Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Our new threat research report is a comprehensive overview of TA4922, a newly designated Chinese-speaking, financially motivated threat actor.

We consider it one of the most unique actors we track. 👀

Why? Because it currently conducts more unique campaigns than any other cybercriminal in our telemetry, using a wide variety of lure themes, targeting, and objectives. You’ll see examples in our blog.

Read it now: proofpoint.com/us/blog/threat-…

Campaigns mostly target organizations in Japan, but it’s been expanding globally. 🗺️

This actor blends malicious activity with legitimate tools, trusted software, and cloud hosting services—making its campaigns challenging to detect and defend against.

See our blog for all the details on TA4922, the new payloads it distributes, our defense recommendations, IOCs, and more.

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Scopri come un clic su Windows può riuscire a compromettere i tuoi dati

📌 Link all'articolo : redhotcyber.com/post/scopri-co…

A cura di Redazione RHC

#redhotcyber #news #cybersecurity #hacking #vulnerabilita #windows #sicurezzainformatica

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

A major US law firm, Weil Gotshal & Manges, paid a $20m ransom to the Silent Ransom Group (aka Luna Moth)

legalcheek.com/2026/06/weil-re…

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Most threat actors who abused Anthropic's AI agents did to write and obfuscate their malware.

The company compiled the data from 832 accounts it suspended for malicious activity last year.

The general trend is that threat actors are getting more sophisticated at using AI as they learn the tech.

red.anthropic.com/2026/attack-…

Questa voce è stata modificata (19 ore fa)

reshared this

Make Your Ceiling Disappear With ADS-B and Short-Throw Projector


The media in this post is not displayed to visitors. To view it, please log in.

If you’re into airplanes, you’ve probably had the experience of hearing an unusual aircraft and rushing outside to try and catch a glimpse of it, all while fumbling with a smartphone to open a flight-tracking app. If your home was equipped with [cpaczek]’s Skylight project, which combines ADS-B data with a short throw projector, that little dance would have been totally unnecessary.

ADS-B or the “Automatic Dependent Surveillance-Broadcast”, is the standard by which aircraft broadcast their position and other flight information from onboard transponders. In most of the world, every commercial aircraft has an ADS-B transmitter, and they’re slowly creeping into general aviation as well. The signals aren’t hard to pick up with software-defined radio — like perhaps this RP2040 based unit we featured — or the RTL-SDR v4 this project calls for.

Using data from ADS-B, the Skylight software runs on Raspberry Pi 5 and renders icons of the aircraft exactly where they would appear above you, if that pesky ceiling wasn’t in the way. You get the flight’s code, destination and flightplan with a nice icon representing what type of airplane it is. Thanks to specifying a Pi 5, the projection is a smooth 60 FPS at 1080p. Airplanes aren’t the only things plotted, though — this is also a planetarium, giving you a full view of the stars and any satellites passing overhead. That’s obviously via an API, not SDR, and if you like you can configure it to track aircraft that way to — allowing you to set your Skylight for anywhere in the world, if you aren’t near an interesting airport.

ADS-B isn’t just for pilots and plane nerds — if you’re flying drones, you probably should keep an eye on it, too. In that case, though, you probably won’t be looking at your ceiling.

Thanks to [Thinkerer] for the tip!


hackaday.com/2026/06/04/make-y…

Cybersecurity & cyberwarfare ha ricondiviso questo.

JFrog has spotted a new worm spreading on npm. The worm appears to be inspired from Shai-Hulud, but is written in Rust, hence its codename of IronWorm

research.jfrog.com/post/iron-w…

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

#Gamaredon Uses #WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian Targets
securityaffairs.com/193112/int…
#securityaffairs #hacking #Russia
Cybersecurity & cyberwarfare ha ricondiviso questo.

Missed your chance to attend? No worries, we're live!

