Connect with us

Tech

VMware ESXi flaw now exploited in ransomware attacks

Published

on

VMware

CISA confirmed on Wednesday that ransomware gangs have begun exploiting a high-severity VMware ESXi sandbox escape vulnerability that was previously used in zero-day attacks.

Broadcom patched this ESXi arbitrary-write vulnerability (tracked as CVE-2025-22225) in March 2025 alongside a memory leak (CVE-2025-22226) and a TOCTOU flaw (CVE-2025-22224), and tagged them all as actively exploited zero-days.

“A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox,” Broadcom said about the CVE-2025-22225 flaw.

Wiz

At the time, the company said that the three vulnerabilities affect VMware ESX products, including VMware ESXi, Fusion, Cloud Foundation, vSphere, Workstation, and Telco Cloud Platform, and that attackers with privileged administrator or root access can chain them to escape the virtual machine’s sandbox.

According to a report published last month by cybersecurity company Huntress, Chinese-speaking threat actors have likely been chaining these flaws in sophisticated zero-day attacks since at least February 2024.

Advertisement

Flagged as exploited in ransomware attacks

In a Wednesday update to its list of vulnerabilities exploited in the wild, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) said CVE-2025-22225 is now known to be used in ransomware campaigns but didn’t provide more details about these ongoing attacks.

CISA first added the flaw to its Known Exploited Vulnerabilities (KEV) catalog in March 2025 and ordered federal agencies to secure their systems by March 25, 2025, as mandated by Binding Operational Directive (BOD) 22-01.

“Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable,” the cybersecurity agency says.

Ransomware gangs and state-sponsored hacking groups often target VMware vulnerabilities because VMware products are widely deployed on enterprise systems that commonly store sensitive corporate data.

Advertisement

For instance, in October, CISA ordered government agencies to patch a high-severity vulnerability (CVE-2025-41244) in Broadcom’s VMware Aria Operations and VMware Tools software, which Chinese hackers have exploited in zero-day attacks since October 2024.

More recently, CISA has also tagged a critical VMware vCenter Server vulnerability (CVE-2024-37079) as actively exploited in January and ordered federal agencies to secure their servers by February 13.

In related news, this week, cybersecurity company GreyNoise reported that CISA has “silently” tagged 59 security flaws as known to be used in ransomware campaigns last year alone.

Modern IT infrastructure moves faster than manual workflows can handle.

In this new Tines guide, learn how your team can reduce hidden manual delays, improve reliability through automated response, and build and scale intelligent workflows on top of tools you already use.

Advertisement

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Shares jump for Chinese AI start-up Zhipu after GLM-5 launch

Published

on

GLM-5 was entirely trained using Chinese-made Huawei Ascend chips.

Investors rallied behind Chinese AI start-up Zhipu after its latest agentic model, claiming to represent a “generational leap in AI capability”, launched yesterday (11 February).

GLM-5 is a fifth-generation large language model (LLM) developed by the 2019-founded Zhipu AI. It offers around 745bn total parameters and 44bn active parameters per inference.

The model is engineered for agentic intelligence, advanced multi-step reasoning and “frontier-level” performance across coding, creative writing and complex problem-solving, its maker said.

Advertisement

The open-weight model is comparable to OpenAI’s GPT-5.2 and Anthropic’s Claude Opus 4.5, according to Artificial Analysis ranks, and has been trained entirely using Chinese-made Huawei Ascend chips.

According to Zhipu, “full independence” from US-manufactured hardware positions GLM-5 as a “milestone in China’s drive toward self-reliant AI infrastructure”. Zhipu shares rose by as much as 34pc following GLM-5’s launch.

Zhipu’s GLM-5 surpasses a new offering – Kimi K2.5 – from its rival, the Alibaba-backed Moonshot AI, in various benchmark ratings.

Capitalising on GLM-5’s launch, Zhipu raised the pricing of its GLM Coding Plan by 30pc. The coding plan is comparable to Anthropic’s Claude Code, which is unavailable in China.

