Posted by msmash from Slashdot
From the sigh-of-relief department: CISA says the U.S. government has extended funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program. From a report: "The CVE Program is invaluable to cyber community and a priority of CISA," the U.S. cybersecurity agency told BleepingComputer. "Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services. We appreciate our partners' and stakeholders' patience."
The announcement follows a warning from MITRE Vice President Yosry Barsoum that government funding for the CVE and CWE programs was set to expire today, April 16, potentially leading to widespread disruption across the cybersecurity industry. "If a break in service were to occur, we anticipate multiple impacts to CVE, including deterioration of national vulnerability databases and advisories, tool vendors, incident response operations, and all manner of critical infrastructure," Barsoum said.
Posted by msmash from Slashdot
From the closer-look department: More than half of the top privately held AI companies based in the U.S. have at least one immigrant founder, according to an analysis from the Institute for Progress. From the report: The IFP analysis of the top AI-related startups in the Forbes AI 2025 list found that 25 -- or 60% -- of the 42 companies based in the U.S. were founded or co-founded by immigrants. The founders of those companies "hail from 25 countries, with India leading (nine founders), followed by China (eight founders) and then France (three founders). Australia, the U.K., Canada, Israel, Romania, and Chile all have two founders each."
Among them is OpenAI -- whose co-founders include Elon Musk, born in South Africa, and Ilya Sutskever, born in Russia -- and Databricks, whose co-founders were born in Iran, Romania and China. The analysis echoes previous findings about the key role foreign-born scientists and engineers have played in the U.S. tech industry and the broader economy.
Posted by BeauHD from Slashdot
From the uncertain-future department: The CVE and CWE programs are at risk of shutdown as MITRE's DHS contract expires on April 16, 2025, with no confirmed renewal. Without continued funding, the ability to standardize, track, and respond to software vulnerabilities could collapse, leaving the cybersecurity community scrambling in a fragmented and dangerously opaque environment. Forbes reports: "Failure to renew MITRE's contract for the CVE program, seemingly set to expire on April 16, 2025, risks significant disruption," said Jason Soroko, Senior Fellow at Sectigo. "A service break would likely degrade national vulnerability databases and advisories. This lapse could negatively affect tool vendors, incident response operations, and critical infrastructure broadly. MITRE emphasizes its continued commitment but warns of these potential impacts if the contracting pathway is not maintained."
MITRE has indicated that historical CVE records will remain accessible via GitHub, but without continued funding, the operational side of the program -- including assignment of new CVEs -- will effectively go dark. That's not a minor inconvenience. It could upend how the global cybersecurity community identifies, communicates, and responds to new threats. [...] MITRE has said that discussions with the U.S. government are active and that it remains committed to the CVE mission. But with the expiration date looming, time is running short -- and the consequences of even a temporary gap are severe.
Posted by BeauHD from Slashdot
From the what-will-they-think-of-next department: Limited Run Games is releasing physical editions of Doom and Doom II, including a $666 "Will it Run Edition" that features a literal game box capable of playing Doom. Engadget reports: It costs $666, which is a nod to the devilish source material, and is being kept to a limited run of 666 copies. It comes with the aforementioned screen-enabled game box that runs Doom, but that's just the beginning. The combo pack ships with the soundtrack on cassette, a certificate of authenticity and a trading card park with five cards.
It comes with a couple of toys based on one of the franchise's most iconic enemies. There's a detailed three-inch Cacodemon that connects to a five-inch base, which looks pretty nifty. There's a smaller handheld Cacodemon that, you'll never guess, also runs Doom. This edition is available for Switch, PS5, Xbox Series X/S and PC. The PC version, however, ships with a download code and not physical copies of both games. Preorders start on April 18 and end on May 18, with a release sometime after that.
Posted by from MMO Champion
WoW Hotfixes - April 15, 2025
Originally Posted by Blizzard
(
Blue Tracker /
Official Forums)
Classes

Warlock
Demonology
Fixed an issue where Grimoire: Felguard received 100% energy reduction while affected by Demonic Tyrant's Demonic Power.
Delves
Fixed a bug preventing Brann from damaging Particularly Bad Guy.
Dungeons and Raids
Operation: Floodgate
Addressed an issue where Leaping Spark may fail to be consumed by Dam Water.
Theater of Pain
Whirling Blade and Death Spiral now have a rim visual to communicate the impact radius of the area effect.
Kul'tharok can no longer melee players.
Liberation of Undermine
Developers’ notes: We’ve adjusted the following encounters to ensure that tuning aimed at increasing parity between healer specializations does not also make current raid encounters more challenging.
Stix Bunkjunker
Toxic Fumes damage reduced by 17% on Mythic difficulty.
Incineration damage reduced by 25% on Normal and Heroic difficulties.
Sprocketmonger Lockenstock
Unstable Explosion damage reduced by 10% on Heroic and Mythic difficulty.
Sonic Ba-Boom initial hit damage reduced by 4% on Heroic and Mythic difficulty.
One-Armed Bandit
Coin Magnet damage reduced by 10%.
Mug'Zee, Heads of Security
Elemental Calamity damage reduced by 12%.
Uncontrolled Burn damage reduced by 12%.
Searing Shrapnel damage reduced by 12%.
Surging Arc damage reduced by 12%.
Chrome King Gallywix
TOTAL DESTRUCTION!!! damage reduced by 10%.
Mechengineer's Canisters healing absorb reduced by 10%.
Canister Detonation damage reduced by 10%.
Venting Heat damage reduced by 10%.
< This article continues on their website >
Posted by BeauHD from Slashdot
From the come-and-get-it department: Google is rolling out Veo 2 video generation in the Gemini app for Advanced subscribers, allowing users to create eight-second, 720p cinematic-style videos from text prompts. 9to5Google reports: Announced at the end of last year, Veo 2 touts "fluid character movement, lifelike scenes, and finer visual details across diverse subjects and styles," as well as "cinematic realism," thanks to an understanding of real-world physics and human motion. In Gemini, Veo 2 can create eight-second video clips at 720p resolution. Specifically, you'll get an MP4 download in a 16:9 landscape format. There's also the ability to share via a g.co/gemini/share/ link. To enter your prompt, select Veo 2 from the model dropdown on the web and mobile apps. Just describe the scene you want to create: "The more detailed your description, the more control you have over the final video." It takes 1-2 minutes for the clip to generate. [...]
On the safety front, each frame features a SynthID digital watermark. Only available to Gemini Advanced subscribers ($19.99 per month), there is a "monthly limit" on how many videos you can generate, with Google notifying users when they're close. It is rolling out globally -- in all languages supported by Gemini -- starting today and will be fully available in the coming weeks.