Track 1: youtube.com/live/TBVbumqrfrE

Track 2: youtube.com/live/6mgbJFVOt-s

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

If you're an e-crime group involved in hiding malware in legit-looking software, you probably shouldn't try to hide payloads in security tools or the people who use those tools might come to investigate your bizniz!

research.checkpoint.com/2026/i…

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Ransomware RAlord si scusa pubblicamente per l’attacco a Eriell Group: ecco i dettagli

📌 Link all'articolo : redhotcyber.com/post/ransomwar…

A cura di Redazione RHC

#redhotcyber #news #cybersecurity #hacking #gruppihacking #sicurezzainformatica

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

CVE-2025-48595: Android 0-Day Actively Exploited — Patch Your Devices Now
#CyberSecurity
securebulletin.com/cve-2025-48…
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Threat Actors Use AI Agents and Cursor IDE to Automate Active Directory Attacks and Beat EDR
#CyberSecurity
securebulletin.com/threat-acto…
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Five OpenClaw Zero-Days Let Attackers Silently Hijack AI Agent Access on Slack, Teams, and Discord
#CyberSecurity
securebulletin.com/five-opencl…
Cybersecurity & cyberwarfare ha ricondiviso questo.

Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure Process
securityaffairs.com/193128/sec…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

CVE-2026-8206 (CVSS 9.8): Kirki WordPress Plugin Flaw Lets Attackers Steal Admin Accounts on 500,000+ Sites
#CyberSecurity
securebulletin.com/cve-2026-82…
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

La comunicazione spiegata facile.

Delle volte basta poco per mandare in vacca un'informazione utile.

Ti fidi di un ristorante che risparmia sulle congiunzioni?

(cioè, ho dato per scontato che non servissero bambini come cibo a un prezzo inferiore alla carne).

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

La Riorganizzazione del Settore Cybersecurity Cinese: Nuove Sfide e Opportunità Globali

📌 Link all'articolo : redhotcyber.com/post/la-riorga…

A cura di Carolina Vivianti

#redhotcyber #news #cybersicurezzacinese #aziendecinesi #riorganizzazionecilindro

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Keep Android Open:
keepandroidopen.org/it/

Il tuo telefono sta per smettere di essere tuo.

90 GIORNI AL BLOCCO

Un promemoria necessario.

La pagina web è disponibile in diverse lingue

#KeepAndroidOpen #GAFAM #BigTech

@scuola
@maupao
@lealternative
@informapirata
@quinta
@Khrys
@RFancio
@devol
@euklidiadas
@lindasartini
@nemobis
@opensource
@prealpinux

in reply to Mosealdo

@mosealdo @steffy sì c'è una bella differenza... ma a volte una battuta è una battuta 😀
Io l'ho letta come un motto che fa sorridere e aiuta a fare un bagno di umiltà quando ci sentiamo i migliori del mondo perché l'Occidente qui e l'Occidente là: se ci mangiano la libertà e i diritti l'Occidente è solo che magari la polizia non ti spara per strada. Ah no dipende.

Scuola - Gruppo Forum reshared this.

Fixing a Nintendo Game Boy Clone that Runs Too Fast


The media in this post is not displayed to visitors. To view it, please log in.

There’s no shortage of cloned Nintendo hardware out there, and most of it is pretty poor. A few are actually pretty interesting though, such as the GB Boy by Gangfeng, which takes real cartridges and thus in many ways should provide the original Game Boy Pocket experience with modern hardware. But as you might imagine, even the best of the clones comes with various technical issues at no additional charge — with this particular unit having a habit of running the game too fast. It’s an issue that [Sharopolis] addresses in a recent video with a partial fix.

As can be seen in the demonstration, it runs games just too fast to make it very usable or fun, hence why it sat in a drawer for a few years after purchasing off AliExpress. This raises the question of what’s wrong with these units, as others report similar issues with this and other ‘GB Boy’ variants.

Fortunately the unit is easy to open, revealing the PCB with a couple of chips on it, one marked KF2001 being the brains of the operation alongside two memory chips. The oscillator marked X1 for the main IC is rated for 5 MHz, whereas a quick look inside the Game Boy Pocket shows that its oscillator runs at 4.1943 MHz, which is a bit of a difference.

