US Hacking Tool Boss Stole and Sold Exploits To Russian Broker That Could Target Millions of Devices, DOJ Says

Federal prosecutors have revealed that Peter Williams, the former general manager of U.S. defense contractor L3Harris’s hacking tools division Trenchant, sold eight stolen software exploits to a Russian broker whose customers — including the Russian government — could have used them to access “millions of computers and devices around the world.”

Williams, a 39-year-old Australian national, pleaded guilty in October and admitted to earning more than $1.3 million in cryptocurrency from the sales between 2022 and 2025. In a sentencing memorandum filed Tuesday ahead of his anticipated February 24 sentencing in a Washington, D.C., federal court, the Justice Department asked the judge for nine years in prison, $35 million in restitution, and a maximum fine of $250,000.

Prosecutors described the unnamed Russian buyer — believed to be Operation Zero, which publicly claims to sell only to the Russian government — as “one of the world’s most nefarious exploit brokers.” Williams chose it because, by his own admission, “he knew they paid the most.” He also oversaw the wrongful firing of a subordinate who was blamed for the theft.


Read more of this story at Slashdot.

Siri’s AI Overhaul Delayed Again

Apple’s long-promised overhaul of Siri has hit fresh problems during internal testing, forcing the company to push several key features out of the iOS 26.4 update that was slated for March and spread them across later releases, Bloomberg is reporting.

The new Siri — first announced at WWDC in June 2024 and originally due by early 2025 — struggles to reliably process queries, takes too long to respond and sometimes falls back on OpenAI’s ChatGPT instead of Apple’s own technology, the report said. Apple has instructed engineers to begin testing new Siri capabilities on iOS 26.5 instead, due in May, and internal builds of that update include a settings toggle labeled “preview” for the personal data features. A more ambitious chatbot-style Siri code-named Campo, powered by Google servers and a custom Gemini model, is in development for iOS 27 in September.


Read more of this story at Slashdot.

Anthropic Safety Researcher Quits, Warning ‘World is in Peril’

An anonymous reader shares a report: An Anthropic safety researcher quit, saying the “world is in peril” in part over AI advances. Mrinank Sharma said the safety team “constantly [faces] pressures to set aside what matters most,” citing concerns about bioterrorism and other risks.

Anthropic was founded with the explicit goal of creating safe AI; its CEO Dario Amodei said at Davos that AI progress is going too fast and called for regulation to force industry leaders to slow down. Other AI safety researchers have left leading firms, citing concerns about catastrophic risks.


Read more of this story at Slashdot.

SpaceX takes down Dragon crew arm, giving Starship a leg up in Florida

Launch Complex 39A at NASA’s Kennedy Space Center in Florida is accustomed to getting makeovers. It got another one Wednesday with the removal of the Crew Access Arm used by astronauts to board their rides to space.

Construction workers first carved the footprint for the launch pad from the Florida wetlands more than 60 years ago. NASA used the site to launch Saturn V rockets dispatching astronauts to the Moon, then converted the pad for the Space Shuttle program. The last shuttle flight lifted off from Pad 39A in 2011, and the agency leased the site to SpaceX for use as the departure point for the company’s Falcon 9 and Falcon Heavy rockets.

SpaceX started launching from Pad 39A in 2017, then installed a new Crew Access Arm on the pad’s tower the following year, replacing the aging shuttle-era arm that connected to the hatches of NASA’s orbiters. SpaceX added the new arm ahead of the first test flight of the company’s human-rated Crew Dragon spacecraft in 2019. Astronauts started using the pathway, suspended more than 200 feet above the pad surface, beginning with the first crew flight on a Dragon spacecraft in 2020.

Read full article

Comments

With Ring, American Consumers Built a Surveillance Dragnet

Ring’s Super Bowl ad on Sunday promoted “Search Party,” a feature that lets a user post a photo of a missing dog in the Ring app and triggers outdoor Ring cameras across the neighborhood to use AI to scan for a match. 404 Media argues the cheerful premise obscures what the Amazon-owned company has become: a massive, consumer-deployed surveillance network.

