Google keeps legacy G Suite alive and free for personal use

Your data’s auctioned off up to 987 times a day, NGO reports

Irish Council on Civil Liberties said this is first time the scope of real-time bidding is being measured

The average American has their personal information shared in an online ad bidding war 747 times a day. For the average EU citizen, that number is 376 times a day. In one year, 178 trillion instances of the same bidding war happen online in the US and EU.

That’s according to data shared by the Irish Council on Civil Liberties in a report detailing the extent of real-time bidding (RTB), the technology that drives almost all online advertising and which it said relies on sharing of personal information without user consent. 

The RTB industry was worth more than $117 billion last year, the ICCL report said. As with all things in its study, those numbers only apply to the US and Europe, which means the actual value of the market is likely much higher. 

Apple scraps 3-day return to office amid COVID-19 cases

2 days a week still compulsory but U-turn gives credence to worker concerns

Apple has postponed employees’ scheduled return to the office for three days a week amid a jump in COVID-19 infections.

Staff at the world’s most valuable company were due to up their time in the office from next week, May 23, with Mondays, Tuesday, and Thursdays set as the fixed days each week.

Yet due to the pandemic, Apple confirmed to its workforce that it is delaying the edict for the “time being” with no new date cited, according to a memo seen by Bloomberg.

HPE building its 4th global ‘supercomputer factory’

Facility supports a flurry of HPC development, centered in the Czech Republic

Hewlett Packard Enterprise (HPE) expanded its European footprint this week as it revealed plans for a new manufacturing facility in the Czech Republic, dedicated to building high-performance compute (HPC) systems.

The new facility, located in Kutná Hora, adjacent to HPE’s existing server and storage manufacturing plant and about 90km outside Prague, will be built in collaboration with Foxconn.

HPE sees the investment as an opportunity to address ongoing supply chain challenges in the region. “We are now able to manufacture the industry’s leading supercomputing, HPC, and AI systems, while increasing supply chain viability and resiliency,” Justin Hotard, EVP and GM of HPC and AI at HPE, said in a statement.

China’s vice premier Liu He advocates technology and government cooperation

After years of crackdowns, Beijing changing its tune on the industry

The vice premier of China and Xi Jinping’s economic right hand man, Liu He, has offered a rare show of support to China’s tech industry – both domestic and abroad.

According to state-sponsored media, Liu told around 100 members of the Chinese People’s Political Consultative Congress (CPPCC) it is important to have a good relationship between the government and tech, and to research and support specific measures that grow the platform economy.

“It is necessary to wage a successful battle for the strategic ground of critical core technologies,” Liu said, according to Xinhua news agency.

Marvell CXL roadmap goes all-in on composable infrastructure

Chip biz bets interconnect tech will cement its cloud claim, one day

Fresh off the heels of Marvell Technology’s Tanzanite acquisition, executives speaking at a JP Morgan event this week offered a glimpse at its compute express link (CXL) roadmap.

“This is the next growth factor, not only for Marvell storage, but Marvell as a whole,” Dan Christman, EVP of Marvell’s storage products group, said.

Introduced in early 2019, CXL is an open interface that piggybacks on PCIe to provide a common, cache-coherent means of connecting CPUs, memory, accelerators, and other peripherals. The technology is seen by many, including Marvell, as the holy grail of composable infrastructure, as it enables memory to be disaggregated from the processor.

Microsoft warns partners to revoke unused authorizations that drive your software

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers

Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into your systems through partners.

That service providers can be used to attack their customers is not in dispute: recent exploits targeting ConnectWise, SolarWinds, and Kaseya made that plain. If you need extra proof, recall that just last week the Five Eyes nations’ intelligence agencies urged managed services providers to harden up in the face of increased attacks.

Microsoft currently lets its resellers gain “delegated administration privileges” (DAP) that let them manage a customer’s services, software, or subscriptions.

