Seagate’s new portable SSD is small but mighty, and may well mark another nail in the coffin for flash drives.
The firm’s new Ultra-Compact SSD, which is available in both a 1TB and 2TB format, boasts a small, sleek design that more closely resembles a thumb stick or top-of-the-range flash drive than a portable SSD.
Complete with a USB-C port, the SSD includes a single-piece aluminum shell and measures in at 2.7 x 0.7 x 0.34 inches. Notably, Seagate had sustainability in mind during development, with the drive made up to at least 35% recycled materials. From a durability perspective, it can also take a slight beating, being rated for drops up to three meters while featuring IP54 dust and water resistance capabilities - so how does it match up to other industry counterparts?
Under the hood of the Seagate Ultra-Compact SSDAs mentioned, the drive comes in both a 1TB and 2TB options. Both of these offer sequential read and write speeds of up to 1,000 Mbps.
PCMark 10 trace-based testing by Tom’s Hardware showed it wasn’t quite up to scratch with other options available on the market, however. On transfer rates, the drive also “fails to impress” - particularly on read speeds.
Its write speed of 512 Mbps did rank it in fourth place behind the Silicon Power DS72 (1TB), Silicon Power MS70 (1TB), and the PNY Pro Elite 3 (1TB). Tom’s Hardware further noted that with a mixed-file read speed of 570 Mbps, this still remains quite an impressive performance for such a compact drive.
One particular area that users may find appealing are the backup recovery options, though. The SSD ships with Seagate Rescue Data Recovery service, covering users for up to three years.
All told, the SSD is an impressive bit of kit for your everyday user. Capabilities may be lacking in some areas, but its compact design will likely be a draw.
There is one major detail that might put customers off, though: the pricing. The 1TB option comes in at £90.99, making it a middling option compared to other drives available. The price jump to the 2TB version - priced at $179.99 - might be jarring.
You might also likeA new Quordle puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Monday's puzzle instead then click here: Quordle hints and answers for Monday, February 17 (game #1120).
Quordle was one of the original Wordle alternatives and is still going strong now more than 1,100 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today – or scroll down further for the answers.
Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.
SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.
Quordle today (game #1121) - hint #1 - Vowels How many different vowels are in Quordle today?• The number of different vowels in Quordle today is 4*.
* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).
Quordle today (game #1121) - hint #2 - repeated letters Do any of today's Quordle answers contain repeated letters?• The number of Quordle answers containing a repeated letter today is 0.
Quordle today (game #1121) - hint #3 - uncommon letters Do the letters Q, Z, X or J appear in Quordle today?• No. None of Q, Z, X or J appear among today's Quordle answers.
Quordle today (game #1121) - hint #4 - starting letters (1) Do any of today's Quordle puzzles start with the same letter?• The number of today's Quordle answers starting with the same letter is 0.
If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:
Quordle today (game #1121) - hint #5 - starting letters (2) What letters do today's Quordle answers start with?• T
• S
• B
• D
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
Quordle today (game #1121) - the answers (Image credit: Merriam-Webster)The answers to today's Quordle, game #1121, are…
I employed a different tactic today, using four start words instead of two. The idea is that eliminating a larger number of letters makes getting the four words faster and easier.
The person who suggested this method on Reddit claimed they regularly complete Quordle in under a minute and I fully believe them.
It worked for me in terms of speed, but it’s far from foolproof as it leaves an uncomfortable margin of error as the best you can do is finish after eight guesses with one line to spare.
Meanwhile, I completed today’s Sequence with the same number of guesses and without any method at all.
How did you do today? Let me know in the comments below.
Daily Sequence today (game #1121) - the answers (Image credit: Merriam-Webster)The answers to today's Quordle Daily Sequence, game #1121, are…
A new NYT Strands puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Monday's puzzle instead then click here: NYT Strands hints and answers for Monday, February 17 (game #351).
Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.
Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.
SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.
NYT Strands today (game #352) - hint #1 - today's theme What is the theme of today's NYT Strands?• Today's NYT Strands theme is… Ouch!
