Ireland, Spain, France and the Netherlands are the only member states yet to incorporate the NIS2 directive into national law.

Ireland is one of four countries being referred to the highest court in the European Union for failing to adopt cybersecurity directives into law. The European Commission’s move comes as Ireland commences its six-month rotational presidency heading the EU Council.

The Network and Information Security 2 (NIS2) Directive entered into force in January 2023 and sets high security standards across 18 critical sectors, including health, energy, transport and the public sector, mandating organisations to implement appropriate security measures and report any relevant incidents to the authorities.

However, directives must be incorporated into national legislation by EU member states before gaining effect. Member states had until October 2024 to carry out the transposition.

But by late November 2024, 23 member states, including Denmark, Germany, Finland and Sweden, were yet to transpose the directive, while by May 2025, 19 had still not done so.

In its referral yesterday (8 July), which also includes Spain, France and the Netherlands, the Commission requested the Court of Justice of the European Union to impose financial sanctions on infringing member states, consisting of lump sum and daily penalties until NIS2 is incorporated into national legislation.

The cybersecurity threat landscape is fast evolving, as newer technologies such as AI provide bad actors with advanced tools to commit phishing attacks, scams and infrastructure break-ins, while breaches go underreported in Ireland, according to a recent Compliance Institute report.

“While Ireland is not alone in having missed the deadline, this is not a great start for Ireland to our presidency of the Council of the European Union,” said Dentons partner David Kirton.

“The Government has listed competitiveness and security as two of its three key pillars for the presidency, so putting this legislation into effect would be a strong symbol of that commitment.”

The Government published a general scheme of the National Cyber Security Bill in August 2024, and a National Digital and AI Strategy this February, where it committed to “prioritising legislation to implement the EU NIS2 Directive”, but did not provide a timeline.

The bill remains in pre-legislative scrutiny and is only expected to go before the Oireachtas by September at the earliest.

Transposing the directive will not be straightforward, Kirton said, “as parts of the legislation are technical in nature and present a major change in empowering the National Cyber Security Centre to act in an enforcement role alongside other competent authorities”.

“The Government will need to prioritise the preparation of a bill, which has been promised by the Minister for Justice for later this year, which will no doubt provoke further debate as it proceeds through the legislative process before entering into force,” he added.

Earlier this year, the Commission proposed amendments to simplify NIS2 as part of its digital omnibus overhaul that aims to cut regulatory red tape and make business in the bloc easier.

Amendments to NIS2 aim to increase legal clarity by simplifying jurisdictional rules, streamlining the collection of data on ransomware attacks and facilitating the supervision of cross-border entities, the EU argued.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

We’ve seen a lot of “smart art frames” at CES over the years. Most of them feel like glorified digital photo frames in turtlenecks. However, there’s one that feels genuinely different: Fraimic, and I say that as someone deeply skeptical of this category.

The pitch appears quite compelling at first. Speak a prompt into the device, and its built-in mic sends the command to OpenAI’s GPT Image 2.0, which then generates full-color artwork that lands on a Spectra 6 E Ink display. 

What makes it stand out from competitors like Aura and SwitchBot?

Normally, you’d take out your phone to do that with a regular digital photo frame, but with Fraimic, you just have to tap, speak, and watch something appear on your wall that looks more like paint on paper than pixels on a screen.

The device also features an accelerometer that determines whether it’s oriented in portrait or landscape.

Coming to the competition part, Aura Frames require a subscription and don’t let you swap out the surrounding frame. SwitchBot frames, on the other hand, do not support voice generation. Fraimic does both, while keeping your prompts and images private by default. 

The company offers you 100 free AI generations per year and also provides access to thousands of public-domain works from the Metropolitan Museum of Art. A REST API even opens it up to smart home integration for developers.

So why is the price such a tough pill to swallow?

Because $499 for the 13.3-inch and $1,499 for the 31.5-inch sounds a bit too steep. Aura’s comparable frame runs around the same for the smaller size, but it also offers buyers smaller options that cost even less. Switchbot sells a 31.5-inch variant that costs $200 less. 

It’s worth noting that the 13.3-inch ships now, but the 31.5-inch shows a July 2026 shipping date on the official website. To make the brand’s case, it did grab a Red Dot Award: Product Design 2026. But for a first-gen device from a Chicago startup, it appears to be asking a lot of your wallet.

