Productivité

MZ Automation lib60870

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value. View CVE Details Affected Products MZ Automation libIEC61850 Vendor:MZ Automation Product Version:MZ Automation libIEC61850: >=v1.0.0|<=v1.6.1 Product Status:known_affected Remediations Vendor fixMZ Automation recommends updating to the latest build of the libIEC61850 standard. D

From visibility to response: 1Password for SOC workflows

Modern security teams increasingly rely on integrated security operations center (SOC) workflows that correlate signals and alerts, while orchestrating detection responses in real time. Behind every alert is an identity: a person, a service account, an API key, or an AI agent. However, when remediation requires manual steps, investigation and response slows, increasing security risks.

Introduction

Google Threat Intelligence Group (GTIG) identified a multistage intrusion campaign by a newly tracked threat group, UNC6692, that leveraged persistent social engineering, a custom modular malware suite, and deft pivoting inside the victim’s environment to achieve deep network penetration. As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victim to accept a Microsoft Teams chat invitation from an account outside their or

Example workflows

During a deployment, a GitHub Actions workflow uses a 1Password service account to retrieve and inject environment variables into the build process.A Node.js application running in a Kubernetes pod uses the 1Password SDK with a service account to read database connection strings from a 1Password Environment at startup.While working in an AI‑assisted IDE, a developer asks the agent to run a 1Password CLI-powered Makefile command, automatically injecting credentials from 1Password Environments whi

Threat Details

In late December 2025, UNC6692 conducted a large email campaign designed to overwhelm the target with messages, creating a sense of urgency and distraction. Following this, the attacker sent a phishing message via Microsoft Teams, posing as helpdesk personnel offering assistance with the email volume. The victim was contacted through Microsoft Teams and was prompted to click a link to install a local patch that prevents email spamming. Once clicked, the user’s browser opened an HTML page and ult

THE SNOW Ecosystem

The original phishing link (https://service-page-25144-30466-outlook.s3.us-west-2.amazonaws.com/update.html?email= .com) delivered via Microsoft Teams directs the victim to a landing page masquerading as a "Mailbox Repair Utility." This interface is designed to elicit user engagement through various on-screen buttons.

Securing programmatic access across every development workflow

Bringing programmatic access to 1Password Environments allows you to use secrets directly in the tools and workflows where code runs, not just in a fixed set of destinations. Meanwhile, desktop authentication for SDK integrations gives you a simple, secure way to build tools that act with a signed‑in user’s session. Together, these capabilities expand how you can access and use 1Password programmatically, whether it’s powering your CI/CD pipelines via user-authenticated sessions or enabling auto

From tricycle to Porsche: Salesforce rebuilt Slackbot from the ground up

Harris was blunt about what distinguishes the new Slackbot from its predecessor: "The old Slackbot was, you know, a little tricycle, and the new Slackbot is like, you know, a Porsche." The original Slackbot, which has existed since Slack's early days, performed basic algorithmic tasks — reminding users to add colleagues to documents, suggesting channel archives, and delivering simple notifications. The new version runs on an entirely different architecture built around a large language model and

How Slackbot transforms scattered enterprise data into executive-ready insights

During a product demonstration, Amy Bauer, Slack's product experience designer, showed how Slackbot can synthesize information across multiple sources. In one example, she asked Slackbot to analyze customer feedback from a pilot program, upload an image of a usage dashboard, and have Slackbot correlate the qualitative and quantitative data. "This is where Slackbot really earns its keep for me," Bauer explained. "What it's doing is not just simply reading the image — it's actually looking at the

Automation goes from helper to replacement

The transition here is automation going from a thing that helps humans do their jobs better—improves productivity and efficiency—to being a way for companies to get to their ideal state of being able to do all the work themselves. This is colossal. This is economy changing. This really is the end of labor. There's labor and there's capital and these have always been in balance. It gets disrupted because companies have always wished they could do all the work without employees. If you're a single

Type 4: The slack in the rope restriction

This seems related to the third, but it's sneaky and colossal. This is another inertia problem, but much larger in scale. It's like Type 3, but for society as a whole. A lot of people would say that it's obvious that a 4-year education in something like computer science in a 4-year university should not take that long. They would say that the limitations are societal and institutional, and this is the reason that things are still done the way they are. We've got ancient textbooks that cost an ex

