La IA está acelerando las vulnerabilidades de seguridad del software, obligando a los ingenieros a repensar de manera fundamental las prácticas de seguridad tradicionales para proteger los sistemas de nuevas amenazas automatizadas.
Resumen generado con IA. Consulta el original para comprobar el contexto y la precisión.
Este es el extracto disponible del feed. Puede estar abreviado o en el idioma original.
Hi, this is Gergely with a bonus, free issue of the Pragmatic Engineer Newsletter. In every issue, I cover Big Tech and startups through the lens of senior engineers and engineering leaders. Today, we cover one out of four topics from last week’s issue of The Pulse. Full subscribers received the article below eight days ago. If you’ve been forwarded this email, you can subscribe here.It’s been an absolutely wild few days, with security breaches and major security vulnerabilities being exposed worldwide across tech. Many incidents took place on Tuesday and Wednesday of this week. We’ll start with a brief summary, then look closer at three of them:Intermediate CA certificate compromised: eight private 384-bit keys issued by eMudhra – which is an intermediate Certificate Authority (CAs) – leaked, meaning that servers in server-to-server communication can face man-in-the-middle (MITM) attacks. Any internet communication not going through modern browsers (that already patched this) could be risky.PHP: Unpatched servers risk remote code execution (RCE) and opening up access for attackers. Around 70% of all websites run on PHP and unpatched systems are at risk. Two critical security patches have been released.Railway: customer secrets stored on the service were leaked and some have been decrypted. Secrets exposed can include access to production systems, enabling attackers to potentially access customer systems.GitLab: Unpatched GitLab servers are at risk of an attacker gaining full access. A critical security patch for RCE has been released.Node.js: Unpatched servers are vulnerable to remote execution attacks. A new release fixes 10 critical vulnerabilities (CVEs), including one that allows for RCE, and another fix revokes the compromised eMudhra intermediate certificate.Go: a new release is out, adding a mitigation for the compromised eMudhra intermediate certificate.TiDB: attackers gained near-total access to the complete control plane systems of the managed TiDB provid
Una ayuda automática para ordenar, basada en fuentes, palabras clave y entidades, en una escala de 1–12. Alta: 9–12; media: 6–8; baja: 1–5. No mide urgencia, verifica noticias ni representa respaldo editorial.
El satélite de Google ejecutó con éxito un modelo de IA en el espacio, demostrando que la computación avanzada puede funcionar más allá de la Tierra y ampliando el potencial para el procesamiento de datos en tiempo real en órbita.
Un recién descubierto meteorito marciano antiguo proporciona una rara evidencia física de la corteza temprana de Marte, lo que desafía la suposición de que la mayoría de las muestras recuperadas son geológicamente jóvenes.
La exitosa prueba de Satlyt avanza el objetivo de transformar los satélites en centros de datos virtuales, lo que podría revolucionar la forma en que se procesan los datos en el espacio.