IT news

Eppendorf BioFlo 320

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full access to functionality and data with the bioreactor. The following versions of Eppendorf BioFlo 320 are affected: BioFlo 320 Bioreactor vers:all/* CVSS Vendor Equipment Vulnerabilities v3 9.8 Eppendorf Eppendorf BioFlo 320 Use of Hard-coded Password Background Critical Infrastructure Sectors: Healthcare and Public Health Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-7251 The affected product is vulnerable to due to VNC server u

US Law Enforcement Warns of ‘Anti-Tech Extremism’ as AI Hatred Grows

As Americans stew over the looming risk of job-stealing AI and data centers in their back yards, the feds are raising the alarm about a new category of threat, documents obtained by WIRED show.

Committee for Culture and Media travels to Warsaw: Focus on memory politics, challenges in the media sector and cultural resilience

A delegation from the Committee for Culture and Media of the German Bundestag will visit the capital of Poland, Warsaw, from May 27th to 29th, 2026. On the occasion of the 35th anniversary of the German-Polish Neighborhood Treaty and the first meeting of the Weimar Triangle (Germany, Poland and France), the MPs want to deepen German-Polish cultural relations at parliamentary level and explore the extent to which the format of the Weimar Triangle has a cultural and media policy impact

CrowdStrike Named a Leader in Identity Threat Detection and Response

Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet

2 PhaaS 2 Furious: The Evolution of Chinese-Language Phishing Services

While Russian-speaking threat actors have historically dominated the phishing-as-a-service (PhaaS) landscape, a rival ecosystem is rapidly growing within the Chinese-language underground. Google Threat Intelligence Group (GTIG) analyzed a dozen current PhaaS offerings in the Chinese underground, all of them mature services and many likely tied intricately to the broader criminal ecosystem in that region. These services not only lower the barrier to entry for Chinese cyber criminals, but reveal b

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability

Written by: Takahiro Sugiyama, Peter Revelant, Mathew Potaczek Introduction In late 2025, Mandiant responded to a security incident involving a compromised web server running KnowledgeDeliver. KnowledgeDeliver is a Learning Management System (LMS) developed by Digital Knowledge commonly used in Japan. Mandiant identified a critical vulnerability that allowed unauthenticated Remote Code Execution (RCE). An unknown threat actor leveraged this access to inject malicious code into the LMS platform,

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure of Stark Industries Solutions, an Internet service provider sanctioned last year by the EU as a frequ

The AI Era Is Creating a Bug-Hunting Arms Race

As attackers ramp up their AI exploit development, the search for software vulnerabilities is changing rapidly.

Joint Statement from the leaders of the United Kingdom, Italy, France, Germany, Canada, Australia, New Zealand, Norway, Netherlands, Spain, Belgium and the EU High Representative for Foreign Affairs and Security Policy on the situation in the West Bank

Over the past few months, the situation in the West Bank has deteriorated significantly. Settler violence is at unprecedented levels. The policies and practices of the Israeli government, including a further entrenchment of Israeli control, are undermining stability and prospects for a two-state solution. International law is clear: Israeli settlements in the West Bank are illegal. Construction projects in the E1 area would be no exception. The E1 settlement development would divide the West Bank in two and mark a serious breach of international law. Businesses should not bid for constructions

Breakpoint: The Internet is rotting

Did knowledge burn in the library of Alexandria? – Public domain: Woodcut: Hermann GollDead links, deleted web pages and changed URLs make the Internet a place of dead ends. How information disappears online is reminiscent of one of the most famous library fires in history. But all too often it is not catastrophes that destroy knowledge, but rather lack of interest.

Record Club is trying to be Letterboxd for music nerds

Look at those cute little guys. | Image: Record Club There isn't really a solid equivalent to Goodreads or Letterboxd for music lovers, but Record Club is aiming to change that. Yes, we have Rate Your Music, but its interface is crowded, and it feels more geared towards longer-form reviews than cataloging your listening habits and connecting with other fans. Record Club is clean and modern, with a streamlined interface that's quite similar to Letterboxd. The basic features you'd expect from such

Laravel Lang packages hijacked to deploy credential-stealing malware

A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages. [...]

These special phone and app features can help protect you from spyware

Apple, Meta, and Google offer special security modes that provide your devices more secure against targeted spyware attacks. Here are how those modes work, what they do, and how to switch them on.

