Researchers have developed a proof-of-concept computer worm that utilizes locally hosted, open-weight large language models to autonomously navigate and compromise networks. Unlike traditional malware that relies on hardcoded exploits, this agent reasons through target environments and generates tailored attack strategies at runtime. By operating entirely on local infrastructure, the worm bypasses commercial AI safety filters and remains functional even without internet access or vendor API keys.

Source

Cet article explique comment utiliser PowerBgInfo pour afficher l'état du système sur le fond d'écran des machines Windows et Windows Server via PowerShell.

Le post PowerBgInfo : personnalisez le fond d’écran des serveurs avec PowerShell a été publié sur IT-Connect.

Cisco has disclosed a critical privilege escalation vulnerability, CVE-2026-20245, affecting Catalyst SD-WAN Manager for which no patch is currently available. Attackers are actively leveraging this zero-day flaw, and Cisco has observed limited instances where exploitation resulted in unauthorized configuration changes being pushed to edge devices. This activity follows previous campaigns by threat actor UAT-8616, who utilized similar authentication bypass vulnerabilities to compromise SD-WAN systems earlier this year.

Source

Microsoft has released a new update package designed to refresh the security definitions and engine within Windows installation images. These updates target WIM and VHD files as well as ISOs used for deploying operating systems across the network. By integrating these patches into the installation media, the protection gap that exists between the initial OS setup and the first online update is significantly reduced.

Source

A new threat cluster identified as OP-512 is actively targeting Microsoft Internet Information Services (IIS) servers to deploy a sophisticated web shell framework. Researchers believe the group is focused on espionage and specifically selects organizations that align with Chinese intelligence priorities. This activity follows a trend of multiple China-linked threat actors focusing on IIS vulnerabilities over the past year.

Source

The x86 processor market experienced a significant decline in total shipments during the first quarter of 2026. Despite this general downturn, the server CPU segment bucked the trend by growing more than 10 percent compared to the previous year. This growth is largely attributed to the sustained demand for high-performance hardware required for artificial intelligence workloads in datacenters.

Source

Du code piégé glissé dans des paquets signés Red Hat, et téléchargé environ 80 000 fois par semaine. C'est le bilan d'une attaque repérée le 1er juin.

Pour bien saisir, il faut d'abord savoir ce qu'est npm. C'est l'immense bibliothèque où les développeurs JavaScript piochent des briques de code toutes prêtes plutôt que de tout réécrire. Des millions de projets en dépendent au quotidien.

Et c'est exactement là qu'un malware s'est faufilé. Plusieurs dizaines de paquets publiés sous le nom de Red Hat (l'éditeur du système Linux du même nom, racheté par IBM) ont été infectés par un ver, c'est-à-dire un logiciel malveillant capable de se propager tout seul d'une machine à l'autre.

Le ver s'appelle "Miasma", une variante du tristement célèbre Shai-Hulud, du nom des vers géants du film Dune. Cette fois les pirates ont troqué les clins d'œil à Dune contre de la mythologie grecque, mais le principe ne change pas.

Son fonctionnement est vicieux. Le code malveillant se déclenche via un "preinstall hook", un petit script qui s'exécute automatiquement dès qu'on installe le paquet, avant même que le développeur n'ait touché à la moindre ligne. Pas besoin d'ouvrir quoi que ce soit, l'infection est immédiate.

Une fois en place, il fait les poches de la machine. Clés d'accès aux clouds d'Amazon, Google et Microsoft, jetons Kubernetes et Vault, clés SSH, tokens npm... bref, tout ce qui permet de se connecter ailleurs et de continuer à se répandre.

Et c'est tout l'intérêt d'un ver pour un pirate. Avec un jeton npm volé, le malware peut republier d'autres paquets vérolés au nom de leurs vrais propriétaires, qui contamineront à leur tour de nouvelles machines. La chaîne s'auto-alimente.

