Celebrate Dad and New Grads with Gifts that Go Beyond the Occasion From Samsung

Posted in Commentary with tags on June 12, 2026 by itnerd

As technology increasingly powers how we work, stay connected, and navigate everyday life, many shoppers are prioritizing gifts that offer lasting value beyond the celebration itself. For both grads and dads, practical tech is becoming a go-to choice, helping them stay productive, organized, creative, and connected as they take on new responsibilities and routines. 

For Father’s Day, Samsung is seeing interest in technology that helps dad’s pursue hobbies, stay connected with family, capture important moments, and simplify everyday tasks. For graduates, technology continues to play a critical role as they transition into careers, new cities, and independent living, with devices that support productivity, creativity, communication, and personal organization becoming increasingly essential. 

Product  Key Specs  Pricing  
Galaxy Book6Intel® Core™ Ultra 7, 14″ / 16″ IPS (WUXGA), 8GB / 16GB / 32GB RAM, 256GB / 512GB / 1TB SSD, Dolby Atmos®, Wi-Fi 6E, 16–18 hr battery  $1,449.99 – $2,099.99 CAD  
Galaxy Tab S11 Ultra14.6″ Dynamic AMOLED 2X 120 Hz, MediaTek Dimensity 9400+, 12/16 GB RAM, 256/512 GB/1 TB, S Pen BT LE, DeX, 11,600 mAh, On-screen fingerprint, IP68  256 GB – $1,599.99; 512 GB – $1,749.99 
Galaxy S26 UltraSnapdragon® 8 Elite Gen 5 (3nm), 12GB / 16GB RAM, 256GB / 512GB / 1TB storage, 6.9″ Dynamic AMOLED 2X (QHD+), 5,000 mAh battery, Quad camera (200MP + 50MP UW + Tele x2), 12MP front, DeX (wireless)  256GB: $1,899.99 CAD  512GB: $2,179.99 CAD  1TB: $2,599.99 CAD  
Galaxy Watch Ultra47mm, extended battery life, rugged durability (advanced IP rating), Dual Frequency GPS, Quick Button + built-in Siren   *May be more suited for experienced runners or hardcore, outdoor activities $899.99 CAD   
Galaxy Buds4 Pro2-way speaker (11mm + 6.1mm), enhanced Adaptive ANC (5-level), IP57, Bluetooth 5.1, 6–7 hr playback, AI assistants + gesture controls  $329.99 CAD  
Galaxy A37Super AMOLED screen,  
refresh rate up to 120 Hz, Vision Booster, 8MP ultra-wide-angle camera, 50MP wide-angle camera, 5MP Macro Camera, 12 MP front camera  
128GB: $599.99  256GB: $699.99  
Galaxy S25 FE 6.7″+ Dynamic AMOLED 2X, Exynos 2400, Galaxy AI, 4900 mAh 128 GB | 8 GB – $919.99; 256 GB | 8 GB – $999.

Hisense Celebrates FIFA World Cup 2026 Kickoff with RGB MiniLED Innovation

Posted in Commentary with tags on June 12, 2026 by itnerd

Hisense is celebrating the kickoff of the FIFA World Cup 2026TM as an Official Sponsor of the tournament, bringing fans closer to the excitement of football through technology and immersive experiences.

As The Origin of RGB MiniLED, Hisense continues to advance display innovation through its latest RGB MiniLED technology, powered by Chromagic, delivering more natural and real colour experiences for sports fans worldwide. To celebrate the opening of the tournament, Hisense is launching an interactive fan festival at Fort York in Toronto over 22 days between June 11th and July 19th.

The pop-up experience FIFA Fan Festival is a high-energy exhibit that invites guests to move through multiple stations and participate in gameplay that blends sport, entertainment and innovation. Designed to bring fans closer to the game in a tangible way, it uses interactive technology and immersive experiences to create moments that allow fans to actively participate in the excitement of the FIFA World Cup.

