Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

The defense mechanisms that NPM introduced after the ‘Shai-Hulud’ supply-chain attacks have weaknesses that allow threat actors to bypass them via Git dependencies.

Collectively called PackageGate, the vulnerabilities were discovered in multiple utilities in the JavaScript ecosystem that allow managing dependencies, like pnpm, vlt, Bun, and NPM.

Researchers at endpoint and supply-chain security company Koi discovered the issues and reported them to the vendors. They say that the problems were addressed in all tools except for NPM, who closed the report stating that the behavior “works as expected.”

CISA says critical VMware RCE flaw now actively exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical VMware vCenter Server vulnerability as actively exploited and ordered federal agencies to secure their servers within three weeks.

Patched in June 2024, this security flaw (CVE-2024–37079) stems from a heap overflow weakness in the DCERPC protocol implementation of vCenter Server (a Broadcom VMware vSphere management platform that helps admins manage ESXi hosts and virtual machines).

Threat actors with network access to vCenter Server may exploit this vulnerability by sending a specially crafted network packet that can trigger remote code execution in low-complexity attacks that don’t require privileges on the targeted systems or user interaction.

An ultrastructural map of a spinal sensorimotor circuit reveals the potential of astroglia modulation

Using cell reconstructions and synapse mapping in zebrafish, Koh and Avalos Arceo et. al. reveal a vertebrate local spinal sensorimotor circuit map, revealing how neurons and glia are structurally positioned in a circuit. This resource provides insight into how glia and synaptic thresholding could modulate information flow through complex neural networks.

Led Team Discovers Metallic Material With Record Thermal Conductivity

A UCLA-led, multi-institution research team has discovered a metallic material with the highest thermal conductivity measured among metals, challenging long-standing assumptions about the limits of heat transport in metallic materials.

Published this week in Science, the study is led by Yongjie Hu, a professor of mechanical and aerospace engineering at the UCLA Samueli School of Engineering. The team reported that metallic theta-phase tantalum nitride conducts heat nearly three times more efficiently than copper or silver, the best conventional heat-conducting metals.

Thermal conductivity describes how efficiently a material can carry heat. Materials with high thermal conductivity are essential for removing localized hot spots in electronic devices, where overheating limits performance, reliability and energy efficiency. Copper currently dominates the global heat-sink market, accounting for roughly 30% of commercial thermal-management materials, with a thermal conductivity of about 400 watts per meter-kelvin.

Researchers Discover Intensive Meditation Retreat Rewires the Brain and Blood in Just 7 Days

A one-week mind-body retreat led to consistent changes in the brain and at the molecular level that were associated with greater resilience, reduced pain, and improved recovery from stress. Researchers at the University of California, San Diego report that a short, intensive retreat combining sev

New data-driven 3D chromosome model reveals structural and dynamic features of DNA

Chromosomes are masters of organization. These long strings of DNA fold down into an ensemble of compact structures that keep needed parts of the genome accessible while tucking away those that aren’t used as often. Understanding the complexity of these structures has been challenging; chromosomes are large systems, and deciphering the structure and dynamics requires a combination of experimental data and theoretical approaches. The FI-Chrom method, shared in a recent PNAS publication by Rice’s José Onuchic and Vinícius Contessoto, is a new and effective approach for creating 3D maps of chromosomes from real-world data.

FI-Chrom uses data from chromosome Hi-C maps. These maps break out the chromosome into units of length called beads — about 500,000 linear DNA bases each — and show how frequently each bead is close to other beads. This information shows only probabilities of any two beads being neighbors and no direct three-dimensional information. Imagine it as a logic puzzle where the rules, or parameters, read something like this: Bead A is 99% likely to be close to Bead B, 36% likely to be close to Bead C and 62% likely to be close to Bead D. A 3D model, the researchers knew, could be built by placing every bead in a space that didn’t violate any of the Hi-C map’s parameters. The only problem is that in Hi-C maps, there are hundreds of thousands of beads and tens of millions of mapped interactions showing bead closeness.

“We had chromosome maps that gave us, theoretically, 3D information, but we were really reading them in 2D space,” explains Onuchic, the Harry C. and Olga K. Wiess Chair of Physics and a corresponding author of the study. “Now, we have created FI-Chrom, an open-access program that can turn these Hi-C maps into 3D models of chromosomes.”

/* */