Critical deserialization bug in Apache Parquet allows RCE

A flaw in code for handling Parquet, Apache’s open-source columnar data file format, allows attackers to run arbitrary code on vulnerable instances. The vulnerability, tracked as CVE-2025-30065, is a deserialization issue (CWE-502) in Parquet’s Java library that allows execution of maliciously crafted Parquet files. Continue reading on CSOonline.com.

infernovm.net

Google Cloud Next ’25: What to expect

Google Cloud Next ’25, which runs from April 9-11 in Las Vegas ,will showcase the latest advancements and future directions of Google Cloud Platform and cloud computing in general. Naturally, you can expect a strong emphasis on artificial intelligence and machine learning and announcements around new AI-powered tools and services designed to enhance productivity, automate tasks, and drive innovation across various industries.

infernovm.net

Surge in threat actors scanning Juniper, Cisco, and Palo Alto Networks devices

A surge in internet probes targeting devices from Juniper Networks, Cisco Systems, and Palo Alto Networks should put their admins on alert, say security experts. A threat actor is probing the internet using default credentials for a Juniper Networks router, prompting a cybersecurity expert to warn network admins to change the login combo from the factory setting if they haven’t already done so. Continue reading on CSOonline.com

infernovm.net

Ivanti warns customers of new critical flaw exploited in the wild

Ivanti is warning customers that a critical vulnerability that impacts its VPN appliances and other products has already been exploited in the wild by a Chinese APT group. The flaw was originally flagged by Ivanti as a denial-of-service issue, but attackers figured out how to exploit it for remote code execution. The vulnerability, now tracked as CVE-2025-22457 with a severity score of 9.0 (Critical) on the CVSS scale, was exploited to deploy two new malware programs on Ivanti Connect Secure appliances versions 22.7R2.5 and earlier and Pulse Connect Secure 9.1x appliances that had reached end-of-support in December. Continue reading on CSO.

infernovm.net

New Intel CEO Lip-Bu Tan begins to lay out technology roadmap

He’s only been on the job for two weeks, but newly appointed Intel CEO Lip-Bu Tan gave a major speech at a partner conference this week where he said the ailing company needs to get its act together, and he doesn’t want customers to hold back on their criticism. Intel’s Vision conference in Las Vegas included several hundred partners and customers, as well as top analysts.

infernovm.net

A look back at Microsoft’s IPO

On April 4, 2000, to celebrate Microsoft’s 25th anniversary, Network World’s Paul McNamara put together the post you’ll see below. The story hasn’t changed. — It’s Thursday, March 13, 1986: Microsoft, founded more than a decade earlier and already a powerhouse in the world of personal computer software, executes an initial public stock offering that will raise $61 million for the company and leave 30-year-old co-founder Bill Gates unfathomably wealthy.

infernovm.net

Enterprises are getting worse at multicloud

In the initial years of multicloud adoption, enterprises took cautious, calculated steps to build and manage infrastructures that spanned multiple cloud providers. The objective was flexibility, performance optimization, and risk mitigation. Yet, in 2025, enterprises are struggling more than ever to operate effective multicloud environments. Why? The rapid movement toward AI systems, combined with a lack of thoughtful planning, has overwhelmed management strategies and pushed many organizations to the brink of multicloud madness.

infernovm.net

Sonatype warns of 18,000 open source malware packages

Software supply chain security company Sonatype uncovered 17,954 open-source malware packages during Q1 2025, the company revealed in its Open Source Malware Index. Sonatype’s Open Source Malware Index for Q1 2025 was introduced April 2. A proliferation of open source malware, or malicious open source packages, poses unprecedented risk in the form of software supply chain attacks, the company said. Open source malware is intentionally crafted to target developers, in order to infiltrate and exploit software chains, according to Sonatype.

infernovm.net

Tariff war throws building of data centers into disarray

Enterprise IT leaders are facing a double-whammy of uncertainties complicating their data center building decisions: The ever-changing realities of genAI strategies, and the back-and-forth nature of the current tariff wars pushed by the United States. “This is obviously a fluid situation. The stated goal of the administration is to bring more development into the US,” said Forrester Senior Analyst Alvin Nguyen.

infernovm.net

Rust language adds trait upcasting

The Rust team has announced Rust 1.86, an update of the language that now features trait upcasting, or the ability to upcast trait objects. Rust 1.86 was announced April 3. For users with a previous version of Rust, the update can be accessed via the rustup tool by running the command rustup update stable. With trait upcasting, if a trait has a supertrait, then developers can coerce a reference to a trait object to a reference to a trait object of the supertrait.