Because of how buying components and pricing works, [Sharopolis] ended up with a reel of 100 of replacement oscillators with the right parameters for a drop-in replacement. After swapping the oscillator, the GB Boy now does indeed run games at the right speed, but a new issue has now cropped up in the form of flicker on the display.

In the comments it’s suggested that replacing the cheap capacitors on the GB Boy’s board can help here, but it highlights just how these clone systems keep managing to snatch defeat from the jaws of victory by pairing what looks to be a pretty good IC with either the wrong or sub-par components.

youtube.com/embed/6zuKkyV9Wek?…


hackaday.com/2026/06/04/fixing…

Cybersecurity & cyberwarfare ha ricondiviso questo.

29 Arrests, Nine Crime Groups Dismantled: Another Blow to Illegal Streaming
securityaffairs.com/193099/cyb…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

330 – L’AI ce l’hanno regalata. Ora arriva il conto vero camisanicalzolari.it/330-lai-c…

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Per chi lavora nel mondo della cybersecurity, ieri è stato un giorno molto triste.

Abbiamo perso una persona di straordinaria umanità e professionista di eccezionale coraggio: Carola Frediani.

Con instancabile perizia, ha contribuito a rendere più comprensibili temi complessi come la cybersecurity, la sorveglianza digitale e i diritti online, aiutando tante persone a guardare oltre la tecnologia, con maggiore consapevolezza e spirito critico.

Red Hot Cyber e le Cyber Angels si uniscono al dolore della famiglia e di chiunque abbia avuto la fortuna di condividere con lei un pezzo di strada. 🖤

Grazie, Carola ❤️. Buon viaggio.

#redhotcyber #guerredirete #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

💥🚨 FLASH SALE: -10% FINO AL 7 GIUGNO PER L'OTTAVA LIVE CLASS "DARKWEB & CYBER THREAT INTELLIGENCE" IN PARTENZA A LUGLIO

QUATTRO LEZIONI PER COMPRENDERE IL DARKWEB ED ENTRARE DA PROTAGONISTI NELLA CYBER THREAT INTELLIGENCE.
Per info e iscrizioni: 📱 💬 379 163 8765 ✉️ formazione@redhotcyber.com

✅ Pagina del corso: redhotcyber.com/linksSk2L/acad…
✅ Presentazione del corso del prof. Pietro Melillo : youtube.com/watch?v=9VaQUnTz4J…
✅ Webinar introduttivo di presentazione al corso : youtube.com/watch?v=ExZhKqjuwf…
✅ Workshop di DarkLab alla RHC Conference 2026 : youtube.com/watch?v=yE1Li3TS5B…

#redhotcyber #formazione #formazioneonline #ethicalhacking #cti #cyberthreatintelligence #cybersecurity #cybercrime #cybersecuritytraining #cybersecuritynews #privacy #cti #cyberthreat #intelligence #infosec #corsi #corsiprartici #liveclass

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Workshop RHC Conference 2026 - Over the Air Penetration Testing

Guarda il video: youtube.com/watch?v=sy2PC1UJXa…

#redhotcyber #rhcconference #conferenza #informationsecurity #ethicalhacking #dataprotection

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Glassworm: la botnet che ha infettato gli sviluppatori ora è stata smantellata

📌 Link all'articolo : redhotcyber.com/post/glassworm…

A cura di Luigi Zullo

#redhotcyber #news #cybersecurity #hacking #malware #botnet #github #sicurezzainformatica

Web-Based Control for a CB Radio


The media in this post is not displayed to visitors. To view it, please log in.

There was a time when a CB radio was a simple affair: a small box with a channel selector, volume, and squelch controls. No longer it seems, because they can now be multi-mode devices that equal the capabilities of amateur radio rigs if not surpass them. [ThatCrazyDcGuy] has one, an Albrecht AE-5900, which has the interesting feature that it can be entirely controlled from its microphone. This led to a web-based interface for the rig, through clever emulation of the microphone.

The communication between rig and microphone is a serial line, for which an FT232 USB-to-serial interface is pressed into service. A USB sound card handles the audio along with some little transformers for isolation, and a USB hub joins everything together. The whole is mounted on perfboard in a small enclosure, and plugged into a Raspberry Pi which acts as a server. This is running a Python script that expose a web front end to control the rig. We like the way this has been done, with minimal intrusion into the radio itself.