State of internet crime in Q1 2022: Bot traffic on the rise, and more

According to this cybersecurity outfit that wants your business, anyway

The fraud industry, in some respects, grew in the first quarter of the year, with crooks putting more human resources into some attacks while increasingly relying on bots to carry out things like credential stuffing and fake account creation.

That’s according to Arkose Labs, which claimed in its latest State of Fraud and Account Security report that one in four online accounts created in Q1 2022 were fake and used for fraud, scams, and the like.

The biz, which touts device and network defense software, said it came to this conclusion after analyzing “billions of sessions … across our global network” during the first three months of the year. These sessions apparently spanned account registrations, logins, and interactions with financial, ecommerce, travel, social media, gaming, and entertainment services. Take all these numbers with a grain of salt as ultimately Arkose wants you to buy its stuff to prevent all this kind of crime.

Surf the web from your parked Renault: Vivaldi comes to OpenR

French frolics for Chromium browser on Android Automotive

Monero-mining botnet targets Windows, Linux web servers

Sysrv-K malware infects unpatched tin, Microsoft warns

The latest variant of the Sysrv botnet malware is menacing Windows and Linux systems with an expanded list of vulnerabilities to exploit, according to Microsoft.

The strain, which Microsoft’s Security Intelligence team calls Sysrv-K, scans the internet for web servers that have security holes, such as path traversal, remote file disclosure, and arbitrary file download bugs, that can be exploited to infect the machines.

The vulnerabilities, all of which have patches available, include flaws in WordPress plugins such as the recently uncovered remote code execution hole in the Spring Cloud Gateway software tracked as CVE-2022-22947 that Uncle Sam’s CISA warned of this week.

Red Hat Kubernetes security report finds people are the problem

Puny human brains baffled by K8s complexity, leading to blunder fears

Kubernetes, despite being widely regarded as an important technology by IT leaders, continues to pose problems for those deploying it. And the problem, apparently, is us.

The open source container orchestration software, being used or evaluated by 96 per cent of organizations surveyed [PDF] last year by the Cloud Native Computing Foundation, has a reputation for complexity.

Witness the sarcasm: “Kubernetes is so easy to use that a company devoted solely to troubleshooting issues with it has raised $67 million,” quipped Corey Quinn, chief cloud economist at IT consultancy The Duckbill Group, in a Twitter post on Monday referencing investment in a startup called Komodor. And the consequences of the software’s complication can be seen in the difficulties reported by those using it.

Infosys skips government meeting – and collecting government taxes

Tax portal wobbles, again

Services giant Infosys has had a difficult week, with one of its flagship projects wobbling and India’s government continuing to pressure it over labor practices.

The wobbly projext is India’s portal for filing Goods and Services Tax returns. According to India’s Central Board of Indirect Taxes and Customs (CBIC), the IT services giant reported a “technical glitch” that meant auto-populated forms weren’t ready for taxpayers. The company was directed to fix it and CBIC was faced with extending due dates for tax payments.

Your data’s auctioned off up to 987 times a day, NGO reports

Irish Council on Civil Liberties said this is first time the scope of real-time bidding is being measured

The average American has their personal information shared in an online ad bidding war 747 times a day. For the average EU citizen, that number is 376 times a day. In one year, 178 trillion instances of the same bidding war happen online in the US and EU.

That’s according to data shared by the Irish Council on Civil Liberties in a report detailing the extent of real-time bidding (RTB), the technology that drives almost all online advertising and which it said relies on sharing of personal information without user consent. 

The RTB industry was worth more than $117 billion last year, the ICCL report said. As with all things in its study, those numbers only apply to the US and Europe, which means the actual value of the market is likely much higher. 

Apple scraps 3-day return to office amid COVID-19 cases

2 days a week still compulsory but U-turn gives credence to worker concerns

Apple has postponed employees’ scheduled return to the office for three days a week amid a jump in COVID-19 infections.