Advertisement

Meanwhile, another Chinese AI competitor – MiniMax – saw its share price rise by 13pc following the launch of its updated M2.5 model earlier this week.

Last December, Zhipu announced the launch of a $560m share sale. Days later, in January, MiniMax went public and raised around $619m.

Meanwhile, in December, Moonshot AI reportedly raised $500m from investors including Alibaba and IDG, seeking a valuation of as much as $4.3bn.

These new launches come ahead of DeepSeek’s new V4 model, expected to come out later this month. According to reports, the new DeepSeek model could outperform rivals ChatGPT and Claude, particularly on tasks that involve long coding prompts.

Advertisement

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Source link

Advertisement
Continue Reading

Tech

Apple's bad week: FTC pressure, delayed Siri AI, and a stock sell-off

Published

on


The latest catalyst for the sell-off is an FTC letter sent to Apple CEO Tim Cook, alleging that Apple News promotes liberal media outlets while suppressing conservative ones. According to the agency, this alleged left-wing bias violates federal consumer protection laws and raises “serious questions” about whether the company is…
Read Entire Article
Source link

Continue Reading

Tech

Brain-inspired chip is helping robots to see faster and in real time

Published

on


The breakthrough builds on neuromorphic engineering, a field that designs hardware modeled after the human brain. Unlike traditional processors, which separate memory and computation, neuromorphic chips integrate both functions, enabling faster and more energy-efficient data handling. This biologically inspired approach has long been considered a promising way to narrow the…
Read Entire Article
Source link

Continue Reading

Tech

Margo’s Got Money Troubles: everything we know so far about the upcoming Apple TV series

Published

on

MARGO’S GOT MONEY TROUBLES: KEY INFO

– No official trailer released yet
– Based on the 2024 novel of the same name by Rufi Thorpe
– Premieres globally on Apple TV on April 15, 2026
– It’s an eight episode limited-series
– Stars Elle Fanning, Michelle Pfeiffer, Nicole Kidman, Nick Offerman and more

Margo’s Got Money Troubles is a new Apple Original limited series that’s set to premiere globally on Wednesday April 15, 2026, with the first three episodes available to watch at launch.

The highly anticipated series is based on Rufi Thorpe’s 2024 novel of the same name. It follows the story of Margo Millet, a young woman navigating unexpected motherhood and mounting debt who turns to OnlyFans to stay afloat.

Advertisement

Source link

Advertisement
Continue Reading

Tech

A YouTube Apple Vision Pro app is finally here, with 3D video support and more

Published

on

A YouTube app is finally available for the Apple Vision Pro, years after Google confirmed that it was “on the roadmap.”

Two sleek black-and-white mixed reality headsets with glossy curved fronts and visible cameras, resting together on a dark surface against a dark background.
Apple Vision Pro owners just got a new way to watch YouTube.

Until now, Apple Vision Pro owners have been reduced to watching YouTube via the Safari web browser or using a third-party app. Now, they can download the free, official YouTube app from the headset’s App Store.
Google seemed intent on ensuring that its website would be the only way to watch YouTube initially. The company had Juno, a third-party YouTube player, kicked off the App Store in late 2024.
Continue Reading on AppleInsider | Discuss on our Forums

Source link

Continue Reading

Tech

BBC’s Tomorrow’s World Segment from 2000 Shows When Mobile Phones Promised to Become Everything

Published

on

BBC Tomorrow's World Mobile Phones WAP
Mobile phones had long been an integral part of our daily lives when April 2000 arrived. People took them everywhere because they were a must-have for younger users. Reporter Lindsey Fallow looked closely at how these phones were on the verge of becoming something major, such as having continual access to email and the internet right in the palm of your hand.



Lindsey starts with checking mobile email. Anyone with a phone that was less than two years old could send and receive text messages. There were services that would forward emails from your regular email account to your phone as text messages, and the greatest part was that registration was free, however each downloaded message cost approximately 6 pence ($.15 today). To respond, you would need to construct a text message, include a specific code at the beginning, and submit it to your service provider. Typing on such tiny keypads took a long time, and the expense quickly mounted up.

