News related to
Code

PuTTY users have been urged to move to version 0.84 after the maintainers fixed three low-severity security flaws affecting SSH key exchange, NIST ECDSA signature verification, and Telnet or Rlogin session prompt handling. The update, released on 22 May 2026, addresses defects that could allow a malicious server or a man-in-the-middle attacker to crash a PuTTY session or mislead a user during older, insecure remote-login workflows. The […]

Microsoft’s early lead in AI-assisted software development is coming under pressure as outages at GitHub, leadership changes, security incidents and fast-moving rivals reshape one of the most important contests in enterprise technology. GitHub Copilot gave Microsoft a commanding start in the AI coding race. It was launched before many competitors had mature developer products, and it benefited from GitHub’s position at the centre of global software collaboration. […]

By Nantoo Banerjee India’s economy is navigating severe stress. The impact of Persian Gulf war, high cost of imported crude oil, frequent upward adjustment of retail oil prices, rising commodity rates, soaring transportation costs, weakening Rupee and continuous exit of foreign portfolio investors (FPI) are posing a big challenge to the economy. The government appears […]

The article Rising Prices, Falling Rupee And FPI Exit Pose Big Challenge To Economy appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

North Korea-linked hackers have upgraded the InvisibleFerret malware to bypass script-based security tools, converting its Python code into compiled modules that are harder for defenders to inspect and block. The campaign is attributed to Void Dokkaebi, also tracked as Famous Chollima, a threat group associated with operations against software developers, cryptocurrency firms and technology workers. The latest version uses Cython-compiled files, appearing as. pyd modules on Windows […]

US federal investigators have warned that a new phishing-as-a-service platform called Kali365 is enabling cybercriminals to steal Microsoft 365 access tokens and bypass multi-factor authentication without capturing victims’ passwords. The platform, first observed in April 2026 and distributed mainly through Telegram, marks a sharper turn in identity-based attacks because it abuses legitimate Microsoft authentication flows rather than relying on fake login pages alone. By capturing OAuth access […]

US cyber authorities have added a critical Drupal Core SQL injection flaw to their exploited-vulnerabilities list after attacks began targeting unpatched websites using PostgreSQL databases, escalating pressure on government agencies, universities, media groups and enterprises that rely on the open-source content management platform. The vulnerability, tracked as CVE-2026-9082, affects Drupal Core versions from 8.9.0 through several 10. x and 11. x branches before the fixed releases issued […]

Vibe coding has moved from a developer shortcut to a mainstream software-building habit, with non-developers now making up 63 per cent of users creating applications through natural-language prompts rather than conventional programming. The shift is drawing writers, students, founders, investors, teachers and small businesses into a field that had long required technical training. These users are building websites, internal dashboards, classroom tools, workflow apps and lightweight commercial […]

Advertisements

Adult Swim’s Rick and Morty opened its ninth season with “There’s Something About Morty,” an episode that turns abstract logic into narrative machinery, using mathematical incompleteness, self-reference and paradox as more than decorative references in the show’s familiar multiverse chaos. The season premiered on Sunday, May 24, at 11pm ET in the United States, restoring the animated science-fiction comedy to its weekly Adult Swim slot after a […]

OpenAI-generated images are now easier to trace after the company added two embedded provenance signals to pictures created through ChatGPT, Codex and its application programming interface, marking a significant shift for users who rely on AI visuals but cannot openly disclose generative AI use. The change, introduced on May 19, places OpenAI’s image tools inside a widening industry push to label synthetic media as platforms, publishers, regulators […]

Anthropic’s Claude Mythos Preview has identified more than 10,000 high- or critical-severity software vulnerabilities through Project Glasswing, intensifying debate over whether frontier AI is becoming a defensive breakthrough or a new accelerant for cyber risk. The findings, disclosed after the initiative’s first month of operation, mark a sharp escalation in AI-assisted vulnerability discovery across software used in operating systems, browsers, cloud platforms, open-source projects and financial infrastructure. […]

Hackers have compromised the Laravel-Lang open-source ecosystem, turning trusted PHP localisation packages into a vehicle for credential theft and remote code execution across developer machines and build systems. The attack, detected on May 22, targeted packages used by Laravel applications to manage translations, attributes and HTTP status messages. Security teams tracking the incident identified malicious activity across laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes and laravel-lang/actions, with more than 700 historical […]