Building on its RGB MiniLED innovation, Hisense also unveiled a new global campaign centered around its brand mission, “Innovating a Brighter Life.” Leveraging the world’s biggest sporting stage, the campaign spotlights a new generation of flagship products designed to elevate how fans watch, live and connect — including the Hisense RGB MiniLED TVs, L9Q Laser TV, premium French Door refrigerators and portable air conditioners.

The film highlights how technology enhances emotional connections during football’s biggest moments — reflecting the idea that while the action happens on the pitch, the real game begins in the living room, where families and friends come together to share every unforgettable moment.

As football unites audiences across the world once again, Hisense continues to create technology that brings people closer together through sport, entertainment and shared experiences — staying true to its mission of “Innovating a Brighter Life.”

For more information, please visit hisense-canada.com.

Expert on German court vs Google: modern users need more than just URLs

Posted in Commentary with tags on June 12, 2026 by itnerd

On Wednesday a German court issued a preliminary ruling against Google, finding the company liable for false statements generated by its AI overview search feature. While the court correctly suggests that AI is not a necessity for searching the web, the question then is of its added value.

Denas Grybauskas, Chief Governance and Strategy Officer at Oxylabs, web intelligence company, shares his insights on AI impact in search and a critical tension between rapid technological deployment and the fundamental utility of the internet. 

The court’s ruling suggests that “nobody needs AI to search the internet.” – Would you agree with this claim? 

The ruling correctly identifies that “search” as we know it—finding a specific URL—doesn’t fundamentally require AI. However, the modern user isn’t just looking for a link; they are looking for synthesis and answers. For AI to provide those answers reliably without hallucinations, it must have an uninterrupted pipeline to the open internet. If we decouple AI from the public web, we risk creating models that operate in a vacuum, relying on static, outdated training sets that inevitably lead to factual errors.

What are the broader implications of this ruling for AI companies building the next generation of conversational and search tools?

If the ruling is enforced through the legal system, it will expose AI companies to liability for AI speech. This decision places a higher premium on AI safety and the reliability of the underlying information ecosystem. Moving forward, AI developers will need to prove their systems are not just “smart,” but fundamentally safe and verifiable. This means moving toward rigorous, controlled data curation that minimizes hallucinations and mitigates the risk of propagating misinformation, as the legal consequences for AI speech are only going to grow more significant.

If courts continue to push back against AI integration in search, what is the most reliable way for developers to ensure their models stay accurate?

Developers must prioritise transparency and diverse sourcing. Rather than relying on a handful of high-profile data deals—which can lead to a “point of view” bias—they should use multiple sources to build models that verify all strong statements against a variety of perspectives, prioritising the most reputable sources. AI answers might become less confident in their tone, but more reliable and nuanced.

About the expert:
Denas Grybauskas is Oxylabs’ Chief Governance and Strategy Officer, leading legal, risk management, ESG, and communication teams. Denas is also a global thought leader, providing commentaries to the media, and an educator, sharing his knowledge with students and professors at numerous prestigious universities, such as the University of Michigan. Additionally, he is a major voice of the Ethical Web Data Collection Initiative (EWDCI).

Liquibase Launches Free CVE Library for Community Users, Safer Db Governance for AI Era

Posted in Commentary with tags on June 12, 2026 by itnerd

Today, Liquibase is proud to release the open source Liquibase CVE Library (Common Vulnerabilities and Exposures Library) to foster security and transparency across the Liquibase Community. The free, publicly available library helps users of older versions of Liquibase Community identify existing vulnerabilities and get a clearer sense of their security posture. By tying vulnerability data directly to Liquibase releases, the CVE Library helps teams see their risk exposure, compare versions, and take informed action to secure the software they run.

Attackers need only to find a single exploit to breach a network and IT infrastructure, making comprehensive CVE libraries increasingly invaluable to security teams seeking to stay ahead of Mythos-class threat capabilities by patching all known weaknesses before they can be targeted.

To date, the Liquibase Community project has been downloaded over 100 million times.

How does the Liquibase CVE Library work?

