Author: InfoForTech

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a self-propagating worm. “This is effectively a Mini Shai-Hulud campaign: it uses the same core tactics of install-time execution, credential harvesting, CI/CD targeting, encrypted exfiltration, and potential downstream propagation,” Socket said. Exactly who is behind the attack activity is presently unknown given that TeamPCP, an infamous cybercrime group, has open-sourced the attack tools linked to the Shai-Hulud worm, opening the door for other threat actors to pull off similar attacks and making definitive attribution harder. The…

Sitting through another quarterly review where the marketing team proudly displays a forty-page deck of new content pieces while the sales team silently scrolls through their phones is its own kind of corporate hell. We have treated collateral like an archive. A library of PDFs, case studies, and one-pagers that exist simply because a product manager requested a feature breakdown, or because a marketing calendar demanded a slot be filled. Most of it is cookie-cutter, low-grade, and safe. It describes the work rather than clearing it. Let us move away from viewing collateral as mere content pieces. They are not…

Apple is reportedly preparing to turn the iPhone into an even bigger financial hub with a new built-in bill splitting feature designed for group dinners, travel expenses, and shared payments. According to a report from Mark Gurman, the company plans to announce the feature at WWDC next week as part of iOS 27. The new tool would allow users to photograph a restaurant receipt, automatically calculate individual shares including tax and tips, assign items to specific people, and send payment requests directly through Apple Cash. The feature is expected to work inside both the Wallet app and Messages, with payment…

Philips designs and builds its ultrasound systems, including this premium imaging platform, at its Bothell campus. (Philips Photo) Philips plans to put its Bothell, Wash., campus up for sale, marking a significant moment for Washington state’s medical device industry and for a site that helped establish the region as a global center for ultrasound innovation. GeekWire confirmed the news after receiving a reader tip. The healthcare technology giant said the move is part of a long-term real estate strategy and will not affect employees or operations in the Seattle area. “In May 2026, as part of Philips’ long-term real estate…

Today, I loaded the 1,000th data breach into Have I Been Pwned. Reflecting on that milestone number, I pondered how to mark the occasion in writing, and what immediately came to mind was a very simple question: why is it still needed? Especially considering the emergence of privacy regulations such as GDPR and CCPA in the 12 and a half years since I started HIBP, what possible purpose does it still serve? The title kinda gives the answer away, and the big number we hit today coincided with another pattern that makes everything worse: increasingly long lag times for disclosure.This…

Apple Watch Series 11 for $399: If you already have an Apple Watch Series 4 or later, you can use it to track your sleep. Between the heart rate sensor and the accelerometer, your Apple Watch can break your slumber down into four stages. Newer models can also measure blood oxygen and temperature. It feels like a general overview compared to some of the other sleep trackers I tried, and there’s no sleep score, though this is obviously by design (it’s debatable whether you need more data).Garmin Epix Pro (Gen 2) for $1,000: All of Garmin’s fitness trackers track sleep…

Three years ago, the practical question for an MSP building a cybersecurity practice was which “vCISO platform” to buy. The term was good shorthand for the work at the time: assessments, advisory, reporting, maybe a compliance module bolted on the side. The work has since outgrown the descriptor. A Security Growth Platform is the more precise name for what MSPs and MSSPs need from the software running their security practice in 2026. It combines security program management, CISO-grade decision intelligence, multi-tenant portfolio architecture, and revenue intelligence in one system. Traditional GRC platforms track compliance, vCISO tools support single advisory engagements,…

There are many ways to bomb a college commencement speech.You can tell everyone you composed the talk while high on ayahuasca, like Chris Pan at Ohio State. You can deliver the entirety of your speech in the voices of your incredibly annoying cartoon characters, like Tom Kenny and Bill Fagerbakke at the University of Vermont. You can even, like my graduation speaker in 2001, admonish the graduating class for depending too much on their parents and generally being an ungrateful lot, before later being convicted of multiple counts of sexual assault and undergoing a dramatic fall from grace. (Yes, that…

As artificial intelligence models continue to grow in size and complexity, one major challenge has become increasingly difficult to ignore: memory limitations. Even as GPUs become faster and more powerful, large-scale AI systems often hit what researchers call the “memory wall” – a bottleneck where insufficient memory capacity sharply reduces computational efficiency. Now, researchers in South Korea have developed a promising solution. The Electronics and Telecommunications Research Institute (ETRI) has presented OmniXtend, a memory expansion technology based on Ethernet. The breakthrough aims to overcome memory shortages in large-scale AI training environments and could significantly improve the scalability, cost-efficiency, and performance…

Not content with just providing the infrastructure for the next generation of artificial intelligence agents, Nvidia Corp. is also providing the tools for developers to build them. At Nvidia GTC Taipei 2026, concurrent with the Computex conference, the company unveiled the latest iteration of its Agent Toolkit. It’s a comprehensive suite of software, open-source models and blueprints for building powerful, long-running digital coworkers capable of executing complex workflows across business operations, engineering and cybersecurity tasks. The Nvidia Agent Toolkit is meant to be an open and accessible foundational stack that provides everything developers need to transform powerful frontier models into…