Connect with us
DAPA Banner

Tech

CISA flags VMware Aria Operations RCE flaw as exploited in attacks

Published

on

VMware

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a VMware Aria Operations vulnerability tracked as CVE-2026-22719 to its Known Exploited Vulnerabilities catalog, flagging the flaw as exploited in attacks.

Broadcom also warned that it is aware of reports indicating the vulnerability is exploited but says it cannot independently confirm the claims.

VMware Aria Operations is an enterprise monitoring platform that helps organizations track the performance and health of servers, networks, and cloud infrastructure.

The vulnerability was originally disclosed and patched on February 24, 2026, as part of VMware’s VMSA-2026-0001 advisory, which was rated Important with a CVSS score of 8.1.

Advertisement

The flaw has now been added to the CISA’s Known Exploited Vulnerabilities (KEV) catalog, with the US cyber agency requiring federal civilian agencies to address the issue by March 24, 2026.

In a recent update to the advisory, Broadcom said it is aware of reports indicating the vulnerability is exploited in attacks but cannot confirm the claims.

“Broadcom is aware of reports of potential exploitation of CVE-2026-22719 in the wild, but we cannot independently confirm their validity,” states the updated advisory.

At this time, no technical details about how the flaw may be exploited have been publicly disclosed.

Advertisement

BleepingComputer contacted Broadcom with questions regarding the reported activity, but has not received a response.

The command injection flaw

According to Broadcom, CVE-2026-22719 is a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands on vulnerable systems.

“A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress,” the advisory explains.

Broadcom released security patches on February 24 and also provided a temporary workaround for organizations unable to apply the patches immediately.

Advertisement

The mitigation is a shell script named “aria-ops-rce-workaround.sh,” which must be executed as root on each Aria Operations appliance node.

The script disables components of the migration process that could be abused during exploitation, including removing the “/usr/lib/vmware-casa/migration/vmware-casa-migration-service.sh” and the following sudoers entry that allows vmware-casa-workflow.sh to run as root without a password:


NOPASSWD: /usr/lib/vmware-casa/bin/vmware-casa-workflow.sh

Admins are advised to apply available VMware Aria Operations security patches or implement workarounds as soon as possible, especially if the flaw is being actively exploited in attacks.

Malware is getting smarter. The Red Report 2026 reveals how new threats use math to detect sandboxes and hide in plain sight.

Download our analysis of 1.1 million malicious samples to uncover the top 10 techniques and see if your security stack is blinded.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Tech

Best iPhone 17 Cases of 2026

Published

on

MagSafe support

Most but not all iPhone 17 Series cases have MagSafe support (the metal ring built into the case). I generally encourage people to make sure they get a MagSafe-enabled case because of the number of MagSafe accessories on the market, some of them quite useful. In the past, you could save $5 to $10 by getting a case that left off the Magsafe ring, but, as I said, the vast majority of iPhone 17 Series cases are MagSafe-enabled.

Thickness

Some people like minimal cases that add little to no bulk to their iPhones, but the majority of people are looking for a case that offers good protection — or even maximum protection. I tell people to find a case that’s not too thick — and maybe even pretty slim — that offers at least 6-foot drop protection (and good corner protection).

Clear case

Clear cases are popular because they show off your phone (and its color). Clear cases, especially cheaper ones, can become less clear over time and slowly start to yellow. Many case makers now add UV protection to their clear cases to prevent yellowing. 

Advertisement

Source link

Continue Reading

Tech

Solidroad raises $25m as demand for QA product sparks fresh hiring

Published

on

Hiring has already begun and will continue ‘over the coming months’, founder Mark Hughes tells SiliconRepublic.com.

Y Combinator-backed and Irish-founded start-up Solidroad has announced a $25m Series A round led by UK investment firm Hedosophia.

The San Francisco-headquartered start-up offers companies an AI-powered quality assurance and training platform that reviews customer interactions to locate improvement points. This data can also be repurposed to create training simulations.

“Companies handle hundreds of thousands of customer conversations every day, but most can’t tell how well those interactions are actually going. Metrics like response times or ticket volumes don’t capture the actual quality of the experience,” co-founder and CEO Mark Hughes told SiliconRepublic.com.

