During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.
The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server.
This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE.
More details on the patch and mitigations below:
https://t.co/Y1Y72aHxrW
EmbeddingGemma 2 from @googlegemma, our compact 740M-parameter AI model built specifically for on-device and edge apps, has arrived.
While the first-generation model delivered best-in-class text embedding, EmbeddingGemma 2 natively understands it all, connecting text, images, audio, and video in one shared space. This means you can search across different formats like text, images, audio, and video, without having to manually organize, translate, or label them first.
Stripe has finalized an agreement to acquire OpenRouter for more than $7 billion, according to a report from Bloomberg. This is more than five times the $1.3 billion valuation from OpenRouter's funding round just 82 days ago.
We promised open weights for Qwen3.8. Now, time to meet them! 🎉
⚡ Qwen3.8-27B:
- A native multimodal dense model. With just 27B parameters, it outperforms Qwen3.7-Plus overall and shines in real-world coding & office workflows.
- 262K native context, easily extendable to 1M tokens via YaRN.
- Built for builders. Highly efficient, high-quality, and licensed under Apache 2.0.
🚀 The open weights for Qwen3.8-2.4T-A95B (Max-level) have also been released recently.
Whether you're shipping lightweight applications with Qwen3.8-27B locally or building agents with Qwen3.8-2.4T-A95B, they're yours now!
Download, deploy, and build something we haven't imagined yet. 👀👇
- Hugging Face:
https://t.co/4kaAcqYEVj
- ModelScope:
https://t.co/eRIMZCGkhC
Congrats to all our friendly MSSP's , Splunk Partners and Customers.
Boss for The SOC - Splunk and Cyber Security Council.
Team - UNICORN ( HelpAG) ! Detection Engineering.
@splunk@cscgovae
During #CyberQ_UAE, the UAE Cyber Security Council conducted a productive session for the Crystal Ball platform with Counter Ransomware Initiative (CRI) representatives, comprising over 60 member countries, showing and introducing the platform's advanced AI capabilities in enhancing real-time cyber threat intelligence sharing and response.
على هامش فعاليات #CyberQ_UAE عقد مجلس الأمن السيبراني جلسة مثمرة لمنصة Crystal Ball التي أطلقها المجلس وذلك بحضور ممثلي مبادرة مكافحة برامج الفدية السيبرانية CRI والتي تضم في عضويتها أكثر من ٦٠ دولة بهدف إطلاعهم على أحدث قدرات المنصة في استخدام خلال الذكاء الاصطناعي لتعزيز قدرات أعضائها نحو تبادل المعلومات اللازمة للتصدي الآني للهجمات السيبرانية المختلفة.
#CSC #CyberQ_UAE #CyberSecurity #Innovation #MENA #QuantumTechnology
#مجلس_الأمن_السيبراني #الإمارات #دبي #الأمن_السيبراني #الأمن_الرقمي #السلامة_الرقمية
The UAE Cyber Security Council is pleased to announce the achievement of two Guinness World Records at #CyberQ_UAE conference: delivering the "Largest Quantum Computing Lesson" with 309 participants, and "Most Nationalities in a Quantum Computing Lesson" with 87 countries represented, marking a significant milestone in the MENA region's quantum education journey.
يسر مجلس الأمن السيبراني لدولة الإمارات العربية المتحدة الإعلان عن تحقيق رقمين قياسيين في موسوعة غينيس للأرقام القياسية خلال مؤتمر #CyberQ_UAE: "أكبر درس في الحوسبة الكميّة" بمشاركة 309 مشارك، و"أكبر عدد جنسيات مشاركة في درس للحوسبة الكميّة" بتمثيل 87 دولة، في إنجاز يعزز مكانة المنطقة في مجال التعليم الكمّي.
#CSC #CyberQ_UAE #CyberSecurity #Innovation #MENA #QuantumTechnology
#مجلس_الأمن_السيبراني #الإمارات #دبي #الأمن_السيبراني #الأمن_الرقمي #السلامة_الرقمية
#CyberQ - Progress towards Quantum Advantage and Applications.
#helpag Help AG, an e& enterprise company . #msspuae
Preparing defenses includes investing in detection systems that recognize quantum-based attacks and protective mechanisms like post-quantum cryptography.
@csc
#GISEC - 2024 | #Help AG
We extend our gratitude to all the customers and partners who took the time to visit us.
If you haven't had the chance to visit yet, please stop by our booth at Hall 6, Stand A-95. We'd love to connect with you.
#dubaicyberindex#splunk
شارك مجلس الأمن السيبراني الإماراتي في فعالية مايكروسوفت بيلد؛ يوم الذكاء الاصطناعي – بناء وتحديث تطبيقات الذكاء الاصطناعي، حيث ألقى سعادة الدكتور محمد الكويتي، رئيس مجلس الأمن السيبراني الإماراتي، كلمة رئيسية ركزت على تداخل الذكاء الاصطناعي والأمن السيبراني وتقاطعهما. وقد هدفت هذه الفعالية إلى تزويد المطورين ومتخصصي تكنولوجيا المعلومات بالأدوات اللازمة لتعزيز تدابير الأمن السيبراني، والاستفادة من تكنولوجيات الذكاء الاصطناعي بفاعلية على منصة مايكروسوفت أزور.
The UAE Cyber Security Council participated in the Microsoft Build: AI Day - Build and Modernize AI Apps, where H.E. Dr. Mohamed Al Kuwaiti, Head of the UAE Cyber Security Council, delivered a keynote speech focusing on the intersection of AI and cybersecurity. This event aimed to equip developers and IT professionals with the necessary tools to enhance cybersecurity measures while leveraging AI technologies effectively on the Microsoft Azure platform.
#مايكروسوفت #الإمارات #الذكاء_الاصطناعي #مجلس_الأمن_السيبراني
#microsoft #AI #cyber_security #UAE #CSC