To me, Fraimic appears to be sitting in an awkward but interesting spot. It’s too expensive to be an impulse buy, too genuinely capable to dismiss. Anyway, we’ll reserve our final verdict for later, when we actually get our hands on it.

SOFTWARE

Linux distro accuses former contributor of deleting years of work and pushing a package that could have broken installs

OpenMandriva has accused a former contributor of using his trusted admin access to trash repositories and push a package that could have broken desktop installations after a community dispute spilled over into the project’s infrastructure.

The Linux distribution disclosed the incident in a forum post this week, describing what it called an attempted act of “distribution sabotage” allegedly involving Davide Beatrici, a developer known for his work on the Mumble instant messaging app.

According to OpenMandriva, Beatrici joined the project some time ago and later offered to migrate its repository infrastructure from GitHub to his privately operated OneDev instance, mirroring several dozen repositories in the process.

While some maintainers were uneasy about concentrating so much of the project’s infrastructure in one person’s hands, the proposal went ahead because, as the project put it, “he was such a well-known figure that we didn’t expect anything bad.”

OpenMandriva says trouble started after two other contributors joined alongside Beatrici. One allegedly engaged in repeated abusive behavior toward users and project members, much of it in private messages. The project says several contributors left before the maintainers finally stepped in, kicking the individual out of the OpenMandriva-Cooker Matrix chat. He wasn’t banned from the project, but OpenMandriva says the decision “triggered a cascade of events.”

Beatrici and another contributor then resigned. When OpenMandriva later decided there was little point continuing to mirror repositories to Beatrici’s private infrastructure, it says it began severing those connections.

According to the project, that didn’t go down well. “This infuriated Davide so much that, abusing of the administrative privileges he still had, he sabotaged the distribution today in the early morning hours,” the statement says.

OpenMandriva alleges Beatrici deleted parts of its GitHub repositories containing years of development work. It also says he “decided to publish an empty package in the cooker repository, which obsoleted all gnome and cosmic packages, which could have damaged the systems of people using gnome or cosmic.”

The Cooker repository is OpenMandriva’s rolling development branch, not a stable release, so the damage appears to have been confined to bleeding-edge users rather than to everyone running the distro. Even so, having one disgruntled admin yank years of work and potentially break package updates isn’t the sort of resilience test most projects volunteer for.

The project says it is restoring the deleted repositories and repairing the affected packages. It also says it carried out “a full system audit” and found that “aside from the removed packages, we found no other violations.”

OpenMandriva adds that it considered legal action, saying the alleged sabotage “constituted a criminal offense,” but ultimately decided against it.

According to tech publication The Lunduke Journal, Beatrici said that “this was by no means a sabotage. The objective was not to harm the distribution I cared for.” He reportedly admitted deleting Cosmic and Gnome repositories and said he did this because someone was “messing with my work.”

The Register has contacted OpenMandriva to ask whether any stable releases were affected, how many repositories were deleted or modified, and what changes the project plans to make to administrative access. We also reached out to Beatrici but have not heard back. 

Every project needs contributors, but they don’t all need the kind of access that can turn a disagreement into a recovery exercise. ®

• The world’s largest digital camera begins recording the changing universe every night
• Giant Chile observatory discovers thousands of hidden asteroids during early testing already
• A new sky survey captures fresh cosmic images every forty seconds overnight

A camera roughly the size of a small car has begun the most ambitious astronomical survey ever attempted from Earth.

The Vera C. Rubin Observatory, perched atop Cerro Pachón in northern Chile, officially started its Legacy Survey of Space and Time.

OpenAI unveiled its newest family of models on Thursday, introducing a new set of heavyweight programs into an increasingly crowded field of AI offerings.

GPT-5.6 comes in three variants: Sol (considered its workhorse), Terra (a more intermediate option), and Luna (its budget friendly option). These models expand what users can do across a variety of fields — with the company promising powerful capabilities in enterprise work, coding, and even scientific research.

CEO Sam Altman has promised that his company’s newest models are orders of magnitude more efficient and cost-effective than previous versions, recently telling CNBC that Sol is 54% more token efficient when it comes to AI coding tasks.

Most notably, the company calls 5.6 its “strongest cybersecurity model yet, achieving frontier performance with significantly fewer tokens.”