Advertisement

As AI takes on routine requests, escalated conversations that reach humans tend to be complex and emotionally charged, Hughes noted. This raises the bar needed for human agents, putting pressure on coaching.

“We provide an independent quality layer across every customer interaction, so companies can evaluate performance consistently against their own standards.”

The new funding, as well as a $6.5m seed round in June last year, will help the start-up expand its teams across Dublin and San Francisco.

“We’re really focused on scaling … to meet a clear shift in the market,” said Hughes. Solidroad currently employs 20. The next wave of hiring has begun and will continue “over the coming months”.

Advertisement

“As demand grows from enterprises looking for better visibility and control over both human and AI-led customer interactions, expanding our team is critical to meeting that need and continuing to raise the quality bar across the industry,” the CEO said.

In 2025, the then two-year-old start-up said it had around 50 customers, a number which has since grown a “ton”, according to the CEO. Solidroad works with the likes of Crypto.com, Ryanair and Oura.

“Across all of our customers, we typically see a 20pc increase in quality assurance coverage and 90pc reduction in manual review time,” Hughes said.

Hughes previously founded Gradguide, a coaching and mentorship network for college graduates, in 2019. The company raised $2m before being acquired in 2022. Co-founder Patrick Finlay previously co-founded Monaru, which helped product and marketing teams build in-app experiences.

Advertisement

Solidroad, founded by the two in 2023, joined the Y Combinator accelerator as part of its winter 2025 cohort. Finlay’s previous venture was a part of a previous edition of the accelerator.

Hughes said his biggest lesson take-away as a founder was “learning the difference between a product people find interesting and one they actually need”.

On his experience at Y Combinator, he said: “I also quickly learned how to differentiate between what will actually make an impact versus what’s just a trend.”

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Advertisement

Source link

Continue Reading

Tech

New leaders, new fund: Sequoia has raised $7B to expand its AI bets

Published

on

Few venture firms have bet more aggressively on AI than Sequoia Capital, and it isn’t slowing down.

The Silicon Valley stalwart has raised roughly $7 billion for a new fund, according to Bloomberg. Sequoia declined TechCrunch’s request for comment. The money will go toward what the firm calls its “expansion strategy” — essentially its late-stage investing arm, focused on the U.S. and Europe — and it’s nearly double Sequoia’s last comparable fund, a $3.4 billion vehicle raised in 2022.

That growth in fund size reflects something bigger: late-stage investing has taken on an entirely new meaning in the AI era. Companies can now scale at a speed and cost that would have been unimaginable a decade ago, and the firms backing them have to keep pace.

The money signals where Sequoia sees the future: deeply embedded in AI, from the giants building the underlying technology to the startups putting it to work. The firm has backed two of the most prominent players in the AI race — OpenAI originally and, more recently, Anthropic — both of which are reportedly eyeing public listings in 2026. The development that could mean a significant payday for the firm.

Advertisement

Sequoia isn’t only swinging for the foundational AI heavyweights, however. It has also placed bets on other buzzy startups, including Physical Intelligence, the Bay Area robotics startup, and Factory, which builds AI agents for enterprise engineering teams.

The fundraise is also the first major capital raise under Sequoia’s new leadership, with Alfred Lin and Pat Grady now serving as co-stewards of the 54-year-old firm.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Advertisement

Source link

Advertisement
Continue Reading

Tech

Opera Adds Browser Connector Feature to Integrate AI Chatbots Into Browsers

Published

on

Opera announced Thursday a new tool that allows people using its browsers to add more AI chatbots to their browsing experience.

The free feature, called Browser Connector, works with Opera One and Opera GX and lets you integrate AI tools such as OpenAI’s ChatGPT and Anthropic’s Claude into live browsing sessions using Model Context Protocol. The protocol, known as MCP, is an open standard developed by Anthropic that enables a secure two-way connection between AI models, external data sources and tools such as search engines.

Advertisement
AI Atlas

(Disclosure: Ziff Davis, CNET’s parent company, in 2025 filed a lawsuit against OpenAI, alleging it infringed Ziff Davis copyrights in training and operating its AI systems.)  

