An anonymous reader quotes a report from TechCrunch: SpaceX has long marketed Starship as a fully and rapidly reusable rocket that's designed to deliver thousands of pounds of cargo to Mars and make life multiplanetary. But reusability at scale means a space vehicle that can tolerate mishaps and faults, so that a single failure doesn't spell a mission-ending catastrophe. The 10th test flight on Tuesday evening demonstrated SpaceX's focus on fault tolerance. In a post-flight update, SpaceX said the test stressed "the limits of vehicle capabilities." Understanding these edges will be critical for the company's plans to eventually use Starship to launch Starlink satellites, commercial payloads, and eventually astronauts.

When the massive Starship rocket lifted off on its 10th test flight Tuesday evening, SpaceX did more than achieve new milestones. It purposefully introduced several faults to test the heat shield, propulsion redundancy, and the relighting of its Raptor engine. The heat shield is among the toughest engineering challenges facing SpaceX. As Elon Musk acknowledged on X in May 2024, a reusable orbital return heat shield is the "biggest remaining problem" to 100% rocket reusability. The belly of the upper stage, also called Starship, is covered in thousands of hexagonal ceramic and metallic tiles, which make up the heat shield. Flight 10 was all about learning how much damage the ship can accept and survive when it goes through atmospheric heating. During the tenth test, engineers intentionally removed tiles from some sections of the ship, and experimented with a new type of actively cooled tile, to gather real-world data and refine designs. [...]

Propulsion redundancy was also put to the test. The Super Heavy booster's landing burn configuration appeared to be a rehearsal for engine failure. Engineers intentionally disabled one of the three center Raptor engines during the final phase of the burn and used a backup engine in its place. That was a successful rehearsal for an engine-out event. Finally, SpaceX reported the in-space relight of a Raptor engine, described on the launch broadcast as the second time SpaceX has pulled this off. Reliable engine restarts will be necessary for deep-space missions, propellant transfers, and possibly some payload deployment missions. [...] The next step is translating Flight 10 data into future hardware upgrades to move closer to routine operations and days when, as Musk envisioned, "Starship launches more than 24 times in 24 hours."

Electricity rates for individuals and small businesses could rise sharply as Amazon, Google, Microsoft and other technology companies build data centers and expand into the energy business. Residential electricity bills increased at least $15 monthly for Ohio households starting in June due to data center demands, according to utility data and an independent grid monitor. A Carnegie Mellon University and North Carolina State University analysis projects average U.S. electricity bills will rise 8% by 2030 from data center growth, with Virginia facing potential 25% increases. Virginia regulators estimate residents could pay an additional $276 annually by 2030.

National residential electricity rates have already risen more than 30% since 2020. Tech companies' AI push requires data centers that consumed over 4% of U.S. electricity in 2023, with government analysts projecting consumption reaching 12% within three years. American Electric Power warned Ohio regulators that without new rate structures requiring data centers to pay more upfront costs, residents and small businesses would bear much of the expense for grid upgrades.

According to two sources Reuters spoke with, Intel is struggling with low yields in its next-gen 18A chip manufacturing process for its next PC chip, Panther Lake. Internal data suggests the company is far from reaching commercially viable production levels, leading some insiders to describe the effort as a "Hail Mary." Reuters reports: For months, Intel has promised investors it would increase manufacturing using a process it calls 18A. It spent billions of dollars developing 18A, including the construction or upgrades of several factories, with the goal of challenging Taiwan's chipmaking heavyweight, TSMC. Intel wants to round out its business designing chips that it largely makes in-house and TSMC helps it produce, with a contract manufacturing business that can compete with this key supplier. But whether Intel revives advanced chip production in the U.S. and gets its contract foundry on solid footing depends on closing the technology gap with TSMC. Early tests disappointed customers last year, but Intel has said its 18A is on track to make its "Panther Lake" laptop semiconductors at high volume starting in 2025, which include next-generation transistors and a more efficient way to deliver power to the chip.

