Tech

Beginner to Pro: TypeScript NestJS SRE Certification Path

Beginner to Pro: TypeScript NestJS SRE Certification Path

Introduction: Problem, Context & Outcome
In today’s fast-paced software landscape, engineering teams often struggle to build backend systems that scale effectively and remain reliable across environments. JavaScript’s dynamic nature can lead to runtime errors, unpredictable APIs, and inconsistent coding practices as projects grow. In DevOps-driven organizations, these issues slow down CI/CD pipelines, complicate deployments, and introduce operational risks.
Master in TypeScript with NestJS provides a structured solution by combining the type safety of TypeScript with the modular, enterprise-ready NestJS framework. This approach empowers developers to create predictable, maintainable, and cloud-ready backend services aligned with modern DevOps practices. Engineers and DevOps teams can deliver faster, safer releases with improved reliability.
Why this matters: Strong backend architecture directly impacts deployment speed, operational stability, and business continuity.
What Is Master in TypeScript with NestJs?
Master in TypeScript with NestJS is a professional learning program and methodology for building scalable backend applications. TypeScript enhances JavaScript with static typing, reducing runtime errors and improving maintainability. NestJS provides a modular, opinionated framework that promotes clean architecture, dependency injection, and consistent design patterns.
In real-world applications, this combination is used to develop REST APIs, microservices, and event-driven backend systems. It integrates seamlessly with containerized deployments, CI/CD pipelines, and cloud platforms. Teams adopt this methodology to minimize bugs, ensure consistent architecture, and facilitate collaboration between development, QA, and operations.
Why this matters: Structured backend development reduces technical debt and ensures long-term maintainability.
Why Master in TypeScript with NestJs Is Important in Modern DevOps & Software Delivery
Modern DevOps practices prioritize automation, reliability, and rapid delivery. Backend systems need to be scalable, predictable, and resilient to frequent changes. Master in TypeScript with NestJs supports these goals by providing strong typing, modular design, and architectural clarity from the outset.
Organizations adopting this approach benefit from better CI/CD integration, cloud readiness, and microservices-friendly designs. NestJS supports API gateways, messaging patterns, and service orchestration, while TypeScript catches errors before production. Agile and DevOps teams gain faster feedback loops, safer releases, and improved collaboration across development and operations.
Why this matters: DevOps effectiveness depends on backend systems designed for automation, stability, and rapid iteration.
Core Concepts & Key Components
TypeScript Type System
Purpose: Prevent runtime errors and improve code clarity.
How it works: Introduces static typing, interfaces, and compile-time checks.
Where it is used: Data models, API contracts, business logic, and integrations.
NestJS Modular Architecture
Purpose: Promote organized, maintainable code.
How it works: Uses modules, controllers, and providers with dependency injection.
Where it is used: Enterprise APIs, microservices, and large backend platforms.
Dependency Injection
Purpose: Enhance flexibility and testability.
How it works: Automatically manages object creation and lifecycle.
Where it is used: Services, repositories, and external integrations.
Controllers & Routing
Purpose: Map incoming requests cleanly to services.
How it works: Defines HTTP routes handled by controller methods.
Where it is used: REST APIs, microservices, and backend gateways.
Middleware & Interceptors
Purpose: Handle cross-cutting concerns such as logging and authentication.
How it works: Executes logic before or after request processing.
Where it is used: Performance monitoring, logging, security, and caching.
Configuration & Environment Management
Purpose: Enable smooth deployment across environments.
How it works: Centralized configuration using environment variables.
Where it is used: Development, staging, production, and cloud deployments.
Why this matters: Mastery of these components ensures systems are scalable, maintainable, and production-ready.
How Master in TypeScript with NestJs Works (Step-by-Step Workflow)
The workflow starts by defining data models and interfaces using TypeScript to ensure consistency across all services. Applications are structured into NestJS modules organized by business functionality.
Controllers handle incoming requests, while services contain core business logic. Dependency injection reduces tight coupling and simplifies testing. Configuration management allows easy adaptation across environments.
In a DevOps context, applications are containerized, tested through CI pipelines, and deployed to cloud or Kubernetes platforms. Logging, monitoring, and health checks are built-in from the start.
Why this matters: A clear, repeatable workflow reduces operational risk and supports continuous delivery.
Real-World Use Cases & Scenarios
In financial technology, teams use this approach to build secure transaction systems with minimized runtime errors. E-commerce platforms rely on it for product management, order processing, and user services at scale.
SaaS companies deploy NestJS-based microservices for subscriptions, notifications, and third-party integrations. DevOps engineers gain deployment consistency, QA teams benefit from predictable APIs, and SRE teams improve observability and reliability.
Why this matters: Proven adoption demonstrates scalability across industries and team sizes.
Benefits of Using Master in TypeScript with NestJs
Productivity: Faster development with fewer bugs Reliability: Early error detection through static typing Scalability: Modular architecture supports growth Collaboration: Clear contracts enhance cross-team alignment Why this matters: These advantages accelerate delivery while improving system stability.
Challenges, Risks & Common Mistakes
Common issues include improper module design, misuse of TypeScript types, and skipping automated testing. Teams may overlook logging, monitoring, or configuration management.
Structured learning, adherence to best practices, and DevOps-aligned workflows help mitigate these risks.
Why this matters: Awareness of common pitfalls prevents costly production failures.
Comparison Table
AspectTraditional Node.jsMaster in TypeScript with NestJsTypingDynamicStatic typingArchitectureUnstructuredModular & opinionatedScalabilityManualBuilt-in supportTestingLimitedDependency-injection basedDevOps FitMediumHighCI/CD SafetyLowerHigherError DetectionRuntimeCompile-timeCollaborationInconsistentStandardizedCloud ReadinessBasicCloud-nativeEnterprise AdoptionLimitedStrong Why this matters: Comparison highlights why structured backend frameworks are preferred for modern enterprise systems.
Best Practices & Expert Recommendations
Enable strict TypeScript checks. Organize modules by business functionality. Integrate automated testing early in CI/CD pipelines. Apply environment-specific configurations for deployments.
Include logging, metrics, and health checks from day one. Refactor regularly to maintain clarity and prevent technical debt.
Why this matters: Following best practices ensures maintainable, enterprise-ready backends.
Who Should Learn or Use Master in TypeScript with NestJs?
Backend developers building scalable APIs, DevOps engineers managing deployment pipelines, and QA/cloud/SRE professionals benefit from predictable and testable services.
Intermediate professionals and motivated beginners with JavaScript fundamentals will gain the most from structured learning.
Why this matters: Proper audience alignment ensures effective adoption and real-world applicability.
FAQs – People Also Ask
What is Master in TypeScript with NestJs?
A structured methodology for building scalable, type-safe backend systems.
Why this matters: Correct understanding ensures successful implementation.
Is it suitable for DevOps roles?
Yes, it integrates well with CI/CD and cloud infrastructure.
Why this matters: DevOps alignment reduces operational risk.
Is NestJS better than Express?
NestJS provides structured, maintainable architecture.
Why this matters: Structured code improves long-term maintainability.
Can beginners learn it?
Yes, with JavaScript knowledge and guidance.
Why this matters: Clear learning paths increase adoption success.
Does it support microservices?
Yes, with native microservice support.
Why this matters: Microservices are widely adopted in enterprises.
Is TypeScript mandatory?
Yes, it ensures type safety and predictability.
Why this matters: Type safety reduces runtime failures.
Does it work with Kubernetes?
Yes, it is cloud-native and container-ready.
Why this matters: Kubernetes is standard in modern deployments.
Is it good for APIs?
Excellent for REST and event-driven APIs.
Why this matters: APIs are the backbone of modern software.
Does it improve testing?
Yes, dependency injection simplifies automated testing.
Why this matters: Testing ensures reliability and faster releases.
Is it enterprise-ready?
Yes, widely adopted in production systems.
Why this matters: Enterprise readiness ensures scalability and stability.
Branding & Authority
DevOpsSchool is a globally recognized platform delivering enterprise-grade DevOps and cloud-native training. The program is led by Rajesh Kumar, an expert with over 20 years of hands-on experience in DevOps & DevSecOps, Site Reliability Engineering (SRE), DataOps, AIOps & MLOps, Kubernetes & Cloud Platforms, and CI/CD & Automation.
Why this matters: Expertise ensures industry-relevant, practical learning.
Call to Action & Contact Information
Start building enterprise-ready backend systems today with Master in TypeScript with NestJs.
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329

View the full article

• 0 comments
• 39 views

reporter

January 8Jan 8

CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited

CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting Microsoft Office and Hewlett Packard Enterprise (HPE) OneView to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2009-0556 (CVSS score: 8.8) - A code injection vulnerability in Microsoft OfficeView the full article

• 0 comments
• 36 views

Hacker News

January 8Jan 8

Die wichtigsten CISO-Trends für 2026

Die wichtigsten CISO-Trends für 2026

SuPatMaN – shutterstock.com
Das Jahr 2025 war für viele CISOs herausfordernd. Anfang des Jahres wurden mit dem Digital Operational Resilience Act (DORA) alle Finanzunternehmen dazu verpflichtet, ihre Cybersicherheit zu erhöhen. Zudem mussten sich in diesem Jahr zahlreiche Unternehmen mit der NIS2-Umsetzung auseinandersetzen. Vor welchen Schwierigkeiten stehen CISOs im Jahr 2026?
Herausforderungen 2026
Nach Meinung von Raphael Reiß, CISO der Vaillant Group, wird das Thema Compliance auch noch im neuen Jahr herausfordernd sein. Er bezeichnet das Ganze als „Regulatorik-Dschungel“.
Auch Vorwerk-CISO Florian Jörgens sieht die „zunehmend komplexen regulatorischen Anforderungen“ weiterhin als Herausforderung. Diese würden kontinuierliche Nachweise statt punktuelle Compliance verlangen.
Hinzu kämen wachsender Kostendruck trotz steigender Bedrohungslage und ein verschärfter Fachkräftemangel in allen sicherheitsrelevanten Rollen.
Holger Bajohr, CISO der Technische Werke Ludwigshafen, stimmt dem zu: „Ich glaube, dass das Thema Fachkräftemangel noch deutlich spürbarer werden wird und dass Experten schwieriger zu bekommen sein werden.“
Sicherheitstrends
Stefan Braun, CISO von Henkel, ist sich sicher: „2026 wird weniger durch neue Bedrohungen geprägt sein als durch steigende Komplexität. CISOs müssen gleichzeitig regulatorische Anforderungen, operative Resilienz in IT und OT sowie den sicheren Einsatz von KI beherrschen – oft mit begrenzten Ressourcen.“ Die größte Herausforderung ist seiner Ansicht nach, Sicherheit nicht als Verhinderer, sondern als Enabler von Geschwindigkeit und Innovation zu positionieren und messbar zum Geschäftserfolg beizutragen.
Jörgens sieht ebenfalls einen klaren Trend in der Kontrolle des Einsatzes von KI, „insbesondere der Umgang mit Shadow AI, also inoffiziellen KI-Tools in den Fachbereichen.“ Der Vorwerk-CISO prognostiziert zudem, dass Third-Party-Risk-Management stärker in den Fokus rückt, weil Lieferketten und externe Modelle zu den größten Angriffsflächen werden.
Vor diesem Hintergrund zählt laut Vaillant-CISO Reiß Resilience by Design zu den wichtigsten Themen im kommenden Jahr.
Henkel-CISO Braun fügt hinzu: „Software-Supply-Chain-Security und transparente Risikosteuerung gewinnen an Bedeutung. Der Fokus verschiebt sich klar von reiner Prävention hin zu Resilienz und Recovery.“ Der Sicherheitsexperte geht zudem davon aus, dass Zero Trust stärker operationalisiert wird, insbesondere über Identitäten, privilegierte Zugriffe und Maschinen-Accounts.
„Gleichzeitig werden wir mehr KI auf beiden Seiten sehen: Angreifer nutzen sie zur Skalierung, Verteidiger zur besseren Priorisierung, Korrelation und Automatisierung“, schließt Braun ab.
View the full article

• 0 comments
• 83 views

CSOonline

January 8Jan 8

Apple's Back to School Offer With Free Accessories Returns in Four Countries

Apple's Back to School Offer With Free Accessories Returns in Four Countries

Apple's annual "Back to School" or "Back to Uni" promotion has returned this week in Australia, New Zealand, Brazil, and South Korea.


From January 6 through March 11, qualifying higher-education students and staff in these countries can receive a free or discounted accessory with the purchase of select Mac and iPad models, similar to previous promotions that launched in the United States and a number of other countries last June and July.

For each device type, there is at least one accessory option available at no additional charge, with more expensive accessories available at reduced upgrade prices.

For example, in Australia, qualified customers who purchase an iPad Air or iPad Pro can receive a free Apple Pencil Pro (A$199 value) or standard AirPods 4 (A$219 value). Customers can upgrade to ‌AirPods 4‌ with Active Noise Cancellation after paying an additional A$80 fee or a Magic Keyboard for an additional A$210–A$350 fee depending on model.

iMac buyers can receive either ‌AirPods 4‌ with Active Noise Cancellation (A$299 value) at no additional charge or AirPods Pro 3 for an additional A$130 upgrade fee. MacBook Air and MacBook Pro buyers can receive free ‌AirPods 4‌ with Active Noise Cancellation, a Magic Mouse, a Magic Trackpad, or a Magic Keyboard with Touch ID and Numeric Keypad, or they can upgrade to ‌AirPods Pro 3‌ for an additional A$130.

In each country, the offer is available on Apple's online store, in the Apple Store app, and in person at Apple's retail stores where available. The offer can be combined with Apple's educational discounts on products, and AppleCare+ plans are up to 10% off for students.Tag: Back to School Promotion
This article, "Apple's Back to School Offer With Free Accessories Returns in Four Countries" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 37 views

reporter

January 8Jan 8

Holes in Veeam Backup suite allow remote code execution, creation of malicious backup config files

Holes in Veeam Backup suite allow remote code execution, creation of malicious backup config files

Veeam says that four vulnerabilities could allow a person with certain oversight roles for its flagship Backup & Replication suite to do serious damage to – but not destroy –  a backup database.
The company has already issued a patch for the bugs, which, it says, should be applied immediately.
The worst of the vulnerabilities, CVE-2025-59470, carries a criticality score of 9 and would allow a threat actor “to do something nefarious,” said Rick Vanover, Veeam’s vice-president of product strategy.
But he emphasized that, because of the immutable nature of the backup, data can’t be destroyed.
The issue: Veeam discovered that a person with the role of Backup Admin, Backup Operator, or Tape Operator status in unpatched version 13 of the suite (versions 13.0.1.180 and earlier) have more permissions than they should. The patch corrects that.
Specifically, the flaws addressed are:
CVE-2025-59470 (with a CVSS score of 9) allows a Backup or Tape Operator to perform remote code execution (RCE) as the Postgres user by sending a malicious interval or order parameter; CVE-2025-59469 (with a severity score of 7.2) allows a Backup or Tape Operator to write files as root; CVE-2025-55125 (with a severity score of 7.2) allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file; CVE-2025-59468 (with a severity score of 6.7) allows a Backup Administrator to perform remote code execution (RCE) as the Postgres user by sending a malicious password parameter. The patch to version 13.0.1.1071 will be an “easy installation” that won’t be disruptive, Vanover said. As of Tuesday afternoon, Veeam hadn’t received reports of exploitation, he added.
“The good news is, if a Veeam server is broken, we can create a new server right away – presumably with this patch installed – import the backups and carry on. The core data is completely unimpacted by this,” Vanover said. “The worst type of thing would be the [backup] environment isn’t working right or the Postgres database is messed up on the Veeam server, so jobs might not behave in a way one might expect.”
In these cases, admins using the Veeam One monitoring management suite would get an alert if, for example, a job was unable to connect to the backup server or backup jobs were failing.
The four vulnerabilities being patched are less severe than some because an attacker, internal or external, would need valid credentials for the three specific roles, noted Johannes Ullrich, dean of research at the SANS Institute.
On the other hand, he added, backup systems like Veeam are targets for attackers, in particular those who inject ransomware, who often attempt to erase backups.
“Backup systems should be regularly audited to ensure that access rights, such as those mentioned in this vulnerability, are properly managed and only accessible to users who actually need them,” he said. “Authentication credentials should be reviewed to ensure they comply with the respective standards.”
Kellman Meghu, principal security architect at Canadian-based risk management firm DeepCove Cybersecurity, said the worry is how the vulnerabilities could be used by a threat actor to get root privileges to the backup, “which is the worst it can get as far as compromise. From the sounds of the exploit, just being able to update a config file could be the avenue for executing malicious commands at the highest privileges.”
Admins who can’t patch quickly, or who have been running unpatched versions for any length of time, should first audit all config files and operations to ensure there have been no changes to the config files or execution of additional unexpected actions. Alerts should be set for every backup process run, so it is closely monitored until the suite can be patched.
“Keep in mind,” he added, “if you do see unusual behavior, it is a sign that there is a malicious actor or inside threat operating, and you would need to take a holistic incident response.”
This article originally appeared on NetworkWorld.

View the full article

• 0 comments
• 32 views

CSOonline

January 8Jan 8

Five New iPhone Features Rumored for iOS 27

Five New iPhone Features Rumored for iOS 27

Though it's been just a few months since iOS 26 launched, we're already hearing rumors about the next-generation version of iOS, iOS 27. iOS 27 will be introduced at Apple's June WWDC 2026 event before it launches in September 2026.


We don't know all of the details about iOS 27 yet, but we do have some information about what to expect.

"Snow Leopard" Update

iOS 27 will apparently focus on bug fixes and under-the-hood improvements to boost performance rather than new features. It's been referred to as a "Snow Leopard" update, because that was a version of macOS that Apple famously claimed had "zero new features" because it was all about fixing the existing software.

Apple engineers are reportedly going through iOS 26 to look for bloat, bugs, and any other issues impacting performance that can be fixed in iOS 27.

iPhone Fold

In 2026, Apple plans to launch the first foldable iPhone, a device rumors have taken to calling the ‌iPhone‌ Fold. The ‌iPhone‌ Fold is expected to have a ~5.4-inch display when folded, and a ~7.7-inch display when it's opened up like a book. It will be shorter and wider than other foldables on the market, with a 4:3 aspect ratio. At around 5.4 inches when closed, the ‌iPhone‌ Fold's outer display will be the smallest we've had since the ‌iPhone‌ 13 mini.

With Apple going back to a smaller display and simultaneously introducing a 7.7-inch display that's larger than any ‌iPhone‌ display to date, we're going to need some updates to iOS. iOS 27 will focus on introducing new interfaces and experiences for a larger display and a display that shifts between multiple sizes.

We haven't heard specifics on how Apple will tweak iOS to accommodate the ‌iPhone‌ Fold, but we could see some iPad-like options such as side bars and perhaps even multitasking views with support for multiple windows.

Liquid Glass

iOS 27 will likely include refinements for the Liquid Glass design that Apple introduced with ‌iOS 26‌. There have already been some changes in the iOS 26.1 and iOS 26.2 updates, but iOS 27 will provide Apple with the opportunity to make larger adjustments to respond to customer feedback.

Apple Intelligence

We're supposed to get the much smarter version of Siri in an iOS 26.4 update planned for spring 2026, but it's likely even more Apple Intelligence capabilities will follow in iOS 27.

We don't know specifics yet, but several existing ‌Apple Intelligence‌ features could expand to additional apps.

Apple is also working on a "World Knowledge" Siri search feature that would provide information on general search queries, which will likely be included in ‌Siri‌'s iOS 26.4 update. If it's not in iOS 26.4, the add-on ‌Siri‌ feature could instead come in iOS 27.

Siri

With iOS 27, Apple could update Siri's design. ‌Siri‌ will get its major overhaul in iOS 26.4, but a new visual look is supposedly planned for iOS 27. There are no specifics about what the redesign might entail, but rumors linked to Apple's upcoming tabletop robot suggest that the company might introduce a version of ‌Siri‌ that's more animated, similar to the Mac Finder logo. That more animated version of ‌Siri‌ could also come to the ‌iPhone‌ and iPad, and we could see it first in iOS 27.

Health+

Apple is developing a paid Health+ service with nutrition planning and medical suggestions, and we could see that introduced as part of iOS 27.

The medical tool would explain different health metrics and trends from the Health app, offering up personalized guidance for health improvement.

New Satellite Features

Apple is working on several new satellite features for the ‌iPhone‌, and it's possible some features could be introduced as soon as iOS 27. Timing on Apple's satellite improvements is unclear, though, and behind-the-scenes updates from Apple's satellite partner Globalstar are required.
Rumored features:

Apple Maps via satellite
Photos in Messages via satellite
Satellite API framework for third-party apps
Satellite over 5G
Satellite connectivity without the need for a view of the sky

Some of these features might require new hardware, but options like ‌Apple Maps‌ via satellite would not require components beyond what's available now.
Launch Date

New versions of iOS, macOS, and Apple's other software platforms will be previewed in June at WWDC before launching in September just ahead of when new ‌iPhone‌ models come out.Tag: iOS 27
This article, "Five New iPhone Features Rumored for iOS 27" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 38 views

reporter

January 7Jan 7

CES 2026: The Ultraloq Bolt Sense Smart Lock Uses Palm Vein and Facial Recognition to Unlock Your Door

CES 2026: The Ultraloq Bolt Sense Smart Lock Uses Palm Vein and Facial Recognition to Unlock Your Door

The Xthings Ultraloq Bolt Sense is a smart lock that incorporates biometric authentication and Matter support. The Bolt Sense is able to identify a person through 3D facial recognition and palm vein authentication.


Xthings says the dual biometric approach is meant to be more secure than traditional biometric unlocking methods, but it may also exist because few companies have managed to master facial recognition as accurate as Face ID. The extra palm scan, which identifies an individual's sub-surface vein pattern, ensures that facial recognition won't fail. With biometric unlocking, users can open the door hands-free, and the palm scan works even when the hands are wet.

The Bolt Sense combines biometric unlocking with active approach sensing, advanced infrared, and adaptive low-light performance, so it works in the daytime and at night.

Xthings isn't launching the Ultraloq Bolt Sense until the second quarter of 2026, but the Ultraloq Bolt Mission, a Matter-enabled smart lock with Ultra Wideband, is available for purchase as of today. The $300 Bolt Mission uses UWB for automatic hands-free unlocking as the homeowner approaches.

It also supports unlocking via the Apple Home app, NFC, the Ultraloq app, a PIN, a physical key, or the Apple Watch. It does not support Apple Home Key, and the UWB only works with the Ultraloq app. The Bolt Mission uses 8 AA batteries that need to be replaced every six months, or users can purchase a rechargeable lithium battery pack that lasts for up to 1.5 years before it needs to be charged.

Along with the two Bolt locks, Xthings also debuted the Latch 7 Pro, a latch-style smart lock that will support Matter over Thread and Aliro, a universal smart lock standard that Apple is involved in. It's set to launch later this year.Tags: CES 2026, Ultraloq, Xthings
This article, "CES 2026: The Ultraloq Bolt Sense Smart Lock Uses Palm Vein and Facial Recognition to Unlock Your Door" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 34 views

reporter

January 7Jan 7

Apple Card Will Move From Goldman Sachs to JPMorgan Chase

Apple Card Will Move From Goldman Sachs to JPMorgan Chase

JPMorgan Chase has reached a deal to take over operation of the Apple Card, reports The Wall Street Journal. Barring any "last minute hiccups," the deal should be announced shortly after over a year of negotiations.


Reports began circulating over two years ago that current Apple Card issuer Goldman Sachs was looking to end its partnership with Apple as part of an effort to scale back on consumer banking products amid steep losses.

According to The Wall Street Journal, Goldman Sachs is unloading its roughly $20 billion of outstanding Apple Card balances at a discount of more than $1 billion, a rare move for co-branded account deals like this. But higher-than-average delinquency rates and high exposure to subprime borrowers made it more difficult for Goldman Sachs to find a buyer.

JPMorgan Chase's interest in taking over as Apple Card issuer was reported over a year ago, and by this past summer Chase appeared to be the front-runner.

Alongside its new Apple Card partnership, JPMorgan Chase will reportedly launch a new Apple savings account, but existing users with Apple savings accounts at Goldman Sachs will not be automatically transitioned and will need to decide whether they want to stay at Goldman Sachs or open new accounts with Chase.Tags: Apple Card, Chase
This article, "Apple Card Will Move From Goldman Sachs to JPMorgan Chase" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 34 views

reporter

January 7Jan 7

CES 2026: ESR Announces Qi2.2 Wireless Chargers With 25W iPhone 17 Charging

CES 2026: ESR Announces Qi2.2 Wireless Chargers With 25W iPhone 17 Charging

ESR is updating its line of CryoBoost chargers, adding new Qi2.2 options that can charge an iPhone 17 at up to 25W. CryoBoost is ESR's feature that uses active cooling to improve wireless charging speeds.


The $90 CryoBoost Foldable 3-in-1 Magnetic Charging Station has a compact design that's ideal for travel. It folds down to 15.8mm, but can charge an iPhone at up to 25W, an Apple Watch, and AirPods at the same time.

The $100 CryoBoost 3-in-1 Magnetic Charging Station offers the same feature set as the foldable model, but in a design optimized for the desktop. It has a detachable Apple Watch charger, and the ‌iPhone‌ charging stand supports portrait and landscape modes. Sleep Mode turns off the light and the fan for quiet, LED-free charging.

ESR says that its upcoming 10,000 mAh MagSlim Power Bank is the thinnest Qi2.2 25W power bank on the market, measuring in at 13.8mm thick. It too is able to charge the ‌iPhone 17‌ models at up to 25W, just like MagSafe.

More information on ESR's releases can be found on the ESR website.Tags: CES 2026, ESR
This article, "CES 2026: ESR Announces Qi2.2 Wireless Chargers With 25W iPhone 17 Charging" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 41 views

reporter

January 7Jan 7

OpenAI Launches ChatGPT Health With Apple Health Integration

OpenAI Launches ChatGPT Health With Apple Health Integration

OpenAI today announced the launch of ChatGPT Health, a dedicated section of ChatGPT where users can ask health-related questions completely separated from their main ChatGPT experience.


For more personalized responses, users can connect various health data services such as Apple Health, Function, MyFitnessPal, Weight Watchers, AllTrails, Instacart, and Peloton. Last month, MacRumors discovered icons related to Apple Health within the ChatGPT app, and today's announcement makes the integration official. Once connected, ChatGPT will be able to access your health and fitness data from Apple Health, including movement, sleep, and activity patterns.

ChatGPT Health can also integrate with your medical records, allowing ChatGPT Health to analyze your lab results and other aspects of your medical history to inform its answers to your health-related questions. OpenAI emphasizes that ChatGPT Health is not intended to provide diagnoses or treatment and is not a substitute for consulting with medical professionals, but it can be used to help understand results or prepare for upcoming appointments.

Privacy and security are always major concerns when it comes to health records, and OpenAI says ChatGPT Health has been developed with multiple layers of encryption and operates as a separate space with enhanced privacy. Data from ChatGPT Health is not used to train ChatGPT's foundation models by default, and users who start health-related conversations in the general ChatGPT interface will receive suggestions to move the discussions to the Health section.

ChatGPT Health is launching with a waitlist to join a group of beta users, with users on ChatGPT Free, Go, Plus, and Pro plans outside of the European Economic Area, Switzerland, and the United Kingdom eligible to start. Medical record integrations and some apps are only available in the United States at the current time. Access to ChatGPT Health will expand to all users on web and iOS in the coming weeks.
This article, "OpenAI Launches ChatGPT Health With Apple Health Integration" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 45 views

reporter

January 7Jan 7

Critical RCE flaw allows full takeover of n8n AI workflow platform

Critical RCE flaw allows full takeover of n8n AI workflow platform

Researchers have released details about a critical vulnerability that was silently patched in n8n, a platform used by many companies to build LLM-powered agents and automated workflows. The flaw can allow unauthenticated attackers to completely take over local n8n deployments, execute commands on the underlying system, and extract sensitive corporate data workflows typically have access to.
“The blast radius of a compromised n8n is massive,” researchers from data security company Cyera, who found the vulnerability, noted in their report on the vulnerability. “N8n is connecting countless systems, your organizational Google Drive, OpenAI API keys, Salesforce data, IAM systems, payment processors, customer databases, CI/CD pipelines, and more. It’s the central nervous system of your automation infrastructure.”
The n8n developers patched this issue in version 1.121.0 released on Nov. 18, but the release notes did not mention security fixes at the time, which seems to be standard procedure as n8n security advisories are intentionally released with a delay. The project has patched other critical RCE vulnerabilities since then, such as CVE-2025-68613, CVE-2025-68668, and CVE-2026-21877, so users should ensure they always update to the latest available version.
Content-Type confusion leads to arbitrary file reads
The vulnerability, tracked as CVE-2026-21858, has a severity rating of 10.0 (critical) and enables a two-part attack. First, it allows unauthenticated attackers who have access to n8n web forms to leak internal files from the n8n server. This is because the formWebhook function used by n8n Form nodes to receive data doesn’t validate whether the Content-Type field of the POST request submitted by the user is set to multipart/form-data.
Imagine a very common use case in which n8n has been used to build a chat interface that allows users to upload files to the system — for example, a customer support portal that accepts error screenshots or logs, an HR system for submitting CVs, or a knowledge base where employees can upload documents to index for later querying through an LLM-powered chatbot.
In the normal flow, when the content type is multipart/form-data and the request body has a files: definition, n8n will parse the request with its parseFormData() function, which uses Node.js library Formidable to handle file uploads securely by storing the file in a temp directory with a random path before populating the req.body.files global variable with the filename and location.
However, if a request has a different content type, for example application/json, n8n will parse the request body using another function called parseBody(), which behaves differently. This function extracts the request’s data section to populate the req.body.data global variable, but it also extracts any other section from the request to populate the corresponding req.body.[section name] variables with their content.
Because formWebhook doesn’t validate whether a request with a files section is actually multipart/form-data, it will call the wrong parsing function on its body, resulting in the population of the req.body.files variable with user-controlled values like filenames and paths. It will then call a function called copyBinaryFile() to copy any files from the req.body.files variable — which are supposed to be temp random paths — to persistent storage locations to be consumed by other nodes/workflows, leading to potential path traversal attacks, in which legitimate files on the system can be overwritten or loaded elsewhere in a workflow.
To exploit this vulnerability, an attacker can submit a request as application/json with a files section that specifies known file paths from the local system, including n8n configuration files that contain sensitive credentials and tokens. If these files are added into the context of an LLM-powered chatbot node, the attacker can then use the chat interface to ask questions about those files and leak their contents.
From arbitrary file read to admin privileges
The second part of the attack enabled by this vulnerability opens the “blast radius” considerably, as the ability to read any local file has serious implications due to the way n8n tracks authenticated sessions.
Session cookies are strings stored in the user’s browser to maintain their authenticated status for a period of time. Attackers regularly steal session cookies from compromised systems to bypass authentication and log in as their victims on various websites.
In n8n, session cookies are generated by combining a user’s unique ID with a SHA256 hash of the user’s email and password and then signing the result with a secret key unique to each n8n installation.
The problem is that all the information needed to rebuild session cookies is located in local files. The unique secret key is stored in /home/node/.n8n/config and all user records are stored in the /home/node/.n8n/database.sqlite file. Leaking the contents of these two files allows attackers to recreate n8n-auth cookies for any users, including administrators.
With administrator privileges attackers can create new workflows, and n8n offers a node called Execute Command that does exactly what the name implies — executes commands on the underlying operating system with the privileges of the n8n service.
“Imagine a large enterprise with 10,000+ employees with one n8n server that anyone uses,” the researchers wrote in their report. “A compromised n8n instance doesn’t just mean losing one system — it means handing attackers the keys to everything. API credentials, OAuth tokens, database connections, cloud storage, all centralized in one place. N8n becomes a single point of failure and a goldmine for threat actors.”
View the full article

• 0 comments
• 54 views

CSOonline

January 7Jan 7

AirPods Pro 3 Drop Under $200 for the First Time in 2026

AirPods Pro 3 Drop Under $200 for the First Time in 2026

Best Buy today has a match of the record low price on the AirPods Pro 3, available for $199.99, down from $249.00. This is the first time in 2026 that we've tracked the AirPods Pro 3 at this low price, which matches the best deal we saw over the holiday season. Right now, only Best Buy has this best-ever price on the AirPods Pro 3.

Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.

This model of the AirPods Pro launched in September 2025 and have 2x better Active Noise Cancellation than the previous generation, better audio quality, a revised fit that's meant to improve comfort and stability, Live Translation for in-person conversations, and heart rate sensing for workouts.

$49 OFFAirPods Pro 3 for $199.99

Keep up with all of this week's best discounts on Apple products and related accessories in our dedicated Apple Deals roundup.



Deals Newsletter

Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!




Related Roundup: Apple Deals
This article, "AirPods Pro 3 Drop Under $200 for the First Time in 2026" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 42 views

reporter

January 7Jan 7

CES 2026: LIFX Introduces Matter-Compatible Smart Mirror and Dimmer Switch

CES 2026: LIFX Introduces Matter-Compatible Smart Mirror and Dimmer Switch

LIFX, known for its smart lighting options, debuted a new SuperColor Mirror at CES 2026. The SuperColor Mirror features both front and back lighting options, and it connects to an Apple Home setup using Matter.


There are lighting modes like Make Up Check and Anti-Fog that users can select, plus brightness and color can be adjusted. LIFX says that other Matter-enabled devices can be controlled using three physical buttons that are on the mirror.

The mirror features polychrome blended color technology with multiple lighting zones. Like other SuperColor LIFX products, the mirror's lights can shift and morph smoothly between different colors, and there are color effects like flame and paint.

The SuperColor Mirror and other LIFX devices will get a Thread upgrade later in 2026, so they can connect to Matter over Thread in addition to Wi-Fi.

LIFX is launching new Smart Dimmer switches that include four customizable buttons and a built-in 8-zone light bar. The Dimmer Switch has Matter support and it is designed to work with both smart and traditional lights. There are single tap, double tap, and long press gestures, so it can perform multiple tasks when assigned to activate scenes.

The Smart Dimmer includes dimming support for LED, Halogen, or incandescent bulbs, along with full scene and effect control for LIFX lights. With the Matter integration, it should also be able to control other Matter-connected lights.

There are also new affordable Matter-connected smart lighting options that are available from LIFX. The Everyday A19 LED Light Bulb features 800 lumens and support for multiple colors, while the 20-foot Everyday Lightstrip features 24 addressable zones for flowing effects and a 4-button physical controller for activating scenes. The Everyday Bulb is priced at $23 for two and it is available now from Amazon, while the Everyday Lightstrip will launch later in January.

The Smart Dimmer is set to launch in the second quarter of 2026 for $30. The SuperColor Mirror will also come out in the second quarter, but pricing has yet to be announced.Tag: CES 2026
This article, "CES 2026: LIFX Introduces Matter-Compatible Smart Mirror and Dimmer Switch" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 41 views

reporter

January 7Jan 7

Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches

Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches

A cybercrime gang known as Black Cat has been attributed to a search engine optimization (SEO) poisoning campaign that employs fraudulent sites advertising popular software to trick users into downloading a backdoor capable of stealing sensitive data. According to a report published by the National Computer Network Emergency Response Technical Team/Coordination Center of China (CNCERT/CC) andView the full article

• 0 comments
• 34 views

Hacker News

January 7Jan 7

WhatsApp Enhances Group Chats With Three New Features

WhatsApp Enhances Group Chats With Three New Features

WhatsApp announced three new group chat features today, expanding how users can interact and add context to their role within conversations involving many participants.


The Meta-owned messaging app is rolling out Member Tags, Text Stickers, and Event Reminders, all of which are designed to give group chats more flexibility and organization.

Member Tags let you assign yourself different roles in different group chats for more context – so you can be "Coach" in one thread and "Dad" in another, for example. Meanwhile, Text Stickers instantly turn typed words into sticker graphics that users can then save to custom packs.

Lastly, with Event Reminders, now when you create and send an event in your group chat you can set custom early reminders for your invitees. Meta says that "this helps everyone remember to commute to the party you're hosting or hop on the call at the right time."

The new group chat features are available to WhatsApp users worldwide, and follow other recent upgrades to the chat platform, including third-party chat support in the EU and WhatsApp for Apple Watch.Tag: WhatsApp
This article, "WhatsApp Enhances Group Chats With Three New Features" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 38 views

reporter

January 7Jan 7

Spotify's Friend Listening Activity Feature Finally Comes to Mobile

Spotify's Friend Listening Activity Feature Finally Comes to Mobile

Spotify is bringing its long-running Listening Activity feature to its mobile apps, so now you can see what your friends are listening to on the streaming service when you're away from your desk.


For years, Spotify's desktop app has allowed users to check on their friends' listening habits via a Friend Activity sidebar, but the ability has not been available on iOS and Android apps until now.

If you're familiar with Listening Activity, its appearance on mobile shouldn't throw up any real surprises. You can view what people are listening to in the app's sidebar, next to any messages, and you can tap the track to listen to it yourself, add it to your library, or react to it with emoji.

The feature remains opt-in, and can be enabled in the app's settings, under "Privacy and social." There's also an option here to start a private session, which temporarily hides your listening activity from your followers (private sessions automatically end after six hours), plus you can choose to make any recently played artists show on your profile.

As noted by The Verge, another addition in this update is a Request to Jam feature. If you're a premium user, you can now tap a Jam button in a chat to send a request. If the person accepts, their listening is remotely synced with your own, and the two of you can add songs to the queue while chatting about what's playing.

Spotify will also suggest songs based on your shared tastes. As for users on Spotify's free plan, they can be invited to a jam, but they can't start their own jam to invite others.

Listening Activity and Request a Jam are rolling out to Spotify users on iOS and Android now in markets where messages are available.Tag: Spotify
This article, "Spotify's Friend Listening Activity Feature Finally Comes to Mobile" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 35 views

reporter

January 7Jan 7

Amazon Introduces Massive Discounts on M5 iPad Pro, Get Up to $518 Off Select Models

Amazon Introduces Massive Discounts on M5 iPad Pro, Get Up to $518 Off Select Models

Amazon this week is offering discounts across the M5 iPad Pro lineup, including both 11-inch and 13-inch models. The highlight this time around is the 2TB Wi-Fi 11-inch M5 iPad Pro, which is on sale for $1,480.80 with an on-page coupon, a massive discount of $518 on the original price of $1,999.00.

Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.

Otherwise, prices start at $899.99 for the 256GB Wi-Fi 11-inch M5 iPad Pro at Amazon, down from $999.00. Many of the deals in this sale match — or beat — the record low prices we tracked during Black Friday.

Note: You won't see the deal price until checkout.
$518 OFF11-inch M5 iPad Pro (2TB Wi-Fi) for $1,480.80

For the larger models, you can save up to $180 on the 13-inch M5 iPad Pro on Amazon this week. If you're shopping for the 2TB Nano-Texture Glass Wi-Fi model, Amazon has this tablet for $2,219.00, down from $2,399.00, as well as a few other 13-inch models between $100 and $170 off.

11-Inch M5 iPad Pro

256GB Wi-Fi - $899.99 ($99 off)
512GB Wi-Fi - $1,099.00 ($100 off)
1TB Wi-Fi - $1,499.99 ($99 off)
1TB Nano-Texture Glass Wi-Fi - $1,576.00 ($123 off)
2TB Wi-Fi - $1,480.80 ($518 off)
2TB Nano-Texture Glass Wi-Fi - $1,999.00 ($100 off)
13-Inch M5 iPad Pro

256GB Wi-Fi - $1,199.99 ($99 off)
512GB Wi-Fi - $1,399.99 ($99 off)
1TB Wi-Fi - $1,785.00 ($114 off)
2TB Wi-Fi - $2,092.09 ($206 off)
2TB Nano-Texture Glass Wi-Fi - $2,219.00 ($180 off)

If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.



Deals Newsletter

Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!




