Donald Trump’s son-in-law Jared Kushner is on a diplomatic mission in the Middle East to meet Hamas officials and the Israeli prime minister, Benjamin Netanyahu, in an attempt to salvage a ceasefire in Gaza. The talks come after Netanyahu rejected the US-backed 15-point peace plan for the territory in a rare public break with the Trump administration this month. Nosheen Iqbal speaks to global editor Devika Bhat

Continue reading...

Commentary about the ‘so bad it’s good’ qualities of mother and son’s movie has driven people to see it at cinema

A crude, low-tech animation about a cow and a skylark has become a sleeper hit at China’s box office, sitting alongside blockbusters such as The Odyssey and Spider-Man: Brand New Day in cinema revenue rankings.

Niu Lai, which translates to The Cow is Coming, is an 86-minute budget animation about a newborn calf and a skylark whose relationship develops over the course of an abstract dream sequence.

Continue reading...

Actor whose success as a child star led to roles in the Scream franchise and the TV series Nashville and Heroes

The actor Hayden Panettiere, who has died suddenly aged 36, won worldwide fame at the age of 17 as the Texas high-school cheerleader Claire Bennet, one of the ordinary people with superhuman powers in the comic-book-style TV series Heroes.

Her character has the gift of rapid cellular regeneration – being able to heal in seconds from injuries such as wounds, broken bones and burns. “Think Wolverine from the X-Men – minus the claw,” wrote one critic.

Continue reading...

Er valt eindelijk regen en het is gedaan met de regionale hittegolven, maar de droogte blijft. Waterschappen melden dat de buien lokaal zijn en voor grondwaterstanden ‘bijna niks’ doen. „Voor volledig herstel is een natte herfst en winter nodig”

An AI broke Snowflake’s code; then another AI, an attack agent, autonomously found the bug, exploited it, and extracted credentials without human intervention. Luckily, this wasn’t yet another case of rogue AI agents doing evil things. It was a sanctioned bug hunt, conducted through Snowflake’s HackerOne vulnerability disclosure program, and Snowflake fixed the flaw the same day Wiz reported it and rotated the affected credentials the following day. Wiz’s red agent, an AI-powered autonomous attacker designed for offensive security, found the GitHub Actions workflow flaw during a routine scan of public repositories on June 23. The script injection vulnerability existed in snowflakedb/snowflake-connector-net, and it allowed an unauthenticated user to execute arbitrary commands within a GitHub Actions runner by opening a GitHub issue with a specially crafted title. And it turned out an AI had inadvertently injected the bug into the code five days earlier. GitHub Copilot Autofix, an AI coding assistant, co-authored the commit on June 18, and it introduced a script injection bug in run: blocks by removing the repository’s existing sanitized input pattern and replacing it with direct string expansion in a shell script. “We crafted an issue title that, after template expansion, breaks out of the echo string and exfiltrates the Jira credentials via an out-of-band callback,” Wiz’s head of threat exposure Gal Nagli said in a Monday blog. These credentials gave Wiz read access to Snowflake’s engineering, security compliance, and bug bounty tracking projects. Wiz reported the workflow vulnerability to the cloud data platform on June 23, and Snowflake patched it the same day. It also revoked and rotated the Jira token, and confirmed, via audit logs, that Wiz was the only third-party to access the endpoint during the five-day exposure window. The disclosure “was immediately investigated and remediated, and our investigation found no evidence of unauthorized access,” a Snowflake spokesperson told The Register. “We are working together with Wiz to share these learnings with the broader industry to encourage widespread adoption of these security best practices.” Wiz, for its part, deleted all of the data it accessed during the vulnerability research and proof-of-concept exploit testing, and told us that this incident proves human code review isn’t sufficient to quickly detect vulnerabilities - especially as developers increasingly use AI. “This incident highlights a rapidly emerging reality in software development: how AI coding assistants can inadvertently introduce workflow injection vulnerabilities, and how automated AI agents can rapidly surface them in the wild,” Nagli wrote. Of course, the Google-owned biz has a vested interest in saying this. But this doesn’t make it not true.®

stan.jernigan has added a photo to the pool:

I took this photo of the building with my iPhone 17 Pro Max while visiting and walking around Nagasaki, Japan. I don’t know what the building is used for, but it has a government feel. I liked the architectural design, stonework, columns, shutters, and the roofline adornments...

F1 Correspondent Lawrence Barretto takes us through the current state of play in the F1 driver market.

We live in a world of ordinary abundance & luxuries only dreamed of in centuries past: music on demand, photographs, books, eyeglasses, refrigeration, vaccination, bicycles, and the washing machine.