Researchers have uncovered a massive breach of Fortinet firewalls that has given Russian-speaking attackers near-unrestricted access to some of the world’s largest and most powerful organizations, including Oracle, Chevron, Lenovo, Federal Express, a NATO defense contractor, and Fortinet itself.

Nearly 74,000 Fortinet devices from more than 21,000 IP addresses in 194 countries have been compromised and their plaintext credentials exposed online, Bob Diachenko, a security researcher and head of SecurityDiscovery.com, said online and in an interview. He said he found the data after gaining access to the attackers’ command-and-control server and other infrastructure. The exposed data also included the industry, revenue, and employee count for each compromised organization.

Exceptional scale, poor opsec

Independent researcher Kevin Beaumont reported that “almost all” of the compromised devices remained online as of Wednesday morning. He went on to say that he has confirmed with multiple organizations found in the attackers’ logs that the credentials are real and current. In many cases, once the threat actors compromised the devices, they went on to access affected organizations’ centralized authentication systems, such as Radius servers and Microsoft Active Directory. The number of compromised devices comprises roughly half of all Internet-facing Fortinet firewalls, based on polling from Shodan.

Read full article

Comments

© Getty Images

Tesco, a retail conglomerate headquartered in the United Kingdom, is moving 40,000 server workloads off of VMware amid "abusive conduct" from Broadcom, recent legal filings claim.

Tesco filed a lawsuit in the UK’s High Court against Broadcom alleging breach of contract last year. According to a September report from The Register, the lawsuit claimed that in January 2021, Tesco bought perpetual licenses for VMware’s vSphere Foundation and Cloud Foundation, a subscription to VMware Tanzu, plus support services until 2026, with the option to extend support for four additional years.

But when Broadcom took over VMware in November 2023, it would not honor the deal and instead tried to get Tesco to pay “excessive and inflated prices for virtualization software for which Tesco has already paid” and would not allow it to buy support services for its perpetually licensed software without buying “duplicative subscription-based licenses for those same Software products," the initial complaint read, The Register reported at the time.

Read full article

Comments

© Getty

What happens when you give AI coding agents a lab full of robotic arms, some compute resources, and a “generous token budget” for teaching the robots various tasks? The agents can apparently figure out a training regimen that teaches the robots to successfully cut zip ties and even insert GPUs into thin sockets on motherboards.

That glimpse into how AI can act in a fully autonomous way to automate robot training was made possible by a new agent harness framework—software that wraps around AI models to enable their use of various tools while also providing capabilities such as memory, context, constraint, and feedback loops. That agentic harness, called ENPIRE, was developed by robotics researchers at the Nvidia GEAR (Generalist Embodied Agent Research) lab alongside collaborators from Carnegie Mellon University in Pittsburgh and the University of California, Berkeley.

“A part of our NVIDIA GEAR lab now self-improves tirelessly overnight,” wrote Jim Fan, director of AI at NVIDIA, in a LinkedIn post. “We just read the reports in the morning.”

Read full article

Comments

© NVIDIA

One of the most hotly anticipated electric vehicles makes its formal debut next week. It's the Blank Slate, a refreshingly simple pickup truck EV designed by Slate Auto, which is trying to take some of the soaring cost out of a new car with a back-to-basics approach that means even electric windows are an optional extra. Of course, a crucial aspect of this pared-back approach is pricing.

Plenty of people are attracted to the idea of a truck with a compact footprint, no infotainment system or embedded modem, and the option to upconvert it later into an SUV or fastback. In the abstract, at least, people aren't going to jump at the prospect of a truck with 150 miles (241 km) of range if it costs too much.

When Slate broke cover in 2025, it was targeting a price of around $20,000, assuming the $7,500 IRS clean vehicle tax credit would remain in effect, but it was abolished later that year.

Read full article

Comments

© Slate Auto

Late last week, Anthropic took its new Claude Fable 5 and Mythos 5 AI models offline following a United States government export-control directive barring “any foreign national” from using the services. The company has been in talks with the White House since Friday but has yet to secure an agreement that would allow it to reinstate the offerings.

Since Mythos debuted in April, Anthropic has claimed—and warned—that the model has advanced capabilities for not only finding software vulnerabilities to help defenders patch them, but also figuring out ways to exploit them that could be used by bad actors. Anthropic itself noted this double-edged sword in its launch of Mythos 5 and Claude Fable 5. “A great deal of advanced usage of AI models is dual use: the same queries that are beneficial in the hands of cybersecurity professionals and biology researchers could be dangerous if available to malicious actors,” the company wrote in a blog post last week.

With this in mind, the company initially released a version called Mythos Preview to a select consortium as part of a working group known as Project Glasswing. Mythos 5 was also privately released to this group last week, while Claude Fable 5, which is a Mythos-grade model, was released to the general public with specific blocks on its ability to give responses to questions about biology and cybersecurity.