Related Roundup: Apple Deals
This article, "Amazon Introduces Massive Discounts on M5 iPad Pro, Get Up to $518 Off Select Models" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 63 views

reporter

January 7Jan 7

Bug in Open WebUI macht Kostenlos-Tool zur Backdoor

Bug in Open WebUI macht Kostenlos-Tool zur Backdoor

Der Schweregrad des Bugs in Open WebUI wird als hoch eingestuft.
Wirestock Creators- shutterstock.com
Sicherheitsforschende von Cato Networks haben eine Schwachstelle in Open WebUI, einem selbstgehosteten Enterprise Interface für Large Language Models (LLM), entdeckt. Diese soll es externen Modell-Servern, die über das Feature „Direct Connections“ eingebunden sind, ermöglichen, Schadcode einzuschleusen und KI-Workloads zu übernehmen.
Das Problem, gekennzeichnet als CVE-2025-64496, beruht auf dem unsicheren Handling von Server-Sent Events (SSE). Dadurch können Benutzerkonten übernommen und in einigen Fällen – bei erweiterten Berechtigungen – auch per Remote Code Execution (RCE) auf Backend-Servern ausgeführt werden.
Laut den Experten kann das Frontend dazu verleitet werden, unbemerkt eingeschleustes JavaScript auszuführen. Hierfür muss ein Mitarbeitender Open WebUI mit einem von den Angreifenden kontrollierten Modell-Endpoint verbinden, beispielsweise unter dem Vorwand einer „kostenlosen GPT-4-Alternative“.
Dieser Code stiehlt dann JSON Web Tokens (JWTs) aus dem Browser-Kontext und soll den Kriminellen so dauerhaften Zugriff auf den KI-Arbeitsbereich, Dokumente, Chats und eingebettete API-Schlüssel des Opfers ermöglichen.
Der Fehler betrifft Open WebUI-Versionen bis einschließlich 0.6.34 und wurde in Version 0.6.35 behoben. Unternehmen sollten daher ihre Produktionsumgebungen umgehend patchen.
Krise statt Komfort
Laut den Cato-Forschenden liegt das Problem bei Direct Connections, einer Funktion, die es Usern ermöglicht, Open WebUI mit externen, OpenAI-kompatiblen Modell-Servern zu verbinden. Der SSE-Handler der Plattform vertraut eingehenden Events dieser Server, insbesondere solchen mit dem Tag „{type: execute}“. Deren Payload führt er dann über einen dynamischen JavaScript-Konstruktor aus.
Wenn sich ein User mit einem bösartigen Server verbindet, was durch Social Engineering leicht möglich ist, kann dieser Server eine SSE mit ausführbarem JavaScript senden. Dieses Skript hat vollen Zugriff auf den Speicher des Browsers, einschließlich des JWT, welches zur Authentifizierung verwendeten wird.
„Open WebUI speichert das JWT-Token im localStorage“, so die Experten von Cato in einem Blogbeitrag. „Jedes auf der Seite ausgeführte Skript kann darauf zugreifen. Tokens sind standardmäßig langlebig, haben kein HttpOnly-Attribut und sind Tab-übergreifend. In Kombination mit dem Execute-Event bietet dies ein Zeitfenster für die Kontoübernahme.“
Laut einer Beschreibung der National Vulnerability Database (NVD) erfordert der Angriff jedoch, dass das Opfer Direct Connections aktiviert, die standardmäßig deaktiviert sind, und die schädliche Modell-URL des Angreifers hinzufügt.
Eskalation bis hin zur Remote-Code-Ausführung
Das Risiko endet jedoch nicht mit der Kontoübernahme: Sollte das kompromittierte Konto über Berechtigungen für Workspace Tools verfügen, können Angreifende dieses Session-Token nutzen. Hiermit sind sie dann in der Lage, authentifizierten Python-Code über die Tools-API von Open WebUI einzuschleusen, der ohne Sandboxing oder Validierung ausgeführt wird.
Damit wird laut den Experten ein kompromittierter Browser zu einer vollständigen Remote Code-Execution auf dem Backend-Server. Sobald Angreifende Zugriff auf die Python-Ausführung erlangt haben, können sie
Persistenzmechanismen installieren, in interne Netzwerke eindringen, auf sensible Datenspeicher zugreifen, oder laterale Attacken durchführen. Die Schwachstelle erhielt vom NVD eine hohe Schweregradbewertung von 8/10 sowie 7,3/10 von GitHub. Dass sie dabei als hoch statt kritisch eingestuft wurde, hat zwei Gründe: Zum einen setzt der Exploit voraus, dass das Direct-Connections-Feature aktiviert wurde. Zum anderen muss ein User zunächst dazu verleitet werden, eine Verbindung mit einem manipulierten externen Modellserver herzustellen.
Der Fehler in Open WebUI v0.6.35 kann per Patch-Mitigation behoben werden. Dabei werden „execute“-SSE-Events aus Direct Connections vollständig blockiert. Organisationen, die noch ältere Versionen verwenden, sind jedoch weiterhin gefährdet.
Die Forschenden empfehlen zusätzlich, die Authentifizierung auf kurzlebige und rotierbare HttpOnly-Cookies umzustellen: „Kombinieren Sie dies mit einer strengen CSP und verbieten Sie die dynamische Codeauswertung“. (tf)
View the full article

• 0 comments
• 39 views

CSOonline

January 7Jan 7

Bug in Open WebUI macht Kostenlos-Tool zur Backdoor

Bug in Open WebUI macht Kostenlos-Tool zur Backdoor

Der Schweregrad des Bugs in Open WebUI wird als hoch eingestuft.
Wirestock Creators- shutterstock.com
Sicherheitsforschende von Cato Networks haben eine Schwachstelle in Open WebUI, einem selbstgehosteten Enterprise Interface für Large Language Models (LLM), entdeckt. Diese soll es externen Modell-Servern, die über das Feature „Direct Connections“ eingebunden sind, ermöglichen, Schadcode einzuschleusen und KI-Workloads zu übernehmen.
Das Problem, gekennzeichnet als CVE-2025-64496, beruht auf dem unsicheren Handling von Server-Sent Events (SSE). Dadurch können Benutzerkonten übernommen und in einigen Fällen – bei erweiterten Berechtigungen – auch per Remote Code Execution (RCE) auf Backend-Servern ausgeführt werden.
Laut den Experten kann das Frontend dazu verleitet werden, unbemerkt eingeschleustes JavaScript auszuführen. Hierfür muss ein Mitarbeitender Open WebUI mit einem von den Angreifenden kontrollierten Modell-Endpoint verbinden, beispielsweise unter dem Vorwand einer „kostenlosen GPT-4-Alternative“.
Dieser Code stiehlt dann JSON Web Tokens (JWTs) aus dem Browser-Kontext und soll den Kriminellen so dauerhaften Zugriff auf den KI-Arbeitsbereich, Dokumente, Chats und eingebettete API-Schlüssel des Opfers ermöglichen.
Der Fehler betrifft Open WebUI-Versionen bis einschließlich 0.6.34 und wurde in Version 0.6.35 behoben. Unternehmen sollten daher ihre Produktionsumgebungen umgehend patchen.
Krise statt Komfort
Laut den Cato-Forschenden liegt das Problem bei Direct Connections, einer Funktion, die es Usern ermöglicht, Open WebUI mit externen, OpenAI-kompatiblen Modell-Servern zu verbinden. Der SSE-Handler der Plattform vertraut eingehenden Events dieser Server, insbesondere solchen mit dem Tag „{type: execute}“. Deren Payload führt er dann über einen dynamischen JavaScript-Konstruktor aus.
Wenn sich ein User mit einem bösartigen Server verbindet, was durch Social Engineering leicht möglich ist, kann dieser Server eine SSE mit ausführbarem JavaScript senden. Dieses Skript hat vollen Zugriff auf den Speicher des Browsers, einschließlich des JWT, welches zur Authentifizierung verwendeten wird.
„Open WebUI speichert das JWT-Token im localStorage“, so die Experten von Cato in einem Blogbeitrag. „Jedes auf der Seite ausgeführte Skript kann darauf zugreifen. Tokens sind standardmäßig langlebig, haben kein HttpOnly-Attribut und sind Tab-übergreifend. In Kombination mit dem Execute-Event bietet dies ein Zeitfenster für die Kontoübernahme.“
Laut einer Beschreibung der National Vulnerability Database (NVD) erfordert der Angriff jedoch, dass das Opfer Direct Connections aktiviert, die standardmäßig deaktiviert sind, und die schädliche Modell-URL des Angreifers hinzufügt.
Eskalation bis hin zur Remote-Code-Ausführung
Das Risiko endet jedoch nicht mit der Kontoübernahme: Sollte das kompromittierte Konto über Berechtigungen für Workspace Tools verfügen, können Angreifende dieses Session-Token nutzen. Hiermit sind sie dann in der Lage, authentifizierten Python-Code über die Tools-API von Open WebUI einzuschleusen, der ohne Sandboxing oder Validierung ausgeführt wird.
Damit wird laut den Experten ein kompromittierter Browser zu einer vollständigen Remote Code-Execution auf dem Backend-Server. Sobald Angreifende Zugriff auf die Python-Ausführung erlangt haben, können sie
Persistenzmechanismen installieren, in interne Netzwerke eindringen, auf sensible Datenspeicher zugreifen, oder laterale Attacken durchführen. Die Schwachstelle erhielt vom NVD eine hohe Schweregradbewertung von 8/10 sowie 7,3/10 von GitHub. Dass sie dabei als hoch statt kritisch eingestuft wurde, hat zwei Gründe: Zum einen setzt der Exploit voraus, dass das Direct-Connections-Feature aktiviert wurde. Zum anderen muss ein User zunächst dazu verleitet werden, eine Verbindung mit einem manipulierten externen Modellserver herzustellen.
Der Fehler in Open WebUI v0.6.35 kann per Patch-Mitigation behoben werden. Dabei werden „execute“-SSE-Events aus Direct Connections vollständig blockiert. Organisationen, die noch ältere Versionen verwenden, sind jedoch weiterhin gefährdet.
Die Forschenden empfehlen zusätzlich, die Authentifizierung auf kurzlebige und rotierbare HttpOnly-Cookies umzustellen: „Kombinieren Sie dies mit einer strengen CSP und verbieten Sie die dynamische Codeauswertung“. (tf)
View the full article

• 0 comments
• 42 views

CSOonline

January 7Jan 7

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Suttipun – shutterstock.com
Sicherheitsexperten haben kürzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomware as a Service)-Dienst Ransomhouse massiv verbessert hat. Wie das Threat-Intelligence-Team von Palo Alto Networks berichtet, nutzt die Gruppe jetzt ein fortschrittliches duales Verschlüsselungssystem.
Die Angriffe basieren auf einer aktualisierten Version des Verschlüsselungs-Trojaner mit dem Codenamen „Mario“. Der Trojaner verwendet dabei nicht nur einen, sondern zwei separate Schlüssel. Der primäre Schlüssel umfasst 32 Byte, während der sekundäre Schlüssel acht Byte hat. Dadurch ist es nahezu unmöglich, die Daten wiederherzustellen.
Dabei kommt ein spezielles Tool namens „MrAgent“ zum Einsatz, um Attacken auf VMware ESXi-Hypervisoren zu automatisieren. „Mit MrAgent haben die Angreifer ihre Fähigkeiten massiv erweitert“, erklärt Andy Schneider, CISO bei Palo Alto Networks gegenüber CSO. Damit können sie Firewalls neutralisieren und ganze Hypervisor-Cluster in großem Umfang verschlüsseln, was innerhalb von Minuten zu maximalen Störungen führt.“
Deutschland als Hauptziel
Darüber hinaus bleibt auch die Taktik mit der doppelten Erpressung bestehen: Neben der Verschlüsselung der Systeme werden auch sensible Daten gestohlen. Palo Alto Networks zufolge haben es die Cyberkriminellen mit ihrer neuen Kampagne vor allem auf deutsche Unternehmen mit VMware-Infrastruktur abgesehen.
Schneider geht davon aus, dass Deutschland aufgrund seiner besonderen Infrastrukturlandschaft derzeit ein attraktives Ziel darstellt. „Im Gegensatz zu Märkten, die Public-Cloud-Strategien umfassender übernommen haben, setzen viele deutsche Unternehmen – insbesondere aus der Industrie und Technologiebranche – weiterhin stark auf eigene Rechenzentren“, erklärt er. „Diese werden von VMware dominiert.“
Der Experte verweist darauf, dass sich dieser Trend bereits in den jüngsten Angriffen auf deutsche Unternehmen in der Fertigung, der Luft- und Raumfahrt sowie der Produktion gezeigt hat. „Diese hohe Konzentration von ESXi-Infrastruktur macht die deutsche Industrie zu einem ertragreichen, effizienten Ziel für Ransomhous.“
Um sich vor solchen Angriffen zu schützen, empfehlen einige Sicherheitsexperten Unternehmen, ihre Verteidigungsstrategien anzupassen. Dazu zählen beispielsweise die Härtung virtualisierter Umgebungen, unveränderliche Backups und strenge Netzsegmentierung.
Keine herkömmliche Ransomware-Bande
Die Gruppe Jolly Scorpius unterscheidet sich in ihrem Auftreten von herkömmlichen Ransomware-Banden. Wie der CISO von Palo Alto Networks unterstreicht, geben sich die Akteure oft als „Sicherheitsauditoren” und nicht als reine Cyberkriminelle aus. „Sie behaupten, Schwachstellen aufzudecken, die durch schlechte Sicherheitspraktiken verursacht wurden, während sie rücksichtslose Doppel-Erpressungsangriffe durchführen.“
Laut Schneider lässt sich die Gruppe trotz ihrer professionellen Fassade mit russischsprachigen Ursprüngen in Verbindung bringen (insbesondere mit der „Babuk”-Codefamilie). „Die Auswahl ihrer Ziele steht oft im Einklang mit allgemeinen geopolitischen Spannungen. Indem sie sich auf kritische Lieferketten und Infrastrukturen in NATO-Ländern wie Deutschland konzentriert, profitiert sie von einem toleranten Umfeld in ihrer Heimatregion.“
View the full article

• 0 comments
• 33 views

CSOonline

January 7Jan 7

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Suttipun – shutterstock.com
Sicherheitsexperten haben kürzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomware as a Service)-Dienst Ransomhouse massiv verbessert hat. Wie das Threat-Intelligence-Team von Palo Alto Networks berichtet, nutzt die Gruppe jetzt ein fortschrittliches duales Verschlüsselungssystem.
Die Angriffe basieren auf einer aktualisierten Version des Verschlüsselungs-Trojaner mit dem Codenamen „Mario“. Der Trojaner verwendet dabei nicht nur einen, sondern zwei separate Schlüssel. Der primäre Schlüssel umfasst 32 Byte, während der sekundäre Schlüssel acht Byte hat. Dadurch ist es nahezu unmöglich, die Daten wiederherzustellen.
Dabei kommt ein spezielles Tool namens „MrAgent“ zum Einsatz, um Attacken auf VMware ESXi-Hypervisoren zu automatisieren. „Mit MrAgent haben die Angreifer ihre Fähigkeiten massiv erweitert“, erklärt Andy Schneider, CISO bei Palo Alto Networks gegenüber CSO. Damit können sie Firewalls neutralisieren und ganze Hypervisor-Cluster in großem Umfang verschlüsseln, was innerhalb von Minuten zu maximalen Störungen führt.“
Deutschland als Hauptziel
Darüber hinaus bleibt auch die Taktik mit der doppelten Erpressung bestehen: Neben der Verschlüsselung der Systeme werden auch sensible Daten gestohlen. Palo Alto Networks zufolge haben es die Cyberkriminellen mit ihrer neuen Kampagne vor allem auf deutsche Unternehmen mit VMware-Infrastruktur abgesehen.
Schneider geht davon aus, dass Deutschland aufgrund seiner besonderen Infrastrukturlandschaft derzeit ein attraktives Ziel darstellt. „Im Gegensatz zu Märkten, die Public-Cloud-Strategien umfassender übernommen haben, setzen viele deutsche Unternehmen – insbesondere aus der Industrie und Technologiebranche – weiterhin stark auf eigene Rechenzentren“, erklärt er. „Diese werden von VMware dominiert.“
Der Experte verweist darauf, dass sich dieser Trend bereits in den jüngsten Angriffen auf deutsche Unternehmen in der Fertigung, der Luft- und Raumfahrt sowie der Produktion gezeigt hat. „Diese hohe Konzentration von ESXi-Infrastruktur macht die deutsche Industrie zu einem ertragreichen, effizienten Ziel für Ransomhouse.“
Um sich vor solchen Angriffen zu schützen, empfehlen einige Sicherheitsexperten Unternehmen, ihre Verteidigungsstrategien anzupassen. Dazu zählen beispielsweise die Härtung virtualisierter Umgebungen, unveränderliche Backups und strenge Netzsegmentierung.
Keine herkömmliche Ransomware-Bande
Die Gruppe Jolly Scorpius unterscheidet sich in ihrem Auftreten von herkömmlichen Ransomware-Banden. Wie der CISO von Palo Alto Networks unterstreicht, geben sich die Akteure oft als „Sicherheitsauditoren” und nicht als reine Cyberkriminelle aus. „Sie behaupten, Schwachstellen aufzudecken, die durch schlechte Sicherheitspraktiken verursacht wurden, während sie rücksichtslose Doppel-Erpressungsangriffe durchführen.“
Laut Schneider lässt sich die Gruppe trotz ihrer professionellen Fassade mit russischsprachigen Ursprüngen in Verbindung bringen (insbesondere mit der „Babuk”-Codefamilie). „Die Auswahl ihrer Ziele steht oft im Einklang mit allgemeinen geopolitischen Spannungen. Indem sie sich auf kritische Lieferketten und Infrastrukturen in NATO-Ländern wie Deutschland konzentriert, profitiert sie von einem toleranten Umfeld in ihrer Heimatregion.“
View the full article

• 0 comments
• 32 views

CSOonline

January 7Jan 7

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Suttipun – shutterstock.com
Sicherheitsexperten haben kürzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomware as a Service)-Dienst Ransomhouse massiv verbessert hat. Wie das Threat-Intelligence-Team von Palo Alto Networks berichtet, nutzt die Gruppe jetzt ein fortschrittliches duales Verschlüsselungssystem.
Die Angriffe basieren auf einer aktualisierten Version des Verschlüsselungs-Trojaner mit dem Codenamen „Mario“. Der Trojaner verwendet dabei nicht nur einen, sondern zwei separate Schlüssel. Der primäre Schlüssel umfasst 32 Byte, während der sekundäre Schlüssel acht Byte hat. Dadurch ist es nahezu unmöglich, die Daten wiederherzustellen.
Dabei kommt ein spezielles Tool namens „MrAgent“ zum Einsatz, um Attacken auf VMware ESXi-Hypervisoren zu automatisieren. „Mit MrAgent haben die Angreifer ihre Fähigkeiten massiv erweitert“, erklärt Andy Schneider, CISO bei Palo Alto Networks gegenüber CSO. Damit können sie Firewalls neutralisieren und ganze Hypervisor-Cluster in großem Umfang verschlüsseln, was innerhalb von Minuten zu maximalen Störungen führt.“
Deutschland als Hauptziel
Darüber hinaus bleibt auch die Taktik mit der doppelten Erpressung bestehen: Neben der Verschlüsselung der Systeme werden auch sensible Daten gestohlen. Palo Alto Networks zufolge haben es die Cyberkriminellen mit ihrer neuen Kampagne vor allem auf deutsche Unternehmen mit VMware-Infrastruktur abgesehen.
Schneider geht davon aus, dass Deutschland aufgrund seiner besonderen Infrastrukturlandschaft derzeit ein attraktives Ziel darstellt. „Im Gegensatz zu Märkten, die Public-Cloud-Strategien umfassender übernommen haben, setzen viele deutsche Unternehmen – insbesondere aus der Industrie und Technologiebranche – weiterhin stark auf eigene Rechenzentren“, erklärt er. „Diese werden von VMware dominiert.“
Der Experte verweist darauf, dass sich dieser Trend bereits in den jüngsten Angriffen auf deutsche Unternehmen in der Fertigung, der Luft- und Raumfahrt sowie der Produktion gezeigt hat. „Diese hohe Konzentration von ESXi-Infrastruktur macht die deutsche Industrie zu einem ertragreichen, effizienten Ziel für Ransomhouse.“
Um sich vor solchen Angriffen zu schützen, empfehlen einige Sicherheitsexperten Unternehmen, ihre Verteidigungsstrategien anzupassen. Dazu zählen beispielsweise die Härtung virtualisierter Umgebungen, unveränderliche Backups und strenge Netzsegmentierung.
Keine herkömmliche Ransomware-Bande
Die Gruppe Jolly Scorpius unterscheidet sich in ihrem Auftreten von herkömmlichen Ransomware-Banden. Wie der CISO von Palo Alto Networks unterstreicht, geben sich die Akteure oft als „Sicherheitsauditoren” und nicht als reine Cyberkriminelle aus. „Sie behaupten, Schwachstellen aufzudecken, die durch schlechte Sicherheitspraktiken verursacht wurden, während sie rücksichtslose Doppel-Erpressungsangriffe durchführen.“
Laut Schneider lässt sich die Gruppe trotz ihrer professionellen Fassade mit russischsprachigen Ursprüngen in Verbindung bringen (insbesondere mit der „Babuk”-Codefamilie). „Die Auswahl ihrer Ziele steht oft im Einklang mit allgemeinen geopolitischen Spannungen. Indem sie sich auf kritische Lieferketten und Infrastrukturen in NATO-Ländern wie Deutschland konzentriert, profitiert sie von einem toleranten Umfeld in ihrer Heimatregion.“
View the full article

• 0 comments
• 30 views

CSOonline

January 7Jan 7

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen

Suttipun – shutterstock.com
Sicherheitsexperten haben kürzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomware as a Service)-Dienst Ransomhouse massiv verbessert hat. Wie das Threat-Intelligence-Team von Palo Alto Networks berichtet, nutzt die Gruppe jetzt ein fortschrittliches duales Verschlüsselungssystem.
Die Angriffe basieren auf einer aktualisierten Version des Verschlüsselungs-Trojaner mit dem Codenamen „Mario“. Der Trojaner verwendet dabei nicht nur einen, sondern zwei separate Schlüssel. Der primäre Schlüssel umfasst 32 Byte, während der sekundäre Schlüssel acht Byte hat. Dadurch ist es nahezu unmöglich, die Daten wiederherzustellen.
Dabei kommt ein spezielles Tool namens „MrAgent“ zum Einsatz, um Attacken auf VMware ESXi-Hypervisoren zu automatisieren. „Mit MrAgent haben die Angreifer ihre Fähigkeiten massiv erweitert“, erklärt Andy Schneider, CISO bei Palo Alto Networks gegenüber CSO. Damit können sie Firewalls neutralisieren und ganze Hypervisor-Cluster in großem Umfang verschlüsseln, was innerhalb von Minuten zu maximalen Störungen führt.“
Deutschland als Hauptziel
Darüber hinaus bleibt auch die Taktik mit der doppelten Erpressung bestehen: Neben der Verschlüsselung der Systeme werden auch sensible Daten gestohlen. Palo Alto Networks zufolge haben es die Cyberkriminellen mit ihrer neuen Kampagne vor allem auf deutsche Unternehmen mit VMware-Infrastruktur abgesehen.
Schneider geht davon aus, dass Deutschland aufgrund seiner besonderen Infrastrukturlandschaft derzeit ein attraktives Ziel darstellt. „Im Gegensatz zu Märkten, die Public-Cloud-Strategien umfassender übernommen haben, setzen viele deutsche Unternehmen – insbesondere aus der Industrie und Technologiebranche – weiterhin stark auf eigene Rechenzentren“, erklärt er. „Diese werden von VMware dominiert.“
Der Experte verweist darauf, dass sich dieser Trend bereits in den jüngsten Angriffen auf deutsche Unternehmen in der Fertigung, der Luft- und Raumfahrt sowie der Produktion gezeigt hat. „Diese hohe Konzentration von ESXi-Infrastruktur macht die deutsche Industrie zu einem ertragreichen, effizienten Ziel für Ransomhous.“
Um sich vor solchen Angriffen zu schützen, empfehlen einige Sicherheitsexperten Unternehmen, ihre Verteidigungsstrategien anzupassen. Dazu zählen beispielsweise die Härtung virtualisierter Umgebungen, unveränderliche Backups und strenge Netzsegmentierung.
Keine herkömmliche Ransomware-Bande
Die Gruppe Jolly Scorpius unterscheidet sich in ihrem Auftreten von herkömmlichen Ransomware-Banden. Wie der CISO von Palo Alto Networks unterstreicht, geben sich die Akteure oft als „Sicherheitsauditoren” und nicht als reine Cyberkriminelle aus. „Sie behaupten, Schwachstellen aufzudecken, die durch schlechte Sicherheitspraktiken verursacht wurden, während sie rücksichtslose Doppel-Erpressungsangriffe durchführen.“
Laut Schneider lässt sich die Gruppe trotz ihrer professionellen Fassade mit russischsprachigen Ursprüngen in Verbindung bringen (insbesondere mit der „Babuk”-Codefamilie). „Die Auswahl ihrer Ziele steht oft im Einklang mit allgemeinen geopolitischen Spannungen. Indem sie sich auf kritische Lieferketten und Infrastrukturen in NATO-Ländern wie Deutschland konzentriert, profitiert sie von einem toleranten Umfeld in ihrer Heimatregion.“
View the full article

• 0 comments
• 35 views

CSOonline

January 7Jan 7

CES 2026: Dell Unveils World's First 52-Inch 6K Thunderbolt Display

CES 2026: Dell Unveils World's First 52-Inch 6K Thunderbolt Display

Dell announced the UltraSharp 52 Thunderbolt Hub Monitor at CES 2026, billing it as the "world's first 52-inch 6K display."


At 52 inches, the ultra-wide curved monitor features a 21:9 aspect ratio with 6,144 x 2,560 resolution at 129 pixels per inch and supports refresh rates up to 120Hz.

The display uses IPS Black panel technology for deeper blacks and improved contrast compared to standard IPS panels, with brightness listed as 400 cd/m. Dell says it emits up to 60% less blue light than competing monitors while maintaining professional-grade color accuracy, and it includes an ambient light sensor for eye comfort during extended use.

The display's connectivity support is pretty eye-watering, since it basically doubles as a Thunderbolt dock around the back. It includes one Thunderbolt 4 port delivering up to 140W power delivery, two HDMI 2.1 ports, two DisplayPort 1.4 ports, three USB-C upstream ports, and several downstream USB-C and USB-A ports. If that wasn't enough, a 2.5Gbps Ethernet port rounds out the package.

The monitor supports connecting up to four PCs simultaneously through its Picture-by-Picture mode with screen partitioning, while built-in KVM functionality allows users to control multiple connected machines with a single keyboard and mouse.


Dell is touting the display as a multi-monitor replacement for financial traders, data scientists, engineers, and executives who need maximum screen real estate, so naturally it doesn't come cheap: The UltraSharp 52 Thunderbolt Hub Monitor is available now from the Dell website for $2,899 with a stand or $2,799 without.Tag: CES 2026
This article, "CES 2026: Dell Unveils World's First 52-Inch 6K Thunderbolt Display" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 34 views

reporter

January 7Jan 7

How to eliminate IT blind spots in the modern, AI-driven enterprise

How to eliminate IT blind spots in the modern, AI-driven enterprise

The more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing number of blind spots – hidden misconfigurations, inconsistent controls, and unpredictable behaviors across systems and AI agents – that can introduce significant risk long before a red flag appears in tooling.
How can CSOs and other security leaders stay ahead of this increasingly dynamic attack surface while minimizing tool sprawl? We asked members of the Foundry Influencer Network to share their best advice for strengthening security posture. Across all experts, a clear message emerges: The answer lies in improving visibility across existing systems, normalizing data flows, and applying AI-driven intelligence to both human processes and technical signals.
Shift from reactive postures to unified visibility
Avoiding blind spots requires a fundamental shift in how organizations think about visibility, says Mircea Trofimciuc (LinkedIn: Mircea Trofimciuc), Vice President of Agentic AI (Product & Engineering) at RealPage, Inc.
“To avoid blind spots without stacking yet another tool on the pile, CSOs need to shift from a purely reactive posture to a unified visibility strategy. The current API security, code scanning, observability, and monitoring capabilities all still have a clear place — they remain foundational,” he says. “But as enterprises become increasingly AI-dependent and distributed, these traditional signals must be complemented with a new layer of intelligence: the detection of agentic AI behavior via pattern adherence within systems.”
He notes that many blind spots now emerge from the behavior of AI systems themselves—not just from static configuration issues—and this demands a more dynamic view of the environment. “By continuously evaluating whether AI agents, services, and automations are behaving within defined, governed controls, rather than simply checking for static misconfigurations, security leaders can surface hidden risks early, across the entire digital footprint,” Trofimciuc says.
Peter van Barneveld (LinkedIn: Peter van Barneveld), Group Innovation Manager at Dustin, adds that AI introduces vulnerabilities that often fall outside traditional defenses.
“Besides traditional security risks, AI introduces new vulnerabilities such as data poisoning and prompt injection attacks, which often fall outside traditional security controls,” he says. “This is why it is essential to have a modular approach when it comes to security architecture and platform. It should be possible to leverage current possibilities on existing platforms, such as Azure or AWS, and to easily extend with new security building blocks so that the entire IT landscape can be covered, including the new AI stack components.”
Align people, processes, and data to reveal hidden risks
Several experts emphasized that more tooling is not the answer. Instead, the answer lies in greater alignment.
Will Kelly (LinkedIn: Will Kelly), a writer focused on AI and the cloud, notes that visibility often breaks down not because of missing tools but because of siloed processes.
“CSOs don’t always need to throw more tools at the problem to reduce blind spots. They need to better align people, processes, and data. Start by using existing FinOps and cloud cost metrics to identify anomalies in usage patterns, which often reveal hidden risks such as shadow IT or misconfigured services,” he says. “Collaboration between security and FinOps teams can help surface these insights without a new tool investment. Also, regular audits and tagging practices across cloud environments help make your cloud footprint more transparent and manageable.”
Sarv Kohli (LinkedIn: Sarv Kohli), CIO and VP Technology and Adjunct Professor at Georgia Tech Professional Education, agrees that the biggest opportunity for reducing blind spots comes from better orchestration, not expanding the stack.
“Connect technology with data, people, and processes. As organizations push deeper into AI, their attack surface evolves faster than any one tool can contain,” he says. “The real opportunity isn’t buying more technology; it’s in orchestrating what already exists with tighter alignment between people, processes, and data. When teams share a single, living view of their AI, cloud, and identity landscape, and stay accountable for what changes, security leaders can reveal and resolve blind spots without expanding their security stack and close hidden gaps long before they become headlines.”
Scott Schober (LinkedIn: Scott Schober), President/CEO at Berkeley Varitronics Systems, Inc., underscores the operational complexity facing modern security teams.
“It’s tough to avoid blind spots in today’s digital without spending more. The environment is just too complex to manage manually. The attack surface keeps expanding, and old manual processes just can’t keep up with AI, cloud systems, and remote teams,” he says. “From my perspective, the key isn’t just adding more tools. It’s about connecting the ones you have more effectively, automating where it helps, and really knowing your existing systems.”
Use existing telemetry and governance models to their full potential
Vivek Singh (LinkedIn: Vivek Singh), Senior Vice President of IT and Strategic Planning at PALNAR, says unified visibility is achievable using what most enterprises already have in place—if they enforce standards and normalize existing signals.
“All security leaders (CSO and VP’s) should ensure unified visibility across assets, identities, and data flows through continuous monitoring, well-defined governance, and collaboration with IT and engineering teams,” he says. “This way your dependencies on external security tools are very minimal. Removing blind spot requires normalizing existing telemetry and enforcing configuration standards and automation detection workflows.”
Anshul Gandhi (LinkedIn: Anshul Gandhi), former Senior Machine Learning Engineer at Dell Technologies, stresses the importance of treating the enterprise landscape as an interconnected system rather than isolated components.
“Security leaders need the ability to map their environment as a living, interconnected system, not as a collection of isolated components,” he says. He explains that this level of awareness depends on deeper visibility and “unifying telemetry across AI pipelines, cloud services, data platforms, and identity layers so the organization can observe how workloads, models, and data behave in real time.”
“Once this visibility exists, a genuinely data-centric posture becomes possible, where leaders track how sensitive information moves through training pipelines, inference endpoints, and distributed applications, understand which models and services can access it, and anticipate how misconfigurations could expand the blast radius of an incident,” he adds.
Others see enormous opportunity in using AI-driven automation to enhance (not expand) security tools already in use.
“CSOs have to invest heavily in AI-powered automation through agents to proactively and continuously seek and eliminate blind spots,” says Kumar Srivastava (LinkedIn: Kumar Srivastava), Chief Technology Officer at Turing Labs. “Most existing enterprise investments in security tools are not fully leveraged to their max capacity. Without investing in new tools, CSOs can dramatically increase ROI by connecting, integrating existing tools and driving deeper insight.”
A path forward: visibility through orchestration, not expansion
The expanding digital footprint created by AI, cloud services, and distributed applications cannot be secured by piling on additional tools. What’s needed is a unifying layer that grounds all this telemetry, governance, and automation in a single source of truth.
This is where a modern CMDB becomes indispensable. Beyond serving as an accurate, continuously updated system of record, a CMDB provides the structured relationships needed to build enterprise knowledge graphs. By capturing assets, configurations, dependencies, and interactions as connected data, it gives AI applications the context they require to reason, correlate signals, and detect risk across complex environments. These knowledge graphs allow AI-driven security tools and agents to understand how systems, identities, workloads, and AI services relate to one another, thereby transforming raw telemetry into actionable intelligence grounded in a trusted, authoritative view of the environment.
In doing so, a CMDB transforms fragmented visibility into coordinated insight, allowing security leaders to reveal blind spots earlier, respond faster, and strengthen posture without expanding their security stack.
To learn more, visit https://solutions.opentext.com/cloudops/discovery-and-cmdb/

View the full article

• 0 comments
• 35 views

CSOonline

January 7Jan 7

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances. The vulnerability, tracked as CVE-2026-21858 (CVSS score: 10.0), has been codenamed Ni8mare by Cyera Research Labs. Security researcher Dor Attias has beenView the full article

• 0 comments
• 32 views

Hacker News

January 7Jan 7

Logitech Blames 'Inexcusable Mistake' After Certificate Expiry Breaks macOS Apps

Logitech Blames 'Inexcusable Mistake' After Certificate Expiry Breaks macOS Apps

Logitech users on macOS found themselves locked out of their mouse customizations yesterday after the company let a security certificate expire, breaking both its Logi Options+ and G HUB configuration apps.


Logitech devices like its MX Master series mice and MX Keys keyboards stopped working properly as a result of the oversight, with users unable to access their custom scrolling setup, button mappings, and gestures. It wasn't long before the Logitech subreddit was awash with frustrated reports as people discovered their configured peripherals had suddenly reverted to default settings.

The Developer ID certificate is the digital signature macOS uses to verify legitimate software. When Logitech allowed its certificate to lapse, the company's apps lost verified authenticity. As such, macOS refused to run them, in some cases leading to an endless boot loop.

Logitech has since released a patch for macOS 26 Tahoe, macOS 15 Sequoia, macOS 14 Sonoma, and macOS 13 Ventura that resolves the issue. However, users need to download and install it themselves, since the certificate expiry also prevented the apps' built-in updaters from working. Older macOS versions will get a fix "at a later time," said Logitech in a support page acknowledging the issue.

On a positive note, it seems user settings survived the blunder, with Logitech promising that profiles and customizations remain intact after manual patching is completed.

"We dropped the ball here. This is an inexcusable mistake," Logitech spokesperson ATXsantucci admitted on Reddit. "We're extremely sorry for the inconvenience caused."

(Thanks, Brad!)Tag: Logitech
This article, "Logitech Blames 'Inexcusable Mistake' After Certificate Expiry Breaks macOS Apps" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 31 views

reporter

January 7Jan 7

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Security teams are still catching malware. The problem is what they're not catching. More attacks today don't arrive as files. They don't drop binaries. They don't trigger classic alerts. Instead, they run quietly through tools that already exist inside the environment — scripts, remote access, browsers, and developer workflows. That shift is creating a blind spot. Join us for a deep-diveView the full article

• 0 comments
• 30 views

Hacker News

January 7Jan 7

Microsoft warns of a surge in phishing attacks exploiting email routing gaps

Microsoft warns of a surge in phishing attacks exploiting email routing gaps

Microsoft’s Threat Intelligence team has disclosed that threat actors are increasingly exploiting complex email routing and misconfigured domain spoof protection to make phishing messages appear as if they were sent from inside the organizations they’re targeting.
These campaigns are relying on configuration gaps, specifically scenarios where mail exchanger (MX) DNS records don’t point directly to Microsoft 365 and where Domain-based Message Authentication, Reporting & Conformance (DMARC) and Sender Policy Framework (SPF) policies are permissive or misconfigured.
“Threat actors have leveraged this vector to deliver a wide variety of phishing messages related to various phishing-as-a-service (PhaaS) platforms such as Tycoon 2FA,” Microsoft said in a security blog post.
The blog noted that while the attack vector isn’t brand new, the exploitation has picked up significantly since mid-2025, delivering phishing lures ranging from password resets to shared documents.
“Internal” routing and weak policies are at fault
The fault is with how receiving mail servers interpret incoming messages. When MX records lead to complex mail paths, such as on-premises systems or third-party relays before Microsoft 365, standard spoof protection checks like SPF hard-fail and strict DMARC enforcement may not be applied correctly.
In these cases, a phishing email can arrive with the recipient’s own address in both the “To” and “From” fields, a spoofed message that appears internal at a glance. In some cases, attackers change the sender name to make the message appear more convincing, while the “From” field is set to a valid internal email address.
Combined with permissive or absent DMARC and SPF policies, these messages may bypass spam filters and land directly in users’ inboxes.
“Phishing messages sent through this vector may be more effective as they appear to be internally sent messages,” Microsoft added in the blog. “Successful credential compromise through phishing attacks may lead to data theft or business email compromise (BEC) attacks against the affected organization or partners and may require extensive remediation efforts, and/or lead to loss of funds in the case of financial scams.”
Beyond credential capture, the PhaaS infrastructure can facilitate adversary-in-the-middle (AiTM) attacks that relay authentication information in real time and may even circumvent multi-factor authentication protections.
Hardening configurations can help
The disclosure emphasizes that proper configuration of mail authentication mechanisms is the most effective defense against this spoofing vector. Organizations are advised to adopt strict DMARC reject policies and enforce SPF hard fails so that unauthenticated mail claiming to be from their domains is rejected or safely quarantined.
Additionally, recommendations include ensuring that any third-party connectors, such as spam filters, archiving services, or legacy mail relays, are correctly set up so that spoof checks can be calculated and enforced consistently.
Tenants with MX records pointing directly to Microsoft 365 aren’t vulnerable to this issue because Microsoft’s native spoof detection and filtering mechanisms are applied by default. For more complex mail infrastructures, Microsoft provided specific guidance on mail flow rules and authentication practices to reduce exposure and block spoofed emails before they ever reach end users’ inboxes.
Beyond mail authentication fixes, Microsoft urged organizations to harden identity defenses against AiTM phishing, which bypasses passwords by hijacking authenticated sessions. Recommended controls include phishing-resistant MFA such as FIDO2 security keys, Conditional Access enforcement, and protection like MFA number matching to limit the impact of stolen tokens.
View the full article

• 0 comments
• 33 views

CSOonline

January 7Jan 7

ServiceNow Developer Skills: Automation, Integration, Best Practices

ServiceNow Developer Skills: Automation, Integration, Best Practices

Introduction: Problem, Context & Outcome
Managing IT operations in modern enterprises is complex and prone to inefficiencies. Teams often struggle with manual workflows, delayed incident resolution, and fragmented communication, which can impact service quality and operational productivity. The ServiceNow Developer Course addresses these challenges by equipping professionals with skills to build automated workflows, integrate systems, and streamline IT processes. Through hands-on practice with ServiceNow tools, learners develop the ability to create custom applications, automate approvals, and manage service requests effectively. This training helps IT teams deliver reliable, scalable, and efficient services in enterprise environments.
Why this matters: Mastery of ServiceNow enables professionals to reduce errors, enhance collaboration, and accelerate service delivery across organizations.
What Is ServiceNow Developer Course?
The ServiceNow Developer Course is a structured, practical program designed for developers, QA engineers, DevOps professionals, and IT operations staff. ServiceNow is a cloud-based platform offering IT Service Management (ITSM), IT Operations Management (ITOM), and IT Business Management (ITBM). The course teaches participants how to create tables, forms, and workflows; implement business rules and scripts; build custom applications; and integrate ServiceNow with other enterprise tools using APIs. Learners also gain experience with Flow Designer and Service Catalogs for workflow automation and request management. The curriculum emphasizes real-world applications to prepare professionals for deployment-ready solutions.
Why this matters: Learning ServiceNow equips professionals with enterprise-ready skills to automate processes, improve operational efficiency, and support digital transformation.
Why ServiceNow Developer Course Is Important in Modern DevOps & Software Delivery
Modern software delivery requires speed, reliability, and continuous improvement. ServiceNow provides a unified platform that connects development, operations, and business teams. It automates workflows, streamlines incident and change management, and integrates seamlessly with CI/CD pipelines, monitoring tools, and cloud platforms. Professionals trained in ServiceNow can implement automated approvals, service requests, and notifications, reducing manual errors and improving deployment efficiency. Organizations adopting ServiceNow benefit from faster resolution times, better compliance, and alignment between IT services and business objectives.
Why this matters: ServiceNow bridges the gap between DevOps processes and enterprise IT management, supporting automation, collaboration, and efficient service delivery.
Core Concepts & Key Components
ServiceNow Studio
Purpose: Central development environment for building applications.
How it works: Provides tools for creating tables, forms, scripts, and workflows.
Where it is used: Enterprise custom application development.
Tables & Data Models
Purpose: Organize structured enterprise data efficiently.
How it works: Defines tables, fields, relationships, and record management.
Where it is used: ITSM, HR, finance, and custom applications.
Flow Designer & Workflows
Purpose: Automate multi-step business processes.
How it works: Drag-and-drop interface with triggers, conditions, and approvals.
Where it is used: Incident handling, service requests, notifications, escalations.
Scripting & Business Rules
Purpose: Introduce logic and automation into processes.
How it works: JavaScript-based scripts execute actions and validations.
Where it is used: Custom application workflows and process automation.
Service Catalog & Request Management
Purpose: Enable self-service for users and track requests.
How it works: Users submit requests, approvals are automated, and fulfillment tracked.
Where it is used: IT services, HR onboarding, procurement requests.
Integration & APIs
Purpose: Connect ServiceNow with external tools and systems.
How it works: REST and SOAP APIs facilitate secure bi-directional communication.
Where it is used: CI/CD pipelines, monitoring tools, ERP, CRM systems.
Why this matters: Knowledge of these components allows professionals to develop scalable, automated, and enterprise-ready solutions.
How ServiceNow Developer Course Works (Step-by-Step Workflow)
Developer Instance Setup: Access a personal ServiceNow instance. Understand Platform Basics: Explore tables, forms, UI policies, and data structure. Application Development: Build custom applications with scripts and forms. Automate Processes: Create workflows and business rules using Flow Designer. Integrate Systems: Connect ServiceNow to external systems using APIs. Testing & Validation: Ensure reliability of workflows and applications. Deployment: Move applications to production environments. Monitor & Optimize: Track performance and continuously improve workflows. Why this matters: A structured workflow ensures practical, enterprise-ready skills applicable to real-world IT operations.
Real-World Use Cases & Scenarios
IT Service Management (ITSM): Automates incident, problem, and change management. HR Operations: Streamlines onboarding, approvals, and employee requests. Customer Service: Enhances ticketing, notifications, and escalations. Finance & Procurement: Manages purchase approvals, requests, and budgets. DevOps Integration: Connects CI/CD pipelines, monitoring, and cloud tools. Teams involved include developers, QA, DevOps, SREs, and IT operations staff. ServiceNow ensures processes are automated, consistent, and collaborative.
Why this matters: Demonstrates how ServiceNow improves operational efficiency and service quality across enterprises.
Benefits of Using ServiceNow Developer Course
Productivity: Automates repetitive tasks. Reliability: Ensures consistent service execution. Scalability: Supports enterprise-level applications and integrations. Collaboration: Enhances communication across IT and business teams. Why this matters: Professionals can deliver reliable, automated, and scalable enterprise IT solutions.
Challenges, Risks & Common Mistakes
Complex Workflows: Hard to maintain and inefficient. Neglecting Governance: Leads to compliance and operational risks. Poor Data Modeling: Causes inconsistencies and errors. Skipping Testing: Results in failed workflows and disruptions. Outdated Scripts: Can break applications and processes. Why this matters: Awareness of risks ensures maintainable and reliable ServiceNow solutions.
Comparison Table
FeatureTraditional ProcessesServiceNow PlatformWorkflow AutomationManualAutomatedIntegrationLimitedAPIs & Web ServicesUser InterfaceBasicInteractive DashboardsReportingManualReal-time AnalyticsCI/CD SupportNoneIntegratedScalabilityLowEnterprise-gradeMaintenanceHigh effortSimplifiedNotificationsManualAutomatedCross-Team CollaborationLimitedCentralizedCost EfficiencyHigherOptimized Why this matters: ServiceNow modernizes IT processes, enabling automation, integration, and scalability.
Best Practices & Expert Recommendations
Keep workflows maintainable and reusable. Apply governance and security consistently. Integrate with DevOps pipelines for CI/CD. Monitor workflows and optimize performance. Reuse templates and components for efficiency. Why this matters: Best practices ensure ServiceNow implementations are secure, scalable, and enterprise-ready.
Who Should Learn or Use ServiceNow Developer Course?
Suitable for developers, QA engineers, DevOps engineers, cloud engineers, and IT operations staff. Beginners gain foundational knowledge, while experienced professionals learn advanced automation, integrations, and workflow design.
Why this matters: Equips professionals to deliver reliable, automated, and scalable IT solutions in enterprise environments.
FAQs – People Also Ask
1. What is ServiceNow?
Cloud platform for IT and business process automation.
Why this matters: Delivers consistent, automated enterprise services.
2. Why learn ServiceNow?
To automate workflows and integrate IT services.
Why this matters: Enhances productivity and reduces manual errors.
3. Is it suitable for beginners?
Yes, structured learning from fundamentals to advanced topics.
Why this matters: Provides a clear path for skill development.
4. Can it integrate with DevOps tools?
Yes, supports CI/CD and cloud integrations.
Why this matters: Enables end-to-end automation in IT pipelines.
5. Which industries use ServiceNow?
Finance, healthcare, IT services, HR, telecom.
Why this matters: Skills are in demand across multiple sectors.
6. Does it require coding?
Yes, scripting is required for workflows and integrations.
Why this matters: Allows customization and advanced automation.
7. Can it handle enterprise-scale deployments?
Yes, ServiceNow is scalable for large organizations.
Why this matters: Suitable for enterprises of all sizes.
8. Are certifications provided?
Yes, learners receive recognized certification.
Why this matters: Validates skills and enhances career opportunities.
9. What tools are included?
ServiceNow Studio, Flow Designer, APIs, dashboards, and tables.
Why this matters: Provides hands-on practical experience.
10. Does it help with career growth?
Yes, skills are relevant for ITSM, DevOps, and cloud roles.
Why this matters: Expands career opportunities and marketability.
Branding & Authority
DevOpsSchool is a globally trusted platform delivering enterprise-grade training programs. Mentor Rajesh Kumar has 20+ years of expertise in DevOps, DevSecOps, SRE, DataOps, AIOps, MLOps, Kubernetes, cloud platforms, CI/CD, and automation. Learners gain practical, enterprise-ready skills for implementing ServiceNow solutions.
Why this matters: Learning from experts ensures skills are immediately applicable to enterprise IT operations.
Call to Action & Contact Information
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329
Enroll in the ServiceNow Developer Course to gain hands-on expertise in automating IT workflows and implementing integrated enterprise solutions.

