Putin on the code: DoD reportedly relies on utility written by Russian dev Fast-glob is widely used in government, security lab says A Node.js utility used by thousands of public projects - and more than 30 Department of Defense ones - appears to have a sole maintainer whose online profiles identify him as a Yandex employee living in Russia.… #theregister #IT
Word to autosave new docs to the cloud before you can even hit Ctrl+S Feature rolls out to Microsoft 365 Insiders, stashing unnamed files in OneDrive by default Ever get that sinking feeling when Word crashes before you've made your first save? An application update is set to save the day by automatically enabling autosave to the cloud for new documents, before you've even given them … #theregister #IT
Bun JS toolkit adds MySQL driver, secrets API, YAML, and more Feature bloat, or added value for this JavaScript toolkit? The Bun team has released version 1.2.21 of its JavaScript bundler and runtime, written in Zig, adding features including built-in drivers for MySQL and SQLite, a YAML parser, and a secrets manager for tools and local development.… #theregister #IT
Nx NPM packages poisoned in AI-assisted supply chain attack Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being uploaded to the NPM registry on Tuesday evening.… #theregister #IT
Uncle Sam throws AI 'chili cook-off' to spice up healthcare fraud detection No stew on the stove, but plenty of heat as devs compete to flag suspect Medicare data Seeking to rein in healthcare fraud, the US Centers for Medicare & Medicaid Services (CMS) is seeking explainable AI models that can identify patterns suggestive of malfeasance.… #theregister #IT
The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams Don't let it happen to you Storm-0501, a financially motivated cybercrime crew, recently broke into a large enterprise's on-premises and cloud environments, ultimately exfiltrating and destroying data within the org's Azure environment. The criminals then contacted the victim via a Micro… #theregister #IT
Taiwan indicts three over alleged theft of TSMC trade secrets Chipmaker keen to protect assets as race for 2nm process heats up Taiwanese prosecutors have charged three people over the alleged theft of TSMC's trade secrets.… #theregister #IT
Classic Psion fan releases proof-of-concept language server for OPL Vintage computing boffinry to please palmtop enthusiasts Vintage computing enthusiast Colin Hoad has released a gift to anyone who fondly remembers Psion's classic EPOC-based palmtops and their Open Programming Language (OPL): a language server which brings modern quality-of-life features to the OPL programm… #theregister #IT
Microsoft can't guarantee data sovereignty – OVHcloud says 'We told you so' French provider seizes on Redmond's admission that US law could override local protections Interview  European cloud provider OVHcloud has long warned about the risks of relying on foreign tech giants for critical infrastructure – especially when it comes to data sovereignty.… #theregister #IT
GhostBSD 25.02 adds 'Gershwin' desktop for a Mac-like twist Hybrid of GNUstep and Xfce channels classic NeXT vibes The latest release of GhostBSD, an easy graphical FreeBSD distribution, includes a brand new macOS-like desktop environment, "Gershwin."… #theregister #IT