Last month, Opera introduced MCP compatibility to Opera Neon, its subscription-based agentic AI browser. Opera says the new feature will allow your AI of choice to provide real-time context of open tabs and active content.

“With Browser Connector, Opera ensures users aren’t bound to a single company’s ecosystem, but are instead free to combine the best tools for their specific needs,” Mohamed Salah, senior director of product at Opera, said in a statement.

To enable the Browser Connector feature, which is now available in Opera’s Early Bird mode, head to Settings in the browser, search for “AI Services” and install it. Then connect ChatGPT or Claude to the feature.

Advertisement

Source link

Continue Reading

Tech

This LEGO Coffee Factory Responds to Smartphone Orders with Perfect Timing

Published

on

LEGO Coffee Factory Machine Build Keurig
Brick Machines has built a really cool LEGO Coffee Factory that does all of the hard work for you when it comes to brewing your morning coffee. Simply open the app on your phone, choose a drink, and press the button; the machine will handle the rest.



You can manage the entire process with a simple app on your smartphone. Simply select your drink, which starts the entire process from the machine, and then sit back and wait for your coffee to arrive. There is no fumbling around and no laborious processes to worry about. The goal is to transform what would otherwise be a hassle into a relatively painless transaction between you and the gadget.

LEGO Coffee Factory Machine Build Keurig
A normal Keurig unit serves as the main brains of the operation within the LEGO chassis. The rest of the design is based on it, with LEGO components added to enhance the movement and control options. The LEGO Technic beams and Mindstorms parts provide the necessary power and intelligence to the entire system. The motors turn the gears, which turn the arms and platforms smoothly at the appropriate time. The sensors constantly monitor everything to ensure that nothing is out of order. The end result looks and feels like a little factory line producing a single cup of coffee.

LEGO Coffee Factory Machine Build Keurig
Custom Pybricks code is used to communicate between the app and the machine. It establishes a direct link between your phone and the machine, which then executes the necessary commands. As you’d anticipate, some more electronics have been included to ensure that the timing and communication are perfect, and that each stage operates well. A few 3D printed parts were also used to fill in gaps when ordinary LEGO parts were insufficient.

LEGO Coffee Factory Machine Build Keurig
Mechanisms first place an empty cup beneath the spout. The rails then move the cup into position so that it precisely aligns with the flow of liquid, all in a flash and without spilling a drop before the brewing process begins. Next, a pod is removed from storage and inserted into the Keurig. The arms open the lid, guide the pod inside, and then securely close it. The motion is really smooth and coordinated, so the pod is ready quickly.

LEGO Coffee Factory Machine Build Keurig
Once the arms are built, the brewing procedure begins. Water begins to heat and flow through the pod, filling the waiting cup. The machine monitors the progress until the cup is filled to the brim with the ideal serving. Steam begins to rise as the liquid settles and the aroma spreads. Following that, the used pod must be disposed of, and the machine handles this effortlessly as well, with another set of arms opening the lid, lifting the old pod, and whisking it away to a collection receptacle on the side.
[Source]

Source link

Advertisement
Continue Reading

Tech

Recently leaked Windows zero-days now exploited in attacks

Published

on

Windows

Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or elevated administrator permissions.

Since the start of the month, a security researcher known as “Chaotic Eclipse” or “Nightmare-Eclipse” has published proof-of-concept exploit code for all three security issues in protest to how Microsoft’s Security Response Center (MSRC) handled the disclosure process.

Two of the vulnerabilities (dubbed BlueHammer and RedSun) are Microsoft Defender local privilege escalation (LPE) flaws, while the third (known as UnDefend) can be exploited as a standard user to block Microsoft Defender definition updates.

Wiz

At the time of the leak, the security flaws these exploits targeted were considered zero-days by Microsoft’s definition, since they had no official patches or updates to address them.

On Thursday, Huntress Labs security researchers reported seeing all three zero-day exploits deployed in the wild, with the BlueHammer vulnerability being exploited since April 10.