Cybercriminals are exploiting demand for AI coding tools by pushing fake Gemini CLI and Claude Code installation pages into search results, using the sites to deliver a fileless PowerShell infostealer aimed at developer workstations. The campaign, active since early March 2026, marks a sharper turn in financially motivated attacks against software teams as AI assistants become embedded in daily coding workflows. The attackers are not merely imitating […]

Hosting providers using LiteSpeed’s user-end cPanel plugin are confronting an actively exploited privilege-escalation flaw that can allow any authenticated cPanel account to run scripts as root and take control of affected Linux servers. The vulnerability, tracked as CVE-2026-48172, has been rated at the maximum severity level by security trackers and affects LiteSpeed cPanel user-end plugin versions from 2.3 through 2.4.4. LiteSpeed patched the initial flaw in version […]

Hackers are exploiting unsupported F5 BIG-IP appliances to gain SSH access to enterprise Linux systems, turning trusted edge infrastructure into entry points for deeper attacks on identity systems and internal applications. A May 22 threat intelligence disclosure detailed a multi-stage intrusion that began with an exposed F5 BIG-IP load balancer and moved through Linux infrastructure, an internal Atlassian Confluence server and eventually Active Directory. The case underlines […]

By K Raveendran Cockroach Janta Party may have begun as satire, but its popularity has exposed something far more serious than a passing joke on the internet. The response it has drawn from government functionaries suggests that the ruling establishment is less disturbed by the humour itself than by the possibility that the satire has […]

The article Cockroach Party Exposes A Deeper Political Unease Among New Generation appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

Google’s publication of exploit code for an unresolved Chromium security flaw has intensified scrutiny of how browser vulnerabilities are handled when technical details surface before a patch is ready. The issue affects the Chromium codebase that underpins Google Chrome, Microsoft Edge, Brave, Opera, Vivaldi and several other browsers used across desktop and mobile environments. Security researchers say the flaw can be abused through the Background Fetch API […]

Anthropic PBC is moving towards closing a funding round that could exceed $30 billion at a valuation above $900 billion, a transaction that would place the Claude maker among the world’s most valuable private companies and intensify the capital race reshaping artificial intelligence. The San Francisco-based company is expected to complete the round as soon as next week, though final terms could still change. The deal, if […]

Revenue Up 35.4% Year-on-Year API Token Call Volume Surges Nearly 6 Times

HONG KONG SAR – Media OutReach Newswire – 22 May 2026 – Phancy Group Co., Ltd. (“Phancy” or “The Company”, stock code: 6682.HK), a leading general artificial intelligence company, today announced its unaudited consolidated results for the first quarter ended 31 March 2026.

During the period, Phancy achieved revenue of approximately RMB1.458 billion, representing a 35.4% year-on-year increase. Gross profit margin remained at 35.1%. Phancy leveraged its deep expertise in full-stack AI cloud services, to capitalize on the accelerating adoption of localized computing power and strong enterprise demand for AI solutions. The Company achieved robust growth in its core businesses, accelerated product innovation, and secured several major partnerships, sustaining strong operational momentum.

2026 First Quarter Business Highlights:

Unified Enterprise AI Platform Drives Explosive Core Business Growth

Global computing resources remain constrained, while demand for both private enterprise AI deployments and API-based model calls continues to grow rapidly. Phancy’s enterprise-grade AI platform is built on a unified core architecture that seamlessly supports both API calling scenarios and dedicated private deployments. This significantly boosts AI application efficiency and resource utilization. Supported by a mature computing power supply chain developed over many years, Phancy’s deployable computing power resources have increased by over 200%. This enables the Company to effectively meet surging Token demand and consistently deliver stable, high-quality AI services to its customers.

In the first quarter of 2026, API Token call volume surged nearly 6 times compared to the same period in 2025, and already accounted for nearly 40% of the full-year 2025 total. Meanwhile, the Agentic AI business expanded rapidly, with deepening commercial adoption. Orders on hand grew nearly 100% compared to the end of 2025, emerging as a major growth driver for the Company.

