many ways we can generate pseudorandom WebAssembly
instruction sequences. In this experiment, I’ve evaluated three methods:</p>

<ol>
  <li>
    <p>Unconstrained instruction sequence generation followed by a fixup pass to
ensure validity</p>
  </li>
  <li>
    <p>Generating valid instructions in a forwards, bottom-up
manner (from operands to operators)</p>
  </li>
  <li>
    <p>Generating valid instructions in a backwards, top-down manner (from operators
to operands)</p>
  </li>
</ol>

<p>In contrast, while there are surely many ways to mutate a given WebAssembly
instruction sequence into a new, valid instruction sequence, I’ve only
implemented one method: perform an arbitrary instruction insertion, deletion, or
replacement, producing a new but probably-invalid instruction sequence, and then
run the same fixup pass mentioned previously to ensure validity. This is the
direct mutation-based equivalent of the first generation-based method.</p>

<p><em>Before continuing further, I want to disclose that I am the author of
<code class="language-plaintext highlighter-rouge">wasm-smith</code> and <code class="language-plaintext highlighter-rouge">mutatis</code>, and a maintainer of Wasmtime, <code class="language-plaintext highlighter-rouge">arbitrary</code>,
<code class="language-plaintext highlighter-rouge">libfuzzer-sys</code>, and <code class="language-plaintext highlighter-rouge">cargo-fuzz</code>. That is, while I am familiar with Wasm,
fuzzing, fuzzing Wasm, and both the <code class="language-plaintext highlighter-rouge">arbitrary</code> and <code class="language-plaintext highlighter-rouge">mutatis</code> crates, I may also
be propagating my own biases into these implementations.</em></p>

<h3>Background</h3>

<h4>Generation-Based and Mutation-Based Fuzzing</h4>

<p>A generation-based fuzzer uses a <em>generator</em> to create a pseudo-random test
cases from scratch, feeds these into the system under test, and reports any
failures to the user:</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">fn</span> <span class="n">generation_based_fuzzing</span><span class="o">&lt;</span><span class="n">T</span><span class="o">&gt;</span><span class="p">(</span>
    <span class="c1">// A test-case generator.</span>
    <span class="n">generator</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">Fn</span><span class="p">()</span> <span class="k">-&gt;</span> <span class="n">T</span><span class="p">,</span>
    <span class="c1">// A function to run the system under test with a</span>
    <span class="c1">// generated test case, returning a result that</span>
    <span class="c1">// describes whether the run was successful or</span>
    <span class="c1">// not.</span>
    <span class="n">run_system_under_test</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">Fn</span><span class="p">(</span><span class="o">&amp;</span><span class="n">T</span><span class="p">)</span> <span class="k">-&gt;</span> <span class="n">FuzzResult</span><span class="p">,</span>
<span class="p">)</span> <span class="p">{</span>
    <span class="k">loop</span> <span class="p">{</span>
        <span class="c1">// Generate an input.</span>
        <span class="k">let</span> <span class="n">input</span> <span class="o">=</span> <span class="nf">generator</span><span class="p">();</span>

        <span class="c1">// Run the input through the system under test.</span>
        <span class="k">let</span> <span class="n">result</span> <span class="o">=</span> <span class="nf">run_system_under_test</span><span class="p">(</span><span class="o">&amp;</span><span class="n">input</span><span class="p">);</span>

        <span class="c1">// If the system crashed, panicked, failed an</span>
        <span class="c1">// assertion, violated an invariant, or etc...</span>
        <span class="c1">// then report that to the user.</span>
        <span class="k">if</span> <span class="k">let</span> <span class="nf">Err</span><span class="p">(</span><span class="n">failure</span><span class="p">)</span> <span class="o">=</span> <span class="n">result</span> <span class="p">{</span>
            <span class="nf">report_to_user</span><span class="p">(</span><span class="o">&amp;</span><span class="n">input</span><span class="p">,</span> <span class="n">failure</span><span class="p">);</span>
        <span class="p">}</span>
    <span class="p">}</span>
<span class="p">}</span>
</code></pre></div></div>

<p>On the other hand, mutation-based fuzzers are given an initial corpus of inputs
and create new inputs by mutating existing corpus members. They run each new
input through the SUT, report failures the same as before, and if the new input
was “interesting” (for example, exercised new code paths in the SUT that weren’t
previously covered in any other input’s execution) then the new input is added
into the corpus for use in future test iterations:</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">fn</span> <span class="n">mutation_based_fuzzing</span><span class="o">&lt;</span><span class="n">T</span><span class="o">&gt;</span><span class="p">(</span>
    <span class="c1">// A corpus of test cases.</span>
    <span class="n">corpus</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">Corpus</span><span class="o">&lt;</span><span class="n">T</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="c1">// A function to pseudo-randomly mutate an existing</span>
    <span class="c1">// input into a new input.</span>
    <span class="n">mutate</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">Fn</span><span class="p">(</span><span class="o">&amp;</span><span class="n">T</span><span class="p">)</span> <span class="k">-&gt;</span> <span class="n">T</span><span class="p">,</span>
    <span class="c1">// A function to run an input in the system under</span>
    <span class="c1">// test, returning a result that describes whether</span>
    <span class="c1">// the run was successful or not.</span>
    <span class="n">run_system_under_test</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">Fn</span><span class="p">(</span><span class="o">&amp;</span><span class="n">T</span><span class="p">)</span> <span class="k">-&gt;</span> <span class="n">FuzzResult</span><span class="p">,</span>
<span class="p">)</span> <span class="p">{</span>
    <span class="k">loop</span> <span class="p">{</span>
        <span class="c1">// Choose an old test case from the corpus.</span>
        <span class="k">let</span> <span class="n">old_input</span> <span class="o">=</span> <span class="n">corpus</span><span class="nf">.choose_one</span><span class="p">();</span>

        <span class="c1">// Pseudo-randomly mutate that old test case,</span>
        <span class="c1">// creating a new one.</span>
        <span class="k">let</span> <span class="n">input</span> <span class="o">=</span> <span class="nf">mutate</span><span class="p">(</span><span class="n">old_input</span><span class="p">);</span>

        <span class="c1">// Run the input through the system under test.</span>
        <span class="k">let</span> <span class="n">result</span> <span class="o">=</span> <span class="nf">run_system_under_test</span><span class="p">(</span><span class="o">&amp;</span><span class="n">input</span><span class="p">);</span>

        <span class="c1">// If the system crashed, panicked, failed an</span>
        <span class="c1">// assertion, violated an invariant, or etc...</span>
        <span class="c1">// then report that to the user.</span>
        <span class="k">if</span> <span class="k">let</span> <span class="nf">Err</span><span class="p">(</span><span class="n">failure</span><span class="p">)</span> <span class="o">=</span> <span class="n">result</span> <span class="p">{</span>
            <span class="nf">report_to_user</span><span class="p">(</span><span class="o">&amp;</span><span class="n">input</span><span class="p">,</span> <span class="n">failure</span><span class="p">);</span>
        <span class="p">}</span>

        <span class="c1">// If the input was interesting, for example if</span>
        <span class="c1">// it executed previously-unknown code paths,</span>
        <span class="c1">// then add it into the corpus for use in a</span>
        <span class="c1">// future iteration.</span>
        <span class="k">if</span> <span class="n">result</span><span class="nf">.input_was_interesting</span><span class="p">()</span> <span class="p">{</span>
            <span class="n">corpus</span><span class="nf">.insert</span><span class="p">(</span><span class="n">input</span><span class="p">);</span>
        <span class="p">}</span>
    <span class="p">}</span>
<span class="p">}</span>
</code></pre></div></div>

<p>The two approaches are not mutually exclusive and hybrid generation- and
mutation-based fuzzers exist.</p>

<p>More resources:</p>

<ul>
  <li><a href="https://en.wikipedia.org/wiki/Fuzzing#Reuse_of_existing_input_seeds">Wikipedia’s “Fuzzing” article’s “Reuse of existing input seeds”
section</a></li>
  <li><a href="https://www.fuzzingbook.org/html/MutationFuzzer.html">The Fuzzing Book’s Mutation-Based Fuzzing
chapter</a></li>
  <li><a href="https://fitzgen.com/2020/08/24/writing-a-test-case-generator.html">Writing a Test Case Generator for a Programming
Language</a></li>
</ul>

<h4>Structure-Aware Fuzzing</h4>

<p>Structure-<em>unaware</em> fuzzing will generate pseudorandom byte sequences and pass
them directly to the SUT. If the SUT expects some sort of structured input,
e.g. the source text for a programming language, it is likely that these byte
sequences are invalid and will be rejected early by the SUT’s frontend. For
example, when fuzzing a compiler, the input is rejected as syntactically invalid
by the parser or rejected as semantically invalid by the type checker. This can
be useful when hardening a tokenizer, parser, or type checker, but is less
useful when hunting for misoptimization in the mid-end or bad instruction
encoding in the backend because the inputs are unlikely to make it that far
through the compiler’s pipeline.</p>

<p>Structure-<em>aware</em> fuzzing will produce inputs that match the SUT’s expected
input format. Returning to the compiler-fuzzing example, structure-aware fuzzing
lets us generate valid programs for the compiler, so we can exercise more of the
mid-end and backend, rather than just the frontend.</p>

<p>Structure-aware fuzzing is often generation-based: for example using
<a href="https://www.fuzzingbook.org/html/Grammars.html">grammar-based fuzzing</a> to generate pseudorandom strings from a given language
grammar or language-specific tools like <a href="https://github.com/csmith-project/csmith"><code class="language-plaintext highlighter-rouge">csmith</code></a> and <a href="https://docs.rs/wasm-smith"><code class="language-plaintext highlighter-rouge">wasm-smith</code></a> that
generate C and WebAssembly programs respectively. But structure-aware fuzzing
can also be mutation-based: <a href="https://github.com/llvm/llvm-project/blob/192601e8b3ad8b5f73cf27f2093fef5a8c9f4cb6/compiler-rt/test/fuzzer/CompressedTest.cpp#L33-L59"><code class="language-plaintext highlighter-rouge">libFuzzer</code>’s custom mutator
example</a>
implements a structure-aware mutator for zlib-compressed strings, where the raw
input is decompressed, the decompressed data is mutated, and then the mutated
data is recompressed to provide the new raw input. The mutator is aware of the
SUT’s zlib-compressed input structure.</p>

<p>More resources:</p>

<ul>
  <li><a href="https://en.wikipedia.org/wiki/Fuzzing#Aware_of_input_structure">Wikipedia’s “Fuzzing” article’s “Aware of input structure”
section</a></li>
  <li><a href="https://github.com/google/fuzzing/blob/master/docs/structure-aware-fuzzing.md"><code class="language-plaintext highlighter-rouge">google/fuzzing</code> on structure-aware
fuzzing</a></li>
  <li><a href="https://rust-fuzz.github.io/book/cargo-fuzz/structure-aware-fuzzing.html">The <code class="language-plaintext highlighter-rouge">rust-fuzz</code> book on structure-aware
fuzzing</a></li>
</ul>

<h4>The <code class="language-plaintext highlighter-rouge">arbitrary</code> Crate</h4>

<p>The <a href="https://github.com/rust-fuzz/arbitrary"><code class="language-plaintext highlighter-rouge">arbitrary</code></a> crate helps Rust developers write custom structure-aware
generators for fuzzing. It provides building blocks and abstractions for
translating a raw byte sequence (usually from a fuzzing engine) into a
structured type, effectively interpreting the raw bytes as a “DNA string” or set
of predetermined choices for its decision tree. The library also provides a
<code class="language-plaintext highlighter-rouge">derive(Arbitrary)</code> macro to automatically implement its functionality for a
given type.</p>

<p>Because <code class="language-plaintext highlighter-rouge">arbitrary</code> is effectively implemented by combining decision trees, it
is extremely easy to create imbalanced trees and unintentionally <a href="https://blog.regehr.org/archives/1700">bias the
distribution of generated test cases</a>.</p>

<h4>The <code class="language-plaintext highlighter-rouge">mutatis</code> Crate</h4>

<p>The <a href="https://docs.rs/mutatis"><code class="language-plaintext highlighter-rouge">mutatis</code></a> crate is, at a high-level, performing the same role for
authoring structure-aware mutators that <code class="language-plaintext highlighter-rouge">arbitrary</code> plays for generators. That
is, it provides Rust developers with abstractions and combinators for creating
custom structure-aware mutators. It also provides a <code class="language-plaintext highlighter-rouge">derive(Mutate)</code> macro to
automatically implement its functionality for a given type.</p>

<p><code class="language-plaintext highlighter-rouge">mutatis</code> is designed to resist bias via a two-phase design: first, it
enumerates all of the candidate mutations that could be applied to a test case,
and only afterwards chooses a particular random mutation from the candidate set
to actually apply.</p>

<h4>WebAssembly</h4>

<p><a href="https://webassembly.org/">WebAssembly</a> is a virtual instruction set designed to be safe, portable, and
fast. It is a stack machine where an instruction’s operands are popped off a
stack during execution and results pushed. It has sandboxed linear memories,
global variables, and local variables (the latter two effectively being two
kinds of virtual registers). The following instruction sequence computes <code class="language-plaintext highlighter-rouge">a * 3</code>
and stores the result into memory at address <code class="language-plaintext highlighter-rouge">p</code>:</p>

<div class="language-nasm highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c1">;; []</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">p</span>
<span class="c1">;; [p]</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">a</span>
<span class="c1">;; [p, a]</span>
<span class="nf">i32.const</span> <span class="mi">3</span>
<span class="c1">;; [p, a, 3]</span>
<span class="nf">i32.mul</span>
<span class="c1">;; [p, a*3]</span>
<span class="nf">i32.store</span>
<span class="c1">;; []</span>
</code></pre></div></div>

<h3>Generator and Mutator Implementation</h3>

<p>The range of all three generators and the mutator is the same universe of
WebAssembly programs. They are all implemented on top of the same <code class="language-plaintext highlighter-rouge">Module</code> and
<code class="language-plaintext highlighter-rouge">Inst</code> types, and, given enough time, none is capable of producing an
instruction sequence that another cannot. This helps ensure that our comparison
is apples-to-apples. However, due to their different implementation techniques,
they do produce different distributions of WebAssembly programs within that
universe, and produce test cases at different speeds from one another, which
ultimately affects how efficiently they exercise the SUT.</p>

<p>All of the generators are built on top of the <a href="https://github.com/rust-fuzz/arbitrary"><code class="language-plaintext highlighter-rouge">arbitrary</code></a> crate. The mutator
is built on top of the <a href="https://docs.rs/mutatis"><code class="language-plaintext highlighter-rouge">mutatis</code></a> crate.</p>

<p>The <code class="language-plaintext highlighter-rouge">Module</code> type is our structured fuzzing input. It describes a WebAssembly
module containing a variable number of linear memories, a variable number and
type of globals, and one function with a variable number and type of parameters
and results and a variable instruction sequence:</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="cd">/// A WebAssembly module of the shape:</span>
<span class="cd">///</span>
<span class="cd">///     (module</span>
<span class="cd">///       (memory ...)</span>
<span class="cd">///       (memory ...)</span>
<span class="cd">///       ...</span>
<span class="cd">///</span>
<span class="cd">///       (global ...)</span>
<span class="cd">///       (global ...)</span>
<span class="cd">///       ...</span>
<span class="cd">///</span>
<span class="cd">///       (func (export "run") (param ...) (result ...)</span>
<span class="cd">///         ...</span>
<span class="cd">///       )</span>
<span class="cd">///     )</span>
<span class="k">pub</span> <span class="k">struct</span> <span class="n">Module</span> <span class="p">{</span>
    <span class="n">num_memories</span><span class="p">:</span> <span class="nb">u32</span><span class="p">,</span>
    <span class="n">globals</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">Global</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="n">param_types</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">ValType</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="n">result_types</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">ValType</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="n">instructions</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span><span class="p">,</span>
<span class="p">}</span>
</code></pre></div></div>

<p>The <code class="language-plaintext highlighter-rouge">Inst</code> type is an <code class="language-plaintext highlighter-rouge">enum</code> of all the WebAssembly instructions the
implementations support, which is all of the integer, float, SIMD, memory,
local, and global instructions. Control-flow, threading, table, and GC
instructions are not supported. Here is a subset of <code class="language-plaintext highlighter-rouge">Inst</code>’s definition:</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="cd">/// A WebAssembly instruction.</span>
<span class="k">pub</span> <span class="k">enum</span> <span class="n">Inst</span> <span class="p">{</span>
    <span class="nb">Drop</span><span class="p">,</span>
    <span class="nf">LocalGet</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>
    <span class="nf">GlobalGet</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>

    <span class="c1">// ...</span>

    <span class="nf">I32Const</span><span class="p">(</span><span class="nb">i32</span><span class="p">),</span>
    <span class="n">I32Add</span><span class="p">,</span>
    <span class="n">I32Sub</span><span class="p">,</span>
    <span class="n">I32Mul</span><span class="p">,</span>

    <span class="c1">// ...</span>

    <span class="nf">I64Const</span><span class="p">(</span><span class="nb">i64</span><span class="p">),</span>
    <span class="n">I64Add</span><span class="p">,</span>
    <span class="n">I64Sub</span><span class="p">,</span>
    <span class="n">I64Mul</span><span class="p">,</span>

    <span class="c1">// ...</span>

    <span class="nf">F32Const</span><span class="p">(</span><span class="nb">f32</span><span class="p">),</span>
    <span class="n">F32Add</span><span class="p">,</span>
    <span class="n">F32Sub</span><span class="p">,</span>
    <span class="n">F32Mul</span><span class="p">,</span>

    <span class="c1">// ...</span>

    <span class="nf">F64Const</span><span class="p">(</span><span class="nb">f64</span><span class="p">),</span>
    <span class="n">F64Add</span><span class="p">,</span>
    <span class="n">F64Sub</span><span class="p">,</span>
    <span class="n">F64Mul</span><span class="p">,</span>

    <span class="c1">// ...</span>

    <span class="n">I32WrapI64</span><span class="p">,</span>
    <span class="n">I64ExtendI32S</span><span class="p">,</span>
    <span class="n">I64ExtendI32U</span><span class="p">,</span>

    <span class="c1">// ...</span>

    <span class="nf">V128Const</span><span class="p">(</span><span class="nb">i128</span><span class="p">),</span>
    <span class="n">I8x16Add</span><span class="p">,</span>
    <span class="n">I8x16Sub</span><span class="p">,</span>

    <span class="c1">// ...</span>

    <span class="nf">I32Load</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>
    <span class="nf">I64Load</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>

    <span class="c1">// ...</span>

    <span class="nf">I32Store</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>
    <span class="nf">I64Store</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>

    <span class="c1">// ...</span>

    <span class="nf">MemorySize</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>
    <span class="nf">MemoryGrow</span><span class="p">(</span><span class="nb">u32</span><span class="p">),</span>
<span class="p">}</span>
</code></pre></div></div>

<p>There is an <code class="language-plaintext highlighter-rouge">Inst::operand_types</code> method that returns the types that the
instruction pops from the stack, and an <code class="language-plaintext highlighter-rouge">Inst::result_type</code> method that returns
the type of the value that the instruction pushes onto the stack, if
any. Finally, the <code class="language-plaintext highlighter-rouge">Module::to_wasm_binary</code> method encodes the module into
WebAssembly’s binary format, so it can be fed into Wasmtime. These methods are
used, directly or indirectly, in every generator and mutator implementation.</p>

<h4><code class="language-plaintext highlighter-rouge">arb</code></h4>

<p>The <code class="language-plaintext highlighter-rouge">arb</code> generator leverages <code class="language-plaintext highlighter-rouge">derive(arbitrary::Arbitrary)</code> on our structured
input types to generate a pseudorandom instance of <code class="language-plaintext highlighter-rouge">Module</code>, unconstrained by
validity. The module’s instruction sequence is almost certainly not valid at
this point: it likely is missing operands for instructions, producing more
results than the function’s signature describes, producing results of types that
don’t match the function signature, accessing globals and locals that don’t
exist, etc… Having produced an instance of <code class="language-plaintext highlighter-rouge">Module</code>, it next calls the
<code class="language-plaintext highlighter-rouge">Module::fixup</code> method to mutate the <code class="language-plaintext highlighter-rouge">Module</code> so that it is valid.</p>

<p>The <code class="language-plaintext highlighter-rouge">fixup</code> method works by abstractly interpreting the instruction sequence to
track the types of each value on the stack at every program point. Whenever an
instruction’s operand types don’t match the types on top of the stack, it
generates dummy values of the correct type. When the instructions produce more
values than the function’s signature proscribes, it emits <code class="language-plaintext highlighter-rouge">drop</code> instructions.</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">impl</span> <span class="n">Module</span> <span class="p">{</span>
    <span class="k">pub</span> <span class="k">fn</span> <span class="nf">fixup</span><span class="p">(</span><span class="o">&amp;</span><span class="k">mut</span> <span class="k">self</span><span class="p">,</span> <span class="k">mut</span> <span class="n">make_value</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">FnMut</span><span class="p">()</span> <span class="k">-&gt;</span> <span class="nb">i64</span><span class="p">)</span> <span class="p">{</span>
        <span class="c1">// ...</span>

        <span class="c1">// The fixed-up instructions.</span>
        <span class="k">let</span> <span class="k">mut</span> <span class="n">fixed</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">with_capacity</span><span class="p">(</span>
            <span class="k">self</span><span class="py">.instructions</span><span class="nf">.len</span><span class="p">(),</span>
        <span class="p">);</span>

        <span class="c1">// The types on the stack at any given program</span>
        <span class="c1">// point. Similar to the Wasm spec's appendix's</span>
        <span class="c1">// validation algorithm.</span>
        <span class="k">let</span> <span class="k">mut</span> <span class="n">stack</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">ValType</span><span class="o">&gt;</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">new</span><span class="p">();</span>

        <span class="k">for</span> <span class="n">inst</span> <span class="k">in</span> <span class="nn">mem</span><span class="p">::</span><span class="nf">take</span><span class="p">(</span><span class="o">&amp;</span><span class="k">mut</span> <span class="k">self</span><span class="py">.instructions</span><span class="p">)</span> <span class="p">{</span>
            <span class="c1">// Special-case `drop` because it is</span>
            <span class="c1">// polymorphic.</span>
            <span class="k">if</span> <span class="nd">matches!</span><span class="p">(</span><span class="n">inst</span><span class="p">,</span> <span class="nn">Inst</span><span class="p">::</span><span class="nb">Drop</span><span class="p">)</span> <span class="p">{</span>
                <span class="k">if</span> <span class="n">stack</span><span class="nf">.is_empty</span><span class="p">()</span> <span class="p">{</span>
                    <span class="n">fixed</span><span class="nf">.push</span><span class="p">(</span>
                        <span class="nn">ValType</span><span class="p">::</span><span class="n">I32</span><span class="nf">.make_const</span><span class="p">(</span><span class="nf">make_value</span><span class="p">()),</span>
                    <span class="p">);</span>
                <span class="p">}</span> <span class="k">else</span> <span class="p">{</span>
                    <span class="n">stack</span><span class="nf">.pop</span><span class="p">();</span>
                <span class="p">}</span>
                <span class="n">fixed</span><span class="nf">.push</span><span class="p">(</span><span class="n">inst</span><span class="p">);</span>
                <span class="k">continue</span><span class="p">;</span>
            <span class="p">}</span>

            <span class="c1">// First clamp entity indices to valid</span>
            <span class="c1">// ranges.</span>
            <span class="k">let</span> <span class="nf">Some</span><span class="p">(</span><span class="n">inst</span><span class="p">)</span> <span class="o">=</span> <span class="k">self</span><span class="nf">.fixup_inst_immediates</span><span class="p">(</span>
                <span class="o">&amp;</span><span class="k">mut</span> <span class="n">make_value</span><span class="p">,</span>
                <span class="n">has_mutable_global</span><span class="p">,</span>
                <span class="n">inst</span><span class="p">,</span>
            <span class="p">)</span> <span class="k">else</span> <span class="p">{</span>
                <span class="k">continue</span>
            <span class="p">};</span>

            <span class="c1">// Then make sure that the stack has</span>
            <span class="c1">// operands of the correct types for this</span>
            <span class="c1">// instruction.</span>
            <span class="k">self</span><span class="nf">.fixup_stack</span><span class="p">(</span>
                <span class="o">&amp;</span><span class="k">mut</span> <span class="n">make_value</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="k">mut</span> <span class="n">fixed</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="k">mut</span> <span class="n">stack</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">inst</span><span class="p">,</span>
            <span class="p">);</span>

            <span class="c1">// Finally, apply the effects to the stack.</span>
            <span class="k">let</span> <span class="n">len_operands</span> <span class="o">=</span> <span class="n">inst</span><span class="nf">.operand_types</span><span class="p">(</span>
                <span class="o">&amp;</span><span class="k">self</span><span class="py">.globals</span><span class="p">,</span>
            <span class="p">)</span><span class="nf">.len</span><span class="p">();</span>
            <span class="n">stack</span><span class="nf">.truncate</span><span class="p">(</span><span class="n">stack</span><span class="nf">.len</span><span class="p">()</span> <span class="o">-</span> <span class="n">len_operands</span><span class="p">);</span>
            <span class="n">stack</span><span class="nf">.extend</span><span class="p">(</span><span class="n">inst</span><span class="nf">.result_type</span><span class="p">(</span>
                <span class="o">&amp;</span><span class="k">self</span><span class="py">.param_types</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="k">self</span><span class="py">.globals</span><span class="p">,</span>
            <span class="p">));</span>

            <span class="n">fixed</span><span class="nf">.push</span><span class="p">(</span><span class="n">inst</span><span class="p">);</span>
        <span class="p">}</span>

        <span class="c1">// ...</span>

        <span class="k">self</span><span class="py">.instructions</span> <span class="o">=</span> <span class="n">fixed</span><span class="p">;</span>
    <span class="p">}</span>

    <span class="k">fn</span> <span class="nf">fixup_stack</span><span class="p">(</span>
        <span class="o">&amp;</span><span class="k">mut</span> <span class="k">self</span><span class="p">,</span>
        <span class="k">mut</span> <span class="n">make_value</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">FnMut</span><span class="p">()</span> <span class="k">-&gt;</span> <span class="nb">i64</span><span class="p">,</span>
        <span class="n">fixed</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span><span class="p">,</span>
        <span class="n">stack</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">ValType</span><span class="o">&gt;</span><span class="p">,</span>
        <span class="n">inst</span><span class="p">:</span> <span class="o">&amp;</span><span class="n">Inst</span><span class="p">,</span>
    <span class="p">)</span> <span class="p">{</span>
        <span class="k">let</span> <span class="n">needed</span> <span class="o">=</span> <span class="n">inst</span><span class="nf">.operand_types</span><span class="p">(</span><span class="o">&amp;</span><span class="k">self</span><span class="py">.globals</span><span class="p">);</span>
        <span class="k">let</span> <span class="n">n</span> <span class="o">=</span> <span class="n">needed</span><span class="nf">.len</span><span class="p">();</span>

        <span class="k">if</span> <span class="n">stack</span><span class="nf">.len</span><span class="p">()</span> <span class="o">&gt;=</span> <span class="n">n</span> <span class="p">{</span>
            <span class="k">if</span> <span class="p">(</span><span class="mi">0</span><span class="o">..</span><span class="n">n</span><span class="p">)</span><span class="nf">.all</span><span class="p">(|</span><span class="n">i</span><span class="p">|</span> <span class="p">{</span>
                <span class="n">stack</span><span class="p">[</span><span class="n">stack</span><span class="nf">.len</span><span class="p">()</span> <span class="o">-</span> <span class="n">n</span> <span class="o">+</span> <span class="n">i</span><span class="p">]</span> <span class="o">==</span> <span class="n">needed</span><span class="p">[</span><span class="n">i</span><span class="p">]</span>
            <span class="p">})</span> <span class="p">{</span>
                <span class="c1">// All needed operands are on the stack.</span>
                <span class="k">return</span><span class="p">;</span>
            <span class="p">}</span>
        <span class="p">}</span> <span class="k">else</span> <span class="p">{</span>
            <span class="k">if</span> <span class="n">stack</span><span class="nf">.iter</span><span class="p">()</span><span class="nf">.enumerate</span><span class="p">()</span><span class="nf">.all</span><span class="p">(|(</span><span class="n">i</span><span class="p">,</span> <span class="n">ty</span><span class="p">)|</span> <span class="p">{</span>
                <span class="o">*</span><span class="n">ty</span> <span class="o">==</span> <span class="n">needed</span><span class="p">[</span><span class="n">i</span><span class="p">]</span>
            <span class="p">})</span> <span class="p">{</span>
                <span class="c1">// A prefix of needed operands are on the</span>
                <span class="c1">// stack; make constants for the tail that</span>
                <span class="c1">// are missing.</span>
                <span class="k">for</span> <span class="n">ty</span> <span class="k">in</span> <span class="o">&amp;</span><span class="n">needed</span><span class="p">[</span><span class="n">stack</span><span class="nf">.len</span><span class="p">()</span><span class="o">..</span><span class="p">]</span> <span class="p">{</span>
                    <span class="n">fixed</span><span class="nf">.push</span><span class="p">(</span><span class="n">ty</span><span class="nf">.make_const</span><span class="p">(</span><span class="nf">make_value</span><span class="p">()));</span>
                    <span class="n">stack</span><span class="nf">.push</span><span class="p">(</span><span class="o">*</span><span class="n">ty</span><span class="p">);</span>
                <span class="p">}</span>
                <span class="k">return</span><span class="p">;</span>
            <span class="p">}</span>
        <span class="p">}</span>

        <span class="c1">// Otherwise, just make constants for all the</span>
        <span class="c1">// needed operands.</span>
        <span class="k">for</span> <span class="n">ty</span> <span class="k">in</span> <span class="n">needed</span> <span class="p">{</span>
            <span class="n">fixed</span><span class="nf">.push</span><span class="p">(</span><span class="n">ty</span><span class="nf">.make_const</span><span class="p">(</span><span class="nf">make_value</span><span class="p">()));</span>
            <span class="n">stack</span><span class="nf">.push</span><span class="p">(</span><span class="o">*</span><span class="n">ty</span><span class="p">);</span>
        <span class="p">}</span>
    <span class="p">}</span>

    <span class="c1">// ...</span>
<span class="p">}</span>
</code></pre></div></div>

<p>The <code class="language-plaintext highlighter-rouge">fixup</code> method also makes sure that for all instructions that have an
immediate referencing some entity, the referenced entity is valid. For example,
for a <code class="language-plaintext highlighter-rouge">local.get $l</code> instruction, it ensures that local <code class="language-plaintext highlighter-rouge">$l</code> actually exists or
else rewrites the local to one that does exist.</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">impl</span> <span class="n">Module</span> <span class="p">{</span>
    <span class="c1">// ...</span>

    <span class="k">fn</span> <span class="nf">fixup_inst_immediates</span><span class="p">(</span>
        <span class="o">&amp;</span><span class="k">mut</span> <span class="k">self</span><span class="p">,</span>
        <span class="k">mut</span> <span class="n">make_value</span><span class="p">:</span> <span class="k">impl</span> <span class="nf">FnMut</span><span class="p">()</span> <span class="k">-&gt;</span> <span class="nb">i64</span><span class="p">,</span>
        <span class="n">has_mutable_global</span><span class="p">:</span> <span class="nb">bool</span><span class="p">,</span>
        <span class="k">mut</span> <span class="n">inst</span><span class="p">:</span> <span class="n">Inst</span><span class="p">,</span>
    <span class="p">)</span> <span class="k">-&gt;</span> <span class="nb">Option</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span> <span class="p">{</span>
        <span class="k">match</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">inst</span> <span class="p">{</span>
            <span class="nn">Inst</span><span class="p">::</span><span class="nf">LocalGet</span><span class="p">(</span><span class="n">l</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="o">*</span><span class="n">l</span> <span class="o">%=</span> <span class="k">self</span><span class="py">.param_types</span><span class="nf">.len</span><span class="p">()</span> <span class="k">as</span> <span class="nb">u32</span><span class="p">,</span>

            <span class="c1">// ...</span>

            <span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
            <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">I64Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
            <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">F32Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
            <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">F64Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
            <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">V128Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
                <span class="k">if</span> <span class="k">self</span><span class="py">.num_memories</span> <span class="o">==</span> <span class="mi">0</span> <span class="p">{</span>
                    <span class="k">return</span> <span class="nb">None</span><span class="p">;</span>
                <span class="p">}</span>
                <span class="o">*</span><span class="n">m</span> <span class="o">%=</span> <span class="k">self</span><span class="py">.num_memories</span><span class="p">;</span>
            <span class="p">}</span>

            <span class="c1">// ...</span>

            <span class="n">_</span> <span class="k">=&gt;</span> <span class="p">{}</span>
        <span class="p">}</span>

        <span class="nf">Some</span><span class="p">(</span><span class="n">inst</span><span class="p">)</span>
    <span class="p">}</span>
<span class="p">}</span>
</code></pre></div></div>

<p>After calling <code class="language-plaintext highlighter-rouge">fixup</code>, the <code class="language-plaintext highlighter-rouge">arb</code> generator invokes <code class="language-plaintext highlighter-rouge">Module::to_wasm_binary</code> to
get the encoded Wasm program.</p>

<h4><code class="language-plaintext highlighter-rouge">bottom_up</code></h4>

<p>The <code class="language-plaintext highlighter-rouge">bottom_up</code> generator also uses abstract interpretation to track the types
of values on the stack. It generates instructions in forwards order, from
operands to operators. It begins with an empty stack, filters candidate
instructions down to just those that would be valid given the types currently on
the stack, randomly chooses one, updates the stack types accordingly, and
repeats the process. This is the same approach that <a href="https://docs.rs/wasm-smith"><code class="language-plaintext highlighter-rouge">wasm-smith</code></a> uses. After
generating instructions this way, it then makes sure that the final types on the
stack match the function signature’s results, similar to the end of <code class="language-plaintext highlighter-rouge">fixup</code>.</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">impl</span> <span class="n">Module</span> <span class="p">{</span>
    <span class="k">pub</span> <span class="k">fn</span> <span class="nf">bottom_up</span><span class="p">(</span><span class="n">u</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">Unstructured</span><span class="o">&lt;</span><span class="nv">'_</span><span class="o">&gt;</span><span class="p">)</span> <span class="k">-&gt;</span> <span class="nb">Result</span><span class="o">&lt;</span><span class="k">Self</span><span class="o">&gt;</span> <span class="p">{</span>
        <span class="c1">// ...</span>

        <span class="k">let</span> <span class="n">max_insts</span> <span class="o">=</span> <span class="n">u</span><span class="nf">.int_in_range</span><span class="p">(</span><span class="mi">1</span><span class="o">..=</span><span class="n">MAX_INSTS</span><span class="p">)</span><span class="o">?</span><span class="p">;</span>
        <span class="k">let</span> <span class="k">mut</span> <span class="n">instructions</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">new</span><span class="p">();</span>
        <span class="k">let</span> <span class="k">mut</span> <span class="n">stack</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">ValType</span><span class="o">&gt;</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">new</span><span class="p">();</span>

        <span class="k">for</span> <span class="n">_</span> <span class="k">in</span> <span class="mi">0</span><span class="o">..</span><span class="n">max_insts</span> <span class="p">{</span>
            <span class="k">if</span> <span class="n">stack</span> <span class="o">==</span> <span class="n">result_types</span> <span class="o">&amp;&amp;</span> <span class="n">u</span><span class="nf">.ratio</span><span class="p">(</span><span class="mi">3</span><span class="p">,</span> <span class="mi">4</span><span class="p">)</span><span class="o">?</span> <span class="p">{</span>
                <span class="k">break</span><span class="p">;</span>
            <span class="p">}</span>

            <span class="c1">// Choose a random instruction whose operand</span>
            <span class="c1">// types match those currently on the stack.</span>
            <span class="k">let</span> <span class="n">inst</span> <span class="o">=</span> <span class="nf">choose_inst_bottom_up</span><span class="p">(</span>
                <span class="n">u</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">stack</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">param_types</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">globals</span><span class="p">,</span>
                <span class="n">num_memories</span><span class="p">,</span>
            <span class="p">)</span><span class="o">?</span><span class="p">;</span>

            <span class="c1">// Apply this instruction's effects to the</span>
            <span class="c1">// stack.</span>
            <span class="nf">apply_inst</span><span class="p">(</span>
                <span class="o">&amp;</span><span class="n">inst</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="k">mut</span> <span class="n">stack</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">param_types</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">globals</span><span class="p">,</span>
            <span class="p">);</span>
            <span class="n">instructions</span><span class="nf">.push</span><span class="p">(</span><span class="n">inst</span><span class="p">);</span>
        <span class="p">}</span>

        <span class="c1">// ...</span>

        <span class="nf">Ok</span><span class="p">(</span><span class="n">Module</span> <span class="p">{</span>
            <span class="n">param_types</span><span class="p">,</span>
            <span class="n">result_types</span><span class="p">,</span>
            <span class="n">globals</span><span class="p">,</span>
            <span class="n">num_memories</span><span class="p">,</span>
            <span class="n">instructions</span><span class="p">,</span>
        <span class="p">})</span>
    <span class="p">}</span>
<span class="p">}</span>

<span class="k">fn</span> <span class="nf">choose_inst_bottom_up</span><span class="p">(</span>
    <span class="n">u</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">Unstructured</span><span class="o">&lt;</span><span class="nv">'_</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="n">stack</span><span class="p">:</span> <span class="o">&amp;</span><span class="p">[</span><span class="n">ValType</span><span class="p">],</span>
    <span class="n">param_types</span><span class="p">:</span> <span class="o">&amp;</span><span class="p">[</span><span class="n">ValType</span><span class="p">],</span>
    <span class="n">globals</span><span class="p">:</span> <span class="o">&amp;</span><span class="p">[</span><span class="n">Global</span><span class="p">],</span>
    <span class="n">num_memories</span><span class="p">:</span> <span class="nb">u32</span><span class="p">,</span>
<span class="p">)</span> <span class="k">-&gt;</span> <span class="nb">Result</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span> <span class="p">{</span>
    <span class="c1">// Build up all the valid candidate instructions.</span>
    <span class="k">let</span> <span class="k">mut</span> <span class="n">candidates</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">new</span><span class="p">();</span>

    <span class="c1">// Producers are always okay: [] -&gt; [t]</span>
    <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Const</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
    <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">I64Const</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
    <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">F32Const</span><span class="p">(</span><span class="mf">0.0</span><span class="p">));</span>
    <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">F64Const</span><span class="p">(</span><span class="mf">0.0</span><span class="p">));</span>
    <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">V128Const</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
    <span class="k">if</span> <span class="o">!</span><span class="n">param_types</span><span class="nf">.is_empty</span><span class="p">()</span> <span class="p">{</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">LocalGet</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
    <span class="p">}</span>

    <span class="c1">// ...</span>

    <span class="k">let</span> <span class="n">top</span> <span class="o">=</span> <span class="n">stack</span><span class="nf">.last</span><span class="p">()</span><span class="nf">.copied</span><span class="p">();</span>
    <span class="k">let</span> <span class="n">second</span> <span class="o">=</span> <span class="n">stack</span><span class="nf">.get</span><span class="p">(</span><span class="n">stack</span><span class="nf">.len</span><span class="p">()</span> <span class="o">-</span> <span class="mi">2</span><span class="p">)</span><span class="nf">.copied</span><span class="p">();</span>

    <span class="c1">// Drop needs 1 operand of any type: [t] -&gt; []</span>
    <span class="k">if</span> <span class="n">top</span><span class="nf">.is_some</span><span class="p">()</span> <span class="p">{</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nb">Drop</span><span class="p">);</span>
    <span class="p">}</span>

    <span class="c1">// i32 unary: [i32] -&gt; [...]</span>
    <span class="k">if</span> <span class="n">top</span> <span class="o">==</span> <span class="nf">Some</span><span class="p">(</span><span class="n">I32</span><span class="p">)</span> <span class="p">{</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Clz</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Ctz</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Popcnt</span><span class="p">);</span>
        <span class="c1">// ...</span>
    <span class="p">}</span>