Advertisement

They also spotted UnDefend and RedSun exploits on a Windows device that was breached using a compromised SSLVPN user, in attacks showing evidence of “hands-on-keyboard threat actor activity.”

“The Huntress SOC is observing the use of Nightmare-Eclipse’s BlueHammer, RedSun, and UnDefend exploitation techniques,” the researchers said.

Huntress Labs tweet

​Two zero-days still waiting for a patch

While Microsoft is now tracking the BlueHammer vulnerability as CVE-2026-33825 and has patched it in the April 2026 security updates, the other two flaws remain unaddressed.

As BleepingComputer previously reported, attackers can use the RedSun exploit to gain SYSTEM privileges on Windows 10, Windows 11, and Windows Server 2019 and later systems when Windows Defender is enabled, even after applying the April Patch Tuesday patches.

Advertisement

“When Windows Defender realizes that a malicious file has a cloud tag, for whatever stupid and hilarious reason, the antivirus that’s supposed to protect decides that it is a good idea to just rewrite the file it found again to it’s original location,” the researcher explained. “The PoC abuses this behaviour to overwrite system files and gain administrative privileges.”

“Microsoft has a customer commitment to investigate reported security issues and update impacted devices to protect customers as soon as possible,” a Microsoft spokesperson told BleepingComputer earlier this week when contacted for more information on the disclosure issues reported by the anonymous researcher.

“We also support coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community.”

AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. A wave of new exploits is coming.

At the Autonomous Validation Summit (May 12 & 14), see how autonomous, context-rich validation finds what’s exploitable, proves controls hold, and closes the remediation loop.

Advertisement

Source link

Continue Reading

Tech

I test coffee machines for a living and I can’t recommend this De’Longhi model at half price highly enough

Published

on

If you’ve been considering adding a coffee machine to your kitchen, or upgrading an old one, you’re not exactly short of options. Yet, if all you want is an easy route to a cafe-quality caffeine hit, then only a fully-automatic coffee machine will do — and you can now save a huge 50% on a De’Longhi model that is among the best coffee machines we’ve ever tested.

The De’Longhi Eletta Explore really is a do-it-all machine, capable of making both hot and cold coffee-based drinks, including those with milk, at the touch of a few buttons — and it’s now available for AU$999 (down from AU$1,999) at Amazon for a limited time.

best coffee machines in Australia. It is simply brimming with features, including Wi-Fi connectivity, allowing you to control the machine from your phone — this includes brewing drinks, but you’ll need to make sure there’s a cup underneath the spout before you do!

Advertisement

As we said in our De’Longhi Eletta Explore review, “The Eletta Explore made delicious, well-balanced espresso with a well-formed crema and plenty of body.” We were also impressed with the foam created using the LatteCrema system, whether making hot or cold drinks. One thing to note, however, is that separate milk carafes are required for hot and cold drinks, so you’ll need to manually swap them if you’re making a variety of drinks.

Ultimately, no matter your coffee order, the De’Longhi Eletta Explore will be able to make it. And now it’s half price, it will recoup its money back and more in no time.

Amazon has also discounted the De’Longhi Magnifica Evo by 40%, now AU$599. This is an older machine, and is quite large, but is still highly capable and can brew a wonderful espresso. There’s no touchscreen display, and it isn’t able to make as many coffee-based drinks as the Eletta Explore, but if your preference is for a simple cappuccino, flat white or long black, it’s ideal. You can read our full De’Longhi Magnifica Evo review for more information.

Advertisement

Finally, for a more simple espresso machine, there’s the Stilosa. Now just AU$116 (down from AU$149), this simple manual espresso machine with a steam wand is a fine option if you’re not interested in features like cold brewing and automatic milk frothing.

Not too keen on my picks? View a wider selection of manual, semi-automatic and fully-automatic espresso machines at Amazon.

Source link

Continue Reading

Tech

Today’s NYT Connections: Sports Edition Hints, Answers for April 17 #571

Published

on

Looking for the most recent regular Connections answers? Click here for today’s Connections hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle and Strands puzzles.