D'après les chercheurs de Wiz (la filiale sécurité de Google) et de Socket, qui ont levé le lièvre, le tout remonte au compte GitHub piraté d'un employé de Red Hat. Socket a compté de son côté une trentaine de paquets touchés et près d'une centaine de versions vérolées. Les paquets ont été publiés via la chaîne de production automatisée de l'entreprise, pas via un simple mot de passe volé, ce qui rend l'attaque encore plus difficile à repérer.

Red Hat a réagi vite et retiré les paquets de npm. La boîte précise que ce code n'a jamais été destiné à ses clients et qu'il s'agissait d'outils internes, sans impact connu sur ses systèmes en production.

Le coupable, lui, est encore inconnu. Le groupe TeamPCP avait publié le code source de ce ver en accès libre, du coup impossible de dire si ce sont eux ou un imitateur qui sont derrière l'attaque.

Ce qui est fou, c'est moins cette attaque que sa facilité de copie. Hélas, des vers open source qui se dupliquent, on n'a clairement pas fini d'en voir passer.

Source : The Register

Amazon Web Services has introduced built-in durability for Amazon ElastiCache for Valkey to support the persistent memory requirements of AI agents. This update allows organizations to store agent states and retrieval-augmented generation knowledge bases directly within the cache without risking data loss. Users can now enable persistence through a simple configuration setting rather than migrating to a separate database platform.

Source

Le CCB a publié une alerte à propos de la CVE-2026-41089, une faille présente dans le service Netlogon de Windows Server : elle est exploitée par les pirates.

Le post Windows Server – CVE-2026-41089 : cette faille critique dans Netlogon est exploitée ! a été publié sur IT-Connect.

Intel has revealed details for its upcoming Diamond Rapids Xeon processors, which are scheduled for release in 2027. These chips will feature up to 192 cores, representing a 50 percent increase in core count over the previous generation. However, Intel is officially removing simultaneous multithreading, commonly known as hyperthreading, from this specific server lineup.

Source

Intel introduced the Crescent Island data center GPU at Computex 2026, targeting the growing demand for AI inference workloads. Built on the Arc Xe 3P architecture, the card features a massive 480GB of LPDDR5X memory, a significant increase from earlier 160GB specifications. The unit operates with a 350W thermal design power and utilizes air cooling to manage heat in high-density rack environments.

Source

Nvidia has announced the full production of its Vera Rubin platform, which succeeds the Blackwell architecture for enterprise AI infrastructure. The centerpiece of this lineup is the Vera CPU, a custom processor featuring 88 cores designed specifically to handle agentic workloads and complex data processing. This hardware is integrated into the Vera Rubin NVL72, a liquid-cooled rack system that significantly improves training efficiency and inference throughput for large-scale models.

Source

Suite à l’installation de la mise à jour KB5087537 sur Windows Server 2016, la recherche et la découverte des contrôleurs de domaine AD peuvent échouer.

Le post Un bug surprenant affecte Windows Server 2016 suite aux correctifs de mai 2026 a été publié sur IT-Connect.

Microsoft now offers Windows Server 2025 hotpatching through Azure Arc at no additional charge for eligible Azure Arc-enabled servers. Hotpatching installs Windows security updates without restarting the server in most months, but it does not eliminate all reboots. You still need Azure Arc, the Azure Connected Machine agent, Virtualization-based Security, and a supported Windows Server 2025 edition. This article explains what those requirements mean, how to enable the feature, and where its limits are.

Source

UniFi UNVR Gen 2 and UNVR Gen 2 Pro: What Has Actually Changed?

UniFi’s UNVR range has always occupied a fairly clear role in the Protect ecosystem: a dedicated rackmount recorder for users who have outgrown smaller gateway-based recording, or who want their surveillance storage separated from the rest of their network hardware. With the new UNVR Gen 2 and UNVR Gen 2 Pro, Ubiquiti is shifting that role further. These are still network video recorders first, but the hardware and software changes point toward a more active surveillance appliance, with higher camera support, local AI processing, HDMI output for live viewing, and closer integration with the newer direction of UniFi Protect. The issue is that this also comes with a much higher price than the previous UNVR and UNVR Pro, so the question is not simply whether the Gen 2 models are better, but whether the added hardware and features are relevant enough to justify the increase for different types of deployments.

