Connexion
See what you missed in Daily Tech Insider from Oct. 19–23.
The post This Week in Tech: AI Agents Clock In as Apple Buyers Wait and IT Scrambles appeared first on TechRepublic.
Tags de l’article
The New York Knicks organization sent employees a phishing email promising free championship rings in a test of its staff's ability to detect scams, The New York Times reported yesterday. “Congratulations, your Employee Championship Ring is here,” the email sent in late September said, instructing employees to click a link to make a selection from two ring designs.
Madison Square Garden employees who clicked that link "were forced to attend a mandatory cybersecurity class to help satisfy some of [owner James] Dolan’s growing cybersecurity concerns," the report said, citing team sources. Dolan is the owner of the Knicks, the New York Rangers, and Madison Square Garden.
It's common for corporations to send phishing emails to find out which employees don't pay attention to clues that an email is a scam. A cybersecurity-test email often appears to be from the company itself but includes telltale signs of phishing. For example, Ars Technica owner Condé Nast sends phishing-test messages from email addresses with a misspelled domain, "condenest.com."
Samsung's Galaxy A55 and A35 are getting Android 17 through One UI 9, starting in South Korea. Here's what's changing and when other regions may follow.
The post Samsung Galaxy A55 and A35 Get One UI 9 — but Not Everyone Can Update Yet appeared first on TechRepublic.
Zoom unveils AI agents and its Unified Context Layer at Zoomtopia 2026. Learn how its new automation and security tools could affect IT teams.
The post Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls appeared first on TechRepublic.
eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of just 4—said it’s getting out of the business.
V. Srinivasan, chairman of India-based eMudhra Limited, cited increasing costs and complexities of compliance requirements—paired with the business generating just 1 percent of its revenue. He also said that the emergence of organizations providing TLS certificates free of charge further reduced returns on investment when compared to other products and services the company offers.
“However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business,” the company continued in a Thursday post. “In view of this, after detailed deliberations our board has concluded that withdrawing from global SSL/TLS is the right decision for eMudhra and its shareholders.”
Explore Google Chrome's features, Gemini AI, Auto Browse, security settings, privacy controls, and Chrome Enterprise tools in this complete cheat sheet.
The post Google Chrome Cheat Sheet: Features, Gemini AI, Security, and More appeared first on TechRepublic.
Amazon introduces five Blink security cameras with 4K video, long-range wireless connectivity, and new viewing features. Compare prices and key limitations.
The post Amazon’s New Blink Cameras Offer 4K Video and Up to 7,000 Feet of Wireless Range appeared first on TechRepublic.
Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems.
The world’s largest cloud computing provider on Wednesday said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public.
Amazon added the flaws were “now being broadly exploited in the wild.”
ChatGPT now lets users lock private conversations with a PIN or biometrics. Learn how Locked Chats works, its limitations, and the risks of resetting a PIN.
The post ChatGPT Locked Chats Explained: How to Use It and What to Know appeared first on TechRepublic.
China's Unitree unveils the H2-X humanoid robot with kung fu moves and rescue demonstrations, but questions remain about its autonomy, safety and endurance.
The post China’s Unitree Shows Off H2-X Robot With Kung Fu Moves and Rescue Skills appeared first on TechRepublic.
Compare Samsung One UI 9 and Nothing OS 5.0 on Android 17, including AI, privacy, customization, multitasking, compatibility, and our winner.
The post Samsung One UI 9 vs Nothing OS 5.0: Which Is Better? appeared first on TechRepublic.
Amazon's new Bee AI devices can summarize conversations, but their recording controls raise consent questions for employers and meeting participants.
The post Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns appeared first on TechRepublic.
OpenAI expands ChatGPT's Chrome integration with tab access and browser automation. Learn what the update means for productivity, privacy, and enterprise security.
The post ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off appeared first on TechRepublic.
Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere.
PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.
“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.”
Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.
As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates. There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certificates, showing the compromised keys being used maliciously. The threat remains far from over, however, because it will be hard and time-consuming to update other key parts of the Internet, such as Linux distributions and embedded and Internet of Things devices.
The eight intermediate certificates belong to India-based certificate authority eMudhra Limited. An informal advisory published to emudhra.we-have-a-problem.com over on Tuesday posted the message “We have a problem here - Wayne.” The words were digitally signed using the private key of one of the eMudhra certificates. With proof that the reporting party had control of the key, defenders scrambled because the same key could be used to sign unauthorized certificates that would be trusted by millions of servers worldwide.
