An industry-wide standard Microsoft invented to protect Windows, and later Linux, devices from firmware infections has been trivial to bypass for 13 of its 14 years of existence. The discovery was made by researchers at security firm ESET after identifying 11 firmware images, at least one from 2013, that were known to be defective but remained signed by the software company anyway.

The images are known as shims, which were invented to extend Secure Boot to Linux devices and utility software. Using a technique simple enough to be performed by novice hackers, these old, forgotten shims can be used to completely circumvent the protection, which is embedded into the UEFI (Unified Extensible Firmware Interface) of the device's motherboard. The gaffe is the result of the failure by Microsoft, which oversees the signing of shims, to revoke the publicly available images once vulnerabilities were found in them.

Threat extends to Windows and Linux users

The threat extends to Windows and Linux users alike, since the shim can be installed on devices running both operating systems. From there, an attacker can subvert the mandated chain of digitally signed firmware to install malicious firmware that loads early in the boot process and persists after either the OS is reinstalled or a hard drive is replaced.

Read full article

Comments

The Trump administration on Monday barred US citizens in the Democratic Republic of the Congo from returning home amid an Ebola outbreak that continues to outpace response efforts.

Reuters first reported late Monday that Americans currently in the DRC or those who have recently traveled to the Ebola-stricken country have been put on a "do-not-board" list. They cannot travel back to the US until they have spent 21 days in a third country. The order, taken under a transportation authority known as Title 49, was independently confirmed by Politico on Tuesday.

Both outlets noted that roughly two dozen Americans who had been set to board flights home on Tuesday have already been blocked by the new rule. It remains unclear if the bar also applies to government workers. The Centers for Disease Control and Prevention has at least two dozen employees working in the DRC.

Read full article

Comments

Meta's AI-fueled layoffs of 8,000 employees targeted workers with disabilities and those who took protected medical or family leaves, alleged a lawsuit filed by 26 employees who were selected for termination. Meta used internal AI tools to select employees for layoffs, according to the complaint filed yesterday by 26 "Doe" plaintiffs in US District Court for the Northern District of California.

"Meta did not assemble the termination list through the considered judgment of managers who knew the work. Instead, Meta used a constellation of internal artificial-intelligence systems—including a system referred to internally as 'Metamate,' employee-trained 'second-brain' agents, keystroke- and activity-monitoring data, AI-token-usage dashboards, and algorithmically assisted performance ranking and calibration—to score, rank, and select employees for inclusion on the list," the lawsuit said.

Employees were allegedly graded, among other things, on how much they used Meta's AI tools. "Meta’s internal dashboards classified employees by their stage of adoption of its artificial-intelligence tools, using categories such as 'AI Native,' 'AI First,' and 'AI Enabled,'" the lawsuit said.

Read full article

Comments

For the first time in its history, the US military sent explosive-laden drone boats into combat by attacking an Iranian midget submarine and naval port. The unprecedented use of such kamikaze sea drones by the United States comes nearly a decade after Iranian and Houthi forces first demonstrated such weapons.

The US military shared a video showing three “one-way attack surface drones” exploding after approaching an Iranian midget submarine and ship maintenance facility at Iran’s Bandar Abbas Naval Base on the night of July 12. US Central Command, the US military combat command responsible for Middle East operations, described the strikes in a social media post as the “first time American forces have employed sea drones in combat operations.”

The US drone boats were able to “make a low-speed, uncontested approach” to their targets before exploding, according to USNI News, a news service from the nonprofit US Naval Institute. USNI News also identified one of the targets as an Iranian Ghadir-class midget submarine that was out of the water while being suspended from a gantry.

Read full article

Comments

Scientists at Pennsylvania State University have developed a novel conductive ink that can be painted directly onto the skin in colorful custom designs, turning into a functional electrode for biomonitoring after drying. They described their work in a new paper published in the Proceedings of the National Academy of Sciences (PNAS).

As previously reported, epidermal electronics attached to the skin via temporary tattoos (e-tattoos) have been around for more than a decade. So-called e-tattoos connect to skin without adhesives, are practically unnoticeable, and are typically attached via temporary tattoo, allowing electrical measurements (and other measurements, such as temperature and strain) using ultra-thin polymers with embedded circuit elements.

However, these e-tattoos have their limitations, most notably that they don’t function well on curved and/or hairy surfaces, as well as requiring personalized electrode placement design to cover larger areas, since biosignals are spatially distributed. So scientists have been getting creative. For instance, in 2024, researchers developed special polymer-based conductive inks that can be printed onto a person’s scalp to measure brain waves, even if they have hair. This could one day enable mobile EEG monitoring outside a clinical setting, among other potential applications.

Read full article

Comments

Believe it or not, there was a time when searching the web for images was not possible. Twenty-five years ago, Google launched image search, and it's celebrating by looking back at its biggest visual milestones and refreshing the experience for today's searchers. The celebration also includes expanded AI because that's just how Google rolls in 2026.

Google claims the impetus for image search a quarter-century ago was the green Versace dress Jennifer Lopez wore to the 2000 Grammy Awards. If you were alive at the time, you probably remember the one. Google engineers understood that people searching for the dress didn't want to read about it—they just wanted to see it. The company got to work building image search, launching the first version in July 2001. Twenty-five years later, it's easy to take for granted that you can search for Lopez's green dress or whatever else strikes your fancy.

