Linux kernel czar says AI bug reports aren’t slop anymore • The Register

0

Interview I was at a press luncheon at KubeCon Europe this week when, to my surprise, who should sit down next to me but long-term Linux kernel maintainer Greg Kroah-Hartman. Greg, who lives in the Netherlands these days, was there to briefly comment on AI, Linux, and security. We spoke about how, over the last month, AI-driven activity around Linux security and code review has “really jumped” in a way no one in the open source world saw coming.

“Months ago, we were getting what we called ‘AI slop,’ AI-generated security reports that were obviously wrong or low quality,” he said. “It was kind of funny. It didn’t really worry us.” Of course, there are many Linux kernel maintainers, so for them, AI slop isn’t as burdensome as it is for, say, Daniel Stenberg, founder and lead developer of cURL, where AI slop reports caused the cURL team to stop paying bug bounties.

Linus Torvalds

Linus Torvalds and friends tell The Reg how Linux solo act became a global jam session

READ MORE

Things have changed, Kroah-Hartman said. “Something happened a month ago, and the world switched. Now we have real reports.” It’s not just Linux, he continued. “All open source projects have real reports that are made with AI, but they’re good, and they’re real.” Security teams across major open source projects talk informally and frequently, he noted, and everyone is seeing the same shift. “All open source security teams are hitting this right now.”

No one is quite sure what’s behind it. Asked what changed, Kroah-Hartman was blunt: “We don’t know. Nobody seems to know why. Either a lot more tools got a lot better, or people started going, ‘Hey, let’s start looking at this.’ It seems like lots of different groups, different companies.” What is clear is the scale. “For the kernel, we can handle it,” he said.

“We’re a much larger team, very distributed, and our increase is real – and it’s not slowing down. These are tiny things, they’re not major things, but we need help on this for all the open source projects.” Smaller projects, he implied, have far less capacity to absorb a sudden flood of plausible AI-generated bug reports and security findings – at least now they’re real bugs and not garbage ones.

Behind the scenes, security teams are comparing notes. “We get together informally and talk a lot, because we all have the same problems,” he said. “There must have been some inflection point somewhere with the tools. Did the local tools get better? Did people figure out something? I honestly don’t know.”

For now, AI is showing up more as a reviewer and assistant than as a full author of Linux kernel code, but that line is starting to blur. Kroah-Hartman has already done his own experiments with AI-generated patches.

“I did a really stupid prompt,” he recounted. “I said, ‘Give me this,’ and it spit out 60: ‘Here’s 60 problems I found, and here’s the fixes for them.’ About one-third were wrong, but they still pointed out a relatively real problem, and two-thirds of the patches were right.” Mind you, those working patches still needed human cleanup, better changelogs, and integration work, but they were far from useless. “The tools are good,” he said. “We can’t ignore this stuff. It’s coming up, and it’s getting better.”

Developers are starting to acknowledge AI’s role in actual submissions. “We’re seeing some patches being generated,” Kroah-Hartman said. “You have a little co-develop tag for that now. We’re seeing some things for some new features, but we’re seeing AI mostly being used in the review.”

Asked whether he could imagine a near-future where most of the work on simple changes comes from AI, he said that for “simple little error conditions, properly detecting error conditions,” AI could already generate dozens of usable patches today.

The sudden increase in AI-generated reports and AI-assisted work has also spurred a parallel push to build AI into the kernel’s own review infrastructure. A key piece of that is Sashiko, a tool originally developed at Google and now donated to the Linux Foundation.

“We need to be able to have an easy way to review some of these patches that come in ways that cut down on our load.” The tool is “out there, running on almost all kernel patches,” he said. “You can see it publicly. We’re integrating it into our review tools. It’s available for anybody to use.”

