news aggregator

Order and contact details accessed via ecommerce partner, and phishing has begun

Blockchain security biz Ledger says customer information was accessed in a breach at its ecommerce payment partner Global-e, and is warning that other brands using the platform may also be affected.…

Campaigners say Britain's dependence on Big Tech leaves critical systems exposed to political pressure

The Open Rights Group is warning politicians that the UK is leaning far too heavily on US tech companies to run critical systems, and wants the Cybersecurity and Resilience Bill to force a rethink.…

Wanted: Chief Disinformation Officer to pollute company knowledge graphs

Researchers affiliated with universities in China and Singapore have devised a technique to make stolen knowledge graph data useless if incorporated into a GraphRAG AI system without consent.…

Phones, email, and core systems knocked out at Higham Lane in Nuneaton

Students at a school in Warwickshire, England, have scored an extended Christmas break after a cyberattack crippled its IT systems, forcing classrooms to close and staff to summon government incident responders.…

Central government will supposedly be as secure as energy facilities and datacenters under new proposals

The UK today launches its Government Cyber Action Plan, committing £210 million ($282 million) to strengthen defenses across digital public services and hold itself to the same cybersecurity standards it's imposing on critical infrastructure operators.…

Dell has reversed course and resurrected the XPS brand as its "premium consumer" brand of laptops, admitting it was a mistake to kill it in the first place. Slashdot reader joshuark shares a report from Gizmodo: At last year's CES, Dell made the eyebrow-raising decision to ax all its legacy laptop brand names and instead opt for Apple-like conventions. Instead of XPS, we were forced to comprehend the differences between a "Dell," a "Dell Pro," a "Dell Premium," and a "Dell Pro Max." "This complicated brand we called Dell last year was trying to cover this very large consumer space with lots of similar products," Jeff Clarke, Dell's chief operating officer said. Now those non-XPS products are mostly dedicated to the base consumer and entry-level laptops, "no pluses, minuses, squares, or whatever the hell else we called them." "We won't chase every competitor down every rabbit hole," he added. What that means is we probably won't see any kind of handheld PC from Alienware, like that age-old UFO design showed off back in 2020. Just as well, Dell isn't remodeling its entire laptop lineup for a second time in two years. The company isn't bringing back brand names like Inspiron (which became mere "Dells) or Latitude (which transformed into "Dell Pro). According to Clarke, Dell Pro "still tests well."

Read more of this story at Slashdot.

Workers face new mental health pressures as they shift from doing tasks to babysitting agentic AI

A report on occupational health warns that AI adoption may paradoxically increase workplace burdens rather than reduce them. As AI automates routine tasks, workers will shoulder new responsibilities: overseeing AI systems, catching their errors, and managing the resulting complexity – potentially triggering mental health pressures.…

Crim used infostealer to get cloud credentials

If you don't say "yes way" to MFA, the consequences can be disastrous. Sensitive data belonging to about 50 global enterprises is listed for sale – and, in some cases, has already been sold – on the dark web following a major infostealer campaign, with apparent victims including American utility engineering firm Pickett and Associates; Japan's homebuilding giant Sekisui House; and Spain's largest airline Iberia.…

At CES 2026 today, Hyundai and Boston Dynamics publicly demonstrated its humanoid robot Atlas, showing off fluid movement and announcing plans to deploy a production version in Hyundai's EV factory by 2028. NBC News reports: "For the first time ever in public, please welcome Atlas to the stage," said Boston Dynamics' Zachary Jackowski as a life-sized robot with two arms and two legs picked itself up from the floor at a Las Vegas hotel ballroom. It then fluidly walked around the stage for several minutes, sometimes waving to the crowd and swiveling its head like an owl. An engineer remotely piloted the robot from nearby for the purpose of the demonstration, though in real life Atlas will move around on its own, said Jackowski, the company's general manager for humanoid robots. [...] Hyundai also announced a new partnership with Google's DeepMind, which will supply its artificial intelligence technology to Boston Dynamics robots. It's a return to a familiar partnership for Google, which bought Boston Dynamics in 2013 before selling it to Japanese tech giant SoftBank several years later. Hyundai acquired it from SoftBank in 2021. [...] At the end of Monday's live Atlas demonstration, which appeared flawless, the humanoid prototype swung its arms in a theatrical gesture to introduce a static model of the new product version of Atlas, which looked slightly different and was blue in color. "I think the question comes back to what are the use cases and where is the applicability of the technology," said Alex Panas, a partner at consultancy McKinsey who helped lead a CES robotics panel that attracted hundreds of people earlier in the day. "In some cases, it may look more humanoid. In some cases, it may not." Either way, Panas said, "the software, the chipsets, the communication, all the other pieces of the technology are coming together, and they will create new applications." You can watch a video of the demonstration on YouTube.

