News of U.S. Indictment Slow to Reach Cubans Waiting for a Breakthrough
While many Cubans were divided over the legitimacy of the U.S. charging Raul Castro with murder, the hope for developments that might ease their suffering is widespread. “This has to change.”
Musk’s SpaceX Reveals Its Finances for the First Time as It Readies for IPO
Mr. Musk’s rocket and satellite maker disclosed its financial performance as it prepares to go public in what is set to be one of the largest offerings to date.
Justice Dept. Charges Raúl Castro as Trump Escalates Pressure Campaign Against Cuba
The indictment was an extraordinary escalation of the Trump administration’s multifaceted pressure campaign against Cuba’s Communist government.
Thomas Massie, a Trump Critic, Causes Latest Midterm Fight Over Israel
In primary races across the country, debates over Israel are taking center stage, dividing Democrats and Republicans alike.
Trump’s Government Moves to Spare an Unhappy Taxpayer Named Trump
No president has ever used the federal government to advance his own personal interests and those of his family and allies as expansively and openly as Mr. Trump has.
Intuit To Lay Off Over 3,000 Employees To Refocus On AI
Intuit is reportedly cutting about 3,000 jobs, or 17% of its workforce, as it restructures around AI and simplifies its corporate organization. TechCrunch reports: The layoffs come during a bad year for the tech workforce. The tech industry has already cut more than 100,000 jobs this year, per Statista, and is on track to outpace both 2024 and 2025 if the layoff trend continues. Companies such as Amazon, Block, Cisco, Cloudflare, Meta, Microsoft, and Oracle have let go of thousands of employees each, all of them citing a need to refocus expenditures around AI projects as a reason to cut jobs and restructure their organizations. [...]
Intuit, however, hasn't been perceived as a beneficiary of the AI boom, with its shares consistently underperforming in the broader S&P 500 over the past 12 months. The company has been caught up in the broader current of worries that traditional software-as-a-service firms will not be able to keep up or compete, as new and upcoming AI products and services threaten to change how software is developed and how it is used. In its fiscal second quarter ended January, Intuit reported revenue of $4.65 billion, a 17% increase, and net profit of $693 million, a 48% improvement compared to a year earlier. The company expects revenue to increase by about 10% in the third quarter, for which it will report results later today.
Read more of this story at Slashdot.
Nvidia’s Profit Hits $58.3 Billion as A.I. Boom Gathers More Steam
The chip maker said its profit in its most recent quarter jumped 211 percent from a year earlier thanks to extreme demand from other big technology companies.
Trump Gets His Payback in Primary Elections, but It Comes at a Cost in Congress
Republican senators are angry the president is working to unseat their colleagues. But he is also creating more free agents in his own party in Congress willing to defy him.
Google Publishes Exploit Code Threatening Millions of Chromium Users
An anonymous reader quotes a report from Ars Technica: Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens millions of people using Chrome, Microsoft Edge, and virtually all other Chromium-based browsers. The proof-of-concept code exploits the Browser Fetch programming interface, a standard that allows long videos and other large files to be downloaded in the background. An attacker can use the exploit to create a connection for monitoring some aspects of a user's browser usage and as a proxy for viewing sites and launching denial-of-service attacks. Depending on the browser, the connections either reopen or remain open even after it or the device running it has rebooted.
The unfixed vulnerability can be exploited by any website a user visits. In effect, a compromise amounts to a limited backdoor that makes a device part of a limited botnet. The capabilities are limited to the same things a browser can do, such as visit malicious sites, provide anonymous proxy browsing by others, enable proxied DDoS attacks, and monitor user activity. Nonetheless, the exploit could allow an attacker to wrangle thousands, possibly millions, of devices into a network. Once a separate vulnerability becomes available, the attacker could use it to then compromise all those devices.
"The dangerous part here is that you can just have a lot of different browsers together that you can in the future run something on that you figure out," said Lyra Rebane, the independent researcher who discovered the vulnerability and privately reported it to Google in late 2022 in an interview. He said using the exploit code Google prematurely published would be "pretty easy," although scaling it to wrangle large numbers of devices into a single network would require more work. In the thread of Rebane's disclosure to Google, two developers said in separate responses that it was a "serious vulnerability." Its severity was rated S1, the second-highest classification.
