Everything posted by reporter
-
Using Kohler's Poop-Analysis Camera? Double-Check This Key Privacy Setting First
Don't perch on your camera-equipped throne assuming your "data" is end-to-end encrypted. It's not quite that simple.View the full article
-
California’s ban on self-driving trucks could soon be over
Revised rules in California would allow self-driving trucks to test on public highways. The rules also close a loophole allowing police to issue tickets for driverless vehicles.View the full article
-
Premier League Soccer: Stream Manchester United vs. West Ham Live
With Matheus Cunha back in the mix, will Man U put him in the game? Tune in to find out.View the full article
-
A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code
Privacy stalwart Nicholas Merrill spent a decade fighting an FBI surveillance order. Now he wants to sell you phone service—without knowing almost anything about you.View the full article
-
Meta centralizes Facebook and Instagram support, tests AI support assistant
The new support hub will connect users to security tools, account recovery options, and an AI assistant. View the full article
-
Why Day One Ventures’ Masha Bucher thinks VCs and storytelling go hand-in-hand
Day One Ventures' Masha Bucher doesn't just invest in startups—she tells their stories. Her integrated model aligns incentives and proves conviction matters more than contracts.View the full article
-
ByteDance and DeepSeek Are Placing Very Different AI Bets
The diverging path of China’s two leading AI players shows where the country’s artificial intelligence industry is headed.View the full article
-
Jackery and Anker Hosting Last Chance Black Friday/Cyber Monday Sales With Up to 65% Off
Black Friday and Cyber Monday may be over, but you can still find up to 65 percent off Anker and Jackery's best portable power stations this week. Each retailer is hosting a last call sale for its most popular charging accessories, with major savings on these high-priced power stations. Jackery Note: MacRumors is an affiliate partner with Jackery and Anker. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Jackery's "Black Friday Encore" event has up to 65 percent off select portable power stations this week. This includes everything from the smaller Explorer 500 to Jackery's line of HomePower Solar Generators that can power essential home electronics for as long as 30 days. UP TO 65% OFFJackery Black Friday Encore Sale Explorer 500 - $359.00, down from $499.00 Explorer 2000 v2 - $749.00, down from $1,499.00 Battery Pack 2000 Plus - $799.00, down from $1,399.00 Battery Pack 3600 - $999.00, down from $2,099.00 HomePower 3000 Solar Generator - $1,199.00, down from $2,499.00 Explorer 2000 v2 + Dual 200W Solar Panels - $1,299.00, down from $2,499.00 HomePower 3000 Solar Generator + Dual 200W Solar Panels - $1,499.00, down from $2,999.00 HomePower 3600 Plus Solar Generator - $1,899.00, down from $3,699.00 Explorer 5000 Plus - $3,999.00, down from $5,699.00 Anker SOLIX Similar to Jackery, Anker SOLIX is hosting a "Cyber Monday Last Call" sale that has up to 65 percent off select portable power stations. Overall, Anker SOLIX has a few more affordable options coming in under $500, as well as numerous high-end stations with various accessories like solar panels and expandable batteries. UP TO 65% OFFAnker SOLIX Cyber Monday Last Call Anker 521 PowerHouse (300W) - $149.99, down from $249.99 Anker 535 PowerHouse (500W) - $249.00, down from $649.99 SOLIX C1000 Gen 2 Portable Power Station - $429.00, down from $799.00 SOLIX C1000 Gen 2 + Solar Panel - $609.00, down from $1,298.00 SOLIX C2000 Gen 2 Portable Power Station - $739.00, down from $1,498.00 SOLIX F3000 Portable Power Station - $1,199.00, down from $2,599.00 SOLIX F3800 Portable Power Station - $1,999.00, down from $3,999.00 SOLIX F3000 + Expansion Battery + Solar Panel - $2,299.00, down from $5,397.00 SOLIX F3800 Plus Smart Home Power Kit - $4,599.00, down from $8,897.00 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about the best deals you can find this holiday season? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple Deals This article, "Jackery and Anker Hosting Last Chance Black Friday/Cyber Monday Sales With Up to 65% Off" first appeared on MacRumors.com Discuss this article in our forums View the full article
-
Apple Announces 2025 Podcast of the Year