Sale


Google Pixel 9a with Gemini – Unlocked Android Smartphone with Incredible Camera and AI Photo Editing…
  • Google Pixel 9a is engineered by Google with more than you expect, for less than you think; like Gemini, your built-in AI assistant[1], the incredible…
  • Take amazing photos and videos with the Pixel Camera, and make them better than you can imagine with Google AI; get great group photos with Add Me and…
  • Google Pixel’s Adaptive Battery can last over 30 hours[2]; turn on Extreme Battery Saver and it can last up to 100 hours, so your phone has power…

BBC Tomorrow's World Mobile Phones WAP
She demonstrates with a short exchange, beginning with an incoming message that reads “Can you meet me for lunch to talk about the report? Can you find a restaurant sushi?” she asks, wondering where to eat. She pulls out a WAP phone, which she refers to as a “mobile with internet built in,” and we can see why: previous attempts to get phones to access the internet failed because the whole web requires a large color screen, and most mobiles at the time only had a couple of inches of screen space.

BBC Tomorrow's World Mobile Phones WAP
WAP phones changed all that by rewriting web material specifically for small screen sizes. Pages had to be recoded, so the entire internet remained out of reach. Still, useful sites existed. Fallow navigates to the BBC’s pages and to H2G2—a user-edited guide inspired by The Hitchhiker’s Guide to the Galaxy, full of searchable entries anyone could contribute to. She searches for lunch spots and locates a sushi restaurant right around the corner. The screen shows basic text results, no images or fancy layouts, but the information arrives where she needs it.

BBC Tomorrow's World Mobile Phones WAP
These WAP phones were retailing for about £130 ($334 today) with a contract, and more were on their way. Services were also constantly expanding, and Lindsey highlights both progress and problems. When a follow-up email arrives stating that lunch has been canceled and that the report should be sent instead, responding with only text messages is inconvenient and can take hours to complete.

BBC Tomorrow's World Mobile Phones WAP
Following that came the early smartphones. Lindsey tries out a prototype with a much bigger screen. It includes a full web browser for WAP material, a calendar, and a note feature, as well as handwriting recognition on a touch-sensitive surface. If the handwriting does not work out, a little keyboard appears that you can use. Navigation is a lot speedier and easier on the eyes. These devices promised to combine the power of the web with organization and communication, all in one convenient package. They were expected to hit the shelves that summer for between £300 to £400 ($770 to $1,029 today) with a contract.

Advertisement

Source link

Continue Reading

Tech

Stanhope AI, co-founded by Irish woman Rosalyn Moran, raises $8m

Published

on

The investment marks a significant moment for the organisation as it prepares to advance its ‘Real World Model’.

Stanhope AI, a London-based deep-tech start-up, has announced the closure of an $8m seed funding round. The round attracted a transatlantic cohort of investors led by Frontline Ventures, with participation from Paladin Capital Group and Auxxo Female Catalyst Fund, as well as follow-on investment from UCL Technology Fund and MMC Ventures.

A 2023 spin-out from University College London and King’s College London, Stanhope AI was founded by Irish computational neuroscientist Prof Rosalyn Moran and theoretical neurobiologist Prof Karl Friston. 

The team at Stanhope AI has been building a new AI model for autonomous systems that allows machines to “mimic the human brain”, drawing from Friston’s ‘Free Energy Principle’ – a framework developed to explain how intelligent systems minimise uncertainty through continuous perception and action.

Advertisement

According to the start-up, this “brain-inspired paradigm”, known as active inference, enables machines to learn and adapt on the move, which Stanhope AI believes is a crucial capability missing from large language model-based systems that rely on large static datasets.

Stanhope AI’s technology is currently being tested in autonomous drone and robotics applications with international partners, with the goal of teaching machines to behave more intelligently in unpredictable, real-world environments.

According to the organisation, the investment marks a significant milestone as Stanhope AI advances its ‘Real World Model’, which it described a next-generation framework for adaptive intelligence, “designed to function in dynamic, physical environments beyond the limitations of large language models”.

