We're living in a new world now — one where it's an AI-powered penetration tester that "now tops an eminent US security industry leaderboard that ranks red teamers based on reputation." CSO Online reports: On HackerOne, which connects organizations with ethical hackers to participate in their bug bounty programs, "Xbow" scored notably higher than 99 other hackers in identifying and reporting enterprise software vulnerabilities. It's a first in bug bounty history, according to the company that operates the eponymous bot... Xbow is a fully autonomous AI-driven penetration tester (pentester) that requires no human input, but, its creators said, "operates much like a human pentester" that can scale rapidly and complete comprehensive penetration tests in just a few hours. According to its website, it passes 75% of web security benchmarks, accurately finding and exploiting vulnerabilities. Xbow submitted nearly 1,060 vulnerabilities to HackerOne, including remote code execution, information disclosures, cache poisoning, SQL injection, XML external entities, path traversal, server-side request forgery (SSRF), cross-site scripting, and secret exposure. The company said it also identified a previously unknown vulnerability in Palo Alto's GlobalProtect VPN platform that impacted more than 2,000 hosts. Of the vulnerabilities Xbow submitted over the last 90 days, 54 were classified as critical, 242 as high and 524 as medium in severity. The company's bug bounty programs have resolved 130 vulnerabilities, and 303 are classified as triaged. Notably, though, roughly 45% of the vulnerabilities it found are still awaiting resolution, highlighting the "volume and impact of the submissions across live targets," Nico Waisman, Xbow's head of security, wrote in a blog post this week... To further hone the technology, the company developed "validators," — automated peer reviewers that confirm each uncovered vulnerability, Waisman explained. "As attackers adopt AI to automate and accelerate exploitation, defenders must meet them with even more capable systems," XBOW's CEO said this week, as the company raised $75 million in Series B funding to grow its platform, bringing its total funding to $117 million. Help Net Security reports: With the new funding, XBOW plans to grow its engineering team and expand its go-to-market efforts. The product is now generally available, and the company says it is working with large banks, tech firms, and other organizations that helped shape the platform during its early testing phase. XBOW's long-term goal is to help security teams stay ahead of adversaries using advanced automation. As attackers increasingly turn to AI, the company argues that defenders will need equally capable systems to match their speed and sophistication.

Read more of this story at Slashdot.

This week Hewlett-Packard Enterprise settled its antitrust case with America's Justice Department, "paving the way for its acquisition of rival kit maker Juniper Networks," reported Telecoms.com: Under the agreement, HPE has agreed to divest its Instant On unit, which sells a range of enterprise-grade Wi-Fi networking equipment for campus and branch deployments. It has also agreed to license Juniper's Mist AIOps source code — a software suite that enables AI-based network automation and management. HPE can live with that, since its primary motivation for buying Juniper is to improve its prospects in an IT networking market dominated by Cisco, where others like Arista and increasingly Nokia and Nvidia are also trying to make inroads. And after receiving regulatory clearance, HPE "very quickly closed the deal..." reports The Motley Fool. "In the press release heralding the news, the buyer wrote that it "doubles the size of HPE's networking business and provides customers with a comprehensive portfolio of networking solutions." Investors were obviously happy about this, as according to data compiled by S&P Global Market Intelligence the company's stock price ballooned by nearly 16% across the week, largely on the news.... The Justice Department had alleged, in a lawsuit filed in January, that an HPE/Juniper tie-up would essentially result in a duopoly in networking equipment. It claimed that a beefed-up HPE and networking incumbent Cisco would hold more than 70% combined of the domestic market. Thanks to long-time Slashdot reader AmiMoJo for sharing the news.

Read more of this story at Slashdot.