Today’s Connections: Sports Edition is a tricky one, especially the purple category. If you’re struggling with today’s puzzle but still want to solve it, read on for hints and the answers.

Connections: Sports Edition is published by The Athletic, the subscription-based sports journalism site owned by The Times. It doesn’t appear in the NYT Games app, but it does in The Athletic’s own app. Or you can play it for free online.

Advertisement

Read more: NYT Connections: Sports Edition Puzzle Comes Out of Beta

Hints for today’s Connections: Sports Edition groups

Here are four hints for the groupings in today’s Connections: Sports Edition puzzle, ranked from the easiest yellow group to the tough (and sometimes bizarre) purple group.

Yellow group hint: “Yer out!”

Advertisement

Green group hint: They score goals.

Blue group hint: Daddy dearest.

Purple group hint: Home, home on the…

Answers for today’s Connections: Sports Edition groups

Yellow group: Things an umpire calls.

Advertisement

Green group: An attacking player in soccer.

Blue group: MLB father-son duos.

Purple group: ____ range.

Read more: Wordle Cheat Sheet: Here Are the Most Popular Letters Used in English Words

Advertisement

What are today’s Connections: Sports Edition answers?

completed NYT Connections: Sports Edition puzzle for April 17, 2026

The completed NYT Connections: Sports Edition puzzle for April 17, 2026.

NYT/Screenshot by CNET

The yellow words in today’s Connections

The theme is things an umpire calls. The four answers are ball, out, safe and strike.

The green words in today’s Connections

The theme is an attacking player in soccer. The four answers are forward, No. 9, striker and target man.

Advertisement

The blue words in today’s Connections

The theme is MLB father-son duos. The four answers are Alou, Bonds, Fielder and Griffey.

The purple words in today’s Connections

The theme is ____ range. The four answers are 3-point, driving, long and mid.

Source link

Advertisement
Continue Reading

Tech

Blackmagic Camera for iOS now has a companion Watch app

Published

on

Blackmagic Camera is one of the more powerful third-party smartphone camera apps available and it’s now even more useful for solo creators. Blackmagic Design just announced that the latest iOS version 3.3 now supports Apple Watch, letting you control the app and monitor video remotely from your wrist. It also includes ATEM camera control so you can use your iPhone as a live studio camera.

With the new Camera Apple Watch companion app, you can remotely control and monitor your iPhone from anywhere within Wi-Fi range. It lets you start and stop recording, control zoom and adjust settings like frame rate, shutter speed (angle), white balance and ISO with a tap. You can also see a view of your video for framing control, though a Watch screen is probably a bit too small to accurately check focus.

The Watch app will benefit solo creators who want to mount their iPhone on a tripod to record standup or vlogging activities. To set it up, you install the Watch app through your iPhone and it will automatically connect and sync to your device.

Blackmagic Camera 3.3 iOS app

Use your iPhone as a broadcast camera? Sure, why not (Blackmagic Design)

The other key feature is iPhone control from Blackmagic’s ATEM Mini switcher used by streamers and broadcasters. To use it, you need the $420 Blackmagic Camera ProDock that gives your iPhone 17 Pro or iPhone 17 Pro Max an HDMI output, timecode, USB-C and other ports. Blackmagic Camera now lets you connect a single HDMI cable from the ProDock to an ATEM Mini switcher, then adjust settings, trigger recording, focus and zoom. It also offers a DaVinci primary color corrector so you can match and create digital film looks during live production.

Advertisement

Finally, Camera now supports Blackmagic’s “Focus and Zoom Demand” controls (a knob and handle) designed for broadcast cameras. When those controls and an iPhone 17 Pro/Pro Max are connected via USB-C to a ProDock as shown above, you can zoom and focus Camera app video without taking your hands off the tripod handles. Together with the ATEM feature, it lets you use an iPhone as a full broadcast camera, which looks slightly weird but is pretty cool.

On top of those features, Blackmagic Design also added ProRes RAW stabilization and general bug fixes and improvements. Blackmagic Camera for iOS 3.3 is available now as a free download from the Apple App Store.

