기술

Non-human identities—API keys, tokens, service accounts, workload identities—are now one of the easiest ways into modern cloud environments. Not because attackers suddenly became geniuses, but because organizations increasingly run on machine-to-machine trust, and that trust is often overbroad, long-lived, and poorly monitored. A new analysis highlighted in reporting points to a familiar pattern at huge […]

A “new” espionage actor name doesn’t matter on its own. What matters is the operating pattern: how quickly a group can weaponize a newly disclosed bug, what that says about the defender’s patch window, and what kinds of organizations are being singled out. Reporting and published research describe a threat actor dubbed Amaranth-Dragon, assessed as

A one-size-fits-all compensation offer after a data breach can look like a clean resolution: pay everyone the same, close the book, move on. But when the victims are police staff—and the leaked data can translate into real-world targeting—“moving on” isn’t just emotional. It can involve relocation, disrupted careers, and long-term safety planning. The latest reporting

Western Digital’s reported decision to add $4 billion to its share repurchase authorization is the kind of corporate action that looks simple from the outside: the company will buy its own stock. But in the storage and memory business—where demand swings can be violent, capital spending is enormous, and “AI” can change product mixes faster

The Arctic Ocean is getting louder—more ships, more industrial activity, more tourism—and narwhals appear to be responding by getting quieter. Reporting summarized by Ars Technica (from Inside Climate News) points to field research in Canada’s Eclipse Sound suggesting that narwhals reduce vocal activity and change feeding behavior when ships pass nearby. That matters because narwhal

Notepad++ says its update traffic was hijacked for months in 2025, with attackers intercepting and selectively redirecting some users to malicious infrastructure. BleepingComputer reports the compromise began in June 2025 and ended on December 2, after the hosting provider detected the breach and cut off access. The incident is a useful reminder that “download over

Microsoft has expanded guidance on a Windows shutdown bug triggered by January 2026 updates, confirming it affects more systems than first reported. According to BleepingComputer, the issue can cause some devices to restart instead of shutting down or entering hibernation when specific security configurations are enabled. For most users, the symptom looks like “my PC

OpenAI has released a macOS desktop app for Codex, its coding-focused AI tool, moving beyond command-line and IDE extension interfaces. Ars Technica reports the app is designed around managing multiple coding agents in parallel—sometimes over hours—similar to the workflow popularized by Anthropic’s Claude Code. The interesting shift isn’t “a new client.” It’s that the user

Guinea worm disease is nearing global eradication, with only 10 human cases reported worldwide in 2025, according to figures cited by Ars Technica from the Carter Center. If the remaining transmission chains can be eliminated, Guinea worm would become only the second eradicated human disease after smallpox. Eradication is a very specific claim—it doesn’t mean

Mozilla says the next Firefox release will include a single settings toggle that blocks all AI “enhancements,” responding to users who want a clear way to opt out. BleepingComputer reports the feature arrives in Firefox 148, scheduled for February 24, and can disable both current and future generative-AI features from one place. This is an