The chipmaker has hoped that producing such an advanced in-house chip would grow external interest in its foundry, at a time when new CEO Lip-Bu Tan has explored a major shift to course-correct that fledgling business, Reuters previously reported. Yet only a small percentage of the Panther Lake chips printed via 18A have been good enough to make available to customers, said the two people, who were briefed on the company's test data since late last year. The sources spoke on condition of anonymity because Intel did not authorize them to disclose such information. This percentage figure, known as yield, means Intel may struggle to make its high-end laptop chip profitably in the near future. [...]

Intel in the past has aimed for a yield north of 50% before ramping production because starting any earlier risked damaging its profit margin, three of the sources said. Intel typically does not make the lion's share of its profit until yields reach roughly 70% to 80%, key for a chip as small as Panther Lake where many defects would make it a tough sell, the three people said. Profit also flows from market expansions and building up factory output, Intel said. An immense yield increase would be a tall task by Panther Lake's fourth-quarter launch, the two people with knowledge of Intel's manufacturing operation said. But without such a jump, Intel may have to sell some chips at a lower profit margin or at a loss, the two sources briefed on test data said. The company has warned it could exit leading-edge manufacturing entirely if it does not land external business for 14A, which is 18A's next-generation successor.

ZDNet's Steven Vaughan-Nichols shares his list of "what's new and improved" in the latest Linux 6.16 kernel. An anonymous reader shares an excerpt from the report: First, the Rust language is continuing to become more well-integrated into the kernel. At the top of my list is that the kernel now boasts Rust bindings for the driver core and PCI device subsystem. This approach will make it easier to add new Rust-based hardware drivers to Linux. Additionally, new Rust abstractions have been integrated into the Direct Rendering Manager (DRM), particularly for ioctl handling, file/GEM memory management, and driver/device infrastructure for major GPU vendors, such as AMD, Nvidia, and Intel. These changes should reduce vulnerabilities and optimize graphics performance. This will make gamers and AI/ML developers happier.

Linux 6.16 also brings general improvements to Rust crate support. Crate is Rust's packaging format. This will make it easier to build, maintain, and integrate Rust kernel modules into the kernel. For those of you who still love C, don't worry. The vast majority of kernel code remains in C, and Rust is unlikely to replace C soon. In a decade, we may be telling another story. Beyond Rust, this latest release also comes with several major file system improvements. For starters, the XFS filesystem now supports large atomic writes. This capability means that large multi-block write operations are 'atomic,' meaning all blocks are updated or none. This enhances data integrity and prevents data write errors. This move is significant for companies that use XFS for databases and large-scale storage.

Perhaps the most popular Linux file system, Ext4, is also getting many improvements. These boosts include faster commit paths, large folio support, and atomic multi-fsblock writes for bigalloc filesystems. What these improvements mean, if you're not a file-system nerd, is that we should see speedups of up to 37% for sequential I/O workloads. If your Linux laptop doubles as a music player, another nice new feature is that you can now stream your audio over USB even while the rest of your system is asleep. That capability's been available in Android for a while, but now it's part of mainline Linux.

If security is a top priority for you, the 6.16 kernel now supports Intel Trusted Execution Technology (TXT) and Intel Trusted Domain Extensions (TDX). This addition, along with Linux's improved support for AMD Secure Encrypted Virtualization and Secure Memory Encryption (SEV-SNP), enables you to encrypt your software's memory in what's known as confidential computing. This feature improves cloud security by encrypting a user's virtual machine memory, meaning someone who cracks a cloud can't access your data. Linux 6.16 also delivers several chip-related upgrades. It introduces support for Intel's Advanced Performance Extensions (APX), doubling x86 general-purpose registers from 16 to 32 and boosting performance on next-gen CPUs like Lunar Lake and Granite Rapids Xeon. Additionally, the new CONFIG_X86_NATIVE_CPU option allows users to build processor-optimized kernels for greater efficiency.

Support for Nvidia's AI-focused Blackwell GPUs has also been improved, and updates to TCP/IP with DMABUF help offload networking tasks to GPUs and accelerators. While these changes may go unnoticed by everyday users, high-performance systems will see gains and OpenVPN users may finally experience speeds that challenge WireGuard.