Far less so than this CB to 6 meter conversion we featured a while back.


hackaday.com/2026/06/03/web-ba…

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Arrestato in Canada il 23enne Jacob Butler: Operatore della botnet Kimwolf

📌 Link all'articolo : redhotcyber.com/post/arrestato…

A cura di Carolina Vivianti

#redhotcyber #news #cybersecurity #hacking #malware #ddos #botnet #sicurezzainformatica #hacker

Distilling Stale Gasoline to Make it Usable Again


The media in this post is not displayed to visitors. To view it, please log in.


Pouring the resulting distillate for testing. (Credit: Lowered Expectations, YouTube)Pouring the resulting distillate for testing. (Credit: Lowered Expectations, YouTube)
The propensity of gasoline to ‘go stale’ through the process of oxidation is the reason why gasoline that has been stored for a long period of time is considered to be unusable, as it will no longer combust property. Since this process creates the sludge that you find in the bottom of an old gasoline canister, it follows that you may be able to distill out the still good gasoline. With this reasoning, [Joel] over at the [Lowered Expectations] channel set to work to try out this theory.

As part of his job of maintaining things like pressure washers, he got access to many grades of stale gasoline to experiment with. After a short demonstration of how poorly these grades of stale gasoline burn it’s on to the main distillation event. To the stale gasoline aluminium oxide is added as both a catalyst and to create nucleation sites that will prevent ‘bumping’ where you suddenly get a surge out of the heated flask.

Of course, that this is incredibly dangerous should be obvious, and the lack of PPE on the side of [Joel] is somewhat worrying. On the positive side, he does take it easy with ramping up the temperature on the gasoline to try and find the sweet spot where production seems sufficient. This turned out to start at 70°C in the flask when the condenser began to receive its first load of presumably clean-ish gasoline.

The goal here is of course to approximate the function of the fractionating column (‘distillation tower’) at refineries at smaller scale, which [Joel] appears to be doing correctly with what looks to be a Vigreaux column. Since the base product is gasoline with oxidized contaminants this process is of course quite different, so he goes through the different temperature ranges to see what kind of distillate he gets, up to nearly 200°C before calling it.

Ultimately 880 mL of the initial 1 L was collected, with the various distillates combined for testing. Unfortunately none of the testing is actually covered in the video, but it is mentioned at the end that a second batch of the distillate was used to power his car, so presumably it works.

Suffice it to say that ‘works’ doesn’t mean that it is safe, of course. Heating such stale gasoline produces many highly flammable and combustible substances, along with many that are just downright bad for your health to be exposed to. The plethora of very short-term to all the way to very long-term health effects this may cause should be obvious.

youtube.com/embed/WCzdoeVNp40?…


hackaday.com/2026/06/03/distil…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Details about a super-simple web server DOS were published today by Calif, which they're calling HTTP/2 Bomb: blog.calif.io/p/codex-discover…

This impacts 5 web servers.

Apache and NGINX seem to have gotten notifications and patched.

Envoy accused Calif of ignoring responsible disclosure and dumping a 0-day without giving them time to patch: blog.calif.io/p/codex-discover…

More infosec drama, I guess

Questa voce è stata modificata (1 giorno fa)

reshared this

DIY Ceramic Circuit Boards Surely Count As Solarpunk


The media in this post is not displayed to visitors. To view it, please log in.

The media in this post is not displayed to visitors. To view it, please log in.

Solarpunk is all about combining that DIY hacker ethos with sustainability and renewable resources. Our usual PCB manufacturing methods, with their bevy of chemical baths and petrochemical resins aren’t exactly the most sustainable. Digging up some clay and firing it into a circuit board? Very sustainable! And apparently doable, as demonstrated by [Emily Velasco] on Mastadon.