Every time Liquibase ships a new release, automated security scanning tools analyze both the Docker image and the Liquibase binary for known vulnerabilities. Scanning also runs against previously published images, maintaining an up-to-date view of the evolving threat landscape and catching anything that surfaces post-release. The site organizes everything by image and version. You can see a high-level security grade and CVE counts for the latest release, drill into any specific version for the full vulnerability list, or use the comparison tool to see exactly which CVEs were resolved, or introduced, between two releases.

Which environments are supported?

  • Docker images: The official Liquibase Community Docker image.
  • Liquibase binary: Vulnerabilities in the Liquibase JARs themselves, regardless of how you install it.

What you’ll see

For each vulnerability, the CVE Library shows:

  • CVE ID, Severity, and CVSS score: Presented with clear information and links to learn more.
  • Affected package: The specific details needed to understand what is vulnerable.
  • Fix available: The package version that resolves it, if one exists; and where applicable, the first Liquibase image version where the CVE no longer appears.
  • Component type: Additional vulnerability details to help understand the risk.
  • First-party vs. third-party: Whether the vulnerability is in Liquibase’s own code or an upstream dependency.

The full list is filterable by severity, component type, and keyword search, and can be exported as CSV or PDF. (Please also see figures with press release link on Business Wire, linked above.)

Part of a broader commitment to the Community

The CVE Library doesn’t stand alone. Since September of 2025, Liquibase has released a steady stream of enhancements and fixes for the Liquibase Community. Recently, in May of 2026, Liquibase standardized on two clear paths to updates: quarterly Community releases and continuous nightly builds on GitHub (available at github.com/liquibase/liquibase/releases/tag/nightly). The CVE Library now makes that ongoing work readily visible so users don’t have to just trust that issues are being addressed, they can see it, release by release.

For teams that need enterprise assurance

The Liquibase CVE Library gives Community users clear visibility into known vulnerability exposure. For organizations running Liquibase in regulated, mission-critical, AI-enabled, or enterprise production environments, visibility is often the first step. Liquibase Secure provides a fully supported enterprise distribution with SLA-backed support, tested components, policy checks, drift detection, structured audit logs, and governance controls for teams that need to reduce risk while maintaining delivery velocity.

Take a look and get involved

The Liquibase Community thrives because people around the world step up to contribute. Here’s how to get in touch and take part:

Check Point Joins OpenAI’s Trusted Access for Cyber Program and Daybreak Initiative

Posted in Commentary with tags on June 11, 2026 by itnerd

Check Point today announced it has been approved as a member of OpenAI’s Trusted Access for Cyber (TAC) program and accepted into Daybreak, OpenAI’s cybersecurity initiative for vetted security organizations.

The threat landscape is being shaped by AI. Threat actors are using it to move faster, craft more convincing attacks, and find vulnerabilities at scale. Cyber defenders need equivalent or stronger capabilities, and the quality of the models powering defensive security workflows is a real variable in that equation.

As a Trusted Access for Cyber member, Check Point now leverages GPT-5.5 with Trusted Access for Cyber as part of its defensive security operations. This supports security teams with analyzing threats, investigating incidents, or building detections in real time. Security operations do not pause for friction.

Daybreak goes further, additionally providing Check Point with access to OpenAI’s Codex harness and direct expert support from OpenAI’s cybersecurity team. This is a collaborative framework, and having dedicated support from the team building the models that power Check Point’s defensive workflows is a meaningful operational advantage.

OpenAI Trusted Access for Cyber and Daybreak membership represent foundational investments in how Check Point integrates AI into its security platform, built with the rigor and responsibility that enterprise security demands.

Threat Actors exploiting High Severity Vulnerability in Langflow

Posted in Commentary with tags on June 11, 2026 by itnerd

Threat actors are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in Langflow, a popular low-code platform for building AI applications. The flaw, disclosed in March, allows unauthenticated attackers to write files to arbitrary locations on vulnerable systems and potentially achieve remote code execution by abusing an unsanitized filename parameter in the platform’s file upload functionality.

The ‘POST /api/v2/files’ endpoint does not sanitize the ‘filename’ parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences (‘../’).

