Posts

CISA Warns: Johnson Controls C-CURE 9000 Security Platform Under Active Exploitation (CVE-2026-21655)

Image
Johnson Controls' C-CURE 9000 and Victor application server platforms — which manage access control, video surveillance, and physical security across thousands of commercial and industrial facilities worldwide — have been hit with a CISA advisory (ICSA-26-204-01) identifying a critical vulnerability that allows unauthenticated remote code execution on adjacent networks. CVE-2026-21655 is a deserialization of untrusted data flaw in the Victor application (affecting versions up to v2.90/v3.0) on Windows. Under certain conditions, an attacker on the same network segment can exploit a vulnerable deserialization path (LV1.1) to execute arbitrary code on the C-CURE 9000 or Victor server, as well as on connected workstations used by physical security personnel. The vulnerability carries a CVSS v3 score of 9.6 — classified as Critical — and has already been added to CISA's Known Exploited Vulnerabilities (KEV) catalog , confirming active exploitation in the wild. A companion vul...
Post a Comment
Read more

Intel Sneaks DDR5-8000 RDIMMs Into Xeon 6 Without A New Chip

Image
Intel's Granite Rapids Xeon 6 launched in 2024 with DDR5-6400 memory support, and nobody expected the platform to live much longer than a couple of years before the next-gen Diamond Rapids replaced it. But the memory controller inside those chips turned out to be so well overbuilt that Intel can now enable DDR5-8000 RDIMMs on existing SKUs without a single transistor change. Starting this August, select Xeon 6 6700P processors will support the faster memory — effectively a mid-generation hardware upgrade that costs customers nothing extra and buys more memory bandwidth for AI workloads that are increasingly starved for it. The move tells you something about how server silicon gets designed. Granite Rapids was conceived early enough in the decade that Intel's memory controller predated the JEDEC spec for DDR5-8000. They built it to handle MRDIMMs — those multiplexed, multi-rank chips that run at 8800 MT/sec — and by coincidence that controller is also fast enough for tradition...
Post a Comment
Read more

MSI Packed Four EPYC CPUs Into a Single Rack Unit — Because Air Cooling Just Said No

Image
At Computex, while the big processor vendors are still keeping their 2026 roadmaps under wraps, the OEMs are getting increasingly desperate to show off the hardware they've built around them. MSI's booth included something that quietly caught my attention: a 1RU liquid-cooled chassis that holds two dual-socket server nodes, each running an upcoming AMD EPYC "Venice" processor. That means four complete Venice CPUs and 64 RDIMMs crammed into a single rack unit. The whole thing is called the CD182-S6091-X2 (DLC — "Direct Liquid Cooled"), and it's the kind of machine that exists because air cooling has officially given up. What makes this worth paying attention to isn't just the density. It's the platform shift. Venice brings a new 16-channel DDR5 memory bus per socket, PCIe Gen6 lanes, and TDPs that AMD hasn't yet disclosed but are clearly pushing past the 500-watt mark that fifth-generation chips already hit. MSI solved the thermal problem by...
Post a Comment
Read more

A Single Skill File Turned Google Gemini Into a Botnet Operator

Image
Trend Micro just published the session logs from a Russian-speaking threat actor nicknamed "bandcampro" who effectively hired Google's Gemini CLI as a full-time hacking engineer. Not a side tool, not a code assistant that writes the occasional snippet — the actual primary interface to a live command-and-control infrastructure. The actor typed intentions in Russian, Gemini wrote the server code, deployed it on a VPS, configured Cloudflare tunnels, debugged connectivity issues, and managed eight infected machines in a dental clinic. The entire C&C operation fit in three plain-text files totaling roughly 5KB. The migration from old to new infrastructure took six minutes, and the actor contributed just 11% of the text. Gemini did the other 89%. What makes this interesting is the "skill file" concept — a two-page plain-English guide that teaches the AI exactly how the botnet works, including its architecture, standard operations, infection one-liners, persisten...
Post a Comment
Read more

A Russian Hacker Migrated His Entire Botnet in Six Minutes Using Google Gemini CLI

Image
There's a specific kind of unhinged productivity that comes from letting an LLM do the heavy lifting on a live infrastructure. A Russian-speaking threat actor known as "bandcampro" has done exactly that — he used Google's open-source Gemini CLI tool to build, deploy, and operate a command-and-control botnet, and the entire operation fits in three plain-text files totaling roughly 5 KB. Trend Micro researchers analyzed over 200 Gemini CLI session logs from the actor's March-to-April 2026 activity and found that the AI handled architecture, coding, deployment, and debugging while the actor did just 11% of the manual work himself. The headline moment: he typed "Study the C2 migration" into Gemini CLI, and in six minutes the AI had unpacked a migration bundle, launched a C&C server on a new VPS, brought up Cloudflare tunnels, and resolved a 502 Bad Gateway error and a Cloudflare WAF block — all without a single manual debug from him. What makes this in...
Post a Comment
Read more

ASRock Rack Built an Edge Server Based on NVIDIA's Thor Industrial SoC

Image
With Computex 2026 dominated by AI servers of every size, one display drew attention for being oddly out of place: ASRock Rack's 2UXGI-THOR. It's a 2U short-depth server that runs NVIDIA's IGX Thor platform — the automotive/industrial SoC with 14 Arm Neoverse-V3AE cores and integrated Blackwell GPU, plus vision acceleration and sensor bridging — inside a server chassis. That's unusual enough; the rest is mostly about how ASRock Rack turned it into something that could actually live in a small rack. The T7000 motherboard combines the Thor module with 128GB of LPDDR5X memory and an NVIDIA ConnectX-7 NIC, and the box adds a single FHFL PCIe slot filled with either a Blackwell PRO 5000 or PRO 6000 video card for the bulk of AI processing. I/O is surprisingly dense: one 1GbE jack from Thor's integrated NIC, two 200GbE QSFP28 ports from ConnectX-7, and five USB ports (four USB-A and one USB-C). Dual 800W redundant power supplies and an ASPEED AST2600 BMC handle server-g...
Post a Comment
Read more

UK Charges Five in Connection With Russian Coms Call-Spoofing Empire

UK authorities have charged five people following a National Crime Agency investigation into Russian Coms , one of the most prolific caller-ID spoofing platforms used by scammers worldwide since 2020. The five suspects—28-year-old Ayoub Sehailia, 30-year-old Zakkaria Sehailia, 30-year-old Usman Din, 29-year-old Denis Ozmus, and 53-year-old Fadila Salem—are all from London. They face charges including conspiracy to supply articles for use in connection with fraud, transferring or converting criminal property, and (in Zakkaria Sehailia's case) failing to comply with a notice to provide phone passcodes. All five are scheduled to appear at Westminster Magistrates' Court on August 14. The Russian Coms Platform Established in 2020, Russian Coms began as a hardware handset before evolving into a web-based application. Both versions were marketed to criminals worldwide, allowing them to mask their identity by making calls that appeared to come from pre-selected numbers—often ba...
Post a Comment
Read more