DHS has ordered DeepSeek removed from federal civilian IT systems over security concerns. Learn what the restrictions mean for agencies and technology vendors.
The post DHS Orders DeepSeek Removed from Federal IT Systems Over Security Risks appeared first on TechRepublic.
Windows 11 offers controls for diagnostic data, location access, clipboard syncing, and personalized recommendations. Here's how to review seven privacy settings and understand their trade-offs.
The post 7 Windows 11 Privacy Settings You Should Check in 2026 appeared first on TechRepublic.
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:
Learn how AI tool calling works, how it differs from APIs and MCP, and what businesses should know about integrations, permissions and security risks.
The post What Is Tool Calling in AI? How It Works and Why It Matters appeared first on TechRepublic.
The White House AI task force has begun a 120-day review of cybersecurity, biosecurity and oversight, with potential implications for businesses and developers.
The post White House Begins 120-Day AI Safety Review Amid Growing Security Concerns appeared first on TechRepublic.
Samsung's Galaxy A56 One UI 9 update has expanded beyond South Korea, bringing Android 17 and new customization features, but not every Galaxy AI capability.
The post Galaxy A56 One UI 9 Update Expands Globally: What’s New and What’s Missing? appeared first on TechRepublic.
Microsoft's October Windows Server updates may disrupt Exchange email. Here's what administrators need to know about the temporary workaround.
The post Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround appeared first on TechRepublic.
On Monday, a court granted the US government's request to deny release of a former OpenAI engineer accused of bugging a top-secret conference room to steal the frontier lab’s secrets.
In a court filing Sunday, US attorney Craig Missakian argued that Abdulrahman Alfozan must continue to be detained while the US makes its case that Alfozan brazenly spied on OpenAI, either for his own personal business gain or to benefit the Kingdom of Saudi Arabia.
Evidence showed that Alfozan had been chatting with a member of the KSA royal family on WhatsApp, while pursuing opportunities to permanently move back to Saudi Arabia during the country's biggest AI push yet, the government argued. Shortly before his arrest, the FBI found he accessed a folder called "Saudi Gov Docs" on his iPhone, where he also allegedly stored photos of a second bug he planted in the offices.
Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, including cryptominers and residential proxy apps, a researcher said.
Plex fixed four vulnerabilities at the start of last month. Three weeks later, published CVE designations revealed five vulnerabilities, with one of them carrying a severity rating of 8.6 out of 10. A researcher last week revealed an exploit that chained four of them together to achieve remote code execution of the device running a vulnerable Plex version. The researcher named the chain "Plex2Shell."
The new details allowed a separate researcher to create a honeypot that could track attempts in the wild to exploit the vulnerability chain. Within a day, the researcher began seeing active scanning of the simulated Plex server and eventually successful attempts to infect devices. So far, successful attacks are installing two payloads. One is a cryptominer, which uses the device to mine cryptocurrency and deposit it into a wallet controlled by the attacker. The other payload is residential proxy software, which allows people to anonymize their Internet activity (much of it illegal) by connecting to the infected box and then using it to send the user’s traffic to a final destination.
Windows 11 26H2 and 25H2 share the same core. See what changes, how deployment works, and whether IT teams should upgrade now or stay on 25H2.
The post Windows 11 26H2 vs. 25H2: What’s Actually Different? appeared first on TechRepublic.
AI agents expose gaps in enterprise access controls and audit trails. Here's how security leaders can rethink identity, data governance, and oversight.
The post Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next? appeared first on TechRepublic.
OpenAI said internal models hacked two more websites, bypassed company-imposed browsing restrictions, and used exposed credentials to draw cryptocurrency from a wallet it couldn’t otherwise access, in the latest installment of disclosures of the unethical and likely illegal acts its agents are performing.
The company on Thursday issued reports of four new incidents, all of which occurred in June. They come after the company revealed in July that internal test agents exploited a zero-day vulnerability in a tool designed to restrict their access to the Internet. They then broke into the network of AI tool provider Hugging Face. The agents took that illegal action to steal answers to a hacking test that weren’t available when completing the tasks on their own. The incident—which likely would have resulted in criminal charges had they been performed directly by a person—has further heightened concerns that widespread AI use could have harmful effects on an unprecedented scale.