That work builds on earlier efforts inside specific subsystems. “The networking and the BPF people have been doing LLM-generated reviews for a while,” said Kroah-Hartman. “The Direct Rendering Manager (DRM) people and now Google’s tool are pulling all those into one common interface,” he explained. “Different subsystems are adding better skills or prompts – for storage, here are the things you need to look for; for graphics, here are the things you need to look for. People are contributing in a public place for that, which is how it should be. This is very good.”

Kroah-Hartman credited longtime kernel developer Chris Mason, now at Meta, with pioneering AI-based review workflows. Mason has been running AI review for eBPF and networking for some time. The systemd project is also using the same class of tools for its all-C codebase.

AI reviewers, he stressed, are additive rather than authoritative. “On the review side, it’s generating some good reviews. It doesn’t get you everything. Some things are still wrong. But it does point out a lot of the obvious things,” he said.

One of the biggest immediate wins is turnaround time. When an AI reviewer flags obvious problems, submitters get feedback long before a human maintainer would realistically read the patch. “If I see it respond to something, it gives feedback to the submitter faster than the maintainer had a chance to, which is nice,” Kroah-Hartman said. “We have a number of bots that run on patches as it is. If I see those fail, I just know I don’t even need to look at that as a maintainer. And it gives the developer, ‘Oh, I can go do another version tomorrow,’ which helps increase the feedback a little better.”

Still, as AI-generated reports and patches grow, so does the review burden. “It’s more reviews; it’s more stuff we have to review for the kernel,” he said. That’s why efforts with the OpenSSF and its Alpha-Omega program matter. “We’re working to try and create tools to help make it easier for maintainers to handle this incoming feed and deal with it.”

A recurring theme for Kroah-Hartman is equity of access. Until recently, only well-resourced subsystems could afford to run heavy AI tooling at scale. Turning Google’s review system into a Linux Foundation project is meant to change that.

“That’s this one tool that we have for the review,” he said. “It’s one tool as an example of how now, as an LF project, we’re giving access to everybody. Before, it was just the subsystems that had the resources to run it on the back end. Right now, we’re giving it to everyone.” Work is already underway to make it usable beyond the kernel’s own infrastructure.

That matters because, as Kroah-Hartman keeps emphasizing, the AI wave is not just a kernel problem. “All open source projects have real reports that are made with AI,” he said. “Our increase is real, and it’s not slowing down. These aren’t major things, but we need help on this for all the open source projects.”

For Linux, the relationship with AI is already evolving past theory and into practice. It’s a mixed blessing. AI is simultaneously a new source of real vulnerabilities that strains human reviewers who must deal with them, while also helping to manage that strain.

The trick for Kroah-Hartman and his peers will be to keep AI as a force multiplier, without drowning the open source maintainers. ®



Source link

Oil shortage in Uttarakhand or just a rumour? Know what is the ground report from Dehradun

0

The fire of war broke out in the Middle East and its heat reached the petrol pumps of India. Rumors of oil shortage started spreading on social media, and at some places crowds gathered at the pumps. But the ground reality is that there is no shortage of oil in the country and Dehradun, the capital of Uttarakhand is also not untouched by this, oil is available in sufficient quantity here too.

Amarjeet Sethi, National Joint Secretary of Federation of All India Petroleum Traders, said clearly that there is no need to panic of any kind. Supply is normal and traders have adequate stock.

War spoiled the equation of international market

The real problem is not of shortage, but of prices. After the military attacks on the important energy infrastructure of Iran and Qatar, crude oil reached a dangerous level of $ 119 per barrel in the global market. The supply chain was badly affected and the pressure on oil companies increased.

The result of this pressure was that the country’s largest private fuel retailer company Nayara Energy increased the price of petrol by Rs 5 and diesel by Rs 3 per liter and these new prices came into effect with immediate effect. In some states, petrol became costlier by Rs 5.30 per liter due to local VAT.

According to sources, Naira Energy, which is backed by Russian company Rosneft, has about 6,967 petrol pumps across the country. Unlike government companies, the government does not compensate them for their losses, hence the impact of the international market is directly reflected in their prices.