    <span class="c1">// i64 unary: [i64] -&gt; [...]</span>
    <span class="k">if</span> <span class="n">top</span> <span class="o">==</span> <span class="nf">Some</span><span class="p">(</span><span class="n">I64</span><span class="p">)</span> <span class="p">{</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Clz</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Ctz</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Popcnt</span><span class="p">);</span>
        <span class="c1">// ...</span>
    <span class="p">}</span>

    <span class="c1">// ...</span>

    <span class="c1">// i32 binary: [i32 i32] -&gt; [...]</span>
    <span class="k">if</span> <span class="n">top</span> <span class="o">==</span> <span class="nf">Some</span><span class="p">(</span><span class="n">I32</span><span class="p">)</span> <span class="o">&amp;&amp;</span> <span class="n">second</span> <span class="o">==</span> <span class="nf">Some</span><span class="p">(</span><span class="n">I32</span><span class="p">)</span> <span class="p">{</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Add</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Sub</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Mul</span><span class="p">);</span>
        <span class="c1">// ...</span>
    <span class="p">}</span>

    <span class="c1">// i64 binary: [i64 i64] -&gt; [...]</span>
    <span class="k">if</span> <span class="n">top</span> <span class="o">==</span> <span class="nf">Some</span><span class="p">(</span><span class="n">I64</span><span class="p">)</span> <span class="o">&amp;&amp;</span> <span class="n">second</span> <span class="o">==</span> <span class="nf">Some</span><span class="p">(</span><span class="n">I64</span><span class="p">)</span> <span class="p">{</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Add</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Sub</span><span class="p">);</span>
        <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Mul</span><span class="p">);</span>
        <span class="c1">// ...</span>
    <span class="p">}</span>

    <span class="c1">// ...</span>

    <span class="c1">// Choose a random instruction from the</span>
    <span class="c1">// candidates.</span>
    <span class="k">let</span> <span class="k">mut</span> <span class="n">inst</span> <span class="o">=</span> <span class="o">*</span><span class="n">u</span><span class="nf">.choose</span><span class="p">(</span><span class="o">&amp;</span><span class="n">candidates</span><span class="p">)</span><span class="o">?</span><span class="p">;</span>

    <span class="c1">// If the instruction has immediates, generate</span>
    <span class="c1">// them here, as they were hard-coded during</span>
    <span class="c1">// candidate selection.</span>
    <span class="k">match</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">inst</span> <span class="p">{</span>
        <span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Const</span><span class="p">(</span><span class="n">v</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="o">*</span><span class="n">v</span> <span class="o">=</span> <span class="n">u</span><span class="nf">.arbitrary</span><span class="p">()</span><span class="o">?</span><span class="p">,</span>
        <span class="nn">Inst</span><span class="p">::</span><span class="nf">I64Const</span><span class="p">(</span><span class="n">v</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="o">*</span><span class="n">v</span> <span class="o">=</span> <span class="n">u</span><span class="nf">.arbitrary</span><span class="p">()</span><span class="o">?</span><span class="p">,</span>
        <span class="c1">// ...</span>
        <span class="nn">Inst</span><span class="p">::</span><span class="nf">GlobalGet</span><span class="p">(</span><span class="n">g</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
            <span class="o">*</span><span class="n">g</span> <span class="o">=</span> <span class="n">u</span><span class="nf">.int_in_range</span><span class="p">(</span><span class="mi">0</span><span class="o">..=</span><span class="p">(</span><span class="n">globals</span><span class="nf">.len</span><span class="p">()</span> <span class="k">as</span> <span class="nb">u32</span> <span class="o">-</span> <span class="mi">1</span><span class="p">))</span><span class="o">?</span><span class="p">;</span>
        <span class="p">}</span>
        <span class="c1">// ...</span>
        <span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">I64Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">F32Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">F64Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">V128Load</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Store</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">I64Store</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">F32Store</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">F64Store</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">V128Store</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">MemorySize</span><span class="p">(</span><span class="n">m</span><span class="p">)</span>
        <span class="p">|</span> <span class="nn">Inst</span><span class="p">::</span><span class="nf">MemoryGrow</span><span class="p">(</span><span class="n">m</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
            <span class="o">*</span><span class="n">m</span> <span class="o">=</span> <span class="n">u</span><span class="nf">.int_in_range</span><span class="p">(</span><span class="mi">0</span><span class="o">..=</span><span class="p">(</span><span class="n">num_memories</span> <span class="o">-</span> <span class="mi">1</span><span class="p">))</span><span class="o">?</span><span class="p">;</span>
        <span class="p">}</span>
        <span class="n">_</span> <span class="k">=&gt;</span> <span class="p">{}</span>
    <span class="p">}</span>

    <span class="nf">Ok</span><span class="p">(</span><span class="n">inst</span><span class="p">)</span>
<span class="p">}</span>
</code></pre></div></div>

<p>After constructing a <code class="language-plaintext highlighter-rouge">Module</code> via <code class="language-plaintext highlighter-rouge">bottom_up</code>, we don’t need to call <code class="language-plaintext highlighter-rouge">fixup</code>
because the module is already valid by construction, so all that’s left is
invoking <code class="language-plaintext highlighter-rouge">Module::to_wasm_binary</code> to get the encoded Wasm program.</p>

<h4><code class="language-plaintext highlighter-rouge">top_down</code></h4>

<p>The <code class="language-plaintext highlighter-rouge">top_down</code> generator is very similar to <code class="language-plaintext highlighter-rouge">bottom_up</code>, but instead of
generating instructions forwards, from operands to operators, it generates them
backwards, from operators to operands. Instead of maintaining a stack of the
types of values generated thus far by the instruction sequence prefix, it
maintains a stack of the types of values expected by the instruction sequence
suffix. This is the approach that <a href="https://insuyun.github.io/pubs/2025/park:rgfuzz.pdf"><code class="language-plaintext highlighter-rouge">rgfuzz</code></a> by Park, Kim, and Yun
takes.<sup><a class="footnote" href="https://fitzgeraldnick.com/weblog/feeds/latest-atom/#fn:rule-guided" rel="footnote">2</a></sup></p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">impl</span> <span class="n">Module</span> <span class="p">{</span>
    <span class="k">pub</span> <span class="k">fn</span> <span class="nf">top_down</span><span class="p">(</span>
        <span class="n">u</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">Unstructured</span><span class="o">&lt;</span><span class="nv">'_</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="p">)</span> <span class="k">-&gt;</span> <span class="nb">Result</span><span class="o">&lt;</span><span class="k">Self</span><span class="o">&gt;</span> <span class="p">{</span>
        <span class="c1">// ...</span>

        <span class="k">let</span> <span class="n">max_insts</span> <span class="o">=</span> <span class="n">u</span><span class="nf">.int_in_range</span><span class="p">(</span><span class="mi">1</span><span class="o">..=</span><span class="n">MAX_INSTS</span><span class="p">)</span><span class="o">?</span><span class="p">;</span>
        <span class="k">let</span> <span class="k">mut</span> <span class="n">instructions</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">new</span><span class="p">();</span>
        <span class="k">let</span> <span class="k">mut</span> <span class="n">needed</span> <span class="o">=</span> <span class="n">result_types</span><span class="nf">.clone</span><span class="p">();</span>
        <span class="k">for</span> <span class="n">_</span> <span class="k">in</span> <span class="mi">0</span><span class="o">..</span><span class="n">max_insts</span> <span class="p">{</span>
            <span class="k">if</span> <span class="n">needed</span><span class="nf">.is_empty</span><span class="p">()</span> <span class="o">&amp;&amp;</span> <span class="n">u</span><span class="nf">.ratio</span><span class="p">(</span><span class="mi">3</span><span class="p">,</span> <span class="mi">4</span><span class="p">)</span><span class="o">?</span> <span class="p">{</span>
                <span class="k">break</span><span class="p">;</span>
            <span class="p">}</span>

            <span class="c1">// Choose a random instruction in a</span>
            <span class="c1">// top-down manner.</span>
            <span class="k">let</span> <span class="n">inst</span> <span class="o">=</span> <span class="nf">choose_inst_top_down</span><span class="p">(</span>
                <span class="n">u</span><span class="p">,</span>
                <span class="n">needed</span><span class="nf">.last</span><span class="p">()</span><span class="nf">.copied</span><span class="p">(),</span>
                <span class="o">&amp;</span><span class="n">param_types</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">globals</span><span class="p">,</span>
                <span class="n">num_memories</span><span class="p">,</span>
            <span class="p">)</span><span class="o">?</span><span class="p">;</span>

            <span class="c1">// Pop the result type from `needed`, if</span>
            <span class="c1">// any, as it's been satisfied.</span>
            <span class="k">let</span> <span class="n">ty</span> <span class="o">=</span> <span class="n">inst</span><span class="nf">.result_type</span><span class="p">(</span>
                <span class="o">&amp;</span><span class="n">param_types</span><span class="p">,</span>
                <span class="o">&amp;</span><span class="n">globals</span><span class="p">,</span>
            <span class="p">);</span>
            <span class="k">if</span> <span class="n">ty</span> <span class="o">==</span> <span class="n">needed</span><span class="nf">.last</span><span class="p">()</span><span class="nf">.copied</span><span class="p">()</span> <span class="p">{</span>
                <span class="n">needed</span><span class="nf">.pop</span><span class="p">();</span>
            <span class="p">}</span>

            <span class="c1">// Add operand type demands.</span>
            <span class="k">match</span> <span class="o">&amp;</span><span class="n">inst</span> <span class="p">{</span>
                <span class="nn">Inst</span><span class="p">::</span><span class="nb">Drop</span> <span class="k">=&gt;</span> <span class="p">{</span>
                    <span class="c1">// `drop` is polymorphic; choose</span>
                    <span class="c1">// a random type.</span>
                    <span class="n">needed</span><span class="nf">.push</span><span class="p">(</span><span class="n">u</span><span class="nf">.arbitrary</span><span class="p">()</span><span class="o">?</span><span class="p">);</span>
                <span class="p">}</span>
                <span class="nn">Inst</span><span class="p">::</span><span class="nf">GlobalSet</span><span class="p">(</span><span class="n">g</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
                    <span class="n">needed</span><span class="nf">.push</span><span class="p">(</span><span class="n">globals</span><span class="p">[</span><span class="o">*</span><span class="n">g</span> <span class="k">as</span> <span class="nb">usize</span><span class="p">]</span><span class="py">.ty</span><span class="p">);</span>
                <span class="p">}</span>
                <span class="n">_</span> <span class="k">=&gt;</span> <span class="p">{</span>
                    <span class="n">needed</span><span class="nf">.extend_from_slice</span><span class="p">(</span>
                        <span class="n">inst</span><span class="nf">.operand_types</span><span class="p">(</span><span class="o">&amp;</span><span class="n">globals</span><span class="p">),</span>
                    <span class="p">);</span>
                <span class="p">}</span>
            <span class="p">}</span>

            <span class="n">instructions</span><span class="nf">.push</span><span class="p">(</span><span class="n">inst</span><span class="p">);</span>
        <span class="p">}</span>

        <span class="c1">// Fill remaining needed types with</span>
        <span class="c1">// constants.</span>
        <span class="k">for</span> <span class="n">ty</span> <span class="k">in</span> <span class="n">needed</span><span class="nf">.iter</span><span class="p">()</span><span class="nf">.rev</span><span class="p">()</span> <span class="p">{</span>
            <span class="n">instructions</span><span class="nf">.push</span><span class="p">(</span>
                <span class="n">ty</span><span class="nf">.make_const</span><span class="p">(</span><span class="n">u</span><span class="nf">.arbitrary</span><span class="p">()</span><span class="o">?</span><span class="p">),</span>
            <span class="p">);</span>
        <span class="p">}</span>

        <span class="c1">// Instructions were generated backwards, so</span>
        <span class="c1">// reverse.</span>
        <span class="n">instructions</span><span class="nf">.reverse</span><span class="p">();</span>

        <span class="nf">Ok</span><span class="p">(</span><span class="n">Module</span> <span class="p">{</span>
            <span class="n">param_types</span><span class="p">,</span>
            <span class="n">result_types</span><span class="p">,</span>
            <span class="n">globals</span><span class="p">,</span>
            <span class="n">num_memories</span><span class="p">,</span>
            <span class="n">instructions</span><span class="p">:</span> <span class="n">prefix</span><span class="p">,</span>
        <span class="p">})</span>
    <span class="p">}</span>
<span class="p">}</span>

<span class="k">fn</span> <span class="nf">choose_inst_top_down</span><span class="p">(</span>
    <span class="n">u</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">Unstructured</span><span class="o">&lt;</span><span class="nv">'_</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="n">target_ty</span><span class="p">:</span> <span class="nb">Option</span><span class="o">&lt;</span><span class="n">ValType</span><span class="o">&gt;</span><span class="p">,</span>
    <span class="n">param_types</span><span class="p">:</span> <span class="o">&amp;</span><span class="p">[</span><span class="n">ValType</span><span class="p">],</span>
    <span class="n">globals</span><span class="p">:</span> <span class="o">&amp;</span><span class="p">[</span><span class="n">Global</span><span class="p">],</span>
    <span class="n">num_memories</span><span class="p">:</span> <span class="nb">u32</span><span class="p">,</span>
<span class="p">)</span> <span class="k">-&gt;</span> <span class="nb">Result</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span> <span class="p">{</span>
    <span class="k">let</span> <span class="k">mut</span> <span class="n">candidates</span><span class="p">:</span> <span class="nb">Vec</span><span class="o">&lt;</span><span class="n">Inst</span><span class="o">&gt;</span> <span class="o">=</span> <span class="nn">Vec</span><span class="p">::</span><span class="nf">new</span><span class="p">();</span>
    <span class="k">match</span> <span class="n">target_ty</span> <span class="p">{</span>
        <span class="nf">Some</span><span class="p">(</span><span class="n">I32</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Const</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Add</span><span class="p">);</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Sub</span><span class="p">);</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I32Mul</span><span class="p">);</span>
            <span class="c1">// ...</span>
        <span class="p">}</span>
        <span class="nf">Some</span><span class="p">(</span><span class="n">I64</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">I64Const</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Add</span><span class="p">);</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Sub</span><span class="p">);</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">I64Mul</span><span class="p">);</span>
            <span class="c1">// ...</span>
        <span class="p">}</span>
        <span class="nf">Some</span><span class="p">(</span><span class="n">F32</span><span class="p">)</span> <span class="k">=&gt;</span> <span class="p">{</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">F32Const</span><span class="p">(</span><span class="mf">0.0</span><span class="p">));</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">F32Add</span><span class="p">);</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">F32Sub</span><span class="p">);</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="n">F32Mul</span><span class="p">);</span>
            <span class="c1">// ...</span>
        <span class="p">}</span>
        <span class="c1">// ...</span>
        <span class="nb">None</span> <span class="k">=&gt;</span> <span class="p">{</span>
            <span class="c1">// Nothing needed. `drop`, `global.set`, and</span>
            <span class="c1">// stores add demand.</span>
            <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nb">Drop</span><span class="p">);</span>
            <span class="k">if</span> <span class="n">globals</span><span class="nf">.iter</span><span class="p">()</span><span class="nf">.any</span><span class="p">(|</span><span class="n">g</span><span class="p">|</span> <span class="n">g</span><span class="py">.mutable</span><span class="p">)</span> <span class="p">{</span>
                <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">GlobalSet</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
            <span class="p">}</span>
            <span class="k">if</span> <span class="n">num_memories</span> <span class="o">&gt;</span> <span class="mi">0</span> <span class="p">{</span>
                <span class="n">candidates</span><span class="nf">.push</span><span class="p">(</span><span class="nn">Inst</span><span class="p">::</span><span class="nf">I32Store</span><span class="p">(</span><span class="mi">0</span><span class="p">));</span>
                <span class="c1">// ...</span>
            <span class="p">}</span>
        <span class="p">}</span>
    <span class="p">}</span>

    <span class="k">let</span> <span class="k">mut</span> <span class="n">inst</span> <span class="o">=</span> <span class="o">*</span><span class="n">u</span><span class="nf">.choose</span><span class="p">(</span><span class="o">&amp;</span><span class="n">candidates</span><span class="p">)</span><span class="o">?</span><span class="p">;</span>

    <span class="c1">// If the instruction has immediates, generate</span>
    <span class="c1">// them here, as they were hard-coded during</span>
    <span class="c1">// candidate selection. Same as `bottom_up`.</span>
    <span class="k">match</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="n">inst</span> <span class="p">{</span>
        <span class="c1">// ...</span>
    <span class="p">}</span>

    <span class="nf">Ok</span><span class="p">(</span><span class="n">inst</span><span class="p">)</span>
<span class="p">}</span>
</code></pre></div></div>

<p>Similar to <code class="language-plaintext highlighter-rouge">bottom_up</code>, after we’ve constructed a <code class="language-plaintext highlighter-rouge">Module</code> via <code class="language-plaintext highlighter-rouge">top_down</code>, we
don’t need to call <code class="language-plaintext highlighter-rouge">fixup</code> because the module is already valid by construction.
All that’s left is invoking <code class="language-plaintext highlighter-rouge">Module::to_wasm_binary</code> to get the encoded Wasm
program.</p>

<h4><code class="language-plaintext highlighter-rouge">mutate</code></h4>

<p><code class="language-plaintext highlighter-rouge">mutate</code> is, as the name implies, a mutator rather than a generator. It is the
direct equivalent of the <code class="language-plaintext highlighter-rouge">arb</code> generator, but for mutation: it uses
<code class="language-plaintext highlighter-rouge">derive(mutatis::Mutate)</code> on <code class="language-plaintext highlighter-rouge">Module</code> and <code class="language-plaintext highlighter-rouge">Inst</code> to automatically generate
custom mutators for these types, rather than authoring them by hand. After
producing a new <code class="language-plaintext highlighter-rouge">Module</code> by mutating an old <code class="language-plaintext highlighter-rouge">Module</code>, that new <code class="language-plaintext highlighter-rouge">Module</code> probably
represents an invalid Wasm program, in the same way that
<code class="language-plaintext highlighter-rouge">derive(arbitrary::Arbitrary)</code> produces <code class="language-plaintext highlighter-rouge">Module</code>s that are probably invalid. And
<code class="language-plaintext highlighter-rouge">mutate</code> also uses the same approach that <code class="language-plaintext highlighter-rouge">arb</code> does to resolve this problem:
the <code class="language-plaintext highlighter-rouge">fixup</code> method.</p>

<p>But first, a mutator-specific wrinkle is that <code class="language-plaintext highlighter-rouge">fuzz_mutator!</code> gives us a mutable
byte slice to mutate, not a <code class="language-plaintext highlighter-rouge">Module</code>. We address this gap by deriving the
<a href="https://serde.rs/"><code class="language-plaintext highlighter-rouge">serde</code></a> crate’s <code class="language-plaintext highlighter-rouge">Serialize</code> and <code class="language-plaintext highlighter-rouge">Deserialize</code> traits on <code class="language-plaintext highlighter-rouge">Module</code> and <code class="language-plaintext highlighter-rouge">Inst</code>,
deserializing a <code class="language-plaintext highlighter-rouge">Module</code> from the mutable byte slice, mutating that deserialized
<code class="language-plaintext highlighter-rouge">Module</code> with <code class="language-plaintext highlighter-rouge">mutatis</code>, and then reserializing it back into the mutable byte
slice. We use the <a href="https://docs.rs/postcard"><code class="language-plaintext highlighter-rouge">postcard</code></a> crate here, but could just as easily use
<a href="https://docs.rs/bincode"><code class="language-plaintext highlighter-rouge">bincode</code></a>, JSON, or protobuf.</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">use</span> <span class="nn">libfuzzer_sys</span><span class="p">::{</span><span class="n">fuzz_mutator</span><span class="p">,</span> <span class="n">fuzz_target</span><span class="p">,</span> <span class="n">fuzzer_mutate</span><span class="p">};</span>

<span class="nd">fuzz_mutator!</span><span class="p">(|</span>
    <span class="n">data</span><span class="p">:</span> <span class="o">&amp;</span><span class="k">mut</span> <span class="p">[</span><span class="nb">u8</span><span class="p">],</span>
    <span class="n">size</span><span class="p">:</span> <span class="nb">usize</span><span class="p">,</span>
    <span class="n">max_size</span><span class="p">:</span> <span class="nb">usize</span><span class="p">,</span>
    <span class="n">seed</span><span class="p">:</span> <span class="nb">u32</span><span class="p">,</span>
<span class="p">|</span> <span class="p">{</span>
    <span class="c1">// With probability of about 1/8, use default</span>
    <span class="c1">// mutator.</span>
    <span class="k">if</span> <span class="n">seed</span><span class="nf">.count_ones</span><span class="p">()</span> <span class="o">%</span> <span class="mi">8</span> <span class="o">==</span> <span class="mi">0</span> <span class="p">{</span>
        <span class="k">return</span> <span class="nf">fuzzer_mutate</span><span class="p">(</span><span class="n">data</span><span class="p">,</span> <span class="n">size</span><span class="p">,</span> <span class="n">max_size</span><span class="p">);</span>
    <span class="p">}</span>

    <span class="c1">// Try to decode using postcard; fallback to</span>
    <span class="c1">// default input on failure.</span>
    <span class="k">let</span> <span class="k">mut</span> <span class="n">module</span><span class="p">:</span> <span class="n">Module</span> <span class="o">=</span>
        <span class="nn">postcard</span><span class="p">::</span><span class="nf">from_bytes</span><span class="p">(</span><span class="o">&amp;</span><span class="n">data</span><span class="p">[</span><span class="o">..</span><span class="n">size</span><span class="p">])</span>
            <span class="nf">.ok</span><span class="p">()</span>
            <span class="nf">.unwrap_or_default</span><span class="p">();</span>

    <span class="c1">// Mutate with `mutatis`.</span>
    <span class="k">let</span> <span class="k">mut</span> <span class="n">session</span> <span class="o">=</span> <span class="nn">mutatis</span><span class="p">::</span><span class="nn">Session</span><span class="p">::</span><span class="nf">new</span><span class="p">()</span>
        <span class="nf">.seed</span><span class="p">(</span><span class="n">seed</span><span class="nf">.into</span><span class="p">())</span>
        <span class="nf">.shrink</span><span class="p">(</span><span class="n">max_size</span> <span class="o">&lt;</span> <span class="n">size</span><span class="p">);</span>
    <span class="k">if</span> <span class="n">session</span><span class="nf">.mutate</span><span class="p">(</span><span class="o">&amp;</span><span class="k">mut</span> <span class="n">module</span><span class="p">)</span><span class="nf">.is_ok</span><span class="p">()</span> <span class="p">{</span>
        <span class="k">if</span> <span class="k">let</span> <span class="nf">Ok</span><span class="p">(</span><span class="n">encoded</span><span class="p">)</span> <span class="o">=</span> <span class="nn">postcard</span><span class="p">::</span><span class="nf">to_slice</span><span class="p">(</span>
            <span class="o">&amp;</span><span class="n">module</span><span class="p">,</span>
            <span class="n">data</span><span class="p">,</span>
        <span class="p">)</span> <span class="p">{</span>
            <span class="k">return</span> <span class="n">encoded</span><span class="nf">.len</span><span class="p">();</span>
        <span class="p">}</span>
    <span class="p">}</span>

    <span class="c1">// Fallback to the default libfuzzer mutator if</span>
    <span class="c1">// serialization or mutation fails because, for</span>
    <span class="c1">// example, `data` doesn't have enough capacity.</span>
    <span class="nf">fuzzer_mutate</span><span class="p">(</span><span class="n">data</span><span class="p">,</span> <span class="n">size</span><span class="p">,</span> <span class="n">max_size</span><span class="p">)</span>
<span class="p">});</span>
</code></pre></div></div>

<p>Finally, the fuzz target itself deserializes the <code class="language-plaintext highlighter-rouge">Module</code> from the raw bytes,
calls <code class="language-plaintext highlighter-rouge">fixup</code>, encodes it to a Wasm binary via <code class="language-plaintext highlighter-rouge">Module::to_wasm_binary</code>, and
then passes that into Wasmtime.</p>

<div class="language-rust highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nd">fuzz_target!</span><span class="p">(|</span><span class="n">data</span><span class="p">:</span> <span class="o">&amp;</span><span class="p">[</span><span class="nb">u8</span><span class="p">]|</span> <span class="p">{</span>
    <span class="k">let</span> <span class="nf">Ok</span><span class="p">(</span><span class="k">mut</span> <span class="n">module</span><span class="p">)</span> <span class="o">=</span> <span class="nn">postcard</span><span class="p">::</span><span class="nn">from_bytes</span><span class="p">::</span><span class="o">&lt;</span><span class="n">Module</span><span class="o">&gt;</span><span class="p">(</span><span class="n">data</span><span class="p">)</span> <span class="k">else</span> <span class="p">{</span>
        <span class="k">return</span><span class="p">;</span>
    <span class="p">};</span>
    <span class="n">module</span><span class="nf">.fixup</span><span class="p">(||</span> <span class="mi">0</span><span class="p">);</span>
    <span class="k">let</span> <span class="n">wasm</span> <span class="o">=</span> <span class="n">module</span><span class="nf">.to_wasm_binary</span><span class="p">();</span>

    <span class="c1">// ...</span>
<span class="p">});</span>
</code></pre></div></div>

<h3>Benchmarking</h3>

<h4>Methodology</h4>

<p>We pair each of our generators and mutator with <a href="https://github.com/rust-fuzz/libfuzzer"><code class="language-plaintext highlighter-rouge">libfuzzer-sys</code></a> and feed the
resulting test cases into <a href="https://wasmtime.dev/">Wasmtime</a>. All fuzzers start with an empty corpus.</p>

<p>The most important metric for a fuzzer is its bug-finding ability, but that can
be difficult to measure directly. For example, Wasmtime is actively fuzzed 24/7
with more-complete fuzzers than those implemented here, so, as expected, I have
not found any bugs via these benchmarks. Therefore, instead of reporting a
found-bugs count, the benchmark harness reports two alternative metrics:</p>

<ol>
  <li>
    <p><strong><em>Coverage over time:</em></strong> Coverage is the cumulative code paths exercised by
the fuzzer. A fuzzer cannot find bugs in code paths it does not cover. <em>This
is the most important metric reported.</em></p>
  </li>
  <li>
    <p><strong><em>Executions over time:</em></strong> An execution is one iteration of the fuzzing
loop. This is basically measuring how fast the fuzzer can produce test
cases. All else being equal, more executions is better, but all else is
rarely equal. It is easy to generate poor test cases very quickly: just
return an empty sequence of Wasm instructions every time. Unfortunately, that
exclusively leads to useless executions. Therefore, this metric is really
only useful when comparing two implementations of the same algorithm, and
I’ve omitted its results in the next section.</p>
  </li>
</ol>

<p>Additionally, I report results for both 24 hours of fuzzing and 5 minutes of
fuzzing. The expected behavior of long-term fuzzing, e.g. 24/7 fuzzing in
<a href="https://github.com/google/oss-fuzz">OSS-Fuzz</a>, can be extrapolated from the 24-hour results. The 5-minute results
show the expected behavior of short-term fuzzing, e.g. when using
<a href="https://docs.rs/mutatis/latest/mutatis/check/index.html"><code class="language-plaintext highlighter-rouge">mutatis::check</code></a> or <a href="https://docs.rs/arbtest/latest/arbtest/"><code class="language-plaintext highlighter-rouge">arbtest</code></a>.</p>

<p>Discussion of short-term fuzzing is somewhat rare, so I feel its motivation
deserves explanation. I find short-term fuzzing useful in the following
scenarios, for example:</p>

<ul>
  <li>Running a quick fuzzing session locally, to catch bugs that avoid detection in
the traditional unit- and integration-test suites, before opening a pull
request.</li>
  <li>Running some quick fuzzing in CI before allowing a pull request to merge, for
similar reasons.</li>
</ul>

<p>That is, short-term fuzzing is useful for the same reasons and in the same
scenarios as property-based testing.<sup><a class="footnote" href="https://fitzgeraldnick.com/weblog/feeds/latest-atom/#fn:pbt" rel="footnote">3</a></sup></p>

<p>As recommended in <a href="https://arxiv.org/abs/1808.09700"><em>Evaluating Fuzz Testing</em></a> by Klees, Ruef, Cooper,
Wei, and Hicks and adopted in <a href="https://storage.googleapis.com/gweb-research2023-media/pubtools/6318.pdf"><em>Fuzz Bench: An Open Fuzzer Benchmarking Platform
and Service</em></a> by Metzman, Szekeres, Simon, Sprabery, and Arya, the
benchmark harness tests the statistical significance of its results with a
<a href="https://en.wikipedia.org/wiki/Mann%E2%80%93Whitney_U_test">Mann-Whitney U-test</a>. The harness performs 20 trials per fuzzer, the same
number of trials as <em>Fuzz Bench</em>.</p>

<h4>Results</h4>

<h5>24 Hours of Fuzzing</h5>

<ul>
  <li>
    <p><code class="language-plaintext highlighter-rouge">arb</code> has 1.00 ± 0.00 times more coverage than <code class="language-plaintext highlighter-rouge">bottom_up</code> (p = 0.01)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">mutate</code> has 1.01 ± 0.00 times more coverage than <code class="language-plaintext highlighter-rouge">arb</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">top_down</code> has 1.00 ± 0.00 times more coverage than <code class="language-plaintext highlighter-rouge">arb</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">mutate</code> has 1.02 ± 0.00 times more coverage than <code class="language-plaintext highlighter-rouge">bottom_up</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">top_down</code> has 1.01 ± 0.00 times more coverage than <code class="language-plaintext highlighter-rouge">bottom_up</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">mutate</code> has 1.01 ± 0.00 times more coverage than <code class="language-plaintext highlighter-rouge">top_down</code> (p = 0.00)</p>
  </li>
</ul>

<p><a href="https://raw.githubusercontent.com/fitzgen/fuzz-experiment/9c059bbe2835b2123ed379994eec76fe9278e962/results-24h/coverage-over-time.svg">
  <img src="https://raw.githubusercontent.com/fitzgen/fuzz-experiment/9c059bbe2835b2123ed379994eec76fe9278e962/results-24h/coverage-over-time.svg">
</a></p>

<h5>5 Minutes of Fuzzing</h5>

<ul>
  <li>
    <p><code class="language-plaintext highlighter-rouge">bottom_up</code> has 1.01 ± 0.01 times more coverage than <code class="language-plaintext highlighter-rouge">arb</code> (p = 0.04)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">mutate</code> has 1.47 ± 0.02 times more coverage than <code class="language-plaintext highlighter-rouge">arb</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">top_down</code> has 1.06 ± 0.02 times more coverage than <code class="language-plaintext highlighter-rouge">arb</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">mutate</code> has 1.45 ± 0.01 times more coverage than <code class="language-plaintext highlighter-rouge">bottom_up</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">top_down</code> has 1.05 ± 0.02 times more coverage than <code class="language-plaintext highlighter-rouge">bottom_up</code> (p = 0.00)</p>
  </li>
  <li>
    <p><code class="language-plaintext highlighter-rouge">mutate</code> has 1.38 ± 0.02 times more coverage than <code class="language-plaintext highlighter-rouge">top_down</code> (p = 0.00)</p>
  </li>
</ul>

<p><a href="https://raw.githubusercontent.com/fitzgen/fuzz-experiment/9c059bbe2835b2123ed379994eec76fe9278e962/results-5m/coverage-over-time.svg">
  <img src="https://raw.githubusercontent.com/fitzgen/fuzz-experiment/9c059bbe2835b2123ed379994eec76fe9278e962/results-5m/coverage-over-time.svg">
</a></p>

<h3>Conclusion</h3>

<p><strong>The <code class="language-plaintext highlighter-rouge">mutate</code> fuzzer performs best.</strong> It vastly outperforms all the others at 5
minutes of fuzzing (36-49% more coverage), and while the rest narrow that gap
after 24 hours of fuzzing, <code class="language-plaintext highlighter-rouge">mutate</code> maintains its lead (1-2% more coverage).</p>

<p>The comparison between <code class="language-plaintext highlighter-rouge">arb</code> and <code class="language-plaintext highlighter-rouge">mutate</code> is as apples-to-apples of a comparison
as it gets between idiomatic test-case generation and mutation in Rust:
<code class="language-plaintext highlighter-rouge">derive(Arbitrary)</code> and <code class="language-plaintext highlighter-rouge">derive(Mutate)</code>. They use the same <code class="language-plaintext highlighter-rouge">fixup</code> method to
ensure that the resulting Wasm instructions are valid. The fuzzer built with
<code class="language-plaintext highlighter-rouge">mutatis</code> and test-case mutation provides better coverage over time than the
fuzzer built with <code class="language-plaintext highlighter-rouge">arbitrary</code> and test-case generation. When writing
structure-aware fuzzers, I used to reach for <a href="https://github.com/rust-fuzz/arbitrary"><code class="language-plaintext highlighter-rouge">arbitrary</code></a>; in the future, I
will reach for <a href="https://docs.rs/mutatis"><code class="language-plaintext highlighter-rouge">mutatis</code></a> instead.</p>

<p>The <code class="language-plaintext highlighter-rouge">top_down</code> fuzzer performs second-best, and is best of the generation-based
fuzzers. This aligns with results from the <a href="https://insuyun.github.io/pubs/2025/park:rgfuzz.pdf"><code class="language-plaintext highlighter-rouge">rgfuzz</code></a> paper, which found that
top-down Wasm instruction generation resulted in better instruction diversity
than bottom-up generation. This result is intuitive, they point out, because
Wasm instructions tend to have more operands than results, which means that more
candidates are filtered out from consideration when generating instructions in
forward order from operands to results (bottom-up) than when generating them in
backward order from results to operands (top-down).</p>

<p>Subjectively, none of the approaches feel significantly more-complicated nor
easier to implement than the others. All approaches require a stack of types,
representing the generated Wasm’s operand stack, at some point in their
implementation. Some require it during instruction generation (<code class="language-plaintext highlighter-rouge">top_down</code> and
<code class="language-plaintext highlighter-rouge">bottom_up</code>) while others require it during <code class="language-plaintext highlighter-rouge">fixup</code> (<code class="language-plaintext highlighter-rouge">mutate</code> and <code class="language-plaintext highlighter-rouge">arb</code>). Adding
support for new Wasm instructions is roughly the same in all of them: add a new
variant to <code class="language-plaintext highlighter-rouge">enum Inst</code> and define its operand and result types. <code class="language-plaintext highlighter-rouge">top_down</code> and
<code class="language-plaintext highlighter-rouge">bottom_up</code> additionally require adding a line for the new instruction in their
<code class="language-plaintext highlighter-rouge">choose_inst_{top_down,bottom_up}</code> functions, but this could be avoided with
some targeted <code class="language-plaintext highlighter-rouge">macro_rules!</code> sugar.</p>

<p>The <code class="language-plaintext highlighter-rouge">fixup</code> method fixes instructions in a forwards order; as future work, it
would be interesting to implement a <code class="language-plaintext highlighter-rouge">backwards_fixup</code> method that fixes
instructions in a backwards order and see if <code class="language-plaintext highlighter-rouge">mutate</code> and <code class="language-plaintext highlighter-rouge">backwards_fixup</code>
outperforms the current <code class="language-plaintext highlighter-rouge">mutate</code> and forwards <code class="language-plaintext highlighter-rouge">fixup</code> the same way that
backwards generation (<code class="language-plaintext highlighter-rouge">top_down</code>) outperforms forwards generation
(<code class="language-plaintext highlighter-rouge">bottom_up</code>).</p>

<p><code class="language-plaintext highlighter-rouge">fixup</code> makes an attempt to reuse stack operands when it can, rather than
synthesize dummy constants or <code class="language-plaintext highlighter-rouge">drop</code> already-computed values, but the attempt is
somewhat half-hearted. Dropping operands introduces dead code, which is not very
interesting for exercising deep into the compiler pipeline. Dummy constants are
not that interesting either. Therefore, another potential line of follow-up work
would be to investigate ways to maximize operand reuse and minimize <code class="language-plaintext highlighter-rouge">drop</code>s and
dummy constants inserted while ensuring validity. That could include storing
values to memory or globals instead of <code class="language-plaintext highlighter-rouge">drop</code>ing them when possible. It could
even include liberating ourselves from the stack-focused paradigm we’ve had thus
far.</p>

<p>WebAssembly is a stack-based language and so it is natural that our approaches
have focused on producing stack-y code. But, in practice, optimizing WebAssembly
compilers like Wasmtime’s use a <a href="https://en.wikipedia.org/wiki/Static_single-assignment_form">static single-assignment</a> intermediate
representation, and erase the operand stack early in their compilation
pipelines. Therefore, from these compilers’ point of view, the following two
WebAssembly snippets are identical:</p>

<div class="language-nasm highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c1">;; `x = a + (b * c)` in a "stack-y" encoding and</span>
<span class="c1">;; without temporary locals.</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">a</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">b</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">c</span>
<span class="nf">i32.mul</span>
<span class="nf">i32.add</span>
<span class="nf">local.set</span> <span class="kc">$</span><span class="nv">x</span>

<span class="c1">;; `x = a + (b * c)` in a "non-stack-y" encoding</span>
<span class="c1">;; that uses temporary locals for every operation.</span>
<span class="c1">;;</span>
<span class="c1">;; Equivalent of</span>
<span class="c1">;;</span>
<span class="c1">;;     temp0 = b * c</span>
<span class="c1">;;     temp1 = a + temp0</span>
<span class="c1">;;     x = temp1</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">b</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">c</span>
<span class="nf">i32.mul</span>
<span class="nf">local.set</span> <span class="kc">$</span><span class="nv">temp0</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">a</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">temp0</span>
<span class="nf">i32.add</span>
<span class="nf">local.set</span> <span class="kc">$</span><span class="nv">temp1</span>
<span class="nf">local.get</span> <span class="kc">$</span><span class="nv">temp1</span>
<span class="nf">local.set</span> <span class="kc">$</span><span class="nv">x</span>
</code></pre></div></div>

<p>Producing code that uses many temporaries in this manner might be easier than
code that doesn’t, but, more importantly, it may enable better reuse of
already-computed subexpressions, emit less dead code, and ultimately produce
more interesting data-flow graphs that better exercise the deep innards of the
compiler.</p>

<p>A final vein of interesting follow-up work to mine would be comparing
<code class="language-plaintext highlighter-rouge">arbitrary</code>-based generators and <code class="language-plaintext highlighter-rouge">mutatis</code>-based mutators for structured inputs
that are not programming languages and when the SUT we are fuzzing is not a
compiler. Do we see these same results when, for example, producing PNG images
to fuzz an image-transformation library?</p>

<p><a href="https://github.com/fitzgen/fuzz-experiment">Here is the source code for this experiment, including the three generators,
one mutator, raw benchmark data, and benchmarking harness.</a> The <code class="language-plaintext highlighter-rouge">README</code>
includes instructions on running the benchmarks yourself.</p>

<hr>

<div class="footnotes">
  <ol>
    <li>
      <p>WebAssembly’s stack-based instructions encode an expression tree
— <code class="language-plaintext highlighter-rouge">local.get $a; local.get $b; local.get $c; i32.add; i32.mul</code> is
isomorphic to <code class="language-plaintext highlighter-rouge">a * (b + c)</code> — so the experiment should be relevant and
applicable to any other generator or mutator for a programming language with
expressions, even if it might not appear so at first glance. <a class="reversefootnote" href="https://fitzgeraldnick.com/weblog/feeds/latest-atom/#fnref:applicable">↩</a></p>
    </li>
    <li>
      <p>Ignoring its rule-guided bit, which is orthogonal and could be
applied to <code class="language-plaintext highlighter-rouge">bottom_up</code> as well. <a class="reversefootnote" href="https://fitzgeraldnick.com/weblog/feeds/latest-atom/#fnref:rule-guided">↩</a></p>
    </li>
    <li>
      <p>Structure-aware fuzzing and property-based testing are <a href="https://docs.rs/mutatis/latest/mutatis/_guide/comparisons/index.html#comparison-to-property-based-testing">basically the
same</a>:
convergent evolution from different communities. <a class="reversefootnote" href="https://fitzgeraldnick.com/weblog/feeds/latest-atom/#fnref:pbt">↩</a></p>
    </li>
  </ol>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[v0.380.0]]></title>
<description><![CDATA[What's Changed

bundler: avoid adding Bundler checksum for lockfiles using 4.0.0-4.0.10 by @thavaahariharangit in #15164
Remove beta ecosystem flag handling for Deno by @markhallen in #15173
[bun] Add lockfile generator for bun by @brrygrdn in #14882
Pass --config.minimumReleaseAge=0 for pnpm sec...]]></description>
<link>https://tsecurity.de/de/3562676/it-security-tools/v03800/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3562676/it-security-tools/v03800/</guid>
<pubDate>Mon, 01 Jun 2026 12:33:47 +0200</pubDate>
<category>💾 IT Security Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2>What's Changed</h2>
<ul>
<li>bundler: avoid adding Bundler checksum for lockfiles using 4.0.0-4.0.10 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4539808273" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15164" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15164/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15164">#15164</a></li>
<li>Remove beta ecosystem flag handling for Deno by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/markhallen/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/markhallen">@markhallen</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4546792593" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15173" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15173/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15173">#15173</a></li>
<li>[bun] Add lockfile generator for bun by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4360563743" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/14882" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/14882/hovercard" href="https://github.com/dependabot/dependabot-core/pull/14882">#14882</a></li>
<li>Pass <code>--config.minimumReleaseAge=0</code> for <code>pnpm</code> security updates to bypass pnpm-workspace.yaml by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4545215721" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15170" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15170/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15170">#15170</a></li>
<li>build(deps): bump terraform to 1.15.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/HorizonNet/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/HorizonNet">@HorizonNet</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4472506705" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15055" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15055/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15055">#15055</a></li>
<li>Change cron schedule from Thursday to Monday by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/robaiken/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/robaiken">@robaiken</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4551230675" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15181" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15181/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15181">#15181</a></li>
<li>Add specific error for missing .NET SDK in discovery by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4542107242" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15168" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15168/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15168">#15168</a></li>
<li>Throw UnparseableFileException when slnx parsing fails by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4541825810" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15167" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15167/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15167">#15167</a></li>
<li>v0.380.0 by @dependabot-core-action-automation[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4559821880" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15192" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15192/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15192">#15192</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dependabot/dependabot-core/compare/v0.379.0...v0.380.0"><tt>v0.379.0...v0.380.0</tt></a></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[State of the CIO, 2026: CIOs set the course for AI ROI]]></title>
<description><![CDATA[Drowning in hype and under pressure from top leadership, CIOs are racing to operationalize strategic AI initiatives in an effort to demonstrate — and more importantly, deliver — measurable ROI from this equally disruptive and transformative technology.