Read full article

Comments

© Samuel Axon

Good things take time, but not all things that take time are good. The jury is still out on the Google Home Speaker, but it certainly took a while to arrive. After announcing its new speaker last August, Google finally has a release date. The company's first new smart home speaker in years will launch on June 25, and you can preorder it today for $100.

The generically named Google Home Speaker is Google's first home audio device in almost six years. The last one was the Nest Audio, which debuted back in September 2020. The new device is small and round—an oblate spheroid, technically. It's covered in a partially recycled fabric available in four colors: hazel, porcelain, jade, and berry (jade and berry are limited to the US). Google says the device produces "360-degree sound" for a uniform listening experience anywhere in a room.

Google is into lighting effects again. Credit: Google

Previous Google speakers included Assistant-style illuminated lights, but the Google Home Speaker features a light ring around the bottom that glows when the device is listening, "thinking," or responding. This is becoming a trend with Google. The company will require a similar glowing lightbar embellishment on the upcoming Googlebook laptops. There are three far-field microphones distributed around the speaker that will pick up your speech, and there's a mute switch when you don't want it listening for the "OK Google" trigger.

Read full article

Comments

© Google

One of the United States' most storied space launch sites has been cleared of its decades-old support towers, making way for modern rockets to use the pad. Space Launch Complex-6 (SLC-6) at Vandenberg Space Force Station is arguably better known for what did not lift off from there than for what did.

A series of demolition charges on Tuesday (June 16) brought down the access tower, mobile service tower, and what remained of the assembly building at SLC-6—pronounced "slick-six"—in Southern California. Once the location for the US Air Force's first effort to put humans into space and later, the West Coast launch site for the space shuttle, SLC-6 will next be used by SpaceX in support of Falcon 9 and Falcon Heavy missions.

Vandenberg Space Force Base personnel watch as the assembly building at Space Launch Complex-6 (SLC-6) is toppled on June 16, 2026, to make way for SpaceX's use of the site. Credit: Space Launch Delta 30/Tech. Sgt. Draeke Layman

"Space Launch Complex-6 represents six decades of American innovation and our unwavering commitment to securing space superiority," Col. James T. Horne III, commander of Space Launch Delta 30 at Vandenberg, said in a statement. "By modernizing this historic footprint in partnership with our defense industrial base, we are building directly upon the foundation of our pioneers."

Read full article

Comments

© Space Launch Delta 30/Staff Sgt. Daekwon Stith

A gene therapy for Huntington's disease has a new path toward approval from the Food and Drug Administration after the ouster of several Trump officials, particularly Vinay Prasad, who rejected the therapy in a shocking move one former FDA official called "truly evil."

Huntington's disease is an inherited condition that typically strikes in middle age and causes nerve cells in the brain to gradually break down. There are currently no treatments for the disease, and many afflicted die in their 50s and 60s.

Gene therapy company UniQure developed a one-time treatment, AMT-130, that aims to lower brain levels of the mutant protein behind the disease, called huntingtin. Data from a small, early trial suggested the drug could slow the progression of the disease up to 75 percent, and patients and advocates have closely watched the drug's development in hopeful anticipation.

Read full article

Comments

© Getty | Congressional Quarterly

Has the allure of the Porsche Taycan waned? The four-door electric sedan that thinks it's a GT sold well for the first few years after its introduction in 2020, but sales began to slip even before the brand added the smaller, more affordable Macan SUV to its electric lineup. The EV underwent its midlife refresh a couple of years ago, but it seems Stuttgart wasn't done yet; Porsche has some more tweaks for model year 2027, at least for the US market.

For one thing, the 105 kWh performance battery is standard across the Taycan range now—which starts at $111,900—and can charge at up to 320 kW with an 800 V DC fast charger.

And as long as you're not ordering the stripped-out Turbo GT with the Weissach Pack, there's a new plug for that—the CCS1 port that usually lives on the passenger side has been replaced by a NACS port. So no adapter is needed to charge at any of those thousands of Tesla superchargers, but only a small percentage of them operate at sufficient voltage to charge near the Taycan's limit. But IONNA has native NACS chargers capable of 400 kW, and Porsche will provide a CCS1 adapter to use with Electrify America and other 800 V chargers.

Read full article

Comments

© Porsche

The clock is ticking for Windows and Linux users to update cryptographic keys that protect their systems against firmware-based UEFI infections, a pernicious form of malware that loads before operating system and anti-malware protections start.

Beginning June 24, three certificates that cryptographically verify that each piece of firmware and software that loads during system boot will expire. The Microsoft-signed certificates are the linchpins of Secure Boot, a Microsoft-designed chain of trust. Secure Boot checks the digital signatures of all firmware that loads during system startup to ensure it originates from a trusted provider, such as the manufacturer of the motherboard the system runs on.