infernovm.net

ServiceNow to acquire Logik.ai to boost CRM portfolio

ServiceNow is acquiring Logik.ai and its configure, price, quote (CPQ) solution to expand its customer relationship management (CRM) product portfolio and accelerate its momentum in sales and order management. Logik.ai, founded in 2021, provides a product that integrates artificial intelligence and an advanced rules engine to streamline the transaction management cycle. The acquisition will expand ServiceNow’s salesforce automation capabilities and provide self-service options for customers who are looking to configure the right product and services themselves, according to industry analysts.

infernovm.net

Mechanical Orchard taps gen AI for mainframe-to-cloud modernization

IBM is expected to drive AI deep into its next mainframe refresh, due this spring, in a move aimed at keeping and attracting Big Iron customers. Meanwhile, there’s no shortage of vendors vying for enterprise customers that are interested in moving off the mainframe and into the cloud. Among them is startup Mechanical Orchard, which is unveiling its generative AI-based Imogen service.

infernovm.net

Hyperlight Wasm points to the future of serverless

Back when I first wrote about Hyperlight, Microsoft’s minimal hypervisor, I speculated that it had a possible role as a WebAssembly-based alternative to serverless computing tools like Azure Functions, using Kubernetes as a host. So it wasn’t too surprising that Microsoft announced a new OS-free host for WebAssembly code based on Hyperlight. The new Hyperlight Wasm builds on two Hyperlight features that Microsoft has demonstrated in the past few months.

infernovm.net

New Relic simplifies Kubernetes performance monitoring

New Relic this week announced a new capability in its Intelligent Observability Platform that the company says will enable engineering teams to deploy an eBPF-powered agent to automatically discover and monitor all applications running on Kubernetes clusters. The New Relic extended Application Performance Monitoring (eAPM) agent is an integration of the extended Berkely Packet Filter (eBPF) technology into New Relic’s platform.

infernovm.net

GitHub upgrades tooling to help developers stop leaking secrets

Over 39 million API keys, credentials, and other secrets leaked onto GitHub’s platform last year, but an update to its scanning tool could help stop that. The widely used cloud-based version-control platform automatically blocks ‘several secrets every minute’ from going into production, but secrets leaks remain a major challenge for users of the service. While secrets are often exposed accidentally, many breaches also come from well-meaning developers who intentionally share them without realizing the risks, GitHub said in a blog post.

infernovm.net

Accelerate cloud infrastructure initiatives with Lucid Software

Cloud and development operations (devops) teams are under constant pressure to do more, faster. They have outdated systems to update and manage, new systems to build, and requests from business units who need their support. It’s a velocity problem, and IT departments often struggle to keep pace. Lucid Software’s newly introduced Cloud Accelerator is built specifically to remove the barriers that slow down strategic work.

infernovm.net

Agentic AI: A Catalyst for Achieving Sustainability Goals

The evolution of artificial intelligence (AI) has reached a new frontier with Agentic AI, a paradigm that empowers AI systems to act autonomously, make decisions, and adapt based on real-time data. As smart cities expand and urban centers grow more complex, Agentic AI plays a pivotal role in enhancing sustainability, optimizing resource management, and improving the quality of life for urban populations.

infernovm.net

New MLCommons benchmarks to test AI infrastructure performance

Industry consortium MLCommons has released new versions of its MLPerf Inference benchmarks, offering a closer look at how current-generation data center and edge hardware performs under increasingly demanding AI workloads. The updated MLPerf Inference V5.0 comes as infrastructure teams grapple with surging demand from generative AI applications like chatbots and code assistants, which require rapid processing of large and complex queries.

infernovm.net

How to use guard clauses in C#

We always strive to write source code that is clean, maintainable, and devoid of any errors. However, we may often find that our application’s code is cluttered because we’ve used too many nested constructs or branches to validate our business rules. Enter guard clauses. Guard clauses allow us to improve the readability of our code by eliminating the need of writing unnecessary conditional statements and nested code in our methods.

infernovm.net

Potential Nvidia chip shortage looms as Chinese customers rush to beat US sales ban

The AI chip shortage could become even more dire as Chinese customers are purportedly looking to hoard Nvidia chips ahead of a proposed US sales ban. According to inside sources, Chinese companies including ByteDance, Alibaba Group, and Tencent Holdings have ordered at least $16 billion worth of Nvidia’s H20 server chips for running AI workloads in just the first three months of this year, The Information reported Wednesday.