Staff at the world’s most valuable company were due to up their time in the office from next week, May 23, with Mondays, Tuesday, and Thursdays set as the fixed days each week.

Yet due to the pandemic, Apple confirmed to its workforce that it is delaying the edict for the “time being” with no new date cited, according to a memo seen by Bloomberg.

HPE building its 4th global ‘supercomputer factory’

Facility supports a flurry of HPC development, centered in the Czech Republic

Hewlett Packard Enterprise (HPE) expanded its European footprint this week as it revealed plans for a new manufacturing facility in the Czech Republic, dedicated to building high-performance compute (HPC) systems.

The new facility, located in Kutná Hora, adjacent to HPE’s existing server and storage manufacturing plant and about 90km outside Prague, will be built in collaboration with Foxconn.

HPE sees the investment as an opportunity to address ongoing supply chain challenges in the region. “We are now able to manufacture the industry’s leading supercomputing, HPC, and AI systems, while increasing supply chain viability and resiliency,” Justin Hotard, EVP and GM of HPC and AI at HPE, said in a statement.

China’s vice premier Liu He advocates technology and government cooperation

After years of crackdowns, Beijing changing its tune on the industry

The vice premier of China and Xi Jinping’s economic right hand man, Liu He, has offered a rare show of support to China’s tech industry – both domestic and abroad.

According to state-sponsored media, Liu told around 100 members of the Chinese People’s Political Consultative Congress (CPPCC) it is important to have a good relationship between the government and tech, and to research and support specific measures that grow the platform economy.

“It is necessary to wage a successful battle for the strategic ground of critical core technologies,” Liu said, according to Xinhua news agency.

Marvell CXL roadmap goes all-in on composable infrastructure

Chip biz bets interconnect tech will cement its cloud claim, one day

Fresh off the heels of Marvell Technology’s Tanzanite acquisition, executives speaking at a JP Morgan event this week offered a glimpse at its compute express link (CXL) roadmap.

“This is the next growth factor, not only for Marvell storage, but Marvell as a whole,” Dan Christman, EVP of Marvell’s storage products group, said.

Introduced in early 2019, CXL is an open interface that piggybacks on PCIe to provide a common, cache-coherent means of connecting CPUs, memory, accelerators, and other peripherals. The technology is seen by many, including Marvell, as the holy grail of composable infrastructure, as it enables memory to be disaggregated from the processor.

Microsoft warns partners to revoke unused authorizations that drive your software

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers

Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into your systems through partners.

That service providers can be used to attack their customers is not in dispute: recent exploits targeting ConnectWise, SolarWinds, and Kaseya made that plain. If you need extra proof, recall that just last week the Five Eyes nations’ intelligence agencies urged managed services providers to harden up in the face of increased attacks.

Microsoft currently lets its resellers gain “delegated administration privileges” (DAP) that let them manage a customer’s services, software, or subscriptions.

State of internet crime in Q1 2022: Bot traffic on the rise, and more

According to this cybersecurity outfit that wants your business, anyway

The fraud industry, in some respects, grew in the first quarter of the year, with crooks putting more human resources into some attacks while increasingly relying on bots to carry out things like credential stuffing and fake account creation.

That’s according to Arkose Labs, which claimed in its latest State of Fraud and Account Security report that one in four online accounts created in Q1 2022 were fake and used for fraud, scams, and the like.

The biz, which touts device and network defense software, said it came to this conclusion after analyzing “billions of sessions … across our global network” during the first three months of the year. These sessions apparently spanned account registrations, logins, and interactions with financial, ecommerce, travel, social media, gaming, and entertainment services. Take all these numbers with a grain of salt as ultimately Arkose wants you to buy its stuff to prevent all this kind of crime.