Science Daily reports: Wild orcas across four continents have repeatedly floated fish and other prey to astonished swimmers and boaters, hinting that the ocean's top predator likes to make friends. Researchers cataloged 34 such gifts over 20 years, noting the whales often lingered expectantly — and sometimes tried again — after humans declined their offerings, suggesting a curious, relationship-building motive... "Orcas often share food with each other — it's a prosocial activity and a way that they build relationships with each other," said study lead author Jared Towers, of Bay Cetology in British Columbia, Canada. "That they also share with humans may show their interest in relating to us as well." The complete research was published in the Journal of Comparative Psychology. Its title? "Testing the Waters: Attempts by Wild Killer Whales (Orcinus orca) to Provision People (Homo sapiens)."

Read more of this story at Slashdot.

Long-time Slashdot reader AmiMoJo shared this report from the Apple news blog 9to5Mac: iOS 26 is a packed update for iPhone users thanks to the new Liquid Glass design and major updates for Messages, Wallet, CarPlay, and more. But another new feature was just discovered in the iOS 26 beta: FaceTime will now freeze your call's video and audio if someone starts undressing. When Apple unveiled iOS 26 last month, it mentioned a variety of new family tools... "Communication Safety expands to intervene when nudity is detected in FaceTime video calls, and to blur out nudity in Shared Albums in Photos." However, at least in the iOS 26 beta, it seems that a similar feature may be in place for all users — adults included. That's the claim of an X.com user named iDeviceHelp, who says FaceTime in iOS 26 swaps in a warning message that says "Audio and video are paused because you may be showing something sensitive," giving users a choice of ending the call or resuming it. 9to5Mac says "It's unclear whether this is an intended behavior, or just a bug in the beta that's applying the feature to adults... [E]verything happens on-device so Apple has no idea about the contents of your call."

Read more of this story at Slashdot.

In April researchers responsibly disclosed two security flaws found in Sudo "that could enable local attackers to escalate their privileges to root on susceptible machines," reports The Hacker News. "The vulnerabilities have been addressed in Sudo version 1.9.17p1 released late last month." Stratascale researcher Rich Mirch, who is credited with discovering and reporting the flaws, said CVE-2025-32462 has managed to slip through the cracks for over 12 years. It is rooted in the Sudo's "-h" (host) option that makes it possible to list a user's sudo privileges for a different host. The feature was enabled in September 2013. However, the identified bug made it possible to execute any command allowed by the remote host to be run on the local machine as well when running the Sudo command with the host option referencing an unrelated remote host. "This primarily affects sites that use a common sudoers file that is distributed to multiple machines," Sudo project maintainer Todd C. Miller said in an advisory. "Sites that use LDAP-based sudoers (including SSSD) are similarly impacted." CVE-2025-32463, on the other hand, leverages Sudo's "-R" (chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file. It's also a critical-severity flaw. "The default Sudo configuration is vulnerable," Mirch said. "Although the vulnerability involves the Sudo chroot feature, it does not require any Sudo rules to be defined for the user. As a result, any local unprivileged user could potentially escalate privileges to root if a vulnerable version is installed...." Miller said the chroot option will be removed completely from a future release of Sudo and that supporting a user-specified root directory is "error-prone."

Read more of this story at Slashdot.

