Citizen Lab says it has documented the first publicly confirmed case of zero-click mercenary spyware being delivered through targeted online ads, a technique it calls “AdFection.” “There has been a lot of buzz that online ads can be used to identify and automatically hack targets with pinpoint precision, but now for the first time, we have concrete technical evidence showing this process in action,” said Bill Marczak, a researcher at Citizen Lab. The Guardian reports: Citizen Lab, a digital investigations research unit at the University of Toronto, said it believed dozens of devices at the Qatari broadcaster Al Jazeera had been compromised by spyware delivered through ads run by Discover-Tech, which describes itself as a specialised digital advertising agency. According to Citizen Lab, Discover-Tech operates a software platform called Controlium that allows its clients to “mass-profile and deanonymize” internet users then covertly hack targets with third-party spyware. Unlike infections that rely on people interacting with links or files, the spyware requires no interaction from the victim to be installed, making it a new delivery technique, Citizen Lab says. The infections happen without a user’s knowledge, and in a matter of seconds, according to Citizen Lab.

“[The online advertising] ecosystem is being weaponized at a massive scale to profile millions of users, then silently infect targets with zero-click mercenary spyware,” the report says. According to the report, Controlium is able to harvest a user’s identity and IP address when the user is shown a seemingly benign custom-created ad — for example, for a digital game or a telecoms service. If the user has been selected as a target for hacking, a mercenary spyware firm can then send a malicious code containing spyware to their device, the researchers say. They say that millions of users worldwide have been served ads by Discover-Tech since 2024, including in Yemen, Brazil, Mexico and Czechia. […] The full extent of the targeting allegedly enabled by Discover-Tech is unknown. Citizen Lab’s findings join mounting evidence that the opaque arrangements underpinning the world of online advertising can be leveraged for surveillance.

Read more of this story at Slashdot.

The Liberty Bell, with its famous crack, hasn’t been rung in 180 years, but that hasn’t stopped scientists from pondering what the bell might have sounded like when tolling. In honor of the nation’s 250th anniversary, researchers at Penn State University have modeled its acoustic properties, drawing on data collected from one of the bell’s replicas. The work was first presented at a meeting of the Acoustical Society of America in Philadelphia earlier this year, followed by an article in Physics Today.

Historians aren’t sure when exactly the Liberty Bell acquired its distinctive crack, just that it occurred sometime between 1817 and 1846. An 1846 account in the Public Ledger described the ringing of the bell on February 23 that year and mentioned that the bell had developed a crack, which someone had attempted to fix by filing the sides down. But it didn’t work: The February 23 ringing extended the crack even more, so much so that “the old Independence Bell… now hangs in the great steeple irreparably cracked and forever dumb.” Nobody has heard it ring since.

This wasn’t the first time the bell had cracked; the rim cracked shortly after it arrived in Philadelphia in 1752, the very first time the clapper struck while testing the sound. It was recast by two local foundry workers, John Pass and John Stow, not once but twice, because the first recast produced a sound that one bystander likened to coal scuttles banging together.

Read full article

Comments

Russian drones are suspected of sinking a cargo ship and leaving chemical tankers ablaze near the Black Sea coasts of Bulgaria and Romania, respectively. The latest attacks mean that at least seven ships have been attacked in the exclusive economic zones of NATO member countries—and even within Romania’s territorial waters if Russian involvement is confirmed in the case of the chemical tankers.

Such attacks have spurred requests for NATO to redeploy counter-drone systems to provide more protection. In a social media post on October 15, NATO Secretary General Mark Rutte stated that NATO had increased “counter-drone capabilities” along the alliance’s eastern flank after meeting with the leaders of Bulgaria and Romania.

The latest attacks this week occurred within 24 hours between October 14 and October 15, when the two chemical tankers were set afire after Russian drones were detected in Romanian airspace, according to Deutsche Welle. Both ships were sitting at anchor near the mouth of the Sulina canal that connects the Black Sea to the Danube River, which has become a crucial shipping export route for Ukraine, Reuters reported.

