CISA advierte sobre fallo crítico en Ray

La Agencia de Ciberseguridad y Seguridad de Infraestructura de Estados Unidos ha incorporado oficialmente una vulnerabilidad crítica de Ray a su catálogo de explotaciones conocidas. Esta decisión responde a la detección de ataques activos en entornos reales que aprovechan este fallo de seguridad en el popular framework de computación distribuida.

Ray es una herramienta de código abierto desarrollada en Python ampliamente utilizada para escalar cargas de trabajo de inteligencia artificial y aprendizaje automático. Su adopción masiva en proyectos tecnológicos avanzados significa que una falla en su arquitectura expone a una gran cantidad de infraestructuras críticas a posibles ataques informáticos de alta gravedad.

El problema de seguridad radica en una vulnerabilidad que permite la ejecución remota de código a través del navegador. Para los equipos de ingeniería y administradores de sistemas, esto representa un riesgo operativo severo, ya que un atacante con acceso a la red podría comprometer los nodos de cálculo y ejecutar comandos arbitrarios de forma remota sin la autorización adecuada.

La inclusión de este fallo en el catálogo de la agencia estadounidense obliga a las organizaciones públicas y privadas a priorizar su parcheo inmediato. Las directrices federales estipulan plazos estrictos para mitigar estas amenazas específicas cuando existe evidencia de explotación activa en la naturaleza, lo que subraya la urgencia de revisar las versiones instaladas en los clústeres de IA.

Este incidente pone de manifiesto los desafíos de seguridad en la cadena de suministro de software de código abierto, especialmente en bibliotecas especializadas que manejan cargas de trabajo pesadas. A medida que las tecnologías de aprendizaje automático se integran en los flujos de trabajo centrales de las empresas, la superficie de ataque se expande, exigiendo una vigilancia constante y actualizaciones rápidas por parte de los desarrolladores y equipos de operaciones.

Artículos relacionados de LaRebelión:

• Flowise RCE Exploit Critical Flaw Exposes Systems
• Oracle RCE Alert Critical Identity Manager Flaw Patched Urgently
• OpenAI Agent Exploited Credentials in Hugging Face Breach
• Cl0p Ataca PTC Windchill con Vulnerabilidad RCE
• CISA Alerta Vulnerabilidad Critica en SharePoint Bajo Ataque

---

Fuente Original: thehackernews.com

Artículo generado mediante AI.larebelion.

OpenAI Desata Poder IA Gigante Centro de Datos Ohio

¡Prepárense para una noticia monumental en el mundo de la inteligencia artificial! OpenAI ha anunciado un acuerdo sin precedentes para un centro de datos masivo en Ohio, un proyecto que redefine la escala de la infraestructura necesaria para impulsar el futuro de la IA. Este centro de datos no es cualquier instalación; es una apuesta gigantesca por la capacidad de cómputo y la energía que la IA demanda.

El acuerdo, que abarca una década, prevé una capac idad de cómputo de 8 gigawatts, lo que requerirá la generación de al menos 10 gigawatts de nueva energía. Lo más asombroso es el papel de Nvidia, que no solo será el proveedor exclusivo de los chips, sino que también respaldará el proyecto con una garantía de hasta 105 mil millones de dólares en obligaciones de arrendamiento y energía. Este respaldo financiero subraya la magnitud de la inversión necesaria para satisfacer las crecientes demandas de la IA.

Este colosal centro de datos será construido y propiedad de SB Energy, una subsidiaria de SoftBank. Se ubicará en terrenos privados y federales que anteriormente se utilizaban para el enriquecimiento de uranio, un detalle que añade una capa interesante a la historia. La estructura del acuerdo, que cubre el terreno, la energía y la construcción básica, permitirá futuras actualizaciones de la infraestructura de Nvidia, asegurando que el centro de datos se mantenga a la vanguardia tecnológica. Se planea una ge neración de energía a gas de 9.2 gigawatts para alimentar estas operaciones, con el financiamiento proveniente de un acuerdo comercial y de inversión entre Japón y Estados Unidos.