Currently relief at government pumps, but premium oil becomes expensive

It is a matter of some relief for the common man that the government oil companies IOCL and HPCL, which control 90 percent of the market, have not yet increased the prices of normal petrol and diesel.

But on March 20, they also increased the prices of premium petrol like XP95 and Power from Rs 2.09 to Rs 2.35 per liter, due to which their price reached close to Rs 113.77.

Traders appeal to ignore rumours.

Amarjeet Sethi says that such rumors create unnecessary panic in the market. When people come together to refill oil, temporary pressure definitely builds up on the pump and seeing this crowd, people feel that there is actually a shortage. Whereas in reality the stock is complete. His appeal is to fill the oil as per requirement, do not panic and go out with the canister and avoid sharing any unconfirmed news further.

Russian officials meet US counterparts as Moscow denies aiding Iran | Russia-Ukraine war News

0

Kremlin spokesperson says talks are part of ‘​necessary dialogue’ with Washington as war in Ukraine continues for a fifth year.

A delegation of Russian officials has arrived in ‌the United States for meetings with their American counterparts.

The visit, which began on Thursday, marks the first such trip since ⁠relations strained over Moscow’s war in Ukraine.

Recommended Stories

list of 3 itemsend of list

Kremlin spokesperson Dmitry Peskov said, “We hope that these first tentative steps will, of course, make their contribution to the further revival of our bilateral engagement.”

He said President Vladimir Putin had set the “main directives” for the trip and would be “thoroughly briefed” on the meeting.

The visit comes as US-brokered talks seeking a deal to end the war in Ukraine are in effect frozen.

Several rounds of negotiations since US President Donald Trump returned to the White House last year have failed to break the deadlock, with the Kremlin ruling out compromises to halt its years-long offensive.

Russia, a close ally of Iran, has also been cited by Western intelligence officials as one of the backers of the Iranian government, as Tehran fights a war launched by the US and Israel.

A report in the United Kingdom-based Financial Times newspaper on Wednesday alleged that Russia was close to completing a shipment of drones to Iran.

Responding to questions about the report, Peskov said, “There are so many lies being spread by the media … Do not pay attention to them.”

Russia this week carried out one of the largest aerial attacks since the start of its war on Ukraine, launching 948 drones in 24 hours as it moved troops and equipment to the front line.

Ukraine’s President Volodymyr Zelenskyy issued a new appeal for allies to supply Kyiv with air defence munitions, warning that Kyiv, which relies on the US for air defence systems against ballistic missiles, will face a deficit of missiles while Washington is focused on the US-Israeli war on Iran.

Talks between Ukraine and the US that opened in the US state of Florida on Saturday again failed to produce a security guarantee that Kyiv has long sought from Washington.



Source link

CC Sabathia predicts more offense with ABS system

0

NEWYou can now listen to Fox News articles!

The 2026 MLB season is officially here, but not without one of the most major changes in the history of the sport.

After a century-and-a-half of complete human element behind home plate, batters, catchers and pitchers will now have the ability to challenge balls and strikes. The challenge must be almost immediate, and each team gets two and retains correct challenges.

Baseball Hall of Famer CC Sabathia once predicted that somebody would hit .400 if there were a fully automated strike zone. While baseball isn’t there just yet, the 250-game winner does believe a boost of offense will come.

CLICK HERE FOR MORE SPORTS COVERAGE ON FOXNEWS.COM 

ABS system at spring training

The scoreboard displays a Automated Ball-Strike (ABS) Challenge sponsored by T-Mobile during the spring training game between the Detroit Tigers and the Philadelphia Phillies at Publix Field at Joker Marchant Stadium on March 16, 2026, in Lakeland, Florida. (Mark Cunningham/MLB Photos via Getty Images)

“If you just watch the games, you see how much that these guys know the strike zone, and pitchers actually have to throw the ball over the plate,” the New York Yankees legend said in a recent interview with Fox News Digital. “I think it will increase offense. Just watching these games in spring training and seeing how close these guys actually know the strike zone. I think it can only help with offense, and honestly, just get all the calls right.”