Source link

Advertisement
Continue Reading

Tech

Trusti explores human-centered recommendations in digital platforms

Published

on

When a need arises, many people instinctively turn to someone they know. A quick message to a friend or a brief conversation often brings clarity, shaped by shared experiences and personal understanding. According to Stanley Fulton, founder of Trusti, this pattern has long guided everyday decisions, offering a sense of familiarity that extends beyond simple information. He notes that over time, digital platforms introduced new ways to explore options, creating access to vast amounts of feedback within seconds. 

The scale of online reviews reflects their growing role in decision-making. Data shows that the majority of consumers read reviews before making a purchase, and 93% say those reviews influence their decisions. “Even with how widely reviews are used today, the experience can still feel a bit scattered. People often find themselves checking multiple platforms just to feel confident, paying close attention to how recent, genuine, and thoughtfully written those reviews seem,” Fulton says. A survey highlights that consumers increasingly expect recent, high-quality reviews and timely responses from businesses, signaling a desire for engagement that feels active and personal.

Trusti was developed with this insight in mind, offering a platform where recommendations flow through micro-communities built on common experiences. These communities may include coworkers, parents, educators, or local groups, each contributing perspectives that feel relevant to their members. Fulton emphasizes that within this environment, reviews may take on a more conversational quality, echoing the way people exchange advice in daily life. The platform’s new four-click review process further supports this dynamic, allowing users to share their experiences with ease while maintaining clarity and simplicity.

To encourage engagement, Trusti incorporates a coin-based system that rewards participation across the platform. Users earn coins by sharing recommendations, contributing reviews, and engaging with their communities. These coins can be used within the Surf Shop, a marketplace where businesses introduce offerings and connect with interested audiences. This system creates a cycle of contribution and discovery, where participation supports visibility and interaction fosters connection.

Advertisement

The Surf Shop itself reflects an effort to make exploration feel dynamic and community-oriented. Members can browse recommendations, follow discussions, and encounter businesses highlighted by their networks. This environment encourages ongoing interaction, allowing users to remain connected to evolving conversations while discovering new opportunities within familiar circles. 

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

Another layer of insight emerges through the “Where the Pros Go” feature, which draws on professional networks to highlight trusted expertise. “Recommendations from experienced professionals tend to carry a certain level of credibility, since they come from real, hands-on knowledge. Bringing that perspective into the experience gives people a broader way to explore their options, with input from both personal connections and professional insight,” Fulton explains.

Advertisement

For businesses, particularly smaller enterprises, Trusti’s model may offer meaningful visibility. “Bigger organizations tend to gather a lot of reviews across different platforms, which makes them easier to find when people search. For smaller businesses, so much of their reputation lives in personal referrals and community connections, and that doesn’t always show up the same way online,” Fulton explains. Trusti provides a bridge by helping amplify those existing relationships in an online setting.

Fulton regards this aspect with a sense of purpose shaped by experience. “Small businesses represent effort you can feel and stories you can follow,” he remarks. “Helping them connect with people who appreciate that journey adds a different kind of value.” His view highlights the importance of creating pathways where local enterprises can be discovered through meaningful interactions, aligning digital presence with the trust they cultivate offline.

Trusti’s broader vision also connects to a nonprofit Fulton founded, The Each Child Foundation (ECF), which reflects his longstanding interest in supporting communities beyond commerce. The foundation focuses on early childhood development and family well-being, emphasizing the importance of creating environments where individuals can thrive. This connection adds another dimension to the platform’s purpose, linking everyday interactions with a wider commitment to social impact.

Overall, Trusti builds systems that align with how people naturally seek guidance, allowing digital tools to extend the reach of trusted relationships. “I like to call it HI or human intelligence, using human ingenuity to solve human pain points,” Fulton shares. This approach values both innovation and familiarity, bringing them together intuitively. 

Advertisement

As digital environments continue to evolve, approaches that listen closely to human behavior offer meaningful direction. Trusti illustrates how platforms can reflect everyday patterns of trust, creating connected experiences. In doing so, it contributes to a broader conversation about how technology can support relationships, helping individuals and businesses engage with one another naturally. 

Source link

Advertisement
Continue Reading

Trending

Copyright © 2025