Utilities across the U.S. are demanding tech companies pay larger shares of electricity infrastructure costs as AI drives unprecedented data center construction, creating tensions over who bears the financial burden of grid upgrades.

Virginia utility Dominion Energy received requests from data center developers requiring 40 gigawatts of electricity by the end of 2024, enough to power at least 10 million homes, and proposed measures requiring longer-term contracts and guaranteed payments. Ohio became one of the first states to mandate companies pay more connection costs after receiving power requests exceeding 50 times existing data center usage.

Tech giants Microsoft, Google, and Amazon plan to spend $80 billion, $85 billion, and $100 billion respectively this year on AI infrastructure, while utilities worry that grid upgrade costs will increase rates for residential customers.

Further reading: The AI explosion means millions are paying more for electricity

Samsung's new One UI 8 update has quietly disabled the ability to unlock the bootloader on all Galaxy devices globally, ending the custom ROM and kernel era for Android enthusiasts. While most users won't notice, the developer community sees this as a major blow to modding freedom -- one that could potentially raise regulatory concerns within the EU. SamMobile reports: A new report highlights evidence found in the Galaxy S25 One UI 8 beta builds that the bootloader unlock option has been removed. A similar change has also been confirmed on the Galaxy Z Fold 7 and Z Flip 7 which are running stable versions of One UI 8. A deep dive into the stable version's code has also confirmed that regardless of the region, the bootloader unlock option will not be available on devices running One UI 8. The enthusiast community won't like it.

They won't be able to use custom ROMs to update devices when the official software support runs out or use custom kernels to extract more performance. However, with most Samsung phones now offering seven years of Android OS upgrades, one can argue that the utility of this capability is not as significant as it once was.

Since 2010 Stack Exchange has run all its sites on physical hardware in New Jersey — about 50 different servers. (When Ryan Donovan joined in 2019, "I saw the original server mounted on a wall with a laudatory plaque like a beloved pet.") But this month everything moved to the cloud, a new blog post explains. "Our servers are now cattle, not pets. Nobody is going to have to drive to our New Jersey data center and replace or reboot hardware..." Over the years, we've shared glamor shots of our server racks and info about updating them. For almost our entire 16-year existence, the SRE team has managed all datacenter operations, including the physical servers, cabling, racking, replacing failed disks and everything else in between. This work required someone to physically show up at the datacenter and poke the machines... [O]n July 2nd, in anticipation of the datacenter's closure, we unracked all the servers, unplugged all the cables, and gave these once mighty machines their final curtain call...

We moved Stack Overflow for Teams to Azure in 2023 and proved we could do it. Now we just had to tackle the public sites (Stack Overflow and the Stack Exchange network), which is hosted on Google Cloud. Early last year, our datacenter vendor in New Jersey decided to shut down that location, and we needed to be out by July 2025. Our other datacenter — in Colorado — was decommissioned in June. It was primarily for disaster recovery, which we didn't need any more. Stack Overflow no longer has any physical datacenters or offices; we are fully in the cloud and remote...!

[O]ur Staff Site Reliability Engineer, got a little wistful. "I installed the new web tier servers a few years ago as part of planned upgrades," he said. "It's bittersweet that I'm the one deracking them also." It's the IT version of Old Yeller.
There's photos of the 50 servers, as well as the 400+ cables connecting them, all of which wound up in a junk pile. "For security reasons (and to protect the PII of all our users and customers), everything was being shredded and/or destroyed. Nothing was being kept... Ever have difficulty disconnecting an RJ45 cable? Well, here was our opportunity to just cut the damn things off instead of figuring out why the little tab wouldn't release the plug."

An underwater turbine has been spinning for more than six years "to harness the power of ocean tides for electricity," reports the Associated Press. The long-running turbine (off the coast of Scotland) has now proven the commercial viability of the technology: Keeping a large, or grid-scale, turbine in place in the harsh sea environment that long is a record that helps pave the way for bigger tidal energy farms and makes it far more appealing to investors, according to the trade association Ocean Energy Europe. Tidal energy projects would be prohibitively expensive if the turbines had to be taken out of the water for maintenance every couple of years.