Of course anybody could take a ceramic wafer and call it a circuit board, but that’s only part of what [Emily] did. The ceramic wafer is apparently native clay, which is very cool. Even cooler is that she’s baked the traces into the pottery. While you could conceivably use some sort of conductive glaze for this, what [Emily] did was stamp her desired circuit into the unfired ceramic using a 3D-printed stamp, and then fill the depression with copper powder after the first firing. After that, a second firing is done in a reducing atmosphere to melt/sinter the copper together–it’s not totally clear which is happening here–without burning up.

The results speak for themselves; on the finished demo board, a pair of LEDs blink happily away, driven by the astable oscillator circuit baked right into the clay– and of course the components soldered to it. You’ll have to click through to see it, though.

Given those not-so-sustainable petrochemicals behind our favourite PCBs may be in short supply, this is a timely hack. If it seems familiar, that’s because we featured virtually the same technique last year, but using more-expensive silver powder instead of copper, and a campfire instead of a kiln.

Thanks to [smellsofbikes] for the tip!


hackaday.com/2026/06/03/diy-ce…

Cybersecurity & cyberwarfare ha ricondiviso questo.

L’attacco WhatsApp senza link né codici, il tecnico De Bortoli: “Non capiamo come avvenga l’intrusione”

Un attacco “zero click” senza virus o link sembra compromettere decine di account WhatsApp, aggirando persino l’autenticazione a due fattori. Intervistato da Fanpage.it, l’esperto di informatica forense Antonio De Bortoli svela alcuni dettagli della misteriosa minaccia informatica: “Molti punti oscuri, Meta deve intervenire”
fanpage.it/innovazione/tecnolo…

@informatica

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

My sincere congratulations to all the infosec PR people

We now have more than 1K branded vulnerabilities

Go and collect your bonuses!

vulnerability.garden/

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Windows 365 for Agents: Cloud PC per l’automazione AI in azienda
#tech
spcnet.it/windows-365-for-agen…
@informatica


Windows 365 for Agents: Cloud PC per l’automazione AI in azienda


Cosa sono i Windows 365 for Agents?


Microsoft ha annunciato in public preview Windows 365 for Agents, una nuova offerta che estende la piattaforma Cloud PC per supportare l’automazione basata su agenti AI. L’idea di fondo è semplice ma potente: invece di assegnare un Cloud PC a un utente umano, lo si mette a disposizione di un agente AI che ne ha bisogno per completare un’attività che richiede l’interazione con un’interfaccia grafica — un browser, un’applicazione legacy, un portale web senza API.

Il servizio è attualmente disponibile in anteprima pubblica esclusivamente negli Stati Uniti, quindi prima di pianificare un’implementazione conviene verificare la disponibilità del tenant.

Perché un Cloud PC per un agente AI?


La domanda legittima è: perché un agente AI dovrebbe aver bisogno di un Cloud PC? Molti workflow di automazione si completano già tramite API, connettori o strumenti MCP. Ma esistono scenari reali in cui questo non è possibile:

  • Applicazioni legacy che non espongono API
  • Portali web che richiedono interazione manuale con elementi UI
  • Processi che dipendono da software desktop non modernizzato
  • Task che richiedono la gestione di file locali tramite interfaccia grafica

In questi casi, l’agente ha bisogno di un ambiente desktop reale su cui operare — e Windows 365 for Agents fornisce esattamente questo, con un modello di sicurezza, identità e governance pensato per le organizzazioni enterprise.

Architettura: pool e check-out/check-in


Il meccanismo centrale è il Cloud PC agent pool: un insieme condiviso di Cloud PC pre-provisionati con proprietà comuni (piano di billing, regione geografica, numero di istanze, immagine). Gli agenti non hanno un Cloud PC dedicato — usano un modello di check-out/check-in:

  1. L’agente prenota un Cloud PC disponibile nel pool
  2. Esegue il proprio task
  3. Restituisce il Cloud PC al pool
  4. Il Cloud PC viene resettato prima del riutilizzo

Microsoft descrive quattro piani operativi per l’architettura degli agenti:

  • Computer-Create: provisioning e manutenzione dei pool
  • Computer-Get: prenotazione e rilascio dei Cloud PC
  • Computer-Do: invio di azioni (click, digitazione, ecc.)
  • Computer-See / Computer-TakeControl: osservazione e controllo manuale da parte di un operatore umano

La superficie di controllo in-session usa il Model Context Protocol (MCP), lo stesso protocollo che permette agli agenti AI di scoprire e chiamare strumenti esterni in modo standardizzato.

