NEW YORK (ANP) - De kwetsbaarheden in de belangrijke programmeertaal PHP zijn al ruim tien jaar oud. Dat schrijft cyberbeveiliger Wiz, dat de zwakke plekken met behulp van geavanceerde kunstmatige intelligentie zegt te hebben opgespoord.

"De kwetsbare code zat er al ruim een decennium. Wat is veranderd door AI, is de mogelijkheid om de zwakke plekken te doorgronden en ze te misbruiken", schrijft het Israëlisch-Amerikaanse Wiz, dat in maart door Google werd gekocht. "Met de geavanceerdste AI-modellen en het juiste gereedschap slaagde een enkele onderzoeker binnen een week in iets wat een topteam voorheen maanden werk zou hebben gekost."

Volgens Wiz brengt dit een kentering teweeg in de manier waarop zwakke plekken worden opgespoord of misbruikt. Dankzij AI is het voor cybercriminelen sneller lonend om kwetsbaarheden uit te buiten, maar beveiligers hebben ook de mogelijkheid om oude weeffouten weg te werken.

BRUSSEL (ANP) - De Europese Commissie heeft geen aanwijzingen dat diensten of gegevens van de Commissie zijn getroffen door het beveiligingslek in de programmeertaal PHP. Dat laat een woordvoerder van de Commissie desgevraagd aan het ANP weten.

"Onze IT-beveiligingsteams zijn met prioriteit begonnen met het implementeren van de updates", aldus de woordvoerder.

De Commissie blijft nauw samenwerken met CERT-EU, de cybersecuritydienst van de EU-instituten, "en elk signaal van mogelijke veiligheidsproblemen grondig onderzoeken", voegde de woordvoerder daaraan toe.

Veiligheidsupdates

CERT-EU waarschuwde voor kwetsbaarheden in PHP. De dienst adviseerde organisaties woensdagochtend veiligheidsupdates onmiddellijk door te voeren zodra die beschikbaar zouden komen. Mocht dat niet lukken, dan moeten applicaties die verbonden zijn met het internet offline worden gehaald, zo luidde het advies.

De sites van de Europese Commissie, de Europese Raad en het Europees Parlement waren woensdag gewoon bereikbaar.

AMSTERDAM (ANP) - Carrefour heeft een flinke koersval gemaakt op de beurs in Parijs. Het Franse supermarktconcern eindigde 13,8 procent lager, nadat het zijn financiële doelstellingen voor het hele jaar naar beneden had bijgesteld. Dat was het gevolg van de geweldsuitbarstingen in verschillende delen van het land. Op het Damrak in Amsterdam was Randstad de positieve uitschieter. Het uitzendconcern maakte bij de middelgrote fondsen een koerssprong van 20,1 procent na bekendmaking van de kwartaalcijfers.

Carrefour heeft duizenden supermarkten, hypermarkten en buurtwinkels in Frankrijk. Het concern heeft nu te kampen met een dalend aantal winkelbezoekers, kortere openingstijden als gevolg van avondklokken en hogere kosten voor beveiliging en logistiek.

De AEX-index eindigde 0,8 procent hoger op 1142,30 punten. Daarmee komt de graadmeter dicht bij het slotrecord van afgelopen vrijdag op 1142,88 punten. De MidKap, met daarin middelgrote fondsen, steeg 1,6 procent tot 1075,59 punten.

DEN HAAG (ANP) - Zorgminister Sophie Hermans heeft als reactie op de verhoging van de zorgpremie door verzekeraar DSW herhaald dat er maatregelen nodig zijn om "de zorg betaalbaar en toegankelijk te houden". De "aanhoudende groeiende vraag naar zorg en de stijgende lonen en prijzen" zijn volgens haar belangrijke oorzaken van de gestegen zorgkosten.

DSW maakte woensdag als eerste verzekeraar de basispremie bekend. Die stijgt met 14,75 euro tot 173,25 euro per maand en 2079 euro per jaar. De premie steeg vorig jaar niet door een meevaller in het zorgverzekeringsfonds. Hermans wijst er in haar reactie op dat bekend was dat het eenmalig was.

Het eigen risico gaat volgend jaar met 15 euro omhoog tot 400 euro. Dat is een inflatiecorrectie. Het kabinet wil het eigen risico graag verder verhogen. Dat zou er onder meer voor moeten zorgen dat de basispremie lager blijft en dat had 583,5 miljoen euro moeten opleveren. Een meerderheid in de Tweede Kamer is tegen het verhogen van het eigen risico.

