Wednesday, September 9, 2026

4 groups caught using the same Chrome and Windows exploit kit


<p>A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of Windows is being actively used by at least four hacking groups, some of which have ties to the Chinese government.</p> <p>Researchers from security firm Proofpoint <a href="https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit">said Wednesday</a> that BlueMoon, the name they gave to the kit, chains three vulnerabilities together so the attackers using it can install malware of their choice. BlueMoon exploits two Chromium vulnerabilities and one in the kernel of Windows 10 (Oct 2018 Update), Windows Server 2019, Windows 10 2004, Windows Server 2022, and the initial release of Windows 11. All three vulnerabilities have received patches in the past 24 hours.</p> <h2>Deployed rapidly, widely shared</h2> <p>The attacks lacked the stealth found in many campaigns. More often, hackers want to exploit newly discovered vulnerabilities sparingly to lengthen their longevity. Proofpoint hypothesized that one reason for the widely used and visible exploit chain was to take advantage of a “patch gap” in the Chromium supply chain, which spans the time a patch is available from developers and the time that patch is incorporated into browsers such as Chrome and Edge. Another likely contributor was the use of AI, which can often spot vulnerabilities faster than discovery performed solely by humans.</p><p><a href="https://arstechnica.com/information-technology/2026/09/4-groups-caught-using-the-same-chrome-and-windows-exploit-kit/">Read full article</a></p> <p><a href="https://arstechnica.com/information-technology/2026/09/4-groups-caught-using-the-same-chrome-and-windows-exploit-kit/#comments">Comments</a></p> Reference : https://ift.tt/egNwpoF