Apple today announced that The Rest Is History has received the 2025 Apple Podcasts Award for Show of the Year for its high quality and cultural impact. Launched in 2020, The Rest Is History is a history podcast hosted by witty British historians Tom Holland and Dominic Sandbrook. It explores historical events, ranging from the rise and fall of the Roman Empire to the sinking of the Titanic. "The Rest Is History does a phenomenal job in taking a subject as vast as human history and captivating a global audience," said Oliver Schusser, vice president of Apple Podcasts, Apple Music, Apple Sports, and Beats. "Tom and Dominic have created something special that represents the very best of what's possible with podcasting — it's educational, it's hilarious, and it has fostered a true sense of community." "We don't moralize, we don't judge the past, and we approach it in a spirit of real enthusiasm," said Sandbrook. "We don't look down on people in the past. We just try to enjoy it, to relish the madness, the bonkers-ness of people." Tag: Apple Podcasts This article, "Apple Announces 2025 Podcast of the Year" first appeared on MacRumors.com Discuss this article in our forums View the full article
-
Amazon reportedly considering dropping USPS and building a competing postal service
Amazon is the USPS' biggest customer, and the e-commerce giant's potential break from the postal agency comes as the two sides are negotiating a new deal. View the full article
-
TikTok rolls out a ‘Nearby’ feed to display local content in select countries
While TikTok is already known for its recommendation algorithm, which is able to target users with highly personalized content, the addition of a Nearby feed gives it the ability to display even more relevant content to its users. View the full article
-
From feeds to flows: Using a unified linkage model to operationalize threat intelligence
The problem: Static intelligence in a dynamic world Every CISO knows the fatigue that comes with modern threat intelligence. Dozens of vendor feeds pour in daily — STIX packages, IP blocklists, domain indicators, malware hashes — all claiming to help your organization stay one step ahead. Yet most threat feeds still behave like spreadsheets of badness. They tell you what to watch for, but not why it matters or how it moves through your environment. The result is a paradox of abundance: CISOs have more data than ever before, but less operational clarity. Analysts are overwhelmed by indicators disconnected from context or mission relevance. Each feed represents a snapshot of a potential threat, but it does not capture the dynamic pathway through which that threat could exploit relationships within the enterprise. Traditional intelligence products describe discrete artifacts; real-world attacks exploit linkages amongst users and cloud services, between supply-chain vendors and data repositories, between identity providers and DevOps pipelines. The shift from threat feeds to threat flows requires a model that can describe those linkages, quantify their trustworthiness and prioritize risk based on how threats actually travel. That’s where the Unified Linkage Model (ULM) comes in. Rhizomatic networks and the modern attack surface Classical network defense models assume hierarchical systems — servers at the core, clients at the edge and clear boundaries in between. But digital enterprises no longer look like trees; they behave more like rhizomes — living systems of lateral, recursive connections. A rhizomatic network, a term from Deleuze and Guattari’s A Thousand Plateaus and explored in this context elsewhere, is one where any node can seemingly connect to almost any other, directly or indirectly, through APIs, shared identity layers or multi-cloud infrastructure. In these environments, roots have become less permanent and topologies have become less predictable. Within this landscape, dependencies emerge dynamically and relationships evolve faster than documentation can keep up. This shift from hierarchy to rhizome changes the way we know how threats propagate. A compromise in one SaaS tenant can ripple laterally through adjacent cloud accounts, CI/CD pipelines or shared identity providers with surprising speed. Attackers no longer exploit static perimeters — they weaponize relationships. The ULM provides a structured way to visualize this chaos. By mapping three core linkage types — adjacency, inheritance and trustworthiness — the ULM reveals how risk moves rhizomatically through complex ecosystems. It transforms modern network entanglement into something quantifiable, allowing CISOs to reason about propagation rather than static exposure. The unified linkage model (ULM) The ULM was conceived initially to describe how cyber risk