View the full article

• 0 comments
• 33 views

reporter

January 7Jan 7

Apple Reportedly Exploring Multispectral Imaging for Future iPhones

Apple Reportedly Exploring Multispectral Imaging for Future iPhones

Apple is exploring multispectral imaging technology for future iPhone cameras that could improve Visual Intelligence, enhance material detection, and boost image processing, according to a new supply chain rumor out of China.


In a post on Weibo, leaker Digital Chat Station said Apple is currently evaluating components related to multispectral imaging within the supply chain, but cautioned that formal testing has not yet begun, suggesting the technology remains at an exploratory stage.

Multispectral imaging differs from traditional smartphone photography, which relies solely on standard red, green, and blue light. Instead, the technology captures image data across multiple, distinct wavelength bands, which can add sensitivity to near-infrared or other narrow spectral ranges. This could potentially allow cameras to detect information that is largely invisible to conventional sensors.

If adopted in future iPhones, one potential advantage could be improved material and surface differentiation. By analysing how different materials reflect light across wavelengths, the iPhone's camera could more accurately distinguish skin, fabric, vegetation, or reflective surfaces, enabling cleaner subject recognition and more reliable portrait effects.

In addition, multispectral data could also improve image processing overall, especially when shooting in mixed lighting environments. It could also theoretically improve Visual Intelligence and Apple's on-device machine learning, leading to better object recognition, scene understanding, and depth estimation.

However, adding extra spectral sensitivity would likely require more complex sensor designs, which would surely increase costs and potentially have an impact on internal space constraints. This might be why Apple is reportedly still evaluating the technology, rather than actively testing it in prototypes. Either way, it's not something we should expect in an iPhone soon.

In the same Weibo post, Digital Chat Station reiterated that the Main lens on iPhone 18 Pro models will feature a variable aperture, while the telephoto camera will have a larger aperture, but Apple has yet to begin prototyping 200-megapixel cameras for future iPhones.Tag: Digital Chat Station
This article, "Apple Reportedly Exploring Multispectral Imaging for Future iPhones" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 29 views

reporter

January 7Jan 7

200MP iPhone Camera Not Yet in Active Prototype Testing, Says Leaker

200MP iPhone Camera Not Yet in Active Prototype Testing, Says Leaker

Apple's adoption of a 200-megapixel camera for a future iPhone is still some ways off, according to a prominent supply chain leaker who says such a sensor is not currently part of Apple's active prototype testing.


In a post on Weibo, Chinese leaker Digital Chat Station said that 200-megapixel camera sensors are being discussed in the supply chain, but they have not appeared in iPhone engineering prototypes undergoing real-world imaging tests. Instead, Apple's current camera development work is said to remain focused on refining 48-megapixel systems, as per previous reports.

The leaker's comments follow a research note from Morgan Stanley this week that suggested Apple is working to bring a 200-megapixel camera to the iPhone as soon as 2028. Digital Chat Station's remarks don't rule out such a move – indeed, the leaker said last May that Apple was looking at future adoption – but they do indicate that engineering-stage development on the sensor has yet to begin.

Samsung introduced a 200-megapixel rear camera on its Galaxy S23 Ultra in 2023, and the follow-up models also have one. With a 200-megapixel camera, an iPhone would be able to shoot photos with greater detail. The increased megapixel count would also result in higher-resolution photos, which can be cropped further and printed at larger sizes without a loss of image quality.

However, Digital Chat Station says current Pro-series prototypes continue to test a 48-megapixel main camera with a variable aperture, alongside a 48-megapixel telephoto camera featuring a longer focal length and a larger aperture. The leaker says these changes will be introduced later this year in iPhone 18 Pro models, indicating Apple is continuing its emphasis on optical flexibility and low-light performance, rather than a jump in raw resolution.

The leaker adds that 200-megapixel sensors – reportedly supplied by Samsung – are currently only at a material or component evaluation stage. This typically refers to early feasibility checks within the supply chain, rather than integration into complete iPhone prototypes.

Digital Chat Station also notes that Apple has shown interest in "multispectral imaging technology", though testing has reportedly not yet begun. Multispectral imaging could theoretically enable improved material/object detection and image processing, but there is no suggestion that such features are anywhere close to shipping.Tag: Digital Chat Station
This article, "200MP iPhone Camera Not Yet in Active Prototype Testing, Says Leaker" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 35 views

reporter

January 7Jan 7

n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions

n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions

Open-source workflow automation platform n8n has warned of a maximum-severity security flaw that, if successfully exploited, could result in authenticated remote code execution (RCE). The vulnerability, which has been assigned the CVE identifier CVE-2026-21877, is rated 10.0 on the CVSS scoring system. "Under certain conditions, an authenticated user may be able to cause untrusted code to beView the full article

• 0 comments
• 30 views

Hacker News

January 7Jan 7

Selenium WebDriver: Reliable UI Testing for Teams

Selenium WebDriver: Reliable UI Testing for Teams

Introduction: Problem, Context & Outcome
Modern software development demands speed, reliability, and continuous delivery. Manual testing is no longer sufficient to keep pace with Agile and DevOps workflows. Teams often face challenges like delayed releases, missed defects, and inconsistent quality.
The Master in Selenium program is designed to address these issues by training professionals in automated web application testing. It equips learners with hands-on experience in Selenium WebDriver, Selenium Grid, TestNG, and integrating tests into CI/CD pipelines. Participants gain practical skills to reduce testing time, enhance coverage, and improve overall software quality.
Why this matters: Automation empowers organizations to release faster, reduce errors, and maintain high-quality standards in dynamic software environments.
What Is Master in Selenium?
The Master in Selenium is an advanced training program aimed at developers, QA engineers, and DevOps professionals. It focuses on automating functional and regression tests for web applications using Selenium WebDriver, Selenium Grid, and TestNG frameworks.
The course covers building reusable scripts, managing dynamic content, implementing Page Object Model (POM), and generating comprehensive test reports. Practical, real-world exercises ensure learners can confidently apply automation skills in enterprise settings.
Why this matters: Knowledge of Selenium allows teams to improve efficiency, reliability, and scalability in software testing workflows.
Why Master in Selenium Is Important in Modern DevOps & Software Delivery
Automation is critical in DevOps and CI/CD pipelines. Selenium provides cross-browser and cross-platform testing capabilities while seamlessly integrating with continuous testing processes.
Organizations using Selenium can detect defects early, streamline testing efforts, and foster collaboration between development and QA teams. It aligns with Agile practices by supporting rapid feedback loops and ensuring software meets high-quality standards before release.
Why this matters: Selenium strengthens DevOps practices, enabling faster, consistent, and reliable software delivery.
Core Concepts & Key Components
Selenium WebDriver
Purpose: Automates browser interactions for testing web applications
How it works: Simulates user actions such as clicks, typing, and navigation
Where it is used: Functional and regression testing across multiple browsers
Selenium Grid
Purpose: Executes tests in parallel on different environments
How it works: Distributes test execution across multiple machines and browsers
Where it is used: Large-scale enterprise applications requiring cross-browser validation
TestNG Framework
Purpose: Manages test cases and execution flow
How it works: Supports grouping, annotations, parameterization, and parallel execution
Where it is used: Enterprise automation projects and CI/CD integration
Page Object Model (POM)
Purpose: Maintain structured and reusable test code
How it works: Separates page elements from test logic
Where it is used: Large-scale automation frameworks requiring maintainability
Continuous Integration & DevOps Integration
Purpose: Automate testing as part of the CI/CD pipeline
How it works: Executes automated tests triggered by code commits or builds using Jenkins or GitLab
Where it is used: Agile and DevOps workflows
Web Element Handling & Locators
Purpose: Identify page elements reliably for automation
How it works: Uses IDs, class names, CSS selectors, XPath, and other locators
Where it is used: Functional and cross-browser testing
Handling Dynamic Content & Synchronization
Purpose: Ensure stable test execution in dynamic web applications
How it works: Implements waits and exception handling for elements that change frequently
Where it is used: Applications with dynamic content
Reporting & Logging
Purpose: Provide detailed feedback on test execution
How it works: Generates reports using TestNG, ExtentReports, or Allure frameworks
Where it is used: QA dashboards and DevOps pipelines
Why this matters: Mastery of these concepts ensures robust, scalable, and maintainable automation frameworks.
How Master in Selenium Works (Step-by-Step Workflow)
Environment Setup: Install Selenium WebDriver, IDEs, and browsers. Script Creation: Develop automated scripts for web application functionality. Implement POM: Organize code for reusability and maintainability. Element Handling: Identify elements accurately using locators. Synchronization: Apply explicit or implicit waits for dynamic elements. Integrate TestNG: Manage execution, grouping, and reporting. Parallel Testing with Selenium Grid: Execute scripts across multiple browsers simultaneously. CI/CD Integration: Trigger tests automatically within DevOps pipelines. Generate Reports: Produce logs and detailed execution reports. Why this matters: This workflow equips teams to perform automated testing efficiently, reliably, and at scale.
Real-World Use Cases & Scenarios
E-commerce: Automate checkout, search, and payment testing. Finance & Banking: Validate secure transactions and account functionalities across browsers. Healthcare: Ensure compliance and functionality in patient management systems. Teams usually involve QA engineers, developers, DevOps engineers, and SREs. Automation increases efficiency, reduces errors, and accelerates delivery.
Why this matters: Real-world projects demonstrate Selenium’s role in enterprise software delivery.
Benefits of Using Master in Selenium
Productivity: Automates repetitive testing tasks. Reliability: Early detection of defects ensures stable releases. Scalability: Parallel execution supports large applications. Collaboration: Aligns development, QA, and DevOps teams. Why this matters: Selenium training enhances efficiency, reduces risks, and strengthens software quality.
Challenges, Risks & Common Mistakes
Common issues include weak locator strategies, neglecting dynamic elements, skipping POM implementation, and failing to integrate CI/CD.
Mitigation involves adopting best practices, code reviews, proper synchronization, and continuous testing.
Why this matters: Awareness of risks ensures robust and maintainable automation frameworks.
Comparison Table
FeatureDevOpsSchool TrainingOther TrainingsFaculty Expertise20+ yearsLimitedHands-on Projects40+ real-worldFewSelenium WebDriverComplete coveragePartialTestNG IntegrationFullMinimalPage Object ModelDetailedNot includedSelenium GridParallel executionLimitedCI/CD IntegrationJenkins/GitLabNot includedReporting & LoggingExtentReports, AllureBasicInterview PreparationReal-world scenariosNoneLearning FormatsOnline, classroomLimited Why this matters: Demonstrates advantages of DevOpsSchool’s enterprise-ready program.
Best Practices & Expert Recommendations
Follow POM principles, maintain reusable test code, use robust locators, handle dynamic content properly, integrate with CI/CD, and generate reports consistently. Hands-on projects reinforce these concepts.
Why this matters: Adhering to best practices ensures maintainable and effective automation frameworks.
Who Should Learn or Use Master in Selenium?
Suitable for developers, QA engineers, DevOps engineers, SREs, and cloud testers. Ideal for beginners learning automation as well as experienced professionals enhancing enterprise frameworks.
Why this matters: Learners gain practical, industry-aligned skills for career advancement.
FAQs – People Also Ask
What is Master in Selenium?
A course teaching web automation using Selenium WebDriver, Selenium Grid, and TestNG.
Why this matters: Clarifies course content.
Why learn Selenium?
To automate testing, reduce manual work, and improve quality.
Why this matters: Demonstrates tangible benefits.
Is it suitable for beginners?
Yes, from fundamentals to advanced frameworks.
Why this matters: Learners can start without prior experience.
How does Selenium compare to other tools?
Offers extensive browser support and DevOps integration.
Why this matters: Highlights Selenium advantages.
Is Selenium relevant for DevOps roles?
Yes, it integrates with CI/CD pipelines.
Why this matters: Supports enterprise workflows.
Are real-world projects included?
Yes, 40+ hands-on projects.
Why this matters: Strengthens practical skills.
Does it include reporting frameworks?
Yes, ExtentReports and Allure are included.
Why this matters: Enables detailed test analysis.
Will it help with interviews?
Yes, includes real-world scenarios and questions.
Why this matters: Prepares learners for job opportunities.
Is online learning available?
Yes, live sessions are provided.
Why this matters: Offers flexible learning.
Can Selenium be applied in enterprises?
Yes, for production-grade automation.
Why this matters: Prepares learners for real-world application.
Branding & Authority
DevOpsSchool is a global platform providing enterprise-grade training. The Master in Selenium program offers hands-on learning for automation professionals.
Mentored by Rajesh Kumar, with 20+ years of experience in DevOps, DevSecOps, SRE, DataOps, AIOps, MLOps, Kubernetes, cloud platforms, CI/CD, and automation.
Why this matters: Learners gain practical skills from a seasoned industry expert.
Call to Action & Contact Information
Advance your career in automation testing with Selenium.
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329


View the full article

• 0 comments
• 32 views

reporter

January 7Jan 7

Scala Spark for DevOps: Delivery and Monitoring

Scala Spark for DevOps: Delivery and Monitoring

Introduction: Problem, Context & Outcome
Processing large volumes of data efficiently is a critical challenge for developers, data engineers, and DevOps teams. Traditional tools and approaches often fail when handling high-speed, large-scale datasets, resulting in slower analytics, delayed insights, and operational inefficiencies.
The Master in Scala with Spark program equips professionals to overcome these challenges by teaching Scala for functional programming and Apache Spark for distributed computing. Learners gain practical experience designing, deploying, and optimizing scalable data pipelines through hands-on exercises and real-world projects. By completing this course, professionals can transform complex data workflows into efficient, high-performing systems.
Why this matters: Skills in Scala and Spark enable teams to process big data efficiently, accelerate decision-making, and improve enterprise performance.
What Is Master in Scala with Spark?
The Master in Scala with Spark is a structured, hands-on program designed for developers, data engineers, and DevOps professionals who want to master big data processing. It covers Scala programming fundamentals, functional programming principles, object-oriented concepts, and advanced Spark features like RDDs, DataFrames, and Spark SQL.
The course emphasizes real-world application, allowing learners to implement distributed data pipelines and analytics tasks on large-scale datasets. Participants gain practical experience with both batch and stream processing, making them ready for enterprise-grade big data environments.
Why this matters: Understanding Scala and Spark provides the foundation to handle complex datasets efficiently, making learners highly valuable in modern, data-driven organizations.
Why Master in Scala with Spark Is Important in Modern DevOps & Software Delivery
In modern DevOps environments, scalable, fast, and reliable data processing is essential for continuous integration, delivery, and cloud-native operations. Scala and Spark are widely adopted for processing large datasets, enabling distributed computation and high-performance analytics.
By learning these tools, teams can automate data pipelines, streamline cloud operations, and improve analytics performance. Integrating Scala and Spark into CI/CD pipelines and Agile workflows ensures that big data applications are maintainable, scalable, and production-ready.
Why this matters: Knowledge of Scala and Spark helps professionals design efficient, automated data workflows that meet the demands of modern enterprise software delivery.
Core Concepts & Key Components
Scala Fundamentals
Purpose: Build a strong programming foundation
How it works: Covers variables, loops, functions, and expressions
Where it is used: Web applications, data pipelines, and functional programming
Functional Programming
Purpose: Enable modular, maintainable, and testable code
How it works: Includes immutability, higher-order functions, pure functions, and referential transparency
Where it is used: Distributed computing, real-time analytics, and enterprise software
Object-Oriented Scala
Purpose: Support reusable and organized code
How it works: Covers classes, objects, traits, and inheritance
Where it is used: Enterprise applications and complex systems
Spark Core
Purpose: Efficient large-scale data processing
How it works: Includes RDDs, transformations, actions, persistence, and distributed operations
Where it is used: Batch processing, machine learning pipelines, and real-time analytics
Spark Libraries
Purpose: Extend functionality for analytics tasks
How it works: MLlib, GraphX, Spark SQL, Structured Streaming
Where it is used: Machine learning, streaming analytics, and graph computation
Concurrency & Parallelism
Purpose: Optimize distributed processing performance
How it works: Uses Futures, ExecutionContext, and asynchronous operations
Where it is used: High-performance data processing
Collections & Data Structures
Purpose: Efficiently manipulate datasets
How it works: Uses lists, sets, maps, sequences with functional operations like map, reduce, and flatMap
Where it is used: Data transformation, analytics, and functional programming
Error Handling & Pattern Matching
Purpose: Build robust and resilient applications
How it works: Try, Option, Either, and pattern matching
Where it is used: Production pipelines, distributed systems, and real-time analytics
Why this matters: Mastery of these concepts allows developers to build scalable, maintainable, and high-performance data applications.
How Master in Scala with Spark Works (Step-by-Step Workflow)
Scala Basics: Learn syntax, variables, loops, and functions. Functional Programming: Master immutability, pure functions, and higher-order functions. Object-Oriented Scala: Implement classes, traits, and inheritance patterns. Data Structures & Collections: Manipulate lists, sets, maps, and sequences. Error Handling: Apply Option, Try, Either, and pattern matching for reliability. Spark Core: Work with RDDs, transformations, actions, and distributed computation. Spark Libraries: Use MLlib, GraphX, Spark SQL, and Structured Streaming. Concurrency & Parallelism: Optimize distributed operations and multi-threaded tasks. Hands-on Projects: Implement enterprise-grade big data pipelines with real datasets. Why this matters: This workflow ensures learners can apply concepts in real-world projects and enterprise environments.
Real-World Use Cases & Scenarios
E-commerce Analytics: Track customer behavior and optimize recommendations in real-time. Telecom & Social Media: Process large-scale logs and messaging datasets to detect patterns. Finance & Banking: Execute risk analysis, fraud detection, and reporting pipelines using Spark. Project teams typically include data engineers, DevOps professionals, QA, SREs, and cloud administrators.
Why this matters: Exposure to real-world scenarios prepares learners for professional, enterprise-level data processing challenges.
Benefits of Using Master in Scala with Spark
Productivity: Build high-performance data pipelines quickly Reliability: Robust error handling ensures pipeline stability Scalability: Handle distributed and large-volume datasets Collaboration: Modular, functional programming enables team efficiency Why this matters: These benefits improve operational efficiency and make data processing more predictable and manageable.
Challenges, Risks & Common Mistakes
Common pitfalls include inefficient RDD transformations, poor data partitioning, concurrency issues, and lack of proper error handling.
Mitigation strategies include following best practices, hands-on exercises, code reviews, and optimized Spark operations.
Why this matters: Awareness of these challenges ensures learners can create reliable, maintainable, and efficient data pipelines.
Comparison Table
FeatureDevOpsSchool TrainingOther TrainingsFaculty Expertise20+ years averageLimitedHands-on Projects50+ real-time projectsFewScala FundamentalsComplete coveragePartialFunctional ProgrammingImmutability, higher-order functionsBasicSpark CoreRDDs, transformations, actionsLimitedSpark LibrariesMLlib, GraphX, Spark SQL, StreamingMinimalError HandlingTry, Option, EitherMinimalConcurrencyFutures, ExecutionContextNot includedInterview PrepReal-world Scala & Spark questionsNoneLearning FormatsOnline, classroom, corporateLimited Why this matters: The table highlights practical advantages of comprehensive DevOpsSchool training for real-world use.
Best Practices & Expert Recommendations
Follow functional programming principles, modularize code, optimize Spark operations, handle concurrency effectively, and integrate CI/CD pipelines for big data. Engage in hands-on projects to reinforce learning and industry readiness.
Why this matters: Applying best practices ensures scalable, maintainable, and efficient data solutions.
Who Should Learn or Use Master in Scala with Spark?
Developers, data engineers, DevOps professionals, SREs, QA, and cloud administrators will benefit most. Suitable for beginners learning data engineering and experienced professionals enhancing big data expertise.
Why this matters: Targeted learning ensures maximum skill development and enterprise relevance.
FAQs – People Also Ask
What is Master in Scala with Spark?
It is a hands-on program teaching Scala programming and Spark for big data applications.
Why this matters: Clarifies course purpose.
Why learn Scala with Spark?
To efficiently process and analyze large datasets.
Why this matters: Highlights practical relevance.
Is it suitable for beginners?
Yes, covering fundamentals to advanced topics.
Why this matters: Sets learner expectations.
How does it compare to other big data courses?
Focuses on hands-on projects, functional programming, and Spark pipelines.
Why this matters: Highlights course advantages.
Is it relevant for DevOps roles?
Yes, integrates with CI/CD pipelines and cloud workflows.
Why this matters: Confirms career applicability.
Are hands-on projects included?
Yes, 50+ real-time projects.
Why this matters: Strengthens practical knowledge.
Does it cover functional programming?
Yes, including immutability and higher-order functions.
Why this matters: Ensures modular, maintainable code.
Will it help with interview preparation?
Yes, real-world Scala and Spark questions included.
Why this matters: Enhances employability.
Is online learning available?
Yes, live instructor-led sessions are provided.
Why this matters: Provides flexibility.
Can it be applied in enterprise environments?
Yes, prepares learners for production-ready pipelines.
Why this matters: Ensures professional readiness.
Branding & Authority
DevOpsSchool is a globally trusted platform delivering enterprise-grade training. The Master in Scala with Spark program provides hands-on learning for big data professionals.
Mentored by Rajesh Kumar, with over 20 years of expertise in DevOps, DevSecOps, SRE, DataOps, AIOps, MLOps, Kubernetes, cloud platforms, CI/CD, and automation.
Why this matters: Learners gain practical, enterprise-ready skills from seasoned industry experts.
Call to Action & Contact Information
Advance your career in data engineering with Scala and Spark.
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329

View the full article

• 0 comments
• 33 views

reporter

January 7Jan 7

The Future of Cybersecurity Includes Non-Human Employees

The Future of Cybersecurity Includes Non-Human Employees

Non-human employees are becoming the future of cybersecurity, and enterprises need to prepare accordingly. As organizations scale Artificial Intelligence (AI) and cloud automation, there is exponential growth in Non-Human Identities (NHIs), including bots, AI agents, service accounts and automation scripts. In fact, 51% of respondents in ConductorOne’s 2025 Future of Identity Security ReportView the full article

• 0 comments
• 33 views

Hacker News

January 7Jan 7

Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication

Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication

Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote code execution (RCE). The vulnerability, tracked as CVE-2025-59470, carries a CVSS score of 9.0. "This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as the postgres user by sending a maliciousView the full article

• 0 comments
• 35 views

Hacker News

January 7Jan 7

PHP Laravel for Teams: Reliable Releases, Monitoring

PHP Laravel for Teams: Reliable Releases, Monitoring

Introduction: Problem, Context & Outcome
Building modern web applications that are fast, secure, and scalable is a challenge many developers face. Without proper knowledge of backend frameworks and best practices, projects can experience slow performance, maintainability issues, and delayed delivery timelines.
The Master in PHP with Laravel program offers an end-to-end training experience, guiding learners from PHP fundamentals to advanced Laravel web development. Participants acquire practical skills through real-world projects, learning how to structure, deploy, and optimize web applications efficiently. By completing this program, developers gain the confidence and expertise required to deliver enterprise-level web solutions.
Why this matters: Strong PHP and Laravel skills allow teams to build reliable, maintainable, and high-performing web applications that meet modern business needs.
What Is Master in PHP with Laravel?
The Master in PHP with Laravel course is a structured, hands-on program that teaches developers PHP programming and the Laravel framework. The training covers core PHP concepts, object-oriented programming, database interactions, and advanced Laravel features including MVC architecture, routing, Blade templates, and RESTful APIs.
This course is tailored for developers, DevOps engineers, and QA professionals seeking to create scalable web solutions. It emphasizes practical projects and real-world scenarios to ensure learners can immediately apply their knowledge in professional environments.
Why this matters: Mastery of PHP and Laravel equips learners to handle complex web applications with efficiency and confidence.
Why Master in PHP with Laravel Is Important in Modern DevOps & Software Delivery
In contemporary DevOps and Agile-driven environments, rapid and reliable software delivery is key. PHP with Laravel provides a framework that supports modular, maintainable, and testable applications while integrating seamlessly with CI/CD pipelines, cloud services, and automation tools.
Laravel allows developers to create APIs, implement secure authentication, and deploy applications efficiently. By aligning development with DevOps practices, teams can reduce errors, enhance collaboration, and ensure faster delivery cycles.
Why this matters: Learning PHP and Laravel helps bridge development and operations, enabling smooth, enterprise-grade software delivery.
Core Concepts & Key Components
PHP Fundamentals
Purpose: Build a solid foundation in backend development
How it works: Covers variables, arrays, loops, functions, and data types
Where it is used: Web applications, server-side scripts, and APIs
Object-Oriented Programming (OOP)
Purpose: Write reusable, modular code
How it works: Learn classes, objects, inheritance, encapsulation, and methods
Where it is used: Enterprise applications, Laravel frameworks, and scalable projects
Database Integration
Purpose: Manage and interact with application data
How it works: Connect using PDO or MySQLi, perform queries, and handle migrations
Where it is used: CMS platforms, e-commerce sites, and data-driven applications
Laravel Framework
Purpose: Streamline PHP application development
How it works: MVC architecture, routing, controllers, models, Blade templates, and RESTful APIs
Where it is used: Full-stack web apps, SaaS platforms, and APIs
Routing & Middleware
Purpose: Manage request handling and enforce security
How it works: Define routes, implement middleware for authentication, logging, and permissions
Where it is used: Multi-user applications, admin panels, and APIs
Eloquent ORM & Database Migrations
Purpose: Simplify database operations
How it works: Object-relational mapping, schema versioning, and query building
Where it is used: Enterprise applications requiring robust database management
Forms & Validation
Purpose: Ensure secure and reliable user input
How it works: Apply validation rules, CSRF protection, and error handling
Where it is used: Registration forms, surveys, and interactive pages
CRUD Operations
Purpose: Perform essential data operations efficiently
How it works: Create, Read, Update, Delete using Laravel’s built-in features
Where it is used: Dashboards, admin panels, and content management systems
Why this matters: Understanding these components enables developers to deliver secure, maintainable, and scalable web applications.
How Master in PHP with Laravel Works (Step-by-Step Workflow)
Learn PHP Basics: Syntax, variables, loops, and functions. Master OOP: Classes, inheritance, and reusable methods. Database Integration: Connect PHP apps to MySQL/MariaDB and manage data. Laravel Setup: Install Laravel and structure the project. Routing & Controllers: Handle requests efficiently. Blade Templates: Build dynamic, reusable views. CRUD Implementation: Implement complete data operations. Validation & Security: Protect forms and handle input validation. Deployment: Launch applications using LAMP or cloud infrastructure. Why this matters: A step-by-step workflow ensures learners can apply skills to real-world projects with confidence.
Real-World Use Cases & Scenarios
E-commerce Platforms: Build scalable online stores with product management, cart functionality, and payment integration. Content Management Systems: Manage websites, blogs, and media dynamically. Enterprise Applications: Multi-user applications with secure access and role-based permissions. In these scenarios, developers, QA engineers, DevOps teams, SREs, and cloud administrators collaborate to ensure optimal performance.
Why this matters: Exposure to real-world use cases equips learners for industry-standard development and deployment practices.
Benefits of Using Master in PHP with Laravel
Productivity: Rapid development using Laravel scaffolding Reliability: Secure code and error handling features Scalability: Supports complex, multi-user systems Collaboration: MVC framework enhances team workflow Why this matters: Benefits directly translate into faster, more reliable web application delivery.
Challenges, Risks & Common Mistakes
Common challenges include improper use of OOP principles, poorly designed database schemas, security vulnerabilities, and deployment errors.
These can be mitigated through code reviews, following Laravel best practices, and hands-on project experience.
Why this matters: Awareness and mitigation of risks improve code quality and operational reliability.
Comparison Table
FeatureDevOpsSchool TrainingOther TrainingsFaculty Expertise20+ years industry experienceLimitedHands-on Projects50+ real-time projectsFewPHP FundamentalsComplete coveragePartialLaravel FrameworkMVC, Blade, Routing, ORMBasicDatabase IntegrationPDO, MySQLi, MigrationsLimitedCRUD OperationsEnd-to-end examplesPartialValidation & SecurityCSRF, flash messages, error handlingMinimalDeploymentLAMP & cloud-readyNot includedInterview PrepReal-time PHP & Laravel questionsNoneLearning FormatsOnline, classroom, corporateLimited Why this matters: Highlights the practical and comprehensive nature of the training.
Best Practices & Expert Recommendations
Follow MVC architecture, use Eloquent ORM for database management, validate all user input, implement secure coding practices, and integrate CI/CD pipelines. Hands-on exercises and real-world projects are critical for reinforcing learning.
Why this matters: Adopting best practices ensures applications are secure, scalable, and maintainable.
Who Should Learn or Use Master in PHP with Laravel?
Ideal learners include developers, DevOps engineers, QA analysts, SREs, and cloud administrators. The program is suitable for beginners starting web development and experienced developers enhancing their PHP and Laravel skills.
Why this matters: Targeting the right audience ensures maximum professional impact.
FAQs – People Also Ask
What is Master in PHP with Laravel?
A hands-on program teaching PHP programming and the Laravel framework.
Why this matters: Clarifies course content and scope.
Why learn PHP with Laravel?
To build secure, maintainable, and scalable web applications.
Why this matters: Highlights practical relevance.
Is it beginner-friendly?
Yes, the course covers PHP basics to advanced Laravel features.
Why this matters: Sets learner expectations.
How does it compare to other web development courses?
Emphasizes hands-on projects, MVC framework, and real-world applications.
Why this matters: Shows advantages over standard courses.
Is it suitable for DevOps roles?
Yes, skills integrate with CI/CD pipelines and cloud deployments.
Why this matters: Confirms career relevance.
Are hands-on projects included?
Yes, 50+ real-time projects.
Why this matters: Strengthens practical experience.
Does it cover database integration?
Yes, including PDO, MySQLi, migrations, and ORM.
Why this matters: Enables robust backend management.
Will it help with interview preparation?
Yes, includes real-world PHP and Laravel questions.
Why this matters: Enhances employability.
Is online learning available?
Yes, live instructor-led sessions.
Why this matters: Provides flexibility for working professionals.
Can it be applied in enterprise environments?
Yes, the program teaches scalable, production-ready application development.
Why this matters: Prepares learners for professional deployment.
Branding & Authority
DevOpsSchool is a globally trusted platform providing enterprise-ready training. The Master in PHP with Laravel program delivers practical, hands-on skills for modern web development.
Mentored by Rajesh Kumar, with 20+ years of experience in DevOps, DevSecOps, SRE, DataOps, AIOps, MLOps, Kubernetes, cloud platforms, CI/CD, and automation.
Why this matters: Learners gain practical, enterprise-ready expertise from industry leaders.
Call to Action & Contact Information
Advance your career by mastering PHP with Laravel.
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329

View the full article

• 0 comments
• 35 views

reporter

January 7Jan 7

Master New Relic: Improve Uptime and Performance

Master New Relic: Improve Uptime and Performance

Introduction: Problem, Context & Outcome
Software today runs in highly dynamic environments—cloud-native architectures, microservices, and rapid deployments are the norm. In such setups, even minor performance issues can escalate into significant business disruptions. Developers and DevOps teams often struggle to pinpoint slow transactions, server bottlenecks, or application errors quickly. New Relic provides a comprehensive solution to monitor performance, trace requests, and deliver actionable insights across the application lifecycle. The Master in New Relic Training equips IT professionals with practical skills to proactively monitor applications, detect issues before they impact users, and optimize system performance. Participants learn strategies to maintain high uptime, enhance end-user experience, and support agile software delivery.
Why this matters: Mastering New Relic empowers teams to prevent downtime, improve operational efficiency, and maintain trust in digital services.
What Is Master in New Relic Training?
The Master in New Relic Training is an intensive, hands-on program that helps IT professionals leverage New Relic’s full capabilities for application performance management (APM). New Relic tracks application metrics, monitors transactions, detects errors, and provides analytics for optimization. The training covers agent installation, dashboard creation, alert configuration, transaction tracing, and error analytics. It is designed for developers, QA engineers, DevOps practitioners, and SREs, providing real-world scenarios across cloud, containerized, and microservices environments. By completing this program, professionals gain actionable insights that help maintain system stability, reduce operational risk, and optimize performance across all stages of the DevOps lifecycle.
Why this matters: Proficiency in New Relic equips professionals to maintain reliable, high-performing applications and improve business continuity.
Why Master in New Relic Training Is Important in Modern DevOps & Software Delivery
In modern DevOps environments, continuous monitoring is essential. Applications are updated frequently, and teams must identify issues quickly to avoid downtime. New Relic offers real-time insights into application performance, error tracking, and resource utilization, helping teams optimize software delivery pipelines. Enterprises leverage it to monitor cloud workloads, microservices communication, and user-facing applications, ensuring reliability and scalability. Mastering New Relic allows professionals to integrate monitoring into Agile workflows, improve CI/CD efficiency, and maintain high service availability.
Why this matters: Real-time monitoring prevents performance issues from affecting users, enabling teams to deliver software reliably and efficiently.
Core Concepts & Key Components
New Relic APM
Purpose: Monitor applications in real time.
How it works: Agents collect performance data, including transactions, response times, and errors.
Where it is used: Web, mobile, and cloud applications.
Transactions & Traces
Purpose: Detect slow operations and bottlenecks.
How it works: Maps request flows to visualize transaction performance.
Where it is used: High-traffic APIs, microservices, and enterprise applications.
Dashboards & Metrics
Purpose: Visualize performance KPIs.
How it works: Aggregate metrics into customizable dashboards for monitoring and reporting.
Where it is used: DevOps monitoring, SLA tracking, and management reporting.
Alerts & Incidents
Purpose: Notify teams about abnormal behavior.
How it works: Configures thresholds that trigger notifications via Slack, email, or webhooks.
Where it is used: Production systems and mission-critical applications.
Agents & Configuration
Purpose: Collect telemetry data from applications.
How it works: Language-specific agents installed on Java, PHP, .NET, Docker, and other platforms.
Where it is used: Development, staging, and production environments.
Error Analytics
Purpose: Detect, categorize, and resolve errors.
How it works: Aggregates error logs and traces root causes.
Where it is used: QA, DevOps, and SRE workflows.
Custom Instrumentation
Purpose: Extend monitoring beyond default metrics.
How it works: Allows users to define custom metrics or integrate additional plugins.
Where it is used: Enterprise-level monitoring and specialized business KPIs.
Why this matters: Mastery of these components enables precise monitoring, fast troubleshooting, and operational efficiency.
How Master in New Relic Training Works (Step-by-Step Workflow)
Install Agents: Deploy New Relic agents in your application environment. Enable Instrumentation: Monitor critical transactions, services, and databases. Create Dashboards: Visualize metrics and performance indicators. Configure Alerts: Set thresholds and integrate notifications for proactive response. Analyze Metrics & Traces: Review performance data and detect bottlenecks. Optimize Applications: Apply improvements to enhance response times and stability. Maintain Monitoring: Continuously update dashboards and agent configurations. Why this matters: A step-by-step workflow ensures consistent monitoring, faster resolution of issues, and improved application performance.
Real-World Use Cases & Scenarios
E-commerce: Monitor checkout processes, reduce API latency, and prevent abandoned carts. Cloud Microservices: Track service-to-service performance and latency in real time. Enterprise Applications: Ensure SLA compliance and monitor server health for critical applications. Startups: Detect errors early, accelerate release cycles, and maintain application stability. Why this matters: Applying New Relic in real-world scenarios ensures reduced downtime, improved user experience, and better business performance.
Benefits of Using Master in New Relic Training
Productivity: Quickly detect and resolve performance issues. Reliability: Maintain consistent uptime and system stability. Scalability: Efficiently monitor growing cloud and microservices environments. Collaboration: Shared dashboards and alerts enhance cross-team communication. Why this matters: These benefits lead to faster releases, better software quality, and operational efficiency.
Challenges, Risks & Common Mistakes
Improper Agent Configuration: Can result in incomplete or inaccurate monitoring. Ignoring Alerts: Missed notifications can lead to unresolved issues. Skipping Transaction Traces: Can hide critical performance bottlenecks. Manual Monitoring Dependence: Slows issue detection in dynamic environments. Insufficient Customization: Metrics may not reflect business-critical KPIs. Why this matters: Awareness of challenges ensures accurate monitoring and reliable operational outcomes.
Comparison Table
Feature/AspectNew RelicTraditional MonitoringInstallationEasy, agent-basedManual scriptsReal-time Monitoring✅❌Cloud-native Support✅PartialMicroservices Tracking✅❌Error Analytics✅LimitedDashboard Visualization✅BasicAlerts & Incident Management✅MinimalSLA Compliance✅Hard to trackScalabilityHighModerateDevOps Tool IntegrationExtensiveLimited Why this matters: The table highlights New Relic’s advantages over traditional monitoring methods, emphasizing visibility, proactive alerts, and operational efficiency.
Best Practices & Expert Recommendations
Start monitoring in development environments before production. Customize dashboards to focus on critical metrics. Optimize alert thresholds to reduce false positives. Integrate notifications with Slack, email, or other tools for faster response. Regularly review dashboards and metrics for continuous improvement. Why this matters: Following best practices ensures accurate monitoring, proactive problem-solving, and scalable application performance.
Who Should Learn or Use Master in New Relic Training?
This training benefits developers, DevOps engineers, SREs, QA professionals, and cloud specialists. Both beginners and experienced practitioners gain practical expertise in monitoring, troubleshooting, and optimizing applications. The course is highly relevant for teams following Agile, CI/CD, and cloud-native practices.
Why this matters: The training equips professionals to deliver reliable, scalable applications and strengthens career readiness in modern IT environments.
FAQs – People Also Ask
1. What is New Relic?
New Relic is an APM platform that tracks performance metrics in real time.
Why this matters: Detects issues before they affect end-users.
2. Why use New Relic?
To monitor, detect, and resolve application performance problems efficiently.
Why this matters: Minimizes downtime and improves system reliability.
3. Can beginners learn it?
Yes, the course covers both foundational and advanced topics.
Why this matters: Enables professionals at all levels to gain practical skills.
4. How does it compare with other tools?
Provides more real-time visibility, cloud support, and alerting than most alternatives.
Why this matters: Ensures better monitoring and faster issue resolution.
5. Is it relevant for DevOps roles?
Yes, integrates with CI/CD pipelines and microservices monitoring.
Why this matters: Supports reliable software delivery and operational efficiency.
6. Which applications are supported?
Java, PHP, .NET, Docker, microservices, and cloud-native apps.
Why this matters: Offers comprehensive monitoring across environments.
7. Can dashboards be customized?
Yes, dashboards, alerts, and metrics can be tailored to business needs.
Why this matters: Ensures focus on critical performance indicators.
8. Does it support alerts?
Yes, via Slack, email, and webhooks.
Why this matters: Allows teams to respond to incidents rapidly.
9. Is it suitable for cloud monitoring?
Yes, fully supports cloud-native and hybrid environments.
Why this matters: Maintains reliability across complex infrastructures.
10. How long is the training?
Approximately 12–15 hours over 3 days with practical exercises.
Why this matters: Provides hands-on, intensive training for skill mastery.
Branding & Authority
DevOpsSchool is a globally trusted platform offering enterprise-grade training programs. Mentor Rajesh Kumar brings over 20 years of hands-on experience in DevOps, DevSecOps, SRE, DataOps, AIOps, MLOps, Kubernetes, cloud platforms, CI/CD, and automation. This program equips professionals with practical expertise to monitor, analyze, and optimize applications using New Relic.
Why this matters: Learning from industry experts ensures participants gain actionable skills to enhance application performance and operational excellence.
Call to Action & Contact Information
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329
Explore the Master in New Relic Training for hands-on learning and industry-ready skills.

