GoKawiil
Tech News
Researchers identified a double-fetch flaw in Avast's kernel driver that can lead to a pool overflow, potentially allowing code execution outside the antivirus sandbox. The flaw involves multiple reads of the same user-supplied data, which can be manipulated between fetches. Recent Windows updates mitigate this issue by enforcing user-mode access checks, reducing the exploit's viability.
The National Highway Traffic Safety Administration's Office of Defects Investigation has opened a probe into comma.ai's aftermarket driving-assistance hardware following five crashes involving vehicles using the devices. NHTSA says the incidents involved drivers striking stopped or slow-moving vehicles, resulting in three deaths across two crashes and 11 injuries across four of the five incidents. Comma.ai, founded by George Hotz, sells the openpilot system and hardware that owners install themselves to add advanced driver-assist capability to their cars.
US safety regulator NHTSA has launched an investigation into Comma.ai's aftermarket openpilot driver-assistance system following five reported crashes, two of them fatal, resulting in three deaths and up to 11 injuries. The agency says the incidents involved the system failing to detect or respond to slow or stopped vehicles ahead in the same lane, and notes some crashes may have involved modified 'forked' versions of the software, including one fatal Louisiana crash running a fork called FrogPilot.
AMD has submitted patches to its open-source Linux kernel driver adding GDDR7 memory identification along with new IP blocks including IH 8.0 and NBIF 7.10, according to Phoronix. Current Radeon RX 9000-series cards use GDDR6, making this the clearest driver-level sign yet of preparation for a next-generation GPU architecture, widely expected to be RDNA 5.
Developers of the open-source PlayStation 3 emulator RPCS3 identified a workaround for a bug in Nvidia's GPU drivers that was limiting performance. Testing on Red Dead Redemption's Blackwater boat scene showed frame rate gains of 20% on an RTX 3080 setup and 25% on an RTX 5090 setup, while Gran Turismo 5 saw up to 37% faster performance and lower VRAM usage. AMD GPUs were unaffected, suggesting the issue is specific to Nvidia's drivers.
ReBarUEFI is a UEFI DXE driver that can be injected into a system's firmware to enable Resizable BAR on boards that don't officially support the feature. It works by patching the PCI resource allocation process during boot and is paired with a companion tool, ReBarState, to set the BAR size, with a separate project called NvStrapsReBar covering older NVIDIA Turing GPUs.
Cua released CUA-S1, a specialized model for computer-use decisions, alongside Cua Driver, a toolset letting AI agents inspect and control native desktop apps and browsers on macOS, Windows, and Linux via CLI, MCP, or SDKs. The company also offers Cua Fleets, cloud-hosted sandbox desktops provisioned through run.cua.ai, so developers can test agents on isolated Linux environments without local hardware.
Cody Ho and Niklas reverse-engineered Apple's AGX GPU firmware and user-space stack to create a fully OpenGL ES 3.0 compliant Linux driver for the M4 Mac Mini and MacBook Neo, a project completed in roughly a month rather than the years such work typically requires. The driver already runs Chrome, Firefox with WebGL, and Minecraft at 200fps, though it remains unready for general users.
Apple Wallet and Google Wallet now let users store a state driver's license or ID digitally, with built-in options to share only limited information—such as confirming someone is over 21—instead of a full birth date, address and license number. Both companies say the data is encrypted, stored locally on the device rather than in the cloud, and requires biometric or passcode authentication before any information is shared with a verifier.
A dark web marketplace called Nexus was found selling access to a database containing roughly 153 million U.S. and Canadian driver's licenses and 3 million travel documents, according to Krebs on Security. The breach appears linked to identity verification firm IDScan, which is now investigating, while the FBI has also opened a probe; the Nexus listing vanished from the dark web after the report but its operators have not claimed to have deleted the stolen data.
Waymo has begun operating its self-driving taxis in Las Vegas, covering a 24-mile area around the Strip with plans to expand into Clark County. The service primarily uses Jaguar I-Pace-based Ojai electric minivans fitted with Waymo's sixth-generation autonomous driving hardware, following Nevada regulators' approval of an Autonomous Vehicle Network Company permit last month.
Cua, a Y Combinator-backed startup building infrastructure for AI agents that operate computers and applications, is hiring its first dedicated go-to-market employee. The hire will work directly with founders to identify target customers, design sales and pilot processes from scratch, and help grow products built on Cua's Driver framework. Responsibilities span the entire commercial cycle, from technical discovery and demos to closing deals and expanding accounts.