propagates through interdependent systems — not merely by asset or vulnerability, but by relationship. Instead of seeing networks as linear hierarchies, ULM views them as living ecosystems where risk flows along three primary linkage types: Adjacency linkages: Proximity or shared interfaces between systems, such as network segments, APIs or shared infrastructure. Inheritance linkages: Dependencies and configuration flows, such as a compromised library in a build pipeline or inherited IAM policies. Trustworthiness linkages: Human or contractual relationships, such as vendor access, federated identities or service-to-service tokens. Each linkage represents a potential path of exploitation. Rather than treating each threat artifact in isolation, ULM maps how those artifacts connect — showing how an attacker could traverse from an initial compromise point to an ultimate target through adjacency, inheritance and trust. This concept reframes threat intelligence from collection to connection. In the ULM view, the organization’s environment is not simply a list of assets but a graph of interactions. Threats are not isolated incidents but flow across linkages. From feeds to flows: Building a living threat graph Imagine receiving a feed that reports a malicious IP address associated with a phishing campaign. In most SOCs, that indicator enters a SIEM rule or firewall blocklist — a transactional act of defense. The intelligence stops there. Now apply ULM thinking: The malicious IP is associated with a compromised third-party marketing tool. That tool has API keys embedded in your marketing automation system. The automation platform uses OAuth tokens that connect to your corporate CRM. The CRM is integrated with your cloud identity provider. Each linkage forms part of a threat flow — a connected chain of potential exploitation that moves laterally through business processes, not just through ports and protocols. By mapping linkages, the CISO can see that the “malicious IP” is not an isolated data point; it’s the first observable in a multi-stage flow that touches customer data, credentials and identity infrastructure. When threat intelligence is structured as linkages, not lists, analysts can: Correlate faster: Identify shared infrastructure or behavior patterns across feeds. Prioritize better: Focus on threats that intersect with high-value or high-trust linkages. Predict earlier by anticipating propagation through modeling adjacent or inherited dependencies. In other words, threat feeds become threat flows — intelligence with direction, momentum and consequence. Operationalizing ULM in threat intelligence pipelines 1. Ingest and normalize ULM begins by ingesting diverse threat feeds — commercial, open-source, government and internal telemetry. Each artifact (IP, domain, hash, tactic or technique) becomes a node in the linkage model, enriched with metadata such as MITRE ATT&CK techniques, timestamps or confidence scores. 2. Establish linkages The system identifies relationships between nodes using multiple criteria: Adjacency: Shared IP ranges, ASN or cloud hosting; shared libraries or API keys. Inheritance: Supply-chain dependencies, build-system components or configuration drift. Trustworthiness: Credential sharing, federated SSO connections, vendor contracts or known trust relationships. Linkages are scored for strength and directionality — similar to weights in a graph — producing a threat-linkage graph showing how a compromise could cascade across systems. 3. Integrate with MITRE ATT&CK and TIPs and FAIR ULM aligns naturally with MITRE ATT&CK’s technique-level data.Each linkage can be annotated with the ATT&CK tactics it enables — from Initial Access to Impact. Integration with Threat Intelligence Platforms such as MISP or ThreatConnect allows ULM graphs to update dynamically as new indicators appear. A previously benign linkage can instantly become high-risk when connected to a newly malicious node, turning static intel into a living, breathing operational map. Similarly, the ULM bridges quantitative risk frameworks like FAIR and FAIR-CAM by embedding linkage dynamics into loss-event modeling, thereby enabling risk assessments not only of the magnitude of loss but of the pathway through which loss may propagate. 