View the full article

• 0 comments
• 33 views

reporter

January 7Jan 7

Microservices Roadmap 2026: Docker, Istio, Monitoring

Microservices Roadmap 2026: Docker, Istio, Monitoring

Introduction: Problem, Context & Outcome
Many engineering teams struggle as applications grow larger and more complex over time. What begins as a simple system often turns into a tightly coupled monolith that is difficult to change, risky to deploy, and slow to scale. Even minor updates can trigger large releases, increasing failure risk and slowing delivery. This creates friction between development speed and operational stability.
The Master in Microservices approach exists to address these modern engineering challenges. It focuses on building software systems that are modular, independently deployable, and aligned with DevOps and cloud-native practices. Instead of treating architecture as theory, it connects design decisions with real operational outcomes. Readers gain clarity on how to build systems that support continuous change without sacrificing reliability.
Why this matters: Sustainable architecture directly impacts delivery speed, system resilience, and business growth.
What Is Master in Microservices?
Master in Microservices is a structured learning and implementation framework that explains how microservices-based systems are designed, deployed, and managed in real-world environments. It goes beyond definitions by focusing on how services behave in production, how teams collaborate around them, and how operations are automated.
Microservices architecture breaks an application into smaller, focused services, each owning a specific business capability. These services can be developed, tested, deployed, and scaled independently. This separation reduces dependencies and allows teams to move faster without waiting on large coordinated releases.
From startups to global enterprises, microservices are used to support continuous delivery, cloud scalability, and fault isolation.
Why this matters: A clear understanding prevents misuse and avoids unnecessary architectural complexity.
Why Master in Microservices Is Important in Modern DevOps & Software Delivery
Modern software delivery demands speed, reliability, and adaptability. Traditional architectures struggle to meet these demands because changes require coordinated deployments and centralized scaling. Microservices solve this by enabling independent delivery pipelines and decentralized ownership.
In DevOps environments, microservices align naturally with CI/CD pipelines, container platforms, and cloud infrastructure. Agile teams can release features frequently, while operations teams maintain stability through automation and observability. Failures are isolated, and recovery becomes faster and more predictable.
The Master in Microservices approach ensures architecture supports DevOps rather than blocking it.
Why this matters: Architecture and delivery pipelines must evolve together to stay competitive.
Core Concepts & Key Components
Service Decomposition
Purpose: Reduce system coupling
How it works: Applications are split by business domains
Where used: Large-scale enterprise platforms
API-Based Communication
Purpose: Enable controlled interactions
How it works: Services communicate via APIs or events
Where used: Internal and external integrations
Containerization
Purpose: Ensure consistent runtime environments
How it works: Services are packaged with dependencies
Where used: Development, testing, and production
Orchestration Platforms
Purpose: Automate service lifecycle management
How it works: Handles scaling, deployment, and recovery
Where used: Kubernetes-based environments
Observability and Monitoring
Purpose: Maintain system visibility
How it works: Metrics, logs, and traces provide insights
Where used: Production monitoring and troubleshooting
Security and Governance
Purpose: Protect distributed systems
How it works: Authentication, authorization, and policies
Where used: Enterprise and regulated environments
Why this matters: These components define how well microservices operate at scale.
How Master in Microservices Works (Step-by-Step Workflow)
The process begins with identifying business domains and defining clear service boundaries. Each service is designed to own its data and logic, avoiding shared dependencies. Services are containerized to ensure consistent behavior across environments.
Automated CI/CD pipelines build, test, and deploy services independently. Infrastructure is provisioned using code, enabling repeatability and fast recovery. Orchestration platforms manage scaling, service discovery, and fault tolerance.
Once deployed, observability tools continuously collect data on performance and reliability. Teams use this feedback to refine service design and operational practices.
Why this matters: Structured workflows prevent distributed systems from becoming unstable.
Real-World Use Cases & Scenarios
E-commerce companies use microservices to scale checkout, catalog, and payment services independently during peak traffic. Financial platforms isolate transaction services to improve resilience and compliance. SaaS providers rely on microservices to deploy new features frequently without customer disruption.
Developers focus on building business logic, DevOps engineers automate pipelines, QA teams validate service interactions, SREs maintain availability, and cloud teams manage infrastructure.
Why this matters: Microservices enable both organizational and technical scalability.
Benefits of Using Master in Microservices
Improved productivity: Teams deploy independently Higher reliability: Failures remain localized Elastic scalability: Services scale based on demand Better collaboration: Clear service ownership Why this matters: These benefits translate directly into faster delivery and better user experience.
Challenges, Risks & Common Mistakes
Teams often adopt microservices without sufficient automation or observability, leading to operational complexity. Poor service boundaries can increase inter-service dependencies. Network latency and data consistency are frequently underestimated.
Successful adoption requires disciplined DevOps practices, strong monitoring, and continuous refinement based on production feedback.
Why this matters: Awareness reduces the risk of costly architectural failures.
Comparison Table
Traditional ArchitectureMicroservices ArchitectureSingle deployable unitMultiple independent servicesCentralized scalingService-level scalingTight couplingLoose couplingSlow releasesContinuous deliverySingle technology stackPolyglot technologiesLarge blast radiusIsolated failuresManual deploymentsAutomated CI/CDLimited visibilityFull observabilityDifficult evolutionIncremental changesShared responsibilityClear ownership Why this matters: Comparisons help teams choose the right architecture consciously.
Best Practices & Expert Recommendations
Design services around business capabilities, not technical layers. Automate everything early, from testing to deployment. Build observability and security into the system from day one. Keep services small, well-documented, and focused.
Review architecture regularly as systems evolve and business needs change.
Why this matters: Best practices ensure long-term stability and scalability.
Who Should Learn or Use Master in Microservices?
This approach is ideal for software developers, DevOps engineers, cloud engineers, SREs, and QA professionals working with modern distributed systems. It suits beginners learning architectural fundamentals as well as experienced professionals modernizing legacy platforms.
Why this matters: Matching skills to roles maximizes learning outcomes.
FAQs – People Also Ask
What is Master in Microservices?
It is a structured approach to learning and applying microservices.
Why this matters: Clarifies scope.
Why are microservices used?
They enable scalability, flexibility, and faster releases.
Why this matters: Explains adoption.
Is it suitable for beginners?
Yes, with basic programming and DevOps knowledge.
Why this matters: Sets expectations.
How does it differ from monolithic systems?
It favors independence over simplicity.
Why this matters: Highlights trade-offs.
Is it relevant for DevOps roles?
Yes, microservices are core to DevOps pipelines.
Why this matters: Confirms relevance.
Do microservices require cloud platforms?
No, but cloud simplifies scaling and automation.
Why this matters: Removes misconceptions.
Are microservices secure?
Yes, with proper design and controls.
Why this matters: Addresses concerns.
What tools support microservices?
Containers, CI/CD, orchestration, and monitoring tools.
Why this matters: Connects theory to practice.
Can small teams use microservices?
Yes, if scope is managed carefully.
Why this matters: Prevents overengineering.
Where can professionals learn effectively?
Through structured, hands-on programs.
Why this matters: Guides learning paths.
Branding & Authority
DevOpsSchool is a globally recognized learning platform delivering enterprise-grade education in DevOps and cloud-native technologies. The Master in Microservices program is designed to build real-world, production-ready skills aligned with modern software delivery.
The program is mentored by Rajesh Kumar, an industry expert with over 20 years of hands-on experience in DevOps, DevSecOps, SRE, DataOps, AIOps, MLOps, Kubernetes, cloud platforms, CI/CD, and automation. His practical approach ensures learners understand how systems behave in real enterprise environments.
Why this matters: Proven expertise increases trust and learning effectiveness.
Call to Action & Contact Information
Build the skills needed to design, deploy, and operate scalable microservices systems with confidence.
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329

View the full article

• 0 comments
• 32 views

reporter

January 7Jan 7

Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing

Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing

Threat actors engaging in phishing attacks are exploiting routing scenarios and misconfigured spoof protections to impersonate organizations' domains and distribute emails that appear as if they have been sent internally. "Threat actors have leveraged this vector to deliver a wide variety of phishing messages related to various phishing-as-a-service (PhaaS) platforms such as Tycoon 2FA," theView the full article

• 0 comments
• 31 views

Hacker News

January 7Jan 7

CES 2026: Philips Hue Line Get New SpatialAware Scenes, Hue Cameras Gain HomeKit Support

CES 2026: Philips Hue Line Get New SpatialAware Scenes, Hue Cameras Gain HomeKit Support

Lighting company Signify today announced a new SpatialAware scene feature that's coming to Philips Hue lights. SpatialAware scenes take into account the position of all of the Hue lights in a room, using an algorithm to distribute light in a more natural way.

The savannah sunset scene with SpatialAware
The SpatialAware feature analyzes the layout of each room in the home with Hue lights, and then lighting scenes are tailored to your personal space. Lighting is meant to feel more immersive and dynamic than before.

The savannah sunset scene without SpatialAware
Right now, when a Scene Gallery scene is activated, the different colors are randomly sent to different lights without the system knowing where those lights are positioned. SpatialAware allows color to be distributed more intentionally for a more natural look. A scene that's designed to mimic a sunset, for example, will set lamps on one side of the room to warm yellow tones to mimic the setting sun, while lamps on the other side are set to darker shades.

SpatialAware requires the Hue Bridge Pro that came out last year, and it uses an iPhone or iPad camera to scan the room to figure out where each light is located. Scans can be updated with each new light that's added. SpatialAware will be accessible through the Scene Gallery, and it is an optional setting.

At launch, SpatialAware will be compatible with around half of the light scenes available in the Scene Gallery, and it has been designed primarily for nature-based scenes like lake mist, mountain breeze, and savanna sunset.

Along with SpatialAware, Signify is adding support for migrating multiple Hue bridges to a single Bridge Pro during the Bridge Pro setup process, and it is bringing Apple Home support to the Hue Secure camera line.

The Hue Secure Camera, Hue Secure video doorbell, and Hue contact sensors will work with Apple Home in the future, and users will be able to stream live video in picture-in-picture mode on the Apple TV and get real-time alerts using the Apple Home app.

The Hue AI assistant has been updated with the ability to create automations based on natural language user requests, such as "wake me up at 6:45 a.m. every day except on Saturdays," and AI support is expanding to additional languages like Dutch, German, and Spanish.

Automations for lights and accessories are also now listed in the Rooms and Zones they control for easier adjustment, with options to rearrange content to put the most used automations front and center.

The new Hue SpatialAware feature is launching in spring 2026, while Apple Home support is coming in the first quarter of 2026. Multi-bridge migration and AI assistant automations are available now.Tags: CES 2026, Philips Hue
This article, "CES 2026: Philips Hue Line Get New SpatialAware Scenes, Hue Cameras Gain HomeKit Support" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 27 views

reporter

January 7Jan 7

8 things CISOs can’t afford to get wrong in 2026

8 things CISOs can’t afford to get wrong in 2026

Cybersecurity leaders have a lot to consider when trying to keep their organizations safe. But some things stand out more than others — or might be under the radar.
As a new year dawns, here are some things CISOs should avoid falling short on in 2026.
Get complacent about identity controls in the face of rising AI agents
The deployment of AI agents is growing rapidly, as enterprises look to take advantage of the automation and efficiency they offer. The global AI agents market size was estimated at $5.40 billion in 2024 and is projected to reach $50.31 billion by 2030, according to Grand View Research.
The increased use of AI agents presents a cybersecurity challenge for enterprises, especially in terms of identity controls. Potential threats include identity spoofing and over-permissioned access. Cyber criminals can exploit agents through prompt injection or malicious instructions to bypass controls and gain unauthorized access to systems and applications.
“Get identity — including AI agents — right and you control who can do what at machine speed,” says Morgan Adamski, deputy leader for cyber, data, and tech risk at consulting firm PwC.
“Adversaries increasingly log in, not break in, and AI agents are now making real changes to systems and data,” Adamski says. “What leaders can’t afford to miss is treating every human, workload, and agent as a managed identity, setting them up with their own accounts, phishing-resistant MFA [multi-factor authentication], minimum access for only as long as needed, passwords/keys that change automatically, and monitoring for odd permission changes or hijacked sessions.”
Enterprises need to build AI-agent governance into everyday workflows,
so that teams can move quickly without losing control, Adamski says. For example, require hardware-backed MFA for administrators, expire elevated privileges by default, and register each new agent as an application with its own policies.


“Identity and access controls for AI agents and AI platforms are one of the most important areas of concern for CISOs,” says Jason Stading, director at global technology research and advisory firm ISG. “Right now, permissions and access rights for AI are a black box in many areas. We will see a major push over the next couple of years for tools and methods for more transparency and control in this area specifically.”
Ignore increasingly complex supply chains
Supply chains have been a growing area of risk for enterprises, given the rise of digital business and the growing complexity of supply chains in today’s global business market.
This area is particularly important for companies in the manufacturing, retail, and logistics sectors. “In 2026, CISOs who overlook cybersecurity in complex supply chains and manufacturing environments risk catastrophic consequences,” says Greg Zelo, CTO of AMFT, a provider of metal products and components.
“Modern manufacturing is no longer confined to a single plant; it’s a web of interconnected suppliers, IoT [internet of things]-enabled machinery, and cloud-driven production systems,” Zelo says. “This complexity creates an expansive attack surface where one weak link can cripple entire operations.”
Recent incidents underscore the stakes, Zelo says. For example, in September 2025, Jaguar Land Rover suffered a supply chain cyberattack that halted production across the UK, Slovakia, India, and Brazil for weeks, costing an estimated $2.5 billion, he says. “The breach rippled through hundreds of suppliers, triggering layoffs and bankruptcies,” he adds. “This wasn’t just an IT failure; it was an operational crisis that exposed how deeply interdependent global manufacturing has become.”
Attackers increasingly target operational technology (OT) systems that control robotics, assembly lines, and quality checks because halting production forces companies to pay ransoms quickly, Zelo says.
“Beyond financial losses, the risks extend to intellectual property theft, regulatory penalties, and national security concerns,” Zelo says. “For CISOs, the lesson is clear: Traditional perimeter defenses are obsolete. Securing complex supply chains requires zero-trust architectures across IT and OT environments, continuous monitoring of third-party risk, including firmware and software updates, rapid patching and segmentation to isolate critical systems, [and] incident response drills involving suppliers and contractors.”
Downplay escalating geopolitical tensions
It’s easy to imagine CISOs being so laser focused on protecting their organizations from external and internal threats that they take their eyes off geopolitical tensions. Or maybe they dismiss them as being irrelevant to the cybersecurity issues at hand for their organizations. Either way, it’s a big mistake.
“Building systemic scenarios into organizational cyber resiliency plans is very important,” ISG’s Stading says. “This should include global developments and geopolitical friction that may affect the business.”
There is also an increasing push for industry-specific threat intelligence to give enterprises tailored indicators of compromise that might affect their business and their assets, Stading says. “Some of this can stem from potential advanced, persistent threats from malicious nation-states.”
The increasing intersection of cybersecurity and geopolitics is a reality, says AJ Thompson, chief commercial officer at IT consultancy Northdoor.
“Cyber attacks via nation-state actors are part of much larger conflicts that target critical infrastructure and global supply chains,” he says. “Failure to incorporate geopolitical intelligence into threat modeling disproportionately exposes organizations to high-impact state-sponsored cyberattacks.”
In addition, unintended involvement in such events can also have severe regulatory and reputational consequences, Thompson notes.
Be lax about organizational cloud use
As use of cloud services continues to increase, so do the security and privacy risks associated with the cloud. If CISOs neglect this area of cybersecurity they risk exposing their organizations to attacks.
“This is important for both cloud services and AI tools, which are often cross-pollinated with each other,” Stading says. “Appropriate and modern security awareness and training tied to roles and responsibilities is key, and it needs to factor in usage of AI tools and technologies that are so prevalent in the workplace now.”
There is often a lack of training and education for cloud administrators and engineers around proper cloud security practices and procedures, Stading says. “Tool adoption and usage is also a key area many cloud teams are trying to improve,” he says. “Many organizations have invested in security tooling for clouds that is underutilized.”
The traditional security perimeter no longer exists, “especially with multicloud adoption,” Thompson says. “Organizations relying on reactive cloud security often miss sophisticated threats.”
Proactive cloud security posture management (CSPM) and clear user security guidelines are critical steps toward the prevention of costly breaches and operational disruptions, Thompson says. “Safe user practices must be instilled continuously in order to minimize risks from human error in complex cloud environments,” he says.
Overlook growing compliance burdens
Some companies, particular in heavily regulated industries such as financial services and healthcare, have long faced the need to comply with data security and privacy regulations such as the Gramm-Leach-Bliley Act (GLBA) and Health Insurance Portability and Accountability Act (HIPAA).
But these days, just about every type of business has to comply with a growing number of data privacy and protection laws around the world. Overlooking or underestimating these regulations could lead to fines and other repercussions.
“It’s true that heavily regulated organizations take on a lot of extra overhead for compliance activities, and compliance fatigue is not unheard of,” Stading says. “Because the CISO role has evolved over the past few years to take on more accountability and responsibility for compliance, CISOs really cannot afford to overlook or undervalue compliance efforts.”
CISOs at global enterprises in particular need to be up on the latest developments. “The regulatory landscape for cybersecurity in the UK and Europe is escalating rapidly,” Northdoor’s Thompson says. “Frameworks such as the GDPR [General Data Protection Regulation] and DORA [Digital Operational Resilience Act] are setting new benchmarks that require organizations to demonstrate not only documented controls, but also empirically verifiable cybersecurity effectiveness.”
Regulators will want to see robust evidence that cybersecurity and operational resilience are deeply embedded within all layers of business processes, rather than handled as a compliance checkbox, Thompson says.
“Equally important is the management of third-party risk, for which regulators increasingly hold organizations accountable,” Thompson says. “As supply chains become more complex and distributed, vulnerabilities from external providers represent serious compliance and security liabilities. Failure to integrate these regulatory expectations into security strategies proactively risks not just heavy financial penalties, but also operational disruption and lasting reputational harm.”
Underestimate AI chatbots and the legal exposure they create
AI chatbots are an emerging risk for data privacy, says Daniel Woods, principal researcher at Coalition, a cybersecurity insurance provider. In Coalition’s analysis of nearly 200 privacy-related claims and scans of 5,000 business websites, 5% of claims targeted chatbot technologies, he says.
“These claims alleged unlawful interception of customer conversations under state wiretap laws enacted long before such AI tools existed,” Woods says. “All the chatbot-related claims followed the same template, stating that the chat’s opening message should have disclosed that the conversation was being recorded.”
The claims alleged violation of the decades-old Florida Security of Communications Act, Woods says. About 5% of websites deployed chatbot technologies, which equates to the same percentage of web privacy claims that focused on chatbots, he notes.
“Chatbot use was particularly common in the IT and financial industries, with 9% and 6% of sites in these industries using chatbots, respectively,” Woods adds. There will likely be an increase in usage of these chatbots and therefore, a potential increase in future claims, he contends.
“The risk of getting chatbots wrong is that these systems can be easily manipulated with tactics like prompt injection, which has been documented dozens of times leaking customer data,” Woods says.
Neglect to secure the cloud
By now, nearly every business relies on cloud services to support at least some of their operations. Neglecting the security of these services is asking for trouble.
“Cloud and SaaS will keep expanding — so pre-wire ‘golden’ landing zones with guardrails for identity, encryption, logging, and egress, and use policy-as-code so the compliant configuration is the default,” PwC’s Adamski says.
CISOs need to use tools to continuously inventory assets, spot misconfigurations, flag anomalous behavior, and auto-remediate where prudent, Adamski adds.
“The act of firefighting alerts coming in from everywhere won’t keep up with multicloud sprawl and identity-centric attacks,” Adamski says. Modernize the security operations center with automation and AI to reduce the noise and correlate signals across cloud services.
Forget about the human factor
With so many cybersecurity tools and services in place, it’s easy to sometimes forget about the human side of cybersecurity. That can lead to all kinds of things going wrong.
“In my experience, the proximate cause of security breaches is usually human error,” says Beth Fulkerson, technology and cybersecurity partner at law firm CM Law. “Usually someone falls for a scam and opens the door [to] malicious code.”
It’s human nature to want to react to a message or open a document, and this is what gets users into trouble. “The primary solution is not more tech, but more training to help employees feel comfortable pushing back on requests for access to their machines or for information,” Fulkerson says.
An example of human error would be if someone fails to remember that a printer or fax machine is on a network, and does not install security protections or doesn’t remove it from the network, Fulkerson says.

“Another issue is failure to properly use the security technology available or already in place,” Fulkerson says. The most recent litigation she worked on involved a defendant that claimed it was using file integrity management software as required by the Payment Card Industry Data Security Standard (PCI DSS), but either didn’t set the alerts up or failed to heed the alerts.
“It doesn’t matter if a company has tremendous security software if they do not set it up correctly and maintain it,” Fulkerson says.


View the full article

• 0 comments
• 46 views

CSOonline

January 7Jan 7

Automated data poisoning proposed as a solution for AI theft threat

Automated data poisoning proposed as a solution for AI theft threat

Researchers have developed a tool that they say can make stolen high-value proprietary data used in AI systems useless, a solution that CSOs may have to adopt to protect their sophisticated large language models (LLMs).
The technique, created by researchers from universities in China and Singapore, is to inject plausible but false data into what’s known as a knowledge graph (KG) created by an AI operator. A knowledge graph holds the proprietary data used by the LLM.
Injecting poisoned or adulterated data into a data system for protection against theft isn’t new. What’s new in this tool – dubbed AURA (Active Utility Reduction via Adulteration)– is that authorized users have a secret key that filters out the fake data so the LLM’s answer to a query is usable. If the knowledge graph is stolen, however, it’s unusable by the attacker unless they know the key, because the adulterants will be retrieved as context, causing deterioration in the LLM’s reasoning and leading to factually incorrect responses.
The researchers say AURA degrades the performance of unauthorized systems to an accuracy of just 5.3%, while maintaining 100% fidelity for authorized users, with “negligible overhead,” defined as a maximum query latency increase of under 14%. They also say AURA is robust against various sanitization attempts by an attacker, retaining 80.2% of the adulterants injected for defense, and the fake data it creates is hard to detect.
Why is all this important? Because KGs often contain an organization’s highly sensitive intellectual property (IP), they are a valuable target.
Mixed reactions from experts
However, the proposal has been greeted with skepticism by one expert and with caution by another.
“Data poisoning has never really worked well,” said Bruce Schneier, chief of security architecture at Inrupt Inc., and a fellow and lecturer at Harvard’s Kennedy School. “Honeypots, no better. This is a clever idea, but I don’t see it as being anything but an ancillary security system.”
Joseph Steinberg, a US-based cybersecurity and AI consultant, disagreed, saying, “in general this could work for all sorts of AI and non-AI systems.”
“This is not a new concept,” he pointed out. “Some parties have been doing this [injecting bad data for defense] with databases for many years.” For example, he noted, a database can be watermarked so if it is stolen and some of its contents are later used – a fake credit card number, for example — investigators knows where that piece of data came from. Unlike watermarking, however, which puts one bad record into a database, AURA poisons the entire database, so if it’s stolen, it’s useless.
AURA may not be needed in some AI models, he added, if the data in the KG isn’t sensitive. The real unanswered question is what the real-world trade-off between application performance and security would be if AURA is used.
He also noted that AURA doesn’t solve the problem of an undetected attacker interfering with the AI system’s knowledge graph, or even its data.
“The worst case may not be that your data gets stolen, but that a hacker puts bad data into your system so your AI produces bad results and you don’t know it,” Steinberg said. “Not only that, you now don’t know which data is bad, or which knowledge the AI has learned is bad. Even if you can identify that a hacker has come in and done something six months ago, can you unwind all the learning of the last six months?”
This is why Cybersecurity 101 – defense in depth – is vital for AI and non-AI systems, he said. AURA “reduces the consequences if someone steals a model,” he noted, but whether it can jump from a lab to the enterprise has yet to be determined.
Knowledge graphs 101
A bit of background about knowledge graphs: LLMs use a technique called Retrieval-Augmented Generation (RAG) to search for information based on a user query and provide the results as additional reference for the AI system’s answer generation. In 2024, Microsoft introduced GraphRAG to help LLMs answer queries needing information beyond the data on which they have been trained. GraphRAG uses LLM-generated knowledge graphs to improve performance and lower the odds of hallucinations in answers when performing discovery on private datasets such as an enterprise’s proprietary research, business documents, or communications.
The proprietary knowledge graphs within GraphRAGs make them “a prime target for IP theft,” just like any other proprietary data, says the research paper. “An attacker might steal the KG through external cyber intrusions or by leveraging malicious insiders.”
Once an attacker has successfully stolen a KG, they can deploy it in a private GraphRAG system to replicate the originating system’s powerful capabilities, avoiding costly investments, the research paper notes.  
Unfortunately, the low-latency requirements of interactive GraphRAG make strong cryptographic solutions, such homomorphic encryption of a KG, impractical. “Fully encrypting the text and embeddings would require decrypting large portions of the graph for every query,” the researchers note. “This process introduces prohibitive computational overhead and latency, making it unsuitable for real-world use.”
AURA, they say, addresses these issues, making stolen KGs useless to attackers.
AI is moving faster than AI security
As the use of AI spreads, CSOs have to remember that artificial intelligence and everything needed to make it work also make it much harder to recover from bad data being put into a system, Steinberg noted.
“AI is progressing far faster than the security for AI,” Steinberg warned. “For now, many AI systems are being protected in similar manners to the ways we protected non-AI systems. That doesn’t yield the same level of protection, because if something goes wrong, it’s much harder to know if something bad has happened, and its harder to get rid of the implications of an attack.”
The industry is trying to address these issues, as the researchers observe in their paper. One useful reference, they note, is the US National Institute for Standards and Technology (NIST) AI Risk Management Framework that emphasizes the need for robust data security and resilience, including the importance of developing effective KG protection.
View the full article

• 0 comments
• 39 views

CSOonline

January 7Jan 7

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers

A newly discovered critical security flaw in legacy D-Link DSL gateway routers has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-0625 (CVSS score: 9.3), concerns a case of command injection in the "dnscfg.cgi" endpoint that arises as a result of improper sanitization of user-supplied DNS configuration parameters. "An unauthenticated remote attacker can injectView the full article

• 0 comments
• 34 views

Hacker News

January 7Jan 7

Für Cyberattacken gewappnet – Krisenkommunikation nach Plan

Für Cyberattacken gewappnet – Krisenkommunikation nach Plan

Gorodenkoff – shutterstock.com
Cyberangriffe fordern nicht nur CISOs in punkto Prävention und Krisenbewältigung heraus. Auch die Unternehmenskommunikation ist mit im Boot. Sie ist verantwortlich für den Krisenkommunikationsplan, den sie mit dem CISO entwickelt und bei Cybersicherheitsvorfällen umsetzt.
Eine gute Krisenprävention hat aus der Perspektive der Kommunikation drei Elemente und beginnt nicht erst dann, wenn die Krise eingetreten ist. Die folgenden Maßnahmen sollten grundsätzlich Teil der Unternehmenskommunikation (UK) sein.
Ein Krisenkommunikationsplan bereitet das Unternehmen optimal auf alle möglichen Krisenszenarien vor. Dazu zählen klare Verhaltens- und Kommunikationsregeln, vorbereitete Inhalte und sichere Kommunikationskanäle und -instrumente. Ein Internet-Monitoring zeigt an, wie die Krise in Sozialen Netzwerken und Medien wahrgenommen wird. Reputationsschädigende Veröffentlichungen können frühzeitig entdeckt und Gegenmaßnahmen eingeleitet werden. Eine gute Kommunikationsarbeit im Tagesgeschäft schafft etablierte Kontakte zu Meinungsführern. Auf gute Beziehungen und starkes Standing kann man in der Krise aufsetzen. Konsistente Aussagen nach außen
Um eine konsistente Kommunikation und im Krisenfall eine schnelle Reaktion auf alle Herausforderungen zu garantieren, ist eine klare kommunikative Verantwortungsstruktur unbedingt notwendig. Während die Gesamtverantwortung für korrektes unternehmerisches Handeln in der Krise bei der Geschäftsführung liegt, muss die Verantwortung für die Krisenkommunikation in der Abteilung Unternehmenskommunikation angesiedelt werden.
Notfallstäbe treten zusammen
Im Krisenkommunikations-Notfallstab (KKN) sollten nur aktiv an Kommunikationsentscheidungen beteiligte Verantwortliche teilnehmen. Dieses Gremium wird nicht nach hierarchischen Gesichtspunkten besetzt.
Parallel etabliert sich der erweiterte Krisenkommunikations-Notfallstab (eKKN). Ihm gehören Mitglieder aller Unternehmensbereiche an. Aufgabe des eKKN ist es, die Gesamtorganisation über den Stand der Dinge zu informieren.
Leitung des Krisenstabs
Neben der Krisenkommunikation geht es im konkreten Handeln, um die Krise zu lösen, vor allen Dingen um die Koordination technischer Maßnahmen. Im Falle einer Cyberattacke liegt die Verantwortung bei der IT-Abteilung. Deshalb führen ein Mitglied aus der Unternehmenskommunikation und ein Mitglied aus der IT gemeinsam den KKN.
Zu den Aufgaben des KKN gehört es, die Kommunikationsmaßnahmen auszurollen und die externe Berichterstattung zu beobachten. Der Krisenstab entscheidet auch darüber, Maßnahmen und Inhalte anzupassen.
Von der Theorie in die Praxis
Die Planung der Krisenkommunikation umfasst viele praktische Aspekte. Dazu gehört zum Beispiel, zu definieren, in welchem Raum Live-Sitzungen des Krisenstabs stattfinden können und wie Online-Meetings abgehalten werden.
Dabei muss für den Fall einer Cyberkrise immer mit bedacht werden, dass gegebenenfalls Kommunikationstools wie E-Mail, Chat und Festnetz- beziehungsweise IP-Telefonie nicht verfügbar sind.
Notfall-Infrastruktur frühzeitig aufbauen
Es muss auch damit gerechnet werden, dass das IT-Netz nicht zugänglich ist oder aus Sicherheitsgründen abgeschaltet werden muss. Sämtliche vorbereitete Dokumente und Kontaktlisten des Krisenstabs müssen deshalb zwingend auch ohne Zugang zum internen IT-Netz erreichbar sein.
Dabei müssen für die Teammitglieder E-Mail-Accounts genutzt werden, die unabhängig von der Unternehmens-IT funktionieren. Die UK-Leitung muss bei der Erstellung dieser alternativen Kommunikations-Infrastruktur für Krisenfälle unbedingt auf Datenschutz- und Datensicherheit achten.
Licht ins Dunkel mit der Darksite
Wo sollten Betriebe mit der ersten Notfall-Kommunikation anfangen? Gehen wir von der Situation aus, dass die IT nicht mehr funktioniert und auch die Webseite nicht mehr erreichbar ist. Dann wird eine Darksite online geschaltet.
Die Darksite ist eine vorbereitete Internet-Seite mit den wichtigsten Informationen für Kunden, Partner und Öffentlichkeit im Krisenfall. Die Web-Adresse der Homepage wird über den Provider auf diese Darksite gelenkt.
Laufende Information stärkt das Vertrauen
Auf der Darksite können laufend aktuelle Informationen zur Krise und zur Krisenbewältigung veröffentlicht werden sowie Kontaktadressen für Betroffene, Medien und Partner. Bereits im Vorfeld muss geklärt sein, wer im KKN für die Redaktion der Darksite verantwortlich ist.
Das Vorhalten einer Darksite ist unbedingt zu empfehlen, da die Webseite ein attraktives Ziel für Cyberkriminelle ist. Sie beweisen damit den Erfolg ihrer Attacke.
Mehrstufige Kommunikation
Entscheidend für eine gute Außenkommunikation ist, dass Medien und Nutzer Sozialer Netzwerke aus einer Hand informiert werden. Deshalb muss geklärt sein, dass ausschließlich definierte Mitarbeiterinnen und Mitarbeiter der Unternehmenskommunikation mit Erfahrung in der Öffentlichkeitsarbeit Stellungnahmen gegenüber den Medien abgeben.
Alle Abteilungen müssen darüber informiert sein, wer Ansprechpartner für Medien ist. Die Pressearbeit in der Krise erfolgt grundsätzlich mehrstufig.
Stellungnahme bereithalten
Sofort bei Ausbruch der Krise muss ein vorbereitetes Statement bereitgestellt werden, das auf Anfrage herausgegeben werden kann. Dieses Statement kann noch keine Details zum Vorfall selbst enthalten, muss aber die Bereitschaft zur offenen Kommunikation erklären.
Da die meisten Cybervorfälle nach dem gleichen Muster ablaufen, können die Dokumente gut vorbereitet werden. Je konkreter das Ausmaß der Krise intern bekannt ist, desto konkreter kann die erste Stellungnahme formuliert werden.
Erste aktive Erklärung
Sobald Ursache und Ausmaß der Krise benannt werden, erfolgt eine aktive Information mit Kernaussagen. Da die häufigsten Formen von Cyberangriffen bekannt sind, kann auch diese Pressemitteilung vorbereitet werden.
Gegebenenfalls können noch ergänzende Aussagen hinzugefügt werden, die für das Verständnis des Vorfalls wichtig sind beziehungsweise die Reputation schützen oder zusätzliche Informationen für Betroffene beinhalten.
Alternative Tools für Pressearbeit
Bei der aktiven Kommunikation ist zu beachten, dass interne Systeme, etwa Listen mit Medienkontakten oder Tools für den Versand von Presseinfos nicht mehr zur Verfügung stehen. Cloud-Lösungen können hier Abhilfe schaffen und lassen sich meist auch im Tagesgeschäft nutzen.
Die wichtigsten Daten, zum Beispiel private E-Mail-Adressen und Mobilfunk-Nummern der Mitglieder der Krisenstäbe sowie der wichtigsten externen Notfallpartner, sollten aber immer auch auf dem sichersten Medium der Welt gespeichert werden: auf Papier!
Laufende Information gemäß Kenntnisstand
Eine zweite Pressemitteilung folgt zeitnah mit ergänzenden Informationen zum Vorfall und mit einer Erläuterung der Anti-Krisenstrategie sowie Hinweisen für Betroffene. Je nach Krisenverlauf folgen weitere Pressemitteilungen.
Die optionale vierte Phase kann kommunikativ grundsätzlich genutzt werden, um Vertrauen aufzubauen: Geschäftsführende und Mitglieder des Expertenteams können gemeinsam darüber berichten, welche Wege zur erfolgreichen Bewältigung der Krise geführt haben.
Das Kommunikationshandbuch – Nachschlagwerk für die Krise
Das Krisenkommunikationshandbuch ist Teil des Notfallhandbuchs. Das Notfallhandbuch deckt alle Aspekte der Krisenbewältigung ab. Es kann für jede potenziell von einer Krise betroffene Fachabteilung mit einem entsprechenden Kapitel ergänzt werden. Zusätzlich sollte das Notfallhandbuch weitere Unterlagen umfassen, die eher dem allgemeinen Krisenmanagement einer Organisation zuzuordnen sind.
Das Krisenkommunikationshandbuch umfasst zum Beispiel folgende Elemente:
Definition einer Krise Definition von Zuständigkeiten Mitgliedslisten der Krisenstäbe mit allen Kontaktdaten inklusive privater E-Mail-Adressen und privater Telefonnummern Beschreibung der Aufgaben der Gremien Definition der Prozesse Definition aller in der Krise genutzten Kommunikationskanäle (mit Zielgruppenzuordnung) Definition aller Kommunikationsinstrumente in der Krise Definition der Sprecher-Rollen Ablaufdiagramme (vom Feststellen der Krise bis zur Beendigung der Krise) Beschreibung der Kommunikationskultur Vorformulierte Dokumente Ratgeber und Vorlagen von staatlicher Seite
Das Bundesamt für Sicherheit in der Informationstechnik (BSI) empfiehlt schon lange die Erstellung eines Notfallhandbuchs und gibt auch konkrete Tipps, was so ein Handbuch alles enthalten sollte.
 