With the system, though, the art of pitching is being adjusted. For starters, pitches, well, need to be strikes, and breaking balls off the plate may not go the pitcher’s way.

But several pitchers have taken advantage of throwing some curveballs at the top of the zone, an unorthodox pitch that would normally be called a ball due to an odd angle combined with human error, but the ABS system could rule them strikes.

Sabathia, showing his bias, admitted that he would likely have left the challenging to his catcher, but he added that he would have had to adjust to the system.

CC Sabathia

New York Yankees starting pitcher CC Sabathia (pitches against the Toronto Blue Jays during the first inning at Yankee Stadium. (Andy Marlin/USA TODAY Sports)

YANKEES LEGEND GIVES THOUGHTS ON TEAM RUNNING BACK LAST SEASON’S SQUAD, AARON JUDGE’S CLUTCH FACTOR

“I would have just wanted to make sure my backdoor slider was on the plate and being called a strike. It would have been a bit of an adjustment for me, but I always wanted to make sure that the calls were getting right,” he said. “Like, we were getting the right calls every time. So I would have had no problem with the ABS.”

It’s quite the major change in baseball, which has undergone several reconstructions. Perhaps none prior to the ABS system, though, have been bigger than the pitch clock. And while it’s a thorn in baseball purists’ side, Sabathia is a huge fan.

“It’s been huge getting the guys out of the ballpark, getting fans back to the ballpark during the week, during the school year because you know the game’s going to be over in two-and-a-half hours. It’s made a huge difference, not only just in gameplay and speeding up the game, but just the way fans are able to watch it and digest it. I would watch two games at a time, now I don’t, because you can kind of miss something. I actually love the way the game moves now, the way that the guys keep pace, nobody complains about the clock. It’s a natural thing now.”

CC Sabathia salutes crowd

New York Yankees starting pitcher CC Sabathia waves to fans during his ceremony before the game between the New York Yankees and the Toronto Blue Jays at Yankee Stadium.  (Vincent Carchietta/USA TODAY Sports)

CLICK HERE TO GET THE FOX NEWS APP

The ABS system was implemented in last year’s spring training after years of experimentation in the minor leagues and the Arizona Fall League.

The rule changes, which began in 2023, have proven to be beneficial for MLB, as attendance has increased in each of the last three years, the first time attendance has increased in back-to-back-to-back seasons since it occurred in four straight from 2004 to 2007. It also should be noted that there has been an increase in single-admission doubleheaders, and last season, two teams played in minor league ballparks.

Follow Fox News Digital’s sports coverage on X, and subscribe to the Fox News Sports Huddle newsletter



Source link

Trump wants to deal with Iran at any cost? Pakistan will send JD Vance, what is America’s plan?

0

The heat of tension between Iran and America-Israel has now reached other countries of the world. America wants to end the war on its own terms, but Iran is adamant on its insistence. Meanwhile, Pakistan talked about reconciliation between Iran and America. Such reports are coming out that America’s Vice President JD Vance may visit Pakistan.

According to media reports, US Vice President Vance may go to Pakistan for talks with the aim of ending the US-Israel war against Iran. American media CNN, quoting two senior administration officials, said that after Pakistan presented itself as an important mediator, preparations are underway to arrange a meeting in Islamabad this week.

Vance can go to PAK

The report says that perhaps JD Vance may go to Pakistan along with other senior officials of US President Donald Trump’s government. Earlier, Pakistan Army Chief Asim Munir had talked to Trump on Sunday.

Pejeshkian talked to Shehbaz Sharif

Pakistan Prime Minister Shahbaz Sharif also spoke to Iran’s President Masoud Pezeshkian on Monday. Meanwhile, the White House has said that US military operations against Iran are going ahead of schedule and are getting closer to their main objectives. At the same time, Washington is continuing meaningful talks with Tehran, the aim of which is to end this conflict.