Currently, going to the Google image search site shows a plain search bar for finding images. It's a refreshingly minimalist interface for the modern web. Even Google's search homepage has a smattering of AI buttons and drop-down menus. That will change when the new Google Images rolls out.

Read full article

Comments

New York became the first state to pause all construction of massive new data centers after Democratic Governor Kathy Hochul announced a one-year moratorium on Tuesday, Reuters reported.

The state-wide ban applies to data centers using 50 megawatts or more, officials told Reuters, and it won’t be lifted until the state figures out what "consistent standards" for responsible data center development in New York should look like.

Across the US, calls to halt data center construction have multiplied, as Americans grow increasingly concerned about risks of pollution, rising energy costs, and diminishing water supplies. At the federal level, Bernie Sanders (I-Vt.) and Alexandria Ocasio-Cortez (D-NY) have introduced legislation seeking a possible nationwide construction ban. But Republicans are seemingly unlikely to embrace that legislation, given Donald Trump's claim that such moratoriums would threaten America's lead in the AI race.

Read full article

Comments

Lettuce and salad greens have become the prime suspects in an explosive outbreak of the diarrheal parasite Cyclospora, which is surging nationwide but erupting to extraordinary heights in Michigan.

In recent years, Michigan has typically reported around 50 cases of cyclosporiasis, which causes urgent bouts of watery diarrhea, abdominal cramps, and nausea. But, this year, as of July 14, the state has reported 3,309 cases of the food-borne pathogen. Of those 44 have been hospitalized.

Based on interviews with more than 1,000 people sickened in Michigan, the latest data is pointing to leafy greens as the source, according to the Michigan Department of Health and Human Services (MDHHS).

Read full article

Comments

Baby boomers are the generation cutting back most on alcohol consumption, outstripping Gen Z’s abstinence, as moderation takes hold at every level of society.

Seventy-one percent of boomers, those born between 1946 and 1964, consumed alcohol in the past six months—the lowest drinking rate of any generation and down 2 percentage points from three years ago, according to IWSR, a market researcher for the global beverage industry.

By contrast, 74 percent of Gen Z who are at the legal drinking age reported drinking in the past six months, up from 66 percent three years ago, as young people in their late teens and 20s catch up with the total adult population drinking rate of 76 percent.

Read full article

Comments

The next test flight of SpaceX's Starship spacecraft and Super Heavy booster could take off as soon as Thursday, and much of the hour-long mission will look a lot like the last Starship flight in May.

But there are a few key differences for this launch, set to occur during a launch window that opens at 5:45 pm CDT (22:45 UTC) on Thursday. The most notable change is the inclusion of real, functioning Starlink satellites inside Starship's cargo bay. SpaceX previously tested the ship's payload deployment mechanism using simulators mimicking the mass and dimensions of the company's next-generation Starlink Version 3 broadband satellites.

This time—Starship's 13th full-scale test flight and the second to use SpaceX's newest version of Starship—technicians have installed 20 Starlink V3 satellites into the ship's deployer, a system of pulleys and cables designed to eject a stack of satellites one at a time through an opening on the side of the spacecraft. The satellites will not be part of SpaceX's operational network, but engineers will attempt to briefly establish laser communication links between the Starlink V3s and other spacecraft flying in low-Earth orbit. If successful, these links will validate Starlink V3's interoperability with SpaceX's previous generation of Starlink satellites.

Read full article

Comments

A US citizen doing humanitarian work in the Democratic Republic of the Congo has tested positive for Ebola, marking the second American infected amid the DRC's explosive Ebola outbreak—and the second to be sent for care in Germany rather than the US.

The Ebola outbreak, which was first declared on May 15, is already the third largest on record and still growing. As of July 12, the DRC has reported 1,926 cases and 702 deaths in the outbreak, which is caused by the lesser-known Bundibugyo strain of Ebolavirus.

Under the Trump administration, the US has adopted a seemingly isolationist approach, implementing stringent and controversial travel restrictions and blocking the repatriation of citizens exposed to or infected with the virus. That's despite the US having multiple facilities around the country designed to safely monitor and provide high-quality care for Ebola patients in these types of situations.

Read full article

Comments

The federal government is warning users of home and small office routers to secure their devices as Russia state hackers continue to mass-compromise them for use in obscuring nefarious actions against sensitive organizations in the public and private sectors.

Both the Russian and Chinese governments have been compromising routers for years, sometimes in prolonged tugs-of-war to wrest control of devices the other has already commandeered. The US government has occasionally issued covert commands and taken other steps to disinfect routers. Google and other companies have also worked to disrupt the massive botnets that control compromised routers in lockstep. The actions to date are little more than whack-a-mole exercises as the operators simply replace their botnets with new ones.

Proxy networks: The go-to tool

“Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple critical infrastructure sector networks,” the Cybersecurity and Infrastructure Security Agency said Monday. The hacking groups are tracked under various names, including Berserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard, and Static Tundra. The advisory was co-issued by governments from around the world, including Australia, Denmark, New Zealand, and the UK.

Read full article

Comments