Tidal energy technologies are still in the early days of their commercial development, but their potential for generating clean energy is big. According to the National Renewable Energy Laboratory, marine energy, a term researchers use to refer to power generated from tides, currents, waves or temperature changes, is the world's largest untapped renewable energy resource.
This long-running tidal energy project off the coast of Scotland has four 1.5-megawatt turbines — enough to power 7,000 homes for a year, according to the article. But they plan to add 20 turbines in 2030 ("after needed upgrades to the electricity grid are finished"), and the site "could eventually hold as many as 130 turbines that are more powerful than those at the site today."

Thanks to Slashdot reader Bruce66423 for sharing the news.

Apple added the 2013 "Trash Can" Mac Pro to its vintage products list alongside the 2019 13-inch MacBook Air, 2019 iMac, 2018 iPad Pro models, and the 128GB iPhone 8. The cylindrical Mac Pro remained on sale until December 2019, when Apple replaced it with the redesigned "Cheese Grater" model.

Products typically reach vintage status five years after their last distribution date. The 2013 Mac Pro's radical cylindrical design prevented internal component upgrades and created thermal limitations that Apple acknowledged in 2017. "I think we designed ourselves into a bit of a thermal corner," Apple hardware chief Craig Federighi said at the time.

Apple also moved several AirPort devices to its obsolete list, including the second-generation AirPort Express and AirPort Time Capsules. The 2013 Mac Pro's radical design created thermal limitations that Apple acknowledged in 2017.

An anonymous reader shares a blog post: Version 140 of the Thunderbird mail client has been released. Notable features include "dark message mode" to adapt message content to dark mode, the ability to easily transfer desktop settings to the mobile Thunderbird client, experimental support for Microsoft Exchange, as well as global controls for message threading and sort order.

Thunderbird 140 is an extended-support release (ESR) which will be supported for 12 months. However, the Thunderbird project is trying to encourage users to adopt the Release channel for monthly updates instead. The project is staggering upgrades to 140 for existing Thunderbird users in order to catch any significant bugs before they are widely deployed, but users can upgrade manually via the Help > About menu. See the release notes for a full list of changes.

AT&T has launched a new Account Lock feature designed to protect customers from SIM swapping attacks. The security tool, available through the myAT&T app, prevents unauthorized changes to customer accounts including phone number transfers, SIM card changes, billing information updates, device upgrades, and modifications to authorized users.

SIM swapping attacks occur when criminals obtain a victim's phone number through social engineering techniques, then intercept messages and calls to access two-factor authentication codes for sensitive accounts. The attacks have become increasingly common in recent years. AT&T began gradually rolling out Account Lock earlier this year, joining T-Mobile, Verizon, and Google Fi, which already offer similar fraud prevention features.

U.S. consumers "rank problems with public electric vehicle charging and the time it takes to recharge as their top two reasons for rejecting electric vehicles," writes the New York Times, citing figures from data analytics firm J.D. Power.

But are things getting better? Automakers and charging companies are building new stations and updating their cars to allow drivers to more easily and quickly recharge their vehicles. They're also outfitting charging stations with items such as food and bathrooms, and making the devices more reliable. Because chargers are only as fast as the cars they connect with, automakers are designing new cars to absorb electricity at higher speeds. In addition, many automakers have cut deals with Tesla to allow owners of other cars to use the company's fast-charging network, the largest in the country and widely considered the most reliable.

Early evidence suggests efforts to improve electric vehicle charging are paying off. In recent years, J.D. Power surveys showed about 20% of attempts to charge electric vehicles at all public stations ended in failure because of faulty chargers, long lines or payment glitches. But in the first three months of 2025, overall failure rates fell to 16%, the biggest improvement since the surveys began in 2021. "The industry is finally elevating as a whole," said Brent Gruber, an executive director at J.D. Power.