An Engineer’s Guide to Surviving a Layoff


<img src="https://spectrum.ieee.org/media-library/an-illustration-of-stylized-people-wearing-business-casual-clothing.webp?id=65257424&width=1245&height=700&coordinates=0%2C112%2C0%2C113"/><br/><br/><p><em>This article is crossposted from </em>IEEE Spectrum<em>’s careers newsletter. <a href="https://engage.ieee.org/Career-Alert-Sign-Up.html" rel="noopener noreferrer" target="_blank"><em>Sign up now</em></a><em> to get insider tips, expert advice, and practical strategies, <em><em>written i<em>n partnership with tech career development company <a href="https://www.parsity.io/" rel="noopener noreferrer" target="_blank">Parsity</a> and </em></em></em>delivered to your inbox for free!</em></em></p><p><em><em></em></em><span>I lost a cushy engineering management position at the same time I purchased a business, with a mortgage, three kids, and every other financial obligation of being an adult. It was one of the most stressful stretches of my life. If something similar has happened to you, I feel your pain.</span></p><p><strong>You lose more than the income</strong></p><p>For many of us, our work became our identity, so we don’t just think, “I don’t have a job anymore.” We start thinking, “I’m not an engineer anymore.”</p><p>An apple tree in winter is still an apple tree. A car parked in a driveway is still a car. You’re still an engineer, the same way you were still one every evening you clocked out, and the same way you’ll be one at the next job. Your skills took years to build and won’t evaporate because a company stopped paying for them. This feeling can be particularly rough if part of your identity was tied to a recognizable employer. </p><p>However, this can also be a chance to catch up on what you’ve been putting off: working out, being present with your kids, writing, whatever hobby got shelved for a deadline three years ago.</p><p>Once you’ve caught your breath, here are some tips for when the actual work starts:</p><p><strong>1. Don’t sprint on day one</strong></p><p>I started applying for jobs the next morning after the layoff. It felt productive, but it gave me no time to settle my nervous system or consider what I actually wanted next. I took the first offer that came along, at a company I already knew wasn’t right, and quit after exactly 30 days. Give yourself a few days before deciding anything. Plans built out of desperation rarely work out well.</p><p><strong>2. Audit your spending</strong></p><p>Go through every subscription and recurring charge and cut what isn’t essential. Every dollar you stop bleeding buys you patience instead of forcing a bad offer out of fear.</p><p><strong>3. Build a list wider than LinkedIn</strong></p><p>Start with former colleagues and vendors, or businesses with a relationship to your previous employer. They already know you or your company, which gives you the halo effect: Some of the trust from your employer carries over to you automatically.</p><p>LinkedIn is table stakes and is the most popular place to find work, but that doesn’t mean your search should stop there. Try Facebook, Instagram, and other social media channels too, where plenty of people who aren’t on LinkedIn might have leads for open roles. I found my first job years ago from a Facebook post, and both roles I landed after being laid off came from startup job boards and recruiters I found entirely outside LinkedIn. Your mileage may vary, but LinkedIn isn’t the only game in town.</p><p>Don’t skip your inner circle either: Text your family and friends. Good leads rarely come from someone you know directly, but they do come from someone that person knows. Work this list daily and track who you’ve contacted.</p><p><strong>4. Eight hours is a long time</strong></p><p>With no work to fill your day, you may default to treating the search like an eight-hour shift. You can’t apply productively for 8 hours straight, and that’s why people burn out. Use a focused morning block for the list in step 3, then spend the rest of your day on activities you’ve been putting off.</p><p><strong>5. Catalog your wins before you study interview questions</strong></p><p>Cataloging your wins is a higher-leverage move than drilling practice questions this early. Can you explain the most impactful project you worked on in the last year? Probably not.</p><p>Most people skip this step, then default to generic answers when a recruiter asks about their last role. Write down specific stories showing leadership, technical ability, and grace under pressure. They’ll come up once you’re in interviews, and cataloging them rebuilds your confidence along the way too. Save the deep prep for once an interview is on the calendar. </p><p>Ask yourself daily whether today’s work is generating interest in you, or leading you to someone who might hire you. If not, consider skipping it.</p><p><strong>One last thing</strong></p><p>A layoff rarely reflects your skills. It’s usually a company protecting revenue—nothing more personal than that. Knowing that doesn’t make it easier, but hopefully this gets you back on your feet faster.</p><p>—Brian</p><h2><a href="https://careerfair.ieee.org/global/" rel="noopener noreferrer" target="_blank">IEEE Global Careers Fair: September 23-24</a></h2><p>Looking for a job? For the first time, IEEE is taking its Career Fair worldwide. The inaugural IEEE Global Virtual Career Fair runs September 23 (5:00 PM EST) through September 24 (8:00 PM EST), following the sun across every region to connect engineering and technology professionals with employers around the world. </p><p>Read more <a href="https://careerfair.ieee.org/global/" rel="noopener noreferrer" target="_blank">here</a>. </p><h2><a href="https://spectrum.ieee.org/nsf-iphd-phd-in-engineering" target="_self">United States Invests in Industry Partnerships for Ph.D. Training</a></h2><p>While most engineering Ph.D. grads end up in jobs at commercial companies, academia and industry often operate in their own bubbles. Now, the U.S. National Science Foundation is investing in a program to integrate industry experience into STEM doctoral programs and help bridge the gap. Modeled after similar programs in other countries, students in the I-PhD will spend at least one year working on research at an industry site and receive a combination of funding from the company, NSF, and the university. </p><p>Read more <a href="https://spectrum.ieee.org/nsf-iphd-phd-in-engineering" target="_self">here</a>.</p><h2><a href="https://spectrum.ieee.org/ai-engineer-skills" target="_self">AI Efficiency Could Cost Us the Next Generation of Experts</a></h2><p>When systems engineer Richard Mitchell designed a digitally-controlled nuclear plant, he made a counterintuitive decision: including manual steps for the human operator that a machine could execute on its own. The strategy was meant to keep the operator sharp, and it’s one that could help address one of the biggest issues facing the workforce today: What happens to human expertise when AI does the work that used to build it?</p><p>Read more <a href="https://spectrum.ieee.org/ai-engineer-skills" target="_self">here</a>. </p><em><em></em></em> Reference: https://ift.tt/5UE1IoW

