This Patch Tuesday, SAP is the worst offender and Microsoft users can kinda chill ERP giant patches flaw that allows total takeover of NetWeaver, Microsoft has nothing under attack for once September’s Patch Tuesday won’t require Microsoft users to rapidly repair rancid software, but SAP users need to move fast to address extremely dangerous bugs.… #theregister #IT
Mega-and-MAGA deals position Oracle's Larry Ellison to overtake Elon Big Red's profits are flat, but its order book is phat Larry Ellison moved a lot closer to being the world's richest man on Tuesday after Oracle saw a huge leap in its stock price, the largest single day's improvement in decades, thanks to a pipeline stuffed full of big deals.… #theregister #IT
Google Cloud CEO sees sunny days ahead thanks to AI demand We're making billions on AI, how about you? Google Cloud CEO Thomas Kurian says the Chocolate Factory's rental computing business has $106 billion of unfulfilled contracts, and he expects Google Cloud will be able to realize about half of that in revenue within two years.… #theregister #IT
More packages poisoned in npm attack, but would-be crypto thieves left pocket change Miscreants cost victims time rather than money During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages reached one in 10 cloud environments, according to Wiz researchers. But crypto-craving crims did little more than annoy defenders.… #theregister #IT
Apple's 'Awe Droppings' fall close to the tree iPhone 17 Air shows company lightening up Apple on Tuesday showed off its iPhone 17 lineup at a media event dubbed, "Awe Dropping," favoring timeworn self-adulation over a more literal pun like "Four Play."… #theregister #IT
New cybersecurity rules land for Defense Department contractors Now if only someone would remember to apply those rules inside the DoD It's about to get a lot harder for private companies that are lax on cybersecurity to get a contract with the Pentagon, as the Defense Department has finalized a rule requiring contractor compliance with its Cybersecurity Maturity Model Certif… #theregister #IT
Microserfs ordered back to the office, given 10 days to appeal If you're within 50 miles of Redmond, then it's time to come in Microsoft is rolling out a new return-to-office policy that will see first Redmond, then US, and then global staff getting back on-prem at least three days a week.… #theregister #IT
Defense Dept didn't protect social media accounts, left stream keys out in public 'The practice… has since been fixed,' Pentagon official tells The Reg The US Department of Defense, up until this week, routinely left its social media accounts wide open to hijackers via stream keys - unique, confidential identifiers generated by streaming platforms for broadcasting content. If exposed, these key… #theregister #IT
No gains, just pains as 1.6M fitness phone call recordings exposed online HelloGym's data security clearly skipped leg day Exclusive  Sensitive info from hundreds of thousands of gym customers and staff – including names, financial details, and potentially biometric data in the form of audio recordings – was left sitting in an unencrypted, non-password protected database, according to … #theregister #IT
US Army straps on another mixed-reality gamble with Anduril, Rivet Microsoft invitation lost in mail after HoloLens made soldiers sick The US Army's troubled attempt at outfitting soldiers with mixed-reality headsets is getting a $354 million boost and a new pair of lead contractors as part of a second attempt to make the kit stick without making troops sick.… #theregister #IT