The number of chargers has also increased. There were about 55,200 fast chargers in the United States in May, up from 42,200 a year earlier, according to federal data.

In February, a former Phillips 66 gas station in Apex, N.C., near Raleigh, became the first "Rechargery" from Ionna, a company created by eight automakers, including General Motors, Hyundai Motors, BMW and Mercedes-Benz. Their chargers can deliver up to 400 kilowatts of juice, much more than Tesla's 250-kilowatt Superchargers. Some cars can replenish a battery in 30 minutes or less at the higher charging speeds. When connected to chargers of 350 kilowatts or more, including those at Ionna and Electrify America, another fast-charging network, a Hyundai Ioniq 5 can fill its electric "tank" from 10% to 80% in 18 minutes...

Some models from BMW, Hyundai and Kia have also enabled a national "Plug and Charge" standard that lets car owners begin charging their vehicles at Ionna stalls without first having to use a smartphone app or swipe a credit card, eliminating a step that sometimes results in errors. Tesla's chargers have long worked this way for Tesla cars and now work with some other vehicles, including Rivian's SUVs and pickups. More cars and charging stations are expected to have plug-and-charge capability in the coming months... Nearly every major automaker is redesigning their cars with plug outlets and software that are compatible with Tesla chargers.
Infrastructure upgrades are happening elsewhere too, according to the article.Texas-based gas chain Buc-ee's is offering "premium" charging using renewable power (working with Mercedes), while Waffle House plans to install BP Pulse fast chargers next year.

J.D. Power's Gruber says that while America's federal charger program only helped construct a tiny fraction of new chargers, it did also published guidelines which helped automakers and charging companies work together and address technical problems.

Apple is facing a proposed class-action lawsuit from shareholders who allege the company misled investors about the readiness of its AI-powered Siri upgrades, contributing to a $900 billion drop in market value. Reuters reports: Shareholders led by Eric Tucker said that at its June 2024 Worldwide Developers Conference, Apple led them to believe AI would be a key driver of iPhone 16 devices, when it launched Apple Intelligence to make Siri more powerful and user-friendly. But they said the Cupertino, California-based company lacked a functional prototype of AI-based Siri features, and could not reasonably believe the features would ever be ready for iPhone 16s.

Shareholders said the truth began to emerge on March 7 when Apple delayed some Siri upgrades to 2026, and continued through this year's Worldwide Developers Conference on June 9 when Apple's assessment of its AI progress disappointed analysts. Apple shares have lost nearly one-fourth of their value since their December 26, 2024 record high, wiping out approximately $900 billion of market value.

An anonymous reader quotes a report from the Hollywood Reporter: Bruce Lee, Jackie Chan and Jet Li and a legion of the all-time greats of martial cinema are about to get an AI makeover. In a sign-of-the-times announcement at the Shanghai International Film Festival on Thursday, a collection of Chinese studios revealed that they are turning to AI to re-imagine around 100 classics of the genre. Lee's classic Fist of Fury (1972), Chan's breakthrough Drunken Master (1978) and the Tsui Hark-directed epic Once Upon a Time in China (1991), which turned Li into a bone fide movie star, are among the features poised for the treatment, as part of the "Kung Fu Movie Heritage Project 100 Classics AI Revitalization Project."

There will also be a digital reworking of the John Woo classic A Better Tomorrow (1986) that, by the looks of the trailer, turns the money-burning anti-hero originally played by Chow Yun-fat into a cyberpunk, and is being claimed as "the world's first full-process, AI-produced animated feature film." The big guns of the Chinese industry were out in force on the sidelines of the 27th Shanghai International Film Festival to make the announcements, too. They were led by Zhang Pimin, chairman of the China Film Foundation, who said AI work on these "aesthetic historical treasures" would give them a new look that "conforms to contemporary film viewing." "It is not only film heritage, but also a brave exploration of the innovative development of film art," Zhang said.