Modello di sicurezza e identità


I Cloud PC for Agents sono Microsoft Entra-joined e Intune-enrolled. Ogni agente opera con una propria identità dedicata in Microsoft Entra — non viene riutilizzata o impersonata l’identità di un utente umano. Questo è un punto importante per la governance: ogni azione dell’agente è tracciabile e attribuibile a un’identità specifica.

Il supporto attuale alle Conditional Access per le identità agente include il controllo Block access, ma Microsoft chiarisce che non è ancora un sostituto completo per tutti i pattern di Conditional Access usati con gli utenti umani. Da tenere in considerazione prima di portare in produzione scenari critici.

Come configurare Windows 365 for Agents


Il processo di configurazione richiede alcuni prerequisiti:

  • Una licenza Windows 365 o Agent 365 nel tenant
  • Un piano di billing Windows 365 for Agents attivo
  • Opzionalmente, utenti agente in Agent 365


Passo 1: creare la Billing Policy


Nel Microsoft 365 admin center, andare su Billing & usage → Billing policies. Selezionare una sottoscrizione Azure, un resource group e una regione, quindi abilitare Windows 365 for Agents sotto Pay-as-you-go services.

Passo 2: creare la Provisioning Policy per agenti


Nel Microsoft Intune admin center, navigare su Devices → Provision Cloud PCs → Provisioning policies (Agents) → Create policy. La procedura guidata richiede:

  • Nome della policy
  • Piano di billing
  • Numero di Cloud PC always-available (da 1 a 200)
  • Area geografica
  • Agenti assegnati
  • Immagine e impostazioni di lingua

Nota: i gruppi utente non sono attualmente supportati per l’assegnazione degli agenti. Il provisioning richiede circa 20-30 minuti.

Monitoraggio e costi


I Cloud PC for Agents sono visibili in Intune admin center sotto Devices → All devices. Si riconoscono dal prefisso CPCA- nel nome, dal modello Cloud PC for Agents e dal profilo di enrollment che riporta il nome della provisioning policy.

Per monitorare la capacità del pool: Devices → Provision Cloud PCs → Provisioning policies (Agents), selezionare una policy e verificare le sessioni attive e disponibili.

Sul fronte dei costi (area US):

  • Pay-as-you-go: $0,40 per ora (arrotondato all’ora intera successiva)
  • Always-available Cloud PC: $5 per Cloud PC al mese, in aggiunta al billing a consumo

I costi sono tracciabili in Azure Cost Management filtrando per il tag Windows365foragents.

Quando usarlo — e quando no


Windows 365 for Agents è utile principalmente quando un agente deve interagire con un’interfaccia utente: workflow basati su browser, applicazioni legacy senza API affidabili, o software desktop non modernizzato. Se invece il workflow può essere completato tramite API o connettori, Microsoft stesso raccomanda di usare Agent 365 direttamente, senza passare per Windows 365 for Agents.

Dato che la documentazione operativa è ancora limitata — soprattutto sui dettagli di troubleshooting avanzato — Microsoft consiglia di trattare le prime implementazioni come controlled pilot piuttosto che come rollout di produzione su larga scala.

Conclusione


Windows 365 for Agents rappresenta un’evoluzione logica della piattaforma Cloud PC verso il mondo dell’automazione agentiva. Per gli amministratori IT che gestiscono ambienti ibridi con applicazioni legacy, offre un percorso strutturato per integrare agenti AI senza sacrificare la governance di identità e sicurezza. Vale la pena monitorarne l’evoluzione, in particolare quando la preview si estenderà alle region europee.

Fonte: Windows 365 for Agents: Cloud PCs for AI automation — 4sysops


Texas Instruments Changes the NE5532 and Others into Incompatible Versions


The media in this post is not displayed to visitors. To view it, please log in.