infernovm.net

IBM Cloud speeds AI workloads with Intel Gaudi 3 accelerators

IBM Cloud is broadening its AI technology services with Intel Gaudi 3 AI accelerators now available to enterprise customers. With Gaudi 3 accelerators, customers can more cost-effectively test, deploy and scale enterprise AI models and applications, according to IBM, which is said to be the first cloud service provider to adopt Gaudi 3. Intel Gaudi 3 accelerators include AI-specific designs and features and are targeted at multi-model large language models (LLMs) and retrieval-augmented generation (RAG) development, IBM stated. 

infernovm.net

Django 5.2 release touts automatic model importing

The latest version of the Python web framework features an automatic model-importing capability in the shell.  This release also spells the end of support levels for previous version 5.x releases. Unveiled April 2 by the Django Software Foundation, the Django 5.2 release supports Python versions 3.10 to 3.13. This latest release features a shell management command that automatically imports models from all installed apps, with the behavior customizable to add or remove automatic imports.

infernovm.net

Splunk launches inventory tool to simplify OpenTelemetry monitoring

Splunk this week announced a new Service Inventory product that uses OpenTelemetry to offer a comprehensive view into service instrumentation, which the observability company says will solve a critical pain point in modern infrastructure monitoring by providing visibility across cloud and Kubernetes environments. Splunk’s Service Inventory helps organizations identify gaps in their observability configuration, validate that all services are properly instrumented, and ensure they are collecting data from every critical component of their infrastructure.

infernovm.net

Nvidia’s Blackwell raises the bar with new MLPerf Inference V5.0 results

Nvidia on Wednesday released a set of MLPerf Inference V5.0 benchmark results for its Blackwell GPU, the successor to Hopper, saying that its GB200 NVL72 system, a rack-scale offering designed for AI reasoning, set a series of performance records. The benchmarks included the latest updates to MLPerf Inference, including the addition of Llama 3.1 405B, which Dave Salvator, director of accelerated computing products at Nvidia, called “one of the largest and most challenging-to-run open-weight models”, and the new Llama 2 70B Interactive benchmark, which features much stricter latency requirements compared with the original Llama 2 70B benchmark, more closely modeling how chatbots work.

infernovm.net

NetBox Labs launches drift detection tool to tame configuration chaos

NetBox Labs this week made available a new product that will help network teams detect and remediate configuration drift across sophisticated network environments before costly service disruptions or unplanned downtime affect services or applications. NetBox Assurance addresses a critical pain point for IT teams: the growing gap between how networks are supposed to look and how they actually operate. By providing real-time monitoring and automated drift detection, NetBox Assurance aims to transform network management from a reactive to a proactive discipline.

infernovm.net

Informatica readies new Claire Copilot capabilities for IDMC

Enterprise data management vendor Informatica is adding new capabilities to Claire Copilot, the generative AI assistant in its Intelligent Data Management Cloud (IDMC). IDMC sits on top of enterprise databases, ingesting and cataloguing from various sources and applying data governance rules as it goes. It includes tools for extract, transform, load (ETL), data observability for data quality, and master data management.

infernovm.net

SolarWinds launches incident response tool, boosts AI in observability platform

SolarWinds this week introduced a new incident response product and announced AI-based updates to its observability platform and service management product that are aimed at strengthening IT operational resilience. Squadcast Incident Response comes to SolarWinds from its recent acquisition of Squadcast, and it’s designed to provide a proactive and structured approach to incident response and resolution. Among the capabilities this product provides are AI-powered alert isolation, on-call management, multi-source alert correlation, standardized runbooks, status pages, and Microsoft Teams and Slack integrations, according to SolarWinds.

infernovm.net

Google fixes GCP flaw that could expose sensitive container images

A critical privilege escalation vulnerability, ImageRunner, affecting Google Cloud was promptly fixed before it could allow attackers to access sensitive information from GCP deployments. The issue, as discovered by the cybersecurity company Tenable, could have enabled an attacker to bypass permissions and obtain unauthorized access to container images. Continue reading on CSO.

infernovm.net

3 key features in Kong AI Gateway 3.10

Kong AI Gateway 3.10 introduces new capabilities designed to help organizations govern their generative AI usage more effectively, reduce hallucinations from large language models (LLMs), and boost developer productivity. We achieve this while keeping sensitive data protected and safe. As enterprises rush to operationalize generative AI and LLMs across workflows, the challenge has shifted from access to orchestration. Platform teams are now tasked with making AI usage secure, scalable, and cost-effective, without sacrificing or slowing down developer velocity.

infernovm.net

Rewriting Social Security will be a train wreck

Government software development is a curious business. When I was a student at the Naval Postgraduate School, I wrote a paper called “There is a Lot of Money to be Made Writing Bad Software for the Federal Government.”  The general idea is that the incentives to write good software aren’t nearly as strong as those nudging you to write it poorly. 

infernovm.net