Verhoging eigen risico

De verhoging van het eigen risico en andere bezuinigingen die de zorgkosten moeten drukken, zijn door weerstand in de Tweede Kamer uitgesteld tot in ieder geval 2028. Bij de recente behandeling van de begroting van het ministerie van Volksgezondheid, Welzijn en Sport bleken weinig partijen voorstander van de bezuinigingen.

De hoogte van de zorgtoeslag wordt na 12 november bekend als alle zorgverzekeraars de premie hebben gepubliceerd, zegt Hermans.

AMSTERDAM (ANP) - In Floradorp in Amsterdam-Noord is per direct cameratoezicht ingesteld. Burgemeester Femke Halsema heeft daartoe besloten na de onrust van de laatste tijd in de wijk.

Die begon een week geleden, nadat bewoners te horen hadden gekregen dat Halsema hun plan voor een alternatieve oudejaarsviering had afgewezen. Sindsdien zijn er verschillende avonden relletjes ontstaan, waarbij de politie werd bekogeld met stenen en vuurwerk. De Mobiele Eenheid maakte er een eind aan.

De camera's in Floradorp blijven hangen tot en met 7 januari.

De Floradorpers wilden een groot vuur maken in een container, als alternatief voor hun jaarlijkse open vreugdevuur. Dat was door de Amsterdamse driehoek (burgemeester, politie en Openbaar Ministerie) eerder al verboden, omdat het te veel risico's meebrengt. Ook in een container is vuur niet veilig genoeg, oordeelden de deskundigen.

ajpscs has added a photo to the pool:

NOIR
MONO LIFE
© ajpscs

ajpscs posted a photo:

NOIR
MONO LIFE
© ajpscs

OpenBSD 8.0 brings bigger virtual machines, graphics improvements, and another helping of AI mockery. The round version number doesn't signal a radical break with its predecessors. OpenBSD 8.0 is the 61st release of the project. Developer Bryan Steele posted a highlights rundown on Mastodon. Wireless improvements include updates to the qwx driver for Qualcomm Wi-Fi 6 hardware. Its VMM/VMD hypervisor now supports multiprocessor VMs with up to 64 virtual CPUs in each guest. The kernel virtual memory address space on x86-64 is now 512 GB, up from 4 GB, allowing for GPUs with large amounts of VRAM. On Arm64 machines, OpenBSD supports hibernation, and on both x86-64 and Arm64 it can use CPU AES instructions for faster encrypted swap. Component upgrades include OpenSSH 10.6 and LibreSSL 4.4.0, and the DRM graphics driver stack from Linux 6.18. The default C compiler is Clang/LLVM 22, including for the SPARC64 edition – but at the cost of dropping support for the Loongson architecture. The list of errata is short, with just four fixes – but then, version 8.0 is very new. Just days before this release, there was a high-profile OpenBSD issue: Calif's "Big Fish" research describes a decades-old shared-memory bug chained with a separate kernel flaw to gain local root access. Both were fixed in OpenBSD 7.9, through errata 026 and 018 respectively. Project leader Theo de Raadt forked OpenBSD from NetBSD 1.0 in 1995, and the first release of the new OS was OpenBSD 1.2 in July 1996 – so version 8.0 is as close as the project will get to a 30th anniversary release. According to Calif's proof-of-concept code on GitHub, the bug was in the original code that both OpenBSD and NetBSD inherited from the original BSD codebase – which is how come there's a 37-year-old bug in a 30-year-old project. A HackerNews comment says: "Interestingly, looks like this was accidentally fixed in NetBSD during a rewrite of that code in August of 1999." The project has not updated its infamous slogan. The homepage still proclaims: "Only two remote holes in the default install, in a heck of a long time!" As we noted in May when OpenBSD 7.9 appeared, the project rejects code generated by LLMs, although on the basis of licensing concerns rather than its cousin NetBSD's explicit anti-AI stance. As we reported recently, this strict anti-AI stance seems to be serving NetBSD well. OpenBSD is also an anti-AI project, and for this release, the website goes out of its way to make that very clear. OpenBSD's mascot is a pufferfish, and in the banner artwork for the new release, "Puffy" has an extra eye – and the signpost in the image's background also has malformed text, a hallmark of early image-generation bots. The eyes are also constantly blinking – one at a time – to emphasize that this is a reference to Blinky the mutant fish from The Simpsons. In case you missed The Simpsons reference, the version 8.0 release theme song makes it even more explicit: it's titled "The Simps on AI." The lyrics and the vocals parody both Simpsons characters and AI users. Our favorite line sounds like Grampa Simpson, and says: Back in my day we didn't have artificial intelligence, we had real stupidity – and we liked it. We've seen negative reactions online, but then we often find that some people lack much of a sense of humor. For our part, we really enjoyed seeing the OpenBSD team having such fun. We reckon it will appeal to many Butlerian Jihadi types. It certainly did to The Reg FOSS desk. A little Wine with your pufferfish A couple of days before the 8.0 release came an unexpected announcement on the openbsd-ports mailing list: a proposed port of Wine for OpenBSD. This is a new version of the Wine 11 runtime that allows Windows binaries to launch and run on OpenBSD. This is a 64-bit version of Wine for OpenBSD on x86-64, and for now, this means it can only run 64-bit Windows code. (For the technical nitty-gritty: Wine needs to manipulate the CPU's GS register. Windows on x86-64 uses the GS segment base to locate the Thread Environment Block (TEB), as the late great Geoff Chappell explained. This is a very longstanding Windows data structure, going all the way back through Windows 95 to OS/2. The port was particularly tricky because OpenBSD doesn't allow programs to alter that, so the port is emulating instructions that use the %gs segment override. The snags are that this means 32-bit code doesn't work, and secondly, because this is unnecessary on Linux, the code is unlikely to be merged back into upstream Wine.) If you want to see it working, there are a few screenshot galleries on Reddit's openbsd_gaming group, showing a number of recent major titles running: Some samples from WIP wine port, more wine-on-OpenBSD screenshots, and even more wine-on-OpenBSD proof. The port comes hedged with caveats, notable among them that Wine does not do any kind of sandboxing, so using it potentially opens up OpenBSD to Windows malware. However, for some users, this could be a very useful addition. OpenBSD is the simplest and cleanest member of the BSD family, indeed, of the FOSS Unix family. Part of this is because entire subsystems are missing that the other BSDs provide. Bluetooth connections to Apple's wireless keyboards and pointing devices aren't supported. There's no logical volume management – which would massively help with OpenBSD's complex disk partitioning. There's no journaling filesystem either (although a port of the new Gefs is in progress). While small and clean, its priorities favor security and simplicity, though performance will depend on the hardware and workload. Importantly – since you probably will need to ask for help – the OpenBSD community does not have a reputation for friendliness. Saying that, it is quite a lot easier to get OpenBSD installed and running, complete with its 25-year-old version 2.2.5 of the Fvwm window manager, than either NetBSD or FreeBSD. If you're looking for an AI-free, and indeed systemd-free, path away from Linux, OpenBSD 8.0 is very definitely worth a try. ®

