TOP STORIES
AI
-
On-PREM
AMD's Threadripper Halo is a local-AI workstation for researchers with deep pockets
AI workstation promises to put up to 576 GB of HBM3e and 16 TB/s of memory bandwidth on your desk
-
ai and ml
Hugging Face is too important to fall into Nvidia's hands
$12.9 billion deal will inevitably cement Nvidia's market dominance and harm competition in the process. Regulators should take note
-
ai and ml
Zuck's Muse to Spark joy with open weights release 'soon'
While you wait, Meta says it’s taught the model to stop wasting tokens and ask for help a bit more often
-
ai and ml
With Gemini 3.8 Flash, Google reminds everyone it's still in the race
AI model scores well, runs fast, and doesn't cost too much (yet)
-
security
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
Adding insult to injury
Infosec
-
Security
Russians are posing as Signal support to launch phishing attacks
PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
-
Security
Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack
PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
-
Black Hat and DEF CON
DEF CON Franklin project enlists hackers to harden critical infrastructure
Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
-
Security
EQT buys majority share in Swiss cybersecurity biz Acronis
Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
-
Malware Month
Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
On the plus side, infosec's a good bet for a long, stable career
FOSS
-
Feel peak Windows was 7? You might like Kumander Linux
Debian and Xfce – solid, sensible choices – with a pretty skin
-
Canonical shuttering some of its legacy chat channels
The Ubuntu Pastebin went in June, IRC gets demoted next
-
Audacity audio-editing app no longer looks like it's from the early 2000s
The FOSS tool for audio editing has a fresh coat of paint, and new features to boot
-
Haiku OS rises / Beta 6 sails open web / Virtual winds fly fast
A real alternative to running some kind of FOSS Unix clone
-
Offshoots of cancelled TrueNAS Core upgrade to FreeBSD 15
Exeunt zVault stage right; enter FreeCORE and BSDnas
-
Debian votes to let contributors code with AI
Disclosure optional, quality mandatory
Facts Only
* AMD's Threadripper Halo is a local-AI workstation offering up to 576 GB of HBM3e memory and 16 TB/s memory bandwidth.
* A $12.9 billion deal involving Hugging Face is mentioned in relation to Nvidia's market dominance and competition.
* Meta has taught a model to reduce token usage and ask for assistance more frequently.
* Google announced Gemini 3.8 Flash, which scores well in performance while maintaining speed and cost efficiency.
* AI agents were involved in a ransomware attack, which resulted in an 80-page security audit being left to the victim.
* Russians are posing as Signal support to launch phishing attacks.
* Microsoft patched issues regarding on-prem SharePoint, which was exposed to zero-day attacks.
* EQT acquired a majority share in the Swiss cybersecurity business Acronis.
* Ten years have passed since the first corporate ransomware incident concerning Mikko Hyppönen.
* Debian votes to allow contributors to code using AI.
Executive Summary
Full Take
The information presented reveals a tension between centralized commercial control, open-source decentralization, and the escalating security risks inherent in advanced technology deployment. The large financial arrangements in the AI space suggest a strong drive toward market consolidation, raising questions about how innovation is channeled when market dominance becomes a primary factor. The simultaneous emergence of high-performance local workstations and FOSS operating systems indicates a powerful counter-movement prioritizing accessibility and control over proprietary systems. Furthermore, the demonstration of AI agents executing attacks highlights a critical gap between theoretical safety frameworks and real-world operational security, suggesting that complexity amplifies vulnerability across all layers—from infrastructure to application logic. The pattern suggests a dynamic where competitive pressures force consolidation while grassroots efforts push for distributed alternatives, all operating under an increasingly hostile information environment where security failures are leveraged not just as incidents but as public narratives.
What mechanisms govern the tension between commercial dominance and open-source advancement in AI? How does the operational reality of autonomous agents change established principles of security auditing, and what responsibility does this place on foundational software and hardware choices? If performance metrics like those shown for Gemini Flash are now standard, how can societies ensure that the pursuit of speed and efficiency is balanced against resilience and equitable access?