Ring founder Jamie Siminoff, who left in 2023 and returned last year, has since moved to re-establish police partnerships and push more AI into Ring cameras. The company has also partnered with Flock, a surveillance firm used by thousands of police departments, and launched a beta feature called “Familiar Faces” that identifies known people at your door. Chris Gilliard, author of the upcoming book Luxury Surveillance, called the ad “a clumsy attempt by Ring to put a cuddly face on a rather dystopian reality: widespread networked surveillance by a company that has cozy relationships with law enforcement.”

Further reading: No One, Including Our Furry Friends, Will Be Safer in Ring’s Surveillance Nightmare, EFF Says


Read more of this story at Slashdot.

Trump orders the military to make agreements with coal power plants

On Wednesday, a fossil-fuel lobbying group called the Washington Coal Club awarded President Trump a trophy that named him the “Undisputed Champion of Clean, Beautiful Coal.” Trump took advantage of the opportunity to take his latest shot at reviving the fortunes of the US’s most polluting source of electricity: an executive order that would make the military buy it.

Coal is the second most expensive source of power for the US grid, eclipsed by gas, wind, solar, hydro—everything other than nuclear power. It also produces the most pollution, including particulates that damage human lungs, chemicals that contribute to acid rain, and coal ash that contains many toxic metals. It also emits the most carbon dioxide per unit of energy produced. Prior to Trump’s return to office, the US grid had been rapidly moving away from its use, including during his first term.

Despite the long-standing Republican claims to support free markets, the second Trump administration has determined that the only way to keep coal viable is direct government intervention. Its initial attempts involved declaring an energy emergency and then using that to justify forcing coal plants slated for closure to continue operations. The emergency declaration relied on what appears to be a tenuous interpretation of the Federal Power Act, and the administration was already facing a lawsuit challenging these actions.

Read full article

Comments

Diablo II: Resurrected is adding warlock as a brand new player class

Blizzard announced today that it is introducing the Warlock as a playable character to Diablo II: Resurrected. It brings the first new class in 25 years to this remaster of the original RPG. It’s part of the Reign of the Warlock DLC, which is available today and will run you $25. It also includes some other updates to the base game, including new items and a new pinnacle boss encounter against the Colossal Ancients. For those players who don’t already own the base game, you can also pick up the Infernal Edition of D2R for $40, which includes the new content.

When D2R launched in 2021, it was an impressively faithful recreation of the game that so many Blizzard fans continued to adore over the years. Bringing in a whole new player class is a big win for those players who have stuck with the game in its contemporary era.

If D2R isn’t your jam, though, Warlock is also being added to both Diablo 4 in its upcoming Lord of Hatred expansion this April and to Diablo Immortal. So aside from Diablo 3 not getting much love, just about all fans of the franchise will have a chance to get into the demon-summoning groove. Blizzard’s 30th anniversary showcase video has all the details about what the other Diablo titles have in store during this year.

Blizzard has been keeping the news and updates rolling over the past few weeks in honor of the company’s 35th anniversary. One of the more notable updates came for team hero shooter Overwatch, which lost the 2 in its name, but gained five more heroes in its big update yesterday.

This article originally appeared on Engadget at https://www.engadget.com/gaming/diablo-ii-resurrected-is-adding-warlock-as-a-brand-new-player-class-000130003.html?src=rss

Biwin Black Opal DW100 DDR5 Review: High-Speed RAM For AMD And Intel PCs

Biwin Black Opal DW100 DDR5 Review: High-Speed RAM For AMD And Intel PCs
Biwin Black Opal DW100 (48GB, DDR5-6000): Currently $589 The new AMD Ryzen 7 9850X3D is a clone of the existing 8-core Ryzen 7 9800X3D, but with higher clocks to boost performance and solidify its gaming leadership.   Excellent Timings Out Of The Box RGB LED Accents With LED Sync Supports Both EXPO And XMP Minimal Overclocking Headroom…

El Paso airport closed after military used new anti-drone laser to zap party balloon

On Tuesday night, the Federal Aviation Administration closed airspace up to 18,000 feet above the El Paso International Airport in Texas, saying the restrictions would be in place for 10 days. Then, less than 10 hours later, the federal agency reopened the airspace, allowing planes to land and take off at the busy airport.