“We’re moving from language-based AI to intelligence that possesses the ability to act to understand its world, a system with a fundamental agency,” said Moran, who is also the company’s CEO. “Our approach doesn’t just process words, it understands context, uncertainty and physical reality.”

Advertisement

In a post on LinkedIn, she explained that the investment is about more than just fresh capital, stating it is a “clear point of technology maturity”.

“Over the past two years in London, we’ve progressed from foundational research and early prototypes to production-grade systems operating in real customer environments, engineered for explainability and scalability,” she said. “The round is also a validation of that journey and evidence that our technology performs beyond the lab.

“We’re proud to be building from London, a deep-tech ecosystem increasingly global in its reach, and equally proud to be backed by investors spanning the UK, US and Europe. That transatlantic support reflects both the ambition of the technology and the scale of the opportunity ahead.”

She added that the funding will accelerate deployments, expand the team and advance the “next phase of applied AI via active inference”.

Advertisement

In other AI start-up funding news, on Tuesday (10 February), Dublin-based property management AI start-up Marc raised $1m from angel investors in a pre-seed funding round. The platform uses AI to analyse fragmented sources of vendor contract and invoice data related to property units and consolidates the information for use by owners and managers to help identify discrepancies leading to overpayments.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Source link

Advertisement
Continue Reading

Tech

Metal Gear Solid 4 finally comes to PC and modern consoles in Master Collection Vol 2

Published

on


The compilation continues Konami’s recent strategy of remastering the franchise’s most celebrated entries for today’s hardware while retaining their original design and character.
Read Entire Article
Source link

Continue Reading

Tech

US Government Will Stop Pollution-Reduction Credits for Cars With ‘Start-Stop’ Systems

Published

on

Starting in 2009, the U.S. government have given car manufacturers towards reducing greenhouse gas emissions if they included “start-stop” systems in cars with internal combustion engines. (These systems automatically shut off idling engines to reduce pollution and fuel consumption.)

But this week the new head of America’s Environmental Protection Agency eliminated the credits, reports Car and Driver:


[America’s] Environmental Protection Agency previously supported the system’s effectiveness, noting that it could improve fuel economy by as much as 5 percent. That said, the use of these systems has never actually been mandated for automakers here in the States. Companies have instead opted to install the systems on all of their vehicles to receive off-cycle credits from the feds. Virtually every new vehicle on sale in the country today also allows drivers to turn the feature off via a hard button as well. Still, that apparently isn’t keeping the EPA from making a move against the system.

“I absolutely hate Start-Stop systems,” writes long-time Slashdot reader sinij (who says they “specifically shopped for a car without one.”) Any other Slashdot readers want to share their opinions?

Advertisement

Post your own thoughts and experiences in the comments. Start-Stop systems — fuel-saving innovation, or a modern-day auto annoyance”

Source link

Continue Reading

Tech

Apple Patches Decade-Old IOS Zero-Day, Possibly Exploited By Commercial Spyware

Published

on

This week Apple patched iOS and macOS against what it called “an extremely sophisticated attack against specific targeted individuals.”

Security Week reports that the bugs “could be exploited for information exposure, denial-of-service (DoS), arbitrary file write, privilege escalation, network traffic interception, sandbox escape, and code execution.”


Tracked as CVE-2026-20700, the zero-day flaw is described as a memory corruption issue that could be exploited for arbitrary code execution… The tech giant also noted that the flaw’s exploitation is linked to attacks involving CVE-2025-14174 and CVE-2025-43529, two zero-days patched in WebKit in December 2025…

The three zero-day bugs were identified by Apple’s security team and Google’s Threat Analysis Group and their descriptions suggest that they might have been exploited by commercial spyware vendors… Additional information is available on Apple’s security updates page.

Advertisement

Brian Milbier, deputy CISO at Huntress, tells the Register that the dyld/WebKit patch “closes a door that has been unlocked for over a decade.”

Thanks to Slashdot reader wiredmikey for sharing the article.

Source link

Advertisement
Continue Reading

Trending

Copyright © 2025