Tian Ming, chairman of project partners Shanghai Canxing Culture and Media, meanwhile, promised the work -- expected to include upgrades in image and sound as well as overall production levels -- while preserving the storytelling and aesthetic of the originals -- would both "pay tribute to the original work" and "reshape the visual aesthetics." "We sincerely invite the world's top AI animation companies to jointly start a film revolution that subverts tradition," said Tian, who announced a fund of 100 million yuan ($13.9 million) would be implemented to kick-start the work.

High-voltage electricity cables have become a major constraint throttling the clean energy transition, with manufacturing facilities booked out for years as demand far exceeds supply capacity. The energy transition, trade barriers, and overdue grid upgrades have turbocharged demand for these highly sophisticated cables that connect wind farms, solar installations, and cross-border power networks.

The International Energy Agency estimates that 80 million kilometers of grid infrastructure must be built between now and 2040 to meet clean energy targets -- equivalent to rebuilding the entire existing global grid that took a century to construct, but compressed into just 15 years. Each high-voltage cable requires custom engineering and months-long production in specialized 200-meter towers, with manufacturers reporting that 80-90% of major projects now use high-voltage direct current technology versus traditional alternating current systems.

The World Bank is lifting its decades-long ban on financing nuclear energy, in a policy shift aimed at accelerating development of the low-emissions technology to meet surging electricity demand in the developing world. From a report: In an email to staff on Wednesday, Ajay Banga, the World Bank president, said it would "begin to re-enter the nuclear energy space" [non-paywalled source] in partnership with the International Atomic Energy Agency, the UN nuclear watchdog which works to prevent proliferation of nuclear weapons.

"We will support efforts to extend the life ofÂexisting reactors in countries that already have them, and help support grid upgrades andÂrelated infrastructure," the email said. The shift follows advocacy from the pro-nuclear Trump administration and a change of government in Germany, which previously opposed financing atomic energy due to domestic political opposition to the technology. It is part of a wider strategy aimed at tackling an expected doubling of electricity demand in the developing world by 2035. Meeting this demand would require annual investment in generation, grids and storage to rise from $280 billion today to $630 billion, Banga said in the memo seen by the Financial Times.

Amazon Web Services has signed a long-term deal with Talen Energy to receive up to 1,920 megawatts of carbon-free electricity from the Susquehanna nuclear plant through 2042 to support AWS's AI and cloud operations. The partnership also includes plans to explore new Small Modular Reactors and expand nuclear capacity amid rising U.S. energy demand. Utility Drive reports: Under the PPA, Talen's existing 300-MW co-location arrangement with AWS will shift to a "front of the meter" framework that doesn't require Federal Energy Regulatory Commission approval, according to Houston-based Talen. The company expects the transition will occur next spring after transmission upgrades are finished. FERC in November rejected an amended interconnection service agreement that would have facilitated expanded power sales to a co-located AWS data center at the Susquehanna plant. The agency is considering potential rules for co-located loads in PJM.

Talen expects to earn about $18 billion in revenue over the life of the contract at its full quantity, according to an investor presentation. The contract, which runs through 2042, calls for delivering 840 MW to 1,200 MW in 2029 and 1,680 MW to 1,920 MW in 2032. Talen will act as the retail power supplier to AWS, and PPL Electric Utilities will be responsible for transmission and delivery, the company said. Amazon on Monday said it plans to spend about $20 billion building data centers in Pennsylvania.

"We are making the largest private sector investment in state history -- $20 billion-- to bring 1,250 high-skilled jobs and economic benefits to the state, while also collaborating with Talen Energy to help power our infrastructure with carbon-free energy," Kevin Miller, AWS vice president of global data centers, said.

An anonymous reader quotes a report from Tom's Hardware: The head of the Federal Aviation Administration just outlined an ambitious goal to upgrade the U.S.'s air traffic control (ATC) system and bring it into the 21st century. According to NPR, most ATC towers and other facilities today feel like they're stuck in the 20th century, with controllers using paper strips and floppy disks to transfer data, while their computers run Windows 95. While this likely saved them from the disastrous CrowdStrike outage that had a massive global impact, their age is a major risk to the nation's critical infrastructure, with the FAA itself saying that the current state of its hardware is unsustainable.