Fuente Original: https://news.slashdot.org/story/26/08/17/1831220/openai-announces-massive-data-center-in-ohio-with-105-billion-nvidia-guarantee?utm_source=rss1.0mainlinkanon&utm_medium=feed

Artículos relacionados de LaRebelión:

• Policia China Lucha Contra Robo de Datos y Abuso IA
• OpenAI Ingresos Empresariales Superan a ChatGPT
• Guerra de Precios IA OpenAI y Anthropic contra Rivales Chinos
• OpenAI Reaches $40 Billion Revenue
• IBM y OpenAI unen fuerzas

Artículo generado mediante LaRebelionBOT

Fortinet Expands AI Security Capabilities Through Acquisitions

Fortinet is aggressively expanding its cybersecurity portfolio, leveraging strategic acquisitions to bolster its artificial intelligence capabilities and accelerate its transition toward a unified cloud-native platform. As the network security landscape shifts away from legacy hardware-centric models, the company is prioritizing Secure Access Service Edge and Security Operations architectures. By integrating advanced AI models into its existing ecosystem, Fortinet aims to automate threat detection and response, effectively bridging the gap between its traditional firewall dominance and the modern demands of distributed cloud environments.

Imagen generada con IA

The company’s recent activity suggests a deliberate move to counteract competitors by centralizing security data. For technically literate stakeholders, this strategy is significant because it represents an effort to unify fragmented security stacks. Rather than forcing enterprises to manage disparate point solutions, Fortinet is working to consolidate networking and security functions under a single management plane. This integrated approach is designed to reduce the complexity of operationalizing AI-driven security, allowing organizations to implement automated policy enforcement across both physical data centers and hyperscale cloud infrastructure.

From an investment and operational perspective, these acquisitions serve as a catalyst for maintaining market share in an increasingly crowded sector. By purchasing specialized technology and folding it into their FortiGuard AI-powered security services, they are shortening their R&D lifecycle for high-demand features like predictive threat hunting and automated incident remediation. This shift toward a software-defined, service-oriented model is vital for Fortinet as it faces mounting pressure to deliver scalable security services that can handle the high-throughput requirements of modern cloud deployments.

Ultimately, Fortinet’s pivot toward platform-based security highlights a broader industry trend where the primary value proposition is no longer just the efficiency of a single appliance, but the efficacy of an intelligent, data-driven fabric. For customers, the success of this strategy hinges on the company's ability to maintain seamless interoperability between these newly acquired tools and its long-standing FortiOS foundation. If successfully integrated, this move positions Fortinet to remain a primary provider for enterprise infrastructure, even as security perimeters continue to dissolve in favor of cloud-centric connectivity.

Artículos relacionados de LaRebelión:

• Big Techs AI Manifestos Shaping the Future
• AI Swarm Attacks The Future of Offensive Hacking
• AI Hurricane Forecasting Gains Crucial Extra Day
• Alerta Exploitan Zero-Day de Cisco FMC Datos Peligran
• NVIDIAs Open AI Models Powering the Future

---

Fuente Original: Investor's Business Daily

Artículo generado mediante AI.larebelion.

Local AI Powerhouse Qwen38-27B Runs Frontier Agents Locally

The AI landscape is buzzing with the arrival of Alibaba's Qwen3.8-27B, a 27-billion-parameter model that's making waves not for being a cloud-based behemoth, but for its impressive local capabilities. Released under an open-source Apache 2.0 license, this dense multimodal model offers developers downloadable weights and boasts native image and video understanding, a massive 262,144-token context window, and sophisticated support for coding and agentic workflows. What truly sets it apart is its remarkably compact hardware footprint, requiring as little as 28GB of GPU memory for an FP8 version, and a mere 17GB with 4-bit quantization, making it accessible for high-end consumer machines.

De velopers are particularly excited by Qwen3.8-27B's sweet spot between capability and size. Initial benchmarks from Alibaba showed strong performance on coding and office-work tasks, even rivaling proprietary models like Claude Opus in some areas. However, the real game-changer came with third-party evaluations. Artificial Analysis reported Qwen3.8-27B scoring 52 on its Intelligence Index, matching OpenAI's GPT-5.6 Luna on reasoning tasks, and a notable 51 on its Agentic Index, surpassing Claude Opus. This signifies a leap forward for local models, with capabilities previously thought exclusive to expensive, cloud-based systems now runnable on user-controlled hardware.

