CORTEXLa Friends Connection
The Elevation of Privilege (EoP) threat modeling card game, created by Adam Shostack in 2010, is the easy way to get started threat modeling.
30 juil.
The Elevation of Privilege (EoP) threat modeling card game, created by Adam Shostack in 2010, is the easy way to get started threat modeling.
Les PME québécoises se leurrent si elles pensent que leur petite taille ou leur caractère francophone les rendent moins attrayantes aux yeux des cybercriminels locaux ou étrangers.
Learn how service management is changing in the era of AI. Read the full analysis from Forrester on Conversational AI Platforms for Employee Services.
New Lansweeper, Coralogix, and Honeycomb integrations bring asset, log, and trace intelligence into Jira Service Management for faster incident resolution.
New industry analyst reports recognize Atlassian as a leader in service management AI is changing expectations for service. Employees want help that feels seamless. Customers want answers without long waits or repeated explanations. Operations teams want to get ahead of incidents and prevent disr...
Optimizing GPU kernels is critical for efficient modern machine learning systems yet remains challenging due to the complex interplay of design factors and rapid hardware evolution. Existing automated approaches typically treat Large Language Models (LLMs) merely as stochastic code generators within heuristic-guided evolutionary loops. These methods often struggle with complex kernels requiring coordinated, multi-step structural transformations, as they lack explicit planning capabilities and frequently discard promising strategies due to inefficient or incorrect intermediate implementations. To address this, we propose Search via Co-Evolving World Model and build K-Search based on this method. By replacing static search heuristics with a co-evolving world model, our framework leverages LLMs' prior domain knowledge to guide the search, actively exploring the optimization space. This approach explicitly decouples high-level algorithmic planning from low-level program instantiation, enabling the system to navigate non-monotonic optimization paths while remaining resilient to temporary implementation defects. We evaluate K-Search on diverse, complex kernels from FlashInfer, including GQA, MLA, and MoE kernels. Our results show that K-Search significantly outperforms state-of-the-art evolutionary search methods, achieving an average 2.10x improvement and up to a 14.3x gain on complex MoE kernels. On the GPUMode TriMul task, K-Search achieves state-of-the-art performance on H100, reaching 1030us and surpassing both prior evolution and human-designed solutions.
CCV https://admin.ccv-cvc.ca/CCV-P490T%20-%20CCV%20Admin%20Training%20Manual-en.htm#_Toc304452197 https://admin.ccv-cvc.ca/loginadmin-eng.frm https://ccv-cvc.ca/schema/generic-cv/generic-cv.html
The digital domain is increasingly a battleground for state and nonstate actors who are leveraging capabilities in cyberspace to advance strategic geopolitical goals.
Just trying my best to become better than my yesterday’s self #BecomeBetter
Guides, announcements, and articles about Cloud Security and the Wiz platform.
Experience: Aikido Security · Education: Stanford University · Location: New York · 500+ connections on LinkedIn. View Mike Wilkes’ profile on LinkedIn, a professional community of 1 billion members.
Matt Kimball is a vice president and principal analyst covering servers and storage.
La deuxième grosse news, c'est la mise à jour du protocole Dausos en juin 2026. Pour rappel, Dausos est le protocole propriétaire de Surfshark, sorti en avril 2026, qui promet jusqu'à 30% de vitesse en plus que les protocoles standards tout en intégrant du chiffrement post-quantique. Mais le vrai problème que cette mise à jour résout, c'est la connectivité sur les réseaux verrouillés. Vous savez, ces réseaux d'école, d'université ou d'entreprise qui bloquent les VPN à coups de pa
Entre deux lignes de code et des mises à jour de protocoles, Surfshark a publié son Impact Report 2025 début juillet (fichier PDF). Et franchement, c'est pas du greenwashing à deux balles. Leurs bureaux de Vilnius et Kaunas fonctionnent à 100% d'énergie renouvelable avec des certifications BREEAM "Excellent". Ils ont planté plus de 9 000 arbres en Lituanie via un défi marche entre employés. Mais le plus cool, c'est leur Emergency VPN program : en 2025, ils ont fourni un accès VPN
A key-encapsulation mechanism (KEM) is a set of algorithms that, under certain conditions, can be used by two parties to establish a shared secret key over a public channel. A shared secret key that is securely established using a KEM can then be used with symmetric-key cryptographic algorithms to perform basic tasks in secure communications, such as encryption and authentication. This standard specifies a key-encapsulation mechanism called ML-KEM. The security of ML-KEM is related to the computational difficulty of the Module Learning with Errors problem. At present, ML-KEM is believed to be secure, even against adversaries who possess a quantum computer. This standard specifies three parameter sets for ML-KEM. In order of increasing security strength and decreasing performance, these are ML-KEM-512, ML-KEM-768, and ML-KEM-1024.
Post-quantum cryptography protects against quantum threats using today’s hardware. Quantum tech like QKD may sound appealing, but it isn’t necessary or sufficient to secure organizations.
) is remotely (far away) executed (ran on the computer). Hence, beep boop stuff that is far away runs on a computer. Historically an RCE is like, your computer is running Soup Goop server, and Soup Goop server fails to properly parse data it receives, allowing specially crafted input to trick Soup Goop server to execute code. So, you could like, use Python 3.11 to send some dumb slop to a remote computer address and it'll execute your bad stuff. In this instance (and many other from Steam and malicious mods in general), the idea is that someone operates or possesses a server which, and when a player joins, the video game server syncs data to the newly connected host which pushes a payload to it. In simple language, and as a hypothetical example, I operate Stinky Minecraft server, and if you join Stinky Minecraft server, my Stinky Minecraft server automatically pushes mods to your computer. Stinky Minecraft server does this because it automatically ensures you're compatible with Stinky Minecraft server and we can all play and have fun. However, one day Stinky Minecraft server says, "you need Goop Texture Pack Mod 0.2.1.1 and ... INFORMATION STEALING MALWARE HEHEHEHEHE" and that malware is automatically pushed to your machine (also with Goop Texture Pack Mod 0.2.1.1). Things like this doesn't really fit the category of Remote Code Execution because nothing is being executed remotely as a vulnerability, it requires a victim machine to connect to a malicious host which syncs the payload to the machine. This is closer in terminology to arbitrary code loading, malicious plugin loading, remote installation of untrusted code ... something, I don't know, but it's not an RCE. Overall, this is more or less a fundamental flaw in the design of video game mods because they're not appropriately sandboxed.
stinky nerds might appreciate. It discusses Copilot memory manipulation and AI abusing e-mail stuff. I'm not an AI nerd, so I'm meh. https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/
dr-ish is that if you insert carefully worded instructions, as white-text thus making it invisible to the user, at the end of Microsoft Office documents, Microsoft Copilot will follow the instructions given to it. The problem with this method (as is tradition), is that the text is still visible in the document if highlighted by the user. Hence, doing something as simple as CTRL+A would render the text visible to the user. Regardless, Håkon Måløy successfully appended white text to a Microsoft Office document that halved the values of company data presented in the document. In simple words, the appended white text manipulated company data in the Microsoft Word file. His second proof-of-concept demonstrated appended white texting propagating the appended white text to other Microsoft Office documents, thus making…
ary (homeless guy at the gas station) Cheers, Pic unrelated