❌

Reading view

ShinyHunters Hacked 100+ Organizations By Exploiting an Oracle PeopleSoft 0-Day

ShinyHunters claims it exploited a critical Oracle PeopleSoft zero-day to compromise more than 100 organizations, including the University of Nottingham, where it says it stole 40GB of student and billing data. "ShinyHunters posted the UK university on its data leak site on Tuesday before publishing the stolen files later that same day, presumably because the school refused to pay the extortion demand," reports The Register. From the report: "University of Nottingham on our leak site is one of the first publicly confirmed incidents," a ShinyHunters spokesperson told us. "We have only just started outreach to affected orgs and are actively looking to reach an agreement with affected orgs." They didn't say when they planned to post the other 100 or so claimed victims. A Google threat intelligence report published Thursday afternoon corroborated ShinyHunters' claims to have compromised more than 100 organizations. Google said it spotted malicious activity, "consistent with the exploitation of CVE-2026-35273," between May 27 and June 9, and notified more than 100 global orgs "whose IP addresses correlated with potentially vulnerable endpoints." Most of these, we're told, are based in the US and 68 percent are in the higher-education sector. Oracle has released a "patch availability document," but it's unclear whether a patch is currently available.

Read more of this story at Slashdot.

  •  

Bornean ferret badger only lives in Borneo. Could it be a conservation symbol?

The Bornean ferret badger is a small carnivore with the slinky body of a ferret and a face mask like a badger. A new study confirms that it lives only in the mountains of Sabah, a Malaysian state on the island of Borneo.  Ferret badgers are nocturnal carnivores, widespread across Southeast Asia, but the Bornean ferret badger (Melogale everetti) lives only in a narrow mountain range on the island of Borneo. A group of researchers from the Bornean Carnivore Programme, part of the University of Oxford’s Wildlife Conservation Research Unit (WildCRU), Sabah Forestry Department, and Sabah Parks set out to understand the Bornean ferret-badger’s distribution within Sabah. Between 2021 and 2024, the research team set up 188 camera-trap stations across Sabah’s western highlands and recorded the badgers more than 400 times, discovering a new population in the process. The new population in the Nuluhon-Trusmadi Forest Reserve of Malaysian Borneo, expanded the known range of the species, but photo-traps and habitat modeling showed that Bornean ferret badgers are only found within the greater Sabah’s Kinabalu-Crocker-Trusmadi mountain landscape.  “I grew up in Tambunan and had never seen or even heard of the Bornean ferret badger,” said Mohammad Aliyuddin bin Jaini, field manager of the Bornean Carnivore Programme in a press release. “I decided to place some camera traps around my family’s farm simply to see what wildlife might be there, and I was amazed when a Bornean ferret badger appeared in the photographs. To discover that an Endangered species found only in…This article was originally published on Mongabay

  •  

Mozambique completes first white rhino breeding population in decades

On June 6, nine female white rhinos arrived in Mozambique’s Zinave National Park following a two-day translocation. Their arrival marks the culmination of nearly 10 years of rhino reintroduction efforts in the park, aimed at rebuilding a viable breeding population of the mammals in Zinave after decades of local extinction. The white rhinos (Ceratotherium simum) were transferred from the Manketti Game Reserve in South Africa and join another 30 white rhinos and 22 black rhinos (Diceros bicornis) introduced to Zinave since 2022. “[The translocation] went fantastically well,” Antony Alexander, a regional manager for the conservation nonprofit Peace Parks Foundation, which manages Zinave and organized the translocation, told Mongabay by phone. “I’m sure they’re happy to be in the wild again.” Zinave, which covers around 4,090 square kilometers (1,580 square miles) in the southern province of Inhambane, has previously been called a “silent park” after decades of civil war wiped out much of its wildlife. “You could almost sense the very low levels of life with insects and birds and smells and sounds,” said Alexander, describing Zinave before wildlife restoration efforts began. “That’s changed dramatically over the last 10 years.” Among the species reintroduced since 2016 are the critically endangered black rhino and Selous’ zebra (Equus quagga selousi), as well as the endangered African savanna elephant (Loxodonta africana), vulnerable leopard (Panthera pardus) and spotted hyenas (Crocuta crocuta). The rhinos help maintain Zinave’s ecosystem as they are bulk grazers, eating a high volume of grass. This helps prevent fire risk, as overgrown…This article was originally published on Mongabay

  •  

Avanti trims GEO exposure with Hylas-3 sale

TAMPA, Fla. — Avanti Communications is moving to close a chapter on the debt-fueled geostationary expansion that once defined the British satellite operator, with plans to sell the youngest payload […]

The post Avanti trims GEO exposure with Hylas-3 sale appeared first on SpaceNews.