Read more of this story at Slashdot.

Notebook updates and enterprise tools also inbound from IT giant

At most businesses today, the IT department gives laptops out to employees so they can easily take their work with them. But HP has a different idea: build a Windows computer into a full-size keyboard and let you carry that around, plugging into monitors and mice along the way.…

New chips same as the old chips

AMD kicked off CES on Monday by unveiling a slew of desktop and mobile processors aimed at everyone from casual users and creative professionals to gamers and AI devs. But with few improvements, they're more "newish" than new.…

An anonymous reader quotes a report from Ars Technica: Californians are getting a new, supercharged way to stop data brokers from hoarding and selling their personal information, as a recently enacted law that's among the strictest in the nation took effect at the beginning of the year. [...] Two years ago, California's Delete Act took effect. It required data brokers to provide residents with a means to obtain a copy of all data pertaining to them and to demand that such information be deleted. Unfortunately, Consumer Watchdog found that only 1 percent of Californians exercised these rights in the first 12 months after the law went into effect. A chief reason: Residents were required to file a separate demand with each broker. With hundreds of companies selling data, the burden was too onerous for most residents to take on. On January 1, a new law known as DROP (Delete Request and Opt-out Platform) took effect. DROP allows California residents to register a single demand for their data to be deleted and no longer collected in the future. CalPrivacy then forwards it to all brokers. Starting in August, brokers will have 45 days after receiving the notice to report the status of each deletion request. If any of the brokers' records match the information in the demand, all associated data -- including inferences -- must be deleted unless legal exemptions such as information provided during one-to-one interactions between the individual and the broker apply. To use DROP, individuals must first prove they're a California resident.

Read more of this story at Slashdot.

joshuark shares a report from Business Insider: Jason Lemkin, known to some as the Godfather of SaaS, says the time has come to push the limits of AI in the workplace. Lemkin, the founder of SaaStr, the world's largest community of business-to-business founders. In a recent podcast Lemkin said that this means he will stop hiring humans in his sales department. SaaStr is going all in for AI agents, which are commonly defined as virtual assistants that can complete tasks autonomously. They break down problems, outline plans, and take action without being prompted by a user. He said the company now has 20 AI agents automating tasks once handled by a team of 10 sales development representatives and account executives. That move to AI was rapid from an entirely human workforce. During the SaaStr Annual a yearly gathering of over 10,000 founders, executives, and VCs, two of its high-paid sales representatives abruptly quit. Lemkin said he turned to Amelia Lerutte, SaaStr's chief AI officer, and said, "We're done with hiring humans in sales. We're going to push the limits with agents." Lemkin's calculus was that it just wasn't worth the cost of hiring another junior sales representative for a $150,000 a year position who would eventually quit, when he could use a loyal AI agent instead. [...] Lemkin said SaaStr is training its agents on its best humans. "Train an agent with your best person, and best script, then that agent can start to become a version of your best salesperson," he said. Lemkin said that the net productivity of agents is about the same as humans. However, he said, agents are more efficient and can scale -- just like software. Many companies are experimenting with AI agents, but risks remain. One of the big ones is the threat of data leaks and cybercrime.

Read more of this story at Slashdot.

Anna's Archive lost control of its primary .org domain after it was placed on registry-level serverHold -- "an action that's typically taken by the domain name registry," reports TorrentFreak. Despite mounting legal pressure and speculation tied to its Spotify backup, the site remains accessible via multiple alternative domains, underscoring the resilience of shadow libraries. From the report: A few hours ago, the site's original domain name suddenly became unreachable globally. The annas-archive.org domain status was changed to "serverHold," which is typically done by the domain registry. This status effectively means that the domain is suspended and under investigation. Similar action has previously been taken against other pirate sites. It is rare to see a .org domain involved in domain name suspensions. The American non-profit Public Interest Registry (PIR), which oversees the .org domains, previously refused to suspend domain names voluntarily, including thepiratebay.org. The registry's cautionary stance suggests that the actions against annas-archive.org are backed by a court order. PIR's marketing director, Kendal Rowe, informs TorrentFreak that "unfortunately, PIR is unable to comment on the situation at this time." It is possible that, in response to the 'DRM-circumventing' Spotify backup, rightsholders requested an injunction targeting the domain name. However, we have seen no evidence of that. In the WorldCat lawsuit, OCLC requested an injunction to force action from intermediaries, including domain registries, but as far as we know, that hasn't been granted yet.