NYT Strands today (game #352) - hint #2 - clue wordsPlay any of these words to unlock the in-game hints system.
• Deliver venom
NYT Strands today (game #352) - hint #4 - spangram position What are two sides of the board that today's spangram touches?First side: right, 3rd row
Last side: left, 7th row
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
NYT Strands today (game #352) - the answers (Image credit: New York Times)The answers to today's Strands, game #352, are…
Strands really is an education.
I knew that the PLATYPUS is a strange mammal with a duck’s bill, otter-like body and beaver-type tail. And I knew that they are unique to Australia. But I had no idea they had STINGERS too (well, the male of the species do at least).
It turns out being venomous is just one of the many remarkable features of this incredible creature – they’ve got two layers of fur, they lay eggs, they glow in the dark, they hunt using electroreception, the plural of platypus is platypus. They can complete Strands in 45 seconds without any hints. They are brilliant.
How did you do today? Let me know in the comments below.
Yesterday's NYT Strands answers (Monday, 17 February, game #351)Strands is the NYT's new word game, following Wordle and Connections. It's now out of beta so is a fully fledged member of the NYT's games stable and can be played on the NYT Games site on desktop or mobile.
I've got a full guide to how to play NYT Strands, complete with tips for solving it, so check that out if you're struggling to beat it each day.
A new NYT Connections puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Monday's puzzle instead then click here: NYT Connections hints and answers for Monday, February 17 (game #617).
Good morning! Let's play Connections, the NYT's clever word game that challenges you to group answers in various categories. It can be tough, so read on if you need Connections hints.
What should you do once you've finished? Why, play some more word games of course. I've also got daily Strands hints and answers and Quordle hints and answers articles if you need help for those too, while Marc's Wordle today page covers the original viral word game.
SPOILER WARNING: Information about NYT Connections today is below, so don't read on if you don't want to know the answers.
NYT Connections today (game #618) - today's words (Image credit: New York Times)Today's NYT Connections words are…
What are some clues for today's NYT Connections groups?
Need more clues?
We're firmly in spoiler territory now, but read on if you want to know what the four theme answers are for today's NYT Connections puzzles…
NYT Connections today (game #618) - hint #2 - group answersWhat are the answers for today's NYT Connections groups?
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
NYT Connections today (game #618) - the answers (Image credit: New York Times)The answers to today's Connections, game #618, are…
Finally, Connections gives me a Purple group I can solve easily and acknowledges the vast army of UK players to boot.
In case you are unaware, a BUTTY is a sandwich made of one slice of bread folded over – invariably filled with chips that you’d buy from a CHIPPY (fish and chip shop) sprinkled with salt and vinegar and red sauce (ketchup), that you eat while watching the FOOTY (soccer) on your TELLY – a delicacy that is more of a snack than SUBSTANTIAL, AS A MEAL.
And now I'm hungry. Thank you, Connections.
How did you do today? Let me know in the comments below.
Yesterday's NYT Connections answers (Monday, 17 February, game #617)NYT Connections is one of several increasingly popular word games made by the New York Times. It challenges you to find groups of four items that share something in common, and each group has a different difficulty level: green is easy, yellow a little harder, blue often quite tough and purple usually very difficult.
On the plus side, you don't technically need to solve the final one, as you'll be able to answer that one by a process of elimination. What's more, you can make up to four mistakes, which gives you a little bit of breathing room.
It's a little more involved than something like Wordle, however, and there are plenty of opportunities for the game to trip you up with tricks. For instance, watch out for homophones and other word games that could disguise the answers.
It's playable for free via the NYT Games site on desktop or mobile.
Do you sometimes wish that online advertisers had access to more of your private information without your consent or knowledge? Well, you might just be in luck.
As of February 16 2025, Google is permitting ‘fingerprinting’, which is a stealthy technique which tracks things like your IP addresses, screen resolution, operating systems, and even battery percentage - until it has a creepily accurate profile of you.