  •  

Nothing CEO says phone prices are going to keep going up

Photo of Nothing Phone 4A Pro on a green cutting mat showing the camera module with an unhappy smiley face on the Glyph Matrix
Nothing Phone 4A Pro | Photo: Dominic Preston / The Verge

If you're thinking about upgrading your phone, "the best time was yesterday," according to Nothing CEO and co-founder Carl Pei, echoing a message we heard during MWC. As Android Authority reports, Pei said in a post on X that the RAM shortage has already impacted Nothing's less expensive mid-range phone: "For Phone 4A , memory costs doubled between when we decided to build the device and when it launched. They've doubled again since." He warned that "Phone prices are going up, and they'll keep going up into next year."

Pei says RAM can now account for over 50 percent of the cost of a new phone. Nothing's just the latest phone maker to warn …

Read the full story at The Verge.

  •  

Google Sues Chinese Cybercrime Operation That Used Gemini AI To Send Scam Texts

An anonymous reader quotes a report from TechCrunch: Google is suing to dismantle the infrastructure behind an alleged massive AI-powered cybercrime operation. On Friday, the tech giant announced a lawsuit against an alleged Chinese cybercrime network called Outsider Enterprise, which Google says uses AI in its campaigns to send scam text messages impersonating Google and other brands to steal passwords and credit card numbers. Outsider Enterprise has financially scammed "hundreds of thousands of victims" with losses "estimated in the millions." The group deployed 9,000 fake websites, 1 million fraudulent web domains, and 2.5 million texts sent to Android users in a two-week period, according to Google. "55,000 spam texts were flagged by Android users in just two weeks this past May -- that's more than two text spam complaints a minute," Google said. Google said it uses "AI-powered tools to fight AI-powered scams", which enable the company to detect scams and alert users of suspicious calls and text messages, leading to the interception of more than 10 billion scam messages a month. The company said it has been collaborating with AT&T, T-Mobile, and Verizon to block the scam text messages and said it is coordinating with the FBI, which is taking unspecified law enforcement actions.

Read more of this story at Slashdot.

  •  

Votre vie privée à portée de clic ? Une enquête révèle numéro de Sécu, IBAN, rendez-vous médicaux… par simple recherche !

Désormais n’importe qui peut trouver en quelques secondes où vous habitez, votre numéro de téléphone portable, et même vos informations bancaires ou médicales. Certains ont compilé les récentes fuites de données pour en faire un moteur de recherche. Ou plutôt des moteurs de recherche, car il...

  •  

Touchscreen Macbook '100% Confirmed,' Says Reputable Leaker

A leaker with a strong Apple rumor track record says a touchscreen MacBook is "100% confirmed. If true, it would mark a major reversal for Apple, which has long argued that the Mac is built for indirect input rather than reaching up to touch a vertical screen. MacRumors reports: Instant Digital has a good track record for Apple rumors and has provided some strikingly accurate information in the past, so it's always worth noting what they have to say about Apple's plans. The claim is also backed by several recent reports. [...] Touchscreen support is expected to be one of several major upgrades coming to Apple's next-generation high-end MacBook Pro models. Other rumored features include M6 Pro and M6 Max chips, an OLED display, a Dynamic Island (i.e., no notch), and a thinner design. The new laptops could also adopt MacBook Ultra branding. Notably, macOS 27 Golden Gate also introduces a more touch-friendly interface, since Apple's Sidecar feature now allows users to tap and interact with macOS interface elements using a finger on their iPad. Apple apparently is not going to advertise the new MacBook Pro/Ultra as a touch-first device like the iPad -- it will be "touch-friendly, not touch-first," according to [Bloomberg's Mark Gurman]. In that sense, Apple will let customers use touch and mouse gestures interchangeably for all functions. Further reading: Steve Jobs Was Wrong About Touchscreen Laptops (2012)

Read more of this story at Slashdot.