Surf the web from your parked Renault: Vivaldi comes to OpenR

French frolics for Chromium browser on Android Automotive

Monero-mining botnet targets Windows, Linux web servers

Sysrv-K malware infects unpatched tin, Microsoft warns

The latest variant of the Sysrv botnet malware is menacing Windows and Linux systems with an expanded list of vulnerabilities to exploit, according to Microsoft.

The strain, which Microsoft’s Security Intelligence team calls Sysrv-K, scans the internet for web servers that have security holes, such as path traversal, remote file disclosure, and arbitrary file download bugs, that can be exploited to infect the machines.

The vulnerabilities, all of which have patches available, include flaws in WordPress plugins such as the recently uncovered remote code execution hole in the Spring Cloud Gateway software tracked as CVE-2022-22947 that Uncle Sam’s CISA warned of this week.

Red Hat Kubernetes security report finds people are the problem

Puny human brains baffled by K8s complexity, leading to blunder fears

Kubernetes, despite being widely regarded as an important technology by IT leaders, continues to pose problems for those deploying it. And the problem, apparently, is us.

The open source container orchestration software, being used or evaluated by 96 per cent of organizations surveyed [PDF] last year by the Cloud Native Computing Foundation, has a reputation for complexity.

Witness the sarcasm: “Kubernetes is so easy to use that a company devoted solely to troubleshooting issues with it has raised $67 million,” quipped Corey Quinn, chief cloud economist at IT consultancy The Duckbill Group, in a Twitter post on Monday referencing investment in a startup called Komodor. And the consequences of the software’s complication can be seen in the difficulties reported by those using it.

Infosys skips government meeting – and collecting government taxes

Tax portal wobbles, again

Services giant Infosys has had a difficult week, with one of its flagship projects wobbling and India’s government continuing to pressure it over labor practices.

The wobbly projext is India’s portal for filing Goods and Services Tax returns. According to India’s Central Board of Indirect Taxes and Customs (CBIC), the IT services giant reported a “technical glitch” that meant auto-populated forms weren’t ready for taxpayers. The company was directed to fix it and CBIC was faced with extending due dates for tax payments.

Your data’s auctioned off up to 987 times a day, NGO reports

Irish Council on Civil Liberties said this is first time the scope of real-time bidding is being measured

The average American has their personal information shared in an online ad bidding war 747 times a day. For the average EU citizen, that number is 376 times a day. In one year, 178 trillion instances of the same bidding war happen online in the US and EU.

That’s according to data shared by the Irish Council on Civil Liberties in a report detailing the extent of real-time bidding (RTB), the technology that drives almost all online advertising and which it said relies on sharing of personal information without user consent. 

The RTB industry was worth more than $117 billion last year, the ICCL report said. As with all things in its study, those numbers only apply to the US and Europe, which means the actual value of the market is likely much higher. 

Apple scraps 3-day return to office amid COVID-19 cases

2 days a week still compulsory but U-turn gives credence to worker concerns

Apple has postponed employees’ scheduled return to the office for three days a week amid a jump in COVID-19 infections.

Staff at the world’s most valuable company were due to up their time in the office from next week, May 23, with Mondays, Tuesday, and Thursdays set as the fixed days each week.

Yet due to the pandemic, Apple confirmed to its workforce that it is delaying the edict for the “time being” with no new date cited, according to a memo seen by Bloomberg.

HPE building its 4th global ‘supercomputer factory’

Facility supports a flurry of HPC development, centered in the Czech Republic

Hewlett Packard Enterprise (HPE) expanded its European footprint this week as it revealed plans for a new manufacturing facility in the Czech Republic, dedicated to building high-performance compute (HPC) systems.

The new facility, located in Kutná Hora, adjacent to HPE’s existing server and storage manufacturing plant and about 90km outside Prague, will be built in collaboration with Foxconn.

HPE sees the investment as an opportunity to address ongoing supply chain challenges in the region. “We are now able to manufacture the industry’s leading supercomputing, HPC, and AI systems, while increasing supply chain viability and resiliency,” Justin Hotard, EVP and GM of HPC and AI at HPE, said in a statement.