This practice will be particularly disturbing to the privacy-conscious among us since it's virtually impossible for users to control what information is collected and when. You can turn off all cookies, use all the private browsers, and use the best VPN money can buy, but you could still be tracked with this technique.
Why the change of heart?In its response, the UK’s Information Commissioner’s Office stated it considers fingerprinting to be, ‘not a fair means of tracking users online because it is likely to reduce people’s choice and control over how their information is collected’.
The move is is a pretty stark 180-degree turn in terms of policy, considering that in 2019, Google condemned the practice of fingerprinting, saying;
“Unlike cookies, users cannot clear their fingerprint, and therefore cannot control how their information is collected. We think this subverts user choice and is wrong.”
But the practice will, ‘ help businesses, large and small, meet the opportunities of the evolving digital landscape’, Google’s statement latest says, and it does claim to be ‘meeting user expectations for privacy’ - but you can decide for yourself if your expectations are being met with this policy.
So what can you do about it? Unfortunately, not a lot. The ICO admits, ‘even privacy-conscious users will find this difficult to stop’ as the practice is harder for browsers to block, and it relies on signals you can’t easily wipe - so pressing ‘clear all site data’ won’t stop the advertiser from using the same fingerprinting techniques to just identify you all over again.
That being said, some browsers, such as Firefox and the Brave browser, have fingerprinting protection features that can scramble things like time zone, language, fonts, and language in reports to websites. There are also Google Chrome extensions like Canvas Blocker which can function in a similar way.
If you want more information, we've written a full guide on what fingerprinting is and how to protect yourself.
You might also likeIt’s all but guaranteed that Amazon is launching a new version of Alexa with souped up AI brain power on February 26 – it literally spelled it out in an announcement – but disaster might have struck at the final hurdle. Alexa AI is reportedly delayed, again.
That’s per an anonymous source who spoke with The Washington Post (the report is behind a paywall) claiming that the new Alexa has been making too many mistakes when asked test questions. As a result Alexa is being delayed to improve its accuracy – with the current launch date now put back 'til March 31.
Amazon is still expected to unveil the all-new Alexa at the New York event on February 26 as it originally planned, however, we expect access to the AI (and the questions it’ll answer in demos) might be restricted so as not to reveal its potentially less-than-perfect side.
As with all rumored information, we should still take all of this with a pinch of salt, though if The Washington Post is correct, this wouldn’t be the first time Alexa has been delayed. Multiple sources had teased a 2024 launch date, with accuracy issues once again cited as the reason Alexa was held back.
(Image credit: Amazon)Beyond causing a delay, these issues could also prove a blow to Amazon’s rumored plan to charge users for Alexa's help. It’s been said the revamped Alexa could cost paying customers $5-$10 a month to use (around £5-£10 / AU$8-AU$16). If Alexa is unreliable – or has a reputation for being unreliable beyond what’s expected from a current-gen AI – we imagine there won’t be many users keen to pay for the service.
At least the current-version of Alexa is said to be sticking around as a permanently free and generally reliable option.
If Amazon can solve Alexa’s accuracy problems, the new AI does sound rather useful. Alexa AI is said to be smarter so it can handle multiple prompts at once, rather than requiring its user to give distinct commands one after the other, and to perform as an AI agent – read: taking actions without direct user requests.
Admittedly that last point sounds a little scary, given that Alexa AI would have our credit card info and direct access to the world’s largest online store (Amazon), especially if Alexa is prone to mistakes (I know I'd be nervous about using it). But if Amazon can prove its agent is genuinely helpful, Alexa might finally start living up to the futuristic home assistant many imagined it would be when it first launched.
You might also likeGlobalFoundries (GloFlo) was founded in March 2009 when a struggling AMD spun off its manufacturing division to go fabless, a move designed to help it survive in the highly competitive semiconductor industry.
GloFo eventually became a key player in the foundry business, with a global manufacturing footprint across the US, Europe, and Asia, focusing on specialty chips rather than competing at the leading edge. Under the leadership of Thomas Caulfield, who became CEO in 2018, GlobalFoundries pursued a strategy that led it to become the third-largest semiconductor foundry by revenue, and a public listing in 2021.