Kramer Electronics PT-102AN - board - Texas Instruments SA5532ATexas Instruments SA5532A variant of the 5532 op-amp. (Credit: Raimond Spekking, Wikimedia)
First introduced in 1979 by Signetics, the NE5532 was a pretty spiffy dual op-amp for the time with low noise and low distortion. Over the years it has become a standard part that showed up in countless audio products, and has become a so-called jellybean generic component with Texas Instruments (TI) being one of countless manufacturers.

It being such a standard, multi-sourced part makes it thus even more puzzling that TI has now decided to completely overhaul this IC in a way that makes it incompatible with even the original Signetics NE5532. These changes are covered in detail by [Dave] of EEVblog as his mind is pretty much blown at such an incomprehensible change.

The changes entail an entirely different manufacturing process and a big change in specifications, while making no change to the part number. In revision K of the TI datasheet these changes are first seen, with some specifications changed for the better, like a higher unity gain bandwidth by 2 MHz, but a much slower slew rate.

Although the 5532 op-amps are multi-sourced, there are good reasons to just stick with manufacturers like TI, as that means receiving a product change notification (PCN) when anything changes. In the PCN related to this op-amp a change to process node is noted, along with other changes, but no reasoning.

Among the other big changes are a reduction in the supply voltage from 22V to 18V, and a halving of the ESD protection from 2kV to 1kV. Although it might be slightly more efficient on the new process node this way, it clearly comes with a lot of trade-offs that make it an overall worse op-amp, while also being incompatible with the same op-amp from other manufacturers.

In the video [Dave] goes through the datasheets of this jellybean part of other manufacturers, showing that they still have the original 1980s specifications. Only one exception here was the NE5532DR from Shenzhen HuaXuanYang Electronics, whose supply rail voltage is also 18V for some reason, along with a similar internal transistor configuration that reduces the ESD resistance.

In addition to the NE5532 op-amp, it seems that TI also took an ax to the OPA134 op-amp, by removing its offset trim feature and listing the pins as ‘NC’, with a warning to not connect these pins and also worsening other specifications. This makes these similar jellybean parts incompatible, with no change to the part number. Worse is that it continues with the LMH6518, whose changes [Dave] argues might even kill oscilloscopes as they are commonly found in those.

Meanwhile the LM317M also got an overhaul, but here TI opted to give it a new part name, calling it the LM317MQ with at first glance no major degradations in the specifications, but instead some actual improvements. This makes it even more puzzling why TI didn’t give the other ICs a new part number to differentiate them from the jellybean part.

Until there’s some clarification from the side of TI, it might be a good idea to source these jellybean parts from a manufacturer that is not TI, especially when replacing these ICs in older devices.

youtube.com/embed/22ZmmZ67SMY?…


hackaday.com/2026/06/03/texas-…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Andy Boyd, the CEO of Red Lattice (the company that now owns spyware maker Paragon), went on the Risky Business podcast this week.

The host Patrick Gray asked Boyd about the contract that the company signed with ICE.

To me the most interesting part is when Boyd said that Red Lattice/Paragon: "...only sell to countries that adhere to their rule of law ... for conducting legitimate missions that fall under the laws of whatever country that may be in."

Here is the whole exchange. (starts at ~18:00)

youtube.com/watch?v=AOQETNsmTE…

—PATRICK:
Now we're actually on to something that is somewhat relevant to your day job, Andy, because we've got a story here from 404 Media where they are suing the US government, or they're suing ICE to get its spyware contract with Paragon.

I guess this is interesting for a couple reasons, right?

I understand that ICE is extremely unpopular in the United States, and in my opinion, quite reasonably so, given some of the stuff that they've been doing on the streets of the United States. They've earned some scrutiny, in my opinion.

But I think also we've got to remember that Homeland Security Investigations is a division of ICE. So the idea that Homeland Security Investigations might want this sort of software is entirely reasonable.*

So just reading from HSI's website, "It is the principal investigative component of DHS and is responsible for investigating, disrupting and dismantling transnational criminal organizations and terrorist networks that threaten or seek to exploit the customs and immigration laws of the United States."