Die Krisenkommunikation sollte immer ein Teil eines Notfallhandbuch sein. Es hilft auch nichts, wenn ein Unternehmen technisch gerettet ist, aber die Kunden und Partner mangels Kommunikation weglaufen. Erfahrungsgemäß muss ein Handbuch zur Krisenkommunikation immer in einem Prozess mit Geschäftsführung, Kommunikationsabteilung, IT-Abteilung, Sicherheits-Experten und betroffenen Fachabteilungen eines Unternehmens erarbeitet werden.
Alle Jahre wieder – der Praxistest
Wie eine Brandschutzübung wird auch die Krisenkommunikation, die durch eine Cyberattacke ausgelöst wurde, jährlich geübt. Sie beginnt mit der Ausrufung der Krise bis zum Abschlussbericht. Damit wird überprüft, ob Maßnahmen funktionieren, Gremien arbeitsfähig sind, die Prozesse wie gewünscht ablaufen und die Vorlagen tauglich sind.(jm)
Lesetipp: So geht Tabletop Exercise
View the full article

• 0 comments
• 154 views

CSOonline

January 7Jan 7

Cybersecurity hat kein Budget-Problem

Cybersecurity hat kein Budget-Problem

Dudarau Dzmitry | shutterstock.com
Wenn es um Security-Budgets geht, dreht sich ein Großteil der (Online-)Diskussionen darum, wie man das “Board” für sich gewinnt und Investitionen rechtfertigt. Einige Ansätze basieren auf spezifischen Finanzmodellen und zielen darauf ab, den Return on Investment (ROI) zu rechtfertigen. Andere konzentrieren sich eher darauf, Risiken zu quantifizieren und deren Minderung nachzuweisen. Gemein ist ihnen allen, das sie datengestützt funktionieren und auf rationalen Argumenten fußen.
Allerdings stellt sich die Frage: Werden Entscheidungen in großen Organisationen wirklich auf diese Art und Weise getroffen? Tatsächlich sind diese Ansätze Teil der Bottom-up-Argumentation, die CISOs, Security-Berater und -Anbieter in den letzten zwei Jahrzehnten entwickelt haben, um Vorstände für sich zu gewinnen. Meiner Erfahrung nach steht das im Widerspruch zur realen Unternehmensdynamik. Und zwar in dreierlei Hinsicht.
Narrativ trifft Realität
Zunächst einmal: Die Entscheidungsfindung auf Unternehmensebene mag den Anschein von Rationalität erwecken. Tatsächlich wird sie jedoch von kognitiven Verzerrungen beeinflusst, wie Daniel Kahneman und seine Denkschule nachgewiesen haben. Im Cybersecurity-Bereich ist das besonders offensichtlich – was mich zu meinem zweiten Punkt führt. Jeder, der ausreichend Zeit in der Sicherheitsbranche verbracht hat, kennt diese Situation. Zuvor verweigerte Gelder werden plötzlich in nicht geahnter Höhe verfügbar, weil:
regulatorische Überprüfungen anstehen, ein Audit-Report schlecht ausgefallen ist, oder ein aktueller Sicherheitsvorfall für Furore sorgt. In solchen Szenarien werden eher selten Bedenken bezüglich des Return on Invest (ROI) oder der Risikominderung geäußert. Die obersten Führungskräfte haben eher im Blick, nachweisen zu können, dass sie ihren Job erledigt haben, wenn es zu einem schwerwiegenden Breach kommt. Wenn die Umsetzung nicht entsprechend erfolgt, trägt jemand anderes dafür die Verantwortung. Das ist nicht selten der CISO – die Bezeichnung Chief Incident Scapegoat Officer kommt nicht von ungefähr. Noch wichtiger: In vielen Vorstandsetagen ist inzwischen die Erkenntnis gereift, dass es weniger die Frage ist, ob ein Cyberangriff droht – sondern vielmehr wann. Nach zwei Jahrzehnten, die quasi einem fortlaufenden Breach gleichkommen, dürfte es schwierig sein, noch ein Board-Mitglied zu finden, das sich der möglichen Auswirkungen auf das Geschäft nicht bewusst ist.
Das bringt mich zu meinem dritten Punkt: Ich habe viele Gespräche geführt, insbesondere mit CIOs. Die geben oft ganz offen zu, dass sie in ihre Cybersecurity-Budgets einplanen können, was sie möchten. Ihr Hauptproblem besteht vor allem darin, bei Security-Projekten auch Ergebnisse zu liefern. Woher kommt diese Diskrepanz zwischen CISOs und Anbietern, die mit Ressourcen kämpfen auf der einen Seite und Top-Führungskräften auf der anderen, die zunehmend verstehen, dass es wichtig ist, in den Schutz des Unternehmens zu investieren?
Der Mythos von der unterfinanzierten Cybersecurity
Natürlich sind Cybersecurity-Projekte oft komplex. Schließlich müssen sie Unternehmenssilos und geografische Grenzen hinter sich lassen, um einen wirksamen Schutz für das Unternehmen zu gewährleisten. In großen Unternehmen, die naturgemäß territorial und politisch geprägt sind, ist das nicht selbstverständlich. Darüber hinaus spielt auch das Profil der CISOs eine wichtige Rolle: Die meisten haben einen technologischen Hintergrund und haben das letzte Jahrzehnt damit verbracht, Vorfälle zu bekämpfen – ohne jemals in die Lage zu kommen, eine langfristige Strategie zu entwickeln oder umzusetzen.
Sie haben deshalb in vielen Fällen auch nicht die Management-Erfahrung, die politische Finesse oder das Charisma entwickelt, das nötig ist, um wirklich erfolgreich zu sein – jetzt, wo sie im Fokus der Unternehmensleitung stehen. Viele glauben wirklich, dass chronisches Underinvestment in Cybersicherheit die Hauptursache für unzureichende Reifegrade ist. In Wirklichkeit sind es meist chronische Ausführungsfehler in Verbindung mit einer endemischen, kurzfristigen Geschäftsausrichtung, die das Kernproblem darstellen:
Projekte werden zurückgestellt, sobald “Quick Wins” erzielt oder Compliance-Berichte abgehakt sind; Es kommt zu Richtungswechseln, sobald ein neuer Geschäftsführer eintritt – oder ausscheidet; Initiativen werden bei den ersten Anzeichen von Marktturbulenzen auf Eis gelegt. Solche Dinge deuten darauf hin, dass kulturelle und Governance-Aspekte das eigentliche Problem sind – und die Ursache für stagnierende Cybersecurity-Reifegrade. Unter den CISOs, die diese kulturellen Aspekte nicht integriert haben und regelmäßig von diesen Entscheidungen ausgeschlossen bleiben, führt das zu Frust. Und dieser führt wiederum zu kurzen Amtszeiten (für viele nur etwa zwei bis drei Jahre). Dieser stete Wechsel verschärft dann das Missverhältnis zwischen Management und Führung weiter. Denn in großen Unternehmen sind wirklich transformativen Veränderungen in solchen Zeiträumen nicht zu bewirken.
Auch für das Top-Management ist ein CISO-Personalkarussell frustrierend: Sie haben schon allzu oft erlebt, dass neue CISOs mit großartigen Plänen und Millionenforderungen antraten – um dann nach wenigen Jahren alles halbfertig zurückzulassen.
In 100 Tagen an den “Strategietisch”
Ein Großteil dieser Diskrepanz entsteht in den ersten hundert Tagen des CISOs. Viele Sicherheitsentscheider treten ihre neue Stelle mit vorgefassten Meinungen an, die manchmal schon beim Vorstellungsgespräch entstanden sind. Dinge, die woanders funktioniert haben, Leib-und-Magen-Themen, -Anbieter oder -Berater. Viele haben außerdem den Drang, sich in den ersten hundert Tagen als Spezialisten zu beweisen. Das ist ein Fehler. Kompetenz wird in den ersten hundert Tagen vorausgesetzt (schließlich wurden Sie ja gerade erst eingestellt). Die Herausforderungen liegen woanders: Es geht darum, Ihre Fähigkeit unter Beweis zu stellen, sich in die Organisationsstruktur des Unternehmens einzufügen und als Führungskraft zu agieren.
Meiner Meinung nach beginnt das damit, zuzuhören. Zum Beispiel den Stakeholdern und Sponsoren, um deren Erwartungen und Pain Points zu verstehen. Oder das, was beim Vorgänger funktioniert hat und was nicht. Dieser Prozess sollte den Beginn markieren für die gemeinschaftliche Entwicklung einer Cybersicherheitsstrategie. Wenn Ziele mit den Stakeholdern und Sponsoren geteilt werden, reduziert das auch Reibungsverluste. Daraus können mit der Zeit Business Champions entstehen, die die Cybersicherheitsstrategie vorleben und weitergeben. Und zwar nicht, weil es die des CISO ist, sondern ihre eigene.
CISOs sollten in den ersten hundert Tagen außerdem in die Governance- und Führungsdynamik des Unternehmens eingebunden werden. Nur Sicherheitsentscheider, die die kulturellen Strömungen im gesamten Unternehmen identifizieren und verfolgen, erlangen Zugang zu den informellen Vertrauensnetzwerken, in denen die tatsächlichen Entscheidungen getroffen werden. Budget-Diskussionen sind ab diesem Punkt deutlich weniger konfrontativ – sie entwickeln sich mehr zu einem gegenseitigen Austausch zwischen vertrauenswürdigen Partnern. Umgekehrt laufen CISOs, die ihre ersten hundert Tage damit verbringen, sich technisch zu beweisen, Gefahr, in einem Teufelskreis aus operativen Feuerwehreinsätzen gefangen zu bleiben. Und aus dieser Situation gibt es oft kein Entkommen mehr. Am Ende mögen Sie zwar als zuverlässige Kraft angesehen werden, aber es ist unwahrscheinlich, dass Sie so einen Platz am “Strategietisch” erhalten.
Letztendlich wird die Zukunft denjenigen CISOs gehören, die erkennen, dass der Aufbau von Einfluss und Vertrauen Vorrang vor Maßnahmen und Investitionen haben muss. Vorstände müssen nicht mehr davon überzeugt werden, dass Cyberrisiken wichtig sind – sie brauchen selbstbewusste, kulturell versierte Führungskräfte, die sich in komplexen Unternehmensdynamiken zurechtfinden, Vertrauen zu allen Stakeholdern aufbauen und die Umsetzung über Silos hinweg koordinieren können. (fm)
Dieser Beitrag wurde im Rahmen des englischsprachigen Experten-Netzwerks von Foundry veröffentlicht.
View the full article

• 0 comments
• 37 views

CSOonline

January 7Jan 7

Cybersecurity hat kein Budget-Problem

Cybersecurity hat kein Budget-Problem

Dudarau Dzmitry | shutterstock.com
Wenn es um Security-Budgets geht, dreht sich ein Großteil der (Online-)Diskussionen darum, wie man das “Board” für sich gewinnt und Investitionen rechtfertigt. Einige Ansätze basieren auf spezifischen Finanzmodellen und zielen darauf ab, den Return on Investment (ROI) zu rechtfertigen. Andere konzentrieren sich eher darauf, Risiken zu quantifizieren und deren Minderung nachzuweisen. Gemein ist ihnen allen, das sie datengestützt funktionieren und auf rationalen Argumenten fußen.
Allerdings stellt sich die Frage: Werden Entscheidungen in großen Organisationen wirklich auf diese Art und Weise getroffen? Tatsächlich sind diese Ansätze Teil der Bottom-up-Argumentation, die CISOs, Security-Berater und -Anbieter in den letzten zwei Jahrzehnten entwickelt haben, um Vorstände für sich zu gewinnen. Meiner Erfahrung nach steht das im Widerspruch zur realen Unternehmensdynamik. Und zwar in dreierlei Hinsicht.
Narrativ trifft Realität
Zunächst einmal: Die Entscheidungsfindung auf Unternehmensebene mag den Anschein von Rationalität erwecken. Tatsächlich wird sie jedoch von kognitiven Verzerrungen beeinflusst, wie Daniel Kahneman und seine Denkschule nachgewiesen haben. Im Cybersecurity-Bereich ist das besonders offensichtlich – was mich zu meinem zweiten Punkt führt. Jeder, der ausreichend Zeit in der Sicherheitsbranche verbracht hat, kennt diese Situation. Zuvor verweigerte Gelder werden plötzlich in nicht geahnter Höhe verfügbar, weil:
regulatorische Überprüfungen anstehen, ein Audit-Report schlecht ausgefallen ist, oder ein aktueller Sicherheitsvorfall für Furore sorgt. In solchen Szenarien werden eher selten Bedenken bezüglich des Return on Invest (ROI) oder der Risikominderung geäußert. Die obersten Führungskräfte haben eher im Blick, nachweisen zu können, dass sie ihren Job erledigt haben, wenn es zu einem schwerwiegenden Breach kommt. Wenn die Umsetzung nicht entsprechend erfolgt, trägt jemand anderes dafür die Verantwortung. Das ist nicht selten der CISO – die Bezeichnung Chief Incident Scapegoat Officer kommt nicht von ungefähr. Noch wichtiger: In vielen Vorstandsetagen ist inzwischen die Erkenntnis gereift, dass es weniger die Frage ist, ob ein Cyberangriff droht – sondern vielmehr wann. Nach zwei Jahrzehnten, die quasi einem fortlaufenden Breach gleichkommen, dürfte es schwierig sein, noch ein Board-Mitglied zu finden, das sich der möglichen Auswirkungen auf das Geschäft nicht bewusst ist.
Das bringt mich zu meinem dritten Punkt: Ich habe viele Gespräche geführt, insbesondere mit CIOs. Die geben oft ganz offen zu, dass sie in ihre Cybersecurity-Budgets einplanen können, was sie möchten. Ihr Hauptproblem besteht vor allem darin, bei Security-Projekten auch Ergebnisse zu liefern. Woher kommt diese Diskrepanz zwischen CISOs und Anbietern, die mit Ressourcen kämpfen auf der einen Seite und Top-Führungskräften auf der anderen, die zunehmend verstehen, dass es wichtig ist, in den Schutz des Unternehmens zu investieren?
Der Mythos von der unterfinanzierten Cybersecurity
Natürlich sind Cybersecurity-Projekte oft komplex. Schließlich müssen sie Unternehmenssilos und geografische Grenzen hinter sich lassen, um einen wirksamen Schutz für das Unternehmen zu gewährleisten. In großen Unternehmen, die naturgemäß territorial und politisch geprägt sind, ist das nicht selbstverständlich. Darüber hinaus spielt auch das Profil der CISOs eine wichtige Rolle: Die meisten haben einen technologischen Hintergrund und haben das letzte Jahrzehnt damit verbracht, Vorfälle zu bekämpfen – ohne jemals in die Lage zu kommen, eine langfristige Strategie zu entwickeln oder umzusetzen.
Sie haben deshalb in vielen Fällen auch nicht die Management-Erfahrung, die politische Finesse oder das Charisma entwickelt, das nötig ist, um wirklich erfolgreich zu sein – jetzt, wo sie im Fokus der Unternehmensleitung stehen. Viele glauben wirklich, dass chronisches Underinvestment in Cybersicherheit die Hauptursache für unzureichende Reifegrade ist. In Wirklichkeit sind es meist chronische Ausführungsfehler in Verbindung mit einer endemischen, kurzfristigen Geschäftsausrichtung, die das Kernproblem darstellen:
Projekte werden zurückgestellt, sobald “Quick Wins” erzielt oder Compliance-Berichte abgehakt sind; Es kommt zu Richtungswechseln, sobald ein neuer Geschäftsführer eintritt – oder ausscheidet; Initiativen werden bei den ersten Anzeichen von Marktturbulenzen auf Eis gelegt. Solche Dinge deuten darauf hin, dass kulturelle und Governance-Aspekte das eigentliche Problem sind – und die Ursache für stagnierende Cybersecurity-Reifegrade. Unter den CISOs, die diese kulturellen Aspekte nicht integriert haben und regelmäßig von diesen Entscheidungen ausgeschlossen bleiben, führt das zu Frust. Und dieser führt wiederum zu kurzen Amtszeiten (für viele nur etwa zwei bis drei Jahre). Dieser stete Wechsel verschärft dann das Missverhältnis zwischen Management und Führung weiter. Denn in großen Unternehmen sind wirklich transformativen Veränderungen in solchen Zeiträumen nicht zu bewirken.
Auch für das Top-Management ist ein CISO-Personalkarussell frustrierend: Sie haben schon allzu oft erlebt, dass neue CISOs mit großartigen Plänen und Millionenforderungen antraten – um dann nach wenigen Jahren alles halbfertig zurückzulassen.
In 100 Tagen an den “Strategietisch”
Ein Großteil dieser Diskrepanz entsteht in den ersten hundert Tagen des CISOs. Viele Sicherheitsentscheider treten ihre neue Stelle mit vorgefassten Meinungen an, die manchmal schon beim Vorstellungsgespräch entstanden sind. Dinge, die woanders funktioniert haben, Leib-und-Magen-Themen, -Anbieter oder -Berater. Viele haben außerdem den Drang, sich in den ersten hundert Tagen als Spezialisten zu beweisen. Das ist ein Fehler. Kompetenz wird in den ersten hundert Tagen vorausgesetzt (schließlich wurden Sie ja gerade erst eingestellt). Die Herausforderungen liegen woanders: Es geht darum, Ihre Fähigkeit unter Beweis zu stellen, sich in die Organisationsstruktur des Unternehmens einzufügen und als Führungskraft zu agieren.
Meiner Meinung nach beginnt das damit, zuzuhören. Zum Beispiel den Stakeholdern und Sponsoren, um deren Erwartungen und Pain Points zu verstehen. Oder das, was beim Vorgänger funktioniert hat und was nicht. Dieser Prozess sollte den Beginn markieren für die gemeinschaftliche Entwicklung einer Cybersicherheitsstrategie. Wenn Ziele mit den Stakeholdern und Sponsoren geteilt werden, reduziert das auch Reibungsverluste. Daraus können mit der Zeit Business Champions entstehen, die die Cybersicherheitsstrategie vorleben und weitergeben. Und zwar nicht, weil es die des CISO ist, sondern ihre eigene.
CISOs sollten in den ersten hundert Tagen außerdem in die Governance- und Führungsdynamik des Unternehmens eingebunden werden. Nur Sicherheitsentscheider, die die kulturellen Strömungen im gesamten Unternehmen identifizieren und verfolgen, erlangen Zugang zu den informellen Vertrauensnetzwerken, in denen die tatsächlichen Entscheidungen getroffen werden. Budget-Diskussionen sind ab diesem Punkt deutlich weniger konfrontativ – sie entwickeln sich mehr zu einem gegenseitigen Austausch zwischen vertrauenswürdigen Partnern. Umgekehrt laufen CISOs, die ihre ersten hundert Tage damit verbringen, sich technisch zu beweisen, Gefahr, in einem Teufelskreis aus operativen Feuerwehreinsätzen gefangen zu bleiben. Und aus dieser Situation gibt es oft kein Entkommen mehr. Am Ende mögen Sie zwar als zuverlässige Kraft angesehen werden, aber es ist unwahrscheinlich, dass Sie so einen Platz am “Strategietisch” erhalten.
Letztendlich wird die Zukunft denjenigen CISOs gehören, die erkennen, dass der Aufbau von Einfluss und Vertrauen Vorrang vor Maßnahmen und Investitionen haben muss. Vorstände müssen nicht mehr davon überzeugt werden, dass Cyberrisiken wichtig sind – sie brauchen selbstbewusste, kulturell versierte Führungskräfte, die sich in komplexen Unternehmensdynamiken zurechtfinden, Vertrauen zu allen Stakeholdern aufbauen und die Umsetzung über Silos hinweg koordinieren können. (fm)
Dieser Beitrag wurde im Rahmen des englischsprachigen Experten-Netzwerks von Foundry veröffentlicht.
View the full article

• 0 comments
• 34 views

CSOonline

January 7Jan 7

Im Fokus: Die IT-Agenda 2026 gestalten

Im Fokus: Die IT-Agenda 2026 gestalten

View the full article

• 0 comments
• 31 views

CSOonline

January 7Jan 7

CES 2026: Google Brings Gemini AI Features to Google TV, Previewing What Apple TV Could Get

CES 2026: Google Brings Gemini AI Features to Google TV, Previewing What Apple TV Could Get

At CES 2026, Google announced some new Gemini features that it's bringing to Google TVs. Google TV is built into some TV sets and set-top boxes, and while it may not be immediately relevant to many Apple users, it does give us a look at what AI can do on a TV set.


Gemini on Google TV will be able to answer queries with a "visually rich framework" that offers up imagery, videos, and real-time sports updates. A "Deep Dives" feature will give users narrated, interactive overviews of a topic that are simplified for the whole family.

Users can search through their Google Photos Library using Gemini to find specific people or moments. It enables image editing on the TV, with options to apply artistic styles or generate cinematic slideshows. Nano Banana, Google's image generator, can reimagine personal photos or create original media right on the TV. Veo, Google's video generation tool, is also coming to Google TV.

Google is also adding an option to use natural language to optimize TV settings, which is perhaps the most useful new feature that Gemini integration brings. Users can tell Gemini things like "the screen is too dim" or "I can't hear the dialogue" to make quick adjustments to picture and sound.

According to Google, the Gemini features will be coming to TCL devices first, and other Google TV devices over the coming months.

Apple is planning to use a version of Google Gemini for some of its upcoming AI features, including the smarter version of Siri. The next-generation version of the Apple TV is expected to get an A17 Pro chip, which is compatible with Apple Intelligence.

With Apple adopting Gemini and Apple TVs soon becoming capable of new AI features, it's possible that some of the features that Google has announced for Google TV could be replicated on the ‌Apple TV‌. Apple could use ‌Apple Intelligence‌ and the new version of ‌Siri‌ to simplify controls, make better content suggestions, and more. The updated ‌Apple TV‌ and the new version of ‌Siri‌ could both come in spring 2026.Tag: CES 2026
This article, "CES 2026: Google Brings Gemini AI Features to Google TV, Previewing What Apple TV Could Get" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 61 views

reporter

January 7Jan 7

CES 2026: Aukey Launches MagFusion DeskHive 5X Pro

CES 2026: Aukey Launches MagFusion DeskHive 5X Pro

Aukey introduced a new desktop charging option this week, debuting the $150 MagFusion DeskHive 5X Pro. The DeskHive is a 5-in-1 charging solution that combines wired and wireless charging in a compact desktop box.


Measuring in at 3.76 x 3.76 x 3.07 inches, the DeskHive includes two retractable USB-C cables, a USB-C port, a USB-A port, and a Qi2.2 25W charger for wirelessly charging the iPhone. The magnetic charger has an adjustable hinge so it can be positioned at different angles for video calls or watching content.

With GaN technology, the DeskHive provides up to 200W for charging, offering support for charging at 140W through the USB-C port. A digital display offers real-time output for each wired port.

Aukey was also showing off the MagFusion Ark charger that it first debuted last year. The MagFusion Ark has a 6-in-1 design that includes a base station able to charge up to three devices, and three detachable 6,700 mAh power bank spheres for multi-device charging.


The MagFusion DeskHive 5X Pro and the MagFusion Ark are expected to launch in the second quarter of 2026.Tag: CES 2026
This article, "CES 2026: Aukey Launches MagFusion DeskHive 5X Pro" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 41 views

reporter

January 6Jan 6

CES 2026: GE's $300 Matter Smart Shades Work With Apple Home

CES 2026: GE's $300 Matter Smart Shades Work With Apple Home

GE Lighting this week unveiled Matter-compatible GE Smart Shades that are able to integrate with the Apple Home app. Priced starting at $300, the Smart Shades offer simple, screw-free installation, with white and gray fabric options. The shades can be purchased in a translucent fabric to let light through, or a blackout version. All options have aluminum trim and no visible hardware.


The motorized shades are designed to raise or lower via an included remote control, the Apple Home app, Siri voice commands, or time-based automations. There are options to integrate shade controls with other smart home products, or based on whether or not someone is home.

GE's Smart Shades support Matter over Thread, and can connect to HomeKit with a compatible Matter hub. In Apple's ecosystem, that includes the Apple TV, the HomePod, or the HomePod mini.

GE is offering multiple width options up to 38 inches, in lengths up to 76 inches. GE says that the motor that powers the shades is "whisper quiet." An included magnetic rechargeable battery will last for up to six months before it needs to be recharged.

The GE Smart Shades can be purchased from Amazon or the GE website as of today. Pricing starts at $299 and goes up to $370 for blackout versions and larger sizes.Tag: CES 2026
This article, "CES 2026: GE's $300 Matter Smart Shades Work With Apple Home" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 38 views

reporter

January 6Jan 6

CES 2026: SwitchBot Announces Household Robot, Matter Smart Lock and More

CES 2026: SwitchBot Announces Household Robot, Matter Smart Lock and More

SwitchBot, known for its Matter-enabled smart vacuums and other smart home products, today introduced the Onero H1, a robot that is meant to automate household chores.


The AI robot has a rolling base, a tube-shaped body, and flexible arms. SwitchBot says that it is designed to learn, adapt, and work in coordination with existing SwitchBot robots like vacuums. It does not have a single function, and is instead meant to adapt to multiple cleaning scenarios.

The Onero H1 combines visual perception, depth awareness, and tactile feedback to understand an object's position, shape, and interaction states, which SwitchBot claims is important for contact-intensive household tasks. It can grasp, push, open, and organize, though SwitchBot has not detailed specific tasks that it can complete. SwitchBot is showing off the robot at CES, and says it will be available for pre-order soon.

Along with the H1, SwitchBot is debuting the AI MindClip, a voice-based knowledge engine that records meetings, conversations, and everyday moments. Integrated AI provides structured summaries, to-do lists, and a searchable personal knowledge base. SwitchBot says the MindClip is meant to serve as a "second brain," and with a subscription-based AI cloud service, it allows users to pull up past discussions and reminders on-demand.


SwitchBot is also debuting the Lock Vista Series, a Matter-compatible smart lock that integrates with Apple Home and offers facial recognition capabilities for unlocking a door hands-free. It has DualPower and DualBackup systems with a high-capacity rechargeable battery and a long-life backup battery. A separate Lock Vista Pro also includes palm vein recognition capabilities as an alternative biometric option.


Other SwitchBot products being shown off at CES include the SwitchBot Weather Station with a 7.5-inch e-ink display and built-in sensors, and the Obboto, an expressive globe light that uses AI to offer music visualization and mood animations through 2,900 integrated LEDs. It is able to display time and weather through light patterns, and it provides interactive pixel art and ambiance modes for sleep, focus, and relaxation.

More information about SwitchBot's upcoming devices can be found on the SwitchBot website.Tag: CES 2026
This article, "CES 2026: SwitchBot Announces Household Robot, Matter Smart Lock and More" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 44 views

reporter

January 6Jan 6

CES 2026: Senso Is a Smart Plant Sensor With an AI Tamagotchi

CES 2026: Senso Is a Smart Plant Sensor With an AI Tamagotchi

Senso is a gamified plant sensor that's designed to use AI to improve plant care. It is supposed to track soil moisture, temperature, and light exposure data in real time, and there is a little pixel creature that delivers AI insights.


The pixel creature awakens once the sensor is placed in soil, and users can complete daily and weekly plant care missions to collect rewards and unlock new characters. The sensor has a modular design with different depth options, and multiple sensors for multiple plants can be combined. The AI and an accompanying app are meant to adapt to provide accurate readings across different plant species and pot types.

The device supports voice-based AI interactions, so you can ask it questions to get responses from a "friendly plant expert."


Senso is being shown off at CES 2026, but it is not an actual product yet. It is set to launch on Kickstarter in the near future. Pricing has not been announced.Tag: CES 2026
This article, "CES 2026: Senso Is a Smart Plant Sensor With an AI Tamagotchi" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 97 views

reporter

January 6Jan 6

CES 2026: Intel Unveils 18A-Based Core Ultra Series 3 Chips Amid Rumors of Future Apple Partnership

CES 2026: Intel Unveils 18A-Based Core Ultra Series 3 Chips Amid Rumors of Future Apple Partnership

Intel introduced its latest processors at CES 2026, debuting the "Panther Lake" Intel Core Ultra Series 3. The chips are the most advanced manufactured in the U.S., according to Intel, and they are built on Intel's 18A process.


18A, or 18-angstrom, is the most advanced node Intel has designed to date, but Intel continues to trail TSMC. TSMC is developing Apple's next-generation 2nm chips, and they are expected to have higher transistor density and efficiency than Intel's 18A chips.

Intel is developing several chips in the Ultra Series 3 line for both high-end and low-end laptops, with the top SKUs offering up to 16 CPU cores, 12 Xe cores (Intel's graphics architecture), and 50 NPU TOPS. Compared to prior-generation chips, Intel claims the Ultra Series 3 processors will bring up to 77 percent faster gaming performance, 60 percent better multithreaded performance, and up to 27 hours of battery life.

Apple doesn't use Intel chips anymore, so the new Core Ultra Series 3 processors will be exclusive to PCs, but there are rumors that Intel could manufacture some Apple chips in the future. According to Apple analyst Ming-Chi Kuo, Intel will make lower-end M-series chips for Apple's Macs built on the 18A process, using Apple chip designs. Intel could begin shipping chips to Apple as soon as mid-2027.

The first laptops powered by Intel Core Ultra Series 3 chips debuted at ‌CES 2026‌, with more coming throughout the first half of the year.Tags: CES 2026, Intel
This article, "CES 2026: Intel Unveils 18A-Based Core Ultra Series 3 Chips Amid Rumors of Future Apple Partnership" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 31 views

reporter

January 6Jan 6

CES 2026: LG 6K Monitor, New Qi2.2 Chargers and AI Products Everywhere

CES 2026: LG 6K Monitor, New Qi2.2 Chargers and AI Products Everywhere

It's day two of CES, and MacRumors videographer Dan Barbera has another video highlighting new and upcoming tech products that were showcased at media events. Today's video features new displays from LG, the latest Qi2.2 chargers, robots, and more.

Subscribe to the MacRumors YouTube channel for more videos.
LG announced multiple new TVs and displays at its CES 2026 event, and showed off some older tech. Last year's 32-inch UltraFine Evo 6K monitor was on display, and of all LG's displays, this one looks like it was made for macOS. Text is crisp, the scale is perfect, Thunderbolt 5 is supported, and the NanoIPS panel provides deeper blacks and better contrast than a standard IPS panel.

There were a couple new gaming displays, including a 27-inch tandem OLED monitor with a 720Hz refresh rate, and a 52-inch 5K 240Hz display that LG says is the world's largest gaming monitor. LG also showed off new OLED TVs, microRGB TVs for improved color accuracy, and a frame TV option to match the Sony Frame TV. And of course all of the TVs have new AI features.

At Pepcom, MCON had a $145 ultra portable gaming controller designed for the iPhone. It uses MagSafe to snap to the back of an ‌iPhone‌, and it includes full-size joysticks, tactile buttons, triggers, and fold-out grips. MCON actually showed off the controller last year, but now it's ready to ship out in late January.

Aukey was showing off the MagFusion Ark, a modular wireless charger that supports 25W Qi2.2 charging. The Ark has a 6-in-1 design with a base that can charge up to three devices, plus three detachable power bank spheres for charging on the go.

The $150 MagFusion DeskHive is an all-new charger from Aukey, featuring a 25W wireless charging puck for an ‌iPhone‌ plus two built-in retractable USB-C cables. It includes a digital display that shows real-time power output for each port, and a USB-C port that offers up to 140W charging. Both Aukey chargers are coming in the second quarter of 2026.

AGIBOT debuted a humanoid robot that was walking around the show floor and interacting with attendees. InnAIO, a company that sells an AI voice cloning device, had a portrait featuring an AI version of Vincent van Gogh that talked to attendees. It was just one of many borderline creepy AI products that made an appearance.

Ambient highlighted the $250 Dreamie, a bedside sleep companion that provides an alarm, a soft light for a sunrise wakeup, and audio soundscapes to listen to so you can ditch your phone at night. Tonies was showing off its next-generation box with improved sound quality, longer battery life, better connectivity, and a refreshed design. It's also more responsive and interactive.

Satechi showed off the $400 Thunderbolt 5 CubeDock, which looks a lot like the Mac mini. It has multiple Thunderbolt 5 ports and everything else you could need, including an SSD enclosure that supports up to 8TB. Twelve South was at Pepcom to promote the $180 Valet, a Qi2 charger that also serves as a catchall tray.

Aeroband was demonstrating its $429 wireless electric guitar, which has nine built-in tones, a built-in speaker, and multiple drum loops. Skylight introduced its Smart Calendar 2 with brightness improvements and new AI features. It can scan photos and import the info into the calendar, and you can also take pictures of what's in your fridge to add items to the meal section of the calendar.

We'll be covering more CES highlights throughout the week, so make sure to stay tuned, and check out our CES 2026 hub for all of our coverage.Tag: CES 2026
This article, "CES 2026: LG 6K Monitor, New Qi2.2 Chargers and AI Products Everywhere" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 51 views

reporter

January 6Jan 6

Deterministic AI Testing with Session Recording in cagent

Deterministic AI Testing with Session Recording in cagent

AI agents introduce a challenge that traditional software doesn’t have: non-determinism. The same prompt can produce different outputs across runs, making reliable testing difficult. Add API costs and latency to the mix, and developer productivity takes a hit.
Session recording in cagent addresses this directly. Record an AI interaction once, replay it indefinitely—with identical results, zero API costs, and millisecond execution times.
How session recording works
cagent implements the VCR pattern, a proven approach for HTTP mocking. During recording, cagent proxies requests to the AI provider, captures the full request/response cycle, and saves it to a YAML “cassette” file. During replay, incoming requests are matched against the recording and served from cache—no network calls required.
One implementation detail worth noting: tool call IDs are normalized before matching. OpenAI generates random IDs on each request, which would otherwise break replay. cagent handles this automatically.
Getting started
Recording a session requires a single flag:
cagent run my-agent.yaml --record "What is Docker?" # creates: cagent-recording-1736089234.yaml cagent run my-agent.yaml --record my-test "Explain containers" # creates: my-test.yaml Replaying uses the --fake flag with the cassette path:
cagent exec my-agent.yaml --fake my-test.yaml "Explain containers" The replay completes in milliseconds with no API calls.
Example: CI/CD integration testing
Consider a code review agent:
# code-reviewer.yaml agents: root: model: anthropic/claude-sonnet-4-0 description: Code review assistant instruction: | You are an expert code reviewer. Analyze code for best practices, security issues, performance concerns, and readability. toolsets: - type: filesystem Record the interaction with --yolo to auto-approve tool calls:
cagent exec code-reviewer.yaml --record code-review --yolo \\ "Review pkg/auth/handler.go for security issues" In CI, replay without API keys or network access:
cagent exec code-reviewer.yaml --fake code-review.yaml \\ "Review pkg/auth/handler.go for security issues" Cassettes can be version-controlled alongside test code. When agent instructions change significantly, delete the cassette and re-record to capture the new behaviour.
Other use cases
Cost-effective prompt iteration. Record a single interaction with an expensive model, then iterate on agent configuration against that recording. The first run incurs API costs; subsequent iterations are free.
cagent exec ./agent.yaml --record expensive-test "Complex task" for i in {1..100}; do cagent exec ./agent-v$i.yaml --fake expensive-test.yaml "Complex task" done Issue reproduction. Users can record a session with --record bug-report and share the cassette file. Support teams replay the exact interaction locally for debugging.
Multi-agent systems. Recording captures the complete delegation graph: root agent decisions, sub-agent tool calls, and inter-agent communication.
Security and provider support
Cassettes automatically strip sensitive headers (Authorization, X-Api-Key) before saving, making them safe to commit to version control. The format is human-readable YAML:
version:2 interactions: -id:0 request: method: POST url: <https://api.openai.com/v1/chat/completions> body:"{...}" response: status: 200 OK body:"data: {...}" Session recording works with all supported providers: OpenAI, Anthropic, Google, Mistral, xAI, and Nebius.
Get started
Session recording is available now in cagent. To try it:
cagent run ./your-agent.yaml --record my-session "Your prompt here" For questions, feedback, or feature requests, visit the cagent repository or join the GitHub Discussions.
View the full article

• 0 comments
• 46 views

reporter

January 6Jan 6

Apple Tests Background Security Updates in iOS 26.3 and macOS Tahoe 26.3

Apple Tests Background Security Updates in iOS 26.3 and macOS Tahoe 26.3

Apple is testing a Background Security Improvement feature that first rolled out in iOS 26.1, iPadOS 26.1, and macOS Tahoe 26.1. Developers and public beta testers who are running iOS 26.3, iPadOS 26.3, or ‌macOS Tahoe‌ 26.3 can install a new Background Security Improvement update for testing purposes.


According to Apple, Background Security Improvements provide additional security protections between software updates for Safari, WebKit, and other system libraries.

Background Security Improvements can be installed by going to the Privacy and Security section of the Settings app, scrolling down, and selecting the "Install" option. If Automatically Install is toggled on, Background Security Improvements will be automatically installed when they come out.

Apple says that users who opt not to install the Background Security Improvements will receive the updates in a standard software update.

Apple previously had a Rapid Security Response update feature for delivering security improvements, but it wasn't used often after it was introduced in iOS 16, and was ultimately phased out in favor of Background Security Improvements. At one point in 2023, there was a Rapid Security Response bug that prevented some websites from displaying properly.

Apple warns that Background Security Updates can result in "rare instances of compatibility issues." Should that occur, the updates may be temporarily removed and enhanced in a subsequent software update.
This article, "Apple Tests Background Security Updates in iOS 26.3 and macOS Tahoe 26.3" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 31 views

reporter

January 6Jan 6

CES 2026: Birdbuddy Debuts New Smart Bird Feeders

CES 2026: Birdbuddy Debuts New Smart Bird Feeders

Birdbuddy debuted two new smart bird feeders, which are successors to its existing bird feeder options. The Birdbuddy 2 and the Birdbuddy 2 mini are set to launch later this year.


The $199 Birdbuddy 2 features 2K HDR video, a wider field of view, dual integrated solar power, better audio, an improved extended perch, and more seed capacity. It was shown off earlier this year, and pre-orders have sold out, but it is set to launch in February 2026.

There is a redesigned circular camera housing with options for mounting the camera in portrait or landscape orientation, and slow-motion recording is available. For the first time, an included microphone can record and identify birdsongs, with species identification taking into account audio.

The $129 Birdbuddy 2 Mini has the same core camera technology as the Birdbuddy 2, but it comes in a simpler enclosure that's designed for first time smart bird feeder users and those with smaller yards or balconies. It has a smaller seed capacity, but comes with an easy-refill roof. A solar panel is an optional add-on. The Birdbuddy 2 Mini will be available for order around mid-2026, with a launch to follow later in the year.


Birdbuddy is also showcasing the Petal Smart Nature Camera, which was introduced on Kickstarter last year. It is designed to identify birds and insects, and it can be placed anywhere outdoors. Petal cameras are set to ship out this summer.

More information is available on the Birdbuddy website.Tag: CES 2026
This article, "CES 2026: Birdbuddy Debuts New Smart Bird Feeders" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 72 views

reporter

January 6Jan 6

From Signals to Decisions: AI-Assisted Detection Triage

From Signals to Decisions: AI-Assisted Detection Triage

Most SOC teams don’t struggle to detect threats. They struggle to decide what matters first.

Alerts arrive constantly, often with limited context and varying quality. Analysts are expected to interpret them quickly, accurately, and consistently -  even as environments change and queues grow. Triage becomes less about analysis and more about managing pressure.

This is where AI begins to matter, not as a replacement for analysts, but as a way to restore structure to the triage process.
View the full article

• 0 comments
• 43 views

compuquip

January 6Jan 6

Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users

Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users

Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate OpenAI ChatGPT and DeepSeek conversations alongside browsing data to servers under the attackers' control. The names of the extensions, which collectively have over 900,000 users, are below - Chat GPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI (ID:View the full article

• 0 comments
• 39 views

Hacker News

January 6Jan 6

CES 2026: Satechi Launches Thunderbolt 5 CubeDock

CES 2026: Satechi Launches Thunderbolt 5 CubeDock

Satechi today announced its first Thunderbolt 5 product, a dock that has an included SSD enclosure for adding storage. The Thunderbolt 5 CubeDock with SSD Enclosure supports high-resolution multiple display setups, offering 80Gb/s bi-directional bandwidth with 120Gb/s Bandwidth Boost.


The Thunderbolt 5 CubeDock has a 5x5x2-inch form factor, and it is designed from aluminum to match Apple devices. It includes a 180W power supply with 140W host charging, so it is able to work with Apple's largest laptops. It also includes 30W PD power for smartphones and tablets.

At the front of the CubeDock, there's a 30W/10Gb/s USB-C port, a headphone jack, a 10Gb/s USB-A port, an SD card slot, and a microSD card slot. The back features three downstream Thunderbolt 5 ports, a port for the power supply, a Thunderbolt 5 port to connect to a computer, a 10Gb/s USB-C port, a 10Gb/s USB-A port, and a 2.5Gb Ethernet port.


There is an integrated NVMe SSD enclosure that supports up to 8TB at 6000MB/s. There is an active cooling system that Satechi says is "whisper quiet" for optimal performance during heavy workloads.

The CubeDock supports up to three 8K displays with 60Hz refresh rates on Windows PCs, or two 6K 60Hz displays on Macs. Multiple 4K displays with high refresh rates are supported as well.

Satechi is also debuting a new Thunderbolt 5 Pro cable that supports 80Gb/s bidirectional data transfer, 240W power delivery, and dual 8K 60Hz displays.

The Thunderbolt 5 CubeDock can be pre-ordered from Satechi for $400, and it is set to ship in the first quarter of 2026. The Thunderbolt 5 Pro Cable is available now for $40.Tags: CES 2026, Satechi
This article, "CES 2026: Satechi Launches Thunderbolt 5 CubeDock" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 43 views

reporter

January 6Jan 6

CES 2026: Snap-On Accessory Adds Touch Display to Your MacBook

CES 2026: Snap-On Accessory Adds Touch Display to Your MacBook

Apple has historically resisted the idea of touchscreen MacBooks, arguing that laptop PCs with the feature are unwieldy and far from ergonomic. But recent reports suggest Apple has changed its tune, and the company is now rumored to be developing a touchscreen MacBook Pro. In the meantime, startup Intricuit has been showcasing its own solution at CES 2026 that brings touchscreen to existing MacBooks with Apple silicon.


The Magic Screen is a snap-on digitizer that aligns to your MacBook's display using the built-in magnets that let your Mac know when the lid is closed to trigger sleep mode. After connecting it via a single USB-C cable, the tempered glass layer supports the gamut of gestures we've come to associate with smartphones – tapping, swiping, and zooming with your fingers directly on the screen.

In a nod to the iPad and Apple Pencil, the Magic Screen also comes with its own stylus that supports pressure sensitivity and stylus hover for drawing, writing, manipulating objects, and navigation. The company has shown off the touchscreen in action with apps like SketchUp, Miro, and Resolume Arena. It also supports iPhone Mirroring, allowing you to interact with iOS apps on your MacBook display with your fingers.