4. Visualize threat flows Visualization is key. And in the emerging environment of AI/ML models and cloud-based resources, this visualization can occur. Using ULM, CISOs can see attack pathways as flow diagrams rather than spreadsheets. For instance: A connection to a compromised supplier’s GitHub repo (inheritance linkage) → injects code into a shared container image (adjacency linkage) → which is deployed into production through an automated pipeline (trust linkage). Such visualizations reveal choke points where a single control — code-signing enforcement or identity segmentation — can break multiple flow paths at once. ULM as a bridge between intelligence and authorization One of the persistent frustrations in enterprise security is the divide between intelligence and governance. Threat feeds inform SOCs; frameworks like NIST SP 800-37 Rev. 2, ISO/IEC 27001:2022 or the CMMC 2.0 Model govern compliance. The two rarely meet. ULM provides the connective tissue. Because ULM formalizes relationships between systems, it can feed directly into risk management frameworks: NIST RMF Step 1–2 (Categorize/Select controls): Use ULM to identify linkage-dense areas where compromise would have the highest propagation potential. Step 3–4 (Implement/Assess): Validate that controls exist along key linkages — authentication boundaries, code-inheritance chains, vendor access. Step 6 (Monitor): Continuously refresh linkages with new threat intel, transforming continuous monitoring into continuous linkage validation. In compliance contexts, ULM metrics — such as linkage density, trustworthiness scores and adjacency exposures — become measurable inputs for CMMC maturity, ISO 27001 risk registers or Zero Trust Architecture (SP 800-207) policy enforcement. A threat flow, therefore, is not only a technical visualization but an auditable artifact of due diligence. Zero trust and the flow perspective Zero trust architecture (ZTA) is often summarized as “never trust, always verify,” as formalized in NIST SP 800-207. ULM adds nuance by showing what to verify and where trust actually exists. Every trust boundary in a zero-trust design corresponds to one or more linkages in ULM: A user authenticating through an identity provider — a trustworthiness linkage. A microservice calling another via API — an adjacency linkage. A software update pipeline pulling from a third-party repo — an inheritance linkage. When threat intelligence is mapped onto those linkages, the CISO gains real-time visibility into which trust paths are under active threat. Instead of treating zero trust as a static segmentation map, ULM enables a dynamic trust model — continuously updated by threat-flow data. This approach converts zero trust from an architectural goal to an operational feedback system. Each linkage is verified not only against access policies but also against active threat flows. CISO use case: Prioritizing by linkage impact Consider two simultaneous alerts: A phishing domain targeting the finance department. A compromised API key in a DevOps integration. Both seem essential, but which deserves immediate attention? A traditional feed-based approach might treat them equally. The ULM view quickly shows that the API key sits on a high-trust, high-inheritance linkage — it connects the build system to production containers and those containers share adjacency with customer data stores. The phishing domain, by contrast, leads to isolated user inboxes with strong controls. By quantifying the linkage weight, the CISO can prioritize the DevOps compromise, knowing that its flow potential — the ability to move from one system to another — is far higher. This is attack-path prioritization, not just vulnerability management. It is the difference between chasing every indicator and focusing on the flows that matter. Toward a flow-based defense Security teams often describe their posture in terms of perimeters, boundaries, endpoints or controls. But adversaries don’t think in boxes — they believe in flows. They exploit the connective tissue: the forgotten trust token, the unmonitored CI/CD handoff, the shared SaaS credential. The ULM provides a way to think and act like an attacker while maintaining the analytical rigor of a defender. By modeling linkages, CISOs can: Visualize attack surfaces: Understand not just what assets exist, but how they relate to each other. Quantify propagation risk: Measure how fast and far a compromise could move. Operationalize threat intel: Feed dynamic linkage updates into monitoring and response playbooks. Align intelligence with compliance: Demonstrate to auditors and boards that risk is understood in context. In practice, adopting ULM doesn’t require replacing existing tools. Most organizations already possess the data — network maps, identity graphs, vulnerability scanners and threat feeds. ULM unifies them into a