  •  

Microsoft Surface Flaw Allowed Unprotected Devices To Be Bricked By a Single Packet

Longtime Slashdot reader Dotnaught shares a report from The Register: For the past 90 days, Microsoft has been quietly patching a firmware flaw in Surface devices that allowed the hardware to be bricked with a single packet, though only for those who have disabled Secure Core and Secure Boot. And the company's Copilot AI software inadvertently helped identify the faulty firmware. According to Jack Darcy, a security researcher based in Australia, his instance of Microsoft Copilot stumbled across the bug after being asked to adjust the screen backlighting on a Surface device. The Copilot-conjured Python script ended up rendering the researcher's laptop inoperable by overwriting the embedded controller firmware. "Copilot autonomously created and executed four progressively aggressive Python scripts during a probe for backlight control values that sent raw SSAM ioctl commands (SSAM_CDEV_REQUEST = 0xC028A501) directly to the SAM microcontroller through the SAM software path," Darcy explained to The Register. [...] "We appreciate the work of Jack Darcy and The Register for reporting this issue under a coordinated vulnerability disclosure," a Microsoft spokesperson said in a statement. "Our investigation found that a deprecated UEFI interface could trigger a boot loop on some devices. To trigger this loop, the user must have administrator privileges and have already disabled the Secure Boot security feature. We have released updates to address the issue for most impacted devices." That means managed devices are not at risk. But those using Linux, or Windows users who have disabled Secure Core and Secure Boot for gaming, or who use custom Windows drivers, or who have USB boot enabled, may still be vulnerable if their systems haven't received the update. We're uncertain about the range of Surface devices affected. Our source said it appears to be all of them (Surface Laptops 3-6, Surface Book 1-3) except for Surface Go models. ARM variants, however, have not been tested. The report notes that Microsoft is planning to move the Surface stack to a more secure architecture based on Rust code. "Our most recent Surface for Business hardware features a major architectural shift in terms of improved reliability and security that spans our embedded controller, UEFI, but also some of our drivers," said David Abzarian, chief architect for Microsoft Surface. "We're investing in the most secure foundation for a PC by building our embedded controller firmware from the ground up in Rust (as part of leveraging and contributing to the Open Device Partnership (ODP)) in addition to a rewrite of the UEFI DXE Core in Rust; these projects are known as Secure EC and Project Patina respectively." "We're also not only shipping some of our drivers written in Rust, but also helping co-develop the framework Windows Drivers in Rust (WDR) to help enable a broad set of partners in the Windows ecosystem to capitalize on these benefits. I will also note that all of these efforts are open-source promoting one of our key security principles around transparency."

Read more of this story at Slashdot.

  •  

Pilot whales can’t hear each other over ship noise in Strait of Gibraltar, study finds

The rumble of ship traffic is drowning out the calls of long-finned pilot whales and potentially other marine species in the Strait of Gibraltar, a narrow strip of water between Morocco and Spain that separates the Atlantic Ocean from the Mediterranean Sea. Researchers who investigated this looked at near and long-distance communication between long-finned pilot whales (Globicephala melas), which are actually a species of large dolphin. They found the mammals were able to increase the volume of their calls used for short distances, but long-distance calling was more challenging, according to their recently published study. The dolphins may not be able to overpower noise pollution in the Strait of Gibraltar when calling pod mates far away, raising concerns that they could become lost and isolated from the group, the researchers said. Roughly 60,000 ships pass through the Strait of Gibraltar each year. “If they cannot communicate with one another, they may need to stay much closer together, or all that communication may become ineffective,” study co-author Renaud de Stephanis, director at the Spain-based organization CIRCE (Conservación, Información y Estudio sobre Cetáceos), told Mongabay by phone. Researchers focused the study on a small resident population of roughly 250 pilot whales in the strait. The team attached suction-cup recorders to the backs of 23 individuals. Later, they categorized more than 1,400 calls into four different categories. They found that pilot whales were able to adjust to the noise pollution for two types of calls, the high-frequency and short-pulsed calls, by simply raising…This article was originally published on Mongabay

  •  
❌