China’s vice premier Liu He advocates technology and government cooperation

After years of crackdowns, Beijing changing its tune on the industry

The vice premier of China and Xi Jinping’s economic right hand man, Liu He, has offered a rare show of support to China’s tech industry – both domestic and abroad.

According to state-sponsored media, Liu told around 100 members of the Chinese People’s Political Consultative Congress (CPPCC) it is important to have a good relationship between the government and tech, and to research and support specific measures that grow the platform economy.

“It is necessary to wage a successful battle for the strategic ground of critical core technologies,” Liu said, according to Xinhua news agency.

Marvell CXL roadmap goes all-in on composable infrastructure

Chip biz bets interconnect tech will cement its cloud claim, one day

Fresh off the heels of Marvell Technology’s Tanzanite acquisition, executives speaking at a JP Morgan event this week offered a glimpse at its compute express link (CXL) roadmap.

“This is the next growth factor, not only for Marvell storage, but Marvell as a whole,” Dan Christman, EVP of Marvell’s storage products group, said.

Introduced in early 2019, CXL is an open interface that piggybacks on PCIe to provide a common, cache-coherent means of connecting CPUs, memory, accelerators, and other peripherals. The technology is seen by many, including Marvell, as the holy grail of composable infrastructure, as it enables memory to be disaggregated from the processor.

Microsoft warns partners to revoke unused authorizations that drive your software

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers

Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into your systems through partners.

That service providers can be used to attack their customers is not in dispute: recent exploits targeting ConnectWise, SolarWinds, and Kaseya made that plain. If you need extra proof, recall that just last week the Five Eyes nations’ intelligence agencies urged managed services providers to harden up in the face of increased attacks.

Microsoft currently lets its resellers gain “delegated administration privileges” (DAP) that let them manage a customer’s services, software, or subscriptions.

State of internet crime in Q1 2022: Bot traffic on the rise, and more

According to this cybersecurity outfit that wants your business, anyway

The fraud industry, in some respects, grew in the first quarter of the year, with crooks putting more human resources into some attacks while increasingly relying on bots to carry out things like credential stuffing and fake account creation.

That’s according to Arkose Labs, which claimed in its latest State of Fraud and Account Security report that one in four online accounts created in Q1 2022 were fake and used for fraud, scams, and the like.

The biz, which touts device and network defense software, said it came to this conclusion after analyzing “billions of sessions … across our global network” during the first three months of the year. These sessions apparently spanned account registrations, logins, and interactions with financial, ecommerce, travel, social media, gaming, and entertainment services. Take all these numbers with a grain of salt as ultimately Arkose wants you to buy its stuff to prevent all this kind of crime.

Surf the web from your parked Renault: Vivaldi comes to OpenR

French frolics for Chromium browser on Android Automotive

Monero-mining botnet targets Windows, Linux web servers

Sysrv-K malware infects unpatched tin, Microsoft warns

The latest variant of the Sysrv botnet malware is menacing Windows and Linux systems with an expanded list of vulnerabilities to exploit, according to Microsoft.

The strain, which Microsoft’s Security Intelligence team calls Sysrv-K, scans the internet for web servers that have security holes, such as path traversal, remote file disclosure, and arbitrary file download bugs, that can be exploited to infect the machines.

The vulnerabilities, all of which have patches available, include flaws in WordPress plugins such as the recently uncovered remote code execution hole in the Spring Cloud Gateway software tracked as CVE-2022-22947 that Uncle Sam’s CISA warned of this week.

Red Hat Kubernetes security report finds people are the problem

Puny human brains baffled by K8s complexity, leading to blunder fears

Kubernetes, despite being widely regarded as an important technology by IT leaders, continues to pose problems for those deploying it. And the problem, apparently, is us.