linkage framework, transforming siloed outputs into a coherent risk narrative. The CISO’s call to action For decades, we have been trained to collect — logs, indicators, feeds. The next era of cybersecurity requires that we understand connections: how elements interact, inherit and propagate. By adopting a linkage mindset, CISOs can elevate threat intelligence from reactive to predictive. The ULM provides the analytical bridge between static data and dynamic defense — a means to see threats not as isolated alerts but as flows of intent moving through digital ecosystems. The message is simple but powerful: Stop simply reading threat feeds. Start mapping threat flows. That is how you operationalize threat intelligence in the age of rhizomatic, interconnected systems — and how CISOs finally gain the visibility to act, not just react. Additional details are available in my original research paper: Unified Linkage Models: Recontextualizing Cybersecurity (United States Cybersecurity magazine). This article is published as part of the Foundry Expert Contributor Network. Want to join? View the full article
-
Meta reportedly plans to slash Metaverse budget by up to 30%
The proposal reflects the overall lack of interest in products like Meta's social virtual reality platform Horizon Worlds.View the full article
-
Apple Arcade Just Got the Most Downloaded Mobile Game Ever and More
Apple Arcade received five more games today, including endless runner Subway Surfers, the world's most downloaded mobile game. Since its launch in 2012, the game has received billions of downloads across all platforms. The premium Subway Surfers+ edition on Apple Arcade offers the same run as the classic game, but without in-app purchases and ads. As a result, there are new ways to revive your character, collect items, and progress. A spin-off game Subway Surfers Tag was already released on Apple Arcade in 2022. The other four games added to Apple Arcade today:SpongeBob: Patty Pursuit 2, a sequel to the popular side-scrolling game PowerWash Simulator, which involves pressure washing dirty vehicles, homes, and more Cult of the Lamb Arcade Edition, a mobile version of the award-winning roguelite dungeon crawler NARUTO: Ultimate Ninja STORM+, a 3D fighting game based on the popular manga and anime seriesApple Arcade is a subscription service that provides access to hundreds of games across the iPhone, iPad, Mac, Apple TV, and Apple Vision Pro. All of the games are free of ads and in-app purchases. In the U.S., Apple Arcade costs $6.99 per month, and it is also bundled with other Apple services in all Apple One plans. Apple Arcade can be accessed through the App Store and Apple Games apps.Tag: Apple Arcade This article, "Apple Arcade Just Got the Most Downloaded Mobile Game Ever and More" first appeared on MacRumors.com Discuss this article in our forums View the full article
-
Spotify says Wrapped 2025 is its biggest yet, with 200M+ users in its first day
After last year's flop, Spotify Wrapped engagement is up 19% and shares were up 41%, the company says. View the full article
-
Apple's iPhone 17 Cases Make Great Stocking Stuffers at Up to 50% Off on Amazon
Amazon this week has big discounts across Apple's Clear, Silicone, and TechWoven Cases for the iPhone 17 and iPhone Air lineup. Items on sale include Clear, Silicone, and TechWoven Cases for the iPhone 17, iPhone 17 Pro, iPhone 17 Pro Max, and iPhone Air. We're also tracking a few discounts on other accessories like the FineWoven Wallet with MagSafe and Beats cases. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Apple's official cases are reaching up to 50 percent off in this sale, with many priced at $25.00, down from their original $49.00 price tags. In terms of the Beats deals, you'll find steep markdowns on the Beats Woven Charging Cables during this event, as well as Beats Cases for the iPhone 17 lineup. UP TO 50% OFFiPhone 17 Cases at Amazon iPhone Air Clear Case - $25.00, down from $49.00 iPhone 17 Clear Case - $25.00, down from $49.00 Silicone Case - $25.00, down from $49.00 iPhone 17 Pro Clear Case - $25.00, down from $49.00 Silicone Case - $25.00, down from $49.00 TechWoven Case - $44.00, down from $59.00 iPhone 17 Pro Max Clear Case - $25.00, down from $49.00 Silicone Case - $37.99, down from $49.00 TechWoven Case - $49.99, down from $59.00 More Sales FineWoven Wallet - $39.99, down from $59.00 Beats USB-C to USB-C Woven Cable - $8.54, down from $18.99 Beats USB-A to USB-C Woven Cable - $9.88, down from $18.99 Beats iPhone 17 Case - $19.97, down from $45.00 Beats iPhone 17 Pro Case - $22.45, down from $45.00 Beats iPhone 17 Pro Max Case - $29.99, down from $45.00 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about the best deals you can find this holiday season? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple Deals This article, "Apple's iPhone 17 Cases Make Great Stocking Stuffers at Up to 50% Off on Amazon" first appeared on MacRumors.com Discuss this article in our forums View the full article