Read more of this story at Slashdot.

After Congress approved President Donald Trump's rescission package eliminating federal funding, the Corporation for Public Broadcasting voted to dissolve after 58 years, rather than continue to exist and potentially be "vulnerable to future political manipulation or misuse." The shutdown leaves hundreds of local public TV and radio stations facing an uncertain future. Variety reports: The CPB was created by Congress by the Public Broadcasting Act of 1967 to support the federal government's investment in public broadcasting. The org noted that the rescission of all of CPB's federal funding came after years of political attacks. "For more than half a century, CPB existed to ensure that all Americans -- regardless of geography, income, or background -- had access to trusted news, educational programming, and local storytelling," said CPB president/CEO Patricia Harrison. "When the Administration and Congress rescinded federal funding, our Board faced a profound responsibility: CPB's final act would be to protect the integrity of the public media system and the democratic values by dissolving, rather than allowing the organization to remain defunded and vulnerable to additional attacks. [...] "CPB's support extends to every corner of the country -- urban, rural, tribal, and everywhere in between," the org noted. "In many communities, public media stations are the only free source of trusted news, educational children's programming, and local and national cultural content." The CPB said that without funding, its board determined that "maintaining the corporation as a nonfunctional entity would not serve the public interest or advance the goals of public media. A dormant and defunded CPB could have become vulnerable to future political manipulation or misuse, threatening the independence of public media and the trust audiences place in it, and potentially subjecting staff and board members to legal exposure from bad-faith actors." As it closes, CPB is distributing its remaining funds, and also supporting the American Archive of Public Broadcasting in digitizing and preserving historic content. The CPB's own archives will be preserved at the University of Maryland, which will make it accessible to the public. "Public media remains essential to a healthy democracy," Harrison added. "Our hope is that future leaders and generations will recognize its value, defend its independence, and continue the work of ensuring that trustworthy, educational, and community-centered media remains accessible to all Americans."

Read more of this story at Slashdot.

An anonymous reader quotes a report from Wired: At CES in Las Vegas today, Lego has unveiled its new Smart Play platform, aimed at taking its distinctly analog plastic blocks and figures into a new world of tech-powered interactive play -- but crucially one without any reliance on screens. Smart Play revolves around Lego's patented sensor- and tech-packed brick. It's the same size as a standard 2 x 4 Lego brick, but it is capable of connecting to compatible Smart Minifigures and Smart Tags and interacting with them in real time. By pairing these components, kids big and small can create context-appropriate sounds and light effects as they play with the Danish company's toys. [...] Lego is claiming this Smart Play platform developed in house by the company's Creative Play Lab team in collaboration with Capgemini's Cambridge Consultants "features more than 20 patented world-firsts within its technology." The heart of the system is the Smart Brick's custom-made chip, measuring smaller than a standard Lego stud. Other elements crammed into the eight-stud brick are an LED light array, accelerometers, light sensors, and sound sensor, and even a miniature speaker. The internal battery will supposedly work even after years of inactivity, and to avoid any need for cable access to the Smart Brick once it's built into a beloved creation, Lego has also added wireless charging. Indeed, Lego has made a charging pad that will power up several Smart Bricks simultaneously. That all-important brain chip is a 4.1-millimeter custom mixed-signal ASIC chip running a bespoke Play Engine, which interprets motion, orientation, and magnetic fields. A copper coil assembly enables the brick's tag recognition, while a proprietary "Brick-to-Brick position system" uses these coils to sense distance, direction, and orientation between multiple Smart Bricks. Moreover, Lego claims this use of multiple Smart Bricks creates a "self-organizing network" that requires no setup, no app, no central hub, nor external controllers -- and so no screens. A Bluetooth-based "BrickNet" protocol shares the data between the Smart Bricks. Sounds are handled by a tiny analog synthesizer putting out real-time audio (thus minimizing memory load) via the brick's miniature speaker, which uses the brick's internal air spaces to amplify sound. As a result, the audio effects are apparently immediate and can be used to enhance play with real-time sound. Lego insists there are no prerecorded clips of lightsabers or other pieces of audio being used as a cheat. Just like the Smart Minifigs, the 2 x 2 studless tile tags trigger sounds, lights, or behaviors tied to where they are placed or how they are played with. They communicate with other components through near-field magnetic connections. Each tile has a unique digital ID, which is read by the brain brick, while the minifigures -- outwardly identical to standard minifigs -- carry their unique digital ID on an internal chip.