The open source container orchestration software, being used or evaluated by 96 per cent of organizations surveyed [PDF] last year by the Cloud Native Computing Foundation, has a reputation for complexity.

Witness the sarcasm: “Kubernetes is so easy to use that a company devoted solely to troubleshooting issues with it has raised $67 million,” quipped Corey Quinn, chief cloud economist at IT consultancy The Duckbill Group, in a Twitter post on Monday referencing investment in a startup called Komodor. And the consequences of the software’s complication can be seen in the difficulties reported by those using it.

Infosys skips government meeting – and collecting government taxes

Tax portal wobbles, again

Services giant Infosys has had a difficult week, with one of its flagship projects wobbling and India’s government continuing to pressure it over labor practices.

The wobbly projext is India’s portal for filing Goods and Services Tax returns. According to India’s Central Board of Indirect Taxes and Customs (CBIC), the IT services giant reported a “technical glitch” that meant auto-populated forms weren’t ready for taxpayers. The company was directed to fix it and CBIC was faced with extending due dates for tax payments.

Your data’s auctioned off up to 987 times a day, NGO reports

Irish Council on Civil Liberties said this is first time the scope of real-time bidding is being measured

The average American has their personal information shared in an online ad bidding war 747 times a day. For the average EU citizen, that number is 376 times a day. In one year, 178 trillion instances of the same bidding war happen online in the US and EU.

That’s according to data shared by the Irish Council on Civil Liberties in a report detailing the extent of real-time bidding (RTB), the technology that drives almost all online advertising and which it said relies on sharing of personal information without user consent. 

The RTB industry was worth more than $117 billion last year, the ICCL report said. As with all things in its study, those numbers only apply to the US and Europe, which means the actual value of the market is likely much higher. 

Apple scraps 3-day return to office amid COVID-19 cases

2 days a week still compulsory but U-turn gives credence to worker concerns

Apple has postponed employees’ scheduled return to the office for three days a week amid a jump in COVID-19 infections.

Staff at the world’s most valuable company were due to up their time in the office from next week, May 23, with Mondays, Tuesday, and Thursdays set as the fixed days each week.

Yet due to the pandemic, Apple confirmed to its workforce that it is delaying the edict for the “time being” with no new date cited, according to a memo seen by Bloomberg.

HPE building its 4th global ‘supercomputer factory’

Facility supports a flurry of HPC development, centered in the Czech Republic

Hewlett Packard Enterprise (HPE) expanded its European footprint this week as it revealed plans for a new manufacturing facility in the Czech Republic, dedicated to building high-performance compute (HPC) systems.

The new facility, located in Kutná Hora, adjacent to HPE’s existing server and storage manufacturing plant and about 90km outside Prague, will be built in collaboration with Foxconn.

HPE sees the investment as an opportunity to address ongoing supply chain challenges in the region. “We are now able to manufacture the industry’s leading supercomputing, HPC, and AI systems, while increasing supply chain viability and resiliency,” Justin Hotard, EVP and GM of HPC and AI at HPE, said in a statement.

China’s vice premier Liu He advocates technology and government cooperation

After years of crackdowns, Beijing changing its tune on the industry

The vice premier of China and Xi Jinping’s economic right hand man, Liu He, has offered a rare show of support to China’s tech industry – both domestic and abroad.

According to state-sponsored media, Liu told around 100 members of the Chinese People’s Political Consultative Congress (CPPCC) it is important to have a good relationship between the government and tech, and to research and support specific measures that grow the platform economy.

“It is necessary to wage a successful battle for the strategic ground of critical core technologies,” Liu said, according to Xinhua news agency.

Marvell CXL roadmap goes all-in on composable infrastructure

Chip biz bets interconnect tech will cement its cloud claim, one day

Fresh off the heels of Marvell Technology’s Tanzanite acquisition, executives speaking at a JP Morgan event this week offered a glimpse at its compute express link (CXL) roadmap.