Read full article

Comments

One reason plastics are used so often is that they’re chemically inert, meaning bags, food containers, and cups don’t react with what we put in them. Yet they can still break down into microplastics, which turn up in drinking water, human blood, arteries, and brains. The consequences of that are uncertain.

“Whether microplastics can directly cause human disease is still being researched,” said Wei Min, a chemist at Columbia University. In a new Nature study, Min’s team took a step toward answering this question by demonstrating that microplastics are likely not as chemically inert as we might expect.

Microdroplet chemistry

Min’s lab has spent years working on microdroplet chemistry, studying how water broken into tiny droplets behaves at its boundary with air. These droplets have been reported to generate reactive oxygen species, or ROS, a family of harmful, oxygen-containing molecules. “ROS will essentially bump into proteins, lipids, DNA, and cause damage,” Min said. “You could break a DNA strand into segments. You could mutate DNA; you could misfold proteins.”

Read full article

Comments

On Thursday, Donald Trump called off the Pentagon’s highly controversial plans to livestream a firing squad execution that is still on schedule for December 3.

Trump supports the execution of Nidal Hasan, who was convicted of killing 13 people and wounding more than 30 others in the 2009 mass shooting at Fort Hood. But sources close to Trump told CNN that the president was blindsided last week when Secretary of Defense Pete Hegseth announced that the event—which is the first US execution of a soldier since World War II—would be livestreamed.

Backlash to the livestream was immediate and crossed political divides. On the morning Trump canceled the plans, an ABC News poll found 8 in 10 Americans were against the livestream, including a 55 percent majority of MAGA Republicans.

Read full article

Comments

Cars: sometimes they wish they were boats. Especially when you accidentally drive them into a river because, “I was just following the GPS.” If I had a new car for every time my girlfriend drove the old one into a river because she was just following the GPS, I wouldn’t be taking the bus to work. I’m joking, that never happened. She thought she knew a shortcut.

This is a video of the world’s largest amphibious car meetup (there were 70 vehicles present), held in Kladow Harbor in Berlin. But did anybody sink, and, more importantly, were there any mermaid or pirate treasure sightings on their way down? So going forward are we going to call car-boats coats or bars? “Amphibious cars.” But it’s so loooong. Plus a lot of people probably don’t even know what amphibious means. I think it means you make love like a salamander. “How do salamanders make love?” Not when I’m watching, unfortunately.

Video below, all the cars cruising together starts around 6:40.

Representative Ritchie Torres wants the FTC to establish regulations ensuring you can play the games you’ve purchased.

Meta has released Muse Spark Open, an 816-billion-parameter open-weight model optimized to run locally across two 512GB M5 Ultra Mac Studios using Apple’s MLX framework. Meta says it’s the “most capable U.S. open-weight model to date.” MacRumors reports: Muse Spark Open has 816 billion total parameters with 42 billion active parameters and a 1 million-token context window. It is meant for coding and agentic work, and Meta says it excels at extended tasks, multi-step reasoning, and software engineering. The new Muse model was tuned to run on Mac Studio, and Meta says the Mac Studio paired with Muse Spark Open is the “best way to run a powerful model on your own desktop.”

From Meta: “Apple’s unified memory architecture lets the M5 Ultra’s integrated GPU use up to 512 GB per Mac Studio, so two machines can hold an entire model. And the chip’s 1.2 TB/s of memory bandwidth is fast enough to read the small slice each token needs. The result is two Mac Studios behave like one supercomputer with a terabyte of unified memory.” Apple hasn’t released the 512GB Mac Studio as of yet, but it’s supposed to be coming later this month. It won’t be cheap, because the 256GB Mac Studio is already priced over $10,000.

Read more of this story at Slashdot.

The FTC is investigating possible consumer harms at two major AI companies.