Indeed, much hubbub has been made about the model’s cyber capabilities, as the Trump administration previously sought to restrict its rollout, ostensibly due to fears of how the model could be misused. GPT-5.6 supports defensive activities, including threat modeling, code review and patching, and blue teaming (simulating an attack on your own systems to find weaknesses before real hackers do).

OpenAI also released a new tool called ChatGPT Work, which — just as it sounds — is designed as a workplace companion for enterprise teams, running on desktop, web, and mobile, that can help with daily clerical tasks, like drafting documents, spreadsheets, and presentations.

OpenAI’s newly announced family of models follows on the heels of similar releases this week from competitors SpaceXAI and Meta.

However, GPT-5.6 and its attendant marketing seems most designed to take aim at OpenAI’s primary opponent, Anthropic. Anthropic has managed to make itself the likable underdog of the AI race, focusing fixedly on enterprise customers and winning a growing share of support as a result.

Not to be outdone, OpenAI cites the Artificial Analysis Coding Agent Index, a notable benchmarking metric, to claim that its latest family of models outshines Anthropic’s models at every turn.

OpenAI calls Sol its “best coding model yet,” and has explicitly compared it to Anthropic’s recently released (and much hyped) Fable. Using the Coding Agent Index, OpenAI claims that Sol “sets a new state of the art at 80, 2.8 points above Fable 5, while using less than half the output tokens, taking less than half the time, and costing about one-third less.”

It adds: “That advantage extends across the family: Terra performs just above Fable 5, while Luna outperforms Opus 4.8.”

The company says that 5.6 is now available across ChatGPT, Codex, and the OpenAI API. Availability per million tokens is priced as follows: Sol is $5 input / $30 output, Terra is $2.50 input / $15 output, and Luna is $1 input / $6 output.

ai and ml

Searching for work sucks; AI combs the internet and sucks it all up. Combine the two and let ‘er rip with this Python project

Combing through job postings and company help wanted pages for a position that matches your resume is the very definition of drudge work. Now, there’s an AI designed to suck up information from the web, do the search for you, and even help you apply.

Software developer Tarun Gupta created just such a tool in the form of Autopilot-Jobhunt. When configured with a profile of the user and their desired jobs (and what they absolutely won’t accept in an opening), A-J will scan the web while users sleep, take stock of the positions that are a good match, and then send a Telegram message to its user.

That message includes all matching openings, scored against the user’s resume and ranked according to the AI’s assessment. Users can ask A-J to format a resume and cover letter tailored to the position, which it’s up to the user to review and send – the bot won’t do so automatically.

You might be thinking that an AI-crafted resume and cover letter would be a bad strategy for getting your foot in the door at a company you’re keen to work for, but that might not be the case, actually. As we reported last year, researchers found that some AI hiring bots, often the first line a company uses to separate the wheat from the chaff, favored applications generated by the same AI model they used for screening – suggesting the human touch may be worth less than you think in the modern job market.

A-J is designed to be free to use (what hard-up developer can afford to do hundreds of AI API calls a night, after all?), and relies on free models to comb the web for jobs. TinyFish’s AI web agent is used to crawl for jobs, while OpenRouter provides the API for one of several default free AI models that A-J will run through, starting with Llama and falling back to free versions of Nvidia’s Nemotron, Google’s Gemma 4, and Alibaba’s Qwen3 when all else fails, or quotas run out. 

Claude Code and the Anthropic API can be used in place of OpenRouter if you’ve got tokens to spare.

For those concerned about A-J broadcasting personal details to the web, Gupta writes that it’s designed to be private, providing an entire privacy readme as part of the project’s GitHub documentation. 

As mentioned above, A-J never applies for a job on a user’s behalf, and the config file where users link to their locally stored Markdown-formatted resume and set other options is gitignored so it won’t ever be committed by accident. 

That said, resumes do get routed to the LLMs OpenRouter is configured to use. Gupta said those who want to avoid sending that data through OpenRouter can use Claude Code instead, provided they have an Anthropic subscription that supports it.

As for who could make use of the tool, it’s configured by default for software developers, and for good reason: According to Hiring Lab data published on Wednesday, the number of job openings for software developers has risen by 15 percent since Anthropic released Claude Code in February 2025, while openings for all other jobs have fallen by seven percent over the same timeframe. 

Still, young college graduates in a variety of career fields report not being able to find a job, so the tool could be of use to anyone with the willingness to reconfigure it for a different career field. AI companies, fintechs, and Silicon Valley heavyweights might be programmed into A-J by default, but they can be freely added, removed, and reconfigured as desired.