What did the White House press secretary tell?

White House Press Secretary Carolyn Levitt told the media that America is close to achieving the main goals of Operation Epic Fury. ‘In just over three weeks, it has become abundantly clear that Operation Epic Fury has proved to be a major military victory,’ he said.

He told that till now more than 9,000 enemy positions have been attacked. Levitt said that since the beginning of this campaign, Iran’s missile and drone attacks have decreased by about 90 percent. He claimed that the US had destroyed more than 140 Iranian naval vessels, which Caroline described as the largest destruction of a navy in three weeks since World War II.

Caroline Levitt said, our military efforts are becoming more successful with each passing day and Iran’s ability to threaten merchant ships continues to diminish. The campaign has significantly weakened Iran’s ability to threaten shipping through the Strait of Hormuz, a vital route for global energy supplies.

Gang-rape victim, 25, to be euthanised after father’s legal challenge fails | World News

0

A paraplegic gang-rape victim said she will wear her “prettiest dress” and hopes to “finally rest” when she is euthanised today.

Warning: This article contains distressing content.

Noelia Castillo Ramos, 25, said she was raped twice, once by her ex-boyfriend and the second time by three boys in 2022, describing this as a turning point in her life.

She jumped from the fifth-floor window of an apartment building in a cocaine-fuelled attempt to end her own life in October 2022 after previously overdosing on medication, according to legal rulings.

The fall left her paraplegic, and she is suffering severe, chronic and incapacitating pain with no possibility of improvement, her medical reports show.

Noelia, from Barcelona, Spain, will be euthanised today after a long legal battle with her father, which ended with a ruling in her favour from the European Court of Human Rights.

“I want to go now in peace and stop suffering, period,” Noelia told Spanish TV programme Y Ahora Sonsoles in her only interview, recorded at her maternal grandmother’s house.

Noelia, who is living in a Barcelona care home, said she has been “very clear” about her wish to die from the beginning.

“None of my family is in favour of euthanasia. But what about all the pain I’ve suffered during all these years,” she said.

“The happiness of a father, a mother, or a sister cannot be more important than the life of a daughter.”

She said she “always felt alone” and “saw my world as very dark”, even before requesting euthanasia. She doesn’t feel like “doing anything”, has back and leg pain and said sleeping was “very difficult”.

Her mother, Yolanda ‘Yoli’ Ramos, told the Spanish broadcaster that while she still hopes her daughter will change her mind, she will be by her side “until the very end”.

Spain legalised euthanasia in 2021, despite protests. One March 2021 protest is pictured above. File pic: Reuters
Image: Spain legalised euthanasia in 2021, despite protests. One March 2021 protest is pictured above. File pic: Reuters

‘I want to die alone’

Noelia said she wants to “die looking pretty, I want to die beautiful”, adding that she will wear her prettiest dress and put on some makeup.

She said that while she has invited her family to say goodbye, she wants to be alone in her bedroom at the moment of her death.

She will have four photos with her when she dies: one of her painting a portrait of her mother, one of her childhood puppy, another from her first day of school and a fourth from her childhood, which she said are reflecting “happy” moments in her life.

Noelia has been in psychiatric treatment since she was 13 and her parents separated. She was eventually diagnosed with obsessive-compulsive disorder (OCD) and borderline personality disorder (BPD).

Her father witnessed her attempt to take her own life in October 2022.

“My father saw me fall and couldn’t do anything. But after everything he’s done, I don’t feel sorry for him anymore,” she told Y Ahora Sonsoles, referencing his legal challenge to stop her euthanasia.

“He hasn’t respected my decision and he never will.”

Two-year legal battle

Noelia’s euthanasia request was initially granted by a specialised expert committee in Catalonia in July 2024, with the procedure scheduled for 2 August 2024, but her father has blocked it ever since.