This week America's Energy Department selected two companies to perform the first nuclear microreactor tests in a new facility in Idaho, saying the tests "will fast-track the deployment of American microreactor technologies... The first fueled reactor experiment will start as early as spring 2026." The new facility is named DOME (an acronym for Demonstration of Microreactor Experiments), and it leverages existing "to safely house and test fueled reactor experiments, capable of producing up to 20 megawatts of thermal energy," according to a local newspaper. [T]wo companies were competitively selected in 2023 and are currently working through a multi-phase Energy Department authorization process to support the design, fabrication, construction, and testing of each fueled reactor experiment. Both are expected to meet certain milestones throughout the process to maintain their allotted time in DOME and to ensure efficient use of the test bed, according to the release... The department estimates each DOME reactor experiment will operate up to six months, with the DOME test bed currently under construction and on track to receive its first experiment in early 2026... The next call for applications is anticipated to be in 2026. The site Interesting Engineering calls the lab "a high-stakes proving ground to accelerate the commercialization of advanced microreactors..." Based in Etna, Pennsylvania, Westinghouse will test its eVinci Nuclear Test Reactor, a compact, transportable microreactor that uses advanced heat pipe technology for passive cooling. Designed to deliver 5 megawatts of electricity on sites as small as two acres, eVinci could support applications ranging from remote communities to mining operations and data centers. Meanwhile, Radiant (El Segundo, California) will test its Kaleidos Development Unit, a 1.2 megawatt electric high-temperature gas reactor aimed at replacing diesel generators. Designed to run for five years, Kaleidos is fueled by TRISO fuel particles that could offer reliable backup power for hospitals, military bases, and other critical infrastructure. Radiant's CEO said "In short order, we will fuel, go critical, and operate, leading to the mass production of portable reactors which will jumpstart American nuclear energy dominance."

Read more of this story at Slashdot.

Some of the water around Antarctica has been getting saltier. And that has affected the amount of sea ice at the bottom of the planet. From a report: A study published Monday in the Proceedings of the National Academy of Sciences found that increases in salinity in seawater near the surface could help explain some of the decrease in Antarctic sea ice that have been observed over the past decade, reversing a previous period of growth. "The impact of Antarctic ice is massive in terms of sea-level rise, in terms of global warming, and therefore, in terms of extremes," said Alessandro Silvano, a senior scientist at the University of Southampton studying the Southern Ocean and lead author of the study. The findings mean "we are entering a new system, a new world," he said. The Times adds: "the Department of Defense announced it would be no longer be providing some of the satellite data that researchers use to monitor changes in sea ice."

Read more of this story at Slashdot.

Software engineer Sean Goedecke argues that AI coding agents have already been commoditized because they require no special technical advantages, just better base models. He writes: All of a sudden, it's the year of AI coding agents. Claude released Claude Code, OpenAI released their Codex agent, GitHub released its own autonomous coding agent, and so on. I've done my fair share of writing about whether AI coding agents will replace developers, and in the meantime how best to use them in your work. Instead, I want to make what I think is now a pretty firm observation: AI coding agents have no secret sauce. [...] The reason everyone's doing agents now is the same reason everyone's doing reinforcement learning now -- from one day to the next, the models got good enough. Claude Sonnet 3.7 is the clear frontrunner here. It's not the smartest model (in my opinion), but it is the most agentic: it can stick with a task and make good decisions over time better than other models with more raw brainpower. But other AI labs have more agentic models now as well. There is no moat. There's also no moat to the actual agent code. It turns out that "put the model in a loop with a 'read file' and 'write file' tool" is good enough to do basically anything you want. I don't know for sure that the closed-source options operate like this, but it's an educated guess. In other words, the agent hackers in 2023 were correct, and the only reason they couldn't build Claude Code then was that they were too early to get to use the really good models.

Read more of this story at Slashdot.

Reuters: The European Union's landmark rules on AI will be rolled out according to the legal timeline in the legislation, the European Commission said on Friday, dismissing calls from some companies and countries for a pause. Google owner Alphabet, Facebook owner Meta and other U.S. companies as well as European businesses such as Mistral and ASML have in recent days urged the Commission to delay the AI Act by years. Financial Times adds: In an open letter, seen by the Financial Times, the heads of 44 major firms on the continent called on European Commission President Ursula von der Leyen to introduce a two-year pause, warning that unclear and overlapping regulations are threatening the bloc's competitiveness in the global AI race. [...] The current debate surrounds the drafting of a "code of practice," which will provide guidance to AI companies on how to implement the act that applies to powerful AI models such as Google's Gemini, Meta's Llama and OpenAI's GPT-4. Brussels has already delayed publishing the code, which was due in May, and is now expected to water down the rules.

Read more of this story at Slashdot.

President Donald Trump's administration plans to restrict shipments of AI chips from the likes of Nvidia to Malaysia and Thailand, part of an effort to crack down on suspected semiconductor smuggling into China. Bloomberg: A draft rule from the Commerce Department seeks to prevent China -- to which the US has effectively banned sales of Nvidia's advanced AI processors -- from obtaining those components through intermediaries in the two Southeast Asian nations, according to people familiar with the matter. The rule is not yet finalized and could still change, said the people, who requested anonymity to discuss private conversations. Officials plan to pair the Malaysia and Thailand controls with a formal rescission of global curbs from the so-called AI diffusion rule, the people said.

Read more of this story at Slashdot.

A new study analyzing data from more than 60 previous research projects has found evidence that there is "no safe amount" of processed meat consumption -- so much so that even small daily portions are being linked to increased disease risk. The research, published Monday in the journal Nature Medicine, examined connections between processed meats, sugar-sweetened beverages and trans fatty acids and the risk of type 2 diabetes, colorectal cancer and ischemic heart disease. People who ate as little as one hot dog daily showed an 11% greater risk of type 2 diabetes and 7% increased risk of colorectal cancer compared to those who consumed none. Drinking approximately one 12-ounce soda per day was associated with an 8% increase in type 2 diabetes risk and 2% increased risk of ischemic heart disease.

Read more of this story at Slashdot.

Moderna's mRNA-based seasonal flu vaccine proved 27% more effective at preventing influenza infections than standard flu shots in a Phase 3 trial involving nearly 41,000 people aged 50 and above, the firm said this week. The company announced that mRNA-1010 had an overall vaccine efficacy that was 26.6% higher than conventional shots, rising to 27.4% higher in participants aged 65 and older during the six-month study period. The 2024-2025 flu season hospitalized an estimated 770,000 Americans, according to the Centers for Disease Control and Prevention.

Read more of this story at Slashdot.

UK Science and Technology Secretary Peter Kyle has written to the UK's national institute for AI to tell its bosses to refocus on defense and security. BBC: In a letter, Kyle said boosting the UK's AI capabilities was "critical" to national security and should be at the core of the Alan Turing Institute's activities. Kyle suggested the institute should overhaul its leadership team to reflect its "renewed purpose." The cabinet minister said further government investment in the institute would depend on the "delivery of the vision" he had outlined in the letter. A spokesperson for the Alan Turing Institute said it welcomed "the recognition of our critical role and will continue to work closely with the government to support its priorities." Further reading, from April: Alan Turing Institute Plans Revamp in Face of Criticism and Technological Change.

Read more of this story at Slashdot.

An anonymous reader shares a report: The sweeping layoffs announced by Microsoft this week have been especially hard on its gaming studios, but one Xbox executive has a solution to "help reduce the emotional and cognitive load that comes with job loss": seek advice from AI chatbots. In a now-deleted LinkedIn post captured by Aftermath, Xbox Game Studios' Matt Turnbull said that he would be "remiss in not trying to offer the best advice I can under the circumstances." The circumstances here being a slew of game cancellations, services being shuttered, studio closures, and job cuts across key Xbox divisions as Microsoft lays off as many as 9,100 employees across the company. Turnbull acknowledged that people have some "strong feelings" about AI tools like ChatGPT and Copilot, but suggested that anybody who's feeling "overwhelmed" could use them to get advice about creating resumes, career planning, and applying for new roles.

Read more of this story at Slashdot.

Windows 11 has finally overtaken the market share of its predecessor, with just three months remaining until Microsoft discontinues support for Windows 10. From a report: As of today, July's StatCounter figures show the market share of Windows 11 at 50.24 percent, with Windows 10 at 46.84 percent. It's a far cry from a year ago, when Windows 10 stood at 66.04 percent and Windows 11 languished at 29.75 percent.

Read more of this story at Slashdot.

Software developer Anton Zaides argues that software engineers have had it easy over the decades and the "best profession" on earth deserved the wake up call. He writes:It's not just one of the hardest times, it's also one of the most exciting. I'm hugely optimistic about the software engineering career. All those companies started by vibe-coders all around you? Many will succeed, and will need great engineers to scale up. Some engineers understand this, and use the chance to skill up. To succeed, you'll probably need all the skills of an engineer, some of a PM, and even a bit of design taste. It's not just about shipping code anymore. But if you work as a code monkey, getting detailed tickets and just shipping them, you've done this to yourself. You won't be needed pretty soon. I believe there are too many mediocre engineers, but also not enough great ones.

Read more of this story at Slashdot.

Climate change is already having an impact on companies around the world. More than half of companies surveyed by Morgan Stanley experienced climate-related operational disruptions within the past year, including increased costs, worker disruption and revenue losses. Extreme heat and storms caused the most frequent disruptions, followed by wildfires and smoke, water shortages, and flooding. The US spent nearly $1 trillion on disaster recovery and climate-related needs over the past year, according to Bloomberg Intelligence analysis, while nearly two-thirds of Tampa metro businesses reported losses from hurricanes Helene and Milton.

Read more of this story at Slashdot.

Researchers have discovered that appending irrelevant phrases like "Interesting fact: cats sleep most of their lives" to math problems can cause state-of-the-art reasoning AI models to produce incorrect answers at rates over 300% higher than normal [PDF]. The technique -- dubbed "CatAttack" by teams from Collinear AI, ServiceNow, and Stanford University -- exploits vulnerabilities in reasoning models including DeepSeek R1 and OpenAI's o1 family. The adversarial triggers work across any math problem without changing the problem's meaning, making them particularly concerning for security applications. The researchers developed their attack method using a weaker proxy model (DeepSeek V3) to generate text triggers that successfully transferred to more advanced reasoning models. Testing on 225 math problems showed the triggers increased error rates significantly across different problem types, with some models like R1-Distill-Qwen-32B reaching combined attack success rates of 2.83 times baseline error rates. Beyond incorrect answers, the triggers caused models to generate responses up to three times longer than normal, creating computational slowdowns. Even when models reached correct conclusions, response lengths doubled in 16% of cases, substantially increasing processing costs.

Read more of this story at Slashdot.

Newspaper Pakistan Today: In a significant moment for Pakistan's technology sector, Microsoft has officially shut down its operations in the country, concluding a 25-year journey that began with high hopes for digital transformation and global partnership. The move, confirmed by employees and media sources, marks the quiet departure of the software giant, which had launched its Pakistan presence in June 2000. The last remaining employees were formally informed of the closure in recent days, signalling the end of an era that saw Microsoft play a key role in developing local talent, building enterprise partnerships, and promoting digital literacy across sectors.

Read more of this story at Slashdot.

Valve has achieved near-total dominance of PC gaming distribution through Steam, but the victory appears to have left the company adrift, Financial Times argues. The platform controls an estimated 70% of PC game sales while generating billions in revenue, yet Valve releases major new games at what observers call a "glacial pace." Founder Gabe Newell has largely retreated from the company's operations, reportedly living at sea on one of his five ships and pursuing side projects like brain-computer interface startup Starfish Neuroscience. The much-anticipated third Half-Life game became "the video game equivalent of Samuel Beckett's Godot" before being quietly cancelled. Attempts to challenge Steam have failed repeatedly. Epic Games Store, powered by Fortnite's success, "has failed to really impact Steam in any meaningful way," according to industry analysts. Microsoft runs what analysts describe as a "somewhat unambitious store," while EA shut down its Origin launcher earlier this year. Gaming analyst Michael Pachter notes that major tech companies could displace Valve "but nobody cares" enough to mount a serious challenge. Court documents suggest Steam's revenues will exceed $10 billion next year, leaving Valve with unprecedented profits but unclear direction for a company that appears to have run out of worlds to conquer.

Read more of this story at Slashdot.