About an hour after lifting the restrictions, US Secretary of Transportation Sean Duffy, whose responsibilities include overseeing the FAA, explained the unexpected closure by saying, “The FAA and DOW acted swiftly to address a cartel drone incursion.” (The Trump Administration refers to the Department of Defense as the Department of War, or DOW, although its legal name remains the former.)

Not everyone agrees with Duffy’s account.

Read full article

Comments

Microsoft’s February Update Fixes 6 Actively Exploited Zero Days, Update ASAP

Microsoft's February Update Fixes 6 Actively Exploited Zero Days, Update ASAP
Microsoft is addressing nearly 60 CVEs with its upcoming “Patch Tuesday” update for Windows 11, six of which are actively-exploited zero-day vulnerabilities. Per KrebsOnSecurity, the most sever CVEs are CVE-2026-21510, CVE-2026-21513, CVE-2026-21514, CVE-2026-21533, CVE-2026-21519, and CVE-2026-21525. The issues outlined in these Common Vulnerabilities

Is Linux Mint Burning Out? Developers Consider Longer Release Cycle

BrianFagioli writes: The Linux Mint developers say they are considering adopting a longer development cycle, arguing that the project’s current six month cadence plus LMDE releases leaves too little room for deeper work. In a recent update, the team reflected on its incremental philosophy, independence from upstream decisions like Snap, and heavy investment in Cinnamon and XApp. While the release process “works very well” and delivers steady improvements, they admit it consumes significant time in testing, fixing, and shipping, potentially capping ambition.

Mint’s next release will be based on a new Ubuntu LTS, and the team says it is seriously interested in stretching the development window. The stated goal is to free up resources for more substantial development rather than constant release management. Whether this signals bigger technical changes or simply acknowledges bandwidth limits for a small team remains unclear, but it marks a notable rethink of one of desktop Linux’s most consistent release rhythms.


Read more of this story at Slashdot.

Linus Torvalds Rejects MMC Changes For Linux 7.0 Cycle: “Complete Garbage”

The Linux MultiMediaCard “MMC” subsystem was set to see some new hardware support, optimized support for secure erase/trim on some eMMCs, and a variety of other improvements. But all of the MMC changes are rejected and will be for the duration of the Linux 7.0 cycle due to an apparent lack of testing and vetting via linux-next that led Linus Torvalds to calling it “complete garbage” and “untested crap”…

Once-hobbled Lumma Stealer is back with lures that are hard to resist

Last May, law enforcement authorities around the world scored a key win when they hobbled the infrastructure of Lumma, an infostealer that infected nearly 395,000 Windows computers over just a two-month span leading up to the international operation. Researchers said Wednesday that Lumma is once again “back at scale” in hard-to-detect attacks that pilfer credentials and sensitive files.

Lumma, also known as Lumma Stealer, first appeared in Russian-speaking cybercrime forums in 2022. Its cloud-based malware-as-a-service model provided a sprawling infrastructure of domains for hosting lure sites offering free cracked software, games, and pirated movies, as well as command-and-control channels and everything else a threat actor needed to run their infostealing enterprise. Within a year, Lumma was selling for as much as $2,500 for premium versions. By the spring of 2024, the FBI counted more than 21,000 listings on crime forums. Last year, Microsoft said Lumma had become the “go-to tool” for multiple crime groups, including Scattered Spider, one of the most prolific groups.

Takedowns are hard

The FBI and an international coalition of its counterparts took action early last year. In May, they said they seized 2,300 domains, command-and-control infrastructure, and crime marketplaces that had enabled the infostealer to thrive. Recently, however, the malware has made a comeback, allowing it to infect a significant number of machines again.

Read full article

Comments