-
InnAIO AI Translator T10 Review: Feature-Loaded but Needs Work
The InnAIO T10 clips magnetically to the back of your phone, but it needs further development to be worth the money.View the full article
-
Apple Announces 2025 App Store Award Winners, Including iPhone App of the Year
Apple today unveiled the winners of its 2025 App Store Awards, including task planning app Tiimo, which was named iPhone App of the Year. 17 winning apps and games were selected by Apple's team of App Store editors, for showing exceptional innovation, user experience, and design. The developers of each app and game will receive a physical App Store Award. "Every year, we're inspired by the ways developers turn their best ideas into innovative experiences that enrich people's lives," said Apple CEO Tim Cook. "This year's winners represent the creativity and excellence that define the App Store, and they demonstrate the meaningful impact that world-class apps and games have on people everywhere." A complete list of this year's winners: Apps Tiimo (iPhone App of the Year) Detail (iPad App of the Year) Essayist (Mac App of the Year) Explore POV (Apple Vision Pro App of the Year) Strava (Apple Watch App of the Year) HBO Max (Apple TV App of the Year) Games Pokémon TCG Pocket (iPhone Game of the Year) DREDGE (iPad Game of the Year) Cyberpunk 2077: Ultimate Edition (Mac Game of the Year) Porta Nubi (Apple Vision Pro Game of the Year) WHAT THE CLASH? (Apple Arcade Game of the Year) Cultural Impact Art of Fauna Chants of Sennaar despelote Be My Eyes Focus Friend StoryGraph Tag: App Store This article, "Apple Announces 2025 App Store Award Winners, Including iPhone App of the Year" first appeared on MacRumors.com Discuss this article in our forums View the full article
-
Windows shortcuts’ use as a vector for malware may be cut short
A longstanding problem with the way Windows handles LNK shortcut files, which attackers have been abusing for years to hide malicious commands in plain sight, may finally have been fixed, with more than one patch now available to users. The problem was that threat actors could mask a harmful payload in the Target field of an LNK file downloaded from the internet, adding whitespace padding so the payload was hidden from anyone inspecting the field. Microsoft has been reluctant to classify the issue as a vulnerability. “We have investigated this report and determined that it does not meet the bar for classification as a vulnerability,” Microsoft said in a November 2025 advisory. “Microsoft Defender has detections in place to detect and block this threat activity, and the Smart App Control provides an extra layer of protection by blocking malicious files from the internet.” However, third-party patch provider 0patch noted in a blog post that a recent Windows update quietly addressed the issue by forcing the Target field to display all arguments. Even so, the company said, the exploit can still succeed. It said its own micropatch offers a more effective solution. The two fixes land after years of reported LNK file exploitation by APT groups from North Korea, Iran, Russia, and most recently by a China-linked campaign against European diplomats. Microsoft’s patch Windows shortcut files (.lnk) have long been a convenient hiding place for attackers because Windows Explorer only displayed the first 260 characters of the command in a shortcut’s properties. Anything appended after a long string of spaces stayed invisible to the user. The issue is tracked as CVE-2025-9491, with security analysts assigning a high-severity CVSS rating of 7.0. “A .lnk file structure allows the target arguments to be a very long string (tens of thousands of characters), but the ‘Properties’ dialog only shows the first 260 characters, silently cutting off the rest,” 0patch researchers said. “So it is possible to construct a .lnk file that runs a really long PowerShell or BAT script, but only the first 260 characters of it would be shown to the user who viewed its properties.” These shown characters can be mostly whitespaces, pushing the malicious element entirely out of sight. To the victim, the .lnk file looked like it opened a folder or launched a trusted application, but in reality, it could execute an arbitrary script, a dropper, or living-off-the land command. 