❌

Reading view

220 Million Traveler Records Exposed In Vietnam-Linked APIS Leak

A misconfigured Advance Passenger Information System (APIS) database linked to Vietnam exposed more than 220 million passenger and crew travel records spanning 2017 to 2026, including names, passport numbers, nationalities, flight details, seat assignments, and baggage references. Researchers said the database was reachable through a chain of security mistakes and default credentials. It was later secured after the disclosure, but it's unclear whether the data had already been copied or abused. BleepingComputer reports: Kinryu Labs discovered the Elasticsearch cluster on June 3 while surveying exposed databases as part of research into ransomware activity. The cluster, named 'pax-info', contained 29 indices and roughly 107 GB of data. Its two principal indices held 210,318,069 passenger records and 10,465,631 crew records, for a combined 220,783,700 entries. According to Kinryu Labs, the cluster was hosted in Viettel-assigned IP space in Hanoi. BleepingComputer could not confirm which Vietnamese organization operated the system. The exposed information included passengers' and crew members' names, dates of birth, sex, nationalities, passport or travel-document numbers, document expiration dates, and issuing countries. Associated travel data included flight numbers and dates, airlines, departure, destination and transit airports, seat assignments, baggage references, and scheduled, estimated, and actual flight times, information typically carried by APIS and related airline systems. Sample records reviewed by BleepingComputer included travelers of Korean, Chinese, Canadian, and New Zealand nationality, among others. While the researchers could not provide a complete breakdown by nationality, the data covered numerous international airlines across Asia-Pacific, Europe, and the Middle East. As a result, the exposed records could relate to people from virtually anywhere who visited or transited through Vietnam over the nine-year period. Kinryu Labs expects to publish additional details on its blog later this week.

Read more of this story at Slashdot.

  •  

How I turned a simple Notary business into a national RON System with a Custom CRM - Funny Story

I work for a law firm, and I originally became a notary simply to provide notary services for the firm. At some point, I had the idea of allowing walk-ins to come in for notary services. My thinking was simple: people would come into the office, see the firm, meet the staff, and become familiar with who we are. Essentially, the notary service became a form of free marketing.

I created a Google Maps listing for the notary service, and, lo and behold, people started showing up. A lot of people.

As the volume increased, keeping up with the required notary logbook and recordkeeping became difficult. Since I have a hard time doing anything halfway, and I also happen to be a software engineer, I decided to build my own solution.

The first version was very simple. I created an electronic sign-in system and placed a QR code in the office. Walk-in clients could scan the code, enter their information, and the data would automatically be uploaded and stored in Dropbox. That became my first digital notary logbook.

Then another idea hit me: why stop at a digital logbook? Why not build an entire CRM around it and use the information to improve client communication and marketing?

I personally hate spam, so I did not want to bombard people with constant promotional emails. Instead, I created a Birthday and Holiday Registry. Clients could receive a simple birthday greeting and occasional holiday message. The purpose was not aggressive advertising. It was simply a friendly reminder that we exist and that they had used our services before. I also added an OpenAI layer that sent each holiday and birthday email custom made. Based on their name and date. Example... The email would say something relating to history or notary on that day.

That worked surprisingly well.

As the business continued to grow, I started receiving more and more walk-ins. Other notaries also became interested in joining the platform and operating under my business name in something similar to a franchise or affiliated network.

That pushed me to expand the software even further.

I began adding more advanced functionality, including additional security layers, enhanced electronic recordkeeping, multilingual support, notary training and quizzes for multiple states, administrative tools, client management features, and more sophisticated compliance functions.

I also developed an advanced remote notary session tracking and request submission system, allowing remote notarization requests to be submitted, assigned, tracked, and managed through the same platform.

What originally started as a simple QR-code sign-in sheet for walk-in notary clients gradually evolved into a complete notary CRM's, recordkeeping, marketing, training, and remote session management platform.

I also built an iOS app that's linked to the CRM (was a nightmare to do). Had to figure out how PHP / Firebase bridge works. So now my iOS app is directly linked to the CRM.

submitted by /u/LynxGeekNYC
[link] [comments]
  •  

A B2B prospect replies on WhatsApp or SMS. What happens to their email sequence?

I'm the founder of PitchWhip, so I have a commercial interest in this workflow. I'm trying to understand how teams handle agreed B2B follow-ups across these channels today.

Say a prospect agrees on a call that you'll send some information by WhatsApp or SMS, then replies there and changes the next step. The email sequence is still running and another rep opens the CRM later.

When that happens, how does your team pause any now-irrelevant email follow-up and record the next action and owner?