In two of the cases reported Thursday, OpenAI agents tasked with retrieving information from websites hacked them when the models ran into obstacles obtaining it directly. In one incident during reinforcement training, a model that received access denials when trying to retrieve historical hospital-bed statistics on a government statistics website “used the site's file-download feature to retrieve server configuration and application files, including sensitive credentials,” OpenAI said. “It inspected the application code, bypassed the statistics endpoint's authorization checks, and retrieved data that had previously been denied. The model saved the data locally.”
See what you missed in Daily Tech Insider from Oct. 12–16.
The post This Week in Tech: AI Gets Bigger, Gadgets Get Smarter, and Security Risks Mount appeared first on TechRepublic.
Tags de l’article
Samsung's Galaxy S23 One UI 9 rollout has begun in South Korea, but US owners are still waiting for a confirmed Android 17 release date.
The post Galaxy S23 Gets One UI 9 With Android 17 — but Not Everywhere Yet appeared first on TechRepublic.
Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices of targeted individuals when they did nothing other than load a website or open an installed app.
The finding, published Thursday by the University of Toronto’s Citizen Lab, said the incident is likely to be the first confirmation of zero-click mercenary spyware delivered through targeted ads. The attacks, which worked on iOS and Android devices, are particularly pernicious because they work without requiring any interaction from the target and are invisible unless users run special forensic hardware or software. Citizen Lab said it confirmed that AdFection, as it named the campaign, infected 45 devices at international media organization Al Jazeera in 2024 and 2025.
“This investigation should… serve as a clear warning signal to news organizations around the world that they may be being actively targeted via this new threat,” Citizen Lab researchers wrote. “This targeting may happen both in newsrooms and to individual journalists, editors, and other staff members.” Their report went on to say: “The distribution of spyware via targeted ads represents a security risk not only for potential victims but also for states and civil society at large.”
The FTC has subpoenaed OpenAI and Anthropic over potential consumer protection violations. An AI security expert explains the risks of enterprise AI agents.
The post FTC Demands Answers From OpenAI and Anthropic About AI Safety appeared first on TechRepublic.
Following a string of incidents where AI models hacked websites and breached government systems during testing phases, the Federal Trade Commission is officially probing Anthropic and OpenAI over consumer harms, an insider told Axios.
On Wednesday, the FTC sent out civil investigative demands seeking a wide range of information from the AI firms on recent safety incidents.
The FTC did not respond to Ars’ request to review the subpoena demands. However, Axios’ source said the requests spanned more than 50 pages of questions and sought documents related to the incidents, internal security measures taken, and marketing materials that may suggest consumers were misled.
German police seized a humanoid robot after it allegedly groped a teenage girl in Cologne, raising questions about human control and criminal responsibility.
The post German Police Seize Robot After Alleged Groping of 16-Year-Old Girl appeared first on TechRepublic.
The EU is questioning OpenAI and Anthropic over AI agent security incidents, raising questions about the AI Act's reach into model development and testing.
The post EU Questions OpenAI, Anthropic Over AI Agent Security Incidents appeared first on TechRepublic.
Google and Singapore have developed an AI scam detector that analyzes private chats on smartphones, with public availability still unconfirmed.
The post Google and Singapore Develop AI Scam Detector That Works Entirely on Your Phone appeared first on TechRepublic.
A Windows 11 update is disrupting Remote Desktop connections for some business users. Microsoft identifies the affected security feature and a workaround.
The post Windows 11 Remote Desktop Fails After Update — Microsoft Points to Security Feature appeared first on TechRepublic.
Earlier this week, a mass hack of refrigeration systems at an estimated 700 supermarkets throughout France caused them to suddenly malfunction, causing spoilage of untold tons of perishables and, in some cases, fires. As is now the norm, basic cybersecurity would have prevented it.
French authorities say the systems, made up of entire fleets of refrigerators and freezers throughout a store, were hacked. More specifically, Internet-connected controllers that allow technicians to remotely administer the store-wide systems were compromised. The unknown attackers responsible then activated defrosters long enough for the fridges to reach temperatures as high as 50° Celsius (122° Fahrenheit). By the time the mass compromise was discovered, food was spoiled, and in some cases their electrical systems caught fire.
Multiple security advisories and public research reports show that all three of the controller models reportedly hacked in the incident—sold by Danfoss of Denmark and Dixell and its parent company Copeland in the US—contained critical vulnerabilities that allow attackers to remotely log in to the devices with the same system rights as administrators. Until recently, Danfoss controllers, for instance, used a credential that changes each day. The password is generated by the publicly available firmware based on the date. A hacker who takes the time to analyze the code can do the same thing on any device that hasn’t received a recent update. Daily passwords are identical across models located in hundreds or thousands of stores.