The perpetual pipeline of AI pilots and r...]]></description>
<link>https://tsecurity.de/de/3562634/it-nachrichten/state-of-the-cio-2026-cios-set-the-course-for-ai-roi/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3562634/it-nachrichten/state-of-the-cio-2026-cios-set-the-course-for-ai-roi/</guid>
<pubDate>Mon, 01 Jun 2026 12:17:19 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>Drowning in hype and under pressure from top leadership, CIOs are racing to operationalize strategic AI initiatives in an effort to demonstrate — and more importantly, deliver — measurable ROI from this equally disruptive and transformative technology.</p>



<p>The perpetual pipeline of AI pilots and rampant experimentation are giving way to a new mandate to prioritize and scale AI solutions with the greatest propensity to deliver business value and impact the bottom line.</p>



<p>Yet the ability to achieve quantifiable ROI from AI projects remains somewhat elusive for many CIOs as they spearhead AI’s next chapter. According to <a href="https://us.resources.cio.com/resources/state-of-the-cio/" rel="nofollow">CIO.com’s 25th annual State of the CIO survey</a>, which canvassed 662 IT leaders and 249 line of business users, less than a fifth (19%) of respondents say AI initiatives have met or exceeded business goals, and 18% admit fewer than a third of AI use cases are meeting defined expectations.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/05/slide25-AI-ROI-State-of-the-CIO-2026.jpg?quality=50&amp;strip=all&amp;w=1024" alt="State of the CIO 2026: AI ROI (slide 25)" class="wp-image-4178013" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">CIO.com / Foundry</p></div>



<p>Lack of clarity around business strategy and metrics is <a href="https://www.cio.com/article/4162949/cios-struggle-to-find-clarity-in-their-organizations-ai-strategies.html">proving to be a major barrier</a> to advancing CIOs’ AI agendas. Almost a third (32%) of this year’s State of the CIO respondents called out ill-defined ROI metrics as a hurdle to scaling AI, along with murky corporate AI strategy (31%) and a <a href="https://www.cio.com/article/4165232/whats-holding-back-enterprise-ai-shortage-of-talent-cios-say.html">lack of in-house expertise</a>, cited by 40% of this year’s respondents.</p>



<p>“No one is measuring ROI on an ongoing basis because we are facing counterpressures from every vice president and line-of-business domain looking to implement AI for their own optimization,” notes <a href="https://dotcio.rpi.edu/about" rel="nofollow">Andrea Ballinger</a>, CIO at Rensselaer Polytechnic Institute (RPI). “We are saying yes to everyone without stepping back and focusing on the business cases that show real value.”</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/05/image_f2cf29.jpeg?quality=50&amp;strip=all&amp;w=1024" alt="State of the CIO 2026: AI Challenges (slide 18)" class="wp-image-4178010" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">CIO.com / Foundry</p></div>



<h2 class="wp-block-heading">Creating the infrastructure to achieve AI ROI</h2>



<p>The dynamic is starting to shift as organizations prioritize targeted use cases and lay the groundwork for scalability and ROI. Cross-functional steering committees and specialized task forces are emerging as critical building blocks to identify, prioritize, and align use cases to enterprise goals. Eighty-three percent of IT leaders surveyed confirmed their organizations either have such structures in place or are planning to implement them within the year. IT is the dominant player on these committees with other functional areas well represented, including corporate leadership and security and risk teams, and to a lesser degree, business-oriented domains such as finance, legal, and HR.</p>



<p>Formal processes for approving AI projects are far less evolved. Slightly more than half (53%) of 2026 State of the CIO respondents have established some type of official approval process, with 28% planning to activate something within the next 12 months.</p>



<p>KPIs, another <a href="https://www.cio.com/article/4106788/ai-roi-how-to-measure-the-true-value-of-ai-2.html">critical milestone for AI success</a>, are also not well defined in most enterprises. Less than half (47%) of respondents have established formal metrics, with another 34% planning to do so within the year. For those measuring AI success, operational efficiency and process improvement rank as the top metric, cited by 40% of respondents, followed by employee productivity (34%) and cost reduction (30%). AI’s impact on revenue or growth is less of a factor today, cited by only 27% of respondents.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/05/image_95f6ee.jpeg?quality=50&amp;strip=all&amp;w=1024" alt="State of the CIO 2026: AI Success (slide 26)" class="wp-image-4178008" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">CIO.com / Foundry</p></div>



<p>First Student, a leading provider of school bus transportation services, has stood up a well-defined innovation framework and AI-specific council — two moves CIO <a href="https://firststudentinc.com/resources/leaders/sean-mccormack-chief-information-officer/" rel="nofollow">Sean McCormack</a> credits to the firm’s early success scaling AI initiatives aligned to key business goals. The AI council, with representation across business leaders and the C-suite, meets regularly to review AI use cases and identify those with most potential for payback.</p>



<p>“We have more discipline around business cases than most companies,” says McCormack. “Everything is metrics-driven and dependent on proving value. By the time we put something into production, it’s been through a series of proof of concepts, there’s been a deep dive on financials, and we are able to move quickly and demonstrate value.”</p>



<p>Three years into its AI journey, TIAA has a rich stable of generative AI and agentic AI use cases spanning fraud detection and prevention along with call center companions and a litany of other tools. The majority (85%) of the financial services firm’s workforce uses TIAA Gate, its internal AI platform. Yet even with all the right structures in place — investment in training, robust governance frameworks, steering committees, an AI center of excellence (CoE), and an enterprise mandate for strategic use of AI as part of everyone’s performance goals — ROI remains a challenge.</p>



<p>“What’s on paper sometimes doesn’t turn into real ROI given the reality of operational costs,” notes <a href="https://www.tiaa.org/public/about-tiaa/leadership-team/sastry-durvasula" rel="nofollow">Sastry Durvasula</a>, TIAA’s chief operating, information &amp; digital officer. “Something may prove to be a successful pilot, but you need to understand the full cost of operations — for example, the efficiencies of running tokens or how you’re handling traffic or RAG [<a href="https://www.infoworld.com/article/2335814/what-is-retrieval-augmented-generation-more-accurate-and-reliable-llms.html">retrieval augmented generation</a>].”</p>



<p>Thomas Prommer, a longtime CTO, CIO, and CAIO, makes three recommendations to facilitate the quest for AI ROI. First, establish joint accountability at the project level with a named technical and business sponsor for each project, both of whom co-own outcomes. His firm had success replacing a centralized AI CoE with embedded AI squads that live inside individual business units. The CoE model created a clearinghouse that nobody owned, whereas embedded teams force accountability at the point of business impact, he explains.</p>



<p>Prommer’s third recommendation is to implement stage-gated funding tied to outcome milestones, not deliverable milestones. “We don’t fund ‘build a model,’ we fund ‘reduce returns by 8% on this category’ with checkpoints at 90, 180, and 270 days,” he explains. “Projects that miss two checkpoints gets killed. We kill roughly a third of what we start and that’s healthy.”</p>



<p>Developing a keen understanding of business workflows and engineering the experience layer for the people tasked with executing AI-enriched workflows is essential to creating value and effective adoption at scale.</p>



<p>“If someone on the data science team builds a great model that provides insights on improving manufacturing efficiency, but it’s so far removed from what the shop floor supervisor does in day-to-day life, it will never be used at scale,” says <a href="https://www.linkedin.com/in/sriram-krishnasamy-ab1679117/" rel="nofollow">Sriram Krishnasamy</a>, the former chief digital information and transformation officer at FedEx.</p>



<h2 class="wp-block-heading">The CIO as chief AI orchestrator</h2>



<p>Who better than the CIO to usher in the organizational structures and business practices that help identify the right AI use cases and establish metrics for success. IT leaders’ in-depth knowledge of AI and the broader technology stack is a plus. But the reason top executives are leaning on CIOs as <a href="https://www.cio.com/article/4120232/the-cio-steps-up-as-chief-intelligence-orchestrator.html">critical orchestrators of AI</a> is their proven ability to work effectively across business functions and serve as <a href="https://www.cio.com/article/4016354/cios-tackle-the-ai-change-management-challenge.html">change management champions</a>.</p>



<p>Almost half (46%) of this year’s respondents view the CIO as a business leader who proactively identifies business needs and opportunities and follows up with technology and provider recommendations that align with stated business goals. The vast majority (83%) view CIOs as a changemaker.</p>



<p>Much like last year, the <a href="https://www.cio.com/article/4171959/ceos-top-priorities-for-it-leaders-today-2.html">top CEO priority for IT leaders</a> is to research and implement AI products and projects, cited by 27% of respondents. IT leaders are meeting the mandate by working far more closely with lines of business on AI applications, according to 79% of respondents.</p>



<p>“AI requires so much executive engagement — in our case, it made the most sense for me to lead the charge,” says First Student’s McCormack, also a member of <a href="https://www.cio.com/article/236876/cio-hall-of-fame-honorees.html">CIO.com’s Hall of Fame</a>.</p>



<p>This year’s IT leader respondents expect to accelerate and expand involvement with AI/machine learning (76%) and agentic AI (70%), as well as cybersecurity (63%). Responding organizations anticipate a boost in investments across the full complement of AI technologies, including generative AI (67%), machine learning (66%), and agentic AI (65%) over the coming year.</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/05/image_063e24.jpeg?quality=50&amp;strip=all&amp;w=1024" alt="State of the CIO 2026: IT Involvement (slide 32)" class="wp-image-4178011" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">CIO.com / Foundry</p></div>



<p>First Student is currently running AI in production at scale across multiple use cases, including for predictive maintenance, fleet and driver safety, contract development, automated hiring, agentic software development, and agentic voice bots that assist internal users with help desk and HR issues. As the company builds out its portfolio of AI-enabled use cases, McCormack says it’s critical to ground everything in a flexible architecture.</p>



<p>“It’s such a changing landscape; it’s difficult to pick a solution,” he explains. “We’re building our own architecture so we can quickly switch models” and not be dependent on one system, he says.</p>



<h2 class="wp-block-heading">The rest of the IT agenda</h2>



<p>While AI commands an all-hands-on-deck approach, it’s not the only CEO directive for CIOs this year. Cyber and data security remain top-of-mind in the C-suite, with a quarter of State of the CIO respondents noting it as a top CEO priority for 2026, up from 20% last year. CEOs are also looking for CIOs to strengthen IT and business collaboration, cited by 23% of 2026 respondents.</p>



<p>To achieve those directives, CIOs are expanding technology initiatives in areas such as business process and IT automation (56%), security and risk management (55%), and data and business analytics (54%).</p>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" decoding="async" src="https://b2b-contenthub.com/wp-content/uploads/2026/05/image_e76ee4.jpeg?quality=50&amp;strip=all&amp;w=1024" alt="State of the CIO 2026: IT Investment (slide 38)" class="wp-image-4178009" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"></figure><p class="imageCredit">CIO.com / Foundry</p></div>



<p>Building a solid data and governance foundation is the most important agenda item at RPI, primarily in preparation for more extensive AI deployment and adoption. Ballinger, 70 days into her tenure as RPI CIO, concedes the educational institution is not aiming to be on the first adopter wave of AI innovation. Rather, its strategy is to adapt, grow, and transform organizational structures and its data ecosystem in pursuit of maximizing AI’s promised advantages.</p>



<p>Ballinger is currently shopping an RFP that encompasses a data fabric layer, secure containerization, and a data factory approach. “We are designing the ecosystem with strategy and KPIs in mind,” she says. “The entire process is predicated on deciding what business cases are valuable before they hit the data ecosystem. We’re not looking to put something into the ecosystem and hope it gets a return.”</p>



<p>With the pace of change growing more intense and the stakes surrounding AI innovation soaring higher, the CIO role continues to be more business-oriented and less straight technology focused. Eighty-four percent of this year’s IT leader respondent pegged the CIO position as more digital and innovation focused while 82% confirmed that CIOs are more likely to actively lead digital transformation efforts compared to their business counterparts.</p>



<p>With the average CIO now juggling 1.6 positions, including chief security officer, CISO, CAIO, and other business-related posts, the job continues to become more expansive, highly strategic, and more fulfilling, especially for leaders willing to close the door on the traditional “keeping the lights on” CIO model and embrace new challenges.</p>



<p>“The CIO of 2026 is a hybrid — half operating architect, half risk officer,” Prommer says. “The technology choices are getting easier, but the business and ethical choices are getting harder. CIOs who only know the tech stack will be reporting to CIOs who know both.”</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Introducing a powerful new chapter for Windows PCs, accelerated by NVIDIA RTX Spark]]></title>
<description><![CDATA[Today at NVIDIA GTC, Microsoft and NVIDIA announced the world’s most powerful and efficient thin-and-light Windows PCs ever. Accelerated by NVIDIA RTX Spark<

The post Introducing a powerful new chapter for Windows PCs, accelerated by NVIDIA RTX Spark appeared first on Windows Experience Blog.]]></description>
<link>https://tsecurity.de/de/3561871/it-nachrichten/introducing-a-powerful-new-chapter-for-windows-pcs-accelerated-by-nvidia-rtx-spark/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3561871/it-nachrichten/introducing-a-powerful-new-chapter-for-windows-pcs-accelerated-by-nvidia-rtx-spark/</guid>
<pubDate>Mon, 01 Jun 2026 06:47:20 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Today at NVIDIA GTC, Microsoft and NVIDIA announced the world’s most powerful and efficient thin-and-light Windows PCs ever. Accelerated by <a href="https://nvidianews.nvidia.com/news/nvidia-microsoft-windows-pcs-agents-rtx-spark">NVIDIA RTX Spark&lt;
</a></p>
<p>The post <a href="https://blogs.windows.com/windowsexperience/2026/05/31/introducing-a-powerful-new-chapter-for-windows-pcs-accelerated-by-nvidia-rtx-spark/">Introducing a powerful new chapter for Windows PCs, accelerated by NVIDIA RTX Spark</a> appeared first on <a href="https://blogs.windows.com/windowsexperience">Windows Experience Blog</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[heise-Angebot: Mastering GitOps 2026: Jetzt noch Frühbuchertickets sichern]]></title>
<description><![CDATA[Wer bei der Online-Konferenz zu praxisrelevanten GitOps-Themen am 25. Juni 2026 zum vergünstigten Tarif dabei sein will, hat noch bis zum 3. Juni Zeit.]]></description>
<link>https://tsecurity.de/de/3558921/it-nachrichten/heise-angebot-mastering-gitops-2026-jetzt-noch-fruehbuchertickets-sichern/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3558921/it-nachrichten/heise-angebot-mastering-gitops-2026-jetzt-noch-fruehbuchertickets-sichern/</guid>
<pubDate>Sat, 30 May 2026 13:17:03 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Wer bei der Online-Konferenz zu praxisrelevanten GitOps-Themen am 25. Juni 2026 zum vergünstigten Tarif dabei sein will, hat noch bis zum 3. Juni Zeit.]]></content:encoded>
</item>
<item>
<title><![CDATA[Rosalind: Open-Source-KI-freie Genom-Analyse in 100 MB für lokale Privatsphäre]]></title>
<description><![CDATA[LONDON (IT BOLTWISE) – Rosalind bringt eine komplette Genom-Analyse-Logik in eine sehr kleine Speicherhülle: Ausrichtung und Variant Calling laufen lokal mit unter 100 MB RAM. Damit rückt die Open-Source-Software zur richtigen Zeit in den Fokus, während nach dem 23andMe-Chapter-11-Fall Datenschut...]]></description>
<link>https://tsecurity.de/de/3558831/it-security-nachrichten/rosalind-open-source-ki-freie-genom-analyse-in-100-mb-fuer-lokale-privatsphaere/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3558831/it-security-nachrichten/rosalind-open-source-ki-freie-genom-analyse-in-100-mb-fuer-lokale-privatsphaere/</guid>
<pubDate>Sat, 30 May 2026 12:22:25 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><img width="1024" height="1024" src="https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb.jpg" class="attachment- size- wp-post-image" alt="" decoding="async" fetchpriority="high" srcset="https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb.jpg 1024w, https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb-300x300.jpg 300w, https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb-150x150.jpg 150w, https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb-768x768.jpg 768w, https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb-840x840.jpg 840w, https://www.it-boltwise.de/wp-content/uploads/2026/05/ai-rosalind-genom-privacy-100mb-120x120.jpg 120w" sizes="(max-width: 1024px) 100vw, 1024px">LONDON (IT BOLTWISE) – Rosalind bringt eine komplette Genom-Analyse-Logik in eine sehr kleine Speicherhülle: Ausrichtung und Variant Calling laufen lokal mit unter 100 MB RAM. Damit rückt die Open-Source-Software zur richtigen Zeit in den Fokus, während nach dem 23andMe-Chapter-11-Fall Datenschutzfragen erneut scharf diskutiert werden. Entscheidend ist die Kombination aus deterministischer Pipeline und hardwarefreundlicher Speicherplanung, die […]</p>
<div><a href="https://www.it-boltwise.de/rosalind-open-source-ki-freie-genom-analyse-in-100-mb-fuer-lokale-privatsphaere.html">... den vollständigen Artikel <strong>»Rosalind: Open-Source-KI-freie Genom-Analyse in 100 MB für lokale Privatsphäre«</strong> lesen</a></div>
<p>Dieser Beitrag <a href="https://www.it-boltwise.de/rosalind-open-source-ki-freie-genom-analyse-in-100-mb-fuer-lokale-privatsphaere.html">Rosalind: Open-Source-KI-freie Genom-Analyse in 100 MB für lokale Privatsphäre</a> erschien als erstes auf <a href="https://www.it-boltwise.de/">IT BOLTWISE x Artificial Intelligence</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[GNOME 51 Development Officially Begins as ‘A Coruña’ Cycle Gets Underway]]></title>
<description><![CDATA[by George Whittaker
      
            The GNOME Project has officially opened the development cycle for GNOME 51, the next major release of one of Linux’s most widely used desktop environments. Following the recent launch of GNOME 50 “Tokyo,” developers are already shifting focus toward the next...]]></description>
<link>https://tsecurity.de/de/3558021/unix-server/gnome-51-development-officially-begins-as-a-corua-cycle-gets-underway/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3558021/unix-server/gnome-51-development-officially-begins-as-a-corua-cycle-gets-underway/</guid>
<pubDate>Sat, 30 May 2026 01:45:55 +0200</pubDate>
<category>🐧 Unix Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div data-history-node-id="1341430" class="layout layout--onecol">
    <div class="layout__region layout__region--content">
      
            <div class="field field--name-field-node-image field--type-image field--label-hidden field--item">  <img loading="lazy" src="https://www.linuxjournal.com/sites/default/files/nodeimage/story/gnome-51-development-officially-begins-as-a-coruna-cycle-gets-underway.jpg" width="850" height="500" alt="GNOME 51 Development Officially Begins as ‘A Coruña’ Cycle Gets Underway" typeof="foaf:Image" class="img-responsive"></div>
      
            <div class="field field--name-node-author field--type-ds field--label-hidden field--item">by <a title="View user profile." href="https://www.linuxjournal.com/users/george-whittaker" lang="" about="https://www.linuxjournal.com/users/george-whittaker" typeof="schema:Person" property="schema:name" datatype="" xml:lang="">George Whittaker</a></div>
      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>The GNOME Project has officially opened the development cycle for <strong>GNOME 51</strong>, the next major release of one of Linux’s most widely used desktop environments. Following the recent launch of <strong>GNOME 50 “Tokyo,”</strong> developers are already shifting focus toward the next chapter of the desktop’s evolution, which will carry the codename <strong>“A Coruña.”</strong></p>

<p>While it’s still very early in the process, the release schedule is now taking shape, giving Linux users and developers an early look at what to expect over the coming months.</p>

<h2><strong>GNOME 51 “A Coruña” Is Now in Development</strong></h2>

<p>The new release is named <strong>A Coruña</strong>, after the Spanish city that will host <strong>GUADEC 2026</strong>, the annual GNOME Users and Developers European Conference. The event serves as one of the most important gatherings for GNOME contributors, where future desktop plans, technologies, and development priorities are discussed.</p>

<p>As soon as GNOME 50 was finalized, development work for GNOME 51 officially began, continuing GNOME’s well-established six-month release cadence.</p>

<h2><strong>Release Schedule Already Published</strong></h2>

<p>The GNOME team has outlined the preliminary roadmap for the GNOME 51 cycle.</p>

<p>Current milestone dates include:</p>

<ul><li><strong>GNOME 51 Alpha:</strong> June 27, 2026</li>
	<li><strong>GNOME 51 Beta:</strong> August 1, 2026</li>
	<li><strong>GNOME 51 Release Candidate (RC):</strong> August 29, 2026</li>
	<li><strong>GNOME 51 Final Release:</strong> September 16, 2026</li>
</ul><p>These milestones provide time for:</p>

<ul><li>Feature integration</li>
	<li>Public testing</li>
	<li>Bug fixing</li>
	<li>Performance optimization</li>
	<li>Final stabilization before release</li>
</ul><p>As always, dates may shift slightly depending on development progress.</p>

<h2><strong>Still Too Early for Major Feature Announcements</strong></h2>

<p>Because the development cycle has only just started, GNOME developers have not yet revealed a finalized feature list. Most major design discussions and merge requests are still in their early stages.</p>

<p>However, several areas are already attracting attention.</p>

<h2><strong>Wayland Improvements Are Likely a Major Focus</strong></h2>

<p>One of the biggest transitions in recent GNOME history happened with <strong>GNOME 50</strong>, which completed the project’s move away from X11 by removing remaining X.Org support from the desktop environment.</p>

<p>Because GNOME is now fully committed to Wayland, many observers expect GNOME 51 to focus heavily on:</p></div>
      
            <div class="field field--name-node-link field--type-ds field--label-hidden field--item">  <a href="https://www.linuxjournal.com/content/gnome-51-development-officially-begins-coruna-cycle-gets-underway" hreflang="en">Go to Full Article</a>
</div>
      
    </div>
  </div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple TV’s new ‘Star City’ series is ‘better than the original show it’s based on’ – Radio Times]]></title>
<description><![CDATA[Apple TV's new series is a bold new chapter inspired by the critically acclaimed space-race drama, “For All Mankind.” “Star City” is…
The post Apple TV’s new ‘Star City’ series is ‘better than the original show it’s based on’ – Radio Times appeared first on MacDailyNews.]]></description>
<link>https://tsecurity.de/de/3557895/ios-mac-os/apple-tvs-new-star-city-series-is-better-than-the-original-show-its-based-on-radio-times/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3557895/ios-mac-os/apple-tvs-new-star-city-series-is-better-than-the-original-show-its-based-on-radio-times/</guid>
<pubDate>Sat, 30 May 2026 01:18:18 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Apple TV's new series is a bold new chapter inspired by the critically acclaimed space-race drama, “For All Mankind.” “Star City” is…</p>
<p>The post <a href="https://macdailynews.com/2026/05/29/apple-tvs-new-star-city-series-is-better-than-the-original-show-its-based-on-radio-times/">Apple TV’s new ‘Star City’ series is ‘better than the original show it’s based on’ – Radio Times</a> appeared first on <a href="https://macdailynews.com/">MacDailyNews</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[IBM und Red Hat investieren Milliarden in Open-Source-Sicherheit]]></title>
<description><![CDATA[width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px">Leistungsfähige KI-Modelle wie Claude Mythos bedrohen den Open-Source-Ansatz. IBM und Red Hat wollen den Fortbestand sichern. Norman Chan / Shutterstock



Open-Source-Code ist in Unternehmen allgegenwärtig; Schätzungen zuf...]]></description>
<link>https://tsecurity.de/de/3557739/it-security-nachrichten/ibm-und-red-hat-investieren-milliarden-in-open-source-sicherheit/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3557739/it-security-nachrichten/ibm-und-red-hat-investieren-milliarden-in-open-source-sicherheit/</guid>
<pubDate>Sat, 30 May 2026 01:13:45 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large is-resized"> width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"&gt;<figcaption class="wp-element-caption">Leistungsfähige KI-Modelle wie Claude Mythos bedrohen den Open-Source-Ansatz. IBM und Red Hat wollen den Fortbestand sichern. </figcaption></figure><p class="imageCredit">Norman Chan / Shutterstock</p></div>



<p>Open-Source-Code ist in Unternehmen allgegenwärtig; Schätzungen zufolge nutzen <a href="https://worldmetrics.org/opensource-statistics/" target="_blank" rel="noreferrer noopener">mehr als 90 Prozent</a> der Fortune-500-Unternehmen ihn in ihren Software-Lieferketten. Open-Source-Code ist jedoch bekanntermaßen voller Schwachstellen und das Aufspüren und Beheben dieser Fehler kann für Sicherheitsteams zu einem endlosen Kampf werden.</p>



<p>IBM und Red Hat setzen darauf, dass eine neue Initiative, <a href="https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era" target="_blank" rel="noreferrer noopener">Project Lightwell</a>, dazu beitragen kann, diesen Prozess zu beschleunigen. Im Rahmen des Projekts wollen die beiden Unternehmen fünf Milliarden Dollar sowie 20.000 Ingenieure von IBM und Red Hat bereitstellen, um eine Art „Clearingstelle“ für Unternehmen aufzubauen.</p>



<p>Den Unternehmen zufolge soll diese als KI-gestützte „Sicherheits-Koordinierungsebene“ dienen und Unternehmen die Möglichkeit geben, Patches direkt in ihre bestehenden Software-Lieferketten zu integrieren.</p>



<p>„Project Lightwell“ befindet sich derzeit in der Konzeptphase mit einer Gruppe von elf Finanzpartnern und soll später als kommerzielles Abonnement angeboten werden.</p>



<p>„Die Fortschritte bei KI-Tools haben die Patching-Landschaft revolutioniert – also die Fähigkeit, Schwachstellen in Software zu entdecken, ohne dabei an Behebungsgeschwindigkeit einzubüßen“, erklärt <a href="https://www.redhat.com/en/about/company/leadership/ashesh-badani" target="_blank" rel="noreferrer noopener">Ashesh Badani</a>, Senior Vice President und Chief Product Officer bei Red Hat, gegenüber CSOonline. „Jeder nutzt Open-Source-Software und die Herausforderung besteht darin, Schwachstellen nicht schnell genug beheben zu können.“</p>



<h2 class="wp-block-heading">Die Lücke bei der Behebung von Schwachstellen schließen</h2>



<p>Die Sicherheitsprobleme bei Open-Source-Software sind gut dokumentiert: Fast 50.000 Common Vulnerabilities and Exposures (CVEs) <a href="https://www.cve.org/about/Metrics">wurden im Jahr 2025 veröffentlicht</a>, und das Project Glasswing von Anthropic, das auf dem <a href="https://www.computerwoche.de/article/4156536/wie-claude-mythos-die-it-sicherheit-veraendert.html">Mythos Preview</a>-Modell basiert, fand kurz nach dem Start rund 3.900 bisher unentdeckte Schwachstellen mit hohem oder kritischem Schweregrad in Open-Source-Software.</p>



<p>IBM betreibt eines der größten kommerziellen Open-Source-Ökosysteme und nutzt mehr als 62<strong>.</strong>000Softwarepakete in Umgebungen wie Linux, Kubernetes, Kafka, Terraform und Java. Das Unternehmen bietet dort bereits Lebenszyklusmanagement, Validierung und Patching an.</p>



<p>Mit Project Lightwell sollen diese Prinzipien nun auf KI-Frameworks, unabhängige Bibliotheken, Sprach-Toolchains und Daten-Streaming-Plattformen ausgeweitet werden. Ziel ist es, validierte Sicherheitskorrekturen für Open-Source-Code bereitzustellen, der bereits in Unternehmensumgebungen eingesetzt wird – ohne Stabilität, Zertifizierungen oder Compliance-Anforderungen zu beeinträchtigen.</p>



<p>IBM zufolge sind dafür keine Upgrades oder der Zugriff auf den Quellcode erforderlich. Project Lightwell werde Sicherheitskorrekturen auf genau die Abhängigkeitsversionen zurückportieren, die bereits getestet und bereitgestellt wurden. Die Lösung arbeitet auf Basis von Konfigurationsdateien wie <em>pom.xml</em>, sodass der Code innerhalb der kontrollierten Unternehmensumgebung verbleibt. Der anfängliche Fokus liegt auf Java/Maven, später sollen auch PyPI, npm, Go und weitere Plattformen unterstützt werden.</p>



<h2 class="wp-block-heading">Diskrete Fehlerbehebung möglich</h2>



<p>Unternehmen sollen zudem die Möglichkeit erhalten, sensible Schwachstellen unter Embargo über ein „sicheres Vermittlermodell“ zu teilen und validierte Patches zu erhalten, die Red Hat-Plattformen und unabhängigen Community-Code abdecken. Darüber hinaus können sie Korrekturen über Abhängigkeitsketten hinweg bereitstellen, Probleme in aktiven Produktionsumgebungen melden und beheben sowie Korrekturen an die Upstream-Community weitergeben, damit diese sie integrieren kann.</p>



<p>„Wir wollen sicherstellen, dass alle Korrekturen, die wir den Unternehmen über die Clearingstelle zur Verfügung stellen, auch wieder ihren Weg zurück in die Open-Source-Projekte finden, die [den Code] entwickelt haben“, erklärt Badani. „Wenn beispielsweise ein Stück Python-Code gepatcht wurde, soll die Korrektur schnell an die Python-Community zurückgeliefert werden.“</p>



<p>Mithilfe fortschrittlicher KI und in Zusammenarbeit mit führenden Open-Source-Mitwirkenden werden sich die Ingenieure von IBM und Red Hat darauf konzentrieren, Upstream- und Downstream-Umgebungen besser zu verbinden, damit die Korrekturen sofort für Unternehmen nutzbar sind. Zudem sollen sie Patches entwickeln, große Mengen an Schwachstellen analysieren und priorisieren sowie Abhängigkeiten absichern.</p>



<p>Badami zufolge stammen die 20.000 Ingenieure aus den bestehenden Teams von IBM und Red Hat. Bei Bedarf sollen weitere Fachkräfte hinzugezogen werden. Die Unternehmen wollen sowohl moderne Foundation-Modelle führender KI-Labore als auch eigene KI-Werkzeuge und Frameworks einsetzen. Die fünf Milliarden Dollar werden in KI-Werkzeuge und den Aufbau der erforderlichen Infrastruktur investiert.</p>



<p>Zu den frühen Unterstützern von Project Lightwell zählen unter anderem Bank of America, BNY, Citi, Goldman Sachs, JPMorganChase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street, Visa und Wells Fargo. Nach der Designphase soll das Angebot schrittweise weiteren Kunden über ein Abonnementmodell zugänglich gemacht werden.</p>



<h2 class="wp-block-heading">Ein Aufruf zum Handeln?</h2>



<p><a href="https://www.linkedin.com/in/dbshipley/" target="_blank" rel="noreferrer noopener">David Shipley</a> von Beauceron Security bezeichnet die Initiative als „dringend notwendig“, wenn Unternehmen Open Source langfristig erhalten wollen. Die Zeit, in der Billionenwerte auf der Arbeit freiwilliger Entwickler beruhten, sei mit Claude Mythos abrupt zu Ende gegangen. Nun müssten Unternehmen ihren Beitrag leisten, um Open Source zu unterstützen.</p>



<p>„Wenn wir keinen Weg finden, in Open Source zu investieren, besteht die Alternative darin, dass jeder seinen eigenen maßgeschneiderten Code mithilfe von KI entwickelt“, erklärt Shipley. Das wäre aus Rechen- und Umweltperspektive „enorm verschwenderisch“.</p>



<h2 class="wp-block-heading">Menschen bleiben unverzichtbar</h2>



<p>Red-Hat-Manager Badani betont, dass KI zwar hervorragend darin sei, Sicherheitsprobleme in Open-Source-Code aufzudecken, der Prozess der Fehlerbehebung jedoch nach wie vor mühsam sein kann. Korrekturen müssten zunächst an die Entwickler weitergeleitet, an die Open-Source-Community verteilt und dann an Kunden und Nutzer zurückgespielt werden.</p>



<p>„Den Fehler zu finden ist eine Sache“, so Badani. „Die eigentliche Herausforderung sind die vielen Schritte, die erforderlich sind, um ihn tatsächlich zu beheben. Genau diesen zusätzlichen Zeitaufwand wollen wir verkürzen.“</p>



<p>Während die öffentliche Diskussion häufig davon geprägt sei, menschliche Entwickler durch KI zu ersetzen, verfolge Project Lightwell den gegenteiligen Ansatz, fügte der Red-Hat-CPO an „Wir können das Problem mit einer Kombination aus KI-Tools und menschlichem Wissen und Fachkompetenz angehen. Die Verbindung beider Aspekte führt zu einem besseren Ergebnis als ausschließlich das eine oder das andere zu nutzen.“ (mb)</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Why I’m grateful to the Pope for his encyclical on AI | Francine Prose]]></title>
<description><![CDATA[The intelligent and thoughtful encyclical is an important warning of the uses and misuses of a rapidly developing technology. Silicon Valley is wrong to dismiss itOften I’m asked if I think that the novels of the future will all be written by AI. It’s not so much a question as a provocation. Do I...]]></description>
<link>https://tsecurity.de/de/3556740/ai-nachrichten/why-im-grateful-to-the-pope-for-his-encyclical-on-ai-francine-prose/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3556740/ai-nachrichten/why-im-grateful-to-the-pope-for-his-encyclical-on-ai-francine-prose/</guid>
<pubDate>Fri, 29 May 2026 12:03:01 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>The intelligent and thoughtful encyclical is an important warning of the uses and misuses of a rapidly developing technology. Silicon Valley is wrong to dismiss it</p><p>Often I’m asked if I think that the novels of the future will all be written by AI. It’s not so much a question as a provocation. Do I worry that a machine can do what I do, only better? I usually say something like: “No algorithm is going to write Anna Karenina!” which is also not a real answer.</p><p>So I’m grateful to Pope Leo XIV, the American pope, for his recently issued letter to the world, Magnifica Humanitas: On Safeguarding the Human Person in the Time of Artificial Intelligence. It’s a long (more than 40,00 words), intelligent and thoughtful encyclical in which the pope addresses the uses and misuses of a rapidly developing technology. Now when someone asks my opinion of AI, I can refer them to the pope’s letter, or at least chapter three.</p> <a href="https://www.theguardian.com/commentisfree/2026/may/29/pope-ai-encyclical">Continue reading...</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[Android Lock Screen Bypass via Google Gemini — The Patch That Wasn’t (Status: Not Fixed)]]></title>
<description><![CDATA[TL;DR: On a fully patched Pixel 6a running Android 16, an attacker with physical access can escape the lock screen in under 60 seconds using Google Gemini’s Deep Research feature — no PIN, no password, no biometrics. This is a bypass of a previously patched vulnerability rewarded by Google VRP.A ...]]></description>
<link>https://tsecurity.de/de/3556667/hacking/android-lock-screen-bypass-via-google-gemini-the-patch-that-wasnt-status-not-fixed/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3556667/hacking/android-lock-screen-bypass-via-google-gemini-the-patch-that-wasnt-status-not-fixed/</guid>
<pubDate>Fri, 29 May 2026 11:35:33 +0200</pubDate>
<category>🕵️ Hacking</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<blockquote><strong><em>TL;DR:</em></strong><em> On a fully patched Pixel 6a running Android 16, an attacker with physical access can escape the lock screen in under 60 seconds using Google Gemini’s Deep Research feature — no PIN, no password, no biometrics. This is a bypass of a previously patched vulnerability rewarded by Google VRP.</em></blockquote><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*GtcMzQLlraaErqAYMntAYw.png"></figure><h3>A Bit of Context</h3><p>Back in 2024, I found and reported a lock screen bypass involving Google Gemini to the Google Vulnerability Reward Program. Google acknowledged it, rewarded it, and published details in September 2025.</p><p>I assumed the chapter was closed.</p><p>Then in April 2026, on a fully updated Pixel 6a with the March 2026 security patch, I reproduced the same class of vulnerability using a different path. Same boundary. Different door.</p><h3>What’s at Stake</h3><blockquote><em>An attacker with brief physical access to a locked Android device can without ever entering a PIN, pattern, or biometric switch Google accounts, modify security settings, read and exfiltrate Gemini conversation history, and set up persistent lock screen messaging and calling capabilities.</em></blockquote><p>The device stays locked the entire time. No failed unlock attempts are logged. The victim has no indication anything happened.</p><h3>How It Works</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*bOyNm4U5y_WI9LnCxRzuZw.png"></figure><p><strong>Step 1.</strong> Lock the device. Confirm PIN is required to access the home screen.</p><p><strong>Step 2.</strong> Long-press the power button to invoke Gemini on the lock screen. This is by design — no authentication required at this step.</p><p><strong>Step 3.</strong> Long-press the <strong>gear icon</strong> inside the Gemini overlay. Additional options surface.</p><p><strong>Step 4.</strong> Select <strong>“Deep Research.”</strong> This is the pivot point. The full Gemini application launches — transitioning out of the constrained lock screen overlay into a full app context.</p><p><strong>Step 5.</strong> Immediately press and hold the <strong>“+” icon</strong>. This races the re-authentication dialog that would normally appear, preventing it from taking focus. The prompt never completes &amp; You’re in.</p><h3>Proof of Concept</h3><p><a href="https://www.youtube.com/watch?v=Hk7N3ao3ASc"><em>Video Demonstration</em></a></p><p>The video walks through the full chain — from a locked device through account switching, settings modification, and conversation access — with zero authentication at any step.</p><h3>Root Cause</h3><figure><img alt="" src="https://cdn-images-1.medium.com/max/1024/1*su8Ig3Ogb8OG99WFbwZXXg.png"><figcaption>Root cause</figcaption></figure><p>There are three things going wrong simultaneously:</p><p><strong>1. No authentication check on context transition.</strong> When Deep Research launches the full Gemini app, Android does not verify the device is unlocked before granting access to privileged functionality. The launched from lock screen flag is simply not propagated to child activities.</p><p><strong>2. A raceable re-authentication dialog.</strong> The re-auth prompt is a UI dialog — not a system-level gate. Holding the “+” icon at the right moment prevents it from taking focus. It’s a software lock with a physical bypass.</p><p><strong>3. The original patch was too narrow.</strong> The previous fix addressed one specific navigation path. It didn’t address the underlying principle: <em>any</em> Gemini sub-feature capable of launching a full app context is a potential escape route.</p><blockquote>The root issue isn’t Deep Research specifically. It’s that the lock screen boundary has no hard enforcement once you’re past the initial overlay.</blockquote><h3>What an Attacker Can Do</h3><p>Once inside, the attack surface is significant:</p><ul><li><strong>Account reconnaissance</strong> — tap the avatar to see every Google account signed into the device</li><li><strong>Persistent downgrade</strong> — enable “Perform actions on lock screen,” “Send messages,” and “Make calls” in Gemini settings. Every future lock screen interaction now has expanded capabilities — for anyone</li><li><strong>Data exfiltration</strong> — Gemini conversation history may contain sensitive personal, medical, financial, or professional queries. Share it to any external contact in seconds</li><li><strong>Anti-forensics</strong> — delete conversations after reading them. No trace left</li></ul><p>The entire operation takes under 60 seconds and requires zero technical skill after the initial discovery.</p><h3>The Fix</h3><p>Three things need to happen:</p><ol><li><strong>Hard system gate, not a UI dialog.</strong> Any transition from a lock screen assistant overlay to a full application context must require authentication enforced at the WindowManager/system level — something that cannot be raced or suppressed by a UI interaction.</li><li><strong>Feature restriction in lock screen context.</strong> Deep Research, account switching, settings, history access, and share/delete must be disabled when the device is locked — regardless of how the user navigated there.</li><li><strong>Flag propagation.</strong> The launched from lock screen context must be inherited by every child activity and fragment. No sub-feature should be able to shed it.</li></ol><blockquote>And given this is the second bypass of the same boundary: a full audit of every Gemini entry point accessible from the lock screen is overdue.</blockquote><h3>Final Thought</h3><p>Lock screen security is one promise an OS makes that users never think to question. When AI assistants start opening doors inside that boundary, the attack surface grows in ways that are hard to enumerate — and patchwork fixes will keep falling behind.</p><blockquote>The right solution is a single, hard, non-raceable gate between “the overlay” and “the app.” Until that exists, the boundary is a suggestion.</blockquote><p><em>Found this useful? Follow me for more security writups.</em></p><img src="https://medium.com/_/stat?event=post.clientViewed&amp;referrerSource=full_rss&amp;postId=5509c5c21630" width="1" height="1" alt=""><hr><p><a href="https://infosecwriteups.com/android-lock-screen-bypass-via-google-gemini-the-patch-that-wasnt-5509c5c21630">Android Lock Screen Bypass via Google Gemini — The Patch That Wasn’t (Status: Not Fixed)</a> was originally published in <a href="https://infosecwriteups.com/">InfoSec Write-ups</a> on Medium, where people are continuing the conversation by highlighting and responding to this story.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[IBM·레드햇, 기업용 오픈소스 보안 컨트롤타워 구축 나서]]></title>
<description><![CDATA[기업 환경에서 오픈소스 코드는 사실상 필수 요소가 됐다. 포춘 500대 기업의 90% 이상이 소프트웨어 공급망에 오픈소스 코드를 포함하고 있는 것으로 추정된다. 그러나 오픈소스는 수많은 보안 취약점을 안고 있는 경우가 많아, 이를 찾아내고 패치하는 작업은 보안팀의 끝없는 과제로 꼽힌다.