Since its reporting 29 months ago, the vulnerability remained unknown except to Chromium developers. Then on Wednesday morning, it was published to the Chromium bug tracker. Rebane initially assumed the vulnerability was finally fixed. Shortly thereafter, he learned that, in fact, it remained unpatched. While Google removed the post, it remains available on archival sites, along with the exploit code. Google representatives didn't immediately respond to an email asking how and why it published the vulnerability and if or when a fix would become available. The exploit works by abusing Chromium's Browser Fetch API to open a service worker that remains persistently active. A malicious website can trigger it through JavaScript, creating a connection that can be used "for monitoring some aspects of a user's browser usage and as a proxy for viewing sites and launching denial-of-service attacks," reports Ars.
Depending on the browser, those connections "either reopen or remain open even after it or the device running it has rebooted," effectively turning the device into part of a "limited botnet."
Read more of this story at Slashdot.
Meta Lays Off 8,000 Employees, as A.I. Casualties Mount
Employees have signed petitions against being tracked by A.I. and were trying to figure out who had been let go on Wednesday, as the Silicon Valley giant tries to transform into an A.I.-first company.
Thailand Tightens Visa Rules for Tourists From Dozens of Nations, Including U.S.
The country had loosened entry requirements after the pandemic to attract visitors, but will now limit many travelers to 30 days without a visa.
Soccer Game Between North and South Korean Teams Draws Strong Emotion On and Off the Pitch
While diplomatic relations between the two Koreas are near a historic low, a rare trip by athletes from the North triggered intense emotions in some older South Koreans.
Mother Who Drowned 3 Children at Coney Island Is Sentenced to 20 Years
Erin Merdy, 34, pleaded guilty to murder in the 2022 killings of her children, ages 7, 4 and 3 months.
Trump Just Pardoned Himself and His Family Forever
By issuing a prohibition on federal investigations that might threaten Trump’s finances, the Justice Department has placed the president and his family in a new category.
Ebola Crisis Sparks Debate Over Global Health Double Standards
To some Africans, the claim that the continent’s largest health agency had already bungled its response scratched a familiar wound.
TSA Pushes to Expand Private Security at Airport Checkpoints
Driven in part by the chaos of the last shutdown, the government is expanding efforts to use private security staff instead of federal employees at more airports.
RHEL 10.2 Released With New AI Command Line Assistance
Red Hat has released RHEL 10.2 and 9.8 with new AI-assisted command-line tools. The releases also add updated developer toolchains such as Go 1.26, LLVM 21, Rust 1.92, Python 3.14, and PHP 8.4. Phoronix reports: Red Hat Enterprise Linux has introduced the goose command for power users. Goose is an optional CLI AI assistance with model context protocol (MCP) integration. There is also improved visual output via color output enhancements. As for their rationale with the new AI integration: "The business value: Faster problem resolution, and a quicker path for new administrators to become proficient. This translates into higher developer productivity and accelerated project timelines."
Read more of this story at Slashdot.
Ebola Containment Efforts May Have Been Hindered by USAID Shutdown and CDC Cuts
Aid cuts by the Trump administration have shut down crucial disease surveillance networks and medical supply chains in East Africa.
Cuba Says the Trump Administration Is Not Negotiating in Good Faith
Cuba’s ambassador to the United Nations said in an interview that Havana wanted to talk but the Trump administration was creating pretexts for military action.
GitHub's Internal Repos Breached Via Employee's Use of Malicious VS Code Extension
Longtime Slashdot reader Himmy32 writes: GitHub has announced on X that their internal repositories have been breached through a compromised VS Code Extension on an employee's workstation. Bleeping Computer reported that the attack is linked to TeamPCP who have been in the news for a recent campaign affecting Checkmarx, Trivy, SAP, TanStack, and Bitwarden. The group appears to be attempting to sell the stolen code on cybercrime forums. "Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately," the company said. "Our current assessment is that the activity involved exfiltration of GitHub-internal repositories only. The attacker's current claims of ~3,800 repositories are directionally consistent with our investigation so far."
Although the investigation remains ongoing, GitHub says it has "no evidence of impact to customer information stored outside of GitHub's internal repositories." The company has also not said whether it's in contact with the hackers or if it's received a ransom demand.
Read more of this story at Slashdot.