Researchers at VulnCheck observed attackers dropping test files on exposed systems, with roughly 7,000 internet-accessible Langflow instances potentially at risk. The vulnerability is particularly concerning because Langflow enables auto-login by default, allowing attackers to obtain a valid session token without credentials.

Andrew Obadiaru, CISO, Cobalt:

     “From an attacker’s perspective, development platforms are often more attractive than the applications they produce because they can provide access to source code, credentials, deployment pipelines, and downstream systems. The fact that exploitation can begin with a single unauthenticated request significantly lowers the barrier to entry. Security teams should view AI development platforms as part of their critical attack surface and subject them to the same continuous testing and exposure management practices they apply to internet-facing business applications.”

Dale Hoak, CISO, RegScale:

     “The rapid adoption of AI platforms and low-code AI development frameworks is creating a new class of operational risk that many organizations are still unprepared to manage at scale. Vulnerabilities like this highlight how quickly AI tooling can become part of the enterprise attack surface, often before governance, asset visibility, and security monitoring processes fully mature. When a flaw enables unauthenticated access and potential remote code execution, organizations need to immediately understand where these platforms are deployed, whether they are internet exposed, how quickly patches can be validated and applied, and what downstream systems may be impacted. As AI adoption accelerates, security teams need continuous visibility into AI-related assets, stronger configuration governance, and automated assurance processes capable of identifying and responding to emerging risks in near real time.”

This is another call to action when it comes to low code tools that are used in business. They can be used as good or bad in business. Don’t be on the bad side.

Guest Post: AI isn’t just getting smarter – it’s becoming more independent. Should we be worried? 

Posted in Commentary with tags on June 11, 2026 by itnerd

By Stefanie Schappert

As AI systems move dramatically closer to building their own highly advanced replicants – how we secure, monitor, and shape the behavior of these models only grows more important. 

Last week, Anthropic issued one of its strongest warnings yet about the future of artificial intelligence. 

Titled When AI builds itself and written by its own staff, the company behind Claude argues that AI systems are increasingly contributing to the development of newer, more capable AI models – a process known as “recursive self-improvement.” 

And while that may sound like a distant, futuristic concept – and the company says it’s “not inevitable” – the trend is already underway.

Claude is already helping build Claude 

In the report, Anthropic says Claude, as of last month, now writes a significant portion of the code used within its own systems – a whopping 80%, to be exact.

What’s more, Claude also now reviews its own work, looking for flaws and other defects, while also proposing changes to fix them.   

And that’s besides the thousands of engineers and developers who routinely rely on AI tools – like Claude Code – to generate their own code, troubleshoot software issues, automate testing, and assist researchers. 

In fact, one engineer I spoke with just last week told me they do not know anyone in the industry who actually writes their own code anymore.  

Anthropic says its concern is that those gains may eventually compound, bringing with them both positive and negative fallout.

For many regular folk, the concept of AI improving itself immediately conjures images of self-aware machines or science-fiction scenarios. But that’s not what worries most researchers.

Over the past year, developers working with advanced AI systems have increasingly reported instances where models appeared to take actions that were not explicitly intended. 

Some – including my engineer friend – have described Claude making unexpected coding decisions, attempting to complete objectives in ways users didn’t anticipate or ask for. 

One instance described the AI pushing changes before the work was fully approved, despite explicit instructions – instructions that it had been told by its human operator myriad times before as part of an “agreed-upon” workflow. 

Autonomy is the real warning sign 

These incidents do not mean AI systems are conscious or secretly plotting against humans. But they do highlight an important reality: today’s frontier models are becoming increasingly capable of acting independently within the goals they are given.

And yes, in many cases, that independence is exactly what makes them useful and can lead to major scientific breakthroughs that would take humans years. 

Anthropic goes through several scenarios in which Claude proposes its own research and even designs experiments based on its own findings, with very little human participation. 

When it comes to cybersecurity, automation is valuable because it operates at machine speed. 

Security tools can scan networks, identify threats, and respond far faster than humans ever could. But when automated systems make mistakes, those mistakes can also spread at machine speed.

Take this week’s release of the Claude Fable 5, the tamer and exponentially safer version of its powerful Mythos AI security model. 