Secure Boot is designed to thwart UEFI bootkits, a form of malware that alters the Unified Extensible Firmware Interface, the successor to the BIOS, both of which begin the initial boot sequence. Because these bootkits load before the OS and most other code, they can be difficult to detect. Once installed, they typically load malware onto the OS that steals credentials, backdoors the system, or performs other malicious actions. Even when the OS is disinfected, the bootkit can reinfect the system. Bootkits survive OS reinstallations as well.

Read full article

Comments

© Getty Images

The Trump administration is trying to help Elon Musk's xAI Corp. beat a Clean Air Act lawsuit filed by the National Association for the Advancement of Colored People (NAACP). The US said the NAACP lawsuit threatens an xAI data center that powers Grok systems needed by the military.

The NAACP sued xAI and subsidiary MZX Tech in April, alleging that they violated the Clean Air Act by operating 27 gas turbines without an air permit in Southaven, Mississippi. The number of unpermitted turbines rose to 57 by mid-May and there were plans to install two more, the NAACP said in a June 12 filing.

"Defendants’ Colossus Gas Plant powers xAI’s nearby Colossus 2 data center, which in turn powers the chatbot 'Grok,'" the lawsuit said. The gas turbines have fueled both health concerns and noise complaints.

Read full article

Comments

© Getty Images | SOPA Images

Hewlett Packard Enterprise’s (HPE) new virtualization software promotion will likely pique the interest of end users and resellers who are unhappy with Broadcom's pricing of VMware.

During its HPE Discover event in Las Vegas this week, HPE announced that customers could use its “HPE Morpheus Software—VM Essentials” offering for free for “up to one year,” per a press release. HPE’s website describes its virtualization platform as a “VMware alternative.” It includes a hardware virtual machine (HVM) hypervisor and unified management and lets users "manage VMware ESXi and HVM clusters from one console and migrate when you’re ready,” HPE’s website says.

“New VM Essentials customers can receive up to one free year of licenses for VM Essentials, a year of HPE Zerto for $1 to support non-disruptive migration to HPE virtual machines, and 0 percent interest on software through HPE Financial Services,” HPE’s announcement reads, referring to HPE’s group for helping IT teams manage funding.

Read full article

Comments

© Getty

Last week, we looked at a new study of the origin of complex cells, one that showed that our ancestors' genomes were pieced together from bits and pieces of multiple species. It put a spotlight on a phenomenon called horizontal gene transfer, in which a gene from one species is incorporated into the genome of a distantly related species. The frequency of horizontal gene transfer means that, in addition to the neatly branching trees that relate species by common descent, there are small threads connecting distant branches of the tree of life.

It's easy to see why horizontal gene transfer would be common among microbes. They often live in complex communities that are likely awash in the DNA of dead and damaged cells. Plus, bacteria and archaea lack a membrane between their DNA and the rest of the cell, making it easier for environmental DNA to find its way to the genome.

However, a new study this week shows that horizontal gene transfers are remarkably common even in multicellular animals. And it does so by examining the genomes of multiple cockroach species, which have had bits of bacterial DNA for millions of years.

Read full article

Comments

© Nugroho Ridho

Amazon now has hundreds of flight-ready satellites standing idle in Florida, waiting to join the company's low-Earth orbit Internet constellation, an Amazon official said Tuesday.

"They're built, and sitting in a payload processing facility waiting for trips to orbit," said Steve Metayer, vice president of Amazon Leo Production Operations, during a teleconference with reporters. "And we're currently manufacturing several satellites a day."

Metayer spoke on the eve of the company's next mission, during which an Ariane 64 rocket will launch three dozen Amazon Leo satellites into orbit from a spaceport in French Guiana. Liftoff is targeted for 7:53 am ET (11:53 UTC) on Wednesday.

Read full article

Comments

© Amazon

Last month, Anthropic announced a billing change that would have substantially increased costs for heavy users of its automation-focused Claude Agent SDK, including many third-party apps. On Monday, though, Anthropic abruptly announced it had paused those pricing changes just as they were set to take effect, allowing Agent SDK users to continue drawing from the more generous usage limits in their existing Claude subscriptions.

The plan, as announced on May 13, would have treated usage of the Claude Agent SDK (including via third-party apps and the programmatic "claude -p" command) separately from "standard" Claude usage via the chat interface or the official Claude CLI. At the time, Anthropic said that, as of June 15, that kind of outside SDK usage would be billed at Anthropic's prevailing API rates, with subscribers receiving a simple monthly usage credit equal to their subscription price.

That would have been a major change from the current setup, where Agent SDK use is limited only by the standard weekly caps applied to a user's current Claude subscription tier. Those generous limits allow power users to squeeze a lot more usage out of those paid subscriptions than they would get by paying the same price for API fees. One analysis suggests that Claude Opus users start saving money from their subscription after just two to three messages per day, and that their subscription could be worth many multiples of its monthly cost in API usage.

Read full article

Comments

© Anthropic