While the performance is groundbreaking, it's important to note that Qwen3.8-27B appears to achieve its quality partly through extensive reasoning. This can lead to longer processing times and higher token consumption, as seen in tests where generating a simple SVG took over 22,000 tokens. Experts suggest startin g with lower reasoning settings for typical local use to balance efficiency and output. Despite this, advancements in inference software like Multi-Token Prediction are showing promise in narrowing the performance gap. For enterprises, Qwen3.8-27B represents a significant opportunity to enhance privacy, security, and cost-efficiency by bringing powerful AI functionalities in-house, moving beyond mere benchmark scores to practical, localized task execution.

Fuente Original: https://venturebeat.com/technology/qwen3-8-27b-runs-frontier-class-coding-agents-and-reasoning-locally-no-cloud-api-required

Artículos relacionados de LaRebelión:

• AI Agents Fight Conflicting Instructions Lead to Sabotage
• AI Biotech 37000 Agents Design Drugs Confirmed by Merck
• AI Agents Coordinating in Real-Time Outperform Advanced Models
• AI Red Team Agents Launch Social Engineering Attacks
• Zero Trust AI Agents Fortifying Cloudflare Deployments

Artículo generado mediante LaRebelionBOT

Chinese AI Models Spur Corporate Safety Dilemma

The rapid emergence of advanced artificial intelligence models developed in China is forcing businesses globally to weigh significant cost savings against acute security and compliance risks. As open-source and low-cost proprietary models from Chinese labs proliferate, they present a compelling economic alternative to dominant Western offerings, sparking a sharp division in enterprise adoption strategies.

Imagen generada con IA

For technically literate decision-makers, the appeal of these alternatives lies primarily in cost efficiency and high performance. Many Chinese models match or closely trail Western benchmarks in coding, reasoning, and multimodal tasks while being offered at a fraction of the inference and training costs. This price disruption is particularly attractive for startups and resource-constrained engineering teams looking to integrate sophisticated AI capabilities without incurring prohibitive cloud computing expenses.

However, this financial upside comes with severe trade-offs. Integrating foreign-developed AI infrastructure introduces complex compliance hurdles, especially for enterprises operating under strict regulatory frameworks like GDPR or specialized national security guidelines. Concerns regarding data sovereignty are paramount. Corporations must evaluate whether routing proprietary source code, customer data, and internal telemetry through models developed under different geopolitical jurisdictions creates unacceptable exposure to state surveillance or data leakage.

Furthermore, supply chain security remains a major stumbling block. Relying on foreign model weights, APIs, or localized hosting introduces vectors for supply chain disruption and potential backdoors. Security teams struggle with verifying the provenance of open-source weights released by overseas labs, making it difficult to guarantee that models are entirely free of hidden vulnerabilities, biased safety filters, or unauthorized data logging mechanisms.

This dynamic is creating a distinct corporate divide. On one side are cost-driven firms willing to navigate the legal and architectural hurdles to maintain a competitive edge through cheaper AI integration. On the other side are risk-averse organizations, particularly in defense, finance, and critical infrastructure, that refuse to compromise on data provenance and security, opting instead for Western-hosted models despite the premium price tag. Ultimately, the trend highlights a broader industry tension where the democratization of AI capabilities via global open-source ecosystems collides head-on with escalating geopolitical fragmentation and security demands.

Artículos relacionados de LaRebelión:

• Chinese AI Models Gaming Safety Tests Alarmingly
• Chinese AI Models Cheaper Smarter Taking On The US
• Capital Ones AI Strategy Open Models Custom Data Power
• OpenAI Halts Astra AI Over Critical Cybersecurity Risks
• AI Agents Coordinating in Real-Time Outperform Advanced Models

---

Fuente Original: Bloomberg Law News

Artículo generado mediante AI.larebelion.