IBM과 레드햇은 이러한 문제를 해결하기 위해 새로운 프로젝트인 ‘프로젝트 라이트웰(Project Lightwell)’을 추진한다.



29일 공개된 프로젝트 라이트웰은 50억 달러(약 6조 8,000억 원)와 IBM 및 레드햇 엔지니어...]]></description>
<link>https://tsecurity.de/de/3556101/it-nachrichten/ibm/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3556101/it-nachrichten/ibm/</guid>
<pubDate>Fri, 29 May 2026 07:05:07 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>기업 환경에서 오픈소스 코드는 사실상 필수 요소가 됐다. 포춘 500대 기업의 90% 이상이 소프트웨어 공급망에 오픈소스 코드를 포함하고 있는 것으로 <a href="https://worldmetrics.org/opensource-statistics/" target="_blank" rel="nofollow">추정된다</a>. 그러나 오픈소스는 수많은 보안 취약점을 안고 있는 경우가 많아, 이를 찾아내고 패치하는 작업은 보안팀의 끝없는 과제로 꼽힌다.</p>



<p>IBM과 레드햇은 이러한 문제를 해결하기 위해 새로운 프로젝트인 ‘<a href="https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era" target="_blank" rel="nofollow">프로젝트 라이트웰</a>(Project Lightwell)’을 추진한다.</p>



<p>29일 공개된 프로젝트 라이트웰은 50억 달러(약 6조 8,000억 원)와 IBM 및 레드햇 엔지니어 2만 명을 투입해 오픈소스 소프트웨어의 취약점 발견과 대응을 가속화하는 새로운 ‘엔터프라이즈 클리어링하우스(Enterprise Clearinghouse)’를 구축하는 것이 목표다. 양사는 이 클리어링하우스가 AI 기반 ‘보안 조정 계층(Security Coordination Layer)’ 역할을 수행해 기업이 기존 소프트웨어 공급망에 패치를 직접 통합할 수 있도록 지원할 것이라고 밝혔다.</p>



<p>프로젝트 라이트웰은 현재 11개 금융기관과 함께 설계 단계에 있으며, 향후 구독형 상용 서비스로 제공될 예정이다.</p>



<p>레드햇의 수석부사장 겸 최고제품책임자(CPO) <a href="https://www.redhat.com/en/about/company/leadership/ashesh-badani" target="_blank" rel="nofollow">아셰시 바다니</a>는 “AI 도구의 발전으로 취약점을 발견하면서도 대응 속도를 유지할 수 있는 환경이 마련됐다”라며 “대부분의 기업이 오픈소스 소프트웨어를 사용하고 있지만, 취약점을 충분히 빠르게 해결하지 못하는 것이 가장 큰 과제”라고 CSO온라인에 설명했다.</p>



<h2 class="wp-block-heading">취약점 대응 격차 해소 나선 IBM·레드햇</h2>



<p>오픈소스 보안 문제는 이미 널리 알려져 있다. <a href="https://www.cve.org/about/Metrics" target="_blank" rel="nofollow">2025년 한 해 동안</a> 공개된 공통 취약점 및 노출(CVE)은 약 5만 건에 달했다. 또한 앤트로픽의 미토스 프리뷰(Mythos Preview) 모델 기반 ‘프로젝트 글래스윙(Project Glasswing)’은 출시 직후 오픈소스 소프트웨어에서 약 3,900건의 미발견 고위험 및 치명적 취약점을 찾아냈다.</p>



<p>IBM은 업계에서 가장 폭넓은 상용 오픈소스 생태계를 보유한 기업 가운데 하나로 평가받는다. 현재 6만 2,000개 이상의 패키지를 활용하고 있으며, 리눅스(Linux), 쿠버네티스(Kubernetes), 카프카(Kafka), 테라폼(Terraform), 자바(Java) 등 다양한 플랫폼에서 운영·검증·패치 및 라이프사이클 관리 서비스를 제공하고 있다.</p>



<p>IBM은 프로젝트 라이트웰을 통해 이러한 엔지니어링 원칙을 AI 프레임워크, 독립 라이브러리, 언어 툴체인, 데이터 스트리밍 플랫폼 등으로 확대 적용할 계획이다. 이를 통해 기업 환경에서 이미 사용 중인 오픈소스 코드에 검증된 수정 사항을 제공하고, 시스템 안정성이나 인증, 규제 준수에 영향을 주지 않으면서 취약점을 해결할 수 있도록 지원한다는 설명이다.</p>



<p>프로젝트 라이트웰은 소스코드 접근 권한이나 버전 업그레이드를 요구하지 않는다. 이미 테스트와 배포가 완료된 정확한 의존성 버전에 맞춰 수정 사항을 역이식(backport)하는 방식으로 운영된다. 또한 pom.xml과 같은 구성 매니페스트를 기반으로 작동해 패치된 아티팩트가 배포되더라도 코드는 기업의 통제된 운영 환경 내에 그대로 유지된다. 초기에는 자바·메이븐(Java/Maven) 생태계에 집중하지만, 향후 PyPI, npm, Go 등으로 지원 범위를 확대할 예정이다.</p>



<p>기업은 ‘보안 중개 모델(Secure Intermediary Model)’을 통해 공개 전 단계의 민감한 취약점 정보를 안전하게 공유할 수 있으며, 레드햇 플랫폼은 물론 독립 오픈소스 커뮤니티 코드에 대한 검증된 패치도 받을 수 있다. 또한 의존성 체인 전반에 걸쳐 수정 사항을 배포하고, 운영 환경에서 발견된 문제를 보고·해결하며, 수정 사항을 다시 업스트림에 공유해 오픈소스 커뮤니티 전체가 활용할 수 있도록 지원한다.</p>



<p>레드햇의 수석부사장 겸 최고제품책임자(CPO) 아셰시 바다니는 “클리어링하우스를 통해 기업에 제공하는 수정 사항이 해당 코드를 개발한 오픈소스 커뮤니티에도 다시 전달되도록 하는 것이 중요하다”라며 “예를 들어 파이썬 코드의 취약점을 수정했다면 그 결과가 신속하게 파이썬 커뮤니티에도 공유돼야 한다”고 설명했다. 이어 “프로젝트 라이트웰은 이러한 과정을 안전하게 연결하는 ‘보안 지도(Secure Map)’ 역할을 수행할 것”이라고 덧붙였다.</p>



<p>IBM과 레드햇 엔지니어들은 첨단 AI 기술과 주요 오픈소스 기여자들과의 협력을 바탕으로 업스트림과 다운스트림 환경을 연결해 기업 환경에 바로 적용할 수 있는 패치를 개발할 계획이다. 이와 함께 대규모 취약점 검토 및 분류 작업, 의존성 강화 작업도 수행한다.</p>



<p>바다니는 “프로젝트에 투입되는 2만 명의 엔지니어는 IBM과 레드햇이 보유한 기존 인력으로 구성되며, 필요에 따라 추가 인력을 배치할 예정”이라고 설명했다. 양사는 최첨단 AI 연구소들이 개발한 파운데이션 모델과 자체 개발한 AI 도구 및 프레임워크를 함께 활용할 계획이다. 50억 달러(약 6조 8,000억 원)의 투자금은 AI 도구 도입과 내부 운영 인프라 구축에 사용된다.</p>



<p>프로젝트 라이트웰의 초기 참여 기업으로는 뱅크오브아메리카(Bank of America), BNY, 씨티(Citi), 골드만삭스(Goldman Sachs), JP모건체이스(JPMorganChase), 마스터카드(Mastercard), 모건스탠리(Morgan Stanley), 캐나다왕립은행(Royal Bank of Canada), 스테이트스트리트(State Street), 비자(Visa), 웰스파고(Wells Fargo) 등이 포함됐다. IBM과 레드햇은 초기 설계 단계가 마무리되면 구독형 모델을 통해 더 많은 고객으로 프로젝트를 확대할 계획이다.</p>



<h2 class="wp-block-heading">오픈소스 생태계를 위한 투자 촉구</h2>



<p>보서론 시큐리티(Beauceron Security)의 <a href="https://www.linkedin.com/in/dbshipley/" target="_blank" rel="nofollow">데이비드 십리</a>는 기업이 오픈소스 생태계를 지속 가능하게 유지하려면 이와 같은 프로젝트가 “절실히 필요하다”고 평가했다.</p>



<p>십리는 미토스(Mythos)의 등장으로 막대한 규모의 디지털 자산이 자원봉사자들의 노력에 의존하던 시대는 사실상 막을 내렸다고 지적했다. 이제 오픈소스 생태계 유지 비용을 기업이 부담해야 할 시점이 왔으며, 그렇지 않으면 결국 그 혜택을 잃게 될 것이라는 설명이다.</p>



<p>십리는 “오픈소스에 투자할 방법을 찾지 못한다면, 오랫동안 이어져 온 형평성 문제도 해결할 수 없게 된다”라며 “그 대안은 모든 기업이 AI를 활용해 각자 맞춤형 코드를 개발하는 것뿐”이라고 말했다. 이어 “이는 컴퓨팅 자원과 환경 측면에서 매우 비효율적이고 낭비가 큰 방식”이라고 지적했다.</p>



<p>또한 “이번 프로젝트가 다른 기업들의 행동을 촉발하는 계기가 되기를 기대한다”고 밝혔다.</p>



<h2 class="wp-block-heading">인간의 역할은 여전히 중요</h2>



<p>바다니는 AI가 오픈소스 코드의 보안 취약점을 발견하는 데는 뛰어난 성능을 발휘하지만, 실제 패치 과정은 여전히 복잡하고 시간이 많이 소요된다고 강조했다.</p>



<p>취약점이 발견되면 수정 사항을 업스트림 프로젝트에 전달해야 하고, 이후 오픈소스 커뮤니티 전체에 배포된 뒤 다시 고객과 사용자 환경으로 전달되는 과정을 거쳐야 한다.</p>



<p>바다니는 “버그를 발견하는 것과 실제로 이를 해결하는 것은 전혀 다른 문제”라며 “실제 수정 작업에는 수많은 절차가 필요하며, 그 과정에서 발생하는 시간 지연이 우리가 줄이고자 하는 격차”라고 설명했다.</p>



<p>문제의 심각성을 보여주듯 프로젝트 라이트웰 발표 이후 IBM과 레드햇에는 관련 문의와 참여 요청이 쇄도하고 있는 것으로 알려졌다.</p>



<p>바다니는 “이 문제는 가까운 시일 내에 사라지지 않을 것”이라며 “초기 과제를 성공적으로 해결하더라도 기업은 이러한 지원을 지속적이고 반복적으로 필요로 하게 될 것”이라고 전망했다.</p>



<p>최근 AI가 인간 엔지니어를 대체할 것이라는 논의가 확산되고 있지만, 프로젝트 라이트웰은 오히려 AI와 인간의 협업에 초점을 맞추고 있다.</p>



<p>바다니는 “AI 도구와 인간의 지식, 전문성을 결합하면 이 문제를 훨씬 효과적으로 해결할 수 있다”라며 “둘 중 하나만 사용하는 것보다 두 요소를 함께 활용할 때 더 나은 결과를 얻을 수 있다”고 강조했다.<br>dl-ciokorea@foundryco.com</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise]]></title>
<description><![CDATA[Open source code is everywhere in the enterprise; it’s estimated that upwards of 90% of Fortune 500 companies have it in their software supply chains. But open source code is notoriously rife with vulnerabilities, and identifying and patching those bugs can be an endless battle for security teams...]]></description>
<link>https://tsecurity.de/de/3555858/ai-nachrichten/ibm-and-red-hat-want-to-become-the-security-clearinghouse-for-open-source-applications-in-the-enterprise/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3555858/ai-nachrichten/ibm-and-red-hat-want-to-become-the-security-clearinghouse-for-open-source-applications-in-the-enterprise/</guid>
<pubDate>Fri, 29 May 2026 04:02:40 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>Open source code is everywhere in the enterprise; it’s estimated that <a href="https://worldmetrics.org/opensource-statistics/" target="_blank" rel="noreferrer noopener">upwards of 90%</a> of Fortune 500 companies have it in their software supply chains. But open source code is notoriously rife with vulnerabilities, and identifying and patching those bugs can be an endless battle for security teams.</p>



<p>IBM and Red Hat are betting that a new initiative, <a href="https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era" target="_blank" rel="noreferrer noopener">Project Lightwell</a>, can help accelerate this process.</p>



<p>Announced today, the project will commit $5 billion and 20,000 IBM and Red Hat engineers to build a new ‘enterprise clearinghouse’ to accelerate discovery and remediation of vulnerabilities in open source software. The companies say the clearinghouse will serve as an AI-powered  “security coordination layer,” giving enterprises the ability to integrate patches directly into their existing software supply chains.</p>



<p>Now in the design phase with a group of 11 financial partners, Project Lightwell will eventually be offered as a commercial subscription.</p>



<p>“The advancement in AI tools has broken the patching map, which is the ability to discover vulnerabilities in software without losing the speed of remediation,” <a href="https://www.redhat.com/en/about/company/leadership/ashesh-badani" target="_blank" rel="noreferrer noopener">Ashesh Badani</a>, Red Hat SVP and CPO, told CSOonline. “Everyone’s running open source software, and the challenge is not being able to fix vulnerabilities quickly enough.”</p>



<h2 class="wp-block-heading">Closing the remediation gap</h2>



<p>Open source security issues have been well documented: Almost 50,000 common vulnerabilities and exposures (CVEs) <a href="https://www.cve.org/about/Metrics" target="_blank" rel="noreferrer noopener">were published in 2025</a>, and Anthropic’s Project Glasswing, powered by its <a href="https://www.computerworld.com/article/4160021/anthropics-latest-model-is-deliberately-less-powerful-than-mythos-and-thats-the-point.html" target="_blank">Mythos Preview</a> model, found <a href="https://www.csoonline.com/article/4176865/project-glasswing-has-uncovered-10000-vulnerabilities-anthropic.html" target="_blank">roughly 3,900</a> previously undiscovered high or critical severity vulnerabilities in open source software shortly after launch.</p>



<p>IBM is considered one of the broadest commercial open source ecosystems, using more than 62,000 packages and operating across Linux, Kubernetes, Kafka, Terraform, Java and other platforms, and providing lifecycle management, validation, and patching for elements within those environments.</p>



<p>The company says Project Lightwell will now apply those same engineering principles to broader AI frameworks, independent libraries, language toolchains, and data streaming platforms, to deliver validated fixes to open-source code already in use in enterprise environments. This can support remediation without disruption of stability, certification, or compliance.</p>



<p>No upgrades or access to source code are required; Project Lightwell will backport fixes to exact dependency versions that have already been tested and deployed. It operates on fundamental configuration manifests like pom.xml so code remains in controlled enterprise environments when patched artifacts are rolled out. Initial focus will be on Java/Maven, but the project will eventually expand to PyPI, npm, Go, and others.</p>



<p>Enterprises will have the ability to share <a href="https://www.csoonline.com/article/4176086/vulnerabilities-have-become-cyber-attackers-no-1-door-to-the-enterprise.html" target="_blank">sensitive vulnerabilities</a> under embargo through a “secure intermediary model” and receive validated patches spanning Red Hat platforms and independent community code. They will also be able to deliver fixes across dependency chains; report and address issues across active production environments; and share fixes upstream so the wider open-source community can incorporate them.</p>



<p>“We want to make sure that whatever fixes we provide to the enterprises through the clearinghouse also find their way back into the open source community that developed [the code],” Badani explained. For instance, if a piece of Python code was patched, the fix should be quickly delivered back to the Python community. With Project Lightwell, that process can be achieved through a “secure map.”</p>



<p>Using advanced AI, and working with leading open source contributors, IBM and Red Hat engineers will focus on connecting upstream and downstream environments so fixes are enterprise-ready. They will also develop patches and perform “high volume” vulnerability review and triage, and dependency hardening.</p>



<p>The network of 20,000 engineers will come from IBM’s and Red Hat’s existing pools of talent, and the companies will augment those teams as needed, Badani explained. The companies will take advantage of foundation models coming out of frontier labs, as well as their own internally-built AI tools and frameworks. The $5 billion will be used to equip teams with AI tools and build out internal operational infrastructure.</p>



<p>Early Project Lightwell adopters include Bank of America, BNY, Citi, Goldman Sachs, JPMorganChase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street, Visa, and Wells Fargo. Following the initial design period, IBM and Red Hat will phase more customers onto Project Lightwell via a subscription model.</p>



<h2 class="wp-block-heading">A call to action?</h2>



<p>This type of initiative is “desperately needed” if enterprise is to save open source, noted <a href="https://www.linkedin.com/in/dbshipley/" target="_blank" rel="noreferrer noopener">David Shipley</a> of Beauceron Security.</p>



<p>The days of trillions in wealth depending on volunteers “ended violently” with Mythos, he noted, and the bill has ultimately come due for open source. Enterprises will need to pay up, or lose it.</p>



<p>“If we don’t find a way to invest in open source, which will close a long-standing equity issue, the alternative is everyone building their own bespoke code using AI,” Shipley said. That would be “massively wasteful” from a compute and environmental perspective.</p>



<p>“I hope this drives others to act,” he said.</p>



<h2 class="wp-block-heading">Keeping humans in the loop for an ongoing battle</h2>



<p>Badani emphasized that, while AI is great at discovering <a href="https://www.csoonline.com/article/4177903/ai-models-more-vulnerable-than-claimed-when-faced-with-iterative-attacks.html" target="_blank">security issues</a> in open-source code, the patching process can still be cumbersome. Fixes have to be sent upstream, distributed to the open source community, then flow back to customers and users.</p>



<p>“Finding the bug is one thing,” said Badani. “The other is all the steps that it takes to actually go and remediate it. That extra amount of time is the gap that we’re trying to help close.”</p>



<p>Underscoring the severity of the problem, IBM and Red Hat have already had an “onslaught of incoming requests” since Project Lightwell was announced.</p>



<p>“This isn’t going to stop any time soon,” Badani said. “Even if we were to very successfully solve the initial set of challenges that come to us, this will be something that companies are going to need on an ongoing or recurring basis.”</p>



<p>And, while the narrative has focused on cutting human engineers in favor of AI, Project Lightwell is focused on the opposite: “We can address [the problem] with a mixture of AI tools and human knowledge and expertise,” Badani said. “Coupling the two gives you a better outcome than just using one or the other.”</p>
</div></div></div>
</div>]]></content:encoded>
</item>
<item>
<title><![CDATA[IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise]]></title>
<description><![CDATA[Open source code is everywhere in the enterprise; it’s estimated that upwards of 90% of Fortune 500 companies have it in their software supply chains. But open source code is notoriously rife with vulnerabilities, and identifying and patching those bugs can be an endless battle for security teams...]]></description>
<link>https://tsecurity.de/de/3555829/it-security-nachrichten/ibm-and-red-hat-want-to-become-the-security-clearinghouse-for-open-source-applications-in-the-enterprise/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3555829/it-security-nachrichten/ibm-and-red-hat-want-to-become-the-security-clearinghouse-for-open-source-applications-in-the-enterprise/</guid>
<pubDate>Fri, 29 May 2026 03:07:03 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>Open source code is everywhere in the enterprise; it’s estimated that <a href="https://worldmetrics.org/opensource-statistics/" target="_blank" rel="noreferrer noopener">upwards of 90%</a> of Fortune 500 companies have it in their software supply chains. But open source code is notoriously rife with vulnerabilities, and identifying and patching those bugs can be an endless battle for security teams.</p>



<p>IBM and Red Hat are betting that a new initiative, <a href="https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era" target="_blank" rel="noreferrer noopener">Project Lightwell</a>, can help accelerate this process.</p>



<p>Announced today, the project will commit $5 billion and 20,000 IBM and Red Hat engineers to build a new ‘enterprise clearinghouse’ to accelerate discovery and remediation of vulnerabilities in open source software. The companies say the clearinghouse will serve as an AI-powered  “security coordination layer,” giving enterprises the ability to integrate patches directly into their existing software supply chains.</p>



<p>Now in the design phase with a group of 11 financial partners, Project Lightwell will eventually be offered as a commercial subscription.</p>



<p>“The advancement in AI tools has broken the patching map, which is the ability to discover vulnerabilities in software without losing the speed of remediation,” <a href="https://www.redhat.com/en/about/company/leadership/ashesh-badani" target="_blank" rel="noreferrer noopener">Ashesh Badani</a>, Red Hat SVP and CPO, told CSOonline. “Everyone’s running open source software, and the challenge is not being able to fix vulnerabilities quickly enough.”</p>



<h2 class="wp-block-heading">Closing the remediation gap</h2>



<p>Open source security issues have been well documented: Almost 50,000 common vulnerabilities and exposures (CVEs) <a href="https://www.cve.org/about/Metrics" target="_blank" rel="noreferrer noopener">were published in 2025</a>, and Anthropic’s Project Glasswing, powered by its <a href="https://www.computerworld.com/article/4160021/anthropics-latest-model-is-deliberately-less-powerful-than-mythos-and-thats-the-point.html" target="_blank">Mythos Preview</a> model, found <a href="https://www.csoonline.com/article/4176865/project-glasswing-has-uncovered-10000-vulnerabilities-anthropic.html" target="_blank">roughly 3,900</a> previously undiscovered high or critical severity vulnerabilities in open source software shortly after launch.</p>



<p>IBM is considered one of the broadest commercial open source ecosystems, using more than 62,000 packages and operating across Linux, Kubernetes, Kafka, Terraform, Java and other platforms, and providing lifecycle management, validation, and patching for elements within those environments.</p>



<p>The company says Project Lightwell will now apply those same engineering principles to broader AI frameworks, independent libraries, language toolchains, and data streaming platforms, to deliver validated fixes to open-source code already in use in enterprise environments. This can support remediation without disruption of stability, certification, or compliance.</p>



<p>No upgrades or access to source code are required; Project Lightwell will backport fixes to exact dependency versions that have already been tested and deployed. It operates on fundamental configuration manifests like pom.xml so code remains in controlled enterprise environments when patched artifacts are rolled out. Initial focus will be on Java/Maven, but the project will eventually expand to PyPI, npm, Go, and others.</p>



<p>Enterprises will have the ability to share <a href="https://www.csoonline.com/article/4176086/vulnerabilities-have-become-cyber-attackers-no-1-door-to-the-enterprise.html" target="_blank">sensitive vulnerabilities</a> under embargo through a “secure intermediary model” and receive validated patches spanning Red Hat platforms and independent community code. They will also be able to deliver fixes across dependency chains; report and address issues across active production environments; and share fixes upstream so the wider open-source community can incorporate them.</p>



<p>“We want to make sure that whatever fixes we provide to the enterprises through the clearinghouse also find their way back into the open source community that developed [the code],” Badani explained. For instance, if a piece of Python code was patched, the fix should be quickly delivered back to the Python community. With Project Lightwell, that process can be achieved through a “secure map.”</p>



<p>Using advanced AI, and working with leading open source contributors, IBM and Red Hat engineers will focus on connecting upstream and downstream environments so fixes are enterprise-ready. They will also develop patches and perform “high volume” vulnerability review and triage, and dependency hardening.</p>



<p>The network of 20,000 engineers will come from IBM’s and Red Hat’s existing pools of talent, and the companies will augment those teams as needed, Badani explained. The companies will take advantage of foundation models coming out of frontier labs, as well as their own internally-built AI tools and frameworks. The $5 billion will be used to equip teams with AI tools and build out internal operational infrastructure.</p>



<p>Early Project Lightwell adopters include Bank of America, BNY, Citi, Goldman Sachs, JPMorganChase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street, Visa, and Wells Fargo. Following the initial design period, IBM and Red Hat will phase more customers onto Project Lightwell via a subscription model.</p>



<h2 class="wp-block-heading">A call to action?</h2>



<p>This type of initiative is “desperately needed” if enterprise is to save open source, noted <a href="https://www.linkedin.com/in/dbshipley/" target="_blank" rel="noreferrer noopener">David Shipley</a> of Beauceron Security.</p>



<p>The days of trillions in wealth depending on volunteers “ended violently” with Mythos, he noted, and the bill has ultimately come due for open source. Enterprises will need to pay up, or lose it.</p>



<p>“If we don’t find a way to invest in open source, which will close a long-standing equity issue, the alternative is everyone building their own bespoke code using AI,” Shipley said. That would be “massively wasteful” from a compute and environmental perspective.</p>



<p>“I hope this drives others to act,” he said.</p>



<h2 class="wp-block-heading">Keeping humans in the loop for an ongoing battle</h2>



<p>Badani emphasized that, while AI is great at discovering <a href="https://www.csoonline.com/article/4177903/ai-models-more-vulnerable-than-claimed-when-faced-with-iterative-attacks.html" target="_blank">security issues</a> in open-source code, the patching process can still be cumbersome. Fixes have to be sent upstream, distributed to the open source community, then flow back to customers and users.</p>



<p>“Finding the bug is one thing,” said Badani. “The other is all the steps that it takes to actually go and remediate it. That extra amount of time is the gap that we’re trying to help close.”</p>



<p>Underscoring the severity of the problem, IBM and Red Hat have already had an “onslaught of incoming requests” since Project Lightwell was announced.</p>



<p>“This isn’t going to stop any time soon,” Badani said. “Even if we were to very successfully solve the initial set of challenges that come to us, this will be something that companies are going to need on an ongoing or recurring basis.”</p>



<p>And, while the narrative has focused on cutting human engineers in favor of AI, Project Lightwell is focused on the opposite: “We can address [the problem] with a mixture of AI tools and human knowledge and expertise,” Badani said. “Coupling the two gives you a better outcome than just using one or the other.”</p>



<p><em>This article originally appeared on <a href="https://www.infoworld.com/article/4178451/ibm-and-red-hat-want-to-become-the-security-clearinghouse-for-open-source-applications-in-the-enterprise.html" target="_blank">InfoWorld</a>.</em></p>



<p></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Supply Chain Compromises Impact Nx Console and GitHub Repositories]]></title>
<description><![CDATA[CISA is prioritizing the response to multiple emerging software supply chain intrusion campaigns targeting developer ecosystems Continuous Integration/Continuous Development (CI/CD) pipelines. These recent incidents, including the GitHub compromise via a malicious Nx Console Visual Studio Code (V...]]></description>
<link>https://tsecurity.de/de/3555435/it-security-nachrichten/supply-chain-compromises-impact-nx-console-and-github-repositories/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3555435/it-security-nachrichten/supply-chain-compromises-impact-nx-console-and-github-repositories/</guid>
<pubDate>Thu, 28 May 2026 22:07:43 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>CISA is prioritizing the response to multiple emerging software supply chain intrusion campaigns targeting developer ecosystems Continuous Integration/Continuous Development (CI/CD) pipelines. These recent incidents, including the GitHub compromise via a malicious Nx Console Visual Studio Code (VS Code) extension and the “Megalodon” supply chain intrusion campaign, demonstrate how cyber threat actors are abusing tools and processes that support enterprise, cloud, and DevOps environments—specifically CI/CD pipelines, code extensions and workflows. </p>
<p>Threat actors leveraged a prior compromise of Nx developer systems to compromise a GitHub employee’s device through a poisoned third-party VS Code extension, resulting in unauthorized access and exfiltration of internal GitHub repositories. The malicious extension version (18.95.0) was distributed through VS Code’s automatic update mechanism, meaning systems with Nx Console previously installed may have received the malicious build without developers taking any manual installation action. GitHub released a <a href="https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w" target="_blank">security advisory</a> on this activity, and <a href="https://www.cve.org/CVERecord?id=CVE-2026-48027" target="_blank">CVE-2026-48027</a> has been assigned to the malicious version of Nx Console and added to <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">CISA’s Known Exploited Vulnerabilities (KEV) Catalog</a>.</p>
<p>Additionally, in a campaign known as “Megalodon,” a cyber threat actor injected malicious GitHub Action workflows to harvest CI/CD secrets, cloud credentials, and tokens, impacting both development and deployment pipelines in public GitHub repositories.</p>
<p>CISA urges organizations to implement the following recommendations to detect and remediate a potential compromise:</p>
<ul>
<li>Monitor and audit workflow files and contributor activity for suspicious pull requests and direct commits, particularly those authored by automated accounts.</li>
<li>Revert unauthorized changes, especially from automated accounts, e.g., <code>build-bot</code>, <code>auto-ci</code>, <code>ci-bot</code>, <code>pipeline-bot</code> and especially those made after May 18, 2026.</li>
</ul>
<p>If your organization discovers a compromise resulting from previously compromised GitHub or Nx Console software, CISA recommends the following steps:</p>
<ul type="square">
<li>Conduct a forensics review of CI/CD logs, cloud audit trails, and affected developer machines. </li>
<li>Rotate/revoke all secrets including: all credentials, tokens, and secrets accessible to CI/CD pipelines, including API keys, cloud provider credentials (Amazon Web Services, Google Cloud Platform, Microsoft Azure), SSH keys, Docker/npm/PyPI/Vault/Terraform/Kubernetes tokens, GitHub/GitLab/Bitbucket tokens, and developer or pipeline secrets. </li>
<li>Notify proper stakeholders if necessary.</li>
</ul>
<p>CISA recommends the following best practices for using package repos:</p>
<ul type="square">
<li>Wait at least three hours before pulling a new package. This gives the software community time to identify suspicious or malicious packages before they are widely downloaded. </li>
<li>Pin software to specific trusted versions. Pinning software prevents pulling a malicious or unscreened package during the build process. </li>
<li>Only pull packages from known and trusted sources. Relying on known and trusted sources reduces the likelihood of downloading a package that has been maliciously forked. </li>
</ul>
<p>See the following resources for additional guidance on these compromises:</p>
<ul type="square">
<li>GitHub: <a href="https://github.blog/security/investigating-unauthorized-access-to-githubs-internal-repositories/" target="_blank">Investigating unauthorized access to GitHub-owned repositories</a></li>
<li>Nx: <a href="https://nx.dev/blog/nx-console-v18-95-0-postmortem" target="_blank">Postmortem: Nx Console v18.95.0 supply-chain compromise</a></li>
<li>Ox Security: <a href="https://www.ox.security/blog/megalodon-cicd-malware-github/" target="_blank">Megalodon: CI/CD Malware Spreading Across GitHub Repositories</a></li>
<li>StepSecurity: <a href="https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised#indicators-of-compromise" target="_blank">Nx Console VS Code Extension Compromised</a> </li>
<li>SafeDep: <a href="https://safedep.io/megalodon-mass-github-repo-backdooring-ci-workflows/" target="_blank">Megalodon: Mass GitHub Repo Backdooring via CI Workflows</a></li>
</ul>
<h2><strong>Disclaimer</strong></h2>
<p>The information in this report is being provided “as is” for informational purposes only. CISA does not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this document. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, recommendation, or favoring by CISA.  </p>]]></content:encoded>
</item>
<item>
<title><![CDATA[v0.379.0]]></title>
<description><![CDATA[What's Changed

Fix duplicate updated dependencies in multi-directory group refresh by @markhallen in #15098
Recategorise lockfile generation errors as known types by @brrygrdn in #15084
[Graph Job] Do not treat Dependabot::UnexpectedExternalCode as a hard failure by @brrygrdn in #15075
[Graph] F...]]></description>
<link>https://tsecurity.de/de/3555080/it-security-tools/v03790/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3555080/it-security-tools/v03790/</guid>
<pubDate>Thu, 28 May 2026 19:19:05 +0200</pubDate>
<category>💾 IT Security Tools</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<h2>What's Changed</h2>
<ul>
<li>Fix duplicate updated dependencies in multi-directory group refresh by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/markhallen/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/markhallen">@markhallen</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4493408325" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15098" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15098/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15098">#15098</a></li>
<li>Recategorise lockfile generation errors as known types by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4488595843" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15084" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15084/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15084">#15084</a></li>
<li>[Graph Job] Do not treat <code>Dependabot::UnexpectedExternalCode</code> as a hard failure by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4480208917" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15075" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15075/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15075">#15075</a></li>
<li>[Graph] Fix handling of multiple version resolution by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4494806621" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15099" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15099/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15099">#15099</a></li>
<li>Bun: Upgrade to Node JS 24 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4414810282" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/14964" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/14964/hovercard" href="https://github.com/dependabot/dependabot-core/pull/14964">#14964</a></li>
<li>Add API integration to fetch blocked versions at job construction by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kbukum1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kbukum1">@kbukum1</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4386927893" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/14917" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/14917/hovercard" href="https://github.com/dependabot/dependabot-core/pull/14917">#14917</a></li>
<li>Fix go modules error in package details fetcher due to subpath issue by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4492214494" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15096" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15096/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15096">#15096</a></li>
<li>add common pattern for directory specification by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4497483748" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15108" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15108/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15108">#15108</a></li>
<li>raise generic error without path information by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4489628281" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15088" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15088/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15088">#15088</a></li>
<li>Add HasNoWarnNU1701 merge logic in project discovery by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4490072446" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15090" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15090/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15090">#15090</a></li>
<li>NuGet: Auto-patch NuGet.Config to allow insecure HTTP feeds by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4490328322" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15092" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15092/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15092">#15092</a></li>
<li>NuGet: Filter out submodule paths during discovery by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4490457305" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15093" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15093/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15093">#15093</a></li>
<li>Implement a "dealias_packages" flag for npm file parsing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brrygrdn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brrygrdn">@brrygrdn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4479135606" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15070" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15070/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15070">#15070</a></li>
<li>fix(docker_compose): support folded scalar and docker.io-prefixed image values by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4494836525" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15100" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15100/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15100">#15100</a></li>
<li>Suppress Docker digest-only updates when tag version is unchanged by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/markhallen/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/markhallen">@markhallen</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4495593124" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15103" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15103/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15103">#15103</a></li>
<li>generate and submit dependency graphs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4409947704" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/14956" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/14956/hovercard" href="https://github.com/dependabot/dependabot-core/pull/14956">#14956</a></li>
<li>Revert "Add API integration to fetch blocked versions at job construction" by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/robaiken/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/robaiken">@robaiken</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4504628231" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15120" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15120/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15120">#15120</a></li>
<li>change test for file path to account for empty string by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4498277587" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15109" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15109/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15109">#15109</a></li>
<li>NuGet: Add circular dependency detection to MSBuildHelper.ThrowOnError by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4504074330" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15116" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15116/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15116">#15116</a></li>
<li>Catch FatalProtocolException from source repository initialization by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4504264661" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15117" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15117/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15117">#15117</a></li>
<li>NuGet: Remove redundant GetPackageGraphForDependencies and use discovery DependencyGraph by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4505035426" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15122" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15122/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15122">#15122</a></li>
<li>Add API integration to fetch blocked versions at job updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kbukum1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kbukum1">@kbukum1</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4505256184" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15123" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15123/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15123">#15123</a></li>
<li>Fix yarn berry security updates resolving to latest instead of target version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kbukum1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kbukum1">@kbukum1</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4490143214" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15091" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15091/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15091">#15091</a></li>
<li>Fix misleading Terraform registry error when TLS certificate verification fails by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4513804944" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15131" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15131/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15131">#15131</a></li>
<li>Fix cooldown ignored in additional_dependencies issue by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4506115419" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15124" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15124/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15124">#15124</a></li>
<li>Remove beta ecosystems feature flag for sbt by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AbhishekBhaskar/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AbhishekBhaskar">@AbhishekBhaskar</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4527300443" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15151" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15151/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15151">#15151</a></li>
<li>NuGet: Fix binding redirect XML parse error to report unparseable file by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4526523283" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15147" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15147/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15147">#15147</a></li>
<li>fix(npm_and_yarn): handle engines OR constraints and split caret-expanded bounds by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thavaahariharangit/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thavaahariharangit">@thavaahariharangit</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4523895141" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15144" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15144/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15144">#15144</a></li>
<li>Pass <code>--min-release-age=0</code> for npm security updates to bypass <code>.npmrc</code> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4520263699" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15139" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15139/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15139">#15139</a></li>
<li>Add deno lockfile support by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sbs44/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sbs44">@sbs44</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4528698853" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15153" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15153/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15153">#15153</a></li>
<li>NuGet: Fix version range double-wrapping in temp project creation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4527312414" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15152" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15152/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15152">#15152</a></li>
<li>Check ProjectAssetsFile exists before reading by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/brettfo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/brettfo">@brettfo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4535799571" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15160" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15160/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15160">#15160</a></li>
<li>fix: use configured github source when checking GitHub Actions pre-release status by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4438879012" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15004" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15004/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15004">#15004</a></li>
<li>ERR_PNPM_INVALID_DEPENDENCY_NAME handler in PnpmLockfileUpdater by @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4540151466" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15165" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15165/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15165">#15165</a></li>
<li>Read npm min-release-age from .npmrc and apply as cooldown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4514004078" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15132" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15132/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15132">#15132</a></li>
<li>v0.379.0 by @dependabot-core-action-automation[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4537145548" data-permission-text="Title is private" data-url="https://github.com/dependabot/dependabot-core/issues/15162" data-hovercard-type="pull_request" data-hovercard-url="/dependabot/dependabot-core/pull/15162/hovercard" href="https://github.com/dependabot/dependabot-core/pull/15162">#15162</a></li>
</ul>
<h2>Special Thanks</h2>
<p>Big thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/yeikel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/yeikel">@yeikel</a> for driving the <code>min-release-age</code> support for the JavaScript ecosystems!</p>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dependabot/dependabot-core/compare/v0.378.0...v0.379.0"><tt>v0.378.0...v0.379.0</tt></a></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Shrinking Season 4 Adds Karen Gillan to the Cast]]></title>
<description><![CDATA[Apple TV has officially confirmed that Karen Gillan is joining the cast of Shrinking season 4, adding another familiar face to the comedy-drama’s growing ensemble as production moves forward on the next chapter of the hit series.




https://twitter.com/AppleTV/status/2060029781807386845




Gill...]]></description>
<link>https://tsecurity.de/de/3554981/ios-mac-os/shrinking-season-4-adds-karen-gillan-to-the-cast/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3554981/ios-mac-os/shrinking-season-4-adds-karen-gillan-to-the-cast/</guid>
<pubDate>Thu, 28 May 2026 18:51:27 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple TV has officially confirmed that Karen Gillan is joining the cast of Shrinking season 4, adding another familiar face to the comedy-drama’s growing ensemble as production moves forward on the next chapter of the hit series.




https://twitter.com/AppleTV/status/2060029781807386845




Gillan joins a returning cast that already includes Jason Segel, Jessica Williams, Christa Miller, Michael Urie, Lukita Maxwell, and Harrison Ford. Earlier reports raised questions about whether some characters would leave after season 3, but co-creator Bill Lawrence recently confirmed that the full ensemble is returning for the new season.