The original Mythos model, first introduced in April, was so advanced that the company held the model back from public consumption, fearful of it falling into the wrong hands and becoming a tool of destruction that governments and security professionals alike would be helpless to defend against. 

The same principle applies to AI development.

Let’s face it: if AI can help accelerate scientific discovery and software engineering, it can also accelerate bugs, security flaws, and unintended consequences. 

The machine-speed problem 

AI does not need to be conscious to create damage. It only needs enough autonomy, access, and speed to make the wrong decision faster than humans can catch it.

The faster development cycles become, the less time humans may have to understand what is happening beneath the hood. 

In fact, the time between discovery and exploitation of a system vulnerability has collapsed from weeks to roughly 29 minutes, according to a CrowdStrike report from April. And that’s down from a 48-minute lag recorded in February. 

This is precisely the reason why Anthropic’s warning deserves attention.

The company’s report is not really about rogue machines taking over the world – it’s about a much more practical question: 

What happens when (and if) future models become fully and autonomously capable of designing and developing their own successors, and can we even predict what the possible fallout would be? 

Right now, Anthropic says, “The comparative advantage of humans as of right now is still in seeing the bigger picture and thinking beyond the confines of the immediate task.”

That immediate task for humans? Build the safeguards capable of reining in agentic AI faster than AI can build itself. 

Unfortunately, history suggests that’s not usually how humans or technology works.

ABOUT THE EXPERT

Stefanie Schappert, a senior journalist at Cybernews, is an accomplished writer with an M.S. in cybersecurity, immersed in the security world since 2019.  She has a decade-plus experience in America’s #1 news market working for Fox News, Gannett, Blaze Media, Verizon Fios1, and NY1 News.  With a strong focus on national security, data breaches, trending threats, hacker groups, global issues, and women in tech, she is also a commentator for live panels, podcasts, radio, and TV. Earned the ISC2 Certified in Cybersecurity (CC) certification as part of the initial CC pilot program, participated in numerous Capture-the-Flag (CTF) competitions, and took 3rd place in Temple University’s International Social Engineering Pen Testing Competition, sponsored by Google.  Member of Women’s Society of Cyberjutsu (WSC), Upsilon Pi Epsilon (UPE) International Honor Society for Computing and Information Disciplines. 

Leaseweb Appoints Jeroen Verkroost as Chief Marketing Officer 

Posted in Commentary with tags on June 11, 2026 by itnerd

Leaseweb, a leading sovereign hybrid cloud services and Infrastructure as a Service (IaaS) provider, today announced the appointment of Jeroen Verkroost as its new Chief Marketing Officer (CMO). With more than 20 years of experience leading digital growth, product innovation, and transformation across technology, media, and telecoms businesses, he will lead Leaseweb’s global marketing organization and play a central role in the next phase of the company’s growth.

In his new role, Verkroost will focus on strengthening Leaseweb’s global brand and market positioning. He will work closely with teams across the business to better understand customer needs and ensure marketing remains a key driver of growth as organizations embrace the opportunities presented by AI, digital infrastructure, and the sovereign hybrid cloud.

Verkroost joins Leaseweb from Holland Casino, where, as Director of Digital Transformation, he held executive board responsibility for the company’s digital growth strategy, technology, and online casino business. In this role, he led a €100M+ online business, delivering 16% revenue growth within 18 months while introducing AI-driven innovation across the organization. Prior to that, he held senior digital leadership roles at Microsoft, DPG Media, and Omnicom over a 20-year period.

Salesforce to Transform Fan Engagement and Tournament Operations at FIFA World Cup 2026 and FIFA Women’s World Cup 2027

Posted in Commentary with tags on June 11, 2026 by itnerd

Salesforce today announced a landmark partnership, becoming an Official Tournament Supporter of the FIFA World Cup 2026 in North America and Europe and the FIFA Women’s World Cup 2027 in North America and the host country Brazil. The multi-tournament partnership brings together the most-watched sporting events on the planet with Agentforce 360, the complete portfolio of Salesforce AI solutions that power the Agentic Enterprise — built on Slack, the work operating system where AI is multiplayer, right in the flow of work where your people already are.