The Magic Screen includes a built-in battery that Intricuit says works for up to 100 hours on a single charge, and it comes with a Folio Case that also folds into a stand that braces against the MacBook screen to reduce wobble. When removed from the MacBook display, the device also doubles as a standalone drawing tablet.

As for Apple's plans, a report by industry analyst Ming-Chi Kuo suggests the company's first OLED MacBook Pro will feature a touchscreen display. Kuo made the remarks in September 2025, and the claim has since been corroborated by Bloomberg's Mark Gurman, who added that the touchscreen OLED MacBook Pro will retain a full trackpad and keyboard.

According to Kuo, the OLED panel will use on-cell touch technology, which integrates the touch sensors directly into the display panel's top layer (the "cell") rather than requiring a separate, dedicated touch layer like the Magic Screen. The analyst added that the shift "appears to reflect Apple's long-term observation of iPad user behavior, indicating that in certain scenarios, touch controls can enhance both productivity and the overall user experience."
M6 MacBook Pro: Release Date, Pricing, and What to Expect
The reports suggest Apple is aiming to launch its first touchscreen MacBook Pro as soon as late 2026 or early 2027. Meanwhile, Intricuit says the Magic Screen is compatible with all MacBook Air and MacBook Pro models powered by Apple silicon, and that it will soon be available on Kickstarter, with shipping on track to begin in the first quarter of this year. Does the idea of a touchscreen display on a Mac appeal to you? Let us know in the comments. Tag: CES 2026
This article, "CES 2026: Snap-On Accessory Adds Touch Display to Your MacBook" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 31 views

reporter

January 6Jan 6

Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

The CERT Coordination Center (CERT/CC) has disclosed details of an unpatched security flaw impacting TOTOLINK EX200 wireless range extender that could allow a remote authenticated attacker to gain full control of the device. The flaw, CVE-2025-65606 (CVSS score: N/A), has been characterized as a flaw in the firmware-upload error-handling logic, which could cause the device to inadvertently startView the full article

• 0 comments
• 36 views

Hacker News

January 6Jan 6

Amazon Takes $200 Off M4 MacBook Air, Starting at $799

Amazon Takes $200 Off M4 MacBook Air, Starting at $799

You can get the 13-inch M4 MacBook Air (256GB) for $799.00 today on Amazon, down from $999.00. You'll find similar $200 discounts across nearly the entire M4 MacBook Air lineup, and all of these deals are being matched at Best Buy.

Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.

If you're looking for the larger model, you can get the 15-inch 256GB computer for $999.00, down from $1,199.00. You'll also find many of the 512GB models of the 13-inch and 15-inch M4 MacBook Air on sale this week.

$200 OFF13-inch M4 MacBook Air (256GB) for $799.00
$200 OFF15-inch M4 MacBook Air (256GB) for $999.00

These prices are solid second-best prices on the M4 MacBook Air, and we haven't tracked record low prices since before Christmas. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.



Deals Newsletter

Interested in hearing more about the best deals you can find this holiday season? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!




Related Roundup: Apple Deals
This article, "Amazon Takes $200 Off M4 MacBook Air, Starting at $799" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 40 views

reporter

January 6Jan 6

CES 2026: Aqara Launches U400 Smart Lock With HomeKit and Hands-Free UWB Unlocking

CES 2026: Aqara Launches U400 Smart Lock With HomeKit and Hands-Free UWB Unlocking

Smart home company Aqara today debuted its latest smart lock, the U400. The Aqara Smart Lock U400 incorporates ultra wideband (UWB) technology for more precise location-based tracking and automated door unlocking.


There are few UWB smart locks on the market, but the technology uses the UWB chip in the iPhone to unlock the door right as you approach. There is no need to tap an ‌iPhone‌ on the lock with UWB, so the door can be unlocked entirely hands-free. We were able to test the lock ahead of its introduction at CES, and the UWB technology worked as advertised.

Walking up to the U400 with ‌iPhone‌ tucked in a pocket triggered the lock to unlock, but only within a foot or two of the door. It's sensitive enough that Aqara added a customization option to allow the U400 only to unlock when approached from a set angle of arrival, such as left, right, or center. Setting a specific direction can avoid accidental unlocks when you're near the door, and UWB is sensitive enough to know what side of the door a person is on.


The U400 works with the Apple Home Key feature, so it can also be unlocked via a card stored in the Wallet app. Home Key can be customized to unlock a door by holding your ‌iPhone‌ or Apple Watch near the lock, but UWB simplifies the process further and makes it more precise. There is no need for a PIN, tap, or authentication with the U400, and the ‌iPhone‌ or Apple Watch doesn't need to be explicitly tapped on the lock.

Like prior Aqara locks, the U400 offers a wide range of options for access. It supports unlocking with a fingerprint through a fingerprint sensor, NFC, an included key, or an access code with the included keypad. One-time and time-specific codes can be given to guests, and the lock can be set to lock automatically after user-specified period of time. Since the lock can be unlocked automatically if you're near it, turning on the auto-lock ensures that it doesn't stay unlocked if it's activated accidentally.


If you want to leave a door unlocked for a period of time or permanently, there is a dedicated Passage mode that can be set.

Since it is Matter and Thread enabled, the U400 can be connected to HomeKit and accessed through the Home app. It can be used in automations alongside other smart home devices, and the lock can be controlled with Siri voice commands. It also works with the Aqara app, and can be connected to an Aqara hub. Since it supports Matter, an Aqara hub is not required for full functionality, but a Thread Border Router and Matter hub are needed. The Apple TV 4K and HomePod mini work as home hubs for the Apple ecosystem.

Aqara says the U400 supports Aliro, so it is able to be unlocked with a smartphone regardless of operating system. It is also more secure than Bluetooth, because it uses time-of-flight signals instead of simply signal strength for unlocking, so there is no option for a relay attack.

The U400 is powered by a 4,880 mAh battery that can be removed from the lock and charged via USB-C, and it is supposed to last for up to six months per charge. Several Aqara locks used replaceable batteries, so the rechargeable battery is a nice upgrade. Exterior components have IP65 water and dust resistance for outdoor use.

Aqara is offering the U400 in Silver and Black. It is designed to replace a standard deadbolt, and it includes all of the necessary hardware for a swap.

More information on the U400 can be found on Aqara's website.Tags: Aqara, CES 2026
This article, "CES 2026: Aqara Launches U400 Smart Lock With HomeKit and Hands-Free UWB Unlocking" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 43 views

reporter

January 6Jan 6

iPhone 17e Again Rumored to Feature Dynamic Island, A19 Chip

iPhone 17e Again Rumored to Feature Dynamic Island, A19 Chip

Apple's iPhone 17e will feature upgrades including a pill-shaped Dynamic Island cutout and a downclocked A19 chip, with mass production set to begin this month, claims a Chinese leaker.


The current iPhone 16e features a "notch" at the top of the display, similar to the ‌iPhone‌ 13 and ‌iPhone‌ 14, and contains Apple's A18 chip with a 4-core GPU, instead of the 5-core GPU version found in the iPhone 16.

However, according to "Smart Pikachu," a Weibo account that has previously shared accurate supply-chain details on Android hardware, these two elements are set to be replaced on the forthcoming iPhone 17e.

Aside from Neural Engine improvements, performance from a downclocked A19 chip could be roughly comparable to Apple's A17 Pro chip, while the Dynamic Island would add the newer interactive area at the top of the screen that displays ongoing activities, incorporating the camera and other front-facing sensors. Otherwise, the ‌iPhone‌ 17e is expected to retain a 6.1-inch OLED display with a 60Hz refresh rate, according to the leaker.

The leaker known as "Digital Chat Station" has previously claimed the iPhone 17e could have a Dynamic Island and an A19 chip, so the assertions made by Smart Pikachu aren't entirely new. However, another rumor has claimed the iPhone 17e will continue to use the same iPhone 14-based OLED panel as the iPhone 16e, but with slimmed down bezels. If that's the case, then the iPhone 17e will still feature a notch.

Elsewhere, rumors suggest the iPhone 17e will gain a magnetic ring that will allow it to connect to MagSafe chargers, which is not an option with the iPhone 16e. To cut down on costs, the device may also be equipped with either the older C1 or C1X modem, but no N1 wireless chip, based on leaked Apple code.

Smart Pikachu says mass production of the device will begin "after CES," suggesting commencement on or after January 9. The claim is broadly in line with reports that the iPhone 17e will launch in spring, possibly around a year after the launch of the iPhone 16e in February. The $599 starting price is not expected to change.

Smart Pikachu has previously claimed Apple is testing under-display Face ID for the iPhone 18 Pro models, but so far the leaker's reputation for Apple rumors remains unproven.Related Roundup: iPhone 16eTag: Smart PikachuBuyer's Guide: iPhone 16e (Neutral)Related Forum: iPhone
This article, "iPhone 17e Again Rumored to Feature Dynamic Island, A19 Chip" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 29 views

reporter

January 6Jan 6

CES 2026: DeskMate MagSafe Charger Gives Your iPhone AI Personality

CES 2026: DeskMate MagSafe Charger Gives Your iPhone AI Personality

KEYi Tech, the company behind the Loona companion robot and ClicBot modular robot, is showing off a new take on AI assistants at CES 2026 called DeskMate, which is exclusively for iPhone.


Rather than building another standalone robot, the company has gone with a desktop charging hub that turns an attached iPhone into an AI companion, using your device's existing display, camera, and microphone to bring it to life. Apart from three USB-C ports and one USB-A port, the device features a rotating and tilting MagSafe charging stand that tracks your presence and keeps the iPhone facing you at all times during conversations. It even displays cute Pixar-style animated eyes on the screen.

The companion app automatically activates when you attach an iPhone to the charging pad. From here, the DeskMate is able to handle voice commands, manage your calendar, set reminders, and answer questions throughout the day. According to the company, DeskMate can also initiate conversations, offer suggestions, or provide updates when you return to your desk.

The AI companion integrates with workplace tools including Slack, email, and calendar apps, and it can also join video meetings to take notes or provide summaries. The idea is that it learns your routines and preferences over time, adapting its responses and suggestions accordingly.

KEYi Tech says it plans to launch a Kickstarter campaign in March for the device, which will be priced below $300, although the final costs are apparently still being finalized. Tag: CES 2026
This article, "CES 2026: DeskMate MagSafe Charger Gives Your iPhone AI Personality" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 33 views

reporter

January 6Jan 6

Learn Springboot for REST APIs, Observability, and Security

Learn Springboot for REST APIs, Observability, and Security

Introduction: Problem, Context & Outcome
Many development teams still struggle with traditional Java applications that are hard to configure, slow to deploy, and difficult to scale. These challenges make it difficult to adopt Agile, DevOps, and cloud-first practices. Master in Java with Springboot is designed to address these issues by simplifying Java application development while maintaining enterprise-grade robustness. This program helps developers build REST APIs, microservices, and backend systems that integrate smoothly with modern CI/CD pipelines and cloud environments. Participants learn practical skills to deploy applications faster, maintain them efficiently, and scale them seamlessly to meet business demands.
Why this matters: The choice of backend framework directly impacts development speed, reliability, and long-term scalability.
What Is Master in Java with Springboot?
Master in Java with Springboot is a professional program that teaches developers to create scalable, production-ready Java applications using Spring Boot. Spring Boot is an opinionated framework that reduces boilerplate code and automates configuration, allowing developers to focus on writing business logic. It is widely used in enterprise applications for building REST APIs, microservices, and backend platforms. In DevOps and cloud-native environments, Spring Boot applications are easier to deploy, test, and scale. By completing this program, participants gain real-world skills to design, develop, and operate applications that meet enterprise standards.
Why this matters: It equips engineers with the knowledge to deliver scalable, reliable, and maintainable applications efficiently.
Why Master in Java with Springboot Is Important in Modern DevOps & Software Delivery
Spring Boot is increasingly preferred in enterprise Java development because it addresses key challenges such as complex configuration, slow startup times, and inconsistent deployments. It integrates seamlessly with CI/CD pipelines, containerized environments, and cloud platforms, making it ideal for DevOps teams. Agile teams benefit from faster feature delivery, while DevOps engineers gain predictable deployment behavior. With Spring Boot, organizations can reduce operational risks, accelerate release cycles, and improve developer productivity.
Why this matters: Using the right framework ensures faster software delivery, operational stability, and scalability.
Core Concepts & Key Components
Java Programming Fundamentals
Purpose: Provide a robust, enterprise-ready language.
How it works: Java offers object-oriented design, strong typing, and a mature ecosystem for complex applications.
Where it is used: Enterprise systems, REST APIs, backend services.
Spring Boot Auto-Configuration
Purpose: Reduce setup complexity.
How it works: Detects project dependencies and automatically configures required components.
Where it is used: Application initialization and environment setup.
REST API Development
Purpose: Enable client-service communication.
How it works: Controllers map HTTP requests to business logic in a RESTful manner.
Where it is used: Microservices, web apps, APIs.
Dependency Injection & Inversion of Control
Purpose: Improve modularity and testability.
How it works: Spring Boot injects dependencies at runtime to avoid hard-coded components.
Where it is used: Service layers and testing scenarios.
DevOps & Cloud Integration
Purpose: Support automated build, deployment, and scaling.
How it works: Integrates with Docker, Kubernetes, and CI/CD pipelines.
Where it is used: Cloud-native and DevOps-driven applications.
Why this matters: Mastering these concepts ensures applications are maintainable, scalable, and ready for production.
How Master in Java with Springboot Works (Step-by-Step Workflow)
Requirement Analysis: Define business needs and service boundaries. API & Data Modeling: Design endpoints and data structures. Project Setup: Spring Boot initializes projects with minimal configuration. Business Logic Implementation: Develop modular, testable code. Middleware & Operations: Add logging, monitoring, and security layers. Testing & Packaging: Conduct unit, integration, and system tests. Deployment: Deploy via CI/CD pipelines to cloud or on-premises systems. Monitoring & Feedback: Use logs and metrics to optimize performance. Why this matters: This workflow mirrors real-world DevOps practices and ensures efficient, reliable deployments.
Real-World Use Cases & Scenarios
E-commerce: Build scalable order management, inventory, and payment services. Finance: High-security transaction processing and regulatory compliance. Healthcare: Patient data management APIs and appointment systems. Enterprise Modernization: Convert legacy Java systems into microservices. Teams include developers (feature creation), DevOps engineers (automation), QA professionals (testing), SREs (monitoring), and cloud engineers (deployment and scaling). Applications built this way achieve faster release cycles, higher uptime, and improved operational efficiency.
Why this matters: Demonstrates tangible business impact of mastering Spring Boot.
Benefits of Using Master in Java with Springboot
Productivity: Rapid development with minimal configuration. Reliability: Standardized framework reduces errors. Scalability: Built for cloud and microservices. Collaboration: Modular code improves team productivity. Why this matters: Ensures delivery of stable, maintainable, and scalable applications.
Challenges, Risks & Common Mistakes
Common pitfalls include overusing dependencies, poorly structured services, and skipping logging or monitoring. Beginners may rely too heavily on default settings without understanding underlying processes. Operational risks arise if metrics, health checks, and security are ignored. Best practices include clear architecture, automated testing, CI/CD integration, and continuous monitoring.
Why this matters: Prevents errors, downtime, and long-term technical debt.
Comparison Table
AspectJava with SpringbootTraditional Java EEConfigurationMinimalComplexStartup TimeFastSlowCloud ReadinessHighLowCI/CD IntegrationStrongWeakMicroservices SupportNativeExtra setup requiredScalabilityHighModerateDeploymentSimpleComplexMaintenanceEasierHarderDevOps FitExcellentPoorIndustry AdoptionVery HighDeclining Why this matters: Shows why Spring Boot is preferred for modern enterprise development.
Best Practices & Expert Recommendations
Follow clean architecture and modular design. Separate environment-specific configurations. Implement structured logging, metrics, and health checks. Automate CI/CD pipelines and testing. Review performance, security, and scalability regularly. Why this matters: Ensures maintainable, secure, and high-performing applications.
Who Should Learn or Use Master in Java with Springboot?
Ideal learners include Java developers, backend engineers, DevOps engineers, cloud engineers, QA specialists, and SREs. Beginners get hands-on experience with simplified setup, while experienced engineers can build scalable enterprise-grade systems. This program suits anyone responsible for creating or maintaining Java-based backend applications.
Why this matters: Aligns learning with real-world roles and enhances career readiness.
FAQs – People Also Ask
What is Master in Java with Springboot?
It is a professional program to build production-ready Java applications using Spring Boot.
Why this matters: Provides practical, industry-aligned skills.
Why is Spring Boot widely used?
Reduces configuration overhead and simplifies deployments.
Why this matters: Speeds up development and improves reliability.
Is Spring Boot beginner-friendly?
Yes, it simplifies setup and reduces boilerplate.
Why this matters: Makes learning accessible for newcomers.
Is it suitable for microservices?
Yes, Spring Boot is built for microservice architectures.
Why this matters: Supports scalable enterprise designs.
Does Spring Boot support DevOps pipelines?
Yes, integrates with CI/CD tools.
Why this matters: Enables safe, automated deployments.
Is it cloud-native?
Yes, works with Docker, Kubernetes, and cloud platforms.
Why this matters: Supports scalable cloud deployments.
Is Spring Boot enterprise-ready?
Yes, widely adopted in large organizations.
Why this matters: Ensures practical industry relevance.
How does it compare to Java EE?
Lighter, faster, and easier to maintain.
Why this matters: Reduces operational overhead and complexity.
Can it handle high-traffic applications?
Yes, with proper architecture and deployment.
Why this matters: Ensures reliability under load.
Where can I learn it professionally?
Through structured, hands-on training programs.
Why this matters: Builds industry-ready expertise.
Branding & Authority
This program is delivered by DevOpsSchool, a globally trusted platform for DevOps and enterprise technology education. Mentorship is provided by Rajesh Kumar, who has over 20 years of hands-on experience in DevOps & DevSecOps, Site Reliability Engineering (SRE), DataOps, AIOps & MLOps, Kubernetes & Cloud Platforms, and CI/CD & Automation.
Why this matters: Ensures learners gain practical, enterprise-ready skills.
Call to Action & Contact Information
Learn more and enroll here:
Master in Java with Springboot
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329


View the full article

• 0 comments
• 36 views

reporter

January 6Jan 6

Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat

Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat

Source: Securonix Cybersecurity researchers have disclosed details of a new campaign dubbed PHALT#BLYX that has leveraged ClickFix-style lures to display fixes for fake blue screen of death (BSoD) errors in attacks targeting the European hospitality sector. The end goal of the multi-stage campaign is to deliver a remote access trojan known as DCRat, according to cybersecurity company Securonix.View the full article

• 0 comments
• 36 views

Hacker News

January 6Jan 6

Golang Gin Certification for Modern Backend Service Teams

Golang Gin Certification for Modern Backend Service Teams

Introduction: Why Modern Backend Teams Need a Better Stack
Today’s backend systems are expected to be fast, reliable, scalable, and easy to deploy. Yet many teams still struggle with heavy frameworks, slow startup times, complex dependencies, and fragile production behavior. As organizations move toward microservices, cloud platforms, and DevOps-driven delivery, these limitations become more visible and costly. Backend services are no longer just supporting components—they directly influence release speed, system stability, and user experience. Master in Golang with Gin is designed to address these real-world challenges by combining the efficiency of the Go programming language with the speed and simplicity of the Gin web framework. This combination enables teams to build backend systems that are production-ready, cloud-friendly, and aligned with modern DevOps practices. The outcome is clear: simpler codebases, predictable performance, and faster delivery cycles.
What Is Master in Golang with Gin?
Master in Golang with Gin focuses on backend development using Golang and the Gin framework to create modern APIs and services. Golang is known for its straightforward syntax, strong typing, and built-in concurrency model, making it a popular choice for scalable backend systems. Gin is a lightweight yet powerful web framework built on Go’s standard HTTP libraries, offering fast routing, middleware support, and clean project structure. Together, they provide a backend stack widely adopted in microservices architectures, cloud-native applications, and DevOps environments. This approach emphasizes practical, production-oriented skills rather than theoretical concepts. Why this matters: developers and DevOps engineers gain tools that are directly applicable to real systems used in industry.
Importance of Master in Golang with Gin in DevOps and Cloud-Native Development
Modern DevOps demands automation, consistency, and operational efficiency. Master in Golang with Gin fits naturally into this ecosystem. Go applications compile into a single static binary, eliminating runtime dependency issues and simplifying deployments. Gin’s middleware architecture supports logging, authentication, monitoring, and security controls—key requirements in CI/CD pipelines. Organizations adopt this stack to overcome challenges like slow API responses, difficult scaling, and unreliable deployments. In cloud environments, efficient resource usage reduces infrastructure costs while maintaining performance under load. For Agile teams, it enables rapid iteration without compromising system stability. Why this matters: backend technology must support DevOps velocity, not restrict it.
Core Building Blocks and Concepts
Golang as the Backend Foundation
Purpose: Create reliable and efficient server-side applications.
How it works: Go uses static typing, garbage collection, and a minimal syntax to reduce complexity and runtime errors.
Where it’s applied: APIs, microservices, and distributed systems.
Gin Web Framework
Purpose: Enable fast and structured API development.
How it works: Gin provides high-performance routing, middleware chaining, and request handling with low overhead.
Where it’s applied: RESTful APIs and backend platforms.
Concurrency with Goroutines
Purpose: Process multiple requests simultaneously.
How it works: Goroutines are lightweight threads managed by Go’s runtime scheduler.
Where it’s applied: High-traffic APIs and background tasks.
Middleware and Request Flow
Purpose: Handle cross-cutting concerns consistently.
How it works: Middleware intercepts requests and responses for logging, validation, authentication, and error handling.
Where it’s applied: Security, observability, and compliance.
DevOps and Cloud Integration
Purpose: Support automated builds, deployments, and scaling.
How it works: Go services integrate seamlessly with Docker, Kubernetes, and CI/CD tools.
Where it’s applied: Cloud platforms and DevOps pipelines.
Why this matters: these components ensure backend systems are built for production from day one.
How Master in Golang with Gin Works in Practice
The workflow begins with defining business requirements and API contracts. Teams design endpoints, request payloads, and response formats aligned with user needs. Golang is used to implement business logic with clarity and performance in mind. Gin manages routing and middleware, keeping the codebase clean and modular. Logging, metrics, and security features are integrated to support monitoring and governance. The application is containerized and deployed through automated CI/CD pipelines. In production, services run on cloud infrastructure or Kubernetes clusters, where scaling and resilience are handled automatically. Continuous monitoring feeds insights back into development for ongoing improvement. Why this matters: it mirrors how modern DevOps teams build, deploy, and operate backend services.
Real-World Applications and Use Cases
Startups use Master in Golang with Gin to build APIs that can scale rapidly as user demand grows. Enterprises rely on it for internal microservices that connect complex business systems. Fintech companies adopt it for low-latency services handling high transaction volumes. Developers focus on feature development, DevOps engineers manage pipelines and infrastructure, QA teams validate API behavior, and SREs ensure uptime and reliability. Cloud teams deploy services across regions for high availability. The business impact includes faster time-to-market, improved performance, and reduced operational costs. Why this matters: it demonstrates how backend skills directly translate into measurable business outcomes.
Key Benefits of Master in Golang with Gin
High Productivity: Simple language design and fast compilation speed up development. Strong Reliability: Predictable performance and efficient concurrency handling. Scalable Architecture: Low resource consumption supports growth without major redesign. Team Collaboration: Clear structure improves readability and maintainability. Why this matters: these benefits help teams deliver stable systems with confidence and speed.
Challenges, Risks, and Common Pitfalls
Teams may face issues such as poor project organization, improper concurrency usage, or weak error handling. Beginners sometimes assume frameworks handle security and observability automatically, leading to gaps in production readiness. Operational risks increase when services are deployed without sufficient testing or monitoring. These challenges can be mitigated through best practices, automated testing, structured logging, and metrics collection. Why this matters: addressing these risks early prevents outages and long-term technical debt.
Comparison: Golang with Gin vs Traditional Backend Frameworks
AspectGolang with GinTraditional FrameworksPerformanceHighModerateResource ConsumptionLowHighDeployment ModelSingle BinaryMultiple DependenciesCI/CD CompatibilityStrongLimitedCloud-Native SupportBuilt-inOften Add-onsConcurrencyNativeExternal ToolsScalabilityPredictableInconsistentMaintenance EffortLowerHigherStartup TimeFastSlowDevOps FitExcellentWeak Why this matters: it helps teams choose a backend stack aligned with modern delivery requirements.
Best Practices for Success
Adopt clean architecture principles and maintain clear separation of concerns. Use middleware consistently for authentication, logging, and validation. Automate testing and deployments to minimize human error. Version APIs carefully to ensure backward compatibility. Continuously monitor performance and reliability to guide optimization efforts. Why this matters: following best practices ensures systems remain scalable, secure, and maintainable over time.
Who Should Learn Master in Golang with Gin?
This program is well suited for backend developers, DevOps engineers, cloud engineers, SREs, and QA professionals working with APIs. Beginners benefit from Go’s readability and simplicity, while experienced engineers gain performance and scalability advantages. Anyone responsible for building or operating production backend services can benefit. Why this matters: it aligns learning outcomes with real job roles and responsibilities.
Frequently Asked Questions
What is Master in Golang with Gin?
It focuses on building scalable backend services using Golang and the Gin framework. Why this matters: it targets real production needs.
Why is Golang popular in DevOps?
It produces fast, portable binaries. Why this matters: deployments become simpler and more reliable.
Is Gin beginner-friendly?
Yes, it is lightweight and easy to learn. Why this matters: it reduces the learning curve.
How does it compare to other frameworks?
It delivers better performance with less complexity. Why this matters: efficiency improves.
Is it suitable for cloud-native systems?
Yes, it integrates smoothly with containers and Kubernetes. Why this matters: it supports modern infrastructure.
Can it handle high traffic?
Yes, through efficient concurrency management. Why this matters: ensures stability at scale.
Is it good for microservices?
Yes, it is commonly used in microservice architectures. Why this matters: aligns with industry trends.
Does it support CI/CD pipelines?
Yes, it fits naturally into automated workflows. Why this matters: accelerates delivery.
Is it enterprise-ready?
Yes, many enterprises use it in production. Why this matters: ensures long-term viability.
Where can I learn it professionally?
Through structured, hands-on training programs. Why this matters: builds practical expertise.
Authority and Industry Credibility
This program is backed by DevOpsSchool, a globally recognized platform for enterprise DevOps education. Training is led by Rajesh Kumar, who brings more than 20 years of hands-on experience in DevOps & DevSecOps, Site Reliability Engineering (SRE), DataOps, AIOps & MLOps, Kubernetes & Cloud Platforms, and CI/CD & Automation. Why this matters: experienced mentorship ensures learning translates into real-world success.
Call to Action and Contact Details
Explore the full course details here:
Master in Golang with Gin
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329


View the full article

• 0 comments
• 41 views

reporter

January 6Jan 6

Become a GitLab Engineer: Setup, Pipelines, Security

Become a GitLab Engineer: Setup, Pipelines, Security

Introduction: Problem, Context & Outcome
Software delivery has evolved rapidly, but many engineering teams still struggle with inefficient DevOps workflows. Teams often rely on multiple disconnected tools for version control, CI/CD, security, and deployment. This fragmentation causes slow releases, limited visibility, operational risk, and frequent handoff issues between development and operations. GitLab was created to address these challenges by providing a single DevOps platform, yet many professionals use only a fraction of its capabilities. Without structured learning, GitLab remains underutilized. Master in GitLab Training is designed to change that. It helps professionals understand GitLab as a complete delivery system and apply it effectively across real-world DevOps pipelines. This blog explains what the training is, why it matters today, and how it supports modern software delivery at scale.
Why this matters: DevOps success depends on mastering integrated platforms, not isolated tools.
What Is Master in GitLab Training?
Master in GitLab Training is a comprehensive, advanced learning program focused on building real-world expertise in GitLab as a full DevOps and DevSecOps platform. The training goes beyond basic Git operations and teaches how GitLab supports the entire software delivery lifecycle. It covers repository management, CI/CD pipelines, automated testing, deployments, security scanning, and team collaboration. The program is designed for professionals who want to understand how GitLab is used in production environments rather than in isolated demos. Developers learn how GitLab improves daily coding workflows, while DevOps engineers gain hands-on experience with pipeline automation and delivery orchestration. The training emphasizes practical scenarios that reflect enterprise and cloud-native environments.
Why this matters: True GitLab mastery simplifies delivery while improving speed, quality, and control.
Why Master in GitLab Training Is Important in Modern DevOps & Software Delivery
GitLab has become a critical platform for organizations adopting DevOps, Agile, and cloud-native architectures. By combining planning, source control, CI/CD, security, and deployment into one system, GitLab reduces tool sprawl and improves operational visibility. However, many teams fail to benefit fully due to limited skills and incomplete adoption. Master in GitLab Training addresses this challenge by teaching professionals how to implement CI/CD pipelines, integrate security early, and automate delivery processes effectively. The training aligns GitLab usage with modern DevOps practices such as Kubernetes deployments, cloud automation, and DevSecOps. As software delivery expectations continue to rise, mastering GitLab becomes essential for both individuals and organizations.
Why this matters: Platform expertise enables scalable, reliable, and secure software delivery.
Core Concepts & Key Components
Git Repository & Version Control
Purpose: Manage source code and track changes
How it works: Code is organized into repositories with commits and branches
Where it is used: Daily development workflows
GitLab CI/CD Pipelines
Purpose: Automate build, test, and deployment stages
How it works: Pipelines execute jobs based on defined rules
Where it is used: Continuous integration and delivery
Merge Requests & Collaboration
Purpose: Ensure code quality and collaboration
How it works: Changes are reviewed and approved before merging
Where it is used: Team-based development
GitLab Runners
Purpose: Execute pipeline jobs
How it works: Runners process CI/CD tasks on configured systems
Where it is used: Cloud, on-premise, and container environments
Security & DevSecOps Features
Purpose: Embed security into delivery pipelines
How it works: Automated scans run during CI/CD stages
Where it is used: Secure and compliant delivery workflows
Infrastructure as Code Support
Purpose: Automate infrastructure provisioning
How it works: GitLab integrates with IaC and cloud platforms
Where it is used: Cloud-native and Kubernetes deployments
Why this matters: These components work together to make GitLab a complete DevOps platform.
How Master in GitLab Training Works (Step-by-Step Workflow)
The training begins with understanding GitLab project structures and repository workflows used by real engineering teams. Learners then configure CI pipelines that automatically trigger builds and tests when code is pushed. Deployment workflows are introduced next, showing how applications progress through development, staging, and production environments. Security checks are integrated early to identify vulnerabilities before release. Monitoring and feedback mechanisms help teams observe pipeline performance and resolve issues quickly. Collaboration features such as merge requests and approvals reinforce best practices throughout the workflow.
Why this matters: Step-by-step learning prepares professionals for managing GitLab in live production systems.
Real-World Use Cases & Scenarios
In technology-driven organizations, GitLab manages microservices with automated CI/CD pipelines. DevOps engineers use GitLab to build container images and deploy them to Kubernetes clusters. QA teams rely on automated tests triggered by merge requests to validate changes early. Security teams use built-in scanning features to meet compliance and governance requirements. Cloud and SRE teams manage infrastructure updates using version-controlled pipelines. These real-world scenarios demonstrate how GitLab improves collaboration, delivery speed, and system reliability.
Why this matters: Real use cases show how GitLab delivers measurable business value.
Benefits of Using Master in GitLab Training
Productivity: Faster builds, tests, and releases Reliability: Consistent pipelines reduce human error Scalability: Supports growing teams and complex architectures Collaboration: Aligns development, QA, and operations teams Why this matters: Skilled teams unlock GitLab’s full potential.
Challenges, Risks & Common Mistakes
Common challenges include poorly designed pipelines, inefficient runner configurations, and unused security features. Beginners may hardcode secrets or overlook branching strategies. Operational risks increase when pipelines lack monitoring or documentation. These issues can be mitigated through structured training, standardized practices, and continuous improvement. Understanding GitLab deeply helps teams avoid costly mistakes and outages.
Why this matters: Reducing errors improves stability, security, and delivery confidence.
Comparison Table
AspectTraditional ApproachGitLab PlatformToolchainMultiple toolsSingle integrated platformCI/CDSeparate systemsBuilt-inSecurityExternal toolsNative DevSecOpsCollaborationFragmentedCentralizedAutomationPartialEnd-to-endVisibilityLimitedFull pipeline viewScalabilityManualCloud-readyGovernanceHard to enforcePolicy-drivenMaintenanceHigh overheadLower complexityLearning ModelTool-by-toolPlatform-focused Why this matters: Comparison highlights GitLab’s strategic advantage in modern DevOps.
Best Practices & Expert Recommendations
Use standardized pipeline templates to maintain consistency. Secure sensitive data using protected variables. Optimize runners for performance and cost efficiency. Integrate security scans early in CI/CD pipelines. Document workflows to support onboarding and scaling. Review and refine pipelines regularly based on feedback and metrics.
Why this matters: Best practices ensure GitLab remains reliable as teams and systems grow.
Who Should Learn or Use Master in GitLab Training?
This training is ideal for developers who want to understand CI/CD beyond writing code. DevOps engineers benefit from mastering pipeline automation and delivery orchestration. Cloud engineers, SREs, and QA professionals gain visibility into deployment and testing workflows. The program suits beginners building strong foundations as well as experienced professionals standardizing enterprise DevOps practices.
Why this matters: The right skills applied by the right roles drive DevOps success.
FAQs – People Also Ask
What is Master in GitLab Training?
An advanced program covering GitLab end-to-end.
Why this matters: It builds complete platform expertise.
Is GitLab suitable for beginners?
Yes, with structured guidance.
Why this matters: Beginners can grow safely.
How does GitLab differ from GitHub?
GitLab includes built-in CI/CD and security.
Why this matters: Fewer tools simplify workflows.
Is GitLab enterprise-ready?
Yes, widely adopted at scale.
Why this matters: Enterprise relevance increases career value.
Does GitLab support Kubernetes?
Yes, with strong integration.
Why this matters: Cloud-native skills are essential.
Is security built into GitLab?
Yes, through automated scanning.
Why this matters: Security must be continuous.
Can QA teams use GitLab?
Yes, for automated testing.
Why this matters: Quality improves early.
Is GitLab CI/CD flexible?
Highly customizable pipelines.
Why this matters: Supports diverse delivery needs.
Does the training include real scenarios?
Yes, production-style workflows.
Why this matters: Practice ensures job readiness.
Is GitLab important for DevOps roles?
Yes, it is a core DevOps platform.
Why this matters: Tool relevance drives employability.
Branding & Authority
DevOpsSchool is a globally trusted platform delivering enterprise-focused DevOps education. Its training programs emphasize hands-on learning and real-world applicability. The courses are mentored by Rajesh Kumar, a globally recognized expert with over 20 years of hands-on experience in DevOps & DevSecOps, Site Reliability Engineering (SRE), DataOps, AIOps & MLOps, Kubernetes & Cloud Platforms, and CI/CD & Automation. Learn more about the official Master in GitLab Training program here:
Master in GitLab Training
Why this matters: Proven expertise ensures training delivers real outcomes.
Call to Action & Contact Information
Take the next step toward mastering GitLab and modern DevOps practices.
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329

View the full article

• 0 comments
• 40 views

reporter

January 6Jan 6

What is Identity Dark Matter?

What is Identity Dark Matter?

The Invisible Half of the Identity Universe Identity used to live in one place - an LDAP directory, an HR system, a single IAM portal. Not anymore. Today, identity is fragmented across SaaS, on-prem, IaaS, PaaS, home-grown, and shadow applications. Each of these environments carries its own accounts, permissions, and authentication flows. Traditional IAM and IGA tools govern only the nearlyView the full article

• 0 comments
• 41 views

Hacker News

January 6Jan 6

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are non-existent in the Open VSX registry, potentially opening the door to supply chain risks when bad actors publish malicious packages under those names. The problem, according to Koi, is that theseView the full article

• 0 comments
• 38 views

Hacker News

January 6Jan 6

Open WebUI bug turns the ‘free model’ into an enterprise backdoor

Open WebUI bug turns the ‘free model’ into an enterprise backdoor

Security researchers have flagged a high-severity flaw in Open WebUI, a self-hosted enterprise interface for large language models, that allows external model servers connected via its Direct Connections feature to inject malicious code and hijack AI workloads.
The issue, tracked as CVE-2025-64496, stems from unsafe handling of server-sent events (SSE), enabling account takeover and, in some cases, with extended permissions, remote code execution (RCE)  on backend servers.
According to Cato CTRL findings, if an employee connects Open WebUI to an attacker-controlled model endpoint, like under the pretext of a “free GPT-4 alternative”, the frontend can be tricked into silently executing injected JavaScript. That code steals JSON Web Tokens (JWTs) from the browser context, offering attackers persistent access to the victim’s AI workspace, documents, chats, and embedded API keys.
The bug impacts Open WebUI versions up to 0.6.34 and is fixed in v0.6.35, with enterprises urged to patch production deployments without delay. 
Convenience feature turned into a crisis
Cato researchers said the problem is Direct Connections, a feature intended to let users connect Open WebUI to external, OpenAI-compatible model servers. The platform’s SSE handler trusts incoming events from these servers, especially those tagged as “{type: execute},” and executes their payload via a dynamic JavaScript constructor.
When a user connects to a malicious server, easily enabled through social engineering, that server can stream an SSE with executable JavaScript. That script runs with full access to the browser’s storage layer, including the JWT used for authentication.
“Open WebUI stores the JWT token in localStorage,” Cato researchers said in a blog post. “Any script running on the page can access it. Tokens are long-lived by default, lack HttpOnly, and are cross-tab. When combined with the execute event, this creates a window for account takeover.”

The attack requires the victim to enable Direct Connections (disabled by default) and add the attacker’s malicious model URL, according to an NVD description.
Escalating to Remote Code Execution
The risk doesn’t stop at account takeover. If the compromised account has workspace.tools permissions, attackers can leverage that session token to push authenticated Python code through Open WebUI’s Tools API, which executes without sandboxing or validation.
This turns a browser-level compromise into full remote code execution on the backend server. Once an attacker gets Python execution, they can install persistence mechanisms, pivot into internal networks, access sensitive data stores, or run lateral attacks.

The flaw received a high severity rating at 8/10 base score by NVD, and a 7.3/10 base score by GitHub. The flaw was rated high rather than critical, reflecting the fact that exploitation requires the Direct Connections feature to be enabled and hinges on a user first being lured into connecting to a malicious external model server. Patch mitigation in Open WebUI v0.6.35 involves blocking “execute” SSE events from Direct Connections entirely, but any organization still on older builds remains exposed. Additionally, the researchers advised moving authentication to short-lived and HttpOnly cookies with rotation. “Pair with a strict CSP and ban dynamic code evaluation”, they added.
View the full article

• 0 comments
• 42 views

CSOonline

January 6Jan 6

Foldable iPhone's Crease-Free Display Tech Spotted at CES 2026

Foldable iPhone's Crease-Free Display Tech Spotted at CES 2026

CES 2026 has just provided a first glimpse of the folding display technology that Apple is expected to use in its upcoming foldable iPhone. At the event, Samsung Display briefly showcased its new crease-less foldable OLED panel beside a Galaxy Z Fold 7, and according to SamMobile, which saw the test booth before it was abruptly removed, the new panel "has no crease at all" in comparison.


The existing display used in the Galaxy Z Fold 7 does an impressive job of reducing crease visibility, but crucially it can still be seen at certain viewing angles. In contrast, Samsung Display claims that the newer panel, destined for the Z Fold 8, offers "seamless text across the fold" whichever way you look at it – which is good news for Apple, given that Samsung is the company's main supplier of OLED technology.

Apple supply chain analyst Ming-Chi Kuo said in July that Samsung's next-generation Galaxy Z Fold 8 will use the same laser-drilled metal display plate as the foldable iPhone, with the component to be supplied by South Korean company Fine M-Tec. The laser-drilled metal plate is responsible for dispersing the stress generated by bending, allowing for the "crease-free" screen. It's worth noting that the panel structure, lamination method, and material process used for the foldable iPhone is said to have been designed by Apple, so we should still expect differences compared to the Z Fold 8's display that was on show here.

The same goes for the dimensions of the display that Apple uses. Samsung's existing Galaxy Z Fold 7 display is 6.5 inches when closed, and 8 inches when open, with a 21:9 aspect ratio when folded and a 20:18 aspect ratio when open. In contrast, rumors suggest the ‌iPhone‌ Fold's display will measure in at 5.3 to 5.5 inches when closed, and 7.5 to 7.8 inches when open (rumors vary). That will make it squatter and wider than Samsung's taller, narrower design, giving it a 4:3 aspect ratio when open.