Karen Gillan is widely known for playing Nebula in Marvel’s Guardians of the Galaxy films, while TV fans still remember her breakout role in Doctor Who. She also appeared in the recent Jumanji movies alongside Dwayne Johnson and Kevin Hart.



Apple is keeping details about Gillan’s character private for now, so viewers still do not know how she fits into the story. Even so, her addition signals that Shrinking season 4 is preparing to introduce fresh dynamics while continuing the emotional storylines that helped the series build a strong audience.



Season 4 Will Start With a Time Jump



Bill Lawrence previously revealed that Shrinking season 4 will begin after a time jump, which opens the door for major character changes and new relationships. Reports also suggest that the creative team is planning a new three-season arc for the series.



Apple TV is expected to premiere Shrinking season 4 sometime in early-to-mid 2027.]]></content:encoded>
</item>
<item>
<title><![CDATA[Possible Finance rebounds, rebuilds, and reaches profitability as founders reunite for a new chapter]]></title>
<description><![CDATA[Seattle fintech Possible Finance hit a $125 million revenue run rate and its first annual profit after a pandemic-era stretch of flat growth and layoffs. The company is expanding its Seattle office and reuniting its founding team. Read More]]></description>
<link>https://tsecurity.de/de/3554755/it-nachrichten/possible-finance-rebounds-rebuilds-and-reaches-profitability-as-founders-reunite-for-a-new-chapter/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3554755/it-nachrichten/possible-finance-rebounds-rebuilds-and-reaches-profitability-as-founders-reunite-for-a-new-chapter/</guid>
<pubDate>Thu, 28 May 2026 17:48:14 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<img width="1215" height="654" src="https://cdn.geekwire.com/wp-content/uploads/2026/05/possible-before-after.jpg" class="webfeedsFeaturedVisual wp-post-image" alt="" decoding="async" fetchpriority="high" srcset="https://cdn.geekwire.com/wp-content/uploads/2026/05/possible-before-after.jpg 1215w, https://cdn.geekwire.com/wp-content/uploads/2026/05/possible-before-after-768x413.jpg 768w" sizes="(max-width: 1215px) 100vw, 1215px"><br>Seattle fintech Possible Finance hit a $125 million revenue run rate and its first annual profit after a pandemic-era stretch of flat growth and layoffs. The company is expanding its Seattle office and reuniting its founding team. <a href="https://www.geekwire.com/2026/possible-finance-rebounds-rebuilds-and-reaches-profitability-as-founders-reunite-for-a-new-chapter/">Read More</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[Last.fm Goes Independent After Breaking Up With Paramount Skydance]]></title>
<description><![CDATA[Last.fm announced that it is independent again after separating from Paramount Skydance, nearly two decades after CBS acquired the music-tracking service in 2007. The company says accounts, scrobbles, privacy settings, Pro subscriptions, and billing information will remain intact. Additional deta...]]></description>
<link>https://tsecurity.de/de/3553852/it-security-nachrichten/lastfm-goes-independent-after-breaking-up-with-paramount-skydance/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3553852/it-security-nachrichten/lastfm-goes-independent-after-breaking-up-with-paramount-skydance/</guid>
<pubDate>Thu, 28 May 2026 13:05:42 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Last.fm announced that it is independent again after separating from Paramount Skydance, nearly two decades after CBS acquired the music-tracking service in 2007. The company says accounts, scrobbles, privacy settings, Pro subscriptions, and billing information will remain intact. Additional details are forthcoming. Engadget reports: "Today, Last.fm begins a new chapter as an independent company," the announcement reads. "Ownership has changed, but the product you use every day has not." It also said that it will keep its current team. Last.fm is a music website that can track what you listen to across platforms, apps and streaming services, including Spotify, YouTube and Apple Music.Â
 
[...] Last.fm started as an internet radio station in 2002, and it didn't get scrobbling until a few years later when it merged with the original team that created the tracking process. It operated as an independent company until it was acquired by CBS Interactive, which is now part of the merged Paramount Skydance Corporation, for $280 million in 2007. In 2014, it killed off its $3-a-month subscription radio service to focus on tracking your listening habits on other providers. The company promised to share more about what you can expect from the transition in the coming weeks, but everything will work on Last.fm "exactly as it did yesterday" for now.<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=Last.fm+Goes+Independent+After+Breaking+Up+With+Paramount+Skydance%3A+https%3A%2F%2Fentertainment.slashdot.org%2Fstory%2F26%2F05%2F28%2F0552205%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fentertainment.slashdot.org%2Fstory%2F26%2F05%2F28%2F0552205%2Flastfm-goes-independent-after-breaking-up-with-paramount-skydance%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://entertainment.slashdot.org/story/26/05/28/0552205/lastfm-goes-independent-after-breaking-up-with-paramount-skydance?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[The agentic wave: Why advanced AI demands foundational security]]></title>
<description><![CDATA[The agentic wave



The use of agentic and predictive AI in enterprise applications is arguably the fastest evolving frontier our industry has ever encountered. We are currently navigating a “mega-wave” of innovation and a period of rapid expansion where the capabilities of autonomous agents are ...]]></description>
<link>https://tsecurity.de/de/3552491/it-nachrichten/the-agentic-wave-why-advanced-ai-demands-foundational-security/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3552491/it-nachrichten/the-agentic-wave-why-advanced-ai-demands-foundational-security/</guid>
<pubDate>Wed, 27 May 2026 23:31:49 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p><strong>The agentic wave</strong><strong></strong></p>



<p>The use of agentic and predictive AI in enterprise applications is arguably the fastest evolving frontier our industry has ever encountered. We are currently navigating a “mega-wave” of innovation and a period of rapid expansion where the capabilities of autonomous agents are outstripping our initial frameworks for managing them. While the technology feels revolutionary, the pattern of its arrival is remarkably familiar.</p>



<p><strong>History rhymes: From microservices to agents</strong></p>



<p>As an industry, we have stood on this shoreline before. We saw this with the rise of microservices and the containerisation movement, the birth of code pipelines, and the cultural shift of DevSecOps…and this is just one example.</p>



<p>In the early days of those transitions, there was a palpable sense of anxiety regarding the lack of “battle-hardened” best practices. Critics argued the tech was too raw for the enterprise. But the reality is simple: there are no battle-hardened best practices until there have been battles of significance. Best practices are forged in the heat of implementation, not in the vacuum of theory. </p>



<p>We are repeating this cycle with agentic AI. We are moving at breakneck speed to create governance and security strategies in real-time. This isn’t a sign of chaos; it is the natural state of innovation. Crucially, it is worth recognising that doing nothing is not a viable alternative. Innovation will not pause to wait for the creation of a governance framework; it will not wait for us to provide the ultimate security framework; it will continue to move forward with or without our participation.</p>



<p><strong>The blueprint for “careful adoption”</strong></p>



<p>Recently, the Australian Cyber Security Centre (ACSC), along with its Five Eyes partners, published a document on the careful adoption of agentic AI services. It is a timely reminder that while we must move fast, we must also move with intent. </p>



<p>The guidelines reinforce a core truth: AI security is not a standalone silo. It is a subset of your existing cybersecurity strategy. To be successful, these services must be integrated into what the ACSC refers to as a Modern Defensible Architecture. This framework moves us away from reactive security and toward systems that are “secure by design”, where the architecture itself is built to withstand and recover from the inevitable compromise.</p>



<p>The ACSC document highlights that we should not fear the agent, but we must respect its potential for autonomy by anchoring it within these resilient architectural pillars:</p>



<ul class="wp-block-list">
<li>The Principle of Least Privilege &amp; Segmentation: Just as we did with microservices, agents must be granted only the minimum access required to perform their tasks. In a defensible architecture, this means treating every AI agent as a distinct identity, segmented from the core network to ensure that if an agent is “jailbroken” or compromised, the blast radius is strictly contained.</li>



<li>Visibility and Logging: A key tenet of a defensible system is knowing what is happening in real-time. We must have full visibility into the “chain of thought” and the actions taken by an agent, ensuring that every autonomous decision leaves a verifiable audit trail.</li>



<li>Human-in-the-Loop (HITL) as a Circuit Breaker: Autonomy does not mean an absence of oversight. High-stakes decisions, especially those affecting system integrity or sensitive data, require a human “green light.” This acts as the ultimate fail-safe in a resilient system, ensuring that logic remains grounded in human intent.</li>



<li>Phased Implementation &amp; Continuous Validation: Start with low-risk internal tasks to “earn” the right to move toward customer-facing or sensitive operations. This iterative approach allows us to test the “defensibility” of our AI integrations in controlled environments before they are exposed to the complexities of the open web.</li>
</ul>



<p>By aligning agentic AI adoption with these principles in a Modern Defensible Architecture, we aren’t just protecting a single application; we are building a resilient ecosystem that can adapt to new threats as quickly as the AI itself evolves.</p>



<p><strong>The best practice of today is the legacy of tomorrow</strong></p>



<p>In an era of significant speed, we must accept a difficult reality: the best practice today may not be the best practice tomorrow. The models are changing weekly, and the threat vectors are evolving alongside them. To thrive in this environment, we don’t need rigid, static rules. We need flexibility and leadership. </p>



<p>One of the most enduring lessons from all of the innovation waves that our industry has endured is that security cannot exist in a vacuum. IT and Security leaders must partner with their business counterparts. And it is not enough to just be “seen” as enabling innovation; there must be leadership and objective outcomes. They must be seen to deliver competitive advantages and efficiencies.</p>



<p>Our goal should be to build resilient systems that can withstand the “hallucinations” of a model or the sophisticated prompt injections of an adversary. We must bring our users along for the ride, educating them on the “why” behind the guardrails so that security becomes an enabler of innovation, rather than a hurdle.</p>



<p><strong>Moving forward with deliberate innovation</strong></p>



<p>The message for enterprise leaders is clear: Innovate…but do so carefully and deliberately.</p>



<p>We need robust governance that doesn’t just say “no,” but instead asks “how can we do this safely?” We need to build systems that are modular enough to swap out models as they improve and resilient enough to fail gracefully when they don’t.</p>



<p>We’ve navigated these waves before, from the mainframe to the cloud, and from monolithic code to microservices. The Agentic Wave is our next chapter. By applying the discipline of the past to the technology of the future, we can ensure that this wave carries us forward rather than pulling us under.</p>



<p>To learn more, visit us <a href="https://www.zscaler.com/?utm_source=google&amp;utm_medium=cpc&amp;utm_term=b-zscaler&amp;utm_campaign=194372733" target="_blank" rel="sponsored">here</a>. </p>



<p></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Merck and Mastercard are seeing real agentic AI results. Both say the plumbing came first.]]></title>
<description><![CDATA[Merck is using AI agents to cut drug discovery cycles by a third and ship compliant marketing materials up to 80% faster — but VP of Digital Platforms Sean Finnerty says the only reason it's working is because they built the infrastructure first.And the pharmaceutical manufacturer is seeing promi...]]></description>
<link>https://tsecurity.de/de/3552279/it-nachrichten/merck-and-mastercard-are-seeing-real-agentic-ai-results-both-say-the-plumbing-came-first/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3552279/it-nachrichten/merck-and-mastercard-are-seeing-real-agentic-ai-results-both-say-the-plumbing-came-first/</guid>
<pubDate>Wed, 27 May 2026 21:32:08 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Merck is using AI agents to cut drug discovery cycles by a third and ship compliant marketing materials up to 80% faster — but VP of Digital Platforms Sean Finnerty says the only reason it's working is because they built the infrastructure first.</p><p>And the pharmaceutical manufacturer is seeing promising early results: AI is generating marketing drafts that are “99% right” when it comes to compliance, shrinking review cycles from months to days and accelerating delivery by 70% to 80%. In the company’s medical research, meanwhile, one AI-assisted discovery cycle was reduced by 33%.</p><p>Still, agentic AI only works if companies first build the underlying “plumbing,” Finnerty said of digital platforms and services at a recent AI Impact Series event. </p><p>“If we do one-offs, we're gonna end up with thousands and thousands of things that are ultimately just gonna be debt that we'll have to deal with later,” he said. “And that's gonna be a drag on any further innovation.” </p><h2>Starting with the plumbing</h2><p>Merck’s plumbing-first strategy comes from lessons learned during the early days of cloud in the 2010s “when nobody knew what the heck was going on,” Finnerty said. </p><p>Getting the cloud right meant building from the ground up; at Merck, that infrastructure now supports 2,500 AWS accounts, numerous Microsoft Azure subscriptions, and new Google Cloud Platform (GCP) integrations. </p><p>“AI is gonna be the same exact thing,” Finnerty said. “We're going to have thousands and thousands of agents.” The questions then pile up: How do you register them? How do you secure them? How do you ensure they're connected to the right tools, and have access to the right data and the right context? </p><p>Context delivery is also critical; Merck works with three hyperscalers and has forty-seven edge locations and hundreds of databases. “Many, many petabytes” of structured and unstructured data are stored in Oracle databases, SQL databases, Excel spreadsheets, phone transcripts, and other repositories, Finnerty said. </p><p>His team is building scaffolding to deliver meaningful context in various situations, he explained. Data must be organized and ingested into various platforms, because “there’s no one solution to solve every single problem.” Sometimes it's Databricks, other times it's Amazon Redshift, “plus four other things.” </p><p>The goal is: “Let's make that easy and frictionless for people to do, and secure it, and make sure it's well integrated with MCP [model context protocol], and A2A [Agent2Agent], and upstream compute,” Finnerty said. “If you wanna run stuff on GCP or you wanna run stuff on AWS, we've got the plumbing in place so you can run your adjacent workloads wherever you want.” </p><h2>How Merck is using agents</h2><p>As it builds out its technical plumbing, Merck is experimenting with agents across regulated enterprise operations, scientific discovery workflows, and app modernization. </p><p>Notably, AI is accelerating drug discovery. Finnerty explained that scientists look at molecular structures and disease states to determine if a given condition is druggable. But even if a disease state is known, developing a drug to target it can take years. </p><p>Now with AI, teams are starting to see “very promising things,” such as cutting one particular research cycle down by one-third. “That's a year off of the life of the discovery cycle,” Finnerty said. “Which means, theoretically, we can get it to a patient who needs that therapy a year faster.” </p><p>Once developed and approved, these products are regulated and marketing materials around them must be clearly and explicitly articulated. “The way you communicate that information per market, per country, per state, per region, is all very carefully governed and regulated,” Finnerty said. It’s also variable: An ad campaign for a vaccine in the state of Georgia looks much different from one launched in Canada. </p><p>Historically, humans did the due diligence to make sure the company complied with various laws. Draft materials go through iterations of reviews; when a mistake is discovered, it gets “kicked back to the beginning, and it goes through it again, and then it takes another however many weeks and months,” Finnerty said. </p><p>But now, AI can do that “much, much more effectively,” and the process is increasingly evolving from a human-in-the-loop to essentially a "human-as-governor." With human oversight, AI can deliver a first draft in a day or week that is 99% there, allowing teams to ship materials up to 80% faster. </p><p>Meanwhile, when it comes to app modernization, AI can discover architecture, document data interactions, APIs, network paths, and do authentication checks and authorization; it can also write code for Terraform for deployment and refactor JavaScript into Python. </p><p>Where the company would have previously spent weeks and months and hundreds of thousands of dollars to update one application, Finnerty said, agents are now handling the work through prompts.</p><h2>Running into "wackiness" </h2><p>That’s not to say there aren’t significant challenges; Finnerty noted that his team has run into some “wackiness”; for example in automated code and scenario testing. AI has blatantly made up scenarios, whether due to incorrect context, infrastructure, “or if it was just getting creative with, ‘You should be testing these three functions that don't even exist in the code that you're trying to test.’”</p><p>“That surprised me a little bit because I thought we were further past some of the hallucination challenges in these later models,” he said. </p><p>To address this, his team has engineered guardrails to keep hallucinations to a minimum, essentially using AI to supervise AI and applying confidence scores. So if Claude created the first output, they’ll instruct Microsoft Copilot to assess it. </p><p>“So if you ask something once, have AI check it, then ask it a third time, the confidence increases every time, and it minimizes some of the garbage that gets created in the early runs,” Finnerty said.  </p><h2>Use cases for agentic AI in financial services</h2><p>Meanwhile, at Mastercard, Chief Data Officer Andrew Reiskind and his team are focusing agentic experimentation on highly orchestrated transaction and dispute workflows. As he noted, a chargeback or fraud dispute is not a single event.</p><p>When a consumer disputes a charge (typically online), that “kicks off an entire other process on the back-end that tends to be very labor-intensive,” Reiskind said. </p><p>Mastercard has to collect specifics about the actual dispute; then the merchant has its own investigations (Was the card reported as lost or stolen? Does the consumer dispute charges often?). Further, the network sitting in the middle has its own rules for timing and information submission. </p><p>“You have each and every one of these steps, many of which are unstructured, but there are also structured data elements to this,” Reiskind said. Whether a card was lost or stolen tends to be structured, but the consumer complaint is “unstructured data of questionable reliability.”</p><p>“So you're sitting there with a decisioning system that has deterministic decisions, but also probabilistic decisions,” he said.</p><p>This problem can be sped up and potentially solved by AI agents, but that can be a complex process: Which tasks are you handing off to agents? When are they kicking things back to human reps? How many agents are you ultimately using? What are the cost implications? </p><p>Then there are reputational questions and costs: Have you just called a consumer potentially a liar when they weren't lying? </p><p>“It's an exact problem where you want to, as a bank, maintain trust with your consumer,” Reiskind said. “But you also wanna make this efficient and take costs out of the system.” </p><h2>The PB&amp;J versus turkey mistake: Determine what risks are acceptable</h2><p>There’s always going to be risk with AI, and enterprises should assess it from the beginning of product design, Reiskind said. There’s also the question of acceptable risk. </p><p>As an example: Did you serve a customer a peanut butter jelly sandwich instead of a turkey sandwich (a minor inconvenience)? Or did you serve gluten to someone with celiac disease?</p><p>“Is it an acceptable risk if one percent of the time it makes the mistake? If it is, let's go to the next stage of how you're mitigating that risk,” Reiskind said. </p><p>Leaders must perform cost-benefit analysis, break problems down to their “constituent pieces,” and calculate cost for each one.  But these are estimates; it’s near-impossible to forecast real usage, Reiskind said. “It is not a simple process to get to the cost,” he said. “But it is doable.”</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[DataGrail report finds your vendor may be sending data to AI models you never approved]]></title>
<description><![CDATA[The data processing agreement (DPA) — the bedrock contract companies use to evaluate how vendors handle personal data — can no longer be trusted at face value. That is the central, and arguably most alarming, conclusion of DataGrail's Privacy and AI Trends Report 2026, released today.The San Fran...]]></description>
<link>https://tsecurity.de/de/3551987/it-nachrichten/datagrail-report-finds-your-vendor-may-be-sending-data-to-ai-models-you-never-approved/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3551987/it-nachrichten/datagrail-report-finds-your-vendor-may-be-sending-data-to-ai-models-you-never-approved/</guid>
<pubDate>Wed, 27 May 2026 19:17:49 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>The data processing agreement (DPA) — the bedrock contract companies use to evaluate how vendors handle personal data — can no longer be trusted at face value. That is the central, and arguably most alarming, conclusion of DataGrail's <a href="https://www.datagrail.io/resources/interactive/data-privacy-trends-report-2026/"><i>Privacy and AI Trends Report 2026</i></a>, released today.</p><p>The San Francisco-based privacy platform analyzed 2,400 popular business software providers and found that 63.6% of vendors that prominently advertise AI capabilities do not disclose a third-party AI subprocessor in their legal documentation. The implication: the majority of companies purchasing AI-enabled software may be unknowingly exposing their customers' data to AI models and pipelines they never reviewed, never approved, and may not even know exist.</p><p>"All software vendors are trying to move to become AI vendors, which makes sense, but the technologies are moving faster than AI governance can actually keep up," DataGrail co-founder and CEO Daniel Barber told VentureBeat in an exclusive interview ahead of the report's release. "The DPA should be the reliable document that teams use to evaluate AI risk, but based on that number, that's not enough in 2026."</p><p>The finding drops into an enterprise landscape where organizations with high levels of shadow AI already experience average breach costs of $4.63 million — $670,000 more than those with low or no shadow AI, according to IBM's <a href="https://www.ibm.com/reports/data-breach">2025 Cost of Data Breach Report</a>. And it arrives in a year when U.S. states gave out <a href="https://www.gartner.com/en/newsroom/press-releases/2026-04-28-gartner-estimates-us-states-privacy-fines-totaled-3-point-425-billion-dollars-in-2025-trend-expected-to-accelerate-through-2028?utm_campaign=SM_GB_YOY_GTR_SOC_SF1_SM-PR&amp;utm_source=threads,twitter&amp;utm_medium=social">$3.425 billion in privacy-related fines</a> — more than the last five years combined — a trend Gartner expects to accelerate through 2028.</p><h2><b>How researchers uncovered the growing gap between AI vendor contracts and reality</b></h2><p>DataGrail's methodology for arriving at the 63.6% figure goes well beyond reading contracts. The company's research team cross-referenced DPA disclosures against product documentation, GitHub environments, API connections, and marketing materials for each of the 2,400 vendors in its tracking universe.</p><p>Barber walked VentureBeat through the process: "We looked at the DPA as the baseline, but then what we also looked at is the GitHub environment, the API connections that a particular vendor has, the product documentation, the marketing documentation, and triangulate that information to discern — okay, so the DPA document says use OpenAI, but actually you've got these three AI subprocessors over here in your product documentation outlining features and functionality, but that is not reflected in your DPA."</p><p>When asked directly about how confident he was that these gaps represent actual shadow AI risk rather than vendors using proprietary technology, Barber was unequivocal. "Very confident, because we looked at the sample of the 2,400 systems, and we spent a substantial amount of time actually looking at product documentation, GitHub environments, looking at actual API connections, because we integrate with these systems as well, so we know how they process personal information. It is from primary research."</p><p>The disclosure gap matters because it undermines the entire chain of trust that privacy programs rely on. Consider a scenario Barber described: A company invests in an AI recruiting tool. The tool's DPA lists Claude as its foundational model. The company dutifully performs a security review of Anthropic's AI. But the recruiting tool also quietly uses OpenAI and Gemini behind the scenes — models the company never evaluated. </p><p>Those undisclosed models then process thousands of resumes and execute automated hiring decisions. The company, without knowing it, has exposed sensitive personal information — home addresses, financial data, possibly Social Security numbers — to AI systems it never vetted, potentially violating FTC regulations on automated decision-making in employment. "How those vendors are evaluating and performing that automated decision making could be really disastrous for a business," Barber said.</p><h2><b>One-third of AI systems also process sensitive data, and the true number is likely higher</b></h2><p>The disclosure gap alone would be concerning enough. But <a href="https://www.datagrail.io/resources/interactive/data-privacy-trends-report-2026/">DataGrail's report</a> layers on another finding that makes the problem materially worse: 32.8% of AI systems that disclose AI capabilities also disclose at least one other high-risk activity, such as processing sensitive personal information or powering automated decision-making. Among AI systems with self-reported risk factors, 47.1% process personal data, 20.7% have the potential to power automated decision-making, 16.5% process sensitive data categories like health or financial information, and 7.5% process biometric data.</p><p>The report argues these figures almost certainly undercount actual exposure, since they reflect only what vendors have formally disclosed. Vendors could underreport access to personal data, and the inherent flexibility of AI means even good-faith vendors might not predict riskier user applications of their tools.</p><p>This has immediate regulatory implications. The <a href="https://cppa.ca.gov/announcements/2025/20250923.html">CCPA's new risk assessment requirement</a>, effective January 1, 2026, requires businesses to conduct and document risk assessments for processing activities that present significant privacy risks — and will require submission to CalPrivacy by April 2028, with executive attestation under penalty of perjury. </p><p>Processing sensitive personal information with AI, or using AI for automated decision-making, are precisely the activities that trigger this obligation. The report finds that 42% of companies abandoned AI initiatives in 2025 with data privacy concerns cited as a primary obstacle — a statistic sourced to <a href="https://www.spglobal.com/market-intelligence/en/news-insights/research/2025/10/generative-ai-shows-rapid-growth-but-yields-mixed-results">S&amp;P Global research</a>. Privacy teams that engage early with AI projects, Barber argues, can prevent that waste by ensuring safeguards are in place before launch, with AI risk assessments serving as the right starting point.</p><h2><b>Why consent management became 2025's most punished privacy failure</b></h2><p>While shadow AI is still a newer category of threat, the report makes clear that traditional privacy challenges have not eased — they have intensified. Consent management was the busiest enforcement topic of 2025. California alone publicly reported $4.3 million in CCPA consent settlements, and 2025 saw over 1,400 class action wiretapping suits driven by private firms investigating tracking pixels and session replay software.</p><p>Despite this enforcement wave, 63% of the 5,000 websites DataGrail audited still fail to comply with universal opt-out mechanisms such as the Global Privacy Control signal. While that figure represents an improvement from 75% non-compliance in 2023, the pace of improvement is slow relative to the acceleration in enforcement.</p><p>Barber pointed to the case of <a href="https://www.toddsnyder.com/">Todd Snyder</a>, the menswear retailer that the California Privacy Protection Agency <a href="https://cppa.ca.gov/announcements/2025/20250506.html">fined $345,178</a> in May 2025, as evidence that enforcement is no longer reserved for big tech. "This is a business that has two or three stores across the U.S. They have 300 employees," he said. "They run tight margins because they're a consumer menswear clothing store."</p><p>The California Attorney General also reached a <a href="https://oag.ca.gov/news/press-releases/california-wont-let-it-go-attorney-general-bonta-announces-275-million">$2.75 million settlement with Disney</a> over failures to honor opt-out signals, while the California Privacy Protection Agency has brought enforcement actions against <a href="https://privacy.ca.gov/2026/03/youth-sports-media-company-to-pay-1-1-million-fine-change-practices-over-privacy-violations/">PlayOn Sports</a> and <a href="https://www.koleyjessen.com/insights/publications/lessons-for-businesses-from-2026s-first-california-privacy-enforcement-actions">Ford</a> — a pattern that demonstrates both the breadth and depth of regulatory activity. Among the trackers that fire even after a user sends a GPC signal, the report found that 27.1% come from Google Analytics and 43.8% are for targeted advertising via platforms like Meta and Microsoft.</p><p>For users who do engage with consent banners, 48.3% click "Accept all," while only 12.4% select "Essential only" and 2.3% customize their preferences. A full 37% simply exit the banner without making a selection. The practical takeaway: less than 15% of users make a conscious choice to opt out of tracking, which means consent banners present relatively low business risk when properly configured — but enormous regulatory risk when they are not.</p><h2><b>Data deletion requests surge 567% as the cost of manual processing hits $1.5 million a year</b></h2><p>Data subject request volume hit an all-time high for the fifth consecutive year. Deletion requests have surged 567% since 2021 and now represent 87% of all data subject requests. Access requests, by contrast, have gradually declined as consumers skip visibility and reach straight for the delete button.</p><p>The cost is staggering. For a mid-sized organization receiving 5 million annual web visitors, the report estimates manual DSR management now runs approximately $1.5 million per year, based on Gartner's <a href="https://trustarc.com/resource/dsr-request-management-global-comparison/">estimated cost of $1,524 per manual DSR</a>. The average cost has climbed from $238,000 in 2021 to $1.51 million in 2025 — a trajectory that makes manual processing not just inefficient but, as the report argues, "irresponsible."</p><p>Barber emphasized that these numbers reflect verified human requests with bot and spam traffic excluded, and that data broker scenarios — which will see their own massive influx of requests under <a href="https://en.wikipedia.org/wiki/Delete_Act">California's Delete Act</a> — are reported separately. "That is a natural increase," Barber told VentureBeat. "If you've now got 20-plus U.S. states with privacy regulation, it's unlikely that we see a federal bill passed, even though we've seen one proposed. And while we don't see federal awareness and regulation, we do see at the state level over 20 states, and that may actually increase awareness for the consumer even more."</p><p>He added a telling detail about how businesses are responding in practice: "99% of DataGrail customers do process that deletion" even for residents of states without privacy laws, "simply because it's too hard at this point. Discerning and even communicating to the person, 'Hey, you live in Montana, sorry, you're just in an unfortunate state without regulation' — you just can't do that." Data brokers felt the impact most acutely, with a 398% increase in deletion requests compared to 2024 and an average of over 2,000 deletion requests handled per month.</p><h2><b>State regulators issued $3.4 billion in privacy fines last year, and both parties want more</b></h2><p>The regulatory landscape underpinning all of these trends has fundamentally shifted from education to punishment. Nearly half of U.S. states now have a <a href="https://pro.bloomberglaw.com/insights/privacy/state-privacy-legislation-tracker/">comprehensive privacy law</a> in effect, plus <a href="https://www.brookings.edu/articles/how-different-states-are-approaching-ai/">over 160 AI-specific laws</a>. State legislatures enacted 145 AI-related laws in 2025 alone, with another thousand introduced or reworked. According to Gartner, over 50% of the U.S. population is now covered by a comprehensive state privacy law, with 24 additional states expected to pass laws within five years. States have also begun pooling their resources, with ten forming the <a href="https://www.jdsupra.com/legalnews/two-more-states-join-consortium-of-6791648/">Consortium of Privacy Regulators</a> last year and pledging to coordinate investigations across state lines.</p><p>Barber argued that privacy enforcement is fundamentally bipartisan, which insulates it from the shifting political winds of the current administration. "Privacy overall is a pretty bipartisan issue," he said. "It's easy to pass privacy regulation because constituents somewhat expect privacy in their day-to-day living. If you were flying on an airline and they said, 'Okay, this seat, if you want your privacy, you're going to have to pay $6 more,' you're like, 'I'm going to go to another airline.' It's an expected part of a transaction at this stage."</p><p>He predicted that other states will replicate California's enforcement model. "California has their enforcement division, CalPrivacy. That group has one task: to ensure enforcement of privacy throughout businesses. Is it likely that we see other states get funding and support to fund these types of groups? Highly likely. The enforcement fines — the actual payments — go back to us as constituents. That type of model, you could imagine, being very popular across the country."</p><h2><b>Privacy teams are losing a third of their staff just as AI governance demands explode</b></h2><p>Perhaps the most paradoxical finding in the report is that privacy teams lost as much as <a href="https://www.isaca.org/resources/reports/state-of-privacy-2026">33% of their headcount last year</a>, even as their workloads expanded across every metric the report tracks. Cisco data cited in the report shows that 90% of privacy programs expanded in 2025 due to AI, while only 12% of AI governance programs are considered mature. Meanwhile, 74% of privacy teams planned to apply AI to privacy-related tasks in 2026, according to <a href="https://www.isaca.org/about-us/newsroom/press-releases/2026/new-isaca-study-privacy-teams-are-shrinking-increasingly-stressed">ISACA's State of Privacy 2026 survey</a>.</p><p>Barber sees this as part of a broader macroeconomic pattern rather than a sign that organizations do not value privacy. "It's actually a fascinating macro trend, and probably one you've seen across all functions," he said. "Businesses are driving more efficiency in all parts of the business. Privacy teams, five years ago, we would have said, 'Well, there's more regulation, the volume of deletions have increased 500%, we need more humans.' It's become clear that AI provides capabilities that can do the work for privacy individuals." He drew an analogy: "They might have had a design team of 20 people five years ago, now they have a design team of five, courtesy of Claude Design or Gamma or whatever the tool may be. I think that's what we're seeing here as well."</p><p>DataGrail has positioned its own AI agent, <a href="https://www.datagrail.io/blog/product/introducing-vera-the-first-complete-ai-privacy-agent/">Vera</a> — launched in March 2026 — as part of the answer. Vera is embedded within DataGrail's existing platform and aims to automate privacy workflows across multiple jurisdictions. The company was also named the first production-ready<a href="https://www.datagrail.io/blog/product/whats-new-from-datagrail-february-2026/"> Model Context Protocol server for privacy</a>, using the standard created by Anthropic to enable customers to launch DataGrail tools from whatever application they are already working in, whether Slack, email, or Claude.</p><h2><b>Can a vendor-produced report be trusted to diagnose the problems that vendor sells solutions for?</b></h2><p>DataGrail is, of course, a company that directly benefits from the problems its report identifies. The company has raised a total of $84.2 million over five rounds, with its largest being a <a href="https://www.datagrail.io/press/datagrail-raises-45-million/">$45 million Series C</a> in October 2022 led by Third Point Ventures. Its platform addresses precisely the data mapping, DSR automation, consent management, and risk assessment challenges the report spotlights.</p><p>Barber acknowledged the tension directly. "It's a fair statement," he said when asked about potential skepticism. "DataGrail doesn't provide a service to keep DPAs up to date — that's on a business to evaluate how they work with a vendor. What DataGrail does help to do is assessments, and automate those assessments using our AI agent, Vera, to assess that increased risk."</p><p>He argued that the more neutral reading of the data is structural: "This is evidence to show that the DPA unfortunately is not keeping up with technology and the speed at which technology is innovating. That's both exciting but also we need to accept that's where we are." The methodology does lend some credibility to this claim. </p><p>The report draws on anonymized privacy operations data from hundreds of enterprise customers, the 2,400-system AI tracking database, and the 5,000-website consent audit — sources that are at least partially independent of DataGrail's commercial interests. And the broader findings on enforcement spending, DSR volume trends, and regulatory expansion align closely with independently published data from Gartner, Cisco, and state enforcement agencies.</p><h2><b>The next frontier: agentic AI could spread unvetted data across entire organizations autonomously</b></h2><p>When asked about the most important trend that did not make it into the report, Barber pointed to a next-generation risk that extends the shadow AI problem into far more dangerous territory: agentic AI workflows. Gartner predicts <a href="https://www.pagerduty.com/resources/itops/analyst-report/gartner-predicts-report-2026-ai-agents-transform-it-infrastructure-operations/">40% of enterprise applications</a> will feature task-specific AI agents by end of 2026, up from under 5% in 2025 — a pace of adoption that could rapidly outstrip the governance mechanisms companies are only now beginning to build.</p><p>"Where we go next with this research is agent processing," Barber said. "How are agents then leveraging that information? Because the downstream ramifications would be far more concerning for a business. One particular system is using shadow AI, the business has no idea that that's happening, and then an agent is propagating that information across a whole bunch of other places. The guardrails of you and I checking the system will be lower than maybe what we've seen in the past with agentic workflows."</p><p>He framed the distinction in human terms: "The identity of an agent is different than a human. There is thought that goes into what am I about to use here, where did this information come from, how was it collected — that may not be considered in the same way for an agentic workflow. We need to solve the root of the problem, which is how are these businesses leveraging AI subprocessors. But this quickly becomes an agentic problem that could be far more concerning."</p><p>For the enterprise privacy and security leaders absorbing this report today, the uncomfortable truth is that the foundational documents and processes they have relied on to manage vendor risk for years are decomposing in real time. The DPA is breaking down as a reliable instrument. State enforcement is accelerating on a bipartisan basis. Privacy teams are shrinking even as their mandates expand. And the next wave of agentic AI systems threatens to distribute unvetted data processing across networks of autonomous agents that operate with even less human oversight than today's tools.</p><p>Five years ago, when DataGrail published its first trends report, deletion requests were a fraction of what they are today, only a handful of states had privacy laws on the books, and the phrase "shadow AI" did not exist. Every year since, the report has warned that the problem was getting worse. Every year, the data has proved it right. The companies that survive the next chapter will not be the ones with the biggest compliance teams or the thickest policy binders. They will be the ones that accept a disorienting new reality: in 2026, the contracts you signed may not describe the AI that is already processing your customers' data — and by 2027, autonomous agents may be deciding what to do with it.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple TV spin-off ‘Star City’ delves into space race from behind the Iron Curtain]]></title>
<description><![CDATA[A bold new chapter inspired by the critically acclaimed Appel TV space-race drama, “For All Mankind,” “Star City” is a propulsive paranoid…
The post Apple TV spin-off ‘Star City’ delves into space race from behind the Iron Curtain appeared first on MacDailyNews.]]></description>
<link>https://tsecurity.de/de/3551247/ios-mac-os/apple-tv-spin-off-star-city-delves-into-space-race-from-behind-the-iron-curtain/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3551247/ios-mac-os/apple-tv-spin-off-star-city-delves-into-space-race-from-behind-the-iron-curtain/</guid>
<pubDate>Wed, 27 May 2026 15:27:56 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>A bold new chapter inspired by the critically acclaimed Appel TV space-race drama, “For All Mankind,” “Star City” is a propulsive paranoid…</p>
<p>The post <a href="https://macdailynews.com/2026/05/27/apple-tv-spin-off-star-city-delves-into-space-race-from-behind-the-iron-curtain/">Apple TV spin-off ‘Star City’ delves into space race from behind the Iron Curtain</a> appeared first on <a href="https://macdailynews.com/">MacDailyNews</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CD Projekt Red announces new Witcher 3 expansion, Songs of the Past]]></title>
<description><![CDATA[While The Witcher 4 is still being made, we're getting an additional chapter for The Witcher 3.]]></description>
<link>https://tsecurity.de/de/3550941/it-nachrichten/cd-projekt-red-announces-new-witcher-3-expansion-songs-of-the-past/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3550941/it-nachrichten/cd-projekt-red-announces-new-witcher-3-expansion-songs-of-the-past/</guid>
<pubDate>Wed, 27 May 2026 14:02:16 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[While The Witcher 4 is still being made, we're getting an additional chapter for The Witcher 3.]]></content:encoded>
</item>
<item>
<title><![CDATA[SecTor 2025 | Grand Finale: Cutting Through the Cyber Noise]]></title>
<description><![CDATA[Author: Black Hat - Bewertung: 0x - Views:17 Join our Review Board members for a powerful closing session that distills the essential cybersecurity insights from this year's conference. This dynamic panel will synthesize key takeaways from the Briefings program and forecast emerging trends that s...]]></description>
<link>https://tsecurity.de/de/3549083/it-security-video/sector-2025-grand-finale-cutting-through-the-cyber-noise/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3549083/it-security-video/sector-2025-grand-finale-cutting-through-the-cyber-noise/</guid>
<pubDate>Tue, 26 May 2026 21:18:18 +0200</pubDate>
<category>🎥 IT Security Video</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Author: Black Hat - Bewertung: 0x - Views:17 <br/></p><p><iframe id="ytplayer" loading="lazy" type="text/html" width="100%" height="auto" src="https://www.youtube.com/embed/queScDSGzxk?autoplay=1&origin=http://tsecurity.de" frameborder="0"></iframe></p><p>Join our Review Board members for a powerful closing session that distills the essential cybersecurity insights from this year's conference. This dynamic panel will synthesize key takeaways from the Briefings program and forecast emerging trends that security professionals should have on their radar.<br />
<br />
Leave SecTor with clarity on what truly matters in today's complex threat landscape.<br />
<br />
Opheliar Chan  |  Chapter Co-Lead, OWASP Toronto<br />
Dave Millier  |  CSO, Quick Intelligence<br />
Maryna Neprosta  |  Review Board, SecTor<br />
Tom Tran  |  Senior Manager of Offensive Security, Government of Ontario<br />
<br />
https://blackhat.com/sector/2025/briefings/schedule/?#sector-2025-grand-finale-cutting-through-the-cyber-noise-49600<br/></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Open-source reverse engineering of PerimeterX (HUMAN Security) Web SDK — pure-algo cookie generators, dual-site live HTTP 200, 10-chapter methodology]]></title>
<description><![CDATA[submitted by    /u/Shenpan_waterbili   [link]   [comments]]]></description>
<link>https://tsecurity.de/de/3542334/reverse-engineering/open-source-reverse-engineering-of-perimeterx-human-security-web-sdk-pure-algo-cookie-generators-dual-site-live-http-200-10-chapter-methodology/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3542334/reverse-engineering/open-source-reverse-engineering-of-perimeterx-human-security-web-sdk-pure-algo-cookie-generators-dual-site-live-http-200-10-chapter-methodology/</guid>
<pubDate>Sat, 23 May 2026 19:22:33 +0200</pubDate>
<category>🕵️ Reverse Engineering</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[  submitted by   <a href="https://www.reddit.com/user/Shenpan_waterbili"> /u/Shenpan_waterbili </a> <br> <span><a href="https://github.com/warterbili/PerimeterX_RE">[link]</a></span>   <span><a href="https://www.reddit.com/r/ReverseEngineering/comments/1tlm933/opensource_reverse_engineering_of_perimeterx/">[comments]</a></span>]]></content:encoded>
</item>
<item>
<title><![CDATA[why would we overwrite SEH instead of EIP ?]]></title>
<description><![CDATA[hello all ,  im now studing OSED, and in the chapter we can overwrite EIP after sending lets say 0x12,000 Bytes . but they somehow instead they want to overwrite SEH , but why ? they wrote this :  Theoretically, we could overwrite the target return address by precisely calculating the required of...]]></description>
<link>https://tsecurity.de/de/3540677/malware-trojaner-viren/why-would-we-overwrite-seh-instead-of-eip/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3540677/malware-trojaner-viren/why-would-we-overwrite-seh-instead-of-eip/</guid>
<pubDate>Fri, 22 May 2026 22:17:37 +0200</pubDate>
<category>⚠️ Malware / Trojaner / Viren</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<!-- SC_OFF --><div class="md"><p>hello all , </p> <p>im now studing OSED, and in the chapter we can overwrite EIP after sending lets say 0x12,000 Bytes .<br> but they somehow instead they want to overwrite SEH , but why ? they wrote this : </p> <p>Theoretically, we could overwrite the target return address by precisely calculating the required offset and size for the overflow.However, a huge buffer length is required for a successful overflow, which means we would likely corrupt pointers on the stack that will be used by the target function before returning into the overwritten return address. In short, even if a direct EIP overwrite is possible, it would require a lot of work. </p> <p>Instead, we’ll perform an even larger copy and attempt to overwrite the SEH chain and trigger anexception by writing beyond the end of the stack.</p> <p>but also we send more big buffer to overwrite SEH so also this will corrupt more pointers in stack so what is the point ? </p> </div><!-- SC_ON -->   submitted by   <a href="https://www.reddit.com/user/hex-lover"> /u/hex-lover </a> <br> <span><a href="https://www.reddit.com/r/ExploitDev/comments/1tkrlzm/why_would_we_overwrite_seh_instead_of_eip/">[link]</a></span>   <span><a href="https://www.reddit.com/r/ExploitDev/comments/1tkrlzm/why_would_we_overwrite_seh_instead_of_eip/">[comments]</a></span>]]></content:encoded>
</item>
<item>
<title><![CDATA[Infinity Ward Working on Next Call of Duty, Says It's Making 'Definitive Modern Warfare' Title]]></title>
<description><![CDATA[The next Call of Duty game will be the "definitive Modern Warfare" title, developer Infinity Ward has said. The studio said it had started a "new chapter" with two new studio heads and teased the next Call of Duty game, which is rumoured to be Modern Warfare 4.]]></description>
<link>https://tsecurity.de/de/3539011/it-nachrichten/infinity-ward-working-on-next-call-of-duty-says-its-making-definitive-modern-warfare-title/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3539011/it-nachrichten/infinity-ward-working-on-next-call-of-duty-says-its-making-definitive-modern-warfare-title/</guid>
<pubDate>Fri, 22 May 2026 11:32:24 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The next Call of Duty game will be the "definitive Modern Warfare" title, developer Infinity Ward has said. The studio said it had started a "new chapter" with two new studio heads and teased the next Call of Duty game, which is rumoured to be Modern Warfare 4.]]></content:encoded>
</item>
<item>
<title><![CDATA[Kore.ai launches Artemis AI agent platform, expands challenge to Microsoft and Salesforce]]></title>
<description><![CDATA[Kore.ai on Wednesday launched what amounts to a ground-up reinvention of its core technology: the Artemis edition of its Agent Platform, a system designed to let enterprises build, govern, and optimize AI agents using AI itself — compressing what has traditionally been months of engineering work ...]]></description>
<link>https://tsecurity.de/de/3536602/it-nachrichten/koreai-launches-artemis-ai-agent-platform-expands-challenge-to-microsoft-and-salesforce/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3536602/it-nachrichten/koreai-launches-artemis-ai-agent-platform-expands-challenge-to-microsoft-and-salesforce/</guid>
<pubDate>Thu, 21 May 2026 15:48:44 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><a href="http://kore.ai/">Kore.ai</a> on Wednesday launched what amounts to a ground-up reinvention of its core technology: the Artemis edition of its <a href="https://www.kore.ai/ai-agent-platform">Agent Platform</a>, a system designed to let enterprises build, govern, and optimize AI agents using AI itself — compressing what has traditionally been months of engineering work into days.</p><p>The platform arrives at a moment when every major technology vendor — from <a href="https://www.microsoft.com/en-us">Microsoft</a> and <a href="https://www.salesforce.com/">Salesforce</a> to <a href="https://www.google.com/">Google</a> and <a href="https://www.servicenow.com/">ServiceNow</a> — is racing to become the default infrastructure for enterprise AI agents. Kore.ai's answer to that crowded field is a bet on neutrality, a proprietary intermediary language for defining agents, and a philosophy that AI, not human developers, should do most of the heavy lifting.</p><p>"We're trying to change the paradigm about how people design, build, deploy and optimize agentic AI applications," Raj Koneru, the company's founder and CEO, told VentureBeat in an exclusive interview ahead of the launch. "The whole theme that we are now coming out with is you do AI with AI — you design with AI, you build with AI, you test with AI, you deploy with AI, manage with AI, and optimize with AI."</p><h2><b>A new YAML-based language aims to standardize how enterprises define and govern AI agents</b></h2><p>At the technical core of the Artemis platform sits <a href="https://docs.kore.ai/ai-for-service/app-settings/language-management/building-multi-language-bots">Agent Blueprint Language</a> (ABL), a compiled, declarative language built on YAML that standardizes how AI agents, workflows, and multi-agent systems are defined, validated, and governed. Kore.ai describes it as an intermediary layer that sits between the natural-language instructions a business user might provide and the production infrastructure where agents actually run.</p><p>ABL comes with its own parser, compiler, and runtime. It supports six built-in orchestration patterns — supervisor, delegation, handoff, fan-out, escalation, and agent-to-agent federation — that govern how multiple agents coordinate on complex tasks.</p><p>Koneru framed ABL as addressing a fundamental gap in the current AI landscape. "There's a lot of value in generating code, and that code is used by developers to build applications," he said. "What we saw is a gap between generating code and actually running it on infrastructure — with the deployment, version management, governance, and observability that production requires."</p><p>Because ABL artifacts are YAML-based, they can be stored in GitHub, version-controlled through CI/CD pipelines, and reviewed by both developers and business stakeholders — a design choice intended to bridge the divide between no-code platforms and traditional software engineering. "The final artifact is ABL, a YAML-based construct — you can put it in GitHub, you can version-control it," Koneru said. "It gives business people, developers, and IT a single standard to build on."</p><h2><b>Kore.ai's AI architect translates plain-language business goals into production-ready agent systems</b></h2><p>The second major innovation is <a href="https://docs.kore.ai/home">Arch</a>, an AI system that translates business requirements into production-ready ABL. Users provide specifications, data sources, and business rules in natural language. Arch then designs the multi-agent topology — selecting from the platform's six orchestration patterns — generates the ABL code, produces test data, deploys the application, and monitors it in production.</p><p>Critically, Arch also handles optimization. It observes whether deployed agents are meeting their goals, identifies where and why they fall short, and automatically regenerates and redeploys refined ABL to improve performance.</p><p>"Think of it this way," Koneru explained. "In the beginning, I wanted 50% automation for a particular use case. I'm getting 30%. Because of that cycle of optimization, it moves the needle to 50% by adjusting the application based on actual usage data."</p><p>This closed-loop approach — design, build, test, deploy, manage, optimize — is Kore.ai's bid to differentiate from both the no-code configuration platforms that dominated the previous era of chatbot development and the pro-code frameworks emerging from companies like <a href="https://www.anthropic.com/">Anthropic</a> and <a href="https://openai.com/">OpenAI</a>, which Koneru argues place too much burden on individual developers. "So that's a paradigm shift in the way AI agents have been built up until now," he said, "either with no code, configuration-based platforms — and we were one of them — or pro code capabilities that you get with Cloud code or a Codex or something else, which then puts the onus on the developer to build a platform for themselves."</p><h2><b>Why Kore.ai built a 'dual brain' to keep AI agents safe in banking, healthcare, and other regulated industries</b></h2><p>Perhaps the most architecturally significant element of the Artemis platform is what Kore.ai calls its Dual-Brain Architecture: two cognitive engines — one for agentic reasoning powered by large language models, the other for deterministic execution of business rules — operating in parallel through shared memory within a single runtime.</p><p>This design reflects a hard lesson Kore.ai has learned from more than a decade of deploying AI in banking, healthcare, insurance, and telecommunications. In those environments, leaving all decision-making to a language model is a non-starter.</p><p>"Enterprises are not going to completely relegate decision-making to a model," Koneru said. He drew a sharp contrast with newer AI-native startups: "A number of the AI-native companies that have emerged recently, especially in Silicon Valley, are essentially frameworks built as a wrapper around an LLM. That means much of the decision-making is left to the model — you're heavily reliant on it, and the model itself is the one implementing the guardrails."</p><p>Kore.ai's approach flips that. Guardrails — both input and output — are enforced at the platform layer, not by the model. Evaluations run inside the platform's governance engine. Business rules can execute deterministically when precision matters, while the LLM handles conversational responses and reasoning where appropriate. In a healthcare scenario where an AI agent is processing prescription refills for millions of consumers, or in a banking environment where an agent is advising clients on portfolio management, the consequences of a hallucinated response or an improperly executed workflow are severe. Kore.ai is positioning the Dual-Brain Architecture as the engineering answer to a trust problem that has slowed enterprise AI adoption across regulated sectors.</p><h2><b>Inside Kore.ai's deep partnership with Microsoft — and its pitch for vendor neutrality</b></h2><p><a href="https://www.kore.ai/">Artemis</a> launches initially on <a href="https://azure.microsoft.com/en-us">Microsoft Azure</a>, integrating natively with Microsoft Foundry, Microsoft Agent 365, Entra ID, and the Microsoft Graph API. Kore.ai is a launch partner for <a href="https://www.microsoft.com/en-us/microsoft-agent-365">Agent 365</a> and is working toward becoming a native Azure service within Azure Foundry.</p><p>The Microsoft partnership runs deep. Koneru described multiple co-build initiatives spanning the past year: agents built on Kore.ai's platform can run on <a href="https://azure.microsoft.com/en-us/products/ai-foundry">Azure Foundry</a> using its models and infrastructure; Kore.ai's AI for Work product integrates with Microsoft Copilot so that enterprise data and agentic workflows surface directly in the Copilot interface; and AI for Service integrates with Dynamics 365 as a joint go-to-market offering.</p><p>"There is a deep relationship," Koneru said. "In fact, I'm at their CEO Summit, and then for the next three days."</p><p>Stephen Boyle, CVP of Enterprise Partner Solutions at Microsoft, offered support for the partnership in the Artemis press release, noting that the platform "integrates with Microsoft Foundry and Microsoft Agent 365, giving customers a governed environment to build, deploy, and operate AI agents."</p><p>Yet Kore.ai simultaneously pitches itself as the vendor-neutral alternative to Microsoft and its peers — a tension the company addresses head-on. "All of the vendors or tech companies that you mentioned have a legacy that they're trying to protect," Koneru said when asked why a CIO should choose Kore.ai over an incumbent. "There's an inbuilt lock-in to their legacy, whether that's a Salesforce application, ServiceNow application, Microsoft Azure cloud, or whatever." The platform supports 175 different AI models — including those from OpenAI, Anthropic, and open-source providers — deploys across Azure, AWS, Google Cloud, and on-premises environments, connects to any data source via tool calling or MCP, and delivers across more than 40 voice and digital channels.</p><h2><b>How a pharmacy chain and a global investment bank deployed AI agents at massive scale</b></h2><p>Kore.ai's claims about enterprise readiness are backed by deployments that rank among the largest AI implementations in the world.</p><p>One of the largest pharmacy chains in the United States — which Koneru declined to name but described in enough detail to make identification straightforward — receives approximately 750 million calls from consumers annually. The chain signed with Kore.ai at the end of March 2025, deployed on its own infrastructure, had half of its 9,000 stores live within three months, and reached full deployment across all stores within six months.</p><p>"The speed at which they were able to build out very complex functionality — which requires understanding what the prescription is all about, being able to answer questions about them, then tying it to their backend systems to fill the prescription, refill it — all of those processes was done essentially," Koneru said.</p><p>A second example involves the world's second-largest investment bank, which deployed Kore.ai's AI for Work product to 135,000 employees and contractors. The bank uses the platform to give more than 30,000 financial advisors access to proprietary research and client portfolio data through a conversational interface, with agentic workflows handling routine tasks. The deployment went from initial users to global rollout within a year. A third customer — a major semiconductor manufacturer with 35,000 employees across multiple countries and languages — deployed AI for Work starting with HR use cases like onboarding, benefits management, and performance reviews, with backend integration to Workday, and has since expanded into IT, legal, and facilities management workflows.</p><h2><b>Kore.ai's analyst track record and funding history fuel its challenge to the hyperscalers</b></h2><p>The <a href="http://kore.ai/">Artemis</a> launch lands in one of the most fiercely contested markets in enterprise technology. Microsoft's Copilot Studio and Agent 365, Salesforce's Agentforce, Google's Vertex AI Agent Builder, and ServiceNow's AI Agents all target the same CIO budget. Meanwhile, a wave of well-funded startups — from established players like UiPath to AI-native entrants — is flooding the market with agent-building frameworks and platforms.</p><p>Kore.ai's competitive position rests on several pillars. The company has earned consistent recognition from major analyst firms: it has been named a Leader in the <a href="https://www.kore.ai/ai-research-reports/leader-gartner-magic-quadrant-conversational-ai-2025">Gartner Magic Quadrant for Enterprise Conversational AI Platforms</a> (positioned highest for Ability to Execute, according to the company), a <a href="https://www.kore.ai/ai-research-reports/kore-ai-leader-forrester-wave-cognitive-search-q4-2025">Leader in the Forrester Wave for Cognitive Search Platforms</a> with the highest ranking in the Strategy category, and an <a href="https://www.kore.ai/blog/kore-ai-positioned-as-an-emerging-leader-in-gartners-emqs-for-generative-ai-engineering-and-genai-applications">Emerging Leader in Gartner's Emerging Market Quadrants</a> for both Generative AI Engineering and GenAI Applications. Everest Group has also positioned Kore.ai as a Leader in its Agentic AI Products PEAK Matrix Assessment for 2026.</p><p>The company's financial trajectory adds further credibility. In January 2024, Kore.ai raised $150 million in a round led by <a href="https://ftvcapital.com/2024/kore-ai-secures-150-million-strategic-growth-investment-to-drive-ai-powered-customer-and-employee-experiences-for-global-brands/">FTV Capital</a> with participation from Nvidia, bringing total funding to approximately $223 million. TechCrunch reported at the time that the company's annual recurring revenue <a href="https://techcrunch.com/2024/01/30/kore-ai-a-startup-building-conversational-ai-for-enterprises-raises-150m/">exceeded $100 million</a>, with the platform automating 450 million interactions daily. In January 2026, the company secured an additional strategic growth investment led by AllianceBernstein Private Credit Investors, with continued backing from Vistara Growth, Beedie Capital, and Sweetwater Private Equity. The company now claims more than 500 Global 2000 customers and partners, with 75% of its customer base in regulated industries and support for over 300 enterprise integrations.</p><h2><b>What the Artemis launch means for the future of enterprise AI agent platforms</b></h2><p>The <a href="https://www.kore.ai/ai-agent-platform">Artemis platform</a> is available today at kore.ai, launching initially on Microsoft Azure with broader cloud availability to follow. Koneru said existing customers — many of whom built their current deployments on Kore.ai's previous no-code platform — are planning migrations to the new architecture, while all new customers are starting on Artemis.</p><p>The portability question remains partially unresolved. While ABL itself is a YAML-based artifact that customers can store and manage in their own systems, the runtime required to execute it is not yet available as a standalone component. Koneru said a lighter version of the runtime will be made available in the future for customers who want to run ABL outside the full Kore.ai platform, but acknowledged that the initial release prioritizes the integrated enterprise experience.</p><p>For CIOs navigating an increasingly crowded and fast-moving market for enterprise AI agents, the Artemis launch poses a clear choice: bet on a hyperscaler's native platform and accept the lock-in that comes with it, or adopt a neutral layer that promises to orchestrate and govern agents across any model, any cloud, and any vendor — but requires trust in a company that, for all its scale and analyst recognition, remains far smaller than the giants it competes against.</p><p>"If I'm going to go down the path of one hyperscaler or one SaaS company that provides an agentic platform, I'm getting locked in in some fashion or the other," Koneru said. "We need standardization. We need a central way to build and deploy. We need a central way to govern."</p><p>It is a bold claim from a company that has spent 12 years building the plumbing for enterprise AI while flashier names grabbed headlines. But if the next chapter of the AI revolution is defined not by which model is smartest but by which platform can be trusted to run agents safely at scale, then Kore.ai's long apprenticeship in the unglamorous trenches of compliance, governance, and regulated industry deployment may turn out to be exactly the right résumé for the job.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[AI at scale: What engineering teams are confronting]]></title>
<description><![CDATA[For the past few years, enterprise AI conversations have been dominated by optimism: bigger models, more pilots, faster automation. The prevailing assumption was simple — pick the right AI platform and progress would follow.