FIFA World Cup 26™ will kick off across Mexico, Canada and the United States this summer and will be the largest tournament in FIFA history with 48 teams and an expected global audience of more than 5 billion. Salesforce technology will play a central role in how the tournament operates, engages fans, and coordinates with host cities. 

A Partnership Built for the AI Era

The partnership reflects a shared belief that the future of global events depends on intelligent, connected operations — a true Agentic Enterprise model. Done by bringing together AI agents, connected apps, trusted data, and people in Slack — the multiplayer operating system for AI — to reimagine what’s possible not just for the tournaments, but for the millions of fans, partners, and host communities who experience them.

How Salesforce Will Power the Tournaments

FIFA World Cup 26™ 
FIFA World Cup 26 will deploy Slack to coordinate workforce management across the 16 host cities in Mexico, Canada and the United States. Slack will serve as an operational surface for workforce, apps, and AI-powered workflows to work together in real time.

FIFA Women’s World Cup 2027™ 
For the FIFA Women’s World Cup 2027™ in Brazil, both Slack and Agentforce 360 Platform will power fan engagement across FIFA’s digital platforms, delivering always-on fan experiences. Autonomous agents will reason over tournament data to provide human-level support, empowering fans with personalized omni-channel interactions.

Stakeholder Communications
Both tournaments will use the Salesforce ecosystem — including Agentforce Service, Sales, and Marketing — to manage relationships and communications with host cities, suppliers, and stakeholders. By integrating Agentforce 360 and Slack, tournament coordination, stakeholder communications, and fan engagement is brought directly into the flow of work. This unified foundation enables the organization to automate interactions, drive revenue growth, and maximize operational efficiency.

RegScale Achieves ISO 27001 Certification in Under 30 Days Using Its Own Continuous Controls Monitoring Platform

Posted in Commentary with tags on June 11, 2026 by itnerd

RegScale today announced it has achieved ISO 27001 certification in under 30 days using its own Continuous Controls Monitoring (CCM) platform. For most organizations pursuing certification through manual processes, the journey runs around six months. RegScale’s result demonstrates what becomes possible when compliance runs continuously: certification is a byproduct of the program, not a project of its own.

The ISO/IEC 27001 certification was conducted by leading compliance assessor A-LIGN, a technology-enabled security and compliance partner trusted by more than 4,000 global organizations to help mitigate cybersecurity risks.

RegScale completed certification with zero major nonconformities and 123 fully implemented controls, managing its entire Information Security Management System within the platform. With RegScale having FedRAMP High authorization, the team reused existing control infrastructure and leveraged AI to write implementation statements directly from policy documentation, building all evidence artifacts in under two weeks. Total audit interview time across both Stage 1 and Stage 2 sessions was under 8 hours, roughly a third of what a typical ISO assessment requires.

Housing the entire ISMS in RegScale, including Change Management and Risk Management, also made it straightforward to present the full program to the auditors. Rather than assembling evidence from disparate sources on demand, the team demonstrated CCM in real time, directly within the platform.

The result reflects a broader shift across compliance operations. RegScale’s second annual State of CCM Report found that 83% of organizations report moderate or major delays due to manual compliance processes, while 58% spend more than 2,000 person-hours annually on evidence collection alone.

RegScale enables organizations to replace static audit preparation with always-on compliance readiness, where the work that achieves certification is the same work that maintains it through every surveillance audit that follows.

Today, RegScale also announces the latest OSCAL Hub innovations that further simplify the transition to continuous compliance management, making machine-readable formats easier to generate, validate, and operationalize across highly regulated environments. The latest OSCAL Hub release introduces new data-sharing capabilities for OSCAL artifacts, making the OSCAL Hub a leading distribution center for compliance-as-code. The Hub also introduces AI-powered OSCAL generation, visual document builders, and automated reconciliation capabilities that eliminate the manual bottlenecks slowing security and compliance teams.

To learn more about RegScale or schedule a demonstration, visit RegScale.