Microsoft says recent Windows 11 updates have made the operating system up to 20% more responsive by improving memory management and reducing background resource use. “A big part of that work is making smarter use of memory and system resources,” says Navjot Virk, corporate vice president of Windows experiences at Microsoft. “We’ve improved memory management and efficiency across Windows to help keep more of your PC’s resources focused on what you’re actively doing.” The Verge reports: The improvements to memory management now make a “meaningful difference” on PCs with just 8GB of RAM. “Windows can now keep up to 2GB more of your active data in memory instead of moving it to slower storage,” says Virk. “For example, on PCs with 8GB of memory or less, Widgets load only when you open them, making more than 200 MB of memory available for your apps and other work.”

Microsoft has also made Windows Update less disruptive, cleaned up the Widgets section, and finally allowed the taskbar to be repositioned to the sides or top of a display. Windows Hello sign-in has also been sped up, and Bluetooth pairing is more reliable, “including an AirPods pairing experience that’s up to 15 seconds faster.”

The next big step is a new Windows Search experience that’s a lot faster and more capable. […] It’s currently available for Windows Insiders, and Microsoft says it will “roll out more broadly later this year.”

Read more of this story at Slashdot.

While ChatGPT might have been first out of the generative AI gate, Google has established itself as more than a major player in this new technological race. While plenty of people use Gemini free of charge, there are also a plethora of paid subscribers who want access to Google’s latest and greatest models. Like other AI subscriptions, Google’s best plans are wildly expensive, but it’s cheapest paid tier, AI Plus, is much more reasonable: For $4.99 per month, you get access to faster Gemini models, and bump your Google storage up to 400GB to boot.

But if you’re subscribed to Google AI Plus for access to better versions of Gemini, change is coming. Google is warning subscribers this week that they’re losing a major perk—perhaps the perk—of the AI Plus subscription tier, as subscribers will soon no longer have access to Gemini’s advanced models.

How Google is changing its subscription tiers

As 9to5Google reports, this isn’t necessarily out of the blue. When Google rolled out Gemini 4 Argon, the company advertised that its latest model would only be available on AI Pro and AI Ultra plans, not AI Plus. At the same time, the company said that its plans meant AI Plus subscribers would soon lose access to all Gemini Pro models. It now seems those plans are now rolling out—one Redditor shared an email they received from Google as an AI Plus subscriber, which reads:

We wanted to let you know about changes to the models that you can access with your Google AI Plus plan.

Starting on 13 November 2026, the ability to select Pro models in both the Gemini app and AI Mode in Google Search will only be available to Google AI Pro subscribers and above. You’ll still have access to our latest Flash-Lite model and Flash, built for speed and intelligence. Your previous chats using the Pro model can be continued with a different model.

To learn more about these changes, you can visit our Help Centre article for additional details. You can manage or cancel your subscription at any time.

Thank you for being a Google AI Plus subscriber.

– The Google One team

According to the message, AI Plus subscribers have less than a month left to access Gemini Pro models. On Nov. 13, these users will be limited to Flash-Lite and Flash in both the Gemini app and AI Mode. While it’s fortunate that previous Pro chats will still be available, users will need to use one of these less powerful models if they want to continue those conversations.

So now, access to models in Google’s AI subscriptions looks like the following:

• Free: Gemini Flash-Lite

• AI Plus ($4.99 per month): Gemini Flash-Lite and Gemini Flash

• AI Pro ($19.99 per month): AI Plus perks, plus Gemini Pro models and access to Gemini 4 Argon

• AI Ultra 5x ($99.99 per month): AI Pro perks, plus higher access to Gemini Pro models and 5x higher usage limits

• AI Ultra 20x ($199.99 per month): AI Ultra 5x perks plus 20x higher usage limits and highest access to Pro models

It always rubs me the wrong way when companies take away features after customers have already paid for them. If Pro models were always locked to a higher tier I could think, whatever, that’s just what Google charges. But the fact that AI Plus subscribers have paid for access to Pro models, and now the same $4.99 subscription is missing a major feature for no particular reason, is, in my view, scummy. If you’re subsequently rethinking your choice of Google subscription, here is a full breakdown of all perks across the various subscription options.