So if I had to bet, it would be dollars to donuts that that is the sort of use that, you know, HSI is using it for that sort of thing, not just deploying spyware onto the devices of people who are suspected of entering the United States without prior approval.

Now, we have you here. So I figured I wanted to ask you about this report to see if you've got anything to say because we have had your company come out and make statements along the lines of, well, we don't actually have a relationship with ICE because that means, well, maybe a contract expired and then we've had now suspicions from other quarters of the media "Oh, well, perhaps they're accessing this technology through a third party."*

We've got you here. Do you have anything you can share with us on this?

—BOYD
Yes, I guess I'm going to violate my rule of "I'm just a friend of Patrick." So for this one question.

Yes, as the CEO of Red Lattice, I'm not going to comment on specific customers, whether or not we have said specific customers.

But what I will say is that Red Lattice has a very specific policy on evaluating our customers before we sign any contract with them. This is something that is in the public domain.

You Google the HSI writeup, our policies and how we go about evaluating potential customers. We only sell to liberal democracies, we only sell to countries that adhere to their rule of law. We sell to legitimate intelligence, military, and law enforcement authorities for conducting legitimate missions that fall under the laws of whatever country that may be in and that applies to the United States government as well.

—PATRICK
Yeah and I mean we should say too that this is a two million dollar contract which in the context of this industry is tiny. I mean can you say — would you acknowledge that?

—BOYD
I would acknowledge that any one of us, you, me, or James would be happy to have two million dollars at any time of day, but for a large company that may or may not be working with a government as big as the US government, that would be a fairly small contract, yes.

—PATRICK
Yeah, yeah. And I mean, I think we would point out too that there was some controversy around Paragon, the use of Paragon technology in Italy. I think where that ended up is you gave them the old heave-ho, didn't you?

—BOYD
Yeah, I'm not going to, again, that speaks to a very specific customer that is in the public domain. I think, Patrick, your inferences may be correct, but I'm not going to comment anymore on that one.

Questa voce è stata modificata (1 giorno fa)
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

On the left is the actual photo of GOP Rep. Mike Rogers on the campaign trail in Michigan while running for US senate. On the right is the photo posted by one of his consultants.

reshared this

Deltarune’s Tenna Brought to Life


The media in this post is not displayed to visitors. To view it, please log in.

For those who have never played the hit video games Undertale and Deltarune, the games are partially known for their interesting characters, many of which have eerie, surreal, and expressive designs. One of the more memorable characters from Deltarune is Tenna, a game show host of sorts whose distinguishing feature is an old television as a head, as well as a colorful suit. As a result he’s been the subject of a number of recreations by various cosplayers and makers like [BigRig Creates].

This version of the character was actually inspired by a previous build by [BunnyBii] which used an iPad as the interactive screen/face. Inside the television, though, the actual human found this to be front heavy and limiting in the ways that it could be used interactively, especially since the only way to see the outside world in this version was with a small endoscope and screen. [BigRig Creates]’s version builds on this idea but swaps out the iPad for a Raspberry Pi, allowing for much more customization, and uses a pair of Xreal glasses instead of a screen for the view of the outside world from in the television.

To get the whole costume together, the head is 3D printed with all of the electronics inside, and a game controller integrated into a handheld microphone controls the animations shown on the screen. A vibrant, custom-tailored suit with white gloves rounds out the ensemble, along with a pair of 3D-printed shoe covers since actual yellow shoes were a bit pricy. There were some interesting problems to solve along the way, specifically with regards to power management for all the electronics, but in the end it all seems to have come together quite well. [BigRig Creates] is no stranger to builds with unusual displays, though; one of our favorites was the world’s largest Nintendo 3DS.

youtube.com/embed/KR8yb54V-9g?…


hackaday.com/2026/06/03/deltar…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Cyber espionage campaign targeted #stock #exchange executive’s Outlook account
securityaffairs.com/193086/int…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

New: Wearable health-tech startup Ultrahuman said hackers gained unauthorized access to customers’ wellness data after stealing an employee’s credentials through malware.

techcrunch.com/2026/06/03/ultr…

reshared this