“This is the next growth factor, not only for Marvell storage, but Marvell as a whole,” Dan Christman, EVP of Marvell’s storage products group, said.

Introduced in early 2019, CXL is an open interface that piggybacks on PCIe to provide a common, cache-coherent means of connecting CPUs, memory, accelerators, and other peripherals. The technology is seen by many, including Marvell, as the holy grail of composable infrastructure, as it enables memory to be disaggregated from the processor.

Microsoft warns partners to revoke unused authorizations that drive your software

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers

Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into your systems through partners.

That service providers can be used to attack their customers is not in dispute: recent exploits targeting ConnectWise, SolarWinds, and Kaseya made that plain. If you need extra proof, recall that just last week the Five Eyes nations’ intelligence agencies urged managed services providers to harden up in the face of increased attacks.

Microsoft currently lets its resellers gain “delegated administration privileges” (DAP) that let them manage a customer’s services, software, or subscriptions.

State of internet crime in Q1 2022: Bot traffic on the rise, and more

According to this cybersecurity outfit that wants your business, anyway

The fraud industry, in some respects, grew in the first quarter of the year, with crooks putting more human resources into some attacks while increasingly relying on bots to carry out things like credential stuffing and fake account creation.

That’s according to Arkose Labs, which claimed in its latest State of Fraud and Account Security report that one in four online accounts created in Q1 2022 were fake and used for fraud, scams, and the like.

The biz, which touts device and network defense software, said it came to this conclusion after analyzing “billions of sessions … across our global network” during the first three months of the year. These sessions apparently spanned account registrations, logins, and interactions with financial, ecommerce, travel, social media, gaming, and entertainment services. Take all these numbers with a grain of salt as ultimately Arkose wants you to buy its stuff to prevent all this kind of crime.

Surf the web from your parked Renault: Vivaldi comes to OpenR

French frolics for Chromium browser on Android Automotive

Monero-mining botnet targets Windows, Linux web servers

Sysrv-K malware infects unpatched tin, Microsoft warns

The latest variant of the Sysrv botnet malware is menacing Windows and Linux systems with an expanded list of vulnerabilities to exploit, according to Microsoft.

The strain, which Microsoft’s Security Intelligence team calls Sysrv-K, scans the internet for web servers that have security holes, such as path traversal, remote file disclosure, and arbitrary file download bugs, that can be exploited to infect the machines.

The vulnerabilities, all of which have patches available, include flaws in WordPress plugins such as the recently uncovered remote code execution hole in the Spring Cloud Gateway software tracked as CVE-2022-22947 that Uncle Sam’s CISA warned of this week.

Red Hat Kubernetes security report finds people are the problem

Puny human brains baffled by K8s complexity, leading to blunder fears

Kubernetes, despite being widely regarded as an important technology by IT leaders, continues to pose problems for those deploying it. And the problem, apparently, is us.

The open source container orchestration software, being used or evaluated by 96 per cent of organizations surveyed [PDF] last year by the Cloud Native Computing Foundation, has a reputation for complexity.

Witness the sarcasm: “Kubernetes is so easy to use that a company devoted solely to troubleshooting issues with it has raised $67 million,” quipped Corey Quinn, chief cloud economist at IT consultancy The Duckbill Group, in a Twitter post on Monday referencing investment in a startup called Komodor. And the consequences of the software’s complication can be seen in the difficulties reported by those using it.

Infosys skips government meeting – and collecting government taxes

Tax portal wobbles, again

Services giant Infosys has had a difficult week, with one of its flagship projects wobbling and India’s government continuing to pressure it over labor practices.

The wobbly projext is India’s portal for filing Goods and Services Tax returns. According to India’s Central Board of Indirect Taxes and Customs (CBIC), the IT services giant reported a “technical glitch” that meant auto-populated forms weren’t ready for taxpayers. The company was directed to fix it and CBIC was faced with extending due dates for tax payments.