AI Technology Iteration Accelerates, Commercialization Beats Expectations

Building on its continued push into digital employee applications and AI empowerment across business units, Phancy has significantly shortened the product development cycle from R&D to commercialization, enhancing overall operational efficiency and customer satisfaction.

As of mid-May 2026, ModelHub XC has completed adaptation and optimization for over 70,000 AI models on domestic chips, achieving more than 70% of its full-year target – well ahead of schedule.

In May, Phancy launched PhanthyMovie, a professional-grade AI video generation platform designed to enhance creativity, control, and stability in video production, enabling standardized and large-scale content creation for the industry.

Leveraging its advanced technology and proven execution capabilities, PhanthyMovie achieved rapid commercial traction. Just days after launch, the Company entered into a strategic cooperation agreement with Huanxi Media, covering approximately US$200 million in AI Token usage. The two parties will also collaborate on the development of a next-generation AI-powered film and television content production platform, further strengthening Phancy’s position in the AI-driven cultural and creative sector.

Core Products Align Closely with Policy Trends, Strengthening Compute-Model Integration

Since May 2026, China’s AI sector has seen a series of positive policy developments focused on computing infrastructure, data element circulation, and open-source compliance governance. Phancy’s core products, including HAMi vGPU and ModelHub XC, are well-aligned with national policy directions and mainstream industry trends.

In terms of computing resource allocation, policies emphasize cross-regional collaboration and broader access to computing power. Phancy’s HAMi vGPU offers unified scheduling and fine-grained resource partitioning, effectively improving utilization rates, optimizing data center energy efficiency, and supporting unified management across multiple chips to boost single-card efficiency.

In data and model governance, the government continues to promote high-quality dataset development and compliance management. ModelHub XC supports multi-model adaptation and optimization, incorporates data traceability and security certification features to help enterprises reduce compliance risks, and uses the EngineX engine for batch adaptation of domestic chips and models. This significantly improves compatibility while enhancing Token output efficiency through targeted model tuning.

Through deep integration of its computing and model layers, Phancy has built a comprehensive “Compute–Model” integrated solution. This addresses key industry needs such as efficient computing utilization, secure data supply, enterprise compliance, and domestic substitution, while strengthening its technological moat. The Company is well positioned to capture policy dividends and industry opportunities, supporting enterprises in their digital and intelligent transformation.

Hashtag: #PhancyGroup

The issuer is solely responsible for the content of this announcement.

About Phancy Group

Phancy Group (6682.HK) is a leading full-stack AI cloud services platform, providing comprehensive solutions for the AI 2.0 era. Our offerings include SageAIOS, HAMi vGPU and ModelHub XC, delivering efficient and scalable AI infrastructure with end-to-end capabilities. We provide a complete solution from heterogeneous compute resource management and optimization to the deployment of intelligent agent models. These solutions empower digital transformation across a wide range of industries, supporting our vision of building a large-scale and efficient “Token Factory.”

Guided by the mission of “AI for Everyone” and positioned as the “Navigator of AI,” Phancy Group is committed to becoming a global leader in Artificial General Intelligence.

Companies are pushing vulnerable software into production even as artificial intelligence expands the speed, volume and complexity of application development across global supply chains. New industry findings show 75% of organisations often or sometimes deploy code they already know contains security weaknesses, underscoring a persistent gap between software delivery targets and risk controls. The figure marks only a limited improvement from last year’s 81%, suggesting that boards […]

India’s rapid AI adoption is exposing weak points in software supply chain security, with enterprises expanding automated development faster than their ability to detect compromised packages, unsafe containers and unverified AI components.

A 2026 software supply chain security assessment shows that about 65 per cent of organisations in India cannot detect malicious packages, while 71 per cent do not use container security tools. The findings underline a widening gap between the speed of AI-led software development and the controls needed to secure code, dependencies, models and deployment pipelines before they reach production systems.

Security teams are facing a more complex threat environment as AI coding assistants, model registries, agent frameworks and machine-learning libraries become embedded in day-to-day software engineering. AI is no longer confined to application features or analytics layers. It is becoming part of the software supply chain itself, influencing how code is written, tested, packaged and deployed.

Enterprises in India have been quick to adopt AI tools to improve developer productivity, reduce repetitive work and accelerate product releases. Yet the same shift has increased reliance on open-source packages, pre-trained models, plug-ins and automated build systems. Each of these components can introduce hidden risks if provenance, integrity and behaviour are not continuously verified.