Reality has been far less forgiving.



Most IT leaders have discover...]]></description>
<link>https://tsecurity.de/de/3535684/ai-nachrichten/ai-at-scale-what-engineering-teams-are-confronting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3535684/ai-nachrichten/ai-at-scale-what-engineering-teams-are-confronting/</guid>
<pubDate>Thu, 21 May 2026 11:03:42 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>For the past few years, enterprise AI conversations have been dominated by optimism: bigger models, more pilots, faster automation. The prevailing assumption was simple — pick the right AI platform and progress would follow.</p>



<p>Reality has been far less forgiving.</p>



<p>Most IT leaders have discovered that <a href="https://www.infoworld.com/article/4151572/the-starkly-uneven-reality-of-enterprise-ai-adoption.html">production AI</a> is significantly harder than early experimentation suggested. The real work begins not when a model performs well in isolation, but when it must operate inside environments that are secure, observable, and operationally durable.</p>



<p>Recent <a href="https://southworks.com/enterprise-cloud-maturity-and-strategic-gaps">research</a> my company conducted with enterprise cloud architects and IT decision-makers confirms what many engineering teams already know instinctively: experimentation is easy. Operationalizing AI reliably, repeatedly, and at scale is the hard part.</p>



<p>Once AI begins influencing real workflows, recommending decisions or triggering actions, the model quickly becomes the least interesting part of the system. The pressure shifts to everything around it.</p>



<h2 class="wp-block-heading">Agentic AI is scaling faster than the environment around it</h2>



<p>The data leaves little room for debate: AI has already moved into operational territory. Nearly three-quarters of respondents report actively training machine learning models, and 76% are running GPU workloads in production. More than 70% are investing in AI reasoning, decision optimization and AI assistants designed to execute tasks.</p>



<p>These are not exploratory use cases. They shape workflows, customer experiences, and internal decision-making.</p>



<p>Yet many of these systems are being deployed into cloud environments that predate agentic AI entirely. Nearly all organizations report that their machine learning pipelines require migrating more than 25% of their data — an early warning signal that existing infrastructure was never designed for reproducible model operations, standardized feature pipelines, or consistent policy enforcement.</p>



<p>In practice, <a href="https://www.infoworld.com/article/3611465/how-ai-agents-will-transform-the-future-of-work.html">agentic AI</a> is being layered onto platforms optimized for application deployment, not governed execution-level intelligence. That architectural mismatch is where friction begins.</p>



<h2 class="wp-block-heading">Governance gaps become visible under execution pressure</h2>



<p>Governance gaps are easy to overlook during experimentation. In execution environments, they surface immediately.</p>



<p>Nearly all organizations store and process personally identifiable information, and most operate under regulatory regimes such as HIPAA or GDPR. At the same time, roughly half rely on public AI tools, while fewer than a quarter report enterprise-wide, governed AI deployments built on a shared framework.</p>



<p>This creates structural tension. AI systems are influencing production decisions inside environments where governance is inconsistent by design. Data flows through models without uniform audit controls. Policy enforcement varies across cloud accounts, teams, and regions.</p>



<p>This is not a tooling failure. It is a systems design failure.</p>



<p>When agentic AI participates directly in execution paths, it inherits the enterprise’s regulatory and operational obligations. If the underlying cloud architecture was not designed with AI-native governance in mind, teams are forced to retrofit controls into systems that were never meant to carry that load.</p>



<h2 class="wp-block-heading">Multicloud complexity amplifies the challenge</h2>



<p>Very few enterprises operate in a single cloud. Many manage between six and 20 cloud accounts across providers, with <a href="https://www.infoworld.com/article/2259359/what-is-infrastructure-as-code-automating-your-infrastructure-builds.html">infrastructure-as-code</a> practices that vary by platform and teams running AWS CloudFormation and HashiCorp Terraform side by side.</p>



<p><a href="https://www.infoworld.com/article/2255028/what-is-devops-transforming-software-development.html">Devops</a> organizations already shoulder significant operational burden, particularly around monitoring and reliability across distributed systems. Introducing agentic AI adds new stateful components, data dependencies, and life-cycle requirements. Model retraining, feature store updates, and inference endpoints must now align with identity, logging, and compliance controls across environments.</p>



<p>The friction teams experience rarely comes from any single AI system. It emerges from the interaction between agentic workloads and cloud estates assembled incrementally over years of modernization. The more fragmented the environment, the harder it becomes to enforce consistent governance at the AI layer.</p>



<h2 class="wp-block-heading">It’s not just build vs. buy, but architectural fit</h2>



<p>Much of the industry still frames agentic AI adoption as a build-versus-buy decision. The survey reflects heavy reliance on vendors and service providers, driven by skills scarcity and compressed timelines. But that framing misses the real issue.</p>



<p>The decisive question is architectural fit.</p>



<p>External platforms can accelerate delivery. Internal teams bring deep system and data context. What determines success is how AI initiatives integrate into the surrounding cloud environment.</p>



<p>When third-party capabilities are introduced without alignment to internal standards, fragmentation accelerates. But when AI systems are developed in isolation from core governance frameworks, architectural drift compounds quietly over time.</p>



<p>In response, many organizations are converging on a different model. Instead of isolating AI projects in silos, they are embedding external AI expertise directly inside internal delivery environments. Models are built and tested against production-grade governance from day one. Infrastructure, compliance, and observability are treated as first-class requirements, not cleanup work.</p>



<p>This approach recognizes that few enterprises have every AI capability fully staffed in-house, while preserving the architectural coherence required to scale sustainably.</p>



<h2 class="wp-block-heading">Execution-level AI requires execution-level environment design</h2>



<p>Agentic AI has decisively crossed into execution. Enterprises are training models, running GPU workloads, and embedding intelligent systems directly into operational workflows. At the same time, many are still modernizing pipelines, closing security gaps, and working toward consistent governance across increasingly distributed cloud estates.</p>



<p>The friction organizations encounter is rarely algorithmic. It is architectural.</p>



<p>Cloud environments built for application deployment are now being asked to support governed, reproducible, execution-level AI systems. That transition does not happen accidentally. It requires deliberate environment design.</p>



<p>Models unlock potential. Architecture determines whether that potential survives contact with production. As AI continues to influence real decisions and real workflows, the durability of the surrounding platform, not model novelty, will determine who scales successfully and who stalls.</p>



<p><em>—</em></p>



<p><a href="https://www.infoworld.com/blogs/new-tech-forum"><strong><em>New Tech Forum</em></strong></a><em><strong> provides a venue for technology leaders—including vendors and other outside contributors—to explore and discuss emerging enterprise technology in unprecedented depth and breadth. The selection is subjective, based on our pick of the technologies we believe to be important and of greatest interest to InfoWorld readers. InfoWorld does not accept marketing collateral for publication and reserves the right to edit all contributed content. Send all </strong></em><em><strong>inquiries to </strong></em><a href="mailto:doug_dineley@foundryco.com"><strong><em>doug_dineley@foundryco.com</em></strong></a><em><strong>.</strong></em></p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[ZTE releases Sustainability Report 2025: driving a new chapter in sustainable development through AI]]></title>
<description><![CDATA[Through its "All in AI, AI for All" vision, ZTE surpasses climate targets, bridges the global digital divide, and strengthens governance resilience]]></description>
<link>https://tsecurity.de/de/3532339/it-nachrichten/zte-releases-sustainability-report-2025-driving-a-new-chapter-in-sustainable-development-through-ai/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3532339/it-nachrichten/zte-releases-sustainability-report-2025-driving-a-new-chapter-in-sustainable-development-through-ai/</guid>
<pubDate>Wed, 20 May 2026 11:18:22 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Through its "All in AI, AI for All" vision, ZTE surpasses climate targets, bridges the global digital divide, and strengthens governance resilience]]></content:encoded>
</item>
<item>
<title><![CDATA[Google unveils Gemini Omni 'any-to-any' AI model: what enterprises should know]]></title>
<description><![CDATA[Although it was already discovered by intrepid AI power users weeks ahead of the official unveiling today at Google's annual I/O developer conference, the company's new Gemini Omni model marks a significantly new paradigm in the wider AI and tech marketplace.That's because as its "omni" (from the...]]></description>
<link>https://tsecurity.de/de/3530356/it-nachrichten/google-unveils-gemini-omni-any-to-any-ai-model-what-enterprises-should-know/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3530356/it-nachrichten/google-unveils-gemini-omni-any-to-any-ai-model-what-enterprises-should-know/</guid>
<pubDate>Tue, 19 May 2026 20:04:35 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Although it was <a href="https://9to5google.com/2026/05/11/gemini-omni-video-model-shows-up-with-some-early-demos/">already discovered by intrepid AI power users weeks</a> ahead of the official unveiling today at Google's annual I/O developer conference, the company's <a href="https://x.com/GoogleDeepMind/status/2056786446636212467?s=20">new Gemini Omni model </a>marks a significantly new paradigm in the wider AI and tech marketplace.</p><p>That's because as its "omni" (from the Latin <i>omne</i> — meaning "all") prefix would suggest, this is Google's first truly native, multimodal model, that is "a model that can create anything from any input — starting with video." </p><p>The model marks Google's bid to collapse the multimodal generative stack — text-to-image, image-to-video, video-to-video, audio generation — into a single foundation model with a single editing surface. </p><div></div><p>The big question for business leaders is: should you switch any of your own AI stack over to Gemini Omni now?</p><p>Unfortunately, the truth is, you may not be able to just yet — the model is only available to individual users through Google's AI subscription plans starting with the $20 per user per month "AI Plus" plan. </p><p>While the company says it is ultimately going to be available via an application programming interface (API) — which many enterprises rely on for their AI needs — it's not ready yet. </p><div></div><p>But, given the capabilities and faster editing enabled by the new Omni model, individual members of your team should probably give serious consideration to switching over to it, especially if they work creating visuals for technical diagrams, marketing and comms materials, training and corporate education courses, sales collateral, and basically anything that involves visuals.  </p><h2><b>What Omni actually is</b></h2><p>Omni is the next chapter of the work that produced <a href="https://venturebeat.com/ai/googles-upgraded-nano-banana-pro-ai-image-model-hailed-as-absolutely-bonkers">Nano Banana</a>, the image-generation and editing model Google shipped roughly a year ago. </p><p>The first model in the family, Gemini Omni Flash, accepts any combination of text, images, audio, and video as input and produces high-quality output across the same modalities — all from a single model rather than a relay of specialized systems. </p><p>Google says the model is "natively multimodal from the ground up," which matters less as marketing copy than as an architectural claim: a unified model can reason across modalities in the same forward pass, which generally translates into more coherent edits, fewer pipeline artifacts, and a far cleaner API surface for developers.</p><p>OpenAI started this trend back in May 2024 with the release of <a href="https://venturebeat.com/ai/openai-announces-new-free-model-gpt-4o-and-chatgpt-for-desktop">GPT-4o</a>, its first natively "omni" model, also trained from the ground-up to be able to analyze and generate multiple different types of content, from text to code, imagery, and audio. However, it did not support video generation, and the model was eventually deprecated following <a href="https://venturebeat.com/ai/openai-rolls-back-chatgpts-sycophancy-and-explains-what-went-wrong">reports of sycophancy</a> and even users <a href="https://www.businessinsider.com/openai-retires-gpt-4o-user-backlash-chatgpt-ai-2026-2">demanding OpenAI retain it</a> after developing parasocial relationships with it. </p><p>Is Gemini Omni at risk of sparking a similarly devoted following? It remains to be seen.</p><p>One big difference is that its headline interaction pattern is conversational video editing. Each instruction "builds on the last," and past directions persist across turns so the video evolves coherently as the user iterates. </p><p>Practical examples Google highlighted include changing the world inside a clip, reimagining an action or camera angle, refining sequences over multiple turns, and generating explainer-style content from short prompts. </p><p>Google also emphasizes improved physics — gravity, kinetic energy, fluid dynamics — which is the kind of detail that separates "looks like AI video" from "looks like footage."</p><h2><b>Rollout, pricing, and the API question</b></h2><p>The first thing enterprise leaders should read carefully is the rollout plan. Omni Flash is going live today inside the Gemini app for U.S. subscribers across AI Plus, AI Pro, and AI Ultra tiers — including the new $100-per-month AI Ultra plan Google announced at the same event. </p><p>Google says it will roll out to developers via Vertex AI APIs "in the coming weeks." That gap is significant. Until the Vertex API is generally available, Omni is effectively a consumer and prosumer tool.</p><p>Enterprise pilots beyond individual seat-based experimentation should wait for the API, both because that's where Google's enterprise SLAs and data-handling commitments live, and because production-grade generative video without a programmatic interface is a non-starter.</p><p>Its pricing through the API per million tokens (presumably) will also determine its viability as an enterprise product outside of film/TV/entertainment and the arts productions. </p><p>For decision-makers weighing seat economics in the meantime, the new AI Ultra tier is positioned specifically at developers, technical leads, knowledge workers, and advanced creators, with priority access to Google Antigravity, higher usage limits, and bundled Omni Flash access. </p><p>For small creative teams under tight deadlines, that may be the fastest way to evaluate the model before the API arrives.</p><h2><b>The enterprise use cases that really matter</b></h2><p>It is easy to default to "marketing video" as the use case, but Omni's value proposition for enterprises is broader if you think of it as a programmable video and media engine rather than a creative app:</p><ul><li><p><b>Sales and marketing: </b>rapid generation of variant ads, localized creative, and product demos without per-asset agency cycles.</p></li><li><p><b>Internal communications, learning and development (L&amp;D): </b>explainer videos, onboarding modules, and policy walkthroughs produced by non-specialists.</p></li><li><p><b>Customer support and documentation:</b> dynamic, query-conditioned visual explainers attached to help articles.</p></li><li><p><b>Product and engineering: </b>visualization of simulations, UI walkthroughs, and concept videos for spec reviews.</p></li><li><p><b>Field operations:</b> short, situation-specific instructional clips generated on demand.</p></li></ul><p>What changes with Omni versus the previous generation of tools is the unification. Many enterprises stitched a workflow together from text-to-image, image-to-video, lip-sync, and voice models, each with its own contract, billing, and data path. A single Vertex AI-backed model collapses procurement and observability into one place — assuming the eventual API delivers production-grade throughput and latency.</p><h2><b>The governance story is the most underrated part</b></h2><p>For CIOs and CISOs, the most important section of Google's announcement is not the model card; it is the provenance and content-safety work shipping alongside it. </p><p>Every video generated by Omni carries Google's SynthID digital watermark. Google is expanding C2PA Content Credentials across its generative tools, and launching an AI Content Detection API on Agent Platform that lets businesses identify AI-generated content from both Google and other popular models. </p><p>Partner integrations announced at the same event — including Shutterstock, Avid (in Pro Tools), and at least one major newswire — indicate where the standard is going.</p><p>For enterprises, this matters in <b>three concrete ways: </b></p><ol><li><p>It gives<b> legal and compliance teams</b> a defensible audit trail for AI-generated media. </p></li><li><p>It allows brand-safety teams to <b>detect AI-generated material entering content pipelines from third parties. </b></p></li><li><p>And it <b>provides a defensible answer for regulators in jurisdictions, like the EU</b>, that are tightening rules around synthetic-media disclosure.</p></li></ol><p>There is also a "Personal Avatars" program that lets creators record short videos to authorize use of their voice and likeness across generated content, as Google leaders and employees showcased themselves today in posts centered around I/O featuring their AI generated likenesses. </p><p>This puts it in direct competition with <a href="https://venturebeat.com/ai/synthesia-announces-platform-update-with-interactive-ai-videos-full-body-avatars">Synthesia</a>, a UK-based AI unicorn focused primarily on enterprise-safe AI videos and avatars. </p><p>For enterprises considering executive videos, training avatars, or branded spokesperson content, the consent model here is the right starting point — but contracts and rights-management policies will need to extend to cover it.</p><h2><b>Risks worth flagging</b></h2><p>Omni's main risks are familiar but worth restating. </p><p>The competitive landscape is crowded with the aforementioned Synthesia, TikTok parent company ByteDance's acclaimed Seedance model, Kuaishou Technology's Kling AI models, and the fast-improving open-source field all compete for the same workflows. </p><p>Lock-in to any single video model is a real concern when output quality is still leapfrogging quarterly. </p><p>Latency and cost for production-volume video generation remain unproven outside controlled demos. </p><p>In addition, the legal status of training data for generative video is unsettled in multiple jurisdictions; enterprises should require clear indemnification language before deploying generated video into customer-facing channels.</p><p>Furthermore, VentureBeat collaborator and <a href="https://www.youtube.com/@samwitteveenai">AI YouTuber Sam Witteveen</a>, <a href="https://reddragonai.com/">CEO of enterprise machine learning vendor Red Dragon AI</a>, received early access to Gemini Omni and reported the content restrictions (which some deem to be censorship) to be quite strict, potentially restricting and inhibiting all the potential use cases an enterprise would like to pursue. </p><h2><b>Thoughts for enterprises considering adoption</b></h2><p>Omni is worth piloting — but the structure of the pilot matters. </p><p>For most enterprises, the right move over the next 30 to 60 days is to fund a small, sanctioned experiment with one or two AI Ultra seats in marketing or L&amp;D, while the platform and security teams use that runway to prepare for the Vertex AI API: define data-residency requirements, set up SynthID and C2PA verification in the content pipeline, and stand up the AI Content Detection API alongside existing media-governance tooling. </p><p>Treat the consumer rollout as a UX preview, not a production plan. When the API arrives, the enterprises that have already done the governance work will be the ones moving Omni into real workflows while everyone else is still drafting policy.</p><p>Omni is not, by itself, a reason to overhaul an enterprise AI strategy. But it is a strong signal that the multimodal generative stack is consolidating into single models with first-party provenance baked in — and that is a shift technical decision-makers should be planning around now.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[I spent hours uncovering secrets in Yoshi and the Mysterious Book, and despite its low difficulty, I can see it being a hit with players of all ages]]></title>
<description><![CDATA[Yoshi and the Mysterious Book sees Nintendo’s green dino embark on a new chapter, with a discovery-focused puzzler that exudes charm and charisma — but is it any good?]]></description>
<link>https://tsecurity.de/de/3529193/it-nachrichten/i-spent-hours-uncovering-secrets-in-yoshi-and-the-mysterious-book-and-despite-its-low-difficulty-i-can-see-it-being-a-hit-with-players-of-all-ages/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3529193/it-nachrichten/i-spent-hours-uncovering-secrets-in-yoshi-and-the-mysterious-book-and-despite-its-low-difficulty-i-can-see-it-being-a-hit-with-players-of-all-ages/</guid>
<pubDate>Tue, 19 May 2026 15:03:13 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Yoshi and the Mysterious Book sees Nintendo’s green dino embark on a new chapter, with a discovery-focused puzzler that exudes charm and charisma — but is it any good?]]></content:encoded>
</item>
<item>
<title><![CDATA[From Physical Books to Interactive Learning: How AI Brings Textbooks to Life]]></title>
<description><![CDATA[Do you have a shelf full of books that you can never seem to find anything in? You flip through pages, scan for the right chapter, and still spend twenty minutes looking for one sentence you vaguely remember reading. Physical books are wonderful, but they have a real problem: you cannot search fo...]]></description>
<link>https://tsecurity.de/de/3527470/windows-tipps/from-physical-books-to-interactive-learning-how-ai-brings-textbooks-to-life/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3527470/windows-tipps/from-physical-books-to-interactive-learning-how-ai-brings-textbooks-to-life/</guid>
<pubDate>Tue, 19 May 2026 01:09:50 +0200</pubDate>
<category>🪟 Windows Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Do you have a shelf full of books that you can never seem to find anything in? You flip through pages, scan for the right chapter, and still spend twenty minutes looking for one sentence you vaguely remember reading. Physical books are wonderful, but they have a real problem: you cannot search for them. You […]</p>
<p>The post <a href="https://mspoweruser.com/ai-book-tutor/">From Physical Books to Interactive Learning: How AI Brings Textbooks to Life</a> appeared first on <a href="https://mspoweruser.com/">MSPoweruser</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[trunk/29b8db239fa690df11b9c765f4e3666bf6f5bafc: Add distributed training integration doc for OOT accelerators (#182308)]]></title>
<description><![CDATA[Add a new Distributed chapter to the accelerator integration guide covering how out-of-tree backends register a custom ProcessGroup with torch.distributed. The page walks through the C++ Backend implementation, pybind11 bindings, and Python registration using the OCCL reference from torch_openreg...]]></description>
<link>https://tsecurity.de/de/3526810/downloads/trunk29b8db239fa690df11b9c765f4e3666bf6f5bafc-add-distributed-training-integration-doc-for-oot-accelerators-182308/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3526810/downloads/trunk29b8db239fa690df11b9c765f4e3666bf6f5bafc-add-distributed-training-integration-doc-for-oot-accelerators-182308/</guid>
<pubDate>Mon, 18 May 2026 19:01:29 +0200</pubDate>
<category>💾 Downloads</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Add a new Distributed chapter to the accelerator integration guide covering how out-of-tree backends register a custom ProcessGroup with torch.distributed. The page walks through the C++ Backend implementation, pybind11 bindings, and Python registration using the OCCL reference from torch_openreg.</p>
<p>Related to: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4044762879" data-permission-text="Title is private" data-url="https://github.com/pytorch/pytorch/issues/176877" data-hovercard-type="issue" data-hovercard-url="/pytorch/pytorch/issues/176877/hovercard" href="https://github.com/pytorch/pytorch/issues/176877">#176877</a></p>
<p>Pull Request resolved: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4378411400" data-permission-text="Title is private" data-url="https://github.com/pytorch/pytorch/issues/182308" data-hovercard-type="pull_request" data-hovercard-url="/pytorch/pytorch/pull/182308/hovercard" href="https://github.com/pytorch/pytorch/pull/182308">#182308</a><br>
Approved by: <a href="https://github.com/KarhouTam">https://github.com/KarhouTam</a>, <a href="https://github.com/fffrog">https://github.com/fffrog</a></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[How Owners of EVs from Bankrupt Fisker Saved Their Cars With an Open Source Nonprofit]]></title>
<description><![CDATA[An anonymous reader shared this report from Electrek:
When Fisker Inc. filed for Chapter 11 bankruptcy in June 2024, it left roughly 11,000 Ocean SUV owners holding the keys to vehicles that cost them anywhere from $40,000 to $70,000 — and that were rapidly losing the software brains that made th...]]></description>
<link>https://tsecurity.de/de/3524085/it-security-nachrichten/how-owners-of-evs-from-bankrupt-fisker-saved-their-cars-with-an-open-source-nonprofit/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3524085/it-security-nachrichten/how-owners-of-evs-from-bankrupt-fisker-saved-their-cars-with-an-open-source-nonprofit/</guid>
<pubDate>Sun, 17 May 2026 18:53:14 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[An anonymous reader shared this report from Electrek:
When Fisker Inc. filed for Chapter 11 bankruptcy in June 2024, it left roughly 11,000 Ocean SUV owners holding the keys to vehicles that cost them anywhere from $40,000 to $70,000 — and that were rapidly losing the software brains that made them work. No more over-the-air updates. No more connected services. No more warranty. The manufacturer was dead. 