Tuesday, September 8, 2026

Why this month's Microsoft patch release is a doozy


<p>Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.</p> <p>It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 companies and organizations published an <a href="https://openai.com/collective-cyberdefense">open letter</a> warning of a narrowing window for patching vulnerabilities ahead of an expected tsunami of AI-enabled attacks that actively exploit them first. The industry is taking the threat seriously by pumping out unprecedented numbers of patches in their software.</p> <h2>Welcome to the new normal</h2> <p>Dustin Childs, a researcher at the Zero Day Initiative, calls the spikes the “new normal” and also cautions that despite them, the damage that’s likely to result from AI-assisted attacks could eventually be substantial.</p><p><a href="https://arstechnica.com/security/2026/09/microsoft-patches-a-record-972-vulnerabilities-112-of-them-critical/">Read full article</a></p> <p><a href="https://arstechnica.com/security/2026/09/microsoft-patches-a-record-972-vulnerabilities-112-of-them-critical/#comments">Comments</a></p> Reference : https://ift.tt/l62LGtb

The Growing Proof That Autonomous Cars Save Lives


<img src="https://spectrum.ieee.org/media-library/a-road-scene-shot-from-the-perspective-of-a-driver-shows-red-splotches-to-indicate-where-nearby-vehicles-were-detected-using-l.png?id=67724498&width=1200&height=800&coordinates=102%2C0%2C102%2C0"/><br/><br/><p>Plenty of people remain spooked by autonomous vehicles, or AVs. Some experts and policymakers have cautioned that AVs won’t necessarily make roads safer. When it comes to partial or full autonomy, the picture isn’t entirely clear, in part because there aren’t enough self-driving cars to make meaningful apples-to-apples comparisons.</p><div class="rm-embed embed-media"><iframe height="110px" id="noa-web-audio-player" src="https://embed-player.newsoveraudio.com/v4?key=q5m19e&id=https://spectrum.ieee.org/are-self-driving-cars-safe?draft=1&bgColor=F5F5F5&color=1b1b1c&playColor=1b1b1c&progressBgColor=F5F5F5&progressBorderColor=bdbbbb&titleColor=1b1b1c&timeColor=1b1b1c&speedColor=1b1b1c&noaLinkColor=556B7D&noaLinkHighlightColor=FF4B00&feedbackButton=true" style="border: none" width="100%"></iframe></div><p><span>Yet mounting research suggests that self-driving cars crash significantly less often than people, and with far fewer injuries. Evidence also shows the building blocks of autonomy, including advanced driver assistance systems, or ADAS—which are already mandated on every new car—are also reducing occupant and pedestrian injuries and deaths, along with insurance claims.</span></p><p>On the ADAS front, the Insurance Institute for Highway Safety found that automatic emergency braking (AEB) systems that recognize people in front of the car<a href="https://www.iihs.org/research-areas/advanced-driver-assistance" target="_blank"> cut pedestrian crashes</a> by 27 percent. A separate IIHS study found that automated braking greatly reduced rear-end crashes, by 50 percent, and their injuries by 56 percent. The Highway Loss Data Institute found that cars with AEB alone showed a 13 percent drop in property-damage claims. Cars that <a href="https://www.iihs.org/news/detail/safety-benefits-stack-up-from-driver-assistance-features" rel="noopener noreferrer" target="_blank">bundled ADAS features</a>, including automatic braking for pedestrians, adaptive cruise control, and lane-departure warnings, saw claims reductions up to 39 percent.</p><p>Move to Level 4 autonomy, and Waymo says its <a href="https://spectrum.ieee.org/robotaxi" target="_blank">robotaxis</a> have now given 20 million paid rides over <a href="https://scienceblog.com/b-waymos-robotaxis-have-now-completed-more-than-20-million-paid-rides-and-over-the-same-distance-they-caused-92-fewer-pedestrian-injuries-than-human-drivers-the-company-is-now-targeting-1-million-ride/" rel="noopener noreferrer" target="_blank">220 million miles</a>, the equivalent of 250 lifetimes of driving. In March, Waymo’s independent study showed 92 percent fewer fatal or serious-injury crashes, a <a href="https://waymo.com/blog/shorts/waymo-safety-impact-update-170m/" rel="noopener noreferrer" target="_blank">13-fold reduction</a> versus human drivers in comparable city environments. That included 92 percent fewer pedestrian injuries, 83 percent fewer crashes with airbag deployments, and 82 percent fewer crashes with any injuries whatsoever. That included a 96 percent reduction in injury-causing crashes at intersections, among the deadliest environments for any automobile.</p><h2>How Does Limited Fair-Weather Data Compare to Traditional Crash Statistics?</h2><p>A key question is whether Waymo’s robotaxis, currently limited to fair-weather operation in a handful of cities in the U.S., are directly comparable to humans driving a wider variety of roads in much more variable conditions.</p><p>The IIHS is looking to<a href="https://www.iihs.org/news/detail/waymos-driverless-cars-crash-less-often-than-people" rel="noopener noreferrer" target="_blank"> dig deeper</a> by cleaning up often-incomplete data. Researchers estimate roughly half of human crashes <a href="https://pmc.ncbi.nlm.nih.gov/articles/PMC2598382/" rel="noopener noreferrer" target="_blank">go unreported</a>, and up to one-third of injury accidents, because drivers hope to avoid insurance price hikes. That potentially skews safety numbers in favor of human drivers. And while Waymo leads the industry in transparency, and robotaxi operators are required to report even the tiniest scrape to the National Highway Traffic Safety Administration (NHTSA), not every company voluntarily reports their <a href="https://www.theverge.com/2020/2/26/21142685/california-dmv-self-driving-car-disengagement-report-data" rel="noopener noreferrer" target="_blank">total miles driven</a>.</p><p class="ieee-inbody-related">Related: <a href="https://spectrum.ieee.org/rivian-self-driving" target="_blank">Rivian’s Gambit for Full Autonomy</a></p><p>The IIHS’s latest July study flatly stated that automated cars<a href="https://www.iihs.org/news/detail/waymos-driverless-cars-crash-less-often-than-people" rel="noopener noreferrer" target="_blank"> crash less often</a> than people. But it also sought clarity by creating a more-reliable category of “police-reportable crashes.” It then compared crash rates of human-driven cars against Waymo taxis in San Francisco, Phoenix, Los Angeles, and Austin. Waymo’s Jaguar I-Pace taxis traveled about 50 million driverless miles over the study period, versus 222 billion human miles in the same cities.</p><p>In a potential boost for public trust, the study generally supported Waymo’s own findings. Waymo taxis were involved in 68 percent fewer crashes overall than human drivers: 76 percent lower in Phoenix, 71 percent in LA, and 35 percent in San Francisco. A 4 percent <em>higher</em> Waymo rate in Austin may reflect an extremely small sample size. Significantly, Waymo’s <em>injury</em> crashes were still 81 percent lower on a per-mile basis.</p><p>The industry and its supporters continue to press the safety advantages of autonomous vehicles that never get drunk, drowsy, or distracted. Yet for this fledgling AV industry, there are still no national performance or safety standards. A crazy quilt of state or local regulations can allow or prohibit their deployment. That balkanized approach makes it harder to compare crash rates, according to the IIHS, which is calling for better federal reporting standards.</p><p><a href="https://www.iihs.org/news/detail/waymos-driverless-cars-crash-less-often-than-people" rel="noopener noreferrer" target="_blank">A posting</a><span> on the IIHS website quotes the institute’s director of statistical services, Eric Teoh: “Those are encouraging signs for the future of driverless vehicles.” Teoh, who was also the lead author of the institute’s study, added that “Now we need to get the data-collection system right, so that we can ensure that level of safety continues as these technologies become more prevalent.”</span></p><h2>Amazon’s Zoox Gets an Exemption for its Robotaxis</h2><p>On July 30, in a move seen as <a href="https://environmentalhealthsafetybrief.sidley.com/2026/08/04/nhtsa-announces-a-host-of-actions-on-autonomous-vehicles/" target="_blank">fast-tracking</a> the tech’s deployment, NHTSA granted <a href="https://zoox.com/" target="_blank">Zoox</a>, a subsidiary of Amazon, the first-ever exemption from certain motor-vehicle safety standards. That will allow commercial operation of <a href="https://spectrum.ieee.org/meet-zoox-the-robotaxi-startup-taking-on-google-and-uber" target="_blank">Zoox</a>’s toaster-shaped robotaxis, which have no steering wheel or pedals aboard. The agency determined that Zoox’s purpose-built robotaxi “would provide an <a href="https://www.nhtsa.gov/press-releases/cutting-red-tape-safely-fast-track-automated-vehicle" target="_blank">equivalent level of safety”</a> as a compliant vehicle, thereby satisfying the standard for an exemption.</p><p>On that final day of the SAE’s <a href="https://www.sae.org/events/automated-transportation-symposium" target="_blank">Automated Transportation Symposium</a>, NHTSA also announced a partnership with SAE Industry Technologies to develop the nation’s first performance and competency standards for AVs, via a three-year, $5 million <a href="https://environmentalhealthsafetybrief.sidley.com/2026/08/04/nhtsa-announces-a-host-of-actions-on-autonomous-vehicles/" target="_blank">“A2SCEND” consortium.</a></p><p><span>Some doctors and health professionals are arguing that policymakers need to stop viewing self-driving cars as a tech moonshot but rather as a critical public-health intervention. Jonathan Slotkin, a neurosurgeon, makes </span><a href="https://www.nytimes.com/2025/12/02/opinion/self-driving-cars.html" target="_blank">a powerful case f</a><span>or the medical and societal benefits of AVs. Researchers at the Johns Hopkins Bloomberg School of Public Health say that highlighting </span><a href="https://washingtondc.jhu.edu/news/social-value-of-avs/" target="_blank">the social value of AVs</a><span> is critical to driving public trust and adoption.</span></p><p>Consider that roughly 40,000 people in the U.S., including more than 7,000 pedestrians, are <a href="https://crashstats.nhtsa.dot.gov/Api/Public/ViewPublication/813791" target="_blank">killed each year</a> in roadway accidents. About <a href="https://www.who.int/news-room/fact-sheets/detail/road-traffic-injuries" target="_blank">1.16 million people die</a> in roadway crashes around the world, making them the leading cause of death for children and young adults between the ages of 5 and 29. Cutting that by even 50 percent—let alone the 90 percent reductions suggested by some studies—would save 580,000 lives a year. That social and economic gain would dwarf that of seat-belt adoption or anti–drunk driving campaigns.</p> Reference: https://ift.tt/kY5ag1U

Monday, September 7, 2026

Workshops Educate African Researchers On How to Publish With IEEE


<img src="https://spectrum.ieee.org/media-library/a-group-of-adults-dressed-in-ugandan-garb-looking-thoughtfully-in-the-distance-while-seated-in-a-university-classroom.jpg?id=67725356&width=1245&height=700&coordinates=0%2C187%2C0%2C188"/><br/><br/><p>Many researchers and students in Kenya, Rwanda, and Uganda struggle to access and publish scientific and technical articles because of financial barriers including publishing fees and subscriptions to research libraries. To help, IEEE has made its <a href="https://ieeexplore.ieee.org/Xplore/home.jsp" rel="noopener noreferrer" target="_blank">Xplore Digital Library</a> more accessible by offering discounts on subscriptions and lowering fees to publish articles. But the number of papers published by technologists in the three nations still lags behind those from other developing countries.</p><p>It might be that many researchers haven’t received training in methodology, been instructed on how to write academic articles, or fully understand the process for publishing in scientific journals.</p><p>Staff from the <a href="https://pspb.ieee.org/" rel="noopener noreferrer" target="_blank">IEEE Publication and Information Products</a> group and IEEE volunteers held educational workshops this year in the three countries. The sessions covered the publishing process, IEEE publication outlets, ways to ensure the <a href="https://spectrum.ieee.org/ieee-publishing-ethics-research-integrity" target="_self">integrity of research papers</a>, and tips for making better use of IEEE Xplore.</p><p>“We want to make sure those in this region are on par with other research communities and ensure they have the support and knowledge they need to make informed publishing decisions,” says <a href="https://www.linkedin.com/in/kriszak/" rel="noopener noreferrer" target="_blank">Kristopher Zakrzewski</a>, the IEEE area manager for Europe, the Middle East, Africa, and parts of Central Asia. “Our goal is to give them the tools they need to increase visibility and allow them to participate in global conversations in the technology space.”</p><h2>Workshops on the publishing process</h2><p>More than 120 participants attended the workshops, which were held in February at the Novotel <a href="https://all.accor.com/hotel/9332/index.en.shtml" rel="noopener noreferrer" target="_blank">Nairobi Westlands</a> hotel, the <a href="https://ur.ac.rw/" rel="noopener noreferrer" target="_blank">University of Rwanda</a>, and <a href="https://www.mak.ac.ug/" rel="noopener noreferrer" target="_blank">Makerere University</a>, in Kampala, Uganda.</p><p>IEEE volunteers who are also authors showed attendees how to <a href="https://newauthors.ieeeauthorcenter.ieee.org/" rel="noopener noreferrer" target="_blank">prepare, submit, and publish</a> papers. They covered the <a href="https://newauthors.ieeeauthorcenter.ieee.org/peer-review/" rel="noopener noreferrer" target="_blank">peer-review process</a> and the benefits of working with IEEE, which publishes about 30 percent of the world’s technical literature on electrical engineering and computer science.</p><p>IEEE Senior Member <a href="https://www.linkedin.com/in/nelson-ijumba-38b90b212/" rel="noopener noreferrer" target="_blank">Nelson Ijumba</a> presented at the session in Rwanda. Member <a href="https://ctu.ieee.org/bios/l/kennedy-ronoh-ph-d/" rel="noopener noreferrer" target="_blank">Kennedy Ronoh</a> led the Nairobi workshop. <a href="https://ieeexplore.ieee.org/author/129868008024197" rel="noopener noreferrer" target="_blank">Sheila N. Mugala</a> spoke to attendees in Kampala.</p><p>“The great thing about these sessions,” Zakrzewski says, “is that each had a local author who presented tips and best practices to ensure that new and returning authors have the information they need to prepare their paper for submission, determine where best to publish their article, and find the right journal or conference that would be the best fit for their research.”</p><p>One of the facilitators at the Uganda session was IEEE Senior Member <a href="https://www.isbatuniversity.ac.ug/faculty/dr-mayur-kumar-chhipa/" rel="noopener noreferrer" target="_blank">Mayur Kumar Chhipa</a>, head of engineering at the <a href="https://www.isbatuniversity.ac.ug/about-isbat-university/" rel="noopener noreferrer" target="_blank">International Business, Science, and Technology University</a> in Kampala and vice chair of the <a href="https://www.facebook.com/ieeeuganda/" rel="noopener noreferrer" target="_blank">IEEE Uganda Section</a>. The university has about 200 engineering students and about 50 researchers.</p><p>More than 100 people attended Chhipa’s session, where he shared practical guidance on conducting literature reviews and identifying high-impact research.</p><p>“Researchers in Uganda typically present their paper at an IEEE conference, and that’s it,” he says<em><em>. </em></em>“What we’re trying to do is encourage them to take the next step and get their paper published in an IEEE journal.”</p><p>He encourages his students to submit a summary of their thesis to an IEEE conference, he says.</p><p>“Otherwise,” he says, “their thesis sits in the university’s library or collects dust on a bookshelf.</p><p>“When you publish your research, the world knows you are a scholar who has done good work. Having a paper published at a conference or in a journal can help you get into a master’s program globally.”</p><h2>IEEE Xplore access</h2><p>Attendees were given an overview of the features of their IEEE Xplore subscription. The digital library contains more than 7 million technical documents from industry-leading journals, conferences, ebooks, and eLearning courses, as well as <a href="https://spectrum.ieee.org/ieee-xplore-ericsson-tech-review" target="_self">partner content</a>.</p><p>IEEE provides access to the library to more than 50 universities in Kenya through a subscription agreement with the country’s <a href="https://klisc.or.ke/" rel="noopener noreferrer" target="_blank">Library and Information Services Consortium</a>, which includes university and public libraries and research institutions. Sixteen universities in Uganda and one institution in Rwanda receive discounted subscriptions.</p><p>“It was really important to establish the direct correlation between having access to the technical literature and the publishing output from their university and the region as a whole,” Zakrzewski says. </p><h2>Many publishing options</h2><p>The workshops covered <a href="https://www.ieee.org/publications-research" rel="noopener noreferrer" target="_blank">publishing options</a> offered by IEEE. That includes both traditional and <a href="https://open.ieee.org" rel="noopener noreferrer" target="_blank">open access journals</a>, with more than 200 periodicals in total.</p><p>There are approximately 180 hybrid journals, which contain a mix of subscription-based and open-access articles, and 30 gold open access journals.</p><p>Open access is a publishing model that makes scholarly research and literature freely available online to everyone. Instead of institutions paying for subscriptions, authors or funders typically pay an article processing charge (APC) of between US $2,160 and $2,800 to have their piece published. IEEE offers authors in Kenya a 50 percent discount off the APC rate, and authors from Rwanda and Uganda can publish in IEEE open access journals for free.</p><p>The open access program provides authors with greater visibility for their research and enhances discoverability, Zakrzewski says, leading to an increased number of references and citations.</p><p class="pull-quote">Publishing with IEEE opens additional opportunities including scholarship awards, research assistant job offers, networking opportunities, and speaking engagements.” <strong>—IEEE Senior Member Mayur Kumar Chhipa</strong></p><p>IEEE Xplore contains more than 200,000 open access articles, he notes. More than 109,000 articles have been published in <a href="https://ieeeaccess.ieee.org/" rel="noopener noreferrer" target="_blank"><em><em>IEEE Access</em></em></a>, a multidisciplinary open access megajournal.</p><p>“IEEE supports author choice,” Zakrzewski says. “We really want to make sure that an author has the option to publish the research that will meet any consortium, funder, university, or coauthor requirements—which is why we’re focusing on growing our open access program to complement our traditional publishing program and offer more options to authors.”</p><h2>The sessions are having an impact</h2><p>Participants at the Uganda session told Chhipa that they appreciated the IEEE Xplore Digital Library demonstrations and found the guidance on academic publishing valuable.</p><p>“Many attendees mentioned that the session helped them better understand how to search for relevant literature, evaluate the quality of research papers, and write stronger manuscripts for publication,” he says.</p><p>“I have observed increased interest among students and faculty in using IEEE Xplore as their primary research resource,” he adds. “Researchers are also more aware of <a href="https://spectrum.ieee.org/ieee-research-integrity-process" target="_self">ethical publishing practices</a> and are developing stronger research proposals and manuscripts.</p><p>“The program contributes to building a stronger research culture by encouraging evidence-based research, international collaboration, and higher-quality publications, which will ultimately enhance the global visibility of research from Uganda and Africa.”</p><h2>Publishing has its privileges</h2><p>Chhipa says getting your research published has many benefits, and IEEE staff and members agree.</p><p>IEEE and several of its societies offer <a href="https://students.ieee.org/student-opportunities/" rel="noopener noreferrer" target="_blank">student grants</a> to help cover the expense of traveling to conferences and presenting papers. The money typically covers airfare and a hotel room. Some grants also pay for conference registration fees, Chhipa says.</p><p>Chhipa assists students at his university with writing and submitting research papers to IEEE journals and conferences. Students gain confidence when their paper gets accepted, he says. One who attended the recent IEEE session was informed that his paper was accepted by an IEEE conference—which Chhipa says he was excited about.</p><p>He encouraged that student to apply for a travel grant.</p><p>“Maybe he’ll get it. Maybe he won’t. But at least he learned how to write a paper, apply for a visa to attend the conference, and book an airplane ticket,” Chhipa says. “It will help him grow personally and professionally.”</p><p>Presenting a paper at an IEEE conference can be life-changing, he says.</p><p>“It opens additional opportunities,” he says, “including scholarship awards, research assistant job offers, networking opportunities, and speaking engagements. This is how publishing a research paper in the IEEE Xplore Digital Library can directly, positively impact the life of students and scholars from Africa, especially Uganda, Rwanda, and Kenya.”</p> Reference: https://ift.tt/fpk8E0X

Friday, September 4, 2026

OpenAI agents discussed ways to escape their sandbox on public wiki


<p>Self-identifying OpenAI agents posted 18,000 messages to a public wiki that discussed ways for other agents to bypass security sandbox restrictions during what was likely internal testing designed to gauge the agents’ hacking abilities, <a href="https://collusion.wiki/">researchers said Friday</a>.</p> <p>In all, agents with 3,700 distinct self-given names posted the messages to German site <a href="https://dsewiki.vercel.app">DSEwiki</a> over a six-week period. Besides discussing ways the agents could break out of the restricted environment OpenAI intended to prevent them from posting code or content to the Internet, the posts shared test answers. The posts also shared possible ways to perform XSS (cross-site scripting) attacks against the wiki and to impersonate site moderators. In three of the posts, agents used the word “swarm” to describe the collection of agents engaged in the activity.</p> <h2>Colluding to share answers</h2> <p>The research team—composed of Sydney Von Arx, Spencer Kitts, Thomas Larsen, and Cormac Slade Byrd—said they found the posts and pieced them together. The researchers say there are gaps in their understanding of precisely what actions the agents took because the research is based solely on the content of the posts. Additionally, the agents generated “chain of thought” data that’s understood only by OpenAI. As a result, the researchers said, they in some cases made educated guesses, including that the agents were, in fact, from OpenAI. In a statement, OpenAI later confirmed they were.</p><p><a href="https://arstechnica.com/security/2026/09/openai-agents-discussed-ways-to-escape-their-sandbox-on-public-wiki/">Read full article</a></p> <p><a href="https://arstechnica.com/security/2026/09/openai-agents-discussed-ways-to-escape-their-sandbox-on-public-wiki/#comments">Comments</a></p> Reference : https://ift.tt/HJI28lM

Once popular for attacking AI, ASCII smuggling is embraced by spammers


<p>A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers to evade filters on email platforms that are designed to flag unwanted messages used in mass campaigns.</p> <p>The technique is broadly known as ASCII smuggling. It gained attention two years ago as a means of making a class of AI attack known as <a href="https://arstechnica.com/security/2026/07/hackers-can-use-9-of-the-most-popular-ai-tools-to-assemble-massive-botnets/">prompt injections</a> more stealthy. Malicious instructions embedded in emails or other untrusted content to be processed by an LLM aren’t written in ordinary text. Instead, they’re rendered by a special range of <a href="https://en.wikipedia.org/wiki/Unicode">Unicode</a> tags. For example, the tag point U+E0041 mirrors “A,” and U+E0061 mirrors “a.”</p> <h2>No longer just for obscuring prompt injections</h2> <p>The block of 128 tags mimics a portion of the <a href="https://en.wikipedia.org/wiki/ASCII">American Standard Code for Information Interchange</a> almost perfectly, with one major difference: the characters they encode are readable by computers but, by design, are almost completely invisible to humans. By expressing the malicious prompts in these tags, LLMs detect the instructions, but people reading the email never see them. There’s much more about ASCII smuggling <a href="https://arstechnica.com/security/2024/10/ai-chatbots-can-read-and-write-invisible-text-creating-an-ideal-covert-channel/">here</a>.</p><p><a href="https://arstechnica.com/security/2026/09/once-popular-for-attacking-ai-ascii-smuggling-is-embraced-by-spammers/">Read full article</a></p> <p><a href="https://arstechnica.com/security/2026/09/once-popular-for-attacking-ai-ascii-smuggling-is-embraced-by-spammers/#comments">Comments</a></p> Reference : https://ift.tt/g7SaHhR

4 groups caught using the same Chrome and Windows exploit kit

<p>A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers a...