The man behind the legendary MPC, Roger Linn, stays focused with a single browser tab

Roger Linn lets his accomplishments do the talking. | Image: Roger Linn Roger Linn is a legend in the world of musical instruments. He's been at the cutting edge of music technology for decades. He created the LM-1, the first drum machine to use samples, and its successor, the LinnDrum, is one of the most iconic drum machines of all time. They were used on countless records in the 1980s, including hits by Tom Petty, Queen, and Tears for Fears. But the most notable fan was probably Prince, who us

Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes

Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. [...]

Here are 38 Memorial Day deals we recommend for $50 or less

Massive OLED TVs and Sonos speakers might be stealing the Memorial Day spotlight, but there are also plenty of great deals that won’t set you back nearly as much. In fact, some of the best discounts we’re seeing are on gadgets that retail for $50 or less, from portable chargers and 4K streaming devices to cheap(ish) security cameras. There are even some solid deals available on outdoor gear if you plan to spend time camping, hiking, or otherwise enjoying the outdoors this summer. To help you sep

Work: If AI eats up jobs, what will be left of humans?

If AI takes over many jobs, the only question that remains is how people live. The question remains who they are. (AI, work)

Hanging out in my favorite virtual coffee shop in Tokyo

Finding a cafe that fits you can be a revelatory experience. For me at least, there are few places outside of my house that I can truly feel comfortable in. I'm lucky enough to have two options in walking distance: a coffee shop that's bright, airy, and full of art, and another that doubles as a plant shop so that I'm surrounded by greenery while I write. They're third places that have become central to my life. But in the virtual realm I have an option as well - and while it's not a place for g

Autonomous driving: Xpeng starts China's first series production of robotaxis

The car manufacturer Xpeng is bringing Level 4 robotaxis to the Chinese market. But there are other plans for Germany. (Xpeng, AI)

Small electric car: Citro�n is bringing the duck back

The French manufacturer Citro�n wants to be inspired by the legendary 2CV. The price of the e-car should be 15,000 euros. (Citro�n, electric car)

I have a new go-to browser

Hi, friends! Welcome to Installer No. 129, your guide to the best and Verge-iest stuff in the world. (If you're new here, welcome, come on you Gunners, and also you can read all the old editions at the Installer homepage.) This week, I've mostly been sick, which has meant nearly a full rewatch of Parks and Recreation while alternately napping and feeling bad for myself. But I've also been reading about Nick Fuentes and clowns, listening to old episodes of Short History Of, testing the NextSense

SpaceX: New super-heavy design fails during Starship launch

Starship lands well - after a flight with engine failures and an incorrect trajectory. The new Super Heavy fails when it comes to step separation. By Frank Wunderlich-Pfeiffer (Starship, space travel)

Ukraine: Kamikaze drones are driven to the front with balloons

Ukrainian kamikaze drones operate deep in the Russian hinterland and are delivered there using balloons. (drone, politics)

Google’s new anything-to-anything AI model is wild

Just a stuffed deer having the time of his life. | Image: Gemini / The Verge Last year I deepfaked my kid's stuffed animal to make it look like his plush deer was on vacation. It was an experiment to see if I could re-create the events depicted in a Gemini ad Google was running, and I never showed the videos of Buddy the deer on his adventures to my four-year-old. But it was a revealing exercise that made me think a lot about the difference between some harmless fun with generative AI and full-o

‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains

The stealthy vulnerability impacts roughly 88 million domains and can be exploited to bypass DNS filtering and hide command-and-control traffic. The post ‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains appeared first on SecurityWeek.

Extreme use of AI: Clickup fires one in five people and pays the rest millions

The productivity software provider Clickup has laid off 22 percent of its workforce. Clickup will rely heavily on AI agents in the future and wants to pay millions in salaries. (work, AI)

The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers

Plus: Google publishes a live exploit for an unpatched flaw, the feds arrest two men accused of creating thousands of nonconsensual deepfake nudes, and more.

Artificial intelligence: Google confuses search words with prompts

Anyone who searched for the English word “disregard” on Google didn’t get a dictionary entry, but rather a chatbot answer. The error also occurred with other terms. (Chatbots, Google)

US government: Application for Green Card only possible from abroad

Until now, it was possible to apply for a permanent residence permit within the USA. The result could be years of delays. (USA, politics)