Read more of this story at Slashdot.

Both GNOME and Firefox are considering disabling middle-click paste by default, arguing it's a confusing, accident-prone X11 relic that dumps clipboard contents without warning. Phoronix reports: A merge request for GNOME's gsettings-desktop-schemas was opened this weekend to disable the primary-paste functionality by default that allows using the middle mouse button for pasting. Jordan Petridis argued in that GNOME pull request that middle-click paste is an "X11'ism" and that the setting could remain for those wanting to opt-in to enabling the functionality [...]. The gsettings set org.gnome.desktop.interface gtk-enable-primary-paste true command would be a way of restoring the primary paste (middle click paste) for those desiring the functionality. The decision over the default has been tasked to GNOME's design team for consideration. Separately, Mozilla is also considering disabling middle mouse button paste by default too. [...] Another option being considered is having the option to enable/disable it at either the GTK toolkit level or Wayland compositor level.

Read more of this story at Slashdot.

Company claims its Ultra Series 3 processors will offer the best battery life yet

Intel has finally let its new Panther Lake CPUs out of the cage. First detailed in October and now launching under the brand name Intel Core Ultra Series 3, these are the first chips made with Intel’s 18A process and boast improved power efficiency and performance, particularly for graphics and AI workloads.…

Just maybe not in the way you're thinking

Nvidia's DGX Spark and its GB10-based siblings are getting a major performance bump with the platform's latest software update, announced at CES on Monday. The AI mini PC is also getting access to the GPU giant's full suite of AI Enterprise apps, alongside integrations with RTX Remix and Hugging Face's Reachy robotics platform.…

A viral Reddit "whistleblower" post accusing a major food delivery app of systemic exploitation is "most likely AI-generated," reports the Verge. From the report: The original post by user Trowaway_whistleblow alleged that an unnamed food delivery company regularly delays customer orders, calls couriers "human assets," and exploits their "desperation" for cash, among other indefensible actions. Nearly 90,000 upvotes and four days later, it's become increasingly clear that the post's text is probably AI-generated. Considering the delivery app industry track record of exploitation of its drivers, it's easy to see why so many people believed this was the real thing. The Verge put the original 586-word Reddit post through several free online AI detectors, in addition to Gemini, ChatGPT, and Claude. The results were mixed: Copyleaks, GPTZero, Pangram, Gemini, and Claude all pegged it as likely AI-generated, but ZeroGPT and QuillBot both reported it as human-written. ChatGPT played it down the middle. Reached by The Verge on Signal, Trowaway_whistleblow provided an image of an Uber Eats employee badge. That image was generated or edited with Google AI, according to Gemini. The image shows an Uber Eats logo above two black boxes, presumably covering an employee name and photo, and the words "senior software engineer." It's odd that an engineer's badge would have the Uber Eats logo, and not the Uber logo, according to Gemini. That, in addition to slightly misaligned words and warped coloration at the edge of the green border, are reasons Gemini thinks it's inauthentic. (Uber later confirmed that Uber Eats-branded employee badges do not exist.) "Not only are the claims fake, but they're also dead wrong," Uber spokesperson Noah Edwardsen told The Verge. Uber Eats' Andrew Macdonald wrote on X, "This post is definitively not about us. I suspect it is completely made up. Don't trust everything you read on the internet." DoorDash CEO Tony Xu also denied the redditor's "appalling" allegations. "This is not DoorDash, and I would fire anyone who promoted or tolerated the kind of culture described in this Reddit post," Xu said in a post on X.

Read more of this story at Slashdot.