This week, New York City is hosting AWS Summit, bringing together builders, customers, and AWS teams for a full day of announcements, demos, and technical sessions at the Javits Center. I wrote blog posts for some of the Summit launches, so I am excited to see them go live this week. I just won’t be […]
Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang. The post Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges appeared first on SecurityWeek .
Through more than two decades of travel for both work and leisure, my packing list has evolved from a random assortment of gadgets and accessories thrown together at the last minute into a refined checklist of gear honed by trial and error. The right packing list, I've found, can be the difference between a good […]
Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all delivered within a tight timeframe. That usually means sharing a temporary "first-day" password so employees can access systems for the first time. The issue is that these passwords don't always stay temporary. They may be sent over email or SMS, reused across accounts,
The pharmaceutical giant says the attackers gained access to personal data stored on the compromised systems. The post Ozempic Maker Novo Nordisk Says Hackers Breached IT Systems appeared first on SecurityWeek .
French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and user data from the sovereign Tchap platform. The post French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker appeared first on SecurityWeek .
Cybersecurity researchers have discovered a network of 152 Google Chrome extensions that act as new tab live wallpaper add-ons to distribute a potentially unwanted program (PUP) family. The cluster spans 38 separate Chrome Web Store publisher accounts and three brand backends: tabplugins[.]com, yowgames[.]com, and chromewallpaper[.]com. They have been collectively installed 105,000 times. The
On paper, the Honor Magic V6 sounds like a tremendous leap forward for foldable phones: It's the thinnest one yet, with the biggest battery, and the best water-resistance ever. In practice, only the bigger battery feels like a meaningful improvement. The other upgrades are only fractionally superior to what came before. This isn't entirely Honor's […]
In recent years, Arm64 has been taking the cloud service provider world by storm. Recent reports indicate that, as of the end of 2025, over 50% of new instances on AWS and over 33% on Azure...
The extortion group threatens to leak 297 GB of data allegedly stolen from the Council of Europe, including employee personal information. The post ShinyHunters Claims Council of Europe Hack appeared first on SecurityWeek .
The European Commission is assessing the implications of the US order that forced Anthropic to shut down Fable 5 and Mythos 5 worldwide. European researchers are debating the right response: building their own foundation models or securing access through contracts. But building out homegrown infrastructure would require computing capacity, energy, and competitive providers that Europe currently lacks, experts warn. The article Anthropic shutdown sparks sovereignty debate across Europe appeared first on The Decoder .
Developers & Open Source · microsoft/playwright Releases
🔑 WebAuthn passkeys New Credentials virtual authenticator, available via browserContext.credentials , lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers: const context = await browser . newContext ( ) ; // Seed a passkey your backend provisioned for a test user. await context . credentials . create ( 'example.com' , { id : credentialId , userHandle , privateKey , publicKey , } ) ; await context . credentials . install ( ) ; const page = await context . newPage ( ) ; await page . goto ( 'https://example.com/login' ) ; // The page's navigator.credentials.get() is answered with the seeded passkey. You can also let the app register a passkey once in a setup test, read it back with credentials.get() , and seed it into later tests — see Credentials for details. 🗃️ Web Storage New WebStorage API, available via page.localStorage and page.sessionStorage , reads and writes the page's storage for the current origin: await page . localStorage . setItem ( 'token' , 'abc' ) ; const token = await page . localStorage . getItem ( 'token' ) ; const items = await page . sessionStorage . items ( ) ; New APIs Network apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr() . Browser and Screencast New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser. New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions. The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser. Test runner The testOptions.video option now supports the same set of modes as trace : new 'on-all-retries' , 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode. Supported expect.soft.poll(...) . New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator. New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed. testInfo.errors now lists each sub-error of an AggregateError as a separate entry. New -G command line shorthand for --grep-invert . 🛠️ Other improvements Playwright now supports Ubuntu 26.04. HAR and trace recordings now include WebSocket requests. Browser Versions Chromium 149.0.7827.55 Mozilla Firefox 151.0 WebKit 26.5 This version was also tested against the following stable channels: Google Chrome 149 Microsoft Edge 149
Anthropic's belief in its own commitment to safety gives the company license to aggressively favor its business and even challenge the U.S. government.
An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way to break into the sites. When a site administrator was logged in as the file loaded, the code created an admin account under the attacker's control and installed a hidden plugin that opened a way back in. Ordinary visitors did not trigger it
Microsoft CEO Satya Nadella wants companies to build "token capital" alongside human capital, meaning their own AI capabilities built on internal data and proprietary learning loops. Without it, he warns, a few large models could absorb the value of entire industries. The argument also happens to line up with the business logic of his own Azure platform. The article Microsoft CEO Satya Nadella warns of "a small number of AI systems capturing all the economic returns" appeared first on The Decoder .
The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses. The post FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service appeared first on SecurityWeek .
When tech shows up, it offers a shortcut and convenience. You can use Google Maps to direct you somewhere without paying much attention to the surroundings. You can use Claude to write your marketing copy and get a better-than-mediocre result the first try. You can look for a gift on Amazon, pick the first match, […]
The UK is the latest country to follow Australia in implementing a total social media ban for children under 16, Prime Minister Keir Starmer has announced. The ban, which could take effect from early next year, will be joined by wider measures that will also prevent children from talking to strangers in online games, livestreaming, […]