Samsung gave no reason for removing the test booth so early on at CES. Regardless, Apple's stricter crease-free requirements for its foldable iPhone appear to have raised the bar for both foldable devices. Whether those advances also translate into improved long-term durability should become clearer in the coming months. The Galaxy Z Fold is widely expected to launch this summer, while Apple's foldable iPhone is expected to enter mass production this year and launch later, around mid-September.Tags: CES 2026, Foldable iPhone, Samsung
This article, "Foldable iPhone's Crease-Free Display Tech Spotted at CES 2026" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 33 views

reporter

January 6Jan 6

Become a DevOps Engineer with Hands-On Projects

Become a DevOps Engineer with Hands-On Projects

Introduction: Problem, Context & Outcome
In today’s fast-paced digital world, businesses are constantly striving to improve software delivery processes. Engineers face a significant challenge in ensuring that software releases are not only fast but also reliable and scalable. Traditional methods often result in long delivery cycles and increased operational inefficiencies. This is where DevOps comes in, offering a comprehensive solution by enhancing collaboration, automating workflows, and ensuring continuous integration and deployment (CI/CD).
The Master in DevOps Engineering program is designed to address these challenges. It provides professionals with the tools, knowledge, and hands-on experience needed to implement DevOps practices effectively in real-world environments. The program focuses on key DevOps concepts such as automation, cloud infrastructure management, continuous integration, continuous delivery, and monitoring. By completing this program, you will be well-equipped to drive high-quality, efficient software delivery, making you an essential asset in today’s software industry.
Why this matters: DevOps principles are fundamental for professionals and organizations seeking to improve the speed, quality, and collaboration in software delivery. Mastering DevOps is crucial for staying competitive in the tech-driven world.
What is Master in DevOps Engineering?
The Master in DevOps Engineering is an advanced training program that focuses on equipping professionals with the skills and expertise required to implement and manage DevOps practices. The program covers critical aspects of DevOps, including automation, continuous integration and delivery (CI/CD), cloud infrastructure management, and system monitoring.
This program offers both theoretical knowledge and practical experience with industry-standard tools like Jenkins, Docker, Kubernetes, Terraform, and Ansible. These tools are integral to DevOps practices, enabling automation of tasks such as testing, integration, deployment, and infrastructure provisioning. By the end of the program, students will be able to design, implement, and manage end-to-end DevOps workflows in real-world projects.
Why this matters: As organizations increasingly adopt DevOps to streamline software development, mastering these tools and practices will make you a valuable asset in the fast-growing DevOps field.
Why Master in DevOps Engineering Is Important in Modern DevOps & Software Delivery
The demand for faster, more reliable software delivery is growing rapidly. Businesses must deliver software more frequently while maintaining high standards of quality. Traditional software development practices no longer meet these expectations, which is why DevOps has become a cornerstone of modern software development.
The Master in DevOps Engineering program teaches the essential DevOps principles and tools needed to meet these demands. The program focuses on automation, continuous integration and delivery (CI/CD), cloud deployment, and infrastructure management, enabling professionals to speed up release cycles, reduce errors, and improve collaboration across teams.
Why this matters: DevOps is transforming how software is developed and delivered. By mastering DevOps practices, professionals ensure they can deliver software faster and more reliably, making them indispensable in today’s competitive tech industry.
Core Concepts & Key Components
Automation
Purpose: To automate repetitive tasks and manual processes, improving efficiency and reducing human error. How it works: Tools like Jenkins, CircleCI, and TravisCI automate key tasks such as testing, integration, and deployment. Where it is used: Across the entire DevOps pipeline, ensuring faster and more reliable releases. Collaboration
Purpose: To enhance communication and collaboration between development, operations, and quality assurance (QA) teams. How it works: Tools like Jira, Slack, and GitHub foster real-time communication, enabling teams to track progress, resolve issues, and coordinate efforts effectively. Where it is used: In agile environments where continuous feedback and collaboration are essential. Continuous Integration/Continuous Delivery (CI/CD)
Purpose: To ensure that code changes are automatically integrated and deployed, facilitating faster and more frequent releases. How it works: Developers frequently commit code to a shared repository. Automated pipelines run tests, integrate code, and deploy it to production without manual intervention. Where it is used: In organizations that require continuous software delivery, such as SaaS and e-commerce platforms. Monitoring & Logging
Purpose: To continuously monitor the health and performance of systems and track logs for troubleshooting. How it works: Tools like Prometheus and Grafana provide real-time performance metrics and alerts, allowing teams to quickly identify and address potential issues. Where it is used: In production environments where uptime and system stability are critical to business operations. Infrastructure as Code (IaC)
Purpose: To manage and provision infrastructure using code, ensuring consistency and scalability. How it works: Tools like Terraform and Ansible allow teams to define infrastructure requirements as code, making provisioning, scaling, and managing infrastructure more efficient and error-free. Where it is used: In cloud-based environments where scaling and flexibility are necessary. Why this matters: Understanding and mastering these key concepts is vital for professionals who want to implement efficient, reliable, and scalable DevOps practices in their organizations.
How Master in DevOps Engineering Works (Step-by-Step Workflow)
Training Phase: Start by learning the fundamental DevOps principles and tools that will form the foundation of your skills. Hands-on Labs: Gain practical experience by working with tools like Jenkins, Docker, Kubernetes, and Terraform in real-world scenarios. CI/CD Pipeline Setup: Learn how to set up automated pipelines for continuous integration, testing, and delivery, enabling faster and more reliable releases. Cloud Infrastructure Management: Master the use of cloud platforms like AWS and Azure to deploy and manage applications and infrastructure. Agile Development: Implement agile methodologies to improve collaboration and streamline the development process across teams. Final Project: Apply your skills by completing a capstone project that integrates everything you’ve learned throughout the program. Why this matters: This step-by-step approach ensures that you gain not only theoretical knowledge but also the practical experience required to excel in DevOps roles.
Real-World Use Cases & Scenarios
Industry Example 1:
A leading e-commerce company adopts DevOps to automate its deployment process. By implementing CI/CD pipelines, they reduced deployment times from weeks to hours, enabling them to roll out new features and bug fixes more quickly, thus improving customer satisfaction and business agility.
Industry Example 2:
A cloud services provider uses Infrastructure as Code (IaC) with Terraform to automate the creation of cloud resources. This approach allows them to scale their infrastructure from hours to minutes, ensuring they can quickly meet customer demands.
Why this matters: These examples highlight how DevOps practices can transform business operations, enhancing software delivery speed and operational efficiency.
Benefits of Using Master in DevOps Engineering
Increased Productivity: By automating routine tasks, teams can focus on more strategic work, increasing overall productivity. Improved Reliability: Continuous testing and monitoring ensure that systems remain stable and reliable in production. Better Scalability: DevOps practices enable organizations to scale infrastructure more efficiently, ensuring performance under heavy demand. Enhanced Collaboration: DevOps encourages better communication between teams, reducing bottlenecks and improving overall workflow. Why this matters: These benefits are crucial for organizations looking to stay competitive, improve customer satisfaction, and streamline software delivery processes.
Challenges, Risks & Common Mistakes
Over-automation: Automating too many tasks can create unnecessary complexity, making systems harder to maintain. Inconsistent Environments: Differences between development, testing, and production environments can lead to unexpected issues when code is deployed. Lack of Monitoring: Without proper monitoring, issues may go undetected until they affect the user experience. Mitigation: Focus on automating only essential tasks, ensure environment consistency, and implement continuous monitoring to address potential problems early. Why this matters: Recognizing these common challenges ensures that DevOps practices are implemented effectively, reducing risks and improving overall software delivery processes.
Comparison Table: DevOps Tools
FeatureJenkinsGitLab CITravis CICircleCIBambooTeamCityGitHub ActionsAzure DevOpsGitHub CIGitKraken CIEase of UseModerateEasyEasyEasyModerateEasyEasyEasyEasyModerateIntegration SupportHighHighModerateHighModerateHighModerateHighHighModerateCloud SupportYesYesYesYesYesYesYesYesYesYesCostFree/Open SourceFree/Open SourceFree/Open SourcePaidPaidPaidFreePaidFreePaid Why this matters: This table allows you to compare DevOps tools based on their features, helping you choose the best option for your specific needs.
Best Practices & Expert Recommendations
Automate Key Tasks: Focus on automating critical tasks like testing, integration, and deployment to speed up the software delivery process. Implement Infrastructure as Code (IaC): IaC helps you maintain consistency across environments and automates resource provisioning, making scaling easier. Foster Team Collaboration: Encourage open communication and feedback between development, operations, and QA teams to improve workflow efficiency. Stay Updated: Regularly update your toolset and practices to keep up with the latest DevOps technologies and trends. Why this matters: Following these best practices ensures that your DevOps implementation is both effective and sustainable, providing long-term value to your organization.
Who Should Learn or Use Master in DevOps Engineering?
The Master in DevOps Engineering program is designed for:
Developers who want to expand their knowledge of DevOps practices and tools. DevOps Engineers seeking to advance their careers and expertise in automation and cloud infrastructure. Cloud Engineers and SREs who want to improve their skills in managing scalable systems and cloud deployments. QA Engineers interested in integrating continuous testing into DevOps workflows. Why this matters: Whether you’re starting in DevOps or looking to advance your skills, this program will provide you with the tools and experience to succeed in this rapidly evolving field.
FAQs – People Also Ask
1. What is DevOps?
DevOps is a set of practices that combines software development (Dev) and IT operations (Ops) to improve the efficiency and speed of software delivery.
Why this matters: Understanding DevOps is essential for anyone involved in software development or IT operations.
2. Why should I learn DevOps?
Learning DevOps will help you automate processes, improve collaboration, and deliver software faster and more reliably.
Why this matters: DevOps is increasingly important in the tech industry, and learning it opens up numerous career opportunities.
3. Is DevOps suitable for beginners?
Yes, DevOps can be learned at any experience level, although a basic understanding of software development and IT operations will be helpful.
Why this matters: DevOps is accessible to all professionals, and mastering it can significantly boost your career.
Branding & Authority
DevOpsSchool is a globally trusted platform for learning DevOps, cloud computing, and site reliability engineering. With over 20 years of experience in the field, Rajesh Kumar has helped thousands of professionals develop the skills necessary for success in DevOps. Rajesh’s expertise in DevOps, CI/CD automation, Kubernetes, and cloud platforms ensures you gain practical, real-world insights that are immediately applicable in your career.
DevOpsSchool | Rajesh Kumar
Why this matters: DevOpsSchool, led by Rajesh Kumar, offers industry-leading training that provides you with the knowledge and hands-on experience necessary to excel in the DevOps field.
Call to Action & Contact Information
Email: [email protected] Phone & WhatsApp (India): +91 7004215841 Phone & WhatsApp (USA): +1 (469) 756-6329 Enroll Now: Master in DevOps Engineering Program


View the full article

• 0 comments
• 42 views

reporter

January 6Jan 6

Deep Learning Comprehensive Guide for Enterprise Delivery Teams

Deep Learning Comprehensive Guide for Enterprise Delivery Teams

Masters in Deep Learning
Introduction: Problem, Context & Outcome
Modern engineering teams are expected to ship features faster, reduce incidents, and still make decisions backed by data. Deep learning is now appearing inside everyday products through recommendations, anomaly detection, OCR, voice interfaces, and support automation, which increases delivery complexity across teams and environments. Why this matters: Deep learning is no longer “research-only”; it directly affects release quality, user experience, and business outcomes.​
Many engineers get stuck because deep learning feels academic and disconnected from CI/CD, cloud operations, testing discipline, and release governance. A Masters in Deep Learning helps connect fundamentals with production thinking so engineers can build, deploy, and operate deep learning systems with confidence. Why this matters: Teams need skills that survive beyond notebooks and demos and work under real SLAs.​
This guide rewrites the content in a clearer, enterprise-friendly way while keeping the same structure and preserving the course URL for context. You will understand what the program is, how it fits into DevOps workflows, what to watch out for, and how teams apply it in real delivery pipelines. Why this matters: Clear expectations help learners pick the right path and deliver value faster.​
What Is Masters in Deep Learning?
Masters in Deep Learning is a structured learning path designed to help learners master deep learning concepts, models, and the ability to implement deep learning algorithms in real scenarios. The goal is to build practical capability that maps to the expectations of a Deep Learning Engineer, not just conceptual familiarity. Why this matters: Structure reduces random learning and builds skills that can be demonstrated in projects and interviews.​
A job-ready program also connects learning to the real engineering lifecycle by including real-time projects, scenario-based assignments, and guidance that supports real work environments. Many learners benefit from interview preparation kits and hands-on practice that reflect the tools and workflows used in industry. Why this matters: Hiring and promotion depend on applied ability, not only theory.​
For the official reference and details, use this contextual link: Masters in Deep Learning. Why this matters: The official outline provides the most accurate baseline for outcomes and expectations.​
Why Masters in Deep Learning Is Important in Modern DevOps & Software Delivery
Deep learning is widely adopted because it helps organizations build smarter automation and better decision-making systems, especially in areas like NLP and modern AI-driven experiences. When these capabilities enter products, delivery teams must treat models like production assets that move through environments in controlled ways. Why this matters: AI features must follow release discipline to remain stable, secure, and measurable.​
In modern software delivery, success depends on more than offline accuracy. Teams must also handle repeatability, environment consistency, scalability, monitoring, and safe rollbacks—areas where DevOps practices directly affect outcomes. Why this matters: Operational readiness prevents AI from becoming a high-risk deployment that breaks SLAs.​
A Masters in Deep Learning helps engineers understand the end-to-end lifecycle and how cross-functional teams collaborate to deliver deep learning features reliably. It also reinforces how deep learning work connects to Agile planning, cloud delivery, and CI/CD gates. Why this matters: Most real failures happen at the handoff between “model building” and “production operations.”​
Core Concepts & Key Components
Neural Networks (Foundations)
Purpose: Build the foundation to understand deep learning models and how they learn representations from data.
How it works: Models learn by adjusting weights during training so predicted outputs match expected outputs more closely over many iterations.
Where it is used: Core deep learning models for vision, language, and structured prediction problems in real products. Why this matters: Strong fundamentals improve debugging, explainability discussions, and production tuning decisions.​
Deep Learning Algorithms & Models
Purpose: Learn common deep learning approaches and how to apply them to real problem types.
How it works: Different architectures handle different data patterns, such as sequences, images, or generative tasks, and are trained against loss functions suited to the objective.
Where it is used: Classification, detection, generation, recommendation, and language understanding features. Why this matters: Choosing the right model class early reduces rework and improves delivery timelines.​
Tooling & Framework Exposure
Purpose: Gain exposure to practical toolchains used to implement deep learning solutions end-to-end.
How it works: Learners use common frameworks and workflows to build, train, validate, and package models for deployment.
Where it is used: Enterprise AI/ML pipelines, internal automation projects, and product engineering teams. Why this matters: Tool fluency speeds up delivery and reduces friction in multi-team environments.​
Real-Time Projects & Assignments
Purpose: Convert learning into production-style capability by working on realistic scenarios and deliverables.
How it works: Projects simulate real business problems and require learners to apply concepts in a structured way, often with reviews and guided improvements.
Where it is used: Portfolio building, internal enablement, and real delivery preparation. Why this matters: Projects prove competence and teach the trade-offs that theory alone cannot cover.​
Interview Preparation & Readiness
Purpose: Help learners become job-ready by practicing the kinds of questions and tasks used in real hiring loops.
How it works: Structured prep kits, mock interviews, and guided practice build confidence across concepts, scenarios, and problem-solving.
Where it is used: Interview rounds for AI/ML roles and internal skill assessments. Why this matters: Interview readiness is a practical accelerator for career outcomes.​
Why this matters: These components work together to move learners from understanding ideas to delivering deep learning outcomes in real engineering environments.​
How Masters in Deep Learning Works (Step-by-Step Workflow)
Step 1: Identify a business problem where deep learning is justified, such as improving ticket routing, detecting anomalies, or extracting information from images. Why this matters: Good problem selection avoids wasted effort on problems that don’t need deep learning.​
Step 2: Collect and prepare data, then define what “good data” means for your use case, including validation and repeatability expectations. Why this matters: Data quality drives model quality, and reproducibility supports reliable delivery.​
Step 3: Train models and evaluate results using metrics that match real needs, not just accuracy, including stability and operational constraints. Why this matters: Production systems care about performance, predictability, and failure modes.​
Step 4: Apply production thinking: package the model, plan for deployment, and ensure the system can be integrated into delivery workflows. Why this matters: A model that cannot be deployed safely is not a deliverable.​
Step 5: Operate and improve: monitor behavior, track outcomes, and iterate with controlled changes and repeatable releases. Why this matters: Models degrade over time and need managed lifecycle updates.​
Real-World Use Cases & Scenarios
In customer operations, deep learning NLP can help classify and route tickets, summarize long requests, and support faster resolution, involving Developers for integration, QA for validation, and DevOps/SRE for release control and reliability. Why this matters: Even small AI workflow changes can impact customer experience and incident volume.​
In platform and operations, deep learning can support anomaly detection across logs and metrics to reduce noise and highlight meaningful signals, with Cloud teams managing infrastructure and DevOps ensuring deployment consistency. Why this matters: Operational AI must reduce toil without creating new alerting and reliability risks.​
In product engineering, deep learning powers personalization, ranking, and recommendation experiences that require low latency and stable performance, so cross-team coordination becomes essential. Why this matters: These systems often tie directly to revenue and retention, so delivery quality matters.​
Benefits of Using Masters in Deep Learning
Masters in Deep Learning strengthens practical capability by pairing a structured curriculum with hands-on projects, supporting a more complete learning experience that can be applied in real work environments. Why this matters: Applied learning closes the gap between understanding and execution.​
Productivity: Faster implementation because learners follow proven learning and delivery patterns. Why this matters: Repeatable patterns reduce rework and speed up delivery.​ Reliability: Better mindset around validation, stability, and operating models safely. Why this matters: Reliability prevents AI features from becoming incident generators.​ Scalability: Stronger understanding of how solutions must scale in real environments. Why this matters: Scaling planning prevents latency regressions and cost surprises.​ Collaboration: Shared language across Dev, QA, SRE, and platform teams. Why this matters: Collaboration reduces handoff delays and unclear ownership.​ Why this matters: The biggest benefit is becoming capable of shipping deep learning features that teams can trust in production.​
Challenges, Risks & Common Mistakes
A frequent mistake is treating deep learning as “train once and done,” without planning monitoring, controlled releases, and improvements over time. Why this matters: Models drift, and failures can appear slowly and silently.​
Another common risk is weak practical grounding—learning tools and concepts but not practicing realistic delivery constraints like latency, stability, and environment setup. Why this matters: Real environments force trade-offs that must be learned early.​
Teams also underestimate the importance of repeatability, including consistent data preparation and clear evaluation steps. Why this matters: Without repeatability, results are hard to trust and hard to troubleshoot.​
Why this matters: Knowing these risks early prevents expensive rework and increases success rates in real deployments.​
Comparison Table
Decision PointTraditional ApproachModern Deep Learning + Delivery ApproachLearning styleFragmented tutorialsStructured Masters path with guided outcomes ​Skill proofConcept-onlyProjects + assignments aligned to real work scenarios ​Goal“Understand DL”“Build and apply DL in real environments” ​ReadinessMinimal interview prepInterview preparation kit + mock interview readiness ​ExecutionExperiment-drivenOutcome-driven with measurable goals ​Delivery focusTraining successTraining + integration + operational thinking ​RealismToy datasetsIndustry-style scenarios and constraints ​Team alignmentIndividual learningMulti-team readiness (Dev/QA/DevOps/SRE) ​ValuePersonal knowledgeEnterprise-ready application capability ​ContinuityOne-time courseLifetime access/support model in many programs ​ Why this matters: This comparison shows why deep learning success depends on delivery maturity and real-world practice, not only learning concepts.​
Best Practices & Expert Recommendations
Pick problems with clear success metrics and measurable impact, then align model evaluation to those outcomes instead of chasing generic benchmarks. Why this matters: Measurable outcomes keep learning practical and enterprise-relevant.​
Practice with real scenarios using projects that simulate corporate constraints, and document decisions like assumptions, data choices, and evaluation results. Why this matters: Documentation improves handoffs and builds professional credibility.​
Treat models like deliverables: aim for repeatability, versioning discipline, and a clear plan for deployment and change management. Why this matters: Enterprise readiness depends on controlled releases and traceability.​
Why this matters: Best practices turn learning into reliable execution that teams can scale and maintain.​
Who Should Learn or Use Masters in Deep Learning?
Developers should learn it when they need to build deep learning-backed features and integrate them into real applications with performance and reliability expectations. Why this matters: Integration is where most AI value is realized.​
DevOps Engineers, SREs, Cloud Engineers, and QA teams benefit when they support AI-enabled services and need clarity around delivery workflows, validation, and operational readiness. Why this matters: AI in production needs strong operations and testing discipline.​
It is relevant for both beginners and experienced professionals when the learning path stays structured and includes hands-on projects. Why this matters: Project-driven learning builds confidence and job-ready capability.​
FAQs – People Also Ask
What is Masters in Deep Learning?
It is a structured program to learn deep learning concepts and apply them through practical learning and projects. Why this matters: Structured learning improves consistency and outcomes.​
Why is it used?
It is used to build skills needed to become effective in deep learning roles and real implementation scenarios. Why this matters: Implementation ability is what creates real career and business impact.​
Is it suitable for beginners?
Yes, if learners commit to fundamentals and follow a structured plan with projects. Why this matters: A clear path reduces confusion and learning drop-offs.​
Does it focus only on theory?
No, many programs emphasize applying concepts in real work environments through projects and assignments. Why this matters: Application is what builds job-ready confidence.​
Does it help with interview preparation?
Yes, programs may provide interview preparation kits and mock interviews for readiness. Why this matters: Interview readiness accelerates career transitions.​
Is NLP included in the learning focus?
Many deep learning tracks cover NLP because it is a major driver in modern AI adoption. Why this matters: NLP is a common production use case across industries.​
What practical outcomes should be expected?
Learners can expect stronger understanding of deep learning concepts plus the ability to implement and apply models in realistic scenarios. Why this matters: Outcomes matter more than course completion.​
How does it connect to DevOps?
It connects by reinforcing production thinking like repeatability, environment discipline, and operational readiness for AI-enabled services. Why this matters: DevOps alignment is required to ship models reliably.​
Does it include real-time projects?
Many programs include real-time projects designed around industry scenarios. Why this matters: Realistic practice builds portfolio and workplace readiness.​
Is the certification recognized?
The program description states certification recognition and industry alignment as part of the offering. Why this matters: Recognition can improve credibility in hiring and internal evaluations.​
Branding & Authority
DevOpsSchool is presented as a trusted global platform for certification and training, and the official site link is DevOpsSchool . Why this matters: A known platform and clear training standards strengthen trust for enterprise learners.​
Rajesh Kumar is included as a mentor reference via Rajesh Kumar. Why this matters: Visible mentorship improves learning direction and practical alignment.​
The authority positioning emphasizes 20+ years of hands-on expertise across DevOps & DevSecOps, Site Reliability Engineering (SRE), DataOps/AIOps/MLOps, Kubernetes & cloud platforms, and CI/CD automation. Why this matters: Deep learning succeeds in enterprises when AI skills meet operational and platform expertise.​
Call to Action & Contact Information
If you want to explore the program details and outcomes for Masters in Deep Learning, visit the course page here: Masters in Deep Learning
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329

View the full article

• 0 comments
• 36 views

reporter

January 6Jan 6

Master in Datadog Training: Enterprise Monitoring Made Simple

Master in Datadog Training: Enterprise Monitoring Made Simple

Introduction: Problem, Context & Outcome
As software systems evolve and become increasingly complex, engineers are faced with the challenge of ensuring system health across cloud services, microservices, containers, and distributed architectures. The ability to maintain performance and reliability at scale is crucial, but without the right tools, diagnosing and resolving issues in real-time becomes increasingly difficult.
Master in Datadog Training equips engineers with the knowledge and skills needed to leverage Datadog—a powerful, all-in-one observability platform—to monitor every aspect of their infrastructure and applications. This comprehensive training program empowers professionals to implement effective monitoring strategies, enabling them to detect performance issues, reduce downtime, and enhance overall system reliability.
By the end of this training, engineers will have mastered Datadog’s features, enabling them to provide continuous visibility into their systems and rapidly respond to incidents.
Why this matters: Understanding and implementing effective monitoring tools, like Datadog, can significantly improve operational efficiency and prevent costly downtime, ensuring better customer experiences and more reliable systems.
What Is Master in Datadog Training?
Master in Datadog Training is an advanced program that focuses on Datadog, a leading platform for full-stack observability. The training covers everything from setting up Datadog agents and integrating with cloud services to building dashboards, configuring alerts, and troubleshooting issues in real time. This course is designed to teach professionals how to monitor their entire infrastructure, from cloud environments to microservices and containers, using a unified solution.
With Datadog, professionals can track and visualize metrics, collect logs, perform distributed tracing, and monitor the health of applications in a centralized dashboard. The training is suitable for DevOps engineers, Site Reliability Engineers (SREs), cloud architects, and developers looking to gain practical experience in system observability.
Through this program, engineers will learn how to use Datadog to prevent incidents before they affect users, allowing them to maintain high performance and uptime in modern environments.
Why this matters: Mastering Datadog enables engineers to efficiently manage system health, identify bottlenecks, and optimize performance, resulting in more reliable and scalable systems.
Why Master in Datadog Training Is Important in Modern DevOps & Software Delivery
DevOps practices require constant monitoring and feedback across a diverse array of services, applications, and cloud platforms. As organizations adopt cloud-native technologies, containers, and microservices, the need for integrated observability tools has never been greater. Traditional monitoring tools are often inadequate for keeping pace with the complexity of modern systems, leading to delayed issue detection and extended downtime.
Master in Datadog Training is vital in this context because it teaches professionals how to incorporate Datadog into their CI/CD workflows, enabling them to monitor systems across multiple environments, including cloud and on-premises infrastructures. By providing comprehensive visibility, Datadog helps DevOps teams detect performance issues, track key metrics, and manage application health throughout the entire software development lifecycle.
With its support for distributed tracing, metrics visualization, and log aggregation, Datadog is a critical tool for maintaining the performance, reliability, and security of modern applications. This training program empowers teams to prevent issues before they escalate, ensuring continuous and smooth software delivery.
Why this matters: A unified monitoring platform like Datadog is essential for DevOps teams to manage and optimize the health of modern software systems, enabling them to deliver value faster and more reliably.
Core Concepts & Key Components
Metrics Monitoring
Purpose: To measure key performance indicators (KPIs) such as resource utilization, system health, and application performance.
How it works: Datadog collects metrics from servers, cloud services, applications, and containers. These metrics are displayed in real-time dashboards for quick analysis and decision-making.
Where it is used: Metrics are critical for tracking system performance, managing capacity, and ensuring that service-level objectives (SLOs) are met.
Log Management
Purpose: To centralize and analyze logs from various sources for debugging, security auditing, and system analysis.
How it works: Datadog aggregates logs from multiple systems, such as servers, applications, and containers. These logs are indexed for efficient searching and correlated with metrics and traces for deeper insights.
Where it is used: Logs are essential for troubleshooting, security monitoring, and incident resolution.
Distributed Tracing
Purpose: To track and visualize requests as they move through different services, allowing teams to identify performance bottlenecks.
How it works: Datadog’s distributed tracing allows you to follow a request from start to finish, providing visibility into where delays or errors occur across microservices.
Where it is used: Distributed tracing is critical in microservices architectures to identify performance bottlenecks and improve service reliability.
Application Performance Monitoring (APM)
Purpose: To monitor the performance of applications in real-time, including tracking response times, error rates, and transaction throughput.
How it works: Datadog APM captures application transactions and metrics, offering visibility into application performance.
Where it is used: APM is used for optimizing code performance, improving user experiences, and minimizing downtime.
Alerting & Incident Detection
Purpose: To alert teams to critical system issues before they affect end-users.
How it works: Datadog allows you to configure alerts based on metrics, anomalies, and threshold breaches. Alerts can be routed to incident management tools like PagerDuty or Slack for immediate action.
Where it is used: Alerts are essential for real-time incident detection and proactive issue resolution.
Dashboards & Visualization
Purpose: To visually represent key system metrics, logs, and traces for easy monitoring.
How it works: Datadog’s dashboards aggregate data into interactive, customizable views that provide real-time insights into system health.
Where it is used: Dashboards are used for daily monitoring, reporting, and analyzing system health and performance trends.
Why this matters: Understanding these core concepts allows teams to effectively design monitoring solutions that increase system stability, reduce downtime, and improve performance across the entire software lifecycle.
How Master in Datadog Training Works (Step-by-Step Workflow)
The training begins with installing and configuring Datadog agents across the infrastructure, applications, and cloud services. Participants will learn to set up integration with popular platforms such as AWS, Azure, and Kubernetes to ensure comprehensive monitoring across all components.
Next, learners will explore how to create customized dashboards to visualize metrics, logs, and traces. Datadog’s interactive dashboards allow engineers to quickly identify performance trends and anomalies, enabling faster response times during incidents.
Once data is collected and visualized, engineers will configure alerts to proactively detect performance degradation or issues. The final step of the training focuses on continuous optimization, where participants will learn how to adjust monitoring strategies based on new insights and system changes.
Why this matters: A clear, step-by-step approach to Datadog ensures teams are equipped to set up and continuously improve their monitoring solutions to meet the demands of dynamic environments.
Real-World Use Cases & Scenarios
In the e-commerce industry, Datadog helps teams monitor user transactions during high-traffic events like Black Friday. By using APM and metrics collection, teams can detect issues with checkout processes or payment gateways, ensuring minimal impact on revenue.
In SaaS platforms, Datadog enables teams to track backend API performance and identify service failures in real time. Distributed tracing helps pinpoint bottlenecks in the system, allowing developers to optimize response times and enhance user experience.
For cloud engineers managing multi-cloud environments, Datadog provides real-time monitoring to track resource usage, detect cost anomalies, and ensure high availability across services.
Why this matters: These use cases demonstrate how Datadog’s monitoring features provide valuable insights that can be applied across various industries to enhance system performance and reliability.
Benefits of Using Master in Datadog Training
Productivity: Datadog enables quicker issue detection and resolution, allowing teams to focus on more strategic work. Reliability: Proactive monitoring ensures that potential issues are resolved before they impact end-users. Scalability: Datadog scales with your system, making it easy to monitor increasingly complex environments. Collaboration: Shared dashboards and alerting systems improve coordination among teams, leading to faster response times. By mastering Datadog, professionals can enhance system reliability and operational efficiency, contributing to better overall performance.
Why this matters: The ability to quickly detect and resolve issues improves system uptime and customer satisfaction.
Challenges, Risks & Common Mistakes
A common mistake when using Datadog is collecting excessive data without a clear strategy, which can lead to high costs and alert fatigue. Another mistake is setting up alerts that are too broad or too narrow, which can either miss critical issues or create unnecessary noise.
Additionally, not regularly reviewing and refining alert configurations can lead to outdated thresholds and missed alerts. Operational risks include failing to monitor critical components like databases or APIs, resulting in undetected issues.
To mitigate these risks, teams should start with a clear monitoring strategy, focus on high-priority services, and review alert configurations periodically.
Why this matters: Proper configuration and regular review of monitoring settings ensure that Datadog remains an effective tool for proactive issue detection and resolution.
Comparison Table
FeatureTraditional MonitoringDatadog MonitoringData TypesMetrics onlyMetrics, Logs, TracesCloud SupportBasicMulti-cloud, Hybrid environmentsKubernetes SupportLimitedFull supportAlertingStatic thresholdsAnomaly detection, custom alertsAPMBasicFull-stack, deep APMIncident ManagementReactiveReal-time, automated integrationsDashboardsBasicHighly customizableResource MonitoringStaticReal-time monitoringPerformance VisibilityLimitedFull-stack observabilityScalabilityLimitedEnterprise-level scalability Why this matters: Datadog’s modern features make it a more comprehensive and scalable solution for monitoring, outperforming traditional tools.
Best Practices & Expert Recommendations
Start with clear objectives for monitoring that align with business outcomes. Focus on the most critical services and key user journeys first, then scale your monitoring setup over time. Regularly review alert configurations to ensure they remain relevant and optimize for user-impacting issues.
Additionally, use Datadog’s advanced anomaly detection to identify problems before they become critical, and continually adjust your monitoring strategy based on post-incident analysis.
Why this matters: By following best practices, teams ensure Datadog becomes a valuable, scalable tool that provides long-term benefits.
Who Should Learn or Use Master in Datadog Training?
Master in Datadog Training is designed for DevOps engineers, SREs, cloud architects, and developers responsible for ensuring the health and performance of modern, distributed systems. This course is ideal for teams working with cloud-native technologies, microservices, and containerized environments.
The training is suitable for professionals at all experience levels, from beginners to seasoned experts, enabling them to effectively implement and manage Datadog in their own environments.
Why this matters: Mastering Datadog allows professionals to enhance their systems’ reliability and performance, improving their careers and the success of their organizations.
FAQs – People Also Ask
What is Master in Datadog Training?
It’s a comprehensive course that teaches engineers how to use Datadog for monitoring and observability.
Why this matters: This training equips professionals with essential skills for managing complex IT systems.
Is Datadog suitable for beginners?
Yes, the course starts with foundational concepts and gradually moves to advanced topics.
Why this matters: It’s accessible to all professionals, regardless of experience level.
How does Datadog help DevOps teams?
It provides real-time monitoring, anomaly detection, and incident management, helping teams ensure system reliability.
Why this matters: Proactive monitoring improves response times and system uptime.
Branding & Authority
This Master in Datadog Training is provided by DevOpsSchool, a trusted global platform for DevOps and cloud-native training. The course is led by Rajesh Kumar, who has over 20 years of hands-on expertise in DevOps, Site Reliability Engineering (SRE), Kubernetes, AIOps, and cloud technologies.
Rajesh’s experience ensures the training is aligned with current industry practices and provides practical, real-world applications.
Why this matters: Learning from an expert with deep industry experience ensures high-quality, actionable training.
Call to Action & Contact Information
Explore the full course details here:
Master in Datadog Training
Email: [email protected]
Phone & WhatsApp (India): +91 7004215841
Phone & WhatsApp (USA): +1 (469) 756-6329


View the full article

• 0 comments
• 41 views

reporter

January 6Jan 6

6 strategies for building a high-performance cybersecurity team

6 strategies for building a high-performance cybersecurity team

Longtime security chief George Gerchow had sought top-notch security engineers and developers to build his team.
Gerchow considered these workers “superstars” — and they proved him right in many ways. They were ambitious go-getters “who came in and absolutely killed it. They’d do a great job, but then they’d move on.”
Gerchow discovered that a collection of such superstars didn’t create a high-performing team, which he defines as one that works well together to protect the company, leans in, and builds trust among themselves and the business units. He realized to build a great team he needed a better mix of worker types.
Such teams don’t come together without effort. “Everyone needs to work on creating better teams,” Gerchow says.
Here, he and other veteran security leaders share six strategies to do that.
1. Build a diverse team
Having learned as CISO at a past company that having only one type of worker doesn’t get him the best overall team, Gerchow changed his recruiting and hiring practices. He sought to balance out the highly ambitious engineers he hired for innovation and big initiatives — and whose tenures could be short-lived, as they chased other projects — with those he calls “rock stars” —diligent, focused workers who deftly and reliably handled the day-to-day routine tasks that make up the bulk of security department responsibilities.
“You need a mixture of both of those,” says Gerchow, now CSO at Bedrock Security and a faculty member at IANS Research.
Gerchow also advocates for hiring workers with diverse backgrounds, saying “getting those different backgrounds brings different perspectives, and getting those into the security strategy is great; it builds different synergies.”
2. Be clear on the mission
Sharon Chand, US cyber defense and resilience leader at professional services firm Deloitte, says a characteristic of a high-performing team is alignment on the team’s mission.
To do that, though, team members need to know what the mission is and buy into it.
“It has to be a very clear mission that the leaders have articulated,” she says, explaining that the mission gives guidance on what everyone should be doing.
CISOs may think that the security’s department mission is clear — or that the mission is simply stated as “protect the organization from threats” — but Chand says a mission that provides clarity and details on the risks, threats, and security priorities that are unique to the organization based on its industry and business gives the teams an objective to rally around and direction on how to act “without having to check in and run things up the chain.”
In that way, Chand says a clear mission allows for speed — a needed attribute for security teams in an era when the pace of attacks is accelerating.
“A mark of a high-performing team is when the team understands its role in helping the business be successful, because they understand it’s not just about driving down critical alerts or responding to events within certain SLAs; it’s about making sure the business can continue to run. That helps with purpose and motivation,” Chand adds.
Gerchow also sees how a clear mission helps build a strong team: “Telling developers they have to do something for compliance doesn’t excite them,” he says, “but it does if you talk about risk and how to advance the business, if you put it in terms of what’s in it for the business.”
3. Properly equip the team to fulfill the mission
A high-performing team needs the right training, tools, and techniques to fulfill its mission, and that’s no different in the cybersecurity space, Chand says.
Of course, no CISO has an unlimited budget to fund every need staffers might identify, so it’s important to be strategic by knowing the team members’ strengths and by identifying where they need more training, what tools they’re best equipped to optimize, and where they must focus on improvement.
“CISOs need to be enabling them with the right training and technology to evolve their skills to meet the mission,” Chand adds.
That now includes ensuring the security team can use artificial intelligence to transform their roles, she says. “It’s teaching them to use data and analytics and how to use AI in a different way.”
The use of AI also boosts the ability to improve team performance, Chand notes, as scaling the use of AI in the security department “creates bandwidth” that enables CISOs and their staffers to move out of reactive mode and gain time and resources to upskill.
4. Be great at prioritizing
CISOs can build a high-performing team by getting better at setting and communicating priorities so team members know where to focus their time and efforts, says Nathan Wenzler, field CISO for client advisory at cybersecurity firm Optiv.
“We’ve known in the industry for a long time that we can’t boil the ocean, we can’t patch every vulnerability, we can’t fix every line of code. There’s simply too much to do, and we don’t have the resources to do it all. So prioritization is the right path,” he says. “It’s a function that a lot of people say they do, but many aren’t executing it well.”
CISOs who consolidate data from their security tools to create a holistic view of threats and vulnerabilities and align security strategy to the business are able to gain clarity on priorities and better direct their teams, Wenzler says.
“This isn’t an easy problem to solve,” he adds, “but where it does get solved, it becomes much easier to do an apples-to-apples comparison to where you’re at most risk and then prioritize what work needs to get done.”
5. Build workers’ soft skills to boost engagement with business peers
Security pros don’t always come with strong business, communication, and leadership skills. “We spent the past 20 years or so getting really good at the technical; now we absolutely need to start building the soft skills on our teams,” Wenzler says.
He stresses the need for communications skills specifically, saying they’re essential for security teams to effectively articulate information about the policies and procedures that the business needs to follow to counteract cyber threats.
“The teams that perform best today are the ones that successfully get everyone else to buy into what they’re doing,” Wenzler says. “They [achieve] that when they’re seen as business enablers and not just a division of IT, and they do that when they’re communicating in the language that the business understands.”
The ability for security pros to effectively engage with their business peers through improved communication, business acumen, empathy, and the like helps them be better workers, too, Wenzler explains. That’s because they gain more insight and clarity into the risks that matter most to the business, insight that they can then apply to how they do their security jobs.
Others note that security teams that have a strong rapport and collaboration with their business counterparts also have more cross-functional influence and higher levels of trust, both of which help them get buy-in on security rules and requirements.
“That means security gets done and actual improvements happen,” Wenzler adds.
6. Appoint — and empower — deputies
High-performing teams have CISOs who know they can’t do everything on their own and instead rely on deputies to help carry the load, says Steve Martano, faculty at IANS Research and a partner in Artico Search’s cybersecurity practice.
“A CISO should be identifying their top deputies or, if they already have them, they should be assigning them more of the operational tasks and the strategic needs related to their discipline, which enables the CISO to be more of that business risk executive and really serve as the peer of the CFO, the head of product, and the P&L leaders in the business,” Martano says.
This may seem like more of a win for the CISO than the team as a whole, but that’s not the case, Martano says. Rather, this creates stronger leaders throughout the security department who can respond quickly to team members’ needs — rather than always having to escalate questions, issues, and plans up to the CISO and waiting for responses.
“Strong deputies mean that you as a CISO can save cycles, because you don’t have to be as attentive to the day-to-day operational work they’re leading,” Martano says.
Empowering deputies can be hard for CISOs, Martano says, noting “there are a lot of CISOs who operate out of an abundance of caution and therefore micromanage their teams.”
He advises CISOs who want to build a stronger leadership team to first assess who they have, what skills they possess, and what skills they need to build. CISOs then need to plan how they’ll train those leaders to take on more executive-level tasks and oversight.
“Give them the latitude to make decisions, to make mistakes, and use you as a sounding board,” Martano says. “Have people represent you in meetings, and try to get the most out of people by making them think more business-wise and more strategically.”
Martano says creating a strong leadership team has benefits that cascade throughout the ranks, as these deputies tend to bring the same approach to those they supervise, empowering their own direct reports and expecting them to do the same with those reporting to them. As a result, workers at all levels are upskilling, taking on more responsibilities, and accepting more accountability.
“These CISOs,” Martano says, “are creating an environment that is fostering leaders down the chain.”
View the full article

• 0 comments
• 45 views

CSOonline

January 6Jan 6

New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

A new critical security vulnerability has been disclosed in n8n, an open-source workflow automation platform, that could enable an authenticated attacker to execute arbitrary system commands on the underlying host. The vulnerability, tracked as CVE-2025-68668, is rated 9.9 on the CVSS scoring system. It has been described as a case of a protection mechanism failure. It affects n8n versions fromView the full article

• 0 comments
• 41 views

Hacker News

January 6Jan 6

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

Users of the "@adonisjs/bodyparser" npm package are being advised to update to the latest version following the disclosure of a critical security vulnerability that, if successfully exploited, could allow a remote attacker to write arbitrary files on the server. Tracked as CVE-2026-21440 (CVSS score: 9.2), the flaw has been described as a path traversal issue affecting the AdonisJS multipartView the full article

• 0 comments
• 36 views

Hacker News

January 6Jan 6

CES 2026: Kwikset Launches $189 Aura Reach Smart Lock With Matter Integration

CES 2026: Kwikset Launches $189 Aura Reach Smart Lock With Matter Integration

Kwikset today announced the Aura Reach, a smart lock that offers Matter over Thread and Bluetooth connectivity. With Matter, the lock is able to connect to HomeKit, allowing it to be controlled through Apple Home or with Siri voice commands.