UNVR G.2 and UNVR G.2 Pro – Specifications

The UNVR Gen 2 is the 1U model in the new range and keeps the same general rackmount class as the original UNVR, with 4 2.5/3.5″ HDD or SSD bays. Its camera support is rated at up to 50 HD cameras, 35 2K cameras, or 25 4K cameras, with support for 150+ Access Hubs. Networking is handled by 1 10G SFP+ port and 1 2.5GbE RJ45 port, while the chassis measures 442.4 x 43.7 x 325 mm.

Internally, it moves to a Qualcomm Kryo CPU built on Arm Cortex technology using a 4 nm process, with 1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, and 3 Efficiency cores at 2.0 GHz. Memory is increased to 8 GB, drive power budget remains 75W, and maximum system power consumption is listed at 100W.

The UNVR Gen 2 Pro is the larger 2U model and increases the drive count to 8 2.5/3.5″ HDD or SSD bays, compared with 7 bays on the previous UNVR Pro. Its camera support is rated at up to 100 HD cameras, 70 2K cameras, or 50 4K cameras, again with support for 150+ Access Hubs. The Pro model uses the same Qualcomm Kryo CPU arrangement as the smaller Gen 2 model, but increases memory to 16 GB. Networking consists of 1 10G SFP+ port and 1 2.5GbE RJ45 port, with a listed chassis size of 442.4 x 87.4 x 325 mm. The drive power budget rises to 155W, while maximum power consumption is listed at 200W.

Both Gen 2 models also include HDMI output for the built-in ViewPort function, which allows a Protect multi-view to be assigned directly to a connected display rather than requiring a separate ViewPort device.

Specification	UniFi UNVR Gen 2	UniFi UNVR Gen 2 Pro
Price	$699	$999
Form factor	Rackmount 1U	Rackmount 2U
Dimensions	442.4 x 43.7 x 325 mm	442.4 x 87.4 x 325 mm
Drive bays	4 x 2.5/3.5″ HDD/SSD	8 x 2.5/3.5″ HDD/SSD
Managed cameras	50 HD / 35 2K / 25 4K	100 HD / 70 2K / 50 4K
Managed Access Hubs	150+	150+
Networking	1 x 10G SFP+ / 1 x 2.5GbE RJ45	1 x 10G SFP+ / 1 x 2.5GbE RJ45
HDMI output	Yes, built-in ViewPort	Yes, built-in ViewPort
ViewPort stream limit	Up to 16 streams	Up to 16 streams
Processor	Qualcomm Kryo CPU built on Arm Cortex technology, 4 nm	Qualcomm Kryo CPU built on Arm Cortex technology, 4 nm
CPU configuration	1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, 3 Efficiency cores at 2.0 GHz	1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, 3 Efficiency cores at 2.0 GHz
Memory	8 GB	16 GB
Integrated Edge AI	Yes	Yes
AI detections	Up to 1,000 per hour	Up to 1,000 per hour
Edge AI features	Natural Language Search, Object Indexing in Find Anything, Person ReID, Search by Image	Natural Language Search, Object Indexing in Find Anything, Person ReID, Search by Image
Max. drive power budget	75W	155W
Max. power consumption	100W	200W
Power method	Universal AC input, 100 to 240V AC, 50/60 Hz	Universal AC input, 100 to 240V AC, 50/60 Hz
Power supply	Internal PSU, 100W	Internal PSU, 200W
Minimum NVR version	Not specified in supplied notes	5.1.10
Minimum Protect version	7.1.46	7.1.46

UNVR Gen 2 vs Original UNVR: Where the Price Increase Comes From

The clearest difference between the original UNVR and the UNVR Gen 2 is the change in hardware platform. The older UNVR uses a quad-core ARM Cortex-A57 processor at 1.7 GHz with 4 GB of memory, while the UNVR Gen 2 moves to the newer Qualcomm Kryo ARM-based CPU platform and 8 GB of memory. The network layout has also changed, with the older model using 1 GbE RJ45 alongside 10G SFP+, while the Gen 2 model upgrades the RJ45 connection to 2.5GbE. Storage bay count remains the same at 4 bays, but camera capacity changes from 60 HD, 30 2K, or 18 4K cameras on the original UNVR to 50 HD, 35 2K, or 25 4K cameras on the Gen 2 model. That means the newer system is not a straight increase across every camera category, but it does raise support for higher-resolution 2K and 4K deployments.