However, speculation is currently brewing that Caulfield could be set to become the next CEO of AMD’s long time chip rival, Intel. As reported by eeNews Europe, the rumors began following an unexpected leadership change at GlobalFoundries. Caulfield is set to move from CEO to executive chairman, with Tim Breen, who has also been at the company since 2018, taking over as CEO. This shift has led observers to question whether Caulfield may be preparing for a leadership role at Intel, which has been without a permanent CEO since Pat Gelsinger’s departure in December 2024.
Regulatory hurdlesCaulfield has extensive experience in semiconductor manufacturing but has not led a product company like Intel. This has fueled suggestions that instead of simply taking over as CEO, he could oversee a merger between Intel and GloFo. In such a scenario, eeNews Europe suggests that Caulfield would become executive chair of the combined entity, with Michelle Johnston Holthaus leading Intel’s product business and Breen integrating GlobalFoundries into Intel Foundry.
A merger would definitely benefit both parties. While AMD has seen its fortunes soar in recent times, intel has been struggling. Joining forces with GlobalFoundries could allow the merged company to offer a broader range of manufacturing capabilities.
Adding further fuel to the rumor mill, eeNews Europe reports that observers on a Reddit stream noted a recent purchase of 8,913,000 Intel shares at $19.29. This unusual transaction occurred two days before GlobalFoundries announced its leadership changes, drawing comparisons to the $172 million stock incentive given to Gelsinger when he became Intel’s CEO in 2021.
Any potential merger would of course face regulatory hurdles, particularly in China, which previously blocked Intel’s attempt to acquire Tower Semiconductor. If approval proves difficult, eeNews Europe suggests Intel could appoint Caulfield as CEO while maintaining close ties with GlobalFoundries.
You might also likeI've owned and loved some of the best Kindles in the series since Amazon first introduced the ereader, but using these devices can feel somewhat restrictive – especially now Amazon is killing off a useful USB file transfer feature.
As reported by The Verge, the Download & Transfer via USB option is going away on February 26. That means you'll no longer be able to download ebooks purchased from Amazon, and then move them to your Kindle over a wired USB connection.
The feature isn't actually available on the latest generation of Kindles, pushed out last year, but all other models are going to be affected. Amazon doesn't give a reason for the move, but it's almost certainly to crack down on ebook piracy.
Using fairly simple tools available online, users could download purchased ebooks from Amazon, crack the DRM (Digital Rights Management) protection on them, and send them to other devices or distribute them widely on the web. That will no longer be possible.
Less flexibility An ebook on the Kindle OasisAs is often the case, efforts to battle digital pirates means rule-abiding users lose out. This means ebooks can no longer be saved on computers as backups, or moved over without a Wi-Fi connection, which gave Kindle owners some extra flexibility.
It's worth bearing in mind that Amazon does occasionally remove ebooks from its catalog, or replace them with modified versions. Now more than ever, users are going to be at the whims of what Amazon decides to make available.
You will still be able to move ebooks over via Wi-Fi of course, as well as transfer files to your Kindle via USB and software such as Calibre. It's specifically the ability to download purchases from the Amazon website to a computer that's disappearing.
This also gets closer to fully killing off the older AZW3 format for Amazon ebooks: it's been replaced by the newer KFX format, which is much harder to crack in terms of its DRM, and which is now used in most situations (except downloads to a computer).
You might also likeSouth Korea’s Personal Information Protection Commission (PIPC) has temporarily halted new downloads of Chinese-owned AI chatbot DeepSeek.
Reports from TechCrunch confirm the app is still up and running for those who have already installed it, and that the decision won’t affect usage of the app - but new downloads will be halted until the Chinese firm complies with Korean privacy laws.
South Korea isn’t the first to ban new downloads of the chatbot, with the model disappearing from the Italian App store and Google Play Store in late January 2025 after the country’s data watchdog filed a privacy complaint and asked for information on how DeepSeek handles users’ personal information.
Recurring concernsDeepSeek has since appointed a local representative to work with authorities in South Korea, but the data protection agency has said it ‘strongly advises’ current users to refrain from entering personal data into DeepSeek until a final decision is made - here’s everything we know so far.
The restriction is temporary whilst the PIPC assesses the use and storage of data by DeepSeek, but the agency confirms the model will be available for download once it is compliant.
The PIPC found DeepSeek had transferred the data of South Korean users to ByteDance - TikTok’s parent company. TikTok, as many will remember well - was briefly banned in the US over privacy and security concerns.
DeepSeek isn’t the first AI model to come under scrutiny for privacy concerns. The nature of Large Language Models is a bit of a privacy minefield since they scrape every corner of the internet for data to train their models - without the consent of the owners/authors/creators of the media they use.
Further than this though, OpenAI has never asked people for permission to use their data, and it’s not possible for a person to get confirmation of what data has been used or stored - or for it to be deleted. This contradicts an important facet of GDPR laws, which protect the right to be forgotten and should guarantee individuals the ability to have their personal data erased upon request.
As the new kid on the block, DeepSeek is in the spotlight for a number of reasons - and there have been legitimate concerns about how the platform collects and stores your personal information like your email address, name, and date of birth, as well as the data you enter into the chatbot, and the technical information of the device you’re using, like IP address, OS, etc.
Using AI safelySo is DeepSeek safe to use? And can it be used whilst maintaining your privacy? Well there are things you can do to mitigate the risks.
As with all LLMs, if you’re concerned about data privacy, using AI is probably not a good idea. LLMs scrape data from the internet without permission, and will use your interactions to add to the pool of data the model is trained with, and that’s not something you can opt out of, DeepSeek included.
If you’re in South Korea or Italy and still want to download DeepSeek, even the best VPN services will need a little extra help - as they don’t spoof your App store location, so you’ll need to download it from elsewhere. This is something we usually advise against, as it can be a really easy way to be tricked into downloading malware - so do so with caution.
In terms of the cybersecurity risks, there have been reports DeepSeek is ‘incredibly vulnerable’ to attacks, and failed to block any harmful prompts when tested, severely underperforming against its rivals.
You should be wary when using these chatbots - especially on a company device or if you work in an industry that has national security connections - there’s a reason both Australian and Indian government departments have blocked the use of DeepSeek from work devices.
A general rule is that users should be especially careful with the information you give to a chatbot. Don’t enter your health information, financial data, or anything that you wouldn’t want a third party to know. Monitor your accounts for any suspicious activity regularly, and flag anything you see as soon as you see it.
You might also likeMicrosoft’s latest update for Windows 11 has thrown some more spanners into the works for those who’ve upgraded to the most recent 24H2 spin of the desktop OS.
The February cumulative update for 24H2 users (known as patch KB5051987) did some admirable work on the bug fixing front, but sadly also appears to have introduced some fresh problems to this incarnation of Windows 11.
And two of these issues are very worrying, the first of which is a bug that’s apparently playing havoc with File Explorer, as reported by Windows Latest and other Windows 11 users across various online forums.
File Explorer is the app in which your desktop folders are displayed, allowing you to view and interact with the files inside. Due to this bug, though, you can’t actually view files, as some folders are refusing to open.
Windows Latest observes that the commonly-used Documents and Pictures folders are non-functional after installing the February update for Windows 11 24H2. File Explorer is also failing to work when accessed via Windows 11’s search function, or a desktop shortcut.
Other users are reporting various problems with opening certain folders, or indeed most folders – though some of them still appear to work.
It’s an odd sounding bug, in short, that’s having unpredictable effects. But if you’ve installed KB5051987 and are encountering weirdness in terms of folders just not working or appearing at all – even though File Explorer is running seemingly just fine, as normal, within Windows 11 – well, this is why.
On top of the flakiness with File Explorer, the February update is also failing to install for some Windows 11 users (though that’s nothing new – this is a common problem with a lot of Windows updates these days). For some, the download and installation process is getting stuck fast at a certain percentage, and for others, it might eventually complete, but it’s taking hours.
Worryingly, some folks are reporting that KB5051987 is causing crashes (Blue Screens of Death) after it’s installed, or that it has even torpedoed their Windows 11 installation entirely – yikes.
Windows Latest also points to potential issues with webcams not working, and the mouse cursor moving sluggishly and stuttering (as well as performance glitches in general).
(Image credit: Future / Jeremy Laird) Analysis: File this one under ‘worrying’Just when I voiced hope that maybe Microsoft is finally getting on top of all the issues with Windows 11 – which have been numerous ever since the upgrade went live last year – we’ve seemingly got a doozy of a gremlin messing with the internal workings of File Explorer somehow.
File Explorer is a critical part of the Windows interface – as noted, it’s the very folders you navigate to access all the files on your PC – so to see it partially (or almost wholly in some cases) hamstrung is very disappointing.
This is a fairly widely reported issue, and as Windows Latest notes, it has over 30 reports sent in by readers (possibly more by now). There’s also lots of grumbling (understandably) about this on Reddit and other forums.
One of your first thoughts – it was certainly one of mine – was that a third-party customization utility could perhaps be to blame, but Windows Latest tried a completely vanilla installation of Windows 11, and this too was affected. There doesn’t seem to be any commonality between those suffering at the hands of this odd bug, not yet anyway – and there are no suggested workarounds for now. (Save for the obvious course of action – uninstall the February update).
That said, in one of the Reddit complaints I perused, I noticed that somebody offered up the idea of disabling Windows Sandbox, and this reportedly worked for two people. So that might be worth a shot, but bear in mind that Sandbox is not available on Windows 11 Home. So only those with the Pro edition can consider this possible fix, and most people are running the Home flavor of the OS, of course.
On top of the File Explorer problem, the reports of installation failures are very concerning, especially those which apparently broke Windows 11 completely. These reports seem much rarer, thankfully, but still – caution might be the better part of valor here, and you may want to put off installing the February update for as long as you can. (Which, I should note, for Windows 11 Home users isn’t all that long). In this case, you will, of course, be running without the security fixes provided by the patch, which isn’t ideal either.
With any luck, Microsoft will be investigating these issues and hopefully taking action sooner rather than later.
You may also like...A vulnerability in Palo Alto Networks firewalls is being abused in in-the-wild attacks, researchers are saying.
The company recently found, and fixed, an authentication bypass vulnerability in its PAN-OS firewalls. The flaw, tracked as CVE-2025-0108, has a severity score of 8.8/10 (high), and was said to affect multiple versions of the product.
It released a fix on February 12, 2025, urging users to upgrade their firewalls to these versions:
11.2.4-h4 or later
11.1.6-h1 or later
10.2.13-h3 or later
10.1.14-h9 or later
The vulnerability impacts the PAN-OS management web interface, and allows malicious actors to run different PHP scripts. This, in turn enables sensitive data exfiltration, firewall configuration tampering, and more.
Now, researchers from the security outlet GreyNoise said they observed attempts to exploit the flaw on unpatched endpoints. The attacks, they said, started a day after Palo Alto Networks released the patch (February 13), and came from multiple IP addresses, which could suggest that more attackers picked up on the vulnerability at the same time.
Citing information from Macnica researcher Yutaka Sejiyama, BleepingComputer reported that the attack surface likely counts more than 4,400 devices.
To protect the firewalls, users should apply the patch as soon as possible, and restrict access to the product’s interface, as soon as possible.
Firewalls used by SMBs are often targets because these types of businesses typically have weaker security configurations and outdated firmware. Many SMBs lack dedicated IT teams, leading to misconfigured firewall rules that create vulnerabilities. Furthermore, threat actors can use firewalls as entry points to bypass network defenses and gain deeper access to internal systems. Once compromised, firewalls can be used to intercept sensitive data, launch further attacks, or disable security measures altogether.
Via BleepingComputer
You might also likeAmazon Web Services (AWS) users are potentially vulnerable to a name confusion attack called “whoAMI”, experts have warned.
The vulnerability, found in Amazon Machine Image (AMI), was discovered in the summer of 2024 by cybersecurity researchers DataDog, and has now been confirmed by Amazon, which said it fixed the issue on its side, and urged users to update the code on their side and thus protect their premises.
AMI is a pre-configured template used to create and launch virtual servers (EC2 instances) in AWS. It includes an operating system, application software, and necessary configurations like storage and permissions. AMIs allow users to quickly deploy consistent environments, whether using AWS-provided images, community AMIs, or custom-built ones. This makes scaling and managing cloud infrastructure more efficient.
Following the naming patternAMIs can be public, or private, and once generated, come with a unique identifier. Public ones can even be found in the AWS catalog. But these public ones should also come with the ‘owners’ attribute, as a way to confirm that they’re coming from a trusted source.
Now, the researchers found that the way software projects retrieve AMI IDs was flawed, and allowed threat actors to gain remote code execution (RCE) capabilities within people’s AWS accounts.
The technical details on how the vulnerability works and how it might be exploited can be found on this link. Long story short, if a threat actor publishes an AMI with a name that follows the format used by trusted owners, it can be picked up by mistake.
When DataDog first discovered the flaw, it said that overall, a very small percentage of AWS users are vulnerable, but that still equals “thousands” of AWS accounts. Amazon responded by issuing a fix in mid-September last year, and releasing a new security control called “Allowed AMIs” in early December last year.
It also advised all users to apply the fixes, while stressing that there was no evidence of abuse in the wild.
Via BleepingComputer
You might also likeSince September 2024, WordPress, led by Matthew Mullenweg, has been locked in a battle with WP Engine over licensing and contributions to the WordPress community.
So far, the battle has seen Mullenweg block WP Engine from open source resources, followed by a court order that required WP Engine's access to be reinstated and restrictions to developers removed.
As part of a wider effort to control how hosts can use the WordPress name, the WordPress Foundation also attempted to trademark 'Hosted WordPress' and 'Managed WordPress,' but the US Patent and Trademark Office (USPTO) has required disclaimers for both terms in an initial setback for Mullenweg.
Is Mullenweg doing more harm than good for WordPress?The attacks on WP Engine and trademark expansion efforts left many hosts wondering about the future of their WordPress hosting products and possible backlash from the WordPress Foundation over trademark infringements of the open-source software.
While this initial disclaimer request gives some relief to hosts it is not a denial and the term Hosted WordPress has already been granted in some counties. If the trademarks are granted it gives more control to the WordPress Foundation on which web hosting providers they can give licenses to for the use of the phrases.
The WordPress drama has caused many to question whether Mullenweg’s actions are damaging rather than strengthening the WordPress community. Since the attack on WP Engine, 159 Automatic (a company run by Mullenweg) employees have left because they disagree with his leadership.
The requested disclaimer on the trademarks was filed by Unprotected.org, a website critical on Mullenweg.
A spokesperson from the site told The Register, "This represents a great victory for the WordPress ecosystem, and we will continue to fight until there is accountability and a change in leadership.”
The spokesperson added, "The WordPress ecosystem is ready for new leadership, and Joost de Valk, the developer of Yoast SEO, is the first who comes to mind."
De Valk has previously called for the decentralisation of WordPress around Mullenweg and to create a federated and independent WordPress. In a blog post he said, “We, the WordPress community, need to decide if we’re ok being led by a single person who controls everything, and might do things we disagree with, or if we want something else. For a project whose tagline is “Democratizing publishing”, we’ve been very low on exactly that: democracy.”
In response, Mullenwag banned De Valk from sponsoring and attending any WordPress events. WordPress currently powers over 43% of the world’s websites but as web hosts develop their own website builders and uncertainty around the stability of WordPress grows we may see that number start to decline.
You might also likeWindows 11 is undergoing yet more experimentation with adverts, this time in the Settings app (again), as driving users with targeted ‘suggestions’ of one kind or another appears to be a habit Microsoft isn’t going to relent with anytime soon.
The new ad – or ‘recommendation’ as Microsoft might call it – is present in the latest preview build of Windows 11 released in the Dev and Beta channels, meaning it’s still just in testing for now.
It’s an advert that appears in the Settings app home page which is targeted at Game Pass Ultimate and PC Game Pass subscribers. If that sounds familiar, it’s because Microsoft instigated a similar advert in testing last year, though that was trying to cajole people into signing up for Game Pass itself.
It was still targeted at gamers only, though, we were told at the time. The difference with this fresh advertising initiative is that it’s aimed at those who already subscribe, and it’s a referral ad. The idea is to “share a 14-day free trial” with up to five friends in an effort to get them to sign up.
As with the past advert for Game Pass, this only appears for those who are signed into their PC on their Microsoft account.
In the blog post for the new preview build 26120, Microsoft also notes that it’ll be improving the Recall feature in its next release for testers. It doesn’t say how, only that: “This important update will improve your experience. As part of this upcoming update, your existing snapshots will be deleted.”
Recall is the (controversial and tricky to implement) AI-supercharged search feature that only applies to those who have a Copilot+ PC (as it needs the beefy NPU incorporated with these laptops to ensure the process runs smoothly).
There’s a neat extra for those who use OneDrive in that Windows 11 will present a notification on your PC offering the chance to resume working on a file that you were just editing on your phone. This happens if you were interacting with a file on your smartphone within the last five minutes, then you subsequently unlock your PC – a nifty touch.
(Image credit: Microsoft) Analysis: Boss drum, here we go againI know, you’re probably sick of hearing the ‘stop this with the veiled advertising in Windows 11’ drum, and I’m sick of beating it, believe me. Microsoft doesn’t appear to take any notice, though, and would likely argue that there’s some value to its latest nudge. After all, you might want your friends on Game Pass, too, and offering the ability to take a two-week test trial could be something your pals appreciate.
Well, fair enough I guess, but what I’d still like to see (and again, this is another well-worn drum) is the ability to turn off all these kinds of recommendations as a system-wide switch. Then those who don’t want some of their screen real estate taken over by such nudges – which are in quite a few corners of the Windows 11 interface – could just flick that switch and enjoy a cleaner UI all around. Meanwhile, those who felt some of the recommendations were useful could keep them turned on.
Everybody wins, no?
Anyhow, I should again emphasize that this latest plug for Game Pass is just in testing at the moment, so it may not be realized. Those who aren’t so keen on the idea can make their feelings known via the usual feedback channels, and maybe throw in a vote for that system-wide ad (sorry, recommendation) kill switch. I can dream, can’t I?
You may also like...Top backup and data protection software provider Veeam has apologized after it accidentally erased forum data during an erroneous restoration.
A report from The Register said Fabian K from the company's Product Management team explained the internal infrastructure DevOps team had mistakenly restored a day-old backup of the forum database over the production database, leading to a temporary loss of forum data.
Confirmation of the mistake came around 4.5 hours after Veeam shared that “some topics and comments from the past 24 hours [were] missing.”
Veeam admits fault over mistake restorationVeeam dedicated its web team to identifying potential issues, Fabian said in a 10:38am post on February 11: “We understand how important timely updates are, and we want to assure you that we are actively looking into this matter.”
Although the company spotted pretty quickly what had gone wrong, Fabian admitted in a 3:00pm post that it would not be possible for Veeam to combine new comments post-restoration with those missing in the runup to the mistake, meaning that an unknown number of posts have been lost without a backup.
Together with the public admission, the incident was humorously labeled as the ‘best post of the week’ in the company’s weekly forum digest, which is used to share news and upcoming plans.
Fabian wrote: “We sincerely apologize for any inconvenience this may have caused and appreciate your understanding.”
You might also like