Article URL: https://www.bbc.com/news/live/c6x2z0yy32ejt Comments URL: https://news.ycombinator.com/item?id=49614557 Points: 15 # Comments: 6
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Under current US law, works produced entirely by artificial intelligence cannot be copyrighted because copyright requires a human author, regardless of how detailed or iterative a user's prompt was. The US Copyright Office reaffirmed this position in its January 2025 report on AI and copyright, concluding that existing law already addresses the issue without need for new legislation. Courts have backed this stance, most notably in Thaler v. Perlmutter, where the DC Circuit ruled in 2025 that copyright demands human authorship, and the Supreme Court declined to revisit that ruling in 2026. However, distinctly human contributions woven into an AI-assisted work — such as original writing, editorial choices, or creative selection and arrangement — can still qualify for protection. The UK has historically taken a different approach by allowing limited protection for computer-generated works, though that policy is now under review.
As databases scale to millions of records, poorly optimized SQL queries become a major performance bottleneck, straining CPU resources and degrading user experience. Common pitfalls include using SELECT * in production, which increases I/O overhead and prevents covering indexes from functioning efficiently. Tools like EXPLAIN in MySQL and PostgreSQL help developers inspect query execution plans and identify full table scans or missing indexes before making changes. Composite indexes can dramatically speed up multi-condition queries, but column order matters — high-selectivity columns should be placed first to maximize index usage. Wrapping indexed columns in functions within WHERE clauses also invalidates index lookups, and rewriting such queries as explicit range comparisons restores fast index scans.
N-able has released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to address CVE-2026-86218, a pre-authentication remote code execution vulnerability scoring 10.0 on the CVSS scale. The flaw affects self-hosted and N-able-hosted N-central deployments, and successful exploitation could grant attackers code execution on the RMM server without valid credentials. Security firm Huntress noted conflicting vendor communications — some suggesting active exploitation in the wild, while official release notes stopped short of confirming production incidents. Huntress also flagged that log rotation at an affected customer site prevented definitive attribution of a specific incident to this vulnerability. Two related but separate vulnerabilities, CVE-2026-86206 and CVE-2026-86207, were also disclosed; the earlier Hotfix 3 does not address CVE-2026-86218.
A critical unauthenticated remote code execution vulnerability, tracked as CVE-2026-75650 and dubbed StyleSmuggler, affects Adobe Commerce and Magento Open Source installations. Discovered and reported by Sansec, the flaw allows attackers to inject PHP into the template system, which then executes when the server renders a failed payment notification email — requiring no user interaction. Active exploitation has been observed deploying a Rust-based Linux backdoor, with some variants also dropping PHP web shells; the malware communicates via WebSocket over TLS or NTP-like UDP traffic on port 123. Adobe has released a hotfix under security bulletin APSB26-146, though applying it does not remove existing malware or invalidate credentials that may already have been compromised. Store operators are advised to apply the patch immediately, audit templates, check for unauthorized files under pub/media, and review processes and cron entries for signs of compromise.
Discussion (0)
Log in to join the discussion and vote.
Log in