The Hook System: Event-driven automation

Hooks are the nervous system of PAI. They fire automatically at specific lifecycle events: EventWhen It FiresExample HooksSessionStartNew conversation beginsLoadContext — injects SKILL.md + Steering RulesUserPromptSubmitEvery user messageFormatReminder — detects response mode, routes capabilitiesExplicitRatingCapture — captures 1-10 ratingsImplicitSentimentCapture — detects emotional toneUpdateTabTitle — sets terminal tab to current taskPreToolUseBefore any tool executesSecurityValidator — block

The Hook System: Event-Driven Automation

🪝 Hooks are the nervous system—they connect everything automatically. We've covered Skills (WHAT to do), Context (WHAT to know), and History (WHAT to remember). Now let's talk about WHEN things happen automatically. The Hook System makes your personalized Claude Code reactive.

The Power of Automation

Without Hooks: You'd need to manually: Load context each sessionLog every commandCapture outputs for laterExtract and save learningsTrigger voice narrationUpdate session state With Hooks: All of this happens automatically. You just work. The infrastructure captures everything. This is what "YOUR cognitive operating system" means. The system doesn't just respond to you—it actively maintains itself.

Tier 3: Browser Automation - Full JavaScript Execution

Tier 3 utilise Playwright pour l'automatisation complète du navigateur avec exécution réelle de JavaScript, permettant de scraper les sites dynamiques basés sur React, Vue ou Angular. Cette approche gère les manipulations DOM, les sessions et les applications monopage, mais prend 10-20 secondes d'exécution. Elle résout environ 10-15% des cas d'échec des deux premiers niveaux de scraping.

From tricycle to Porsche: Salesforce rebuilt Slackbot from the ground up

Harris was blunt about what distinguishes the new Slackbot from its predecessor: "The old Slackbot was, you know, a little tricycle, and the new Slackbot is like, you know, a Porsche." The original Slackbot, which has existed since Slack's early days, performed basic algorithmic tasks — reminding users to add colleagues to documents, suggesting channel archives, and delivering simple notifications. The new version runs on an entirely different architecture built around a large language model and

How Slackbot transforms scattered enterprise data into executive-ready insights

During a product demonstration, Amy Bauer, Slack's product experience designer, showed how Slackbot can synthesize information across multiple sources. In one example, she asked Slackbot to analyze customer feedback from a pilot program, upload an image of a usage dashboard, and have Slackbot correlate the qualitative and quantitative data. "This is where Slackbot really earns its keep for me," Bauer explained. "What it's doing is not just simply reading the image — it's actually looking at the

Microsoft Teams threats

Threat actors seek to abuse Microsoft Teams features and capabilities across the attack chain, underscoring the importance for defenders to proactively monitor, detect, and respond effectively. In this blog, we recommend countermeasures and optimal controls across identity, endpoints, data apps, and network layers to help strengthen protection for enterprise Teams users.

Table & Workflow Enhancements

Drag-and-drop column ordering Column pinning and reset controls Better usability for large datasets

LLMs and Automation

Overall, there is too much data in engagement logs for anyone to manually review, causing a bottleneck for analysis. To combat this issue, Janus produces normalized JSON for every task and result, making operational data usable by LLMs. Users should ensure any data shared with LLM services aligns with their organization’s data handling policies. For sensitive environments, this can be done using self-hosted models or hosted options such as Amazon Bedrock. Instead of digging through logs, teams c

Workflow Analysis

This layer focuses on how operations unfold over time, where they break, and where time is lost: callback-health – Which implant sessions show instability, failure patterns, or crashes? dwell-time – Where are operators losing time between tasks? parameter-entropy – Which arguments look anomalous or out of place?

Datacenter Capex s'enfonce dans un ChatGPT de Robotics Moment pour 2027 et cette décennie.

Michael Spencer and Michael Fritzell from AI Supremacy23 juil.

Chez Automation Anywhere, l’agentique prend le pas sur le cœur RPA

Sur fond de dilution de la RPA au sein de plates-formes d'automatisation, l'agentique tend à orienter les stratégies commerciales, voire les roadmaps.

The trends in our changing workflows

AI capability has become broadly accessible and useful to individuals, but what actually helps organizations solve problems faster is the ability for teams to assess and redesign how they operate with AI. More and more, the measure of success can’t be whether AI can help one person move faster. Instead, we chose to anchor on team-level transformations. We’re more focused on whether a team can work differently together because of the solutions being built. Our build day was grouped by business ar