Slashdot

The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed remote code execution against an Apache mod_php installation running PHP 8.4.26. "This is now confirmed RCE with usable memory…

Skydance, as it begins integrating Paramount and Warner Bros. Discovery, is offering voluntary buyouts to some employees and imposing a five-day-a-week office requirement. Layoffs are also expected as the company targets more than $6 billion in annualized cost savings within three years. Variety reports: The new program was outlined by chairman and CEO David Ellison and co-CEO Ynon Kreiz in a memo to staffers Monday. "As we bring our teams together, we recognize that not everyone will see their…

Mozilla launched a new ad campaign for Firefox that leverages early internet nostalgia in a bid to win back users who switched browsers. "Today's internet tracks you, interrupts you, and asks for permissions it already took. But it wasn't always that way, and it's not how it's supposed to work," writes Mozilla CEO Anthony Enzor-DeMeo in a post on LinkedIn. "It's how a few companies decided it should work, because it pays." "We're making a different bet at Firefox. Remember us? Well, we're still…

Instagram is testing a new longform, horizontal video format called "Features" as it pushes further into YouTube territory and expands its presence on TVs. The Verge reports: Instagram boss Adam Mosseri has been against doing longform video on the platform "for a long time," he says in a six-and-a-half-minute video (here's the widescreen version) with VP of product Tessa Lyons, saying that "one of my concerns has been, how do we make sure that we keep Instagram not just about entertainment, but…

Longtime Slashdot reader schwit1 shares a report from CBS News: Walter Koenig, the actor who played Pavel Chekov in the original "Star Trek" series and several movies, has died, his rep confirmed to CBS News. He was 90. Koenig died Sunday night at his home in the North Hollywood neighborhood of Los Angeles, talent rep Zachery McGinnis said in a statement. He died surrounded by his daughter and niece, McGinnis said. In 'Star Trek,' Ensign Chekov was the sole member of the spaceship Enterprise br…

Highway thieves have stolen more than $100 million in data center equipment since June, employing increasingly sophisticated tactics such as forging driver IDs and spoofing GPS tracking systems. NBC News (paywalled) reports that thieves have "made away with more than $100 million in data center freight." Ars Technica reports: Here's how they said thieves get away with it: First, thieves hack freight brokers' accounts on shipment-listing websites and post fake shipments to lure real bids, then s…

Apple has unveiled a redesigned iPad Mini with a larger 8.5-inch OLED display, an A20 Pro chip, twice the peak brightness and slimmer bezels while maintaining roughly the same footprint. It starts at $699 ($200 more than its predecessor) and will be available November 6. The Verge reports: Despite having a slightly bigger display than the 8.3-inch screen on its predecessor, Apple says the device maintains the same small footprint thanks to bezels that are 24 percent slimmer. The iPad Mini is 5.…

An anonymous reader quotes a report from The Seattle Times: Microsoft is offering buyouts to about 60,000 employees, or roughly a quarter of its workforce, as the company tries to control its head count while avoiding layoffs. The Redmond-based tech giant announced Monday morning that eligible employees at the vice president level and below in the U.S., Canada, India and the United Kingdom would receive a "voluntary exit offer" of a standard severance package, based on their location. In a memo…

Anthropic has filed to go public on the Nasdaq under the ticker ANT, setting the stage for a potentially record-setting IPO that could value the Claude developer at more than $2 trillion. Alongside the extraordinary cost of its AI expansion, Anthropic warned that it "may not generate sufficient revenue to achieve or sustain profitability in the future." "While we have experienced significant revenue growth in recent periods, our business is highly capital intensive," the company said. "Our reve…

Kotaku reports: r/opensource, Reddit's primary "subreddit for everything open source related," has banned all AI-assisted and AI-related projects.... As reported by The Verge, the subreddit's October 24 post, titled "Your tokens aren't valuable: No more AI," features four new main rules: all projects must now be at least "1 year old," have "multiple contributors," be posted by someone who must "speak English," and cannot be "made by" or "intended for" AI... [T]he ban on AI is simple; as the sub…

Brazil's 80-year-old president Luiz Inácio Lula da Silva was re-elected Sunday, reports the Guardian, "defeating his far-right opponent, Flávio Bolsonaro, to claim a historic fourth term in power." And the results could impact the climate, suggests the Associated Press, since under da Silva the annual deforestation rate in the Amazon fell to its lowest level since records began in 1988: Official satellite data showed the rainforest lost 3,335 square kilometers (1,300 square miles) from Aug. 202…

The problem? Understanding how AI coding agents interact with the software you build. "Whether you're maintaining an SDK, building a command-line interface, or publishing an MCP server or skills... you need to understand whether agents can discover and use what you ship, and what your team can change." Results can vary, and configurations keep changing, with behaviors influenced by everything from custom instructions and MCP servers to skills and plugins. So after a year of development Microsof…

"59% of maintainers report growing contribution volume since the rise of GenAI," according to a new study published by Linux Foundation Research. But 25% of their incoming pull requests "are estimated to be low-quality, also known as 'AI slop'." And on large projects, 69% see growing contributions — and estimate that 31% are low-quality/AI slop. So what do these results show us? "Generative AI is fundamentally changing how people participate in open source," says the head of Open Source Ecosyst…

"As of today in systemd Git it's now possible for the systemd programs to be written in the Rust programming language as an alternative to C," reports Phoronix: Core systemd code like the systemd library doesn't yet support Rust code, but for the various systemd programs / leaf components there is now support for using Rust... The new systemd-keyring-setup utility in Rust is used for provisioning keyrings and enrolling X.509 certificates into the kernel's dm-verity / fs-verity / BPF keyrings du…

From the student newspaper at the University of California, Berkeley: Richard Borcherds, a UC Berkeley professor and Fields medalist, no longer grades his students' homework. After seeing how many of his students used AI to consistently receive top scores, he felt there was "no point" in paying readers to grade for correctness in homework, as AI use is now unavoidable. Borcherds revealed this in a sit-down interview Tuesday, following OpenAI's announcement that AI agents apparently solved one o…