Global software repositories are now attracting sustained attacks because they provide a direct route into enterprise development environments. Malicious npm packages rose by 451 per cent during 2025, while more than 48,000 new Common Vulnerabilities and Exposures were disclosed worldwide, a rise of about 20 per cent from the previous year.

The pressure on security teams is being amplified by the volume of AI-generated code. Developers in India are spending about 51 per cent of their time reviewing, validating and hardening code produced by AI tools. About 53 per cent treat such output only as a starting point and review every line before use, while 11 per cent rewrite AI-generated fixes from scratch.

This shift has altered the economics of software engineering. AI may reduce the time needed to draft code, but it can also transfer effort to verification, testing and security review. Weaknesses such as cross-site scripting, SQL injection and missing authorisation checks can still be reproduced by automated tools, particularly when developers rely on generated code without adequate scrutiny.

Governance is emerging as another area of concern. Nearly 97 per cent of organisations surveyed said they had certified AI model governance programmes, but only 59 per cent claimed full provenance visibility across production environments. About 48 per cent still needed a week or longer to produce audit-ready compliance evidence.

That gap points to a difference between policy and enforceable control. Many enterprises have AI governance frameworks on paper, but fewer can prove where every model, library, container image and software artefact came from, how it changed, who approved it and whether it complies with internal policy.

CERT-In has also warned that software supply chain compromises are increasingly targeting developer tools and trusted repositories. Its April 2026 activity note referred to attacks affecting npm, PyPI, GitHub Actions and container registries, including incidents involving Checkmarx, Trivy, LiteLLM, Axios, Telnyx and npm packages linked to the CanisterWorm campaign. The payloads observed in these attacks included credential harvesting, data exfiltration, remote execution and persistence within developer systems.

Model registries have added another layer to the risk. Around 1.4 million new AI artefacts were published on Hugging Face during 2025, representing 58 per cent of all new software packages tracked in one assessment. Researchers identified 495 malicious AI models in public repositories with active payloads capable of credential theft, command execution and reverse-shell activity, along with 969 malicious AI-agent skills designed to exploit developer environments and automation workflows.

For enterprises in India, the challenge is sharpened by the country’s role as a major software engineering and global capability centre hub. Bengaluru, Hyderabad, Pune, Chennai and Gurugram host large engineering teams serving banking, retail, telecoms, manufacturing and cloud services. These centres are increasingly responsible not only for maintenance work but also for product development, AI integration and security-sensitive digital platforms.

Regulatory and customer expectations are also tightening. Buyers are asking for software bills of materials, vulnerability disclosure processes, provenance records and proof that build pipelines are protected. CERT-In’s technical guidance on SBOM, QBOM, CBOM, AIBOM and HBOM has emphasised regular updates, vulnerability exploitability exchange documents and staff training around software supply chain visibility.

Security leaders are therefore moving towards stronger controls across development pipelines. These include automated malicious package detection, container image scanning, secrets detection, signed artefacts, dependency pinning, model provenance checks, policy enforcement in CI/CD systems and continuous monitoring of developer environments.

The investment case is becoming harder to ignore. Software supply chain attacks can bypass perimeter defences because they enter through trusted development channels. Once inside, malicious packages can steal credentials, alter builds, move into cloud environments or compromise downstream customers. AI raises the stakes because it can accelerate both legitimate development and attacker experimentation.

Arabian Post Staff -Dubai Flydubai and Cyprus Airways have launched an interline partnership that gives passengers from Larnaca wider one-stop access to destinations across the Gulf, Asia, Africa and the Indian Ocean through Dubai International. The agreement allows customers to book travel on a single itinerary, with coordinated baggage handling and smoother transfers at DXB. For Cyprus Airways passengers, the arrangement opens connections beyond Dubai to flydubai […]

AMD has committed more than $10 billion to Taiwan’s semiconductor ecosystem, targeting advanced packaging and manufacturing capacity as demand for artificial intelligence infrastructure intensifies across global data centres.