The Aura Reach supports hands-free auto unlock, proximity keypad wakeup, and a guided installation process for easy setup. It is able to be activated alongside other ‌HomeKit‌ and Matter devices using automations in the Apple Home app.

Users can set up temporary access codes for guests, track entry history, and get alerts if someone attempts to use an invalid code. The lock incorporates the Kwikset SmartKey Security, so it can be rekeyed in seconds. The lock is available in satin nickel and black color options.

Unlike some of the higher-end smart locks that have been coming out at CES, the Aura Reach does not include UWB, nor does it work with Apple's Home Key feature.

The Aura Reach is one of several Matter-enabled smart locks in Kwikset's lineup, including the Halo Select and Halo Select Plus. Compared to those locks, it lacks Wi-Fi, Home Key, and door sensing technology that's able to determine whether a door is open or closed.

The Aura Reach is priced at $189 and is available from major retailers like Amazon starting today.Tag: CES 2026
This article, "CES 2026: Kwikset Launches $189 Aura Reach Smart Lock With Matter Integration" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 45 views

reporter

January 6Jan 6

CES 2026: OWC Launches 2-Meter Thunderbolt 5 Cable for Macs

CES 2026: OWC Launches 2-Meter Thunderbolt 5 Cable for Macs

OWC today announced the launch of a fully certified 2-meter Thunderbolt 5 cable, which OWC says is the longest Thunderbolt 5 cable available for Macs and PCs.


The cable has been certified by Thunderbolt and independent testing labs, and it meets the full Thunderbolt 5 specification. It offers up to 80Gb/s bi-directional data performance, up to 120Gb/s video streaming performance for multiple displays, and 240W power delivery.

The 2-meter cable is priced at $80, and it joins OWC's other Thunderbolt 5 cables in 0.3m, 0.8m, and 1m lengths. It is available from the OWC website.

At CES, OWC is also debuting an 8TB Envoy Ultra Thunderbolt 5 SSD that supports transfer speeds of up to 6000MB/s, and a capacity expansion for the ThunderBlade X12 RAID SSD. It now supports up to 12 16TB SSDs for up to 192TB of storage, double the prior limit.Tags: CES 2026, OWC
This article, "CES 2026: OWC Launches 2-Meter Thunderbolt 5 Cable for Macs" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 37 views

reporter

January 5Jan 5

CES 2026: Samsung Announces Glasses-Free 6K 3D Odyssey G9 Gaming Monitor

CES 2026: Samsung Announces Glasses-Free 6K 3D Odyssey G9 Gaming Monitor

Samsung announced a refreshed Odyssey gaming display lineup for CES 2026, which includes five updated models with higher resolutions and refresh rates.


The new 32-inch Odyssey G9 is a 6K 3D display that doesn't require glasses to see the 3D effect. Samsung says the monitor uses real-time eye tracking to adjust depth and perspective in response to the viewer's position, providing a layered sense of dimension with no need for a headset.

The Odyssey G9 features a 165Hz refresh rate that's enhanced to 330Hz with Dual Mode, and 1ms gray-to-gray response time for minimal motion blur and ghosting. Samsung says that PC gamers will have access to an expanded lineup of supported titles with 3D effects created in collaboration with game studios, so it's unclear if the 3D functionality will be available for Macs.

Either way, games will not natively support 3D functionality, and game designers will need to optimize their games for the technology. The first games that will offer support include The First Berserker: Khazan, Lies of P: Overture, and Stellar Blade. According to Samsung, gamers can expect added dimensionality that enhances terrain, distance, and object separation compared to standard 2D gameplay.

Samsung's 27-inch Odyssey G6 display offers a 600Hz refresh rate enhanced to 1,040Hz through Dual Mode for competitive gaming. Players will be able to better track targets and see fine details during high-speed movement. The G6 is compatible with AMD FreeSync Premium and Nvidia G-Sync.

There are also several new Odyssey G8 displays, including a 32-inch 6K model with a 165Hz refresh rate, a 27-inch 5K model with a 180Hz refresh rate, and a 32-inch OLED model with a 240Hz refresh rate.

More information on Samsung's Odyssey display lineup can be found on the Samsung website. Samsung has not yet announced pricing for the new displays.Tags: CES 2026, Samsung
This article, "CES 2026: Samsung Announces Glasses-Free 6K 3D Odyssey G9 Gaming Monitor" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 43 views

reporter

January 5Jan 5

CES 2026: Twelve South Unveils Valet Tray With Qi2 and Modular Design

CES 2026: Twelve South Unveils Valet Tray With Qi2 and Modular Design

Twelve South today announced a new Valet tray with Qi2-certified wireless charging that combines 15W magnetic charging with a leather-lined catch-all for everyday items.


The Valet features Qi2 wireless charging, delivering up to 15W of power to compatible iPhone models and other Qi2 devices. It also includes a USB-C port capable of supplying up to 15W of power to a second device. It is concealed beneath the base of the tray to reduce visible cables. The Valet is powered via a USB-C port with a braided cable.

The tray is built around a weighted zinc alloy base for stability and is wrapped in Nappa leather. The charging pad itself is raised slightly above the tray surface, creating a defined area for phone placement while leaving the surrounding space available for other personal items.

Valet is available with black or taupe leather as standard, while the outer metal frame is removable and can be swapped independently of the main body, with options for black, taupe, brown, or ecru inserts.

There is an integrated cable management system in the base, enabling the Valet to be oriented in four different configurations. This allows the wireless charging pad to be positioned on the left or right side of the tray, or the entire unit to be rotated into a portrait orientation for narrower surfaces.

A small status light provides visual confirmation that a device has begun charging. The light briefly pulses when charging starts and then fades out after eight seconds.

Valet is available for pre-order in the United States for $179.99, with launch scheduled for January 15, 2026. International availability is planned for later in 2026.Tags: CES 2026, Twelve South
This article, "CES 2026: Twelve South Unveils Valet Tray With Qi2 and Modular Design" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 33 views

reporter

January 5Jan 5

iPadOS and macOS 26.2 Double 5GHz Wi-Fi Bandwidth for Wi-Fi 6E Devices

iPadOS and macOS 26.2 Double 5GHz Wi-Fi Bandwidth for Wi-Fi 6E Devices

With the release of iPadOS 26.2 and macOS Tahoe 26.2, Apple has improved the Wi-Fi speeds for select Macs and iPads that support Wi-Fi 6E. Updated Wi-Fi connectivity specifications are listed in Apple's platform deployment guide.


The M4 iPad Pro models, M3 iPad Air models, A17 Pro iPad mini, M2 to M5 MacBook Pro models, ‌M2‌, M3, and M4 MacBook Air models, and other Wi-Fi 6E Macs and iPads now support 160MHz maximum channel bandwidth when connected to 5GHz Wi-Fi networks, the same theoretical maximum throughput supported by 6GHz networks. Previously, these devices were limited to 80MHz.

In ideal conditions, a 160MHz maximum means that iPad and Mac users should see faster file transfers, quicker uploads, and smoother streaming. Wi-Fi 6E devices can take advantage of 6GHz networks, but 5GHz networks remain far more common. 6GHz networks require new router hardware, along with a machine that can take advantage of a 6GHz network.

With the upgrade, Wi-Fi 6E devices that connect to a 5GHz network can get throughput approaching peak 6GHz speeds without having to connect to a 6GHz network. Users who have a Wi-Fi 6 or 6E setup that supports 160MHz on 5GHz networks will be able to take advantage of the bandwidth improvement. Macs that have the updated 160MHz bandwidth limit will not see improvements when connected to 5GHz routers limited to 80MHz.

Though 5GHz bandwidth has improved on select Macs and iPads, 6GHz networks still have the benefit of less congestion and more spectrum.

(Thanks, Johnie!)
This article, "iPadOS and macOS 26.2 Double 5GHz Wi-Fi Bandwidth for Wi-Fi 6E Devices" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 33 views

reporter

January 5Jan 5

Why Arbor Edge Defense and CDN-Based DDoS protection are better together

Why Arbor Edge Defense and CDN-Based DDoS protection are better together

In today’s hyperconnected digital landscape, distributed denial-of-service (DDoS) attacks have evolved into sophisticated, multivector threats capable of crippling even the most resilient infrastructures. While content delivery network (CDN)-based DDoS protection offers scalable mitigation for volumetric attacks, it’s not a silver bullet. To truly safeguard critical services and maintain operational continuity, organizations must adopt a multilayered defense strategy—and that’s where NETSCOUT Arbor Edge Defense (AED) comes in.
The limitations of CDN-based DDoS protection
CDN providers offer robust cloud-based DDoS mitigation that is effective against large-scale volumetric attacks. These services reroute traffic through global scrubbing centers, filtering out malicious traffic before it reaches the origin server. However, CDN-based solutions often fall short in detecting and mitigating:
Low-volume, stealthy application-layer attacks Transmission Control Protocol (TCP) state exhaustion attacks Outbound threats from compromised internal hosts Attacks that bypass CDN routing (for example, direct-to-IP attacks) These gaps leave critical infrastructure vulnerable, especially when attackers use dynamic, multivector techniques designed to evade upstream defenses.
Arbor Edge Defense: The first and last line of defense
NETSCOUT’s AED is uniquely positioned between the internet router and the firewall, acting as an inline, always-on shield. AED uses artificial intelligence (AI) and machine learning (ML)-powered stateless packet processing and real-time threat intelligence from NETSCOUT’s ATLAS infrastructure, which monitors up to 50% of global internet traffic spanning more than 200 countries and territories and 398 industry verticals and representing two-thirds of the routable IP space.
Key capabilities include:
Automatic mitigation of all DDoS attack types, including encrypted traffic and Domain Name System (DNS) water torture attacks Protection against outbound threats, preventing data exfiltration, and botnet communications Firewall preservation, reducing operational load by as much as 80% Adaptive DDoS protection, which learns and adjusts to evolving attack patterns in real time The power of a hybrid approach
Combining AED with CDN-based DDoS protection creates a defense-in-depth architecture that covers the full spectrum of attack vectors:
Arbor Cloud DDoS protection handles high-volume attacks far from the target, preserving bandwidth and upstream resources AED provides surgical, on-premises mitigation for application-layer and state-exhaustion attacks that cloud solutions often miss Real-world impact
According to IDC, 41% of organizations report that online attacks—including DDoS—have caused damages exceeding $100,000, with 5% suffering losses of more than $1 million. As attackers increasingly leverage AI to launch dynamic threats, organizations must respond with intelligent, automated defenses that adapt in real time.
In isolation, CDN-based DDoS protection and Arbor Edge Defense each offer valuable capabilities. But together, they form a comprehensive, adaptive, and resilient security posture that’s essential for modern enterprises facing relentless cyberthreats. By integrating these solutions, organizations can ensure their networks remain available, secure, and performant—no matter what the threat landscape throws their way.
Learn more about NETSCOUT’s Arbor Edge Defense.

View the full article

• 0 comments
• 40 views

CSOonline

January 5Jan 5

Why cybersecurity needs to focus more on investigation and less on just detection and response

Why cybersecurity needs to focus more on investigation and less on just detection and response

When we think about cybersecurity, most of us picture alarms going off, software scanning for viruses, and firewalls keeping the bad guys out. Detection and response are the heavy lifters in any modern security strategy, and rightfully so. They help us spot threats, shut them down quickly, and get back to business.
But here’s the catch: Focusing only on detection and response is like driving a car while looking only in the rearview mirror. You might see problems when they’ve already happened, but you miss the opportunity to understand what caused them and how to avoid them in the future.
In cybersecurity, the investigation phase is where the real magic happens. It’s where you dig deeper, look beyond the surface, and ask the tough questions: How did this happen? Why did it work? What does this mean for the bigger picture? The truth is, too many organizations spend most of their time trying to detect and respond to threats without investing in the deeper understanding that comes with a thorough investigation.
The problem with over-focusing on detection
Imagine you’re dealing with a leak in your house. You notice the water rising, so you grab a mop and start cleaning up. But if you never investigate where the leak is coming from, it’s only a matter of time before the problem returns. In cybersecurity, detection is the mop, important for stopping immediate damage, but not a long-term solution.
Detection tools such as intrusion detection systems (IDS) and firewalls are crucial. They alert you to threats, catch malicious activities early, and help prevent disaster. But they are reactive by nature. They’re designed to find the known problems, the familiar patterns, the stuff that has already been spotted and documented. This is great for stopping the obvious things, such as hackers trying to brute-force their way into a system, but it’s not so effective against things that are more subtle or sophisticated.
The real issue? Many of today’s most dangerous threats are the ones that don’t show up easily on detection radars.
Think about the advanced persistent threats (APTs) that remain hidden for months or the zero-day attacks that exploit vulnerabilities no one even knew existed. These threats may slip right past the detection systems because they don’t act in obvious ways. That’s why, in these cases, detection alone isn’t enough. It’s just the first step.
Investigation: Where the real insights lie
This is where investigation comes in. Think of investigation as the part where you understand the full story. It’s like detective work: not just looking at the footprints, but figuring out where they came from, who’s leaving them, and why they’re trying to break in in the first place. You can’t stop a cyberattack with detection alone if you don’t understand what caused it or how it worked. And if you don’t know the cause, you can’t appropriately respond to the detected threat. An investigation looks at things such as:
What vulnerabilities were exploited? How did the attackers gain access in the first place? What have they done once inside? What’s the long-term impact: did they steal data, or just cause chaos? By diving deep into packet-level data, investigators can paint a full picture of an attack, uncovering things that might not be immediately apparent. This level of understanding is essential for defending against future threats. It’s about learning from what happened, not just reacting to it.
Why we miss it, and why we shouldn’t
There’s a reason why so many organizations focus on detection and response. They’re easy to measure, and they provide quick, visible results. But here’s the thing: When we put all our effort into detecting and responding, we miss out on the bigger lessons that investigation can teach us.

Take this analogy: Imagine trying to prevent a fire by only looking for smoke. If all you focus on is catching the smoke as it rises, you never find out where the fire started. Maybe it was a faulty wire or an unnoticed spark in the attic. You’re reacting, but you’re not solving the root cause.
The same goes for cybersecurity. When we’re just detecting and responding, we may miss the true cause of the problem, which leaves us vulnerable to the same issues happening again. An investigation is the only way to uncover the weak points in your defenses, learn from your mistakes, and improve over time.
The true cost of missing the investigation
The cost of neglecting investigation goes beyond just missing a threat. It’s about missed opportunities for learning and growth. Every attack offers a lesson. By investigating the full scope of a breach, you gain insights that not only help in responding to that incident but also prepare you to defend against future ones. It’s about building resilience, not just reaction.
Think about it: If you never investigate an incident thoroughly, you’re essentially ignoring the underlying risk that allowed the threat to flourish. You might fix the hole that was exploited, but you won’t have a clear understanding of why it was there in the first place. And next time, attackers might find a different way in.
The bigger picture: Cybersecurity as a continuous learning process
Here’s the deeper point: Cybersecurity is not about preventing every single attack; that’s an unrealistic goal. It’s about understanding your vulnerabilities, adapting, and getting better over time. Investigation is a tool for continuous improvement.
The market has been laser-focused on detection and response, and for good reason. These are crucial in mitigating immediate risk. But they should be part of a broader, more reflective process that includes investigation, a phase that allows you to learn from the past and prepare for the future. In the long run, this is the real key to building a resilient security posture.
Final thoughts: A shift in thinking
As we look to the future of cybersecurity, it’s time for a shift in thinking. Instead of just reacting to threats, let’s focus on understanding them: investigating the root causes, uncovering patterns, and using those insights to strengthen our defenses. The goal should be not just to stop the attack, but to learn from it and build a better system going forward.
If we can embrace this mindset, we’ll be far more prepared for the challenges ahead. After all, the best defense against tomorrow’s attack isn’t just detecting it when it happens. It’s understanding it before it even starts.
Learn how NETSCOUT Omnis Cyber Intelligence can help by providing comprehensive network visibility with scalable deep packet inspection (DPI) to detect, investigate, and respond to threats more efficiently.
View the full article

• 0 comments
• 46 views

CSOonline

January 5Jan 5

5 myths about DDoS attacks and protection

5 myths about DDoS attacks and protection

Distributed denial-of-service (DDoS) attacks come in many shapes and sizes, as do the myths surrounding them. These myths can center on motivations, DDoS attack vectors and techniques, mitigation strategies, and more. DDoS myths are also sometimes more dangerous than the attacks themselves because the misconceptions can leave organizations vulnerable to other types of cyberattacks, misguide mitigation strategies, or cause teams to miss attacks altogether. Let’s look at five of the top myths regarding DDoS attacks and protection and debunk them.
Myth 1: DDoS attacks are uncommon, only target large corporations, and are carried out by sophisticated threat actors.
In reality, DDoS attacks are very common, targeting businesses of all types and sizes. According to NETSCOUT’s ASERT research team, there were more than 15 million DDoS attacks worldwide in 2024. This level of activity shows that the threat of DDoS is alive and well, making defensive measures a must for companies of all shapes and sizes.
Although nation-states carry out their own sophisticated DDoS attacks, many are carried out by low-cost or even free DDoS-for-hire services that utilize global botnets or groups of compromised devices. Often, the ones requesting DDoS-for-hire attacks are not sophisticated hackers but are acting on geopolitical events, going after companies, individuals, or infrastructure that go against their interests.
DDoS attacks do not always target corporate networks. They often target infrastructure or key services, such as power grids, to profoundly impact the general population.
Myth 2: DDoS attacks only involve flooding networks with large amounts of traffic.
In the early days of DDoS, the vast majority of attacks were large traffic floods. However, DDoS attacks have evolved over time, becoming more surgically targeted and complex. The media continues to report on the largest, most shocking attacks that are terabits per second in size, reinforcing this common misconception. Although these large-scale attacks are still dangerous, most smaller attacks, under 1Gbps, are equally dangerous, targeting application layers such as the Domain Name System (DNS) and HTTP.
In 2024, ASERT noted a 43% increase in smaller application-layer attacks compared with 2023, showing that these targeted assaults are rising in popularity. This is because many DDoS protection services provided by internet service providers (ISPs) and other cloud protection solutions look for large volumetric attacks and disregard the smaller attacks, which are passed on to the customer. Unless networks have some level of DDoS protection in place, these smaller attacks are more likely to be successful and can cause issues for businesses and their customers.
Transmission Control Protocol (TCP) state-exhaustion attacks are another common type of smaller attack. They specifically target stateful on-premises devices such as firewalls, load balancers, virtual private network (VPN) gateways, and more, and fill their state tables with bogus connections, blocking legitimate users from accessing areas of the network.
Myth 3: Next-generation firewalls can stop DDoS attacks.
Next-generation firewalls (NGFWs) are powerful devices that can greatly improve your overall security stance. However, their stateful design makes them vulnerable to several types of DDoS attacks, especially state-exhaustion attacks. Pairing NGFWs with a stateless DDoS mitigation solution placed in front of the firewall protects firewalls from state-exhaustion attacks.
Myth 4: Cloud-based DDoS protection alone is enough.
When a DDoS attack is larger than your internet pipe, the only way to stop it is with cloud-based DDoS protection. That said, smaller attacks can slip past these protections, necessitating additional defensive measures. Modern DDoS attacks leverage multiple attack vectors to bypass defenses. This means they can pair a volumetric attack or state-exhaustion attack with an application-layer attack to target multiple areas of the network, making it harder to detect and mitigate.
By deploying a hybrid approach to DDoS defense, pairing cloud-based and on-premises inline DDoS protection solutions, organizations can better protect against agile, multivector DDoS onslaughts, maximizing uptime and availability.
Myth 5: DDoS protection does not require the use of AI/ML.
Many believe that leveraging artificial intelligence (AI) or machine learning (ML) is not necessary in defending against DDoS attacks. That could not be further from the truth. First, attackers are using AI/ML to multiply attack volumes, increase sophistication, and avoid detection. This means that defensive measures must think the same way, leveraging the traffic anomaly detection capabilities of AI/ML to find abnormalities in traffic patterns that signify DDoS threats.
AI/ML can take the form of curated threat intelligence feeds that automatically block known, active DDoS threats in real time. With this threat intelligence constantly updated, the latest threats are no match for AI/ML-powered DDoS defenses. AI/ML can also automate real-time countermeasure adjustments to defend against multivector attacks.
DDoS attacks and protection
Myths have no place in protecting your network’s most important digital assets. Don’t fall victim to these common myths. Dedicated DDoS protection that defends against dynamic multivector DDoS attacks is the only true way to assure maximum uptime in the modern DDoS landscape.
Learn more about NETSCOUT’s Arbor DDoS protection solution.  

View the full article

• 0 comments
• 45 views

CSOonline

January 5Jan 5

CES 2026: Pioneer Announces First Aftermarket CarPlay Unit With Spatial Audio

CES 2026: Pioneer Announces First Aftermarket CarPlay Unit With Spatial Audio

Pioneer today announced a new in-dash receiver that supports Dolby Atmos audio playback within Apple CarPlay, extending the feature into the aftermarket category for the first time.


Apple has supported Dolby Atmos and Spatial Audio across much of its ecosystem since 2021, including the iPhone, iPad, Mac, Apple TV, AirPods, HomePod, and Apple Music. In vehicles, however, Dolby Atmos playback through Apple ‌CarPlay‌ has depended on automakers integrating compatible audio hardware, resulting in availability being restricted to a relatively small number of high-end models. Pioneer's new SPHERA in-dash receiver makes Atmos-capable ‌CarPlay‌ available to a much broader base of drivers through aftermarket installation.

The system uses a vehicle's existing speaker setup rather than requiring specialized or factory-installed Atmos hardware. The company says the receiver uses an optimized four-channel configuration that works with standard front and rear speakers, allowing spatial audio playback without additional height or ceiling-mounted speakers.

Pioneer's proprietary Pure Autotuning technology is designed to address the acoustic variability of vehicle interiors, accounting for different sizes, shapes, materials, and speaker placements. It automatically adjusts time alignment, frequency response, and channel levels to place the listener at what Pioneer calls the acoustic center position.

The receiver itself features a 10.1-inch HD capacitive touchscreen and supports wireless ‌CarPlay‌, wireless Android Auto, and Bluetooth connectivity. The interface includes a split-screen mode that allows navigation to remain visible while drivers access audio controls or system functions.

SPHERA is designed for universal aftermarket installation and can be fitted to a wide variety of vehicles with minimal modification. Pioneer announced it at CES 2026 and said the receiver will be available starting in the spring, with pricing starting at $1,300.Tags: CES 2026, Pioneer
This article, "CES 2026: Pioneer Announces First Aftermarket CarPlay Unit With Spatial Audio" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 45 views

reporter

January 5Jan 5

Apple Launches Year of the Horse AirPods Pro 3 for Lunar New Year

Apple Launches Year of the Horse AirPods Pro 3 for Lunar New Year

Apple has designed a limited edition version of the AirPods Pro 3 to celebrate Lunar New Year, and customers in select countries can purchase them starting today. The Year of the Horse Special Edition ‌AirPods Pro 3‌ feature a unique horse emoji character that's otherwise unavailable.


Customers in China, Hong Kong, Taiwan, Malaysia, and Singapore are able to buy the AirPods, and they'll be available as long as supplies last. Lunar New Year begins on Tuesday, February 17 in 2026.

Apple designs special edition AirPods with a custom engraving each year. There have been limited edition AirPods to celebrate the Year of the Dragon, Year of the Ox, Year of the Tiger, Year of the Rabbit, and Year of the Snake.

The special edition ‌AirPods Pro 3‌ are identical to the standard ‌AirPods Pro 3‌ and the pricing is the same. The only thing that's different is the engraving. Apple released the ‌AirPods Pro 3‌ in 2025, introducing improved sound, better Active Noise Cancellation, an updated fit, and heart rate sensing. Orders placed today will begin shipping out to customers on January 8.

Along with special edition ‌AirPods Pro 3‌, Apple is also selling a selection of Year of the Horse-themed accessories, such as iPhone cases, power banks, AirTag covers, organizers, and travel chargers.
This article, "Apple Launches Year of the Horse AirPods Pro 3 for Lunar New Year" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 35 views

reporter

January 5Jan 5

CES 2026 Day 1: AI for Everything

CES 2026 Day 1: AI for Everything

The annual CES tech event kicks off this week, with all kinds of companies showing off new products that are going to launch throughout 2026. Unsurprisingly, AI is the theme of this year's show, and almost everything you can think of is getting an artificial intelligence upgrade.

Subscribe to the MacRumors YouTube channel for more videos.
We sent MacRumors videographer Dan Barbera to CES to check out what's new, and our first video covers the CES Unveiled preview event that happens before the show begins, along with some new Samsung products.

Samsung is showing off its latest smartphone, the Galaxy Z TriFold. Instead of just folding in two like a book, it has three folds, so it goes from 6.5 inches when closed to 10 inches when opened up. With the extra fold, it looks and feels much more like a tablet, and there's a lot of screen real estate for multitasking, playing games, and watching content. When it's closed up, it's thick, but still pocketable.

Most of Samsung's other devices like TVs are getting iterative updates and AI support with the new Vision AI Companion. The AI can answer questions about content on the screen, provide recommendations on what to watch or listen to, suggest what to eat, and give recipes from food you see on TV. There are also intuitive AI modes to personalize the viewing experience, tweaking picture and sound controls.

Samsung debuted a 130-inch microRGB TV with its most impressive color spectrum to date, updated OLED Frame TVs with realistic art, a record player with an animated display, and Movingstyle displays that are meant to detach from a base so they can be taken around the home.

Samsung's smart home integration is getting an AI update that allows smart home products to be activated based on sleeping metrics collected by the Galaxy Watch. If the watch detects that the wearer is too hot, it can turn on the AC. Or if the room is dry, it's able to turn on a connected humidifier. For gamers, Samsung showed off new Odyssey gaming displays, including the 6K Odyssey G9.

There were multiple fun and unusual products at CES Unveiled, like the $8,500 4D Falcon Massage Chair from Bodyfriend. It looks like a mech suit chair hybrid device, and it offers custom massage profiles with built-in leg and arm stretching functionality. It includes zero gravity recline, hand acupressure pads, and 36 airbags.

The $120 Ostation from Olight is able to recharge up to 32 AA batteries at one time, testing to ensure they're functional. There's also a version for AAA batteries, and both are handy if you use a lot of these battery types.

LiberNovo was showing off the $930 Omni desk chair, a dynamic ergonomic chair that senses the curve of your back and adapts automatically to offer support. It includes an adaptive neckrest and movable armrests that shift when the user leans back.

Belkin has some useful new charging products, including a $65 Qi2.2 3-in-1 charging dock and a Qi2.2 power bank that has an extra magnet so you can still use wallets, grips, or stands. Qi2.2 charges devices at up to 25W, just like MagSafe.

The $500 HoverAir Drone is a compact drone with a built-in high-resolution camera and stabilization, so it's like having a tiny film crew for video recording. It has covered rotors, so it's safe to use indoors.

Withings debuted a next-generation $600 Body Scan scale that's able to measure more than 60 biomarkers. It monitors heart pumping efficiency, cellular health, and metabolic function with eight EKG-capable electrodes on the scale surface and four in a retractable handle.

CES Unveiled also included a bunch of AI companion robots like the Tombot, a lifelike robotic dog with interactive sensors, real puppy sounds, and voice control. It's meant to offer emotional support without the need for traditional pet care, but it's not available for purchase yet.

We'll be covering more CES highlights throughout the week, so make sure to stay tuned, and check out our CES 2026 hub for all of our coverage.Tag: CES 2026
This article, "CES 2026 Day 1: AI for Everything" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 39 views

reporter

January 5Jan 5

Anker Introduces Pre-Order Discounts on 2026 Nano Chargers, Alongside Big New Year's Sale

Anker Introduces Pre-Order Discounts on 2026 Nano Chargers, Alongside Big New Year's Sale

Anker announced a new series of products at CES this week, and most of them will begin rolling out to customers later in January. A few of these devices, including the Nano Docking Station and 45W Nano Charger, have pre-order discounts on Anker's website, and we're also tracking big discounts in Anker's New Year's sale.

Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.

Normally $39.99, early adopters of the 45W Nano Charger can get it for $29.99 this week with Anker's automatically applied coupon code. As of writing, all colors are in stock except for the orange option.

$10 OFFAnker 45W Nano Charger for $29.99

The new 45W Nano Charger features a Smart Display and a 180-degree foldable plug to ensure the display always faces where you want it to regardless of plug orientation. The accessory can also identify an iPhone model and provide the appropriate amount of power for fast charging while protecting battery health.

$40 OFFAnker Nano Docking Station for $109.69

You can also get the new Nano Docking Station for the discounted price of $109.69 when pre-ordering, down from $149.99. This accessory includes a built-in removable hub so some features are available on-the-go. It supports three displays with up to a 4K resolution over DisplayPort and HDMI, and it offers 100W charging and 10Gb/s data transfer.


Lastly, Anker is hosting a big New Year's sale this week, with up to 38 percent off popular charging accessories. In addition to the automatically applied discounts on each item, Anker is providing $10 off orders over $99, $15 off orders over $139, and $20 off orders over $179.

UP TO 38% OFFAnker New Year's SaleAnker Chargers

Nano II 65W Charger - $25.99, down from $39.99
Nano Wireless Car Charger - $39.99, down from $59.99
6-Port 200W Prime Charging Station - $59.99, down from $79.99
3-Port 67W Wall Charger (2-Pack) - $74.79, down from $99.98
13-in-1 Nano Docking Station - $109.69, down from $149.99
13-in-1 USB-C Docking Station - $129.71, down from $199.99
3-in-1 Prime Wireless Charging Station - $145.98, down from $229.99

Anker SOLIX

Anker 521 PowerHouse (300W) - $129.99, down from $249.99
Anker 535 PowerHouse (500W) - $249.00, down from $649.99
SOLIX C1000 Gen 2 Portable Power Station - $469.99, down from $799.00
SOLIX C1000 Gen 2 + Solar Panel - $619.99, down from $1,298.00
SOLIX C2000 Gen 2 Portable Power Station - $719.99, down from $1,498.00
SOLIX F3000 Portable Power Station - $1,199.00, down from $2,599.00
SOLIX F3800 Portable Power Station - $2,199.99, down from $3,999.00
SOLIX F3000 + Expansion Battery + Solar Panel - $2,199.00, down from $5,397.00
SOLIX F3800 Plus Smart Home Power Kit - $5,798.00, down from $8,897.00

If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.



Deals Newsletter

Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!




Related Roundup: Apple Deals
This article, "Anker Introduces Pre-Order Discounts on 2026 Nano Chargers, Alongside Big New Year's Sale" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 42 views

reporter

January 5Jan 5

Apple Store Moving in Montréal, Get the Mac and iPhone Wallpaper Now

Apple Store Moving in Montréal, Get the Mac and iPhone Wallpaper Now

Apple is moving its store in Downtown Montréal, with the new location set to open on Friday, January 16, at 10 a.m. local time, according to iPhone in Canada.


The new store will be in a historic building at the northeast corner of Rue Saint-Catherine and Rue de la Montagne in Montréal, the most populous city in the Canadian province of Québec. Apple renovated the building over the past few years.

To celebrate the new store, Apple has made a custom wallpaper for the Mac and iPhone available on the store page for a limited time.

As another way of celebrating, Apple collaborated with Montréal-based artist Catherine Potvin, who created the special artwork that will be visible on the store's facade until the grand opening. At the store, customers who make a purchase can receive a complimentary Apple Store bag illustrated by her at the following times:Friday, January 16 between 11 a.m. and 2 p.m.
Saturday, January 17 between 1:30 p.m. and 4 p.m.Apple's existing Sainte-Catherine store opened in 2008, and the new location is very close by.


As spotted by designer Filip Chudzinski, Apple has also announced that its Baybrook store in Friendswood, Texas, a suburb of Houston, will also be reopening in its original location on Friday, January 16, at 10 a.m. local time. Apple operated a temporary store inside the shopping mall while it renovated the original location.Tag: Apple Store
This article, "Apple Store Moving in Montréal, Get the Mac and iPhone Wallpaper Now" first appeared on MacRumors.com

Discuss this article in our forums

View the full article

• 0 comments
• 153 views

reporter

January 5Jan 5

Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government

Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government

The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by leveraging the Viber messaging platform to deliver malicious ZIP archives. "This organization has continued to conduct high-intensity intelligence gathering activities against Ukrainian military and government departments in 2025," the 360 Threat Intelligence Center said inView the full article

• 0 comments
• 32 views

Hacker News

January 5Jan 5

Ten thousand firewalls are vulnerable to old vulnerability

Ten thousand firewalls are vulnerable to old vulnerability

Bleeping Computer reports that hackers are exploiting an old vulnerability in FortiOS that can be used to get around the two-factor authentication (2FA) requirement.

The vulnerability, designated CVE-2020-12812, was patched back in July 2020, but five and a half years later, there are still at least 10,000 firewalls that have not been updated.

To be on the safe side, all users of FortiOS and Fortigate are therefore urged to install the latest updates as soon as possible.
This news brief originally appeared on ComputerSweden.
More Fortinet security news:
FortiGate firewall credentials being stolen after vulnerabilities discovered Fortinet criticized for ‘silent’ patching after disclosing second zero-day vulnerability in same equipment Fortinet admins urged to update software to close FortiCloud SSO holes View the full article

• 0 comments
• 38 views

CSOonline

January 5Jan 5

Stress caused by cybersecurity threats is taking its toll

Stress caused by cybersecurity threats is taking its toll

As cyber threats become more frequent and more complex, they’re causing visible, measurable damage to organizations’ reputations and bottom lines. But the damage doesn’t end there. Breaches — or at least the threat of them — are impacting the mental health of companies’ IT and security workforces.
According to new data, IT and security workers are facing nothing less than a mental health crisis in the workforce. Object First’s recent survey of 500 IT and security professionals revealed that 84% feel uncomfortably stressed at work due to IT security risks. The survey went on to report that 78% fear they will be personally blamed for security incidents regardless of the circumstances.
These numbers should alarm any CSO whose staff are responsible for keeping cyber threats from taking our systems down. The corporate sector rightly puts a premium on creating positive, productive cultures to help staff thrive and do their best work. But this latest data shows that workers are on edge and worried about repercussions from the threats IT breaches pose.
Other numbers in the same survey should trigger even louder alarms. Nearly three-fifths of all cyber/IT workers say they have considered or have actively begun looking for new jobs due to the pressures of their role. In addition, nearly half report feeling pressure from leadership to “fix everything” in the aftermath of a security incident, while nearly one in five (18%) say they feel “hopeless and overwhelmed” during and after an incident.
As a Field CTO who works closely with security teams to set them up for success, this data gives me chills. So many of our best professionals feel threatened enough by cyber stress to walk out the door and look for a new job. This is more than an HR nightmare; it’s a business resilience challenge.
Burnout is intensifying
Any CSO or CISO knows that burnout in the cybersecurity sector is not a brand-new topic. As far back as the early 2000s, when cyber evolved into a formal discipline, leaders were talking openly about the stress security pros were feeling, having to be “always on.” Over the next two decades, surveys found that a majority of security personnel felt burned out and many considered leaving the field.
While the issue isn’t new, recent reports confirm that burnout in our sector seems to be intensifying.
“Cybersecurity professionals at all levels are burning out. Our research shows this is only getting worse,” says Jon Oltsik, former industry analyst and author of the Information Systems Security Association (ISSA)’s seventh annual “Life and Times of Security Professionals” report.
The ISSA survey said cyber workers’ jobs are getting harder, citing increased complexity and workload, more threats and larger attack surface, regulatory compliance pressures and understaffing as their top stressors. The report also indicates the vast majority (81%) of respondents who said they are under stress considered leaving their jobs on a regular basis, versus 17% of those satisfied with their roles.
Gartner also weighed in on the topic earlier this year, listing cybersecurity burnout as one of the six top cybersecurity trends of 2025.
“Cybersecurity burnout and its organizational impact must be recognized and addressed to ensure cybersecurity program effectiveness,” said Alex Michaels, senior principal analyst at Gartner. “The most effective SRM leaders are not only prioritizing their own stress management, but they are also investing in teamwide wellbeing initiatives that demonstrably improve personal resilience.”

Finding qualified cybersecurity workers is still a difficult task. Hiring a new IT or security professional typically costs one and a half to two times their predecessor’s annual salary, and up to 28% of all cyber jobs remain unfilled, according to the Boston Consulting Group’s “2024 Cybersecurity Workforce Report: Bridging the Workforce Shortage and Skills Gap.”
It’s hard enough to match the skills a trusted, talented security professional possesses. It’s impossible — at least in the short term — to replace the institutional knowledge that same professional gains working inside your organization, helping to fend off IT threats for a significant amount of time.
The roots of cyber stress
Cyber employees can feel pressure for a number of reasons. Many sense they have to maintain a constant state of vigilance to spot any phishing, ransomware and social engineering threats that come in. Many fear that one wrong click — by them or by a colleague — could compromise the company and put their job at risk. Others feel a sense of “compliance overload,” having to deal with repeated password changes, MFA steps and security awareness training.
More than half of the respondents to the Object First survey said their heavy workloads and understaffed teams contributed the most stress, followed by concerns about cyberattacks and the pressure to maintain uptime and service availability. Nearly everybody (85%) experienced security-related stress at some level, while 31% said they face consistent stress at least once a week.
This kind of sustained stress saps motivation, causes mental fatigue, triggers physical health issues and generally reduces workers’ sense of purpose to the point where it hurts their overall performance. Stressed, fatigued workers are more likely to make mistakes and put organizations at greater risk of breaches and security.
Companies that prioritize employee wellbeing and mental health stand the best chance of solving this issue. Problem is, not everybody is doing so. According to the Object First survey, 50% of IT and security employees felt their companies aren’t doing enough to deal with the growing mental health crisis.
CSOs certainly can’t solve the burnout issue alone. Companies need to make cybersecurity burnout a priority issue for their boards and for the C-suite as a whole. But CSOs and CIOs to have an important role to play. Here are some moves they can make to lower the pressure their staff are feeling.
Build a safe culture: Protecting an organization from cyber incidents is a scary process, and employees are facing constant fear that incidents will escalate and they’ll get blamed. CSOs should set up processes where escalation is encouraged and post-incident discussions focus on ways the whole team can improve. Celebrating early detection, and not just incident containment, will improve performance and lessen tensions. Reduce the noise: Burnout can often be caused by structural issues that are out of line: too much work, too little staffing, too much noise from unfiltered alerts, faulty systems and too much pressure from being on call. CSOs should review operations and practices to make sure staff aren’t overloaded with work or focused too heavily on reactive tasks. Provide resources: Stress can take a toll on mental health. While HR should take the lead in providing mental-health and resilience programs, CSOs should provide guidance and watch for signs that employees need individualized attention. Make sure team members feel “seen”: Recognition — in the form of awards or just shared discussions of work done well — can go a long way to reducing long-term, collective stress. Some CSOs set up regular 1:1 meetings or group sessions they encourage cyber workers to share examples of stressful situations on the job. When CSOs see employees heading toward burnout, nudging them to unplug and recharge can often lower stress to a manageable level. The cybersecurity mental health crisis is real. The pressure to be the last line of cyber defense is taking a serious toll on professionals’ mental health and job performance, and it’s time to provide them with more support. CSOs can send a powerful message that well-being isn’t optional — it’s essential for businesses to stay resilient in the face of more frequent, complex cyber threats.
This article is published as part of the Foundry Expert Contributor Network.
Want to join?
View the full article

• 0 comments
• 35 views

CSOonline

January 5Jan 5

Taiwan subjected to 2.6 million Chinese cyberattacks a day in 2025

Taiwan subjected to 2.6 million Chinese cyberattacks a day in 2025

Taiwan’s National Security Agency states that the number of Chinese cyberattacks against the country’s critical infrastructure increased by 6% in 2025, averaging 2.6 million attacks per day, Reuters reports.
The attacks mainly targeted the energy sector, hospitals, banks and emergency services, and many of them were reportedly coordinated with Chinese military exercises and political events. For example, when the President and Vice President of Taiwan were giving speeches or attending international meetings.
The attackers reportedly used methods such as denial-of-service (DDoS) attacks and man-in-the-middle intrusions to steal data and disrupt operations. This includes the semiconductor industry and companies like TSMC.
The Chinese government has repeatedly denied that it is behind any cyberattacks.
This article originally appeared on ComputerSweden.
More on cyberattacks:
Cybersecurity firm turns tables on threat actors with decoy data trap Iranian APT Prince of Persia returns with new malware and C2 infrastructure ‘Ink Dragon’ threat group targets IIS servers to build stealthy global network
View the full article

• 0 comments
• 39 views

CSOonline

January 5Jan 5