It’ll probably take some work to get Autopilot-Jobhunt configured for your particular needs, but if you’re having trouble landing a role, giving it a shot can’t hurt. ®

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors.

The attempted destructive action extended from wiping GitHub repositories to pushing an empty package that could have damaged users’ systems.

OpenMandriva is an independent, community-run Linux distribution, forked from Mandriva Linux in 2012 and maintained by the OpenMandriva Association.

The distro stands out for building most of its components with the LLVM/Clang toolchain instead of GCC, which is commonly used by most Linux distributions.

According to a post on the project’s forum from long-time OpenMandriva developer and maintainer AngryPenguin, the sabotage attempt occurred after a contributor’s abusive behavior “towards certain users and members of the distribution,” which caused some of them to leave the project.

Following these events, Davide Beatrici, the leading developer of the instant messaging app Mumble and a friend of the attacker, decided to delete part of a repository the OpenMandriva team had been working on for almost a decade.

AngryPenguin stated that Beatrici had administrative privileges because he previously helped migrate and mirror project repositories to his private OneDev instance.

Apart from the data wipe, Beatrici also published an empty package in the Cooker repository that obsoleted the packages for the Gnome and Cosmic desktop environments.

The OpenMandriva team says it is currently restoring the deleted repositories and packages and is conducting a full system audit to determine any other unauthorized changes.

BleepingComputer has contacted Beatrici directly, as well as through the Mumble team, requesting his side of the story, but we have not heard back as of publishing.

However, Beatrici rejected the sabotage claims in a statement for The Lunduke Journal, saying that his goal was never to harm the OpenMandriva community or the distribution’s users.

“Let me state right away that this was by no means a ‘sabotage.’ I’m not the kind of person to do something like that,” Beatrici stated.

“The objective was not to harm the distribution I cared for and contributed to for the past 3 years. I carefully deleted all Cosmic and GNOME repositories from GitHub, the corresponding packages on Cooker (development branch) and pushed a package obsoleting them.”

As Beatrici says, this action was triggered by a few members of the project who did not agree with OpenMandriva’s focus on KDE and LXQt.

“The same members, who notably don’t care about security nor a clean Git commit history, decided to delete the “.onedev-buildspec.yml” file from several repositories without asking/informing me or anyone else first,” the developer said.

AngryPenguin stated on behalf of the OpenMandriva team that although Beatrici’s actions constitute a criminal offense, they have decided not to pursue legal action against the former contributor.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Advertisement

Get the whitepaper

The complaint reads:

On September 12, 2025, Allstate informed VMware’s consultant that it had “removed VMware from all devices,” and therefore Allstate was no longer able to “execute the Scripts provided by Broadcom as the scripts are dependent on having VMWare components running in the environment.”

Allstate reportedly followed up in October to tell VMware that “all VMware instances have been terminated and removed from Allstate’s VMware ELA environment” and that its audit obligations were fulfilled, per VMware’s complaint.

Allstate’s story differs. In the June filing, Allstate claimed that after it decided not to renew its VMware and CA contracts, Broadcom “simultaneously and unreasonably initiated four separate audits of Allstate’s use of its licensed CA and VMware software.”

“With respect to VMware, Allstate substantially and in good faith complied with the audit and reporting requirements set forth in its contracts with VMware, and Plaintiff’s claims to the contrary are unfounded,” the statement reads.

Broadcom has a separate case against Allstate under CA Technologies (PDF). In the lawsuit filed in May 2025, CA accuses Allstate of copyright infringement and breach of contract by selling Allstate’s Employer Voluntary Benefits business and the Symantec products that the business used to Oregon-based insurance company StanCorp Financial Group. CA alleges that Allstate initially “sent a letter to Symantec (a company no longer in existence)” about the decision, but “did not send a similar notice letter addressed to CA.”

In both cases, the parties have until May 17, 2027, to file dispositive motions seeking to resolve each case without a trial.

The cases demonstrate Broadcom’s litigious side and a willingness to battle disgruntled VMware customers. Allstate hasn’t said how reliant it was on VMware or what virtualization tech it uses now. But it’s notable that the insurance firm has joined a growing list of known, enterprise-size firms that have decided to move away from VMware and dispute its owner’s business practices in court.