"The whole idea is to replace the system. No more floppy disks or paper strips," acting FAA administrator Chris Rocheleau told the House Appropriations Committee last Wednesday. Transportation Secretary Sean Duffy also said earlier this week," This is the most important infrastructure project that we've had in this country for decades. Everyone agrees -- this is non-partisan. Everyone knows we have to do it." The aviation industry put up a coalition pushing for ATC modernization called Modern Skies, and it even ran an ad telling us that ATC is still using floppy disks and several older technologies to keep our skies safe. [...]

Currently, the White House hasn't said what this update will cost. The FAA has already put out a Request For Information to gather data from companies willing to take on the challenge of upgrading the entire system. It also announced several 'Industry Days' so companies can pitch their tech and ideas to the Transportation Department. Duffy said that the Transportation Department aims to complete the project within four years. However, industry experts say this timeline is unrealistic. No matter how long it takes, it's high time that the FAA upgrades the U.S.'s ATC system today after decades of neglect.

An anonymous reader shared this report from The Hacker News: Two information disclosure flaws have been identified in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise Linux, and Fedora, according to the Qualys Threat Research Unit (TRU).

Tracked as CVE-2025-5054 and CVE-2025-4598, both vulnerabilities are race condition bugs that could enable a local attacker to obtain access to access sensitive information. Tools like Apport and systemd-coredump are designed to handle crash reporting and core dumps in Linux systems. "These race conditions allow a local attacker to exploit a SUID program and gain read access to the resulting core dump," Saeed Abbasi, manager of product at Qualys TRU, said...

Red Hat said CVE-2025-4598 has been rated Moderate in severity owing to the high complexity in pulling an exploit for the vulnerability, noting that the attacker has to first win the race condition and be in possession of an unprivileged local account... Qualys has also developed proof-of-concept code for both vulnerabilities, demonstrating how a local attacker can exploit the coredump of a crashed unix_chkpwd process, which is used to verify the validity of a user's password, to obtain password hashes from the /etc/shadow file.
Advisories were also issued by Gentoo, Amazon Linux, and Debian, the article points out. (Though "It's worth noting that Debian systems aren't susceptible to CVE-2025-4598 by default, since they don't include any core dump handler unless the systemd-coredump package is manually installed.")

Canonical software security engineer Octavio Galland explains the issue on Canonical's blog. "If a local attacker manages to induce a crash in a privileged process and quickly replaces it with another one with the same process ID that resides inside a mount and pid namespace, apport will attempt to forward the core dump (which might contain sensitive information belonging to the original, privileged process) into the namespace... In order to successfully carry out the exploit, an attacker must have permissions to create user, mount and pid namespaces with full capabilities." Canonical's security team has released updates for the apport package for all affected Ubuntu releases... We recommend you upgrade all packages... The unattended-upgrades feature is enabled by default for Ubuntu 16.04 LTS onwards. This service:

- Applies new security updates every 24 hours automatically.
- If you have this enabled, the patches above will be automatically applied within 24 hours of being available.

Google today unveiled significant upgrades to its Gemini 2.5 AI models, introducing an experimental "Deep Think" reasoning mode for 2.5 Pro that allows the model to consider multiple hypotheses before responding. The new capability has achieved impressive results on complex benchmarks, scoring highly on the 2025 USA Mathematical Olympiad and leading on LiveCodeBench, a competition-level coding benchmark. Gemini 2.5 Pro also tops the WebDev Arena leaderboard with an ELO score of 1420.

"Based on Google's experience with AlphaGo, AI model responses improve when they're given more time to think," said Demis Hassabis, CEO of Google DeepMind. The enhanced Gemini 2.5 Flash, Google's efficiency-focused model, has improved across reasoning, multimodality, and code benchmarks while using 20-30% fewer tokens. Both models now feature native audio capabilities with support for 24+ languages, thought summaries, and "thinking budgets" that let developers control token usage. Gemini 2.5 Flash is currently available in preview with general availability expected in early June, while Deep Think remains limited to trusted testers during safety evaluations.