Geronimo Castillo, supported by the ultra-conservative advocacy group Abogados Cristianos or Christian Lawyers, argued that Noelia’s mental illness impaired her ability to decide to end her life.

During a nearly two-year-long legal battle, he took the case through Spain’s courts, finally reaching Spain’s highest tribunal, the Constitutional Court, in February. The court rejected his argument, ruling that there had been no violation of fundamental rights.

An anti-euthanasia protester in 2021 holds a sign saying: 'Killing is not progressive. Stop euthanasia'. File pic: Reuters
Image: An anti-euthanasia protester in 2021 holds a sign saying: ‘Killing is not progressive. Stop euthanasia’. File pic: Reuters

As the final instance, Mr Castillo took the case to the European Court of Human Rights, where his request for interim measures to stop Noelia’s euthanasia was rejected on 10 March, according to newspaper El Pais.

As a last-ditch effort, his legal team on Wednesday asked an investigating court looking into Noelia’s medical-legal team to introduce “urgent precautionary measures” to stop her euthanasia, but a judge rejected the request due to lack of jurisdiction.

“I’ve finally done it,” Noelia said, adding: “Let’s see if I can finally rest”.

According to several sources, Noelia Castillo Ramos’s euthanasia is scheduled for 5pm Spanish time (4pm UK time).

Read more from Sky News:
Scotland’s assisted dying bill rejected by MSPs
German twin sister die in ‘joint suicide’, police say

In 2021, Spain became the fourth European Union country to legalise euthanasia and assisted suicide for people with incurable or severely debilitating conditions who wish to end their lives.

The law was enacted after years of fierce opposition from conservative parties and the Catholic Church, which has historically shaped public attitudes on end-of-life issues.

Anyone feeling emotionally distressed or suicidal can call Samaritans for help on 116 123 or email jo@samaritans.org in the UK.

Alternatively, you can call Mind’s support line on 0300 102 1234, or NHS on 111.

In the US, call the Samaritans branch in your area or 1 (800) 273-TALK.



Source link

Access Denied

0

Access Denied You don’t have permission to access “http://hindi.news18.com/cricket/gautam-gambhir-always-the-villain-in-the-story-when-it-comes-to-playing-against-him-but-you-respect-that-says-faf-du-plessis-ws-n-10311550.html” on this server.

Reference #18.49200117.1774533958.119da875

https://errors.edgesuite.net/18.49200117.1774533958.119da875

America 250 plans first-ever Times Square ball drop for July 3 celebration

0

NEWYou can now listen to Fox News articles!

Organizers for the America 250 celebration touted a slew of plans to commemorate the country’s historic anniversary on July 4, detailing the programs in the works and hinting that more information would become publicly available in the coming weeks.

Rosie Rios, former U.S. Treasurer and chairwoman of America 250, said the festivities themselves would begin on July 3 and extend into July 4.

“We are doing the first-ever ball drop in the history of Times Square outside of New Year’s Eve. This will happen on July 3,” Rios said.

But Rios also described how America 250’s planning hoped to go farther than a single event, framing their efforts as a cultural moment that would reframe the traditions around Independence Day.

PRESIDENT TRUMP SIGNS EXECUTIVE ORDER BRINGING INDYCAR RACE TO DC FOR AMERICA250

Rosie Rios

Rosie Rios, chair of the America 250 Commission, is photographed at the Ronald Reagan Building on Thursday, December 11, 2025. (Tom Williams/CQ-Roll Call, Inc via Getty Images)

Among other smaller items, Rios announced organizers would compile “America’s soundtrack,” a combination of the country’s most iconic music put together by Emilio Estefan, a 19-time Grammy Awards winner. It would include a time capsule set to be opened in another 250 years. And it would attempt to foster a sense of generosity around July 4 that would extend to future years.

“Over the past two years, we’ve already launched incredibly national, values-based programs that will extend long after the fireworks fade on July 4,” Rios said.