Brand, 51, faces three charges of rape, three of sexual assault and one of indecent assault against six women

A woman said Russell Brand degraded her and treated her like “a piece of meat” when he raped her at his London townhouse, a court has heard.

She alleged she repeatedly begged the 51-year-old comedian to stop the assault which left her bleeding for days and in pain.

Continue reading...

It’s time to learn the art of layering – and we’re talking a crew neck with a ballet wrap and blazer, not full-on outdoor explorer

Is layering an art? Probably not in the traditional sense. We are not talking the Bayeux tapestry here. No one is going to queue round the block to admire the subtle interplay between your Uniqlo Heattech and your cashmere crewneck. Still, I think it’s nice to romanticise this stuff. The deeply unpoetic truth is that it is going to get cold and wearing one item of clothing at a time simply isn’t going to cut it. So let’s pretend that the sliver of white T-shirt beneath a jumper, the shirt collar poking out above a cardigan, or the ballet wrap over a snug top are not acts of basic thermal self-preservation, but composition. A creative statement about proportion, texture, colour and self-expression. If you have to wear half your wardrobe at once, you may as well make a masterpiece out of it.

The avant-garde layering term to drop in order to sound like a connoisseur this season is onion dressing. Not the most romantic name, but a clear visual for the most refined form of layering, which is fine layers rather than hefty ones. And instead of the top layer covering all beneath it, each piece should be visible. As if we were slicing through the onion and looking at a cross-section if you will excuse me labouring the allium thing. This is layering with finesse rather than brute force. Hems and collars and cuffs give an outfit depth and texture without adding too much bulk. You want to look intriguing and multi-dimensional, not like Joey in Friends wearing all of Chandler’s clothes.

Continue reading...

Republican Neil Bush says he was ‘deeply troubled’ by Ken Paxton’s conduct and ‘enormously impressed’ with Talarico

• US politics live – latest updates

Neil Bush, a son of former president George HW Bush and a lifelong Republican, announced on Tuesday that he crossed party lines to vote for James Talarico, the Democratic candidate for Senate in Texas.

In a Facebook post, Neil Bush said he chose to vote early for Talarico over Ken Paxton, the Republican candidate and current Texas attorney general, because he was “deeply troubled” by Paxton’s conduct and was “enormously impressed” by Talarico’s principles.