Microsoft's October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including an exploited Windows zero-day and critical Outlook security flaws.
The post Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack appeared first on TechRepublic.
Gemini Auto Browse can complete multi-step tasks in Chrome, but access is restricted. Learn how to enable it, what it can do, and how to manage permissions and limits.
The post How to Use Gemini Auto Browse in Chrome: Setup, Tasks, and Limits appeared first on TechRepublic.
AI company Anthropic is warning that advances in small AI models could soon usher in a new era of self-replicating malware that’s capable of infecting smart fridges, vacuum cleaners, and a wide range of other Internet-of-things devices and is more resistant to takedown.
By next year, smaller AI models may be able to autonomously self-replicate on all kinds of IoT devices, the company said. Eventually, the capability could enable computer worms, which propagate without requiring human interaction and are capable of infecting unfamiliar IoT devices. An experiment the company performed recently revealed significant challenges in bringing such an AI malware replicator to fruition, so the finding is necessarily tempered. Still, the results do raise concerns about the possibility of new forms of computer worms.
Anthropic further warned not only about the new potential malware, but also that it could be difficult to stop. In its blog post, it wrote that “a replicator like this would be challenging to shut down, since there’s no centralized point to shut off—though it may be slow (with a doubling time of days). Unlike non-AI malware, it could also figure out unfamiliar devices on its own.”
Learn how AI guardrails control data access, validate agent actions and filter outputs, plus their limits and the checks IT teams need before deployment.
The post AI Guardrails: How They Work and Where Protection Can Fall Short appeared first on TechRepublic.
Apple's new $200 indoor camera automatically turns away when residents return home. Here's how its privacy feature works and what remains unconfirmed.
The post Apple’s New $200 Indoor Camera Turns Away When You’re Home — for Privacy appeared first on TechRepublic.
UK researchers regain access to advanced AI models for safety testing as ministers consider stronger incident reporting and expand government cyber defenses.
The post UK Regains Early Access to AI Models After Reported White House Reversal appeared first on TechRepublic.
Google has announced new Android Enterprise policies for controlling AI automation, alongside stronger work-profile protections and additional device-management features.
The post Google Adds Android Enterprise AI Controls: What IT Teams Can Manage appeared first on TechRepublic.
Ring’s $249 Smart Lock adds a hand-powered dial for dead-battery backup. Explore its features, connectivity requirements, and planned early 2027 US release.
The post Ring Announces $249 Smart Lock With Hand-Powered Battery Backup appeared first on TechRepublic.
Motorola expands its Android 17 rollout to the Razr Ultra, Edge 60 Fusion, Edge 60 Pro, and Signature. See which phones are getting the update and what's new.
The post Motorola Expands Android 17 Update: These Razr and Edge Phones Are Getting It appeared first on TechRepublic.
Explore the latest tech news, from ChatGPT's interactive AI tools and Microsoft's new hardware to cybersecurity threats, robotics, and Big Tech shakeups.
The post AI Agents, Local Hardware, and Security Risks Reshape Tech appeared first on TechRepublic.
Let's Encrypt is continuing a push toward tighter security by reducing free SSL/TLS certificate lifetimes from 90 days to 64 days, starting February 10, 2027. For administrators already implementing modern ACME clients that support ARI (ACME Renewal Information), the change should be seamless. For those still relying on hardcoded renewal schedules or manual processes, February will be the deadline to update before certificates start expiring unexpectedly.
Starting on October 14, Let's Encrypt will begin testing the 64-day certificates, and interested users can opt in to test their setups before production goes live.
Prior to Let's Encrypt's launch in early 2016, certificates were often issued for as long as one to three years. The service started with 90-day certificates to force renewal automation that didn't previously exist. Shorter certificate validity periods limited vulnerabilities from private key thefts and encouraged accelerated HTTPS adoption across the web.
Michael Smith receives 18 months in prison for using AI-generated songs and bot accounts to collect over $8 million in fraudulent streaming royalties.
The post AI Music Streaming Fraud: Musician Gets 18 Months for $8M Scheme appeared first on TechRepublic.
We compare current Ring, Nest, Arlo, and Eufy outdoor security cameras by video quality, AI features, storage, subscriptions, and long-term cost.
The post Best Smart Home Security Cameras for 2026: Ring, Nest, Arlo and Eufy appeared first on TechRepublic.
Lateo.net - Flux RSS en pagaille (pour en ajouter : @ moi)