The investment is designed to strengthen the chipmaker’s partnerships with foundries, packaging houses, substrate suppliers and server manufacturers that are central to its next generation of AI systems. The programme places Taiwan at the centre of AMD’s effort to scale production of high-performance processors, accelerators and rack-level systems built for increasingly complex AI workloads.

A major focus will be Elevated Fanout Bridge, or EFB, a 2.5D packaging technology intended to improve the speed and efficiency of connections between chip components. AMD plans to use the technology in its sixth-generation EPYC central processing units, codenamed “Venice”, which are being positioned for AI, cloud and high-performance computing deployments.

The move comes as AI infrastructure spending shifts from individual chips towards complete systems that combine CPUs, graphics processors, high-bandwidth memory, networking and software. Advanced packaging has become a critical bottleneck because AI workloads require large volumes of data to move quickly between processors while keeping power consumption and heat within manageable limits.

AMD Chair and Chief Executive Lisa Su said customers were rapidly expanding AI infrastructure to meet rising compute demand. The company is seeking to combine its high-performance computing portfolio with Taiwan’s manufacturing and packaging capabilities to support integrated, rack-scale AI systems.

AMD is working with partners including ASE, SPIL, Powertech Technology, Wiwynn, Wistron, Inventec, Unimicron, AIC, Nan Ya PCB and Kinsus. These companies cover key parts of the supply chain, from advanced packaging and substrates to server assembly and mechanical architecture. Sanmina is also involved in manufacturing support for the company’s Helios platform.

The investment will support both wafer-based and panel-based EFB interconnect development. AMD and Powertech Technology have qualified what they describe as the industry’s first 2.5D panel-based EFB interconnect, a step aimed at improving scalability and production economics for high-volume AI processors.

The technology is expected to help the “Venice” EPYC processors deliver higher interconnect bandwidth and better power efficiency. That matters because data centre operators are increasingly constrained by electricity availability, cooling capacity and rack density, not only by chip performance.

AMD has also begun ramping production of “Venice” CPUs using Taiwan Semiconductor Manufacturing Company’s 2-nanometre process technology in Taiwan. Future production is planned at TSMC’s Arizona facility, extending the supply chain beyond Taiwan while preserving the company’s close reliance on TSMC’s leading-edge manufacturing.

The “Venice” chips will be a central element of AMD’s Helios rack-scale platform, which also includes AMD Instinct MI450X graphics processors, advanced networking and the ROCm open software stack. The platform is scheduled for deployments beginning in the second half of 2026, with AMD describing the opportunity in terms of multi-gigawatt AI infrastructure rollouts.

The strategy puts AMD in a more direct contest with Nvidia, which dominates AI accelerator sales and has built a strong lead through its GPUs, networking, software ecosystem and full-rack systems. AMD’s challenge is not only to deliver competitive silicon but also to prove that it can scale complete AI infrastructure with dependable supply, efficient packaging and broad software support.

AMD’s data centre business has become the company’s main growth engine. First-quarter 2026 data centre revenue reached $5.8 billion, up 57 per cent from a year earlier, driven by demand for EPYC processors and the ramp-up of Instinct GPU shipments. That performance has strengthened investor expectations that AMD can capture a larger share of AI and cloud infrastructure spending.

Taiwan remains critical to that effort because of its concentration of semiconductor expertise. TSMC anchors the foundry side, while packaging, substrate and system-assembly partners provide the manufacturing depth needed to turn chip designs into deployable infrastructure. The concentration also creates geopolitical and supply-chain risks, particularly as governments and companies seek greater resilience across strategic technologies.

By Dr. Gyan Pathak Annoyed by the voice of the voiceless cockroaches on Social Media platform X, the Union Government of India led by PM Narendra Modi got their account banned in the country. Thanks to the Chief Justice of India Surya Kant’s one of the comments on May 15, 2026, that had triggered the […]

The article Modi Government Banned The Voice Of The Voiceless Cockroaches On X appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

Apache OFBiz users have been urged to move to version 24.09.06 after disclosure of an authentication bypass flaw that can be chained to remote code execution, exposing enterprise resource planning systems to takeover through a manipulated password-change workflow. Tracked as CVE-2026-45434, the vulnerability affects Apache OFBiz versions before 24.09.06. It stems from improper authentication handling in the platform’s password-change logic, where a forced password reset condition may […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA