Tech News from Simmons Systems

Tech News from Simmons Systems

Suspected Chinese APT Exploits ViPNet Software in Attacks on Russian Government

A sophisticated hacking campaign known as HelloNet targets Russian government agencies and critical infrastructure by abusing ViPNet, a widely used private networking software suite. According to researchers at Kaspersky, the campaign actively compromises organizations across the government, energy, transport, education, and logistics sectors. The attackers exploit ViPNet's trusted

ai watermarking

AI Watermarks Fall Short as Courtroom Evidence Under Forensic Scrutiny

A new study from researchers Saifur Rahman Tamim and Amir Labib Khan delivers a damning verdict on AI watermarking as courtroom evidence. The paper evaluates three major LLM watermarking methods — KGW, Unigram, and SynthID-Text — against the Daubert admissibility criteria used by U.S. courts and the NIST digital forensic process.

Inside China's AI Labs: Culture of Precision Drives Fast-Following Success

A firsthand tour of China's leading AI labs reveals a research ecosystem that excels at fast-following frontier technology. The author visits major labs across cities like Hangzhou and Shanghai, meeting scientists who demonstrate remarkable openness and humility. The experience highlights just how global the AI research community has

ai infrastructure

AI Data Centers Face Power Grid Bottlenecks as GPU Shortages Ease

The AI industry's primary bottleneck is shifting from GPU scarcity to power grid capacity. Gartner projects that 40% of AI data centers will face power constraints by 2027, and approval timelines for new grid connections in major US and European markets now stretch to 24-36 months. While the

Critical ServiceNow Remote Code Execution Flaw Under Active Attack

Threat researchers at Defused confirm that attackers are now actively exploiting a critical vulnerability in the ServiceNow AI Platform, known as CVE-2026-6875. The flaw allows unauthenticated threat actors to escape the platform's sandbox and execute malicious code remotely. Searchlight Cyber originally discovered and reported the vulnerability in April,

Author Dave Eggers Confronts OpenAI Staff Over ChatGPT's Impact on Education

Last year, OpenAI CEO Sam Altman invites acclaimed author Dave Eggers to speak to roughly 200 company employees. Given Eggers' reputation as a prolific writer and founder of programs supporting the arts, the expectation is that he shares insights on creativity. Instead, Eggers seizes the opportunity to deliver a

Microsoft Sounds Alarm on Rising ACR Stealer Malware Campaigns

Microsoft reports a significant increase in attacks leveraging ACR Stealer, a malware-as-a-service operation that targets enterprise customers to harvest browser-stored passwords, authentication tokens, and sensitive documents. Between late April and mid-June, threat actors deploy the info-stealing payload using the ClickFix social-engineering technique, WebDAV servers, and the Microsoft HTML Application Host

Critical WordPress "wp2shell" Flaws Get Public Exploits, Sites Forced to Update

Security researchers at Searchlight Cyber disclose two critical vulnerabilities in WordPress Core that together enable unauthenticated remote code execution on default installations. Tracked as CVE-2026-63030 and CVE-2026-60137, the flaws affect WordPress versions 6.9.x and 7.0.x. The first vulnerability involves a REST API batch-route confusion issue, while

7-Zip Patch Fixes Critical Code Execution Vulnerability in XZ Archives

A critical remote code execution vulnerability in 7-Zip allows attackers to execute malicious code by tricking users into opening specially crafted compressed files. Researcher Landon Peng disclosed the flaw, which stems from how the popular archive utility processes XZ-compressed data. Specially crafted XZ files trigger a heap-based buffer overflow that

Chinese AI Model Kimi K3 Sparks Fresh Fears in U.S. Tech Race

Chinese company Moonshot AI releases its new Kimi K3 open source model this week, and independent analyses from Arena.ai and Vals AI confirm that it performs competitively with leading frontier models. The announcement coincides with a speech from President Xi Jinping at the World AI Conference in Shanghai and

CISA Orders Federal Agencies to Patch Exploited Fortinet FortiSandbox Flaws by Sunday

CISA has ordered federal agencies to patch two critical vulnerabilities in Fortinet's FortiSandbox threat detection platform by Sunday, July 19. The flaws, tracked as CVE-2026-39808 and CVE-2026-25089, allow unauthenticated attackers to execute remote code through command injection attacks that require no user interaction. Both vulnerabilities have been added

Windows Zero-Day "LegacyHive" Enables Hackers to Gain Admin Access

A security researcher operating under the handle "Nightmare Eclipse" releases a Windows zero-day exploit called LegacyHive that targets a vulnerability in the Windows User Profile Service. The exploit allows attackers to escalate privileges on fully patched Windows systems, though it currently lacks an official CVE identifier. Nightmare Eclipse

Tiny 11-Byte Payload Triggers Major Memory Bloat in OpenSSL Servers

A newly disclosed vulnerability called HollowByte allows unauthenticated attackers to cripple OpenSSL servers using a payload of just 11 bytes. The flaw exists because vulnerable versions of OpenSSL allocate memory based on a declared message size in the TLS handshake header before actually receiving or validating the payload data. An

Databricks Soars to $188 Billion Valuation in Latest AI-Fueled Funding Round

Databricks announces a new funding round led by Coatue that values the company at a staggering $188 billion, marking yet another milestone in its remarkable fundraising journey. While the exact amount remains undisclosed and the round does not close until later this summer, reports indicate the raise totals roughly $3

Apple Sues OpenAI as New Siri AI Launches

Apple files a lawsuit against OpenAI, and the complaint reads as an intense legal salvo. Many experts suggest that several allegations describe standard industry practices, raising questions about Apple's true motivations. On The Vergecast, Nilay and David analyze the lawsuit alongside Apple's history of high-profile litigation