0patch researchers confirm the issue to have been somewhat resolved after Microsoft quietly” bundled a fix into its November Windows Updates. “There was no mention of anything remotely akin to this issue among its 63 patched vulnerabilities,” the researchers said, adding the fix was likely applied under the guise of a functional bug rather than a security vulnerability. “Now, the ‘Properties’ dialog of a .lnk file shows the entire Target command with arguments, no matter how long it is,” the researchers added. Microsoft did not immediately respond to CSO’s request for comments. 0patch claims its patch is better 0patch has a problem with Microsoft’s patch, which it says fixes only the user-interface (visibility) part and not the underlying Windows behavior (executing a malicious command). The assumption behind Microsoft’s patch is that users can manually spot malicious commands in longer .lnk Target fields once they are fully displayed. 0patch argues it is likely to fail on two counts. First, only experienced IT users can tell if the Target field carries malicious executables by just looking at them. And second, in most legitimate cases, .lnk files with Target fields longer than 260 characters are created programmatically (using Windows API) and are defaulted to be automatically processed by Windows Explorer and not manually. So, Microsoft’s patch still allows a hidden malicious script to execute if the user fails to recognize and block it. To solve this, 0patch proposes its own micropatch for versions of Windows from 7 through 11 22H2 and Windows Server from 2008 R2 through 2022. If a process opens a .lnk file through Windows Explorer and the Target field exceeds 260 characters, it simply truncates the Target to 260 characters and displays a warning that a suspicious shortcut was shortened. This both alerts the user and prevents malicious execution, and 0patch claims the fix successfully handled more than 1000 malicious shortcuts previously identified by Trend Micro. View the full article
-
The 19 Best Golf Gifts for Every Kind of Golfer (2025)
Make your favorite golfer’s day with the best golf gifts to enhance every part of their game.View the full article
-
Anthropic signs $200M deal to bring its LLMs to Snowflake’s customers
AI research lab Anthropic inked a $200 million deal with Snowflake to bring its AI models to Snowflake's 12,600 customers. View the full article
-
Momberger: Betrug-E-Mails an Kunden im Umlauf
Mer_Studio – shutterstock.com Das Unternehmen Momberger – Lack & Technik warnt seine Kunden aktuell vor einem Sicherheitsvorfall. Wie die Oberhessische Zeitung berichtet, werden seit Montag (1. Dezember) betrügerische E-Mails im Namen des Unternehmens versendet. Die gefälschten Nachrichten fordern die Empfänger dazu auf, angeblich offene Rechnungen zu begleichen. “Diese Nachricht stammt nicht vom Unternehmen. Es handelt sich eindeutig um eine Fälschung, ausgelöst durch einen unbefugten Zugriff auf ein E-Mail-Konto”, betont die Regionalzeitung. Momberger rät allen Empfängern der betrügerischen E-Mails, keine Zahlungen zu leisten und weder Anhänge noch Links zu öffnen. Eine Analyse des beauftragten IT-Dienstleisters zeigt, dass die Fake-Nachrichten ausschließlich an die E-Mail-Adressen von Bestandskunden versendet wurden. Weitere Daten seien nicht kompromittiert worden, betont das Unternehmen mit Sitz in Alsfeld. Das Unternehmen hat den Vorfall nach eigenen Angaben umgehend untersucht. Zudem habe man sämtliche Systeme abgesichert und zusätzliche Schutzmaßnahmen ergriffen, so der KFZ-Spezialist. Neben dem IT-Dienstleister wurden auch der Datenschutzbeauftragte des Unternehmens sowie die Kriminalpolizei hinzugezogen. Die zuständige Datenschutzbehörde ist informiert. View the full article
-
EU investigating Meta over policy change that bans rival AI chatbots from WhatsApp
The European Commission is is launching an antitrust investigation into Meta's move to ban other AI companies from using WhatsApp's business tools to offer their own AI chatbots to users.View the full article
-
44 of the Best Movies on Netflix You Should Stream Now
Don't know what to watch? Dig through these Netflix movie picks that span every genre.View the full article
-
Antigravity A1 Review: A 360-Degree Drone
The Antigravity A1 is fun all around, if you don’t mind the steep price or wearing goggles to control it.View the full article