What happened next is one of the most remarkable stories in the history of the electric vehicle industry. Instead of accepting that their cars would become rolling paperweights, Fisker Ocean owners organized, reverse-engineered their vehicles' proprietary software, hacked into CAN bus networks, built open-source tools on GitHub, and effectively stood up a volunteer-run open-sourced car company from the ashes of Fisker...

Within months of the bankruptcy filing, thousands of Ocean owners formed the Fisker Owners Association (FOA) — a nonprofit that quickly grew to 4,000 members and began operating as something between a car club, a tech startup, and an independent automaker. The FOA hired independent tech experts who began reverse-engineering Fisker's proprietary software patches. Members taught each other how to flash firmware. They organized bulk purchases of replacement parts — negotiating the price of key fobs down from roughly $1,000 each to a fraction of that through coordinated group buys. They hosted free global key fob pairing events, saving each owner $100 to $250... 

What started as desperate troubleshooting has evolved into a genuine open-source ecosystem around the Fisker Ocean. On GitHub, a developer named MichaelOE reverse-engineered the API behind Fisker's official "My Fisker" mobile app and built a Home Assistant integration that exposes every cloud API value as a sensor — with all the app's buttons available as Home Assistant controls... [Community members have also been systematically mapping CAN bus files.] 

The article noes this "is not an isolated incident. Nikola also filed for bankruptcy, leaving its owners in a similar bind. Canoo and Arrival are headed for liquidation auctions..."

Consumer advocates are now pushing for structural changes: mandatory software escrow funds that would keep vehicle software running even if the manufacturer disappears, open-source mandates in bankruptcy proceedings, and shared repair data requirements... European automakers, meanwhile, are moving in a different direction entirely — Volkswagen, BMW, Mercedes-Benz, and eight suppliers signed a memorandum in 2025 to develop a shared open-source automotive software platform.... 

The Fisker Owners Association has proven that a dedicated community can keep orphaned EVs on the road. But they shouldn't have had to... [O]wners shouldn't need to become hackers and parts brokers and quasi-manufacturers just to keep driving the cars they already paid for.<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=How+Owners+of+EVs+from+Bankrupt+Fisker+Saved+Their+Cars+With+an+Open+Source+Nonprofit%3A+https%3A%2F%2Ftech.slashdot.org%2Fstory%2F26%2F05%2F16%2F2318249%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Ftech.slashdot.org%2Fstory%2F26%2F05%2F16%2F2318249%2Fhow-owners-of-evs-from-bankrupt-fisker-saved-their-cars-with-an-open-source-nonprofit%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://tech.slashdot.org/story/26/05/16/2318249/how-owners-of-evs-from-bankrupt-fisker-saved-their-cars-with-an-open-source-nonprofit?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[The Bear season 5: release date, likely cast, plot rumors, and everything else we know about the Hulu show's final chapter]]></title>
<description><![CDATA[The Bear season 5 will bring the highly rated, culinary comedy-drama to an end — here's what we know ahead of release.]]></description>
<link>https://tsecurity.de/de/3522133/it-nachrichten/the-bear-season-5-release-date-likely-cast-plot-rumors-and-everything-else-we-know-about-the-hulu-shows-final-chapter/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3522133/it-nachrichten/the-bear-season-5-release-date-likely-cast-plot-rumors-and-everything-else-we-know-about-the-hulu-shows-final-chapter/</guid>
<pubDate>Sat, 16 May 2026 15:02:38 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[The Bear season 5 will bring the highly rated, culinary comedy-drama to an end — here's what we know ahead of release.]]></content:encoded>
</item>
<item>
<title><![CDATA[Your NPM Package Is Stealing Secrets]]></title>
<description><![CDATA[Author: Security Weekly - A CRA Resource - Bewertung: 0x - Views:9 Malicious versions of the Node IPC NPM package contained heavily obfuscated payloads designed to steal developer and cloud credentials. The malware targeted AWS, Azure, GCP, GitHub, Kubernetes, Terraform, SSH keys, and dozens of o...]]></description>
<link>https://tsecurity.de/de/3520915/it-security-video/your-npm-package-is-stealing-secrets/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3520915/it-security-video/your-npm-package-is-stealing-secrets/</guid>
<pubDate>Sat, 16 May 2026 00:17:40 +0200</pubDate>
<category>🎥 IT Security Video</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>Author: Security Weekly - A CRA Resource - Bewertung: 0x - Views:9 <br/></p><p><iframe id="ytplayer" loading="lazy" type="text/html" width="100%" height="auto" src="https://www.youtube.com/embed/T1NhfFMppF4?autoplay=1&origin=http://tsecurity.de" frameborder="0"></iframe></p><p>Malicious versions of the Node IPC NPM package contained heavily obfuscated payloads designed to steal developer and cloud credentials. The malware targeted AWS, Azure, GCP, GitHub, Kubernetes, Terraform, SSH keys, and dozens of other secret categories while disguising outbound traffic as a legitimate Azure-related domain.<br />
<br />
This is what modern supply chain compromise looks like. Attackers no longer need to breach your infrastructure directly if they can poison a trusted dependency upstream. A single compromised package can silently expose cloud environments, CI/CD pipelines, and developer accounts at massive scale.<br />
<br />
For defenders, vetting code is no longer enough. The maintainers, update chain, and dependency ecosystem all become part of the attack surface.<br />
<br />
How do organizations realistically secure software dependencies at this scale?<br />
<br />
Subscribe to our podcasts: https://securityweekly.com/subscribe<br />
<br />
#SupplyChainSecurity #NPM #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec<br/></p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Expired domain leads to supply chain attack on node-ipc npm package]]></title>
<description><![CDATA[A popular npm package called node-ipc has been compromised, with hackers publishing malicious versions that bundle credential stealing malware. The root cause of the compromise was an expired domain name that attackers managed to register in order to hijack a maintainer’s account.



The node-ipc...]]></description>
<link>https://tsecurity.de/de/3520818/it-security-nachrichten/expired-domain-leads-to-supply-chain-attack-on-node-ipc-npm-package/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3520818/it-security-nachrichten/expired-domain-leads-to-supply-chain-attack-on-node-ipc-npm-package/</guid>
<pubDate>Fri, 15 May 2026 23:07:55 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>A popular npm package called node-ipc has been compromised, with hackers publishing malicious versions that bundle credential stealing malware. The root cause of the compromise was an expired domain name that attackers managed to register in order to hijack a maintainer’s account.</p>



<p>The node-ipc package has had malware added to its code in the past. In March 2022, following Russia’s invasion of Ukraine, the project’s creator <a href="https://www.csoonline.com/article/572327/developer-sabotages-own-npm-module-prompting-open-source-supply-chain-security-questions.html" target="_blank">intentionally added malicious code</a> to the program to wipe files on systems with Russian or Belarusian IP addresses.</p>



<p>Node-ipc is a Node.js module that implements support for local and remote Inter-Process Communication over various types of socket across all major platforms. One use case is in implementing complex multi-process neural networks in JavaScript, but the module is also used as a dependency for 424 other projects, and receives almost 700K weekly downloads.</p>



<p>On Thursday, <a href="https://github.com/RIAEvangelist/node-ipc/issues/15" target="_blank" rel="noreferrer noopener">attackers managed to publish three trojanized versions</a> across three different branches of the project: 9.1.6, 9.2.3 and 12.0.1. All new versions contained an 80KB obfuscated credential-stealing payload inside the node-ipc.cjs file.</p>



<p>The malicious code searches for and steals a wide range of credentials for CI/CD tools, cloud services and infrastructure, Kubernetes, SSH, and AI coding agents. The data is exfiltrated through DNS TXT queries rather than HTTP connections.</p>



<p>Since node-ipc is a dependency for hundreds of other packages, which in turn could be dependencies for even more packages, this attack could have a large blast radius. Users should immediately scan their systems to determine if they have any of the compromised versions installed, and if they do, treat the machine and any access token, environment variable, and API key stored on it as compromised.</p>



<h2 class="wp-block-heading">Exhaustive credential collection and sneaky exfiltration</h2>



<p>The malicious payload is decrypted and executed whenever other applications load the package through <em>require(‘node-ipc’)</em>. The trojanized versions were designed to remain fully functional to avoid immediate detection, which together with other decisions attackers took, such as data exfiltration via DNS TXT, suggest stealthiness was a top priority.</p>



<p>Once executed, the malicious code collects information about the host system, including operating system version, hostname, and environment variables. It then starts looking for credentials in various locations based on the detected OS.</p>



<p>“The payload chooses between separate decoded target lists for macOS and Linux/default platforms,” researchers from Socket.dev said in <a href="https://socket.dev/blog/node-ipc-package-compromised" target="_blank" rel="noreferrer noopener">their analysis.</a> “The lists are not identical. In the analyzed payload, the macOS list contains 113 patterns and the Linux/default list contains 127 patterns.”</p>



<p>The target lists are extensive and include:</p>



<ul class="wp-block-list">
<li>Configuration files for AWS, Azure, GCP, OCI, DigitalOcean, Scaleway, Hetzner, Fly, Vercel, Railway, Alibaba Cloud, IBM Cloud, Linode, MinIO, Snowflake, Doppler, and Salesforce;</li>



<li>SSH keys and SSH configuration;</li>



<li>Kubernetes, Docker, Helm, Rancher, and service-account material;</li>



<li>npm, Yarn, Netrc, Git, GitHub CLI, GitLab CLI, and Hub credentials;</li>



<li>Terraform credentials and tfvars files;</li>



<li>.env, .env.local, .env.production, database configuration files, shell histories, and database CLI histories;</li>



<li>macOS Keychain database files;</li>



<li>Firefox profile key database files on macOS;</li>



<li>Linux keyrings and KWallet files;</li>



<li>FileZilla, Remmina, OpenVPN, and related connection profiles;</li>



<li>Microsoft Teams local storage and IndexedDB paths.</li>
</ul>



<p>While browser credential stores are not targeted directly, macOS keychain databases can contain system and browser credentials, so those credentials should be considered compromised as well and rotated.</p>



<p>All the collected data is archived in a GZIP file, which is then split into chunks and exfiltrated by making DNS TXT queries on an attacker-controlled domain whose name is similar to that of Microsoft’s legitimate Azure Static Web Apps domain.</p>



<p>Since the attackers control the DNS server for their domain name, they can see the TXT record queries made by the infected systems and can reconstruct the archives on their end from the leaked bytes. The Socket researchers estimate that a 500KB file would require around 29,400 TXT queries to exfiltrate in this way.</p>



<p>“The payload does not establish persistence in the decoded sample,” the researchers said. “There is no observed cron, launchd, rc.d, service installation, or second-stage download. The operational impact is concentrated in the execution window: collection, archive creation, DNS TXT exfiltration, and attempted cleanup.”</p>



<h2 class="wp-block-heading">Expired domain led to email takeover</h2>



<p>The malicious node-ipc versions were published from an npm account called atiertant, which belongs to one of the several developers with maintainer access to the package.  Atiertant had never used his access to publish new node-ipc versions before, and has had no activity on node-ipc or any other npm package he has access to since 2022.</p>



<p><a href="https://x.com/TekDefense/status/2054963016039342549" target="_blank" rel="noreferrer noopener">Security researchers noticed</a> that the email address for atiertant’s account was hosted on a domain called atlantis-software.net that had expired in January 2025 and was re-registered earlier this month, most likely by the attackers. It was then just a matter of setting up an email server, recreating atiertant’s email address and performing a password reset on the account.</p>



<p>This highlights some of the security challenges open-source software projects face. While periodically reviewing access lists for dormant and unused accounts is a general security recommendation for companies, open-source projects are maintained by groups of volunteers, and it’s not unusual for people to take long breaks from contributing to projects, especially if those projects have reached a high level of maturity and feature completeness so they no longer get frequent updates.</p>



<p>It’s also likely that the attackers did not target node-ipc from the start, they just searched npm for accounts with email addresses on custom domain names, then checked if any of those domain names had expired. This means there might be other dormant accounts out there susceptible to email takeover using the same method.</p>



<p>The Socket.dev report contains additional recommendations for both users and developers, as well as file hashes and other indicators of compromise that can be used by security teams to create detections.</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Azure Meetup Stuttgart an der HFT Stuttgart – Infrastructure as Code: Terraform und Bicep]]></title>
<description><![CDATA[Am Abend des 3. Juni 2026 findet das Azure Meetup Stuttgart zum Thema Azure Infrastructure as Code: Terraform und Bicep an der HFT Stuttgart statt. Der Event ist kostenfrei … eine Registrierung über die Meetup-Plattform ist zur Planung notwendig. Weitere spannende Events finden Sie auf der Event-...]]></description>
<link>https://tsecurity.de/de/3520429/it-nachrichten/azure-meetup-stuttgart-an-der-hft-stuttgart-infrastructure-as-code-terraform-und-bicep/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3520429/it-nachrichten/azure-meetup-stuttgart-an-der-hft-stuttgart-infrastructure-as-code-terraform-und-bicep/</guid>
<pubDate>Fri, 15 May 2026 19:02:04 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Am Abend des 3. Juni 2026 findet das Azure Meetup Stuttgart zum Thema Azure Infrastructure as Code: Terraform und Bicep an der HFT Stuttgart statt. Der Event ist kostenfrei … eine Registrierung über die Meetup-Plattform ist zur Planung notwendig. Weitere spannende Events finden Sie auf der Event-Übersicht. Um keine News mehr zu verpassen, am Besten … <a href="https://innovative-trends.de/2026/05/15/azure-meetup-stuttgart-an-der-hft-stuttgart-infrastructure-as-code-terraform-und-bicep/" class="more-link"><span class="screen-reader-text">Azure Meetup Stuttgart an der HFT Stuttgart – Infrastructure as Code: Terraform und Bicep</span> weiterlesen</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[Solar Expanse - Space Exploration Manager Preview (PC)]]></title>
<description><![CDATA[I’ve always enjoyed the idea of exploring the Solar System, its planets and conquering places that no one ever visited before. And with Solar Expanse, you can easily do that. The game allows you to enter a space race where you’re competing with other corporations in order to mine asteroids, colon...]]></description>
<link>https://tsecurity.de/de/3519294/it-security-nachrichten/solar-expanse-space-exploration-manager-preview-pc/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3519294/it-security-nachrichten/solar-expanse-space-exploration-manager-preview-pc/</guid>
<pubDate>Fri, 15 May 2026 12:35:47 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[I’ve always enjoyed the idea of exploring the Solar System, its planets and conquering places that no one ever visited before. And with Solar Expanse, you can easily do that. The game allows you to enter a space race where you’re competing with other corporations in order to mine asteroids, colonize other planets and terraform.

It’s all a sandbox, so the focus is on trying to colonize the system and prevent losing. And there are plenty of loss conditions. You can run out of money, for starters. Or you don’t tackle the asteroid heading towards Earth. But the true appeal of the game is certainly the experience, the ability to immerse yourself in a sandbox and customize stuff as you go along.

For newcomers, Solar Expanse’s menus can feel rather overwhelming, but in a good way. A lot of the gameplay relies on planning and then executing spaceship missions. It’s interesting to browse ships and see their pros and cons, then choose the best ones. Some of them are great fo...]]></content:encoded>
</item>
<item>
<title><![CDATA[Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm]]></title>
<description><![CDATA[A fresh supply chain attack targeting the widely used node-ipc npm package has raised new concerns across the JavaScript ecosystem after researchers uncovered multiple malicious releases containing an obfuscated credential stealer and backdoor functionality. Security analysts confirmed that sever...]]></description>
<link>https://tsecurity.de/de/3518584/it-security-nachrichten/malicious-node-ipc-npm-packages-trigger-new-supply-chain-security-alarm/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3518584/it-security-nachrichten/malicious-node-ipc-npm-packages-trigger-new-supply-chain-security-alarm/</guid>
<pubDate>Fri, 15 May 2026 08:20:49 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><img width="1222" height="697" src="https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package.webp" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="node-ipc, npm package" decoding="async" srcset="https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package.webp 1222w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-300x171.webp 300w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-1024x584.webp 1024w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-768x438.webp 768w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-600x342.webp 600w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-150x86.webp 150w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-750x428.webp 750w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-1140x650.webp 1140w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package.webp 1222w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-300x171.webp 300w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-1024x584.webp 1024w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-768x438.webp 768w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-600x342.webp 600w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-150x86.webp 150w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-750x428.webp 750w, https://thecyberexpress.com/wp-content/uploads/node-ipc-npm-package-1140x650.webp 1140w" sizes="(max-width: 1222px) 100vw, 1222px" title="Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm 1"></p><span data-contrast="auto">A fresh supply chain attack targeting the widely used node-ipc npm package has raised new concerns across the JavaScript ecosystem after researchers uncovered multiple malicious releases containing an obfuscated credential stealer and backdoor functionality. Security analysts confirmed that several recently published package tarballs were infected with malware capable of harvesting sensitive data from developer systems and CI environments.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The compromised versions identified as malicious include:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li><span data-contrast="none">node-ipc@9.1.6</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="none">node-ipc@9.2.3</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="none">node-ipc@12.0.1</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">Researchers at <a href="https://socket.dev/blog/node-ipc-package-compromised" target="_blank" rel="nofollow noopener">Socket</a> reported that the suspicious versions were flagged within approximately three minutes of publication, classifying the activity as malware almost immediately. Their investigation found that the malicious node-ipc releases contained heavily obfuscated code designed to fingerprint systems, collect local files, compress stolen <a class="wpil_keyword_link" href="https://thecyberexpress.com/what-is-data/" title="data" data-wpil-keyword-link="linked" data-wpil-monitor-id="28252">data</a>, encrypt the payload, and exfiltrate information through DNS-based communication channels.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The incident marks another major <a href="https://thecyberexpress.com/google-workspace-security-data-exfiltration/" target="_blank" rel="noopener">security issue</a> involving the long-running npm package, which was previously linked to one of the most discussed software supply chain incidents in the Node.js community.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<h3 aria-level="2"><b><span data-contrast="none">Malicious node-ipc Versions Revive Earlier Supply Chain Concerns</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto">The latest attack does not appear to be a typosquatting campaign. Instead, analysts believe the <a href="https://thecyberexpress.com/glassworm-malicious-campaign/" target="_blank" rel="noopener">threat actor</a> republished or reintroduced malicious functionality directly into legitimate node-ipc package versions.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">Researchers also pointed to earlier compromises connected to the package. In 2022, versions 10.1.1 and 10.1.2 contained geo-targeted destructive <a class="wpil_keyword_link" href="https://thecyberexpress.com/what-is-malware/" title="malware" data-wpil-keyword-link="linked" data-wpil-monitor-id="28248">malware</a> that checked whether systems were located in Russia or Belarus before recursively overwriting files. Versions 11.0.0 and 11.1.0 included the controversial “peacenotwar” dependency associated with unauthorized file-writing behavior.</span>

<span data-contrast="auto">The newly discovered <a class="wpil_keyword_link" href="https://cyble.com/knowledge-hub/what-is-malware/" target="_blank" rel="noopener" title="malware" data-wpil-keyword-link="linked" data-wpil-monitor-id="28253">malware</a> specifically affects the CommonJS implementation of the npm package. According to the technical analysis, the malicious payload exists only in the </span><span data-contrast="auto">node-ipc.cjs</span><span data-contrast="auto"> file. The ESM wrapper, </span><span data-contrast="auto">node-ipc.js</span><span data-contrast="auto">, remained clean in the reviewed package artifacts and simply imported source files without containing the injected payload.</span>

<span data-contrast="auto">Investigators also identified an unusual forensic indicator across the infected tarballs. Every file within the reviewed archives carried the timestamp “Oct. 26, 1985.” Researchers noted that this timestamp appeared consistently across all analyzed malicious package artifacts and may help investigators identify infected caches or registry mirrors.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<h3 aria-level="2"><b><span data-contrast="none">Dormant Maintainer Account Allegedly Hijacked</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto">The investigation suggests the attack may have originated through the takeover of a dormant maintainer account. The node-ipc project reportedly has 12 npm maintainers, including an account named “atiertant,” which still retains publishing privileges despite years of inactivity.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">Independent researcher Ian Ahl, also known online as @TekDefense and CTO at Permiso, publicly identified what he described as the likely attack vector: an expired email domain linked to the maintainer account.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">According to the published timeline:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li><span data-contrast="auto">Atlantis-software[.]net was originally registered on Jan. 10, 2001. </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">The domain expired on Jan. 10, 2025, after reportedly not being renewed. </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">An attacker allegedly re-registered the domain through NameCheap on May 7, 2026. </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">The attacker may then have configured mail servers and initiated an npm password reset. </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Three malicious node-ipc versions were subsequently published on May 14, 2026, between 14:25 and 14:26 UTC. </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">Researchers believe that if the npm recovery <a href="https://thecyberexpress.com/clickup-feature-flag-misgonfiguration-leak/" target="_blank" rel="noopener">email address</a> was still associated with the expired domain, the new domain owner could have intercepted password reset emails and regained publishing access without directly compromising the maintainer’s infrastructure.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<h3 aria-level="2"><b><span data-contrast="none">Credential Stealer Activated Through CommonJS Loading</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto">The malware embedded inside the node-ipc npm package relied on runtime execution rather than installation scripts. When applications used </span><span data-contrast="auto">require("node-ipc")</span><span data-contrast="auto">, the malicious </span><span data-contrast="auto">node-ipc.cjs</span><span data-contrast="auto"> file executed an appended obfuscated IIFE during module loading.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The payload exposed an internal runner function named </span><span data-contrast="auto">__ntRun</span><span data-contrast="auto">, creating additional execution paths beyond the initial automatic activation. Analysts noted that any downstream code invoking </span><span data-contrast="auto">require("node-ipc").__ntRun()</span><span data-contrast="auto"> could trigger another round of data collection and exfiltration.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The malware used an environment variable called </span><span data-contrast="auto">__ntw</span><span data-contrast="auto"> to distinguish execution paths. In most cases, the parent process spawned a detached child process that handled credential harvesting independently. If the child process failed, the malware executed within the current process instead.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<h3 aria-level="2"><b><span data-contrast="none">Extensive Data Collection Targeted Developer Environments</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto">The malicious node-ipc code performed extensive reconnaissance using Node.js operating system APIs. The <a href="https://thecyberexpress.com/miningdropper-android-malware/" target="_blank" rel="noopener">malware</a> gathered details including:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li><span data-contrast="auto">Operating system platform </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">System architecture </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Hostname </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Kernel version </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Environment variables </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">The payload also attempted to execute </span><span data-contrast="auto">uname -a</span><span data-contrast="auto"> and stored results inside </span><span data-contrast="auto">uname.txt</span><span data-contrast="auto">. Additional harvested files included </span><span data-contrast="auto">/etc/hosts</span><span data-contrast="auto"> and </span><span data-contrast="auto">envs.txt</span><span data-contrast="auto">, which contained sorted environment variables formatted as </span><span data-contrast="auto">KEY=value</span><span data-contrast="auto">.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

Researchers warned that the environment collection process was not selective. Any secrets stored in environment variables—including cloud credentials, CI tokens, registry credentials, API keys, and database secrets—could be captured by the credential <a class="wpil_keyword_link" href="https://cyble.com/stealer/" target="_blank" rel="noopener" title="stealer" data-wpil-keyword-link="linked" data-wpil-monitor-id="28249">stealer</a>.

<span data-contrast="auto">The malware reportedly targeted a wide range of developer and infrastructure assets, including:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li><span data-contrast="auto">AWS, Azure, GCP, OCI, and DigitalOcean configuration files </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">SSH keys and SSH configurations </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Kubernetes, Docker, Helm, and Rancher credentials </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">npm, Yarn, GitHub CLI, GitLab CLI, and Netrc credentials </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Terraform credential files and </span><span data-contrast="auto">.tfvars</span><span data-contrast="auto"> data </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">.env</span><span data-contrast="auto"> files and database configuration files </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Shell history files and database CLI histories </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">macOS Keychain databases </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto"><a class="wpil_keyword_link" href="https://thecyberexpress.com/what-is-firefox/" title="Firefox" data-wpil-keyword-link="linked" data-wpil-monitor-id="28251">Firefox</a> key database files on macOS </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Linux keyrings and KWallet files </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">Microsoft Teams local storage and IndexedDB data </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">The payload skipped files larger than 4 MiB and intentionally avoided recursively scanning </span><span data-contrast="auto">node_modules</span><span data-contrast="auto"> and </span><span data-contrast="auto">.git</span><span data-contrast="auto"> directories.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span></li>
</ul>
<h3 aria-level="2"><b><span data-contrast="none">DNS TXT Queries Used for Data Exfiltration</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto">One of the more unusual aspects of the attack involved the malware’s exfiltration mechanism. Instead of using traditional HTTP or HTTPS communication, the credential stealer relied on DNS TXT queries.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The malware attempted to communicate with the bootstrap resolver:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props='{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}' data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">sh[.]azurestaticprovider[.]net:443 </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">Researchers described the domain as a deliberate lookalike of Microsoft’s legitimate Azure Static Web Apps infrastructure. At the time of analysis, the domain resolved to IP address 37.16[.]75.69.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">Exfiltrated data was transmitted under the DNS zone:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props='{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}' data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">bt[.]node[.]js </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">The malware generated TXT query prefixes using:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li><span data-contrast="auto">xh</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">xd</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">xf</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">For a compressed archive of roughly 500 KiB, analysts estimated the malware could generate approximately 29,400 DNS TXT queries during exfiltration.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The payload created compressed gzip archives from collected files, temporarily storing them in:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<ul>
 	<li aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="9" data-list-defn-props='{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}' data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">/nt-/.tar.gz</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<span data-contrast="auto">Although the malware attempted to delete the archive afterward using </span><span data-contrast="auto">unlinkSync()</span><span data-contrast="auto">, interrupted executions could leave the malicious tarballs on disk for forensic recovery.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<h3 aria-level="2"><b><span data-contrast="none">Impact and Indicators of Compromise</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto"><a href="https://thecyberexpress.com/fortinet-silent-patch-raises-concern/" target="_blank" rel="noopener">Security researchers</a> confirmed that the malicious node-ipc npm package versions were capable of stealing credentials and configuration files from systems loading the CommonJS entrypoint.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">The reviewed samples did not establish persistence mechanisms such as cron jobs, launchd services, or secondary malware downloads. The primary operational window focused on credential collection, archive creation, DNS exfiltration, and cleanup.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">Investigators identified several indicators of compromise tied to the malicious tarballs, including:</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>
<h3 aria-level="3"><b><span data-contrast="none">Malicious Packages</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":281,"335559739":281}'> </span></h3>
<ul>
 	<li aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props='{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}' data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">node-ipc@9.1.6</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<ul>
 	<li aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props='{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}' data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">node-ipc@9.2.3</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<ul>
 	<li aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props='{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}' data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">node-ipc@12.0.1</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<h3 aria-level="3"><b><span data-contrast="none">File Hashes</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":281,"335559739":281}'> </span></h3>
<ul>
 	<li><span data-contrast="auto">node-ipc.cjs SHA-256:</span>
<span data-contrast="auto">96097e0612d9575cb133021017fb1a5c68a03b60f9f3d24ebdc0e628d9034144</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">node-ipc-9.1.6.tgz SHA-256:</span>
<span data-contrast="auto">449e4265979b5fdb2d3446c021af437e815debd66de7da2fe54f1ad93cbcc75e</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">node-ipc-9.2.3.tgz SHA-256:</span>
<span data-contrast="auto">c2f4dc64aec4631540a568e88932b61daebbfb7e8281b812fa01b7215f9be9ea</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
 	<li><span data-contrast="auto">node-ipc-12.0.1.tar.gz SHA-256:</span>
<span data-contrast="auto">78a82d93b4f580835f5823b85a3d9ee1f03a15ee6f0e01b4eac86252a7002981</span><span data-contrast="auto"> </span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":0,"335559739":0}'> </span></li>
</ul>
<h3 aria-level="2"><b><span data-contrast="none">Security Recommendations</span></b><span data-ccp-props='{"134233117":false,"134233118":false,"134245418":true,"134245529":true,"335551550":0,"335551620":0,"335559738":299,"335559739":299}'> </span></h3>
<span data-contrast="auto">Researchers advised developers and organizations to immediately remove the compromised node-ipc npm package versions and reinstall verified clean releases. They also recommended auditing package-lock files, Yarn lockfiles, build caches, and local npm caches for malicious artifacts.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto">Organizations whose systems loaded the infected CommonJS versions were urged to treat local credentials and environment secrets as compromised. Recommended remediation steps included rotating SSH keys, npm tokens, cloud provider credentials, GitHub and GitLab tokens, Kubernetes credentials, Docker registry secrets, Terraform credentials, and database access keys.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>

<span data-contrast="auto"><a class="wpil_keyword_link" href="https://thecyberexpress.com/" title="Security" data-wpil-keyword-link="linked" data-wpil-monitor-id="28250">Security</a> teams were additionally encouraged to monitor DNS traffic for TXT query patterns beginning with </span><span data-contrast="auto">xh</span><span data-contrast="auto">, </span><span data-contrast="auto">xd</span><span data-contrast="auto">, or </span><span data-contrast="auto">xf</span><span data-contrast="auto"> under the </span><span data-contrast="auto">bt[.]node[.]js</span><span data-contrast="auto"> domain, as well as unusual bursts of high-volume DNS TXT traffic that could indicate active exfiltration attempts involving the malicious tarballs.</span><span data-ccp-props='{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}'> </span>]]></content:encoded>
</item>
<item>
<title><![CDATA[Shrinking Season 4 Starts Filming Next Week, Harrison Ford Confirms]]></title>
<description><![CDATA[Shrinking only wrapped its third season last month, but Apple TV already appears to be moving fast on the next chapter. Harrison Ford has now shared that Shrinking season 4 starts filming next week, which gives the show a strong chance of returning sooner than many streaming viewers expect.



Va...]]></description>
<link>https://tsecurity.de/de/3518282/ios-mac-os/shrinking-season-4-starts-filming-next-week-harrison-ford-confirms/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3518282/ios-mac-os/shrinking-season-4-starts-filming-next-week-harrison-ford-confirms/</guid>
<pubDate>Fri, 15 May 2026 04:23:00 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Shrinking only wrapped its third season last month, but Apple TV already appears to be moving fast on the next chapter. Harrison Ford has now shared that Shrinking season 4 starts filming next week, which gives the show a strong chance of returning sooner than many streaming viewers expect.



Variety reported that Ford confirmed the update during a discussion of his new Glenmorangie Harrison Ford Limited Edition whisky. The actor said the cast has 12 episodes to shoot, which also makes the new season longer than many current streaming comedy-drama runs.



Shrinking Season 4 Is Already Moving Quickly



The timing matters because Shrinking does not need the long post-production cycle that slows down shows built around heavy visual effects. Since season 3 ended in early April, a production start this soon suggests an early 2027 premiere window, assuming filming and editing stay on track.



That would be good news for Apple TV viewers who have grown used to long waits between seasons. Streaming has changed the rhythm of television, with shorter seasons and wider gaps replacing the predictable yearly broadcast schedule.



A New Story Is Coming



Variety also reported that Shrinking season 4 will include a time jump and follow different storylines, while the main cast, including Ford, Jason Segel, Jessica Williams, and Michael Urie, will return.