Continue reading...

Saurav Das and Ashutosh Ranka spent a week in jail after defying restrictions on protests in Delhi amid government crackdown

An Indian court has ordered the release of two leaders of India’s Cockroach movement who were jailed last week amid a mounting state crackdown on youth-led protests.

The two leaders of the Cockroach Janta party (CJP) movement, Saurav Das and Ashutosh Ranka, had spent a week in Delhi’s Tihar jail after being arrested by Delhi police last week.

Continue reading...

As a documentary celebrates the late US musician, friends and collaborators describe an incomparable storyteller who brought ‘myth and magic to everyday life’

Jason Molina grew up in a trailer in the working-class city of Lorain, Ohio. The city’s skyline once flickered with blue flames and a warm orange glow emanated from clattering steel mills, but by Molina’s teenage years, Lorain was in a tailspin. “Things were really on the economic decline,” says Tommy Nickoloff, Molina’s childhood friend and director of a new documentary: You Fuckers Figure It Out: A Jason Molina Story. “Nobody had any money and we were encouraged to get out. It’s a place where the American dream was born and died. And we watched it die.”

Molina did indeed get out: the singer-songwriter released almost 20 studio albums and numerous EPs, primarily under the monikers Songs: Ohia and Magnolia Electric Co, spanning lo-fi to slowcore via polished Americana and alt-country. By 2009, he estimated he had written thousands of songs. But he died in 2013, aged 39, after years of alcoholism.

Continue reading...

Anticipating a potential spring in which I am bathed in sun on a Greek island is giving me the kind of glee that makes anything feel possible

Reader, it’s important to tell you that I’ve never been to Greece in my life. Not once. But I might be going, for the very first time, in the spring. And so, for the last week or so, all my dreams have featured fresh fish cooked to flaky perfection, a swimming pool into which I shall venture no deeper than my waist (I can’t swim), and the heat of the sun that not even the climate crisis can make happen in the UK in April.

I don’t come with a history of exotic foreign holidays. Travelling abroad fell under the umbrella of familial duty: “Going Home”, AKA a brief return to the place where my parents were born (and coincidentally more and more foreign to them the longer they lived in the UK) in order to keep the ties of kinship going and remind us of our roots. I should say we didn’t do idyllic UK-based holidays either. I read about caravans in Enid Blyton books and watched Vaseline-lensed ads for CenterParcs and knew neither was in my immediate future. I made peace with it. We just weren’t a “going on holiday” type of family. It didn’t bother me. I harbour no resentment, and honestly, feel largely equanimous when I consider this “gap” in my life experience.

Continue reading...

Anyone who has driven Interstate 25 between Denver and Colorado Springs knows that traffic can get… hairy. And it’s not just drivers whose safety is at risk, as animals like elk, bears, coyotes, and more also need to use the highway to access 39,000 acres of habitat. Cars and pronghorns just aren’t compatible. That’s why Colorado Department of Transportation (CDOT) set out to build a wildlife-only bridge, the largest of its kind currently in North America, which it completed in December 2025. Within the first nine months since its opening, wildlife-vehicle collisions were already down a whopping 91 percent.

Before the crossing opened, dozens of animals were killed by vehicles every year, often up to one per day during migration seasons. The overpass spans I-25’s six lanes and is completely covered in grass so that critters have uninterrupted access to habitat on both sides of the highway—and drivers face less risk and expense due to collisions. The project is one of several in progress across the U.S., including a handful more in Colorado that include underpasses and smaller bridges. Brandon Marette, a wildlife biologist with Colorado Parks and Wildlife, told CBS News, “One of the most heartwarming moments for me was when CDOT sent me a picture of an elk mama taking her calf under I-25.”

Do stories and artists like this matter to you? Become a Colossal Member today and support independent arts publishing for as little as $7 per month. The article A New Wildlife Crossing in Colorado Has Already Cut Vehicle Collisions by 91 Percent appeared first on Colossal.

De tentoonstelling ART Made OPEN in Capelle aan den IJssel is zwaar beschadigd door vernielingen. Daarom is de tentoonstelling gesloten. “Het is gewoon verdrietig om te zien”, zegt organisator Stichting Open Mind. De stichting heeft aangifte gedaan en wil de expositie herstellen.

De tentoonstelling ART Made OPEN in Capelle aan den IJssel is zwaar beschadigd door vernielingen. Daarom is de tentoonstelling gesloten. “Het is gewoon verdrietig om te zien”, zegt organisator Stichting Open Mind. De stichting heeft aangifte gedaan en wil de expositie herstellen.