The pricing difference is more substantial than the specification changes would suggest if this were only a conventional recorder update. The original UNVR is positioned at $299, while the UNVR Gen 2 is positioned at $699. The explanation appears to be that UniFi is treating the Gen 2 model as a more complete Protect appliance rather than just a higher-performance version of the old 4-bay recorder.

The HDMI output effectively integrates ViewPort-style live display support, while the built-in Edge AI features shift part of the workload that would otherwise require additional hardware such as an AI Key. This does not make the older UNVR obsolete for simpler recording tasks, but it does change the buying decision. The Gen 2 model is aimed more clearly at deployments that need local AI search, image-based search, person re-identification, and direct live monitoring from the recorder itself.

Specification	Older UNVR / UNVR Pro	New UNVR Gen 2 / UNVR Gen 2 Pro
Models compared	UNVR / UNVR Pro	UNVR Gen 2 / UNVR Gen 2 Pro
Price	$299 / $499	$699 / $999
Form factor	1U / 2U	1U / 2U
Dimensions	442 x 325 x 44 mm / 442 x 325 x 87 mm	442.4 x 43.7 x 325 mm / 442.4 x 87.4 x 325 mm
Drive bays	4 x 2.5/3.5″ HDD/SSD / 7 x 2.5/3.5″ HDD/SSD	4 x 2.5/3.5″ HDD/SSD / 8 x 2.5/3.5″ HDD/SSD
Managed HD cameras	60 / 70	50 / 100
Managed 2K cameras	30 / 35	35 / 70
Managed 4K cameras	18 / 24	25 / 50
Managed Access Hubs	150 / 150	150+ / 150+
Networking	1 x 10G SFP+ and 1 x GbE RJ45	1 x 10G SFP+ and 1 x 2.5GbE RJ45
HDMI output	No integrated ViewPort	Yes, integrated ViewPort via HDMI
ViewPort stream limit	Requires separate ViewPort device	Up to 16 streams
Processor	Quad ARM Cortex-A57 cores at 1.7 GHz	Qualcomm Kryo CPU built on Arm Cortex technology, 4 nm
CPU configuration	4 cores	1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, 3 Efficiency cores at 2.0 GHz
Memory	4 GB / 8 GB	8 GB / 16 GB
Integrated Edge AI	No	Yes
AI features	Requires additional UniFi AI hardware for expanded AI functionality	Natural Language Search, Object Indexing in Find Anything, Person ReID, Search by Image
AI detections	Not specified	Up to 1,000 per hour
Max. drive power budget	75W / 135W	75W / 155W
Max. power consumption	100W / 160W	100W / 200W
Power supply	Internal AC/DC, 120W / 200W	Internal PSU, 100W / 200W
Power redundancy	USP-RPS DC input supported	USP-RPS DC input supported
Main practical difference	Dedicated UniFi Protect recording and storage appliances	Higher-resolution camera scaling, integrated display output, and local AI search features

Protect 7.1 and the Shift Toward Local AI Surveillance

UniFi Protect 7.1 is an important part of the UNVR Gen 2 release, because several of the headline hardware features depend on the newer Protect software stack. The Gen 2 recorders include built-in Edge AI functionality, with support for Natural Language Search, Object Indexing in Find Anything, Person ReID, and Search by Image. In practical terms, this changes how recorded footage can be searched. Instead of relying only on a timeline, motion events, or predefined smart detections, the system is designed to help users locate more specific events across stored footage using more descriptive search methods. The built-in AI functionality is local and license-free, but for larger or busier deployments, UniFi still recommends adding 1 or more AI Keys to expand processing capacity, reduce Edge AI latency, and lower the chance of missed events.

