tsn_hub

Tech | Social | Network | News | Technology | AI | Data Science | Business | Tech Enthusiast | Research | Life | Nature | Growth

[tsn_hub @tsnmediahub]

Anthropic has put a price range on its IPO. Vates says attackers are actively exploiting Xen Orchestra. Australia wants a regulator for frontier AI.

That was Tuesday on TSN. The video adds the science: mRNA heart repair and an Alzheimer's study, both only in mice, and NASA's ESCAPADE twins on their way to Mars.

The day, in one thread 🧵

[tsn_hub @tsnmediahub]

How backups are now on by default for new virtual machines, the new ru-central1-f zone launching 11 November, and the tight quotas at the start.

https://t.co/t2muS9FR5N

[tsn_hub @tsnmediahub]

2.84%.

That is the share of Yandex Cloud customer data the company says cannot be restored after attacks on its data centres. It also says engineers restored access to 97.16%.

Those are Yandex's figures. It has not published a customer count, and it has not named an attacker.

Source: Yandex

[tsn_hub @tsnmediahub]

The 13 November date is for federal civilian agencies under BOD 26-04, not a private-sector legal deadline. Ransomware use is listed as Unknown.

https://t.co/TP2fsBELX3

[tsn_hub @tsnmediahub]

Barracuda now says exploitation has affected a small number of organisations. CISA has added both flaws to KEV, with a 13 November deadline for federal civilian agencies.

The two remain distinct: 116606 needs administrative UI access; 111560 is an authenticated-admin bug.

https://t.co/4OMDY5zQgk

[tsn_hub @tsnmediahub]

🔐 Barracuda has disclosed two flaws across six products, including its Email Security Gateway. Chained together, they could give root, but only via the admin interface.

No exploitation has been reported. Barracuda's advice is to update and lock down that admin interface.

Source: Barracuda

[Eli @Elishen01]

Incognito only clears local history—your ISP still sees every domain you visit.

dnscrypt-proxy encrypts DNS traffic to block snooping:
1. Encrypt queries via DoH or DNSCrypt
2. Filter ads and malware domains

Limit: Local proxy tool.

https://t.co/HkriC4dPrt

[tsn_hub @tsnmediahub]

Which four BroadWorks platforms are affected, why there is no workaround, and why CISA's 24 November date is a federal deadline rather than a universal one.

https://t.co/oSgIYiGr2C

[tsn_hub @tsnmediahub]

"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability..."

That is still the line in Cisco's August advisory on CVE-2026-20320, a BroadWorks XML flaw that could let an unauthenticated, remote attacker read sensitive files. CISA has now added it to its Known Exploited Vulnerabilities catalogue anyway.

The first fixed release is RI.2026.07, and Cisco lists no workarounds.

Source: CISA; Cisco

[tsn_hub @tsnmediahub]

So will Dow build it? X-energy says Dow is expected to consider a preliminary investment decision in 2027, with full-scale construction following a final investment decision.

https://t.co/lQoVRIeZQP

[tsn_hub @tsnmediahub]

⚡ Permit to build: granted.
Permit to run: not yet.

The NRC has issued a construction permit for Long Mott, four X-energy Xe-100 reactors at Dow's Seadrift site in Texas, meant mainly to make high-temperature steam for industry. The agency calls it the first construction permit for a high-temperature gas-cooled reactor in nearly 60 years.

Operation needs a separate licence, and Dow says the permit is not a final decision to build.

Source: NRC; Dow

[tsn_hub @tsnmediahub]

What does the exploited Outlook spoofing flaw actually do?

Microsoft says a specially crafted message file, once a user opens it, could make Outlook connect to an attacker-controlled location without the usual external-content warning. That discloses the user's NTLMv2 hash, which the attacker "could use this to authenticate as the user".

Microsoft lists CVE-2026-124194 as exploited, and CISA added it to its KEV catalogue on 10 November. It isn't zero-click, and the Preview Pane is not an attack vector. The fix is in Microsoft's November security updates.

https://t.co/tab8mf1SgA

[tsn_hub @tsnmediahub]

How much, if any, has actually been drawn? Neither release says.

https://t.co/uT1K1Wb15m

[tsn_hub @tsnmediahub]

HUMAIN and Infra have signed financing of up to SAR 2.5bn, about $667m, for AI compute and power. Three caveats:

1. The figures are ceilings, not amounts already drawn
2. Pricing, tenor, security and drawdowns are undisclosed
3. The facilities are the first under Infra's AI Data Center Financing Program

Source: HUMAIN; Infra

[tsn_hub @tsnmediahub]

The $2.9bn AI Cloud backlog is expected revenue under signed commitments, not a US GAAP measure, and not necessarily indicative of future revenue.

https://t.co/kIsdG6VjKi

[tsn_hub @tsnmediahub]

Bitdeer's unaudited Q3: record revenue, and a wider loss.

- Revenue $320.7m, up from $169.7m a year earlier
- Net loss $125.5m, including a $54.6m non-cash charge, versus $30.1m
- Adjusted EBITDA $69.6m is a non-GAAP figure, distinct from the net loss
- A $2.9bn AI Cloud backlog is not revenue

Source: Bitdeer; SEC filing

[tsn_hub @tsnmediahub]

Will Cisco's first cohort and IBM's early-2027 date hold? These announcements do not yet say.

https://t.co/cnyBa7JmoU

[tsn_hub @tsnmediahub]

Cisco and IBM have each set out plans to put Claude Mythos inside their security products. Neither plan is a shipped integration, and neither vendor named a Mythos version.

Cisco says it is coming soon for select enterprises. IBM says general availability is planned for early 2027.

Source: Cisco; IBM

[tsn_hub @tsnmediahub]

Until the transaction closes, the January 2027 offering remains a plan, and the staged 2027 timetable is written in the future tense.

https://t.co/nKGAhhMU6s

[tsn_hub @tsnmediahub]

Has Vanta actually bought Pillar Security?

Not yet. The two companies have signed a definitive agreement. No price or close date was disclosed. A paid AI Governance offering is planned for January 2027, which is a product timetable, not a completed acquisition.

Source: Vanta; Pillar Security

[tsn_hub @tsnmediahub]

The new figure is "nearly 3x lower than" the partners' own 2025 baseline, Christian Weedbrook, Xanadu's founder and chief executive, said.

https://t.co/zrSjJDI8bD

[tsn_hub @tsnmediahub]

In 2025, Xanadu and HyperLight put optical switch loss at 20 mdB.
Now they say it is 7 mdB, nearly threefold better.

That is a company-reported benchmark, not an independent laboratory measurement, and it was not accompanied by a paper. The 10x and production-ready claims are the companies' own.

via @XanaduAI

Source: Xanadu; HyperLight