Series creator Bill Lawrence said the team wanted to explore a new story for these characters, and the writers are already deep into season 4. For viewers, that suggests Shrinking will keep its familiar cast while giving the show a fresh direction instead of stretching the same emotional arc for too long.]]></content:encoded>
</item>
<item>
<title><![CDATA[Cerebras stock nearly doubles on day one as AI chipmaker hits $100 billion — what it means for AI infrastructure]]></title>
<description><![CDATA[Cerebras Systems, the Silicon Valley chipmaker that built the world's largest commercial AI processor, erupted onto the Nasdaq on Wednesday, opening at $350 per share — nearly double its $185 IPO price — and rocketing past a $100 billion market capitalization in its first hours of trading. The de...]]></description>
<link>https://tsecurity.de/de/3518001/it-nachrichten/cerebras-stock-nearly-doubles-on-day-one-as-ai-chipmaker-hits-100-billion-what-it-means-for-ai-infrastructure/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3518001/it-nachrichten/cerebras-stock-nearly-doubles-on-day-one-as-ai-chipmaker-hits-100-billion-what-it-means-for-ai-infrastructure/</guid>
<pubDate>Fri, 15 May 2026 00:16:09 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><a href="https://www.cerebras.ai/">Cerebras Systems</a>, the Silicon Valley chipmaker that built the world's largest commercial AI processor, erupted onto the Nasdaq on Wednesday, opening at <a href="https://finance.yahoo.com/markets/article/cerebras-stock-opens-at-350-per-share-in-biggest-ipo-of-2026-130757709.html">$350 per share</a> — nearly double its $185 IPO price — and rocketing past a <a href="https://finance.yahoo.com/markets/stocks/articles/cerebras-shares-jump-89-nasdaq-174122394.html">$100 billion market capitalization</a> in its first hours of trading. The debut instantly crowned Cerebras as one of the most valuable semiconductor companies on Earth and validated a decade-long bet that the AI industry would eventually demand a fundamentally different kind of chip.</p><p>The company sold 30 million shares at $185 apiece, raising $5.55 billion in what Bloomberg reported as <a href="https://www.bloomberg.com/news/articles/2026-05-13/ai-chipmaker-cerebras-said-poised-to-price-ipo-at-185-per-share">the largest U.S. tech IPO since Uber went public in 2019</a>. The final pricing shattered expectations: Cerebras initially marketed shares at $115 to $125, then raised the range to $150 to $160 as investor demand surged, before ultimately pricing above even that elevated band.</p><p>"This is just a new beginning," Julie Choi, Senior Vice President and Chief Marketing Officer at Cerebras, told VentureBeat in an exclusive interview on the morning of the IPO. The company, she said, plans to pour its fresh capital into expanding the cloud infrastructure that has become the centerpiece of its growth strategy. "With this new capital, we're going to fill more data halls with Cerebras systems to power the world's fastest inference."</p><p>The IPO caps one of the most dramatic corporate turnarounds in recent tech history. Cerebras first <a href="https://www.reuters.com/technology/cerebras-likely-postpone-ipo-due-cfius-review-delay-g42-deal-sources-say-2024-10-08/">filed to go public in September 2024 but withdrew</a> the effort more than a year later amid intense scrutiny over its near-total revenue dependence on a single customer in the United Arab Emirates. The company refiled in April 2026 with a radically different business profile: new partnerships with <a href="https://openai.com/index/cerebras-partnership/">OpenAI</a> and <a href="https://www.cerebras.ai/press-release/awscollaboration">Amazon Web Services</a>, a fast-growing <a href="https://www.cerebras.ai/inference">cloud inference service</a>, and a revenue base that had <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">climbed 76% to $510 million in 2025</a>.</p><h2><b>How a dinner-plate-sized chip became the foundation of a $100 billion company</b></h2><p>To understand the frenzy, you have to understand the silicon.</p><p>Cerebras builds something called the <a href="https://cdn.sanity.io/files/e4qjo92p/production/2d7fa58e3b820715664bcf42097e86c05070c161.pdf">Wafer-Scale Engine</a>, or WSE — a single processor that occupies an entire silicon wafer, the dinner-plate-sized disc from which ordinary chips are cut. The third-generation <a href="https://www.cerebras.ai/chip">WSE-3</a> contains 4 trillion transistors, 900,000 compute cores, and 44 gigabytes of on-chip memory. It is 58 times larger than <a href="https://www.nvidia.com/en-us/data-center/technologies/blackwell-architecture/">Nvidia's B200 "Blackwell" chip</a> and delivers 2,625 times more memory bandwidth than the B200 package, according to the company's <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">S-1 filing</a> with the Securities and Exchange Commission.</p><p>That bandwidth advantage matters enormously for <a href="https://www.ibm.com/think/topics/ai-inference">AI inference</a> — the process of running a trained model to generate answers. When a large language model produces text, it predicts one token at a time, and each token requires the model's entire set of weights to move from memory to compute. This work is inherently sequential and cannot be parallelized, making memory bandwidth the binding constraint on speed. Cerebras claims its architecture delivers inference responses up to 15 times faster than leading GPU-based solutions on open-source models, a figure corroborated by third-party benchmarker <a href="https://artificialanalysis.ai/providers/cerebras">Artificial Analysis</a>.</p><p>"One of the architectural principles when we built the wafer was: let's keep compute closer together, so that compute elements can talk to each other at lower latency," Andy Hock, VP of Product at Cerebras, told VentureBeat. "Low latency is important to AI compute. It's a cornerstone of fast inference."</p><p>The founding insight was contrarian and, for most of the company's life, commercially premature. Cerebras's founders recognized in 2015 that AI workloads were communication-bound problems — speed depended on how fast data could move between memory and compute — and that the best way to accelerate that movement was to keep everything on a single massive chip. </p><p>Wafer-scale integration had been attempted and abandoned repeatedly over the semiconductor industry's 75-year history. Every previous effort had failed. Cerebras solved the problem through <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">two key innovations detailed in its S-1</a>: a proprietary <a href="https://semiengineering.com/synopsys-and-cerebras-systems/">multi-die interconnect</a> that stitches otherwise independent die together at the wafer level during fabrication, and a <a href="https://www.cerebras.ai/blog/100x-defect-tolerance-how-cerebras-solved-the-yield-problem">fault-tolerant architecture</a> that routes around manufacturing defects using redundant building blocks, similar to how hyperscale data centers handle server failures.</p><h2><b>Why Cerebras is betting its future on cloud inference instead of hardware sales</b></h2><p>For most of its life, Cerebras sold hardware — massive, water-cooled AI supercomputers installed on-premises at customer facilities. That model generated $358 million in hardware revenue in 2025. But the IPO prospectus reveals a strategic pivot that will define the company's next chapter: <a href="https://www.cerebras.ai/press-release/cerebras-systems-announces-filing-of-registration-statement-for-proposed-initial-ipo">the transition to cloud-based inference services</a>.</p><p>Cerebras launched its inference cloud in August 2024. In less than two years, cloud and other services <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">revenue reached $151.6 million in 2025</a>, up 94% from $78.3 million in 2024. The company now expects this segment to comprise a significantly larger percentage of total revenue going forward, driven primarily by its enormous deal with OpenAI.</p><p>"Cloud and model APIs are the preferred and natural consumption method for inference services and application developers," Hock told VentureBeat. "So that was the natural packaging and go-to-market strategy for the inference capability."</p><p>Choi framed the cloud as a democratization play. "Whether that be an entrepreneurial developer, a startup, or a massive organization like OpenAI — the cloud has really made it easy for people to deploy and feel the fast inference, the value of it," she said.</p><p>The economics of the transition are capital-intensive. Cerebras must lease data center space, manufacture and deploy its systems, and build software to manage capacity — all before recognizing recurring revenue. The <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">S-1 warns bluntly</a> that gross margins will decline in the near term as the company absorbs startup costs for cloud infrastructure. The company's gross margin already dipped to 39% in 2025 from 42.3% in 2024, driven by higher data center costs. But the demand picture appears formidable. "Every cloud system that we've deployed so far, each one gets gobbled up in capacity," Hock said. "We've been thrilled to see the demand for fast inference from Cerebras. We want to go faster to service that market."</p><h2><b>Inside the $20 billion OpenAI deal that transformed Cerebras overnight</b></h2><p>The single most consequential business relationship for Cerebras is its December 2025 agreement with OpenAI, under which <a href="https://www.cerebras.ai/blog/openai-partners-with-cerebras-to-bring-high-speed-inference-to-the-mainstream">OpenAI committed to purchase 750 megawatts</a> of Cerebras inference compute capacity over the next several years. The deal is valued at more than $20 billion and includes provisions for OpenAI to purchase an additional 1.25 gigawatts of capacity, potentially bringing total deployment to 2 gigawatts.</p><p>The arrangement goes far beyond a standard vendor-customer relationship. <a href="https://openai.com/index/cerebras-partnership/">OpenAI and Cerebras are co-designing future models</a> for future Cerebras hardware — a tight feedback loop that gives Cerebras visibility into frontier model architectures before they ship and gives OpenAI inference systems optimized for its specific workloads. The partnership moved from contract to production with remarkable speed. "After we announced the partnership, we had the first model running in like 35 days," Choi told VentureBeat. "That was Codex Spark, and the engineers over at OpenAI just were like, mind blown."</p><p><a href="https://venturebeat.com/technology/openai-deploys-cerebras-chips-for-15x-faster-code-generation-in-first-major">Codex Spark</a>, OpenAI's model designed for real-time coding, allows developers to turn natural-language instructions into working software in seconds using Cerebras infrastructure. Choi described a deep cultural alignment between the two companies. "Our teams truly vibe as engineers. We're on the same wavelength," she said. "There's just no amount of speed that is enough for those guys."</p><p>To fund the infrastructure buildout, OpenAI advanced Cerebras a <a href="https://techcrunch.com/2026/05/04/openais-cozy-partner-cerebras-is-on-track-for-a-blockbuster-ipo/">$1 billion working capital loan</a> in January 2026, secured by a promissory note maturing no later than December 31, 2032, <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">bearing 6% annual interest</a>. The loan can be repaid in cash or through delivery of compute capacity. However, the S-1 discloses significant risk: if the MRA is terminated for any reason other than OpenAI's material uncured breach, OpenAI can seize control of the loan funds and demand immediate repayment. OpenAI also holds a <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">warrant to purchase up to 33.4 million shares</a> of Cerebras Class N common stock at an exercise price of $0.00001 per share — essentially free shares that vest as Cerebras delivers committed capacity. At the IPO opening price, the fully vested warrant would be worth approximately $11.7 billion.</p><h2><b>How the Amazon Web Services partnership could bring Cerebras chips to millions of developers</b></h2><p>In March 2026, Cerebras signed a <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">binding term sheet</a> with Amazon Web Services to become the <a href="https://www.reuters.com/business/retail-consumer/cerebras-systems-amazon-strike-deal-offer-cerebras-ai-chips-amazons-cloud-2026-03-13/">first hyperscaler to deploy Cerebras systems</a> inside its own data centers. The partnership introduces a novel architectural concept called disaggregated inference, which splits the two stages of AI inference — prefill (processing the user's prompt) and decode (generating the response) — across different hardware optimized for each task. Under this arrangement, AWS Trainium chips handle <a href="https://www.cerebras.ai/press-release/awscollaboration">prefill</a>, while Cerebras CS-3 systems handle <a href="https://www.cerebras.ai/press-release/awscollaboration">decode</a>, connected via Amazon's Elastic Fabric Adapter networking.</p><p>According to the <a href="https://press.aboutamazon.com/aws/2026/3/aws-and-cerebras-collaboration-aims-to-set-a-new-standard-for-ai-inference-speed-and-performance-in-the-cloud">AWS press announcement</a> in March, the approach aims to deliver an order of magnitude faster inference than what is currently available. Hock provided technical detail on why this works. "The interconnect requirements between prefill and decode systems actually aren't that high, so we can use a traditional interconnect between, say, Trainium and the wafer-scale engine and still deliver that fast time to first token and that ultra-low latency token generation," he explained. "What the Trainium wafer-scale engine combination really gives us in that disaggregated or heterogeneous inference setup is all the speed and vastly more efficiency, so we can effectively serve more tokens per unit rack space or kilowatt."</p><p>The partnership provides Cerebras something it has long lacked: massive distribution. AWS serves millions of enterprise customers worldwide, and Cerebras systems deployed through Amazon Bedrock will become accessible to any developer within their existing AWS environment. "AWS has incredible reach," Hock said. "The partnership is really about bringing that fast inference capability — that sort of best-in-industry, fast inference capability delivered by wafer-scale engine and Trainium — to that broader market." The term sheet also grants AWS a <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">warrant to purchase up to approximately 2.7 million shares</a> of Cerebras Class N common stock at a $100 exercise price, with vesting tied to product purchases beyond the initial lease.</p><h2><b>The UAE customer concentration problem that nearly derailed the IPO — and whether it's really solved</b></h2><p>For all the excitement, Cerebras carries a risk that has haunted it since its first IPO attempt: customer concentration. In 2024, G42 — an Abu Dhabi–based technology conglomerate — <a href="https://thenextweb.com/news/cerebras-ipo-5-55-billion-biggest-tech-2026">accounted for 85% of Cerebras's total revenue</a>. The company's September 2024 S-1 filing <a href="https://finance.yahoo.com/markets/stocks/articles/cerebras-files-again-profit-time-122710503.html">drew heavy scrutiny</a> over this dependence, compounded by questions about export controls for advanced AI chips shipped to the UAE. <a href="https://www.linkedin.com/posts/andrewdfeldman_on-friday-cerebras-systems-withdrew-our-activity-7380783283682463745-Rjyw/">Cerebras withdrew that filing</a>.</p><p>The 2025 numbers show progress but not resolution. G42's share of revenue <a href="https://gabgrowth.com/p/cerebras-ipo-s-1-deep-dive">declined to 24%</a>, but Mohamed bin Zayed University of Artificial Intelligence (<a href="https://mbzuai.ac.ae/">MBZUAI</a>), an Abu Dhabi institution that is a related party to G42, <a href="https://www.techi.com/cerebras-ipo/">accounted for 62% of total revenue</a>. </p><p>Together, the two UAE-linked entities still represented 86% of Cerebras's 2025 sales. <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">The S-1 is candid about this risk</a>, noting that MBZUAI accounted for 77.9% of accounts receivable as of December 31, 2025, and that U.S. export licenses for Cerebras systems shipped to G42 and MBZUAI require "rigorous security and compliance obligations to prevent diversion and abuse of our technology."</p><p>Choi addressed the issue directly, pointing to the OpenAI and AWS deals as evidence of a broadening customer base. "Now with OpenAI and Amazon, those are the same type of deep partnerships," she told VentureBeat. "We're a deep technology company. Our technology has taken a decade to build. We go deep in how we build, and now we're going deep with two of the biggest players — the biggest AI lab, OpenAI, and the biggest cloud, AWS."</p><p>Hock framed the customer evolution as a progression in market perception. "G42 caused the market to be intrigued and inspired," he said. "Nobody in the business is smarter, more credible, or has greater reach than OpenAI and AWS. And so I think OpenAI and AWS caused the market to shift from intrigued and inspired to — I'll call it curious and convinced." Still, the S-1 warns that the OpenAI MRA itself "represents a substantial portion of our projected revenues over the next several years." Cerebras's business will remain dependent on a small number of very large customers for the foreseeable future — a structural feature of the AI infrastructure market where buildouts are measured in hundreds of megawatts and billions of dollars.</p><h2><b>Can Cerebras build data centers fast enough to keep up with runaway demand?</b></h2><p>With OpenAI <a href="https://www.cerebras.ai/blog/openai-partners-with-cerebras-to-bring-high-speed-inference-to-the-mainstream">consuming 750 megawatts</a> of committed capacity and <a href="https://www.cerebras.ai/blog/cerebras-is-coming-to-aws">AWS preparing to deploy Cerebras systems</a> in its data centers, the question is whether Cerebras can scale its physical infrastructure quickly enough to serve everyone else. Hock acknowledged the tension. "It's a good problem to have when demand starts to outstrip supply. It doesn't mean it's an easy problem to address," he told VentureBeat. "We've got to build these extraordinary systems. We've got to procure data center space. We've got to deploy systems there. Got to stand up software to meet our customers where they are."</p><p>The company is being deliberate about capacity allocation. "We're trying to be really deliberate about how we allocate capacity as it's built," Hock said. "We're working in deep partnership to service the highest-priority customers and highest-priority markets." </p><p>Choi argued that the constraint actually sharpens focus. "Sometimes when you have less of something, it forces you to be very deliberate," she said. Beyond OpenAI, she named <a href="https://cognition.ai/">Cognition</a> — the AI coding startup — and <a href="https://block.xyz/">Block</a>, led by Jack Dorsey, as significant customers. "Jack participated in our roadshow as well," Choi noted. "We're speeding up that entire money-bot AI experience within Cash App."</p><p>The <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">S-1</a> discloses that Cerebras currently operates <a href="https://www.cerebras.ai/press-release/cerebras-announces-six-new-ai-datacenters-across-north-america-and-europe-to-deliver-industry-s">data centers in California, Oklahoma, and Canada</a>, with plans to expand internationally. The company executed non-cancelable data center leases in late 2025 with aggregate undiscounted future minimum payments of <a href="https://www.cnbc.com/2026/04/17/cerebras-new-ipo-ai-chips.html">approximately $344 million</a>, and in March 2026 signed a Canadian data center lease with expected minimum payments of approximately $2.2 billion over a 10-year term.</p><p>The IPO proceeds — combined with $1 billion from a January 2026 Series H preferred stock round and the $1 billion OpenAI loan — give Cerebras a war chest exceeding $8 billion to fund the buildout. Whether that is enough to satisfy a market where major customers are ordering capacity measured in gigawatts remains an open question.</p><h2><b>The Nvidia shadow: what Cerebras is really up against in the AI chip wars</b></h2><p>Cerebras enters public markets into the teeth of the <a href="https://finance.yahoo.com/sectors/technology/articles/cerebras-challenges-nvidia-chip-dominance-040100169.html">most competitive</a> semiconductor environment in decades. Nvidia remains the <a href="https://siliconanalysts.com/analysis/nvidia-ai-accelerator-market-share-2024-2026">dominant force</a> in AI compute, controlling the vast majority of the training and inference infrastructure market. Its GPU architecture benefits from a deeply entrenched software ecosystem built around CUDA, the programming framework that has become the de facto standard for AI development. <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">Cerebras's S-1 explicitly acknowledges this</a>, noting that "many of our competitors benefit from competitive advantages over us, such as prominent and cutting-edge technology and software stacks designed to keep out new market entrants."</p><p>But Cerebras argues the <a href="https://www.cerebras.ai/blog/ecosystem">inference market is structurally different from training</a> — and that its architecture has a fundamental advantage in the workload that matters most going forward. As AI models have shifted toward reasoning, where models perform multi-step computation during inference to think through problems, <a href="https://hc2024.hotchips.org/assets/program/conference/day2/72_HC2024.Cerebras.Sean.v03.final.pdf">the number of tokens generated per request has exploded</a>. Each token requires moving full model weights from memory to compute, making memory bandwidth the bottleneck. The S-1 cites Bloomberg Intelligence data projecting that Cerebras's addressable portion of the AI inference market will grow from approximately $66 billion in 2025 to <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">$292 billion by 2029</a>, a 45% compound annual growth rate — significantly outpacing the 20% CAGR projected for AI training infrastructure.</p><p>Nvidia has clearly taken notice of the fast-inference threat. In December 2025, <a href="https://www.cnbc.com/2025/12/24/nvidia-buying-ai-chip-startup-groq-for-about-20-billion-biggest-deal.html">Nvidia acquired Groq</a> — a startup whose tensor streaming processor architecture more closely resembles Cerebras's approach — for $20 billion. </p><p>Months later, <a href="https://finance.yahoo.com/news/nvidia-launches-groq-3-ai-chip-and-cpu-server-aimed-at-intel-during-gtc-2026-200529139.html">Nvidia announced plans for Groq-based products</a>, signaling that even the industry's dominant player recognizes the limitations of GPU architecture for latency-sensitive inference. Cerebras also competes with custom silicon developed by hyperscalers — including Google's TPUs and Amazon's Trainium chips — and a growing roster of AI cloud providers. Asked about Nvidia and Groq, Choi declined to engage. "We're feeling pretty good right now," she told VentureBeat with a smile.</p><h2><b>Revenue is surging, but the financial fine print reveals a more complicated picture</b></h2><p>The financial picture that emerges from the S-1 is one of rapid scaling with significant underlying complexity. Revenue surged from <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">$78.7 million</a> in 2023 to <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">$290.3 million</a> in 2024 to <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">$510 million</a> in 2025 — a more than tenfold increase over three years. The company reported GAAP net income of $237.8 million in 2025, but this figure is heavily influenced by a $363.3 million one-time gain from the extinguishment of a forward contract liability related to a preferred stock arrangement. Stripping out that gain and stock-based compensation, Cerebras's non-GAAP net loss was $75.7 million in 2025, widening from a $21.8 million non-GAAP loss in 2024.</p><p>Operating losses deepened as well. Cerebras <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">lost $145.9 million</a> from operations in 2025, up from $101.4 million the prior year, as the company invested heavily in research and development ($243.3 million, up 54%) and sales and marketing ($70.6 million, up 237%).</p><p>The company burned $10 million in operating cash flow in 2025, a sharp reversal from the $452 million of cash generated in 2024 — a year boosted by $640 million in customer deposit inflows, primarily from <a href="https://www.g42.ai/">G42</a> and <a href="https://mbzuai.ac.ae/">MBZUAI</a>. The S-1 warns that gross margins will face near-term pressure from startup costs for cloud infrastructure, customer warrant amortization, and pass-through data center expenses.</p><p>The path to this moment was anything but smooth. Cerebras shipped its first systems in 2020 and 2021 — before the market was ready. As the founders wrote in the prospectus: the company "had built something extraordinary, but the market wasn't ready." The ChatGPT moment in late 2022 changed everything.</p><p>By early 2025, Cerebras's speed advantage — long a solution in search of a problem — became urgently relevant as AI coding agents, deep research tools, and real-time voice applications demanded the kind of low-latency inference that GPU clusters struggled to deliver. The S-1 describes a market where AI coding agents "barely existed in 2023" but collectively generated "billions in ARR in 2025," and where 42% of professional code is now AI-generated or assisted.</p><h2><b>What Cerebras must prove to justify a $100 billion valuation — and what happens if it can't</b></h2><p>Looking forward, Hock signaled that the current generation of hardware is just the beginning. "Wafer-scale engine three and CS-3 is not the end of the story. It's just the beginning," he told VentureBeat. "We have a multi-year technology roadmap that continues building on wafer-scale technology, accelerating performance, increasing efficiency, supporting larger scale." </p><p>The S-1 confirms that <a href="https://www.sec.gov/Archives/edgar/data/2021728/000162828026025762/cerebras-sx1april2026.htm">Cerebras intends to expand on-chip memory and bandwidth</a>, improve interconnect density, and leverage future process node advances — and discloses that the company has already obtained export licenses for future CS-4 systems destined for the UAE.</p><p>The company also faces a web of operational risks that would test any organization, let alone one that has never operated as a public company. It depends entirely on TSMC for wafer fabrication, with no long-term supply commitment. Its data center leases stretch for years, while its inference customer contracts are often shorter-term or consumption-based, creating a mismatch between fixed costs and variable revenue. It has identified <a href="https://www.nytimes.com/2026/04/17/technology/cerebras-public-offering-ai.html">material weaknesses</a> in its internal controls over financial reporting. And its most important customer relationship — with OpenAI — includes exclusivity provisions that restrict Cerebras from working with certain named OpenAI competitors, potentially limiting future diversification.</p><p>Whether Cerebras can sustain a <a href="https://www.morningstar.com/news/marketwatch/20260513547/cerebrass-massive-ipo-will-be-a-fresh-test-of-investor-excitement-for-ai-infrastructure">$100 billion-plus valuation</a> will depend on its ability to execute against all of these challenges simultaneously: building data centers at unprecedented speed, manufacturing wafer-scale chips at scale through a single foundry, navigating export controls on its most lucrative international relationships, and competing against an Nvidia that has shown it will not cede the inference market without a fight.</p><p>But Cerebras has always been built on a willingness to attempt what others said was impossible. Wafer-scale integration had stumped the semiconductor industry for its entire existence. Now a chip the size of a dinner plate — once dismissed as an engineering curiosity — powers the fastest AI inference on the planet, serves the world's leading AI lab, and just debuted on the Nasdaq to a valuation that dwarfs companies many times its age. The world, it turns out, was ready. As Hock put it to VentureBeat, recalling the journey from the lab to the trading floor: "The IPO isn't the end of the story. It's the beginning."</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Siemens SIMATIC]]></title>
<description><![CDATA[View CSAF
Summary
SIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthenticated attacker to access the web browser via the help link. This vulnerability allows an attacker to access the web browser through the Control Panel if it is not protected b...]]></description>
<link>https://tsecurity.de/de/3517153/it-security-nachrichten/siemens-simatic/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3517153/it-security-nachrichten/siemens-simatic/</guid>
<pubDate>Thu, 14 May 2026 17:08:10 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-07.json"><strong>View CSAF</strong></a></p>
<h2>Summary</h2>
<p><strong>SIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthenticated attacker to access the web browser via the help link. This vulnerability allows an attacker to access the web browser through the Control Panel if it is not protected by the corresponding security mechanisms. This opens the possibility for the attacker to find backdoors, which might lead to unwanted misconfigurations. Siemens has released new versions for the affected products and recommends to update to the latest versions.</strong></p>
<p>The following versions of Siemens SIMATIC are affected:</p>
<ul>
<li>SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3XB57-0BX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
<li>SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1) vers:intdot/&lt;21 (CVE-2026-27662)</li>
</ul>
<div class="csaf-table">
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
<th role="columnheader">Vendor</th>
<th role="columnheader">Equipment</th>
<th role="columnheader">Vulnerabilities</th>
</tr>
</thead>
<tbody>
<tr>
<td>v3 7.7</td>
<td>Siemens</td>
<td>Siemens SIMATIC</td>
<td>Initialization of a Resource with an Insecure Default</td>
</tr>
</tbody>
</table>
</div>
<h3>Background</h3>
<ul>
<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
<li><strong>Company Headquarters Location: </strong>Germany</li>
</ul>
<hr>
<h2>Vulnerabilities</h2>
<div class="csaf-accordion">
<p><a class="csaf-accordion-toggle-all" href="https://www.cisa.gov/#">Expand All +</a></p>
<div class="csaf-accordion-item">
<h3><a class="csaf-accordion-toggle" href="https://www.cisa.gov/#">CVE-2026-27662</a></h3>
<div class="csaf-accordion-content">
<p>Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.</p>
<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-27662">View CVE Details</a></p>
<hr>
<h4>Affected Products</h4>
<h5>Siemens SIMATIC</h5>
<div class="ics-vendor-version-status">
<div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
<div class="ics-version"><strong>Product Version:</strong><br>SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1), SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0), SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0), SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1), SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0), SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0), SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0), SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0), SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0), SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0), SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1), SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0), SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0), SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1), SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0), SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0), SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0), SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0), SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0), SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0), SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1), SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0), SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0), SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1), SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0), SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0), SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0), SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0), SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0), SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0), SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1), SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0), SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0), SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1), SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0), SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0), SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0), SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0), SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3XB57-0BX0), SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0), SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0), SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0), SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1), SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1), SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1), SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0), SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0), SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1), SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1), SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1), SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)</div>
<div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
</div>
<div class="ics-remediations">
<h6>Remediations</h6>
<p><strong>Mitigation</strong><br>Compliance with the security guidelines is strongly recommended (specially chapter “3.2 Ending HMI runtime”, “3.4.1 Enable access protection for the Control Panel” and “3.4.2 Changing runtime autostart) https://support.industry.siemens.com/cs/ww/en/view/109481300</p>
<p><strong>Mitigation</strong><br>Disable the taskbar which can be configured in the Control Panel &gt; System Properties &gt; Taskbar.</p>
<p><strong>Vendor fix</strong><br>Update to V21 or later version<br><a href="https://support.industry.siemens.com/cs/ww/en/view/109825605/">https://support.industry.siemens.com/cs/ww/en/view/109825605/</a></p>
</div>
<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/1188.html">CWE-1188 Initialization of a Resource with an Insecure Default</a></p>
<hr>
<h4>Metrics</h4>
<div class="csaf-table csaf-metrics-table">
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
<th role="columnheader">Base Score</th>
<th role="columnheader">Base Severity</th>
<th role="columnheader">Vector String</th>
</tr>
</thead>
<tbody>
<tr>
<td>3.1</td>
<td>7.7</td>
<td>HIGH</td>
<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H</a></td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
<hr>
<h2>Acknowledgments</h2>
<ul>
<li>Siemens ProductCERT reported this vulnerability to CISA.</li>
</ul>
<hr>
<h2>General Recommendations</h2>
<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
<hr>
<h2>Additional Resources</h2>
<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
<hr>
<h2>Terms of Use</h2>
<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
<hr>
<h2>Legal Notice and Terms of Use</h2>
<p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
<hr>
<h2>Recommended Practices</h2>
<p>CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.</p>
<p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
<p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
<p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
<p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
<p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
<hr>
<h2>Advisory Conversion Disclaimer</h2>
<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-387223 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
<h2>Revision History</h2>
<ul>
<li><strong>Initial Release Date: </strong>2026-05-12</li>
</ul>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">Date</th>
<th role="columnheader">Revision</th>
<th role="columnheader">Summary</th>
</tr>
</thead>
<tbody>
<tr>
<td>2026-05-12</td>
<td>1</td>
<td>Publication Date</td>
</tr>
<tr>
<td>2026-05-14</td>
<td>2</td>
<td>Initial CISA Republication of Siemens ProductCERT SSA-387223 advisory</td>
</tr>
</tbody>
</table>
<hr>
<h2>Legal Notice and Terms of Use</h2>]]></content:encoded>
</item>
<item>
<title><![CDATA[The Talos Principle 3 revealed to be "coming soon"]]></title>
<description><![CDATA[Croteam and Devolver Digital have revealed The Talos Principle 3, the final chapter of the thought-provoking first-person puzzle series.Read the full article on GamingOnLinux.]]></description>
<link>https://tsecurity.de/de/3516445/linux-tipps/the-talos-principle-3-revealed-to-be-coming-soon/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3516445/linux-tipps/the-talos-principle-3-revealed-to-be-coming-soon/</guid>
<pubDate>Thu, 14 May 2026 12:53:40 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Croteam and Devolver Digital have revealed The Talos Principle 3, the final chapter of the thought-provoking first-person puzzle series.<p><img src="https://www.gamingonlinux.com/uploads/articles/tagline_images/975531232id29015gol.jpg" alt></p><p>Read the full article on <a href="https://www.gamingonlinux.com/2026/05/the-talos-principle-3-revealed-to-be-coming-soon/">GamingOnLinux</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[What CISOs need to land a board role]]></title>
<description><![CDATA[Cybersecurity leaders often have complex relationships with their boards. Many boards lack cyber expertise, and CISOs can encounter roadblocks as a result when it comes to earning board approval. Other security leaders may not have a direct line to their board, or they may be viewed as too techni...]]></description>
<link>https://tsecurity.de/de/3516156/it-security-nachrichten/what-cisos-need-to-land-a-board-role/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3516156/it-security-nachrichten/what-cisos-need-to-land-a-board-role/</guid>
<pubDate>Thu, 14 May 2026 11:07:46 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>



<p>Cybersecurity leaders often have complex relationships with their boards. Many boards lack cyber expertise, and CISOs can encounter roadblocks as a result when it comes to earning board approval. Other security leaders may not have a direct line to their board, or they may be viewed as too technical to win the support needed.</p>



<p>One way some CISOs are working to improve that relationship is by becoming board members themselves to better understand what is important and how to communicate to board members. Others may seek board positions to elevate their profile, help shape the tools of the future, or contribute to expanding the community’s knowledge.</p>



<p>The latter is the case for <a href="https://www.csoonline.com/article/4098274/jamie-nortons-early-interest-in-computers-took-him-on-a-journey-securing-key-australian-government-organizations.html">Jamie Norton</a>, vice chair of the ISACA board. “As a long-term member, I had reached a stage in my career where I had more flexibility in managing my time and wanted to contribute back to the industry. To be able to accomplish this on a global scale with ISACA was a perfect fit,” Norton tells CSO.</p>



<p>For <a href="https://www.linkedin.com/in/mitraminai/">Mitra Minai</a>, global cyber health leader at Accenture, it was about being a part of the solution rather than engaging with a board only during high-pressure moments.</p>



<p>“I saw firsthand how board comprehension of cyber and digital risk directly influences organizational outcomes, particularly in healthcare where cyber incidents can affect patient safety and continuity of care,” says Minai, who is a board member with the Austrialian Information Security Association (AISA), industry advisory member with the Australian Cyber Security Centre, and digital governance committee member at Uniting AgeWell.</p>



<p>“Becoming involved at a governance level allows me to contribute earlier and more strategically, helping boards shape risk appetite, investment priorities, and resilience before crises occur,” she adds. “It also provides an opportunity to help boards navigate the growing intersection between technology, trust, regulation, and organizational purpose.”</p>



<p>As in health, cyber incidents can have a catastrophic impact in other critical infrastructure services. For CISOs looking to make a difference, vendor advisory boards are another option.</p>



<p><a href="https://www.linkedin.com/in/nathan-morelli-28a0817/">Nathan Morelli</a>, head of cybersecurity and IT resilience at SA Power Networks, says his motivation to join vendor advisory boards was a conscious move to influence the global product roadmaps that protect essential services.</p>



<p>“In critical infrastructure, the impact [of cyber incidents] is significant, and I wanted to ensure that the tools we use are actually fit for purpose. By joining these boards I gain a seat at the table where I can shape the technology of tomorrow, rather than just reacting to it. It’s about moving beyond the perimeter of one organization to influence the resilience of the entire sector,” says Morelli, who is a member of advisory boards with Cyera, CrowdStrike, Proofpoint, and SailPoint.</p>



<h2 class="wp-block-heading"><a></a>Getting a board role isn’t a straightforward path</h2>



<p>CISOs must be aware, however, that board roles can be difficult to land. Despite being involved in the Canberra Chapter of ISACA for many years, Norton went through several attempts before earning his board role. He applied once and was unsuccessful; the following year he tried again to no avail. It can be hard to not take such rejections personally, he says, adding that he received great feedback and was encouraged to apply again.</p>



<p>“There was a lot of reflection on the process, and whether the result was challenges with expertise, experience, or simply the skills the board needed that was driving the outcome,” he says. “The required skills did come around to match my expertise soon after and I was successful. It has been a great journey since.”</p>



<p>It is also a significant commitment, Norton adds, “with many hours per week spent on board-related work and meetings, many of which run early morning between 12am to 2am Australian time.”</p>



<p>Advisory and committee positions don’t require any specific certifications, but governance capability and credibility are essential to be effective at board level, says Minai, who plans to complete formal Australian Institute of Company Directors (AICD) governance education within the next 12 to 18 months as part of an intentional progression toward broader non‑executive director roles.</p>



<h2 class="wp-block-heading"><a></a>Tips for CISOs aiming for a board role</h2>



<p>For CISOs interested in contributing to global vendor boards, Morelli advises focusing on becoming a partner, not just a customer. This requires the ability to articulate how a product’s evolution impacts the risk profile of an entire sector.</p>



<p>For non-industry or public boards, CISOs must be comfortable contributing to discussions on P&amp;L statements, <a href="https://www.cio.com/article/409892/what-is-esg-environmental-social-and-governance-commitment-explained.html">ESG reports</a>, or Modern Slavery statements. You are there to provide oversight for the entire organization’s strategy and sustainability.</p>



<p>Here are other top tips from Minai, Morelli, and Norton:</p>



<ul class="wp-block-list">
<li><strong>Start with governance, not titles.</strong> Committees, not‑for‑profit boards, and industry associations provide real governance experience.</li>



<li><strong>Separate governance from execution/management.</strong> Board effectiveness requires oversight and judgment, not operational problem‑solving.</li>



<li><strong>Learn the language of boards.</strong> Boards focus on risk appetite, trade‑offs, outcomes, and value creation, not just controls and tools.</li>



<li><strong>Invest in formal governance education.</strong> Even experienced executives benefit from structured governance training when moving into board roles.</li>



<li><strong>Choose wisely.</strong> Zero in on boards where your expertise genuinely matters and companies that are aligned to your values.</li>



<li><strong>Consider volunteering.</strong> Targeting a not-for-profit or charity for your first board position can help you earn valuable first-board experience.</li>



<li><strong>Leverage your network. </strong>Board opportunities often arise from existing relationships.<strong>  </strong></li>



<li><strong>Get certified.</strong> Consider investing in a <a href="https://www.nacdonline.org/nacd-credentials/nacd-directorship-certification-credential/">NACD Directorship Certification</a> or similar credentials.</li>
</ul>



<p>Like your CISO role, branding and narrative are important. Research and develop a board bio that highlights key skills and experiences such as financial, legal, governance, risk, crisis management, regulatory navigation, and strategic governance.</p>



<h2 class="wp-block-heading"><a></a>The benefits of experiencing the board from the other side</h2>



<p>CISOs will reap many benefits from being a board member. Chief among these, Norton says, is a greater appreciation of the director mindset.</p>



<p>“Understanding what represents a material concern, the <a href="https://www.csoonline.com/article/3953098/what-boards-want-and-dont-want-to-hear-from-cybersecurity-leaders.html">right level of detail that board</a> <a href="https://www.csoonline.com/article/3953098/what-boards-want-and-dont-want-to-hear-from-cybersecurity-leaders.html">members want in reporting</a>, and contributions to risk appetite and corporate strategy” have been invaluable, he says. “As a CISO in my day-job, this significantly assists in balancing board messaging and understanding how to frame discussions in the right way.”</p>



<p>Minai’s experience has shaped how she thinks and leads as well. Some of the benefits she experienced include developing a long‑term, enterprise‑wide perspective beyond functional optimization; a deeper understanding of how boards balance risk, investment, culture, and stakeholder expectations; exposure to decision‑making under uncertainty with incomplete information; and strengthening the ability to translate technical and cyber risk into strategic and financial implications.</p>



<p>“These roles have also broadened my exposure across aged care, academia, government, and not‑for‑profit sectors, which has strengthened my judgment and impact as a senior executive,” Minai says.</p>



<p>For Morelli, it is about being able to see where the industry is heading in 18 to 24 months.</p>



<p>“There is also a significant compounding effect of the network. Sitting in a room with the world’s top CISOs and business leaders provides a level of strategic intelligence that no briefing note can replicate. It forces you to grow as a leader because you are constantly challenged by peers operating at a global scale,” he says.</p>



<p>Even with cybersecurity leaders being increasingly invited into the boardroom, the invitation alone does not guarantee effectiveness. The CISOs who succeed in governance roles are those who can reframe cybersecurity as a matter of trust, resilience, and organizational stewardship, not just technical defence, Minai says.</p>



<p>“Boards are not looking for another security operator; they are looking for clear thinking, calm judgement, and strategic insight under complexity,” she says. “That is where experienced CISOs can make a unique and lasting contribution.”</p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[Apple criticizes EU plan forcing Google to open Android to rival AI services]]></title>
<description><![CDATA[Apple has joined Google in pushing back against new European Union proposals that would force Android to open more of its system to rival AI services, with the company warning that the changes create serious risks for user privacy, device security, and overall system integrity.



The European Co...]]></description>
<link>https://tsecurity.de/de/3515779/ios-mac-os/apple-criticizes-eu-plan-forcing-google-to-open-android-to-rival-ai-services/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3515779/ios-mac-os/apple-criticizes-eu-plan-forcing-google-to-open-android-to-rival-ai-services/</guid>
<pubDate>Thu, 14 May 2026 07:53:49 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Apple has joined Google in pushing back against new European Union proposals that would force Android to open more of its system to rival AI services, with the company warning that the changes create serious risks for user privacy, device security, and overall system integrity.



The European Commission introduced the draft measures as part of its ongoing enforcement of the European Commission Digital Markets Act, commonly known as the DMA. The proposal would allow competing AI services to access Android features more deeply so they can perform actions inside apps, including sending emails, sharing photos, or ordering food.



Google already criticized the proposal last month, calling it an “unwarranted intervention” that weakens important protections for users. Apple has now submitted its own filing to EU regulators, arguing that the Commission is moving too quickly while dealing with unpredictable AI systems that still carry unknown risks.



According to Apple’s submission:




“The DMs raise urgent and serious concerns. If confirmed, they would create profound risks for user privacy, security, and safety as well as device integrity and performance.”




Apple also warned that the risks become “especially acute” because modern AI systems continue to evolve rapidly, while their “capabilities, behaviours, and threat vectors remain unpredictable.”



Reuters reported that Apple also criticized the European Commission’s technical process, arguing regulators are effectively redesigning Android after “less than three months of work” while overriding decisions made by Google engineers over many years.



The latest filing adds another chapter to Apple’s long-running fight with EU regulators over the DMA. The company challenged parts of the law in court last year and has repeatedly argued that forced interoperability requirements weaken security protections across iPhone, iPad, and Mac platforms.



The Commission accepted public feedback on the proposal until May 13 and is expected to issue a final decision by July 27, 2026.]]></content:encoded>
</item>
<item>
<title><![CDATA[I'd never realized how many apps are Linux-exclusive until now]]></title>
<description><![CDATA[I've been considering switching back to Windows for some time, partly to see how it's gotten first-hand, partly because Deltarune Chapter 5 is coming out this year and I wanna make sure I don't bump into compatibility issues on my blind playthrough. So, out of curiosity, I've begun checking out h...]]></description>
<link>https://tsecurity.de/de/3515215/linux-tipps/id-never-realized-how-many-apps-are-linux-exclusive-until-now/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3515215/linux-tipps/id-never-realized-how-many-apps-are-linux-exclusive-until-now/</guid>
<pubDate>Thu, 14 May 2026 00:36:31 +0200</pubDate>
<category>🐧 Linux Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<!-- SC_OFF --><div class="md"><p>I've been considering switching back to Windows for some time, partly to see how it's gotten first-hand, partly because Deltarune Chapter 5 is coming out this year and I wanna make sure I don't bump into compatibility issues on my blind playthrough.</p> <p>So, out of curiosity, I've begun checking out how to download my preferred apps on Windows. Surely a Windows build will be available on Github, or at least there will be build instructions, right?</p> <p>Well it turns out I couldn't be more wrong. Most of those awesome apps you find on Flathub are Linux-only. Tambourine Music Player? That thing with the most boombastic UI known to man? Linux-only. Found another cool music player, Amberol. Also Linux-only. Foliate? The cool-ass epub reader that even lets you download stuff from online catalogs? Linux-only. Lutris? "Of course it's Linux-only", I hear you say. "Its whole purpose is running Windows games on Linux". And you're right, but it's also a great way to gather all your emulated retrogames in one place. The list goes on and on.</p> <p>Everyone says Linux's main problem is the lack of native apps compared to Windows. Today I found out that Windows <em>also</em> lacks apps compared to Linux, but since it's not big professional software like Photoshop, no one talks about it.</p> </div><!-- SC_ON -->   submitted by   <a href="https://www.reddit.com/user/AfraidAsparagus6644"> /u/AfraidAsparagus6644 </a> <br> <span><a href="https://www.reddit.com/r/linux/comments/1tcdrtv/id_never_realized_how_many_apps_are/">[link]</a></span>   <span><a href="https://www.reddit.com/r/linux/comments/1tcdrtv/id_never_realized_how_many_apps_are/">[comments]</a></span>]]></content:encoded>
</item>
<item>
<title><![CDATA[heise-Angebot: Mastering GitOps 2026: Rendered Manifests, Argo CD und Platform Engineering]]></title>
<description><![CDATA[Die Online-Konferenz am 25. Juni präsentiert praxisrelevante GitOps-Themen rund um Platform Engineering, Argo CD, den Flux Operator und Manifest-Pattern.]]></description>
<link>https://tsecurity.de/de/3512611/it-nachrichten/heise-angebot-mastering-gitops-2026-rendered-manifests-argo-cd-und-platform-engineering/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3512611/it-nachrichten/heise-angebot-mastering-gitops-2026-rendered-manifests-argo-cd-und-platform-engineering/</guid>
<pubDate>Wed, 13 May 2026 08:17:14 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Die Online-Konferenz am 25. Juni präsentiert praxisrelevante GitOps-Themen rund um Platform Engineering, Argo CD, den Flux Operator und Manifest-Pattern.]]></content:encoded>
</item>
</channel>
</rss>
<!-- Generated in 0,26ms -->