Protect 7.1 also expands the broader surveillance feature set beyond the Gen 2 recorders themselves. Custom Video Walls are now available in Site Manager, dashboard widgets have deeper customization, and live camera views can be configured with webhook shortcuts for triggering automations from the camera interface. Smart detections have been retrained for improved accuracy across UniFi cameras, PTZ tracking has been expanded to include vehicles, and 360 cameras now support native immersive downloads. ONVIF support is also more developed, with audio and motion detection support for third-party cameras, which is significant for sites migrating gradually from existing surveillance hardware into UniFi Protect. The update also introduces U.S.-only Noonlight dispatch services for sensor and video monitoring at $199 per year, DC-09 support for third-party monitoring integrations, and SuperLink Remote Control support for customizable site control. Below is a full breakdown of the feaures of UniFi Protect, and which require AI assistance (either edge based on the camera/AI-port, or local using an AI assisted server or AI-Key):

Bottom Line: A More Capable NVR, but Not a Like-for-Like Replacement

The UNVR Gen 2 and UNVR Gen 2 Pro make more sense when viewed as expanded Protect appliances rather than direct replacements for the older UNVR and UNVR Pro. The new models add faster processing, more memory, 2.5GbE RJ45 networking, HDMI output for built-in ViewPort use, higher 2K and 4K camera ceilings, and local Edge AI features that change how recorded footage can be searched and reviewed. The Pro model also gains an 8th drive bay, which makes it a cleaner fit for larger retention requirements than the older 7-bay UNVR Pro. For sites already planning to use AI search, Person ReID, image-based search, or a direct HDMI monitoring display, the higher price is easier to explain because those functions would otherwise involve additional hardware or a less integrated setup.

That does not mean the price increase will make sense for every Protect installation. The original UNVR and UNVR Pro remain better aligned with users who mainly need reliable recording, centralized Protect storage, and conventional camera management without paying for a broader AI-enabled appliance. The Gen 2 models are therefore best judged by deployment requirements rather than by bay count alone. For new or expanding surveillance environments with higher-resolution cameras, active monitoring, ONVIF migration plans, and a need to search footage more intelligently, the UNVR Gen 2 range has a clearer role. For simpler sites where AI features and HDMI ViewPort output are not a priority, the older UNVR models still have a practical argument, provided UniFi continues to keep them available.

📧 SUBSCRIBE TO OUR NEWSLETTER 🔔
[contact-form-7]
🔒 Join Inner Circle

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you. Need Help? Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry. [contact-form-7] TRY CHAT Terms and Conditions   Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.

☕ WE LOVE COFFEE ☕

 

Ce tutoriel explique comment migrer de Windows Server 2022 (ou 2019) vers Windows Server 2025 en effectuant la mise à niveau via Windows Update.

Le post Migration sur-place vers Windows Server 2025 via Windows Update : comment faire ? a été publié sur IT-Connect.

Starting in mid-April 2026, Microsoft allows you to upgrade Windows Server 2019 and Windows Server 2022 directly to Windows Server 2025 through Windows Update — no installation media (ISO file or DVD) required. The process is called an in-place upgrade, meaning your installed applications, settings, and server roles remain unchanged while only the operating system version changes. This article covers the prerequisites, the exact registry change you need to make, the step-by-step procedure for both the graphical desktop and the text-only Server Core installation, and the important cases where you must not use this method.

Source

Ce tutoriel explique comment détecter et bloquer les adresses IP à l'origine d'attaques brute force sur Windows Server, grâce à des scripts PowerShell.

Le post Windows Server : détecter et bloquer les attaques brute force avec PowerShell a été publié sur IT-Connect.

Dimanche 19 avril 2026, Microsoft a publié en urgence des mises à jour hors bande pour Windows Server afin de patcher un problème affectant Active Directory.

Le post Windows Server – Avril 2026 : de nouveaux correctifs pour stabiliser l’Active Directory a été publié sur IT-Connect.