For the July 4 events themselves, Rios said organizers hoped to pull off a kind of decentralized celebration.

Organizers stressed the cultural and organic nature of their plans, outlining designs they hoped would be remembered for generations — but also a hope that those plans would meld with existing Independence Day celebrations across the country.

America 250 is partnering with local events across the country to create American “block parties,” which will act as nodes for the celebration.

“On July 4 is the launch of America’s Block Party. Think about this, I wouldn’t call them viewing parties because I don’t think that does it justice. These are interactive experiences all across the country,” Rios said.

So far, the organization has announced two key partnerships: Milwaukee Summerfest, a music festival in Wisconsin, and the Fort Campbell Festival, an annual carnival-like event in Kentucky.

$20M ‘ONE SMALL STEP’ CAMPAIGN AIMS TO REBUILD AMERICAN PRIDE AHEAD OF 250TH ANNIVERSARY

People watch fireworks on July Fourth

People watch fireworks at the Leesburg, Florida Fourth of July celebration at Venetian Gardens on July 4, 2023.

The organizers said other cities had approached them about potentially being a part of the designs but did not detail what other locations or how many might participate.

“I can’t tell you what it’s going to look like, but I know what it is going to feel like. It’s going to be organic,” Rios said.

Rios explained that while America 250 is cooperating with plans for the event in Washington, D.C., the Trump Administration is spearheading efforts there for the parade and other festivities at the White House.

More broadly, Rios said they hope to introduce a tradition of generosity and charity to the July 4 holiday.

“We wanna make July Fourth the largest day of charitable contributions ever recorded in our country,” Rios said. “The point of this initiative that we’re calling Giving Forth is to make July 4th the new day for giving back.

We believe that this is possible.”

And following July 4 itself, she described hopes that July 5 would also take on special meaning.

RARE, HISTORIC US DOCUMENTS TRAVELING COUNTRY ON ‘FREEDOM PLANE’ AHEAD OF AMERICA’S 250TH ANNIVERSARY

The 2025 Superbowl stadium features branding for America 250.

A general interior view during the national anthem and the America 250 presentation prior to the NFL Super Bowl LX football game between the New England Patriots and the Seattle Seahawks at Levi’s Stadium on Feb. 08, 2026 in Santa Clara, California. (Brooke Sutton/Getty Images)

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

After the fireworks, this is where the rest of the work also begins. We’re calling Sunday, July 5, our Day of Reflection. The Day of Reflection can mean many different things to many different people,” Rios said.

“For some people on that Sunday, July 5, it could be a day of prayer. For some others, for example, there are many states that are actually trying to plan community potlucks. I love that idea.”



Source link

Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

0

Ravie LakshmananMar 26, 2026Browser Security / Vulnerability

Cybersecurity researchers have disclosed a vulnerability in Anthropic’s Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page.

The flaw “allowed any website to silently inject prompts into that assistant as if the user wrote them,” Koi Security researcher Oren Yomtov said in a report shared with The Hacker News. “No clicks, no permission prompts. Just visit a page, and an attacker completely controls your browser.”

The issue chains two underlying flaws –

  • An overly permissive origin allowlist in the extension that allowed any subdomain matching the pattern (*.claude.ai) to send a prompt to Claude for execution.
  • A document object model (DOM)-based cross-site scripting (XSS) vulnerability in an Arkose Labs CAPTCHA component hosted on “a-cdn.claude[.]ai.”

Specifically, the XSS vulnerability enables the execution of arbitrary JavaScript code in the context of “a-cdn.claude[.]ai.” A threat actor could leverage this behavior to inject JavaScript that issues a prompt to the Claude extension.

The extension, for its part, allows the prompt to land in Claude’s sidebar as if it’s a legitimate user request simply because it comes from an allow-listed domain.

“The attacker’s page embeds the vulnerable Arkose component in a hidden <iframe>, sends the XSS payload via postMessage, and the injected script fires the prompt to the extension,” Yomtov explained. “The victim sees nothing.”