Do you handle that through a shared inbox, native CRM logging or manual notes? I'd be interested in a real example of whether connecting these channels has helped your team follow through on a deal, or whether a note and a reminder do the job just as well.

submitted by /u/PitchWhipFounder
[link] [comments]
  •  

NASA and IBM Open Source Lunar Mapping Tools

NASA and IBM have released an open-source AI model trained on a large collection of lunar observations to help scientists analyze the Moon at scale. "The NASA-IBM Lunar Foundation Model gives scientists a foundation to explore the Moon at scale, connecting observations across instruments, revealing patterns that are difficult to see in isolation, and providing an open platform the global research community can build on," said IBM director of research for Europe, Juan Bernabe-Moreno. The Register reports: It is claimed as the first AI model to integrate observations captured in a range of modalities (data formats), and at different viewing angles and spatial scales. Instead of sifting through maps and images by hand or using low resolution machine learning models, scientists can use this to analyze geographic features, the pair say. In particular, NASA and IBM hope researchers will be able to discover previously unidentified lunar ice deposits, analyze volcanic features called Irregular Mare Patches, and identify and classify craters. Lunar ice indicates the presence of water and oxygen, which may be useful for future manned missions. It is found in permanently shadowed regions, which are among the most difficult areas to observe. The NASA-IBM model combines multimodal and multi-resolution observations to better predict where ice may be present on the lunar surface. Alongside the model, IBM and NASA scientists compiled an open-source lunar dataset from over 30 spatially-aligned layers, using data from nine instruments across four missions. It combines tens of thousands of images and maps showing various geophysical properties of the lunar surface.

Read more of this story at Slashdot.

  •  

What If Your Business Report Told You What to Do Next?

Not a marketing - only idea
TL;DR: A concept for a reporting tool that connects business data and delivers recurring, decision-ready briefs. Instead of showing only charts, it explains what changed, why it may have changed, what evidence supports the conclusion, and what action to take next. Users can ask follow-up questions, while uncertainty and alternative explanations remain visible. The idea still needs validation with SaaS teams, agencies, and e-commerce operators.

Businesses rarely lack data. A founder can open analytics, payments, advertising, and support tools and still not know what deserves attention first.

I have been thinking about a reporting tool built around that gap. It would connect to a company's existing sources and produce a report every day, week, or month. Instead of stopping at charts, it would explain what changed, suggest why, recommend concrete actions, and accept follow-up questions.

Every important conclusion would show its source, metric, comparison period, and confidence. The report would separate measured facts from interpretations, missing information, and alternative explanations. Recommendations would include their expected effect, cost, downside, and a safe way to test them.

The same engine could support different report structures for SaaS teams, agencies, and e-commerce operators. I would still begin with one group, probably small SaaS teams, rather than build a shallow tool for everyone.

For SaaS, that could mean connecting revenue, activation, product usage, and support. Agency reports might explain campaign performance and delivery risks. E-commerce reports could relate advertising, orders, inventory, fulfilment, returns, and repeat purchases.

AI could help connect patterns and answer questions, but it would remain an implementation detail. The promise is better decisions, not an “AI analyst.”

The system should recommend actions without executing consequential ones automatically. Its value would depend on whether people repeatedly discover something useful and make better decisions. Otherwise, it is only a prettier dashboard.

If you are a BI practitioner or run a SaaS company, agency, or e-commerce business, I would like to know: what decision did your dashboards fail to help you make recently?

submitted by /u/ssain1970
[link] [comments]
  •  

California's Gig Drivers Just Secured Collective Bargaining Power with Newly Certified Union

A union representing Uber and Lyft drivers was just certified by California's Public Employment Relations Board, officially recognizing them as the drivers' bargaining organization. The Sacramento Bee reports that this new bargaining structure : The move will allow the California Gig Workers Union to help drivers negotiate issues affecting working conditions and benefits. It comes as at least 30% of active drivers expressed support of the union... [California] Assembly Bill 1340 helped bring the union to fruition by allowing the independent contractor drivers to engage in collective bargaining. "The next step for the union is to negotiate a contract with Uber and Lyft that meets drivers' demands," reports the Los Angeles Times, "including health insurance, support for high gas prices and more transparency around pay: California is the third state to allow ride-hailing drivers to unionize, following Washington in 2022 and Massachusetts in 2024... The California Gig Workers Union was formed with the support of the Service Employees International Union... "Gig drivers shouldn't have to face the future alone," said SEIU 521 official Riko Mendez in a statement. "As autonomous vehicles rapidly expand, having a union gives the drivers the power to negotiate for fair pay and meaningful say in how new technology shapes their work and our communities' futures."

Read more of this story at Slashdot.

  •  

Flock Worker Calls Police On Reporter - For Filming Them in Public

"This is what happened when we tried to record Flock installing a new camera on public roads," says Emmy award-winning reporter Brendan Keefe in a new video for InvestigateTV. In an accompanying article, InvestigateTV says their reporter "parked on the public street at a distance, donned a yellow safety vest and a hat emblazoned with the logo of InvestigateTