A 29-year-old bug in the Squid web proxy, dubbed Squidbleed and tracked as CVE-2026-47729, can let an authorized proxy user retrieve fragments of another user's cleartext HTTP requests, including credentials and session tokens. The security researcher who reported the flaw credited Anthropic's Claude Mythos Preview for the discovery. The Hacker News reports: Squid describes this as an attack by a trusted client: someone already permitted to use the proxy, not any random host on the internet. That matches Squid's usual home, shared networks like schools, offices, and public Wi-Fi. In those setups, the attacker is just another user of the same proxy. The leak also only reaches traffic that Squid can read. Normal HTTPS rides an opaque CONNECT tunnel, so Squid never sees inside it; the exposed traffic is cleartext HTTP, plus TLS-terminating setups where Squid decrypts and inspects. The attacker also needs the proxy to reach an FTP server they control on port 21. Both FTP and that port are on by default. [...] If you patch, verify the fix, not just the version. Confirm the guard is in FtpGateway.cc, or check your distribution's backport, since distros ship their own builds (Debian packages Squid 5.7). The public thread is still inconsistent: maintainer Amos Jeffries first said Squid 7.6 carried the fix, then corrected that to 7.7, and on June 22 Debian's Salvatore Bonaccorso noted the referenced commit looks like it is already in 7.6. The fix is small, a null-terminator check before the vulnerable strchr calls, merged to the development branch in April and v7 in May. Squid 7.6 does separately patch CVE-2026-50012, an unrelated cache_digest heap overflow. The cleaner move is the one the researchers recommend anyway: turn FTP off. Chromium dropped FTP years ago, and most networks carry almost none of it, so disabling it removes this attack surface for free, whatever build you run. The risk is real but bounded. SUSE rates it moderate, CVSS 6.5, and the vector explains the score: the attacker needs proxy access (low privileges), and the only impact is confidentiality, nothing on integrity or availability.

Read more of this story at Slashdot.

Longtime Slashdot reader hackingbear shares a report from TOP500: The 67th edition of the TOP500 list of the world's most powerful supercomputers was announced today at the ISC 2026 conference in Hamburg, Germany. LineShine, a previously unlisted system installed in China, debuts at No. 1, displacing El Capitan as the world's most powerful supercomputer as measured by the High Performance Linpack (HPL) benchmark. LineShine achieved 2.198 Exaflop/s on HPL -- about 80 percent of its 2.736 Exaflop/s theoretical peak -- making it the first system on the TOP500 to exceed two exaflops of sustained double-precision performance using CPUs only. Installed at the National Supercomputing Centre in Shenzhen (NSCS) and built by the Shenzhen Cloud Computing Center, the system is based on a custom Chinese processor and the "LingKun" platform: 13.79 million cores across 304-core LX2 processors running at 1.55 GHz, linked by the proprietary LingQi interconnect and running Kylin OS. LineShine draws approximately 42.2 megawatts of power, for an efficiency of 52.07 Gigaflops/Watt. Its debut marks the first time since 2017 that a Chinese system has led the TOP500, and it also takes over the No. 1 position on the HPCG ranking with 22.00 HPCG-Petaflop/s. On the HPL-MxP mixed-precision benchmark, LineShine reached 7.92 Exaflop/s for fourth place, a comparatively modest 3.6x speedup over its HPL score that points to a CPU-only design without dedicated low-precision accelerators. While impressive, "the results may say more about Beijing's desire to show self-sufficiency in computing systems than its standing in the global AI race," reports Reuters. Reuters interviewed tech and policy experts who said that the results "do not mean that China has the world's fastest computer for AI work because of changes in the computing industry in recent years and the methods used to compile the list." The reports notes that LineShine "ranked fourth on a benchmark test designed to simulate computing work that is more similar to AI." Jimmy Goodrich, a senior fellow at the University of California's Institute for Global Conflict and Cooperation, said: "If the hyperscalers submitted their systems, this 'world's fastest' would not crack the top five." Addison Snell, CEO of Intersect360 Research, a firm that focuses on supercomputers, added: "I'm not surprised it's the number one system. What I'm surprised by is that they submitted it and want recognition for it."

Read more of this story at Slashdot.

Wikipedia cofounder Larry Sanger has been indefinitely banned from editing the site after editors concluded that he violated its canvassing rules, "or in other words, calling on his followers off platform in order to influence Wikipedia's content," reports 404 Media. Sanger says the ban proves Wikipedia suppresses ideological diversity, while editors argue he was trying to mobilize an outside audience to influence internal decisions and had ignored an earlier warning. From the report: The discussion that led to the decision to ban Sanger concluded with what an editor called a "clear consensus" to ban Sanger. "There is general agreement among participants that he has engaged in off-wiki canvassing and is not here to constructively build the encyclopedia," the editor said in a note closing the discussion. "There is also a significant concern shared by many editors that his actions constitute calls for outing." While Sanger has been railing about bias on Wikipedia for years, the specific issue here is around his WikiProject Intellectual Diversity. WikiProjects are group efforts among Wikipedia volunteers to deal with certain issues on the site. [...] Sanger's WikiProject Intellectual Diversity, as its name implies, aims to bring more intellectual diversity to the site, mostly meaning more right-leaning perspectives. Sanger's WikiProject Intellectual Diversity and its goals alone do not merit a ban according to Wikipedia's policies. The problem, according to Wikipedia editors, is that during the discussion about whether to allow WikiProject Intellectual Diversity to become an official WikiProject, Sanger invited his 91,000 followers on X to influence that discussion. Discussions about potential bans are supposed to remain open for at least 72 hours. While consensus that Sanger had violated Wikipedia policies was clear, Sanger was banned at some point before that deadline. He was then briefly unbanned, and then again indefinitely banned once 72 hours had elapsed and the discussion about the ban closed. "Wikipedia has become more of a mob-rule anarchy than ever," Sanger said in a statement sent to me by a spokesperson. "In the kangaroo court in which a mob ousted me, Wikipedia's administrators showed that they don't appear to value details like formal charges, a designated prosecutor, basic decorum, distinction between prosecution and judge, dispassionate adjudication, and so forth. They have no proper system other than triggering a mob to selectively enforce their hodgepodge of vague rules." "Now that same mob has blocked me for trying to bring an intellectually diverse group of thinkers and editors to the site," Sanger continued. "Subscribing to their groupthink is now an official requirement of being a member in good standing. Something must change, and now. I only wonder if the system as it currently stands can even allow the discourse necessary to fix the system."

Read more of this story at Slashdot.

System76 today released COSMIC Epoch 1.1 as the newest feature release as well as being their first time bumping the minor version number since the December release of COSMIC 1.0...

Walmart is acquiring self-serve connected-TV ad platform Vibe.co for a reported $1.4 billion, adding it to an advertising ecosystem that already includes smart-TV maker Vizio. AdExchanger reports: On Tuesday, Walmart announced that it is buying Vibe.co, the French self-serve ad platform that specializes in helping small brands buy streaming commercials with similar ease and precision as they get from search and social. Vibe has been vying for a bigger share of the ad dollars moving to connected TV, especially in the US, as evidenced by the company's ubiquitous billboards in major cities including New York and San Francisco. Now, Vibe joins Walmart Connect's commerce ecosystem alongside the smart TV maker Vizio. And Vibe's tech is poised to help unify Walmart's growing CTV footprint with the closed-loop attribution provided by its retail sales data. [...] Together, Walmart and Vibe.co strive to "build the best ecosystem for the performance TV market," Vibe CEO and Co-Founder Arthur Querou told AdExchanger. Performance CTV has a high ceiling for growth. The performance budgets dedicated for streaming platforms are still small potatoes compared to search and social, Querou said. Only one-quarter of CTV ad campaigns have lower-funnel objectives, and that number has been static for years, according to data from Advertiser Perceptions. Now that Walmart owns both Vibe and Vizio, advertisers should have an easier time tying streaming campaigns to shopper data. That promise stands to win Walmart more marketing dollars earmarked for retail media and streaming behemoths -- including Amazon. Walmart is especially interested in attracting more small- and medium-sized businesses (SMBs) who lack the tools, budgets or teams to invest in streaming TV, a Walmart spokesperson told AdExchanger. Other ad platforms, including MNTN and Magnite, have likewise targeted SMB advertisers as a source for continued growth in the CTV market. By adding Vibe.co, Walmart can court SMBs with the pitch that its new self-serve tools will make it easier for them to execute CTV campaigns. Plus, SMBs tend to prioritize performance campaigns, since they are under more pressure to justify tighter ad budgets and thus have to be more selective about which platforms they advertise on. And Walmart is better positioned than most platforms to prove its ads drove performance thanks to its retail data foundation.

Read more of this story at Slashdot.

Le Zotac ZBOX CI471 nano est donc le premier MiniPC à faire fonctionner une puce Core 3 Series dans un silence absolu. En l’intégrant dans un châssis classique de sa gamme C, la marque lui offre un écrin totalement passif, épaulé par un stockage de type SSD.

Si pour le moment peu d’infos sont disponibles, on retrouve avec ce Zotac ZBOX CI471 nano un châssis dont le format semble identique à des modèles précédents. Le CI675 par exemple, lancé en mai 2025 avec des puces Arrow Lake-U d’Intel à son bord. Cette gamme proposait des puces allant jusqu’au Core Ultra 7 255U qui propose un TDP de base de 15 watts et un Turbo de 57 watts.

Ce qui ouvre la porte à la totalité de la gamme Wildcat Lake puisque ses puces les plus performantes fonctionnent dans un TDP de 15 watts de base et 35 Watts en mode Turbo.

Le ZBOX CI471 devrait offrir beaucoup de confort

Bref, si cela n’est pas une vraie surprise, c’est tout de même une bonne nouvelle. Un MiniPC sous Wildcat Lake Fanless devrait permettre de combiner d’excellentes performances pour une utilisation classique dans le grand confort d’une solution sans éléments mécaniques. Je suppose que Zotac ne sera pas seul sur ce créneau particulier. Si les performances de la gamme sont au niveau espéré, il y a là un gros potentiel pour construire des minimachines familiales très intéressantes et confortables.

L’unique photo du produit nous montre une face avant avec un bouton de démarrage, les classiques LEDs témoin, un USB 3.2 Type-A, deux ports Thunderbolt et un jack audio combo 3.5 mm.

Source FanlessTech

Zotac annonce un premier MiniPC Wildcat Lake Fanless © MiniMachines.net. 2026

The 46-year-old BASIC09 programming language has new compiler support with a front-end having been developed for the LLVM compiler stack. BASIC09 was developed in 1980 for the Motorola 6809 CPU running with the OS-9 operating system. With this LLVM compiler front-end, you can write BASIC09 code for modern software and hardware...

An anonymous reader quotes a report from the New York Times: Mr. Zuckerberg, the chief executive of Meta, recently dispatched a small team at his company to create a smartphone app similar to Polymarket and Kalshi, two employees with knowledge of the matter said. Users would not wager money, and the app would probably rely on a video game-like points system instead, one person said, though the company had not ruled out the eventual use of real money betting. The app is internally referred to as "Arena" and would function independently from Meta's social networking apps, which include Facebook, Instagram, WhatsApp and Messenger, said the employees, who spoke on the condition of anonymity to discuss confidential plans. Meta aims to grow the app by leveraging its large social networking audiences and directing them toward using it, they said. The effort, which insiders characterized as experimental but a top priority, is part of a broader push by Mr. Zuckerberg to create new types of apps based on emerging social behavior online. More than 3.56 billion people visit one or more of Meta's apps every day, an amount that has raised questions about whether those platforms have reached a saturation point. Arena is one of a handful of apps that Meta is trying out. Others include one called Meta Photos, another stand-alone app which would create new types of media using artificial intelligence, the employees said. [...] Meta insiders have cautioned that Arena remains in development and may not be released. But as executives search for ways to keep the world's largest social media sites thriving, Mr. Zuckerberg appears to be relying on his well-worn product development strategy: Follow the users.

Read more of this story at Slashdot.

Hier, après des mois de errements, de communication absente et sourde aux plaintes de ses clients, AMD a enfin lancé ses pilotes AMD Adrenalin 26.6.2. La bonne surprise c'est que ces pilotes étaient attendus pour juillet 2026, ils sont donc arrivés quelques jours en avance, c'est cool ! S'ils optimi...

The European Parliament's economic committee has backed a digital euro designed to reduce Europe's dependence on US-controlled payment networks such as Visa and Mastercard. The ECB-backed currency is targeted for launch by 2029 after a full parliamentary vote and negotiations with EU member states. Euronews reports: Under the proposal, consumers would be able to hold digital euros in a dedicated wallet, subject to a holding limit that has yet to be determined. The system would support both online and offline payments and is intended to offer a high degree of privacy, with the ECB unable to directly identify users from their payment data. The ECB would provide the underlying infrastructure, while commercial banks and payment service providers would offer digital euro services to customers. Financial institutions are expected to be compensated for their participation in the scheme, while merchants will pay fees that are expected to be lower than those associated with current card transactions. How that compensation should be structured remains one of the most contentious issues ahead of negotiations with EU member states, according to three sources familiar with the discussions. [...] The European Parliament is expected to formalise the committee's position during a plenary vote in Strasbourg in early July. Negotiations with the EU's 27 member states would then begin, with lawmakers aiming to reach a final agreement before the end of the year.

Read more of this story at Slashdot.

Hier, le 22 juin 2026, Valve lançait officiellement sa Steam Machine. Elle peut être réservée sur sa page officielle, avec un prix de départ de 1039 € si l'on se contente de 512 Go de stockage. Au lendemain de cette annonce, nous vous proposons de découvrir ce que nos différents confrères, qui ont t...

Meta has launched its first smart glasses without Ray-Ban branding. Starting at $299, they're cheaper than the Ray-Ban Meta Gen 2 while retaining EssilorLuxottica as a design and manufacturing partner. The Verge reports: As far as style and specs, the Meta Glasses aren't that different from Ray-Bans. The internal specs are the same as the recently released Ray-Ban Meta Optics Styles, with slightly longer battery life. The Adventurer models have thinner rims, while the Fury models hew a bit closer to the Meta Ray-Ban Display with a bolder, chunkier frame. You could describe the Adventurer as square, and the Fury as even more square. The Kylie glasses sport a more unique design with a distinct Y2K flavor that I'm told is meant to be worn lower on your nose. [...] While playing around with the Meta Glasses, it was hard not to notice that the camera appears smaller than in previous Ray-Ban glasses. Technically, Himel tells me, that's not new to these Meta Glasses. It was actually introduced back in March with the prescription-optimized Optics Styles. [...] Meta is quadrupling down on AI. The new Meta Glasses will all launch with Muse Spark, the first model out of Meta's Superintelligence Labs. (It'll also be arriving on older Ray-Ban and Oakley glasses in the US and Canada via a software update.) Supposedly, that means more helpful glasses. At my hands-on, I was told that Meta AI would now be less stiff. I'd be able to talk to it more naturally and get smarter responses. The AI now supports 14 more languages, including Arabic, Japanese, Mandarin, Hindi, and Korean. Pedestrian turn-by-turn navigation is also coming to Meta's displayless glasses. Later this month, there'll be a new "dynamic photo" feature that automatically takes multiple frames and then recommends the best one.

Read more of this story at Slashdot.

Ouf, les coffres-forts ont tenu bon

LastPass est de nouveau touché par une fuite de données. Le gestionnaire de mots de passe a prévenu ses utilisateurs que des informations personnelles ont été volées non pas sur ses serveurs, mais chez un partenaire. Le résultat est le même : des données clients se sont retrouvées entre les mains d’attaquants.

Le 12 juin, LastPass a été informé d’un incident de sécurité chez Klue, une plateforme tierce utilisée par les équipes commerciales du gestionnaire de mots de passe. Des attaquants ont réussi à obtenir des jetons d’authentification OAuth que Klue conservait pour plusieurs clients, dont LastPass. Ces identifiants ont ensuite été utilisés pour accéder à des données clients de LastPass stockées dans son environnement Salesforce.

Une fuite par procuration

L’incident, qui se limite aux systèmes connectés à Klue, n’a pas affecté les produits, services et infrastructures de LastPass. Les coffres-forts des utilisateurs sont restés en sécurité. L’entreprise a coupé l’accès de ses employés à Klue, renouvelé les jetons d’accès API compromis et lancé une enquête avec Klue et Salesforce. L’affaire a été signalée aux autorités.

Les données compromises concernent des informations CRM et commerciales : nom des clients, numéros de téléphone, adresses email et postales, données des tickets de support, informations commerciales et de vente. LastPass affirme qu’aucun mot de passe maître n’a été compromis. Les informations dérobées pourraient toutefois servir à alimenter des campagnes de hameçonnage ciblé.

LastPass recommande à ses clients de faire preuve d’une vigilance renouvelée sur les courriels, les appels téléphoniques et les demandes d’informations non sollicitées. Elle ne réclamera jamais un mot de passe maître à un utilisateur.

L’entreprise, qui compte plus de 33 millions d’utilisateurs, dont 1,6 million de clients payants (chiffres de 2024), a déjà été touchée par une importante fuite de données en 2022, qui aurait notamment servi à escroquer des détenteurs de portefeuilles de cryptomonnaies.

L’incident de sécurité chez Klue a également touché d’autres sociétés, dont Titanium, Jamf, Gong, HackerOne ou encore Sprout Social.

Ouf, les coffres-forts ont tenu bon

LastPass est de nouveau touché par une fuite de données. Le gestionnaire de mots de passe a prévenu ses utilisateurs que des informations personnelles ont été volées non pas sur ses serveurs, mais chez un partenaire. Le résultat est le même : des données clients se sont retrouvées entre les mains d’attaquants.

Le 12 juin, LastPass a été informé d’un incident de sécurité chez Klue, une plateforme tierce utilisée par les équipes commerciales du gestionnaire de mots de passe. Des attaquants ont réussi à obtenir des jetons d’authentification OAuth que Klue conservait pour plusieurs clients, dont LastPass. Ces identifiants ont ensuite été utilisés pour accéder à des données clients de LastPass stockées dans son environnement Salesforce.

Une fuite par procuration

L’incident, qui se limite aux systèmes connectés à Klue, n’a pas affecté les produits, services et infrastructures de LastPass. Les coffres-forts des utilisateurs sont restés en sécurité. L’entreprise a coupé l’accès de ses employés à Klue, renouvelé les jetons d’accès API compromis et lancé une enquête avec Klue et Salesforce. L’affaire a été signalée aux autorités.

Les données compromises concernent des informations CRM et commerciales : nom des clients, numéros de téléphone, adresses email et postales, données des tickets de support, informations commerciales et de vente. LastPass affirme qu’aucun mot de passe maître n’a été compromis. Les informations dérobées pourraient toutefois servir à alimenter des campagnes de hameçonnage ciblé.

LastPass recommande à ses clients de faire preuve d’une vigilance renouvelée sur les courriels, les appels téléphoniques et les demandes d’informations non sollicitées. Elle ne réclamera jamais un mot de passe maître à un utilisateur.

L’entreprise, qui compte plus de 33 millions d’utilisateurs, dont 1,6 million de clients payants (chiffres de 2024), a déjà été touchée par une importante fuite de données en 2022, qui aurait notamment servi à escroquer des détenteurs de portefeuilles de cryptomonnaies.

L’incident de sécurité chez Klue a également touché d’autres sociétés, dont Titanium, Jamf, Gong, HackerOne ou encore Sprout Social.

While the Linux 7.2 merge window doesn't wrap up until this weekend as the feature cut-off for new material, I have already begun some early benchmarks of the code currently staged for this next version of the Linux kernel. Linux 7.2 already was looking quite exciting with cache aware scheduling and other exciting new features while an unexpected surprise in my early testing this week was seeing some local network/socket performance improvements...

Cette semaine, la b.tv semaine juin place la Finale du Top 14 en tête d’affiche. Canal+ retransmet le match rugby samedi depuis le Stade de France. Le décodeur b.tv donne accès à l’événement en direct. La semaine réserve également les Bleus vendredi sur M6, l’épisode 7 de Silo jeudi sur Canal+, et une soirée Scarface […]

L'article b.tv semaine juin : Top 14, Silo S2 et The Bear S5 a été publié en premier sur Bbox-Mag

Oracle cut roughly 21,000 jobs over the past year as it reorganized around AI and ramps up spending on data centers for customers such as OpenAI and Meta. The restructuring cost the company about $1.8 billion and, while Oracle says AI deployment may drive further reductions, it also warns the cuts could create skills shortages and hurt productivity. The BBC reports: The software and cloud computing firm says it had around 141,000 full-time employees as of May 31, 2026, down from about 162,000 workers at the same time last year. The "deployment of AI technologies across our operations have resulted, and may continue to result, in reductions to our workforce," the report says. The cuts, which amount to about 13% of Oracle's workforce, are part of a wider trend among tech firms as they spend hundreds of billions of dollars on building AI infrastructure like data centers.

Read more of this story at Slashdot.

Over the years while working at Red Hat, Hans de Goede was known for driving many wonderful Linux laptop improvements benefiting AMD/Intel x86_64 hardware. Hans left Red Hat last year and ended up joining Qualcomm to advance their open-source/Linux support. Today he is out with a significant new patch series for consideration that has the potential of significantly improving the Qualcomm Snapdragon X Series laptop Linux support and also important indicators for better Snapdragon laptop support on Linux moving forward...

Batterie Externe 25000 mAh UGREEN Nexode – double charge 140W + 65W – Charge Rapide PD3.1 140W – 2 Câble USB Type-C intégrés – LED d’indication de charge – Grande compatibilité produits. 16.9 x 8.1 x 2.7 centimètres – 550 grammes. Dispo à 59.99€

Voir l’offre sur Amazon

Batterie UGREEN Nexode 25000mAh dispo à 59.99€ 🍮 © MiniMachines.net. 2026

An anonymous reader quotes a report from Reuters: Britain is considering forcing social media companies to prioritize what the government called trusted news sources as part of its broader push to tighten regulation of the sector. The culture department said on Monday it was considering requiring platforms such as Meta's Facebook, Alphabet-owned YouTube and TikTok to make content from public service media -- including the BBC, ITV and Channel 4 -- and other trusted news providers easier to find in users' feeds and searches. Boosting the visibility of regulated news providers could help tackle misinformation, particularly during crises, the government said. However, any move to influence how platforms rank content is likely to face scrutiny from the social media firms, which say such rules could override user choice and disadvantage other creators. The proposals form part of a broader overhaul of Britain's public service media system to help broadcasters compete with streaming platforms and shifting viewing habits. Ministers are also considering widening public service media status to include online-only providers, extending free-to-air protections for major sporting events to on-demand viewing, and consulting on a shift to internet-based TV from 2034 or 2044. "It is vital that we make sure that people have better access to trusted and accurate news and that our regulated public service media is seen and heard in the fierce battle against mis- and disinformation," culture minister Lisa Nandy said in a statement. The move follows the UK's recently-announced ban on social media use for those under 16.

Read more of this story at Slashdot.