Successful exploitation of this vulnerability could allow the adversary to steal sensitive data (e.g., access tokens), access conversation history with the AI agent, and even perform actions on behalf of the victim (e.g., sending emails impersonating them, asking for confidential data).

Following responsible disclosure on December 27, 2025, Anthropic deployed a patch to the Chrome extension that enforces a strict origin check requiring an exact match to the domain “claude[.]ai.” Arkose Labs has since fixed the XSS flaw at its end as of February 19, 2026.

“The more capable AI browser assistants become, the more valuable they are as attack targets,” Koi said. “An extension that can navigate your browser, read your credentials, and send emails on your behalf is an autonomous agent. And the security of that agent is only as strong as the weakest origin in its trust boundary.”



Source link

CSK’s unlisted shares see gains as franchise sales spur investor demand ahead of IPL 2026

0

CSK reported revenues of ₹643 crores in FY25 and reported a profit after tax of ₹180 crores, according to its annual report.

CSK reported revenues of ₹643 crores in FY25 and reported a profit after tax of ₹180 crores, according to its annual report. Photo Credit: RAGU R

The big ticket buyouts of IPL teams Royal Challengers Bengaluru and Rajasthan Royals has led to a rise in investor interest in other teams with price hike and buying action of IPL franchises on unlisted markets. As the only actively traded IPL stock in the unlisted space after its demerger from India Cements, Chennai Super Kings (CSK) is seeing initial gains from this sentiment.

The Chennai franchise in IPL has seen its share price gone up from around ₹225–₹240 at the start of March to ₹300–335 now, indicating a move of 25–40% in under a month, according to data from Wealth Wisdom India, a platform that facilitates the trade of unlisted shares. In fact, the share prices have doubled from the 52 week low of ₹174.

Similarly, data from InCred Money, another such platform also showed a growth of 24 per cent in the month.

Season Fever

Other platforms such as UnlistedZone note a sharp spike in the shares on March 23, a day after the franchise hosted a large scale fan event in the run up to the IPL this year.

The increase comes at a time when RCB and RR have attracted record-breaking bids, underscoring IPL franchises’ soaring global investor appeal. Rajasthan Royals is set to be sold to a consortium led by US-based tech entrepreneur Kal Somani for a reported $1.63 billion, while Royal Challengers Bengaluru has been acquired by a consortium comprising the Aditya Birla Group, the Times Group, Bolt Ventures and Blackstone for $1.78 billion.

Discount Price

Krishna Patwari, Founder & Managing Director of Wealth Wisdom India believes that the shares of CSK are available at a discount when compared to other franchises. “With a market cap of about ₹11,000 – ₹11,500 crore, CSK is effectively trading at a 30% discount to the RCB benchmark,” he said.

Patwari notes that the discount could be attributed to the unlisted markets factoring in issues like the absence of a clean controlling stake, dispersed ownership structure and a lack of immediate strategic sale visibility. Moreover, the sharp increase in the share’s price over a relatively short period indicate that the shares are being bought not only by retail investors but also institutional players and HNIs, he added.

Vijay Kuppa, CEO, InCred Money, says that when deals as large in scale as RR/RCB get disclosed, listed investors instinctively benchmark comparable assets, and CSK, given its track record and brand equity, was an obvious one. “At the current price of ₹335, the market cap of CSK is around ₹12,710 crore; it remains to be seen how much further the price can move from here,” he added.

IPL Revenues

CSK reported revenues of ₹643 crores in FY25 and reported a profit after tax of ₹180 crores, according to its annual report. Comparatively, RCB posted revenues of about ₹504 crore.

Similarly, shares of companies associated with other IPL teams have also seen a rise.

Sun TV which controls Sunrises Hyderabad went up as high as 5.4 per cent on Wednesday, while RPSG Ventures Limited which owns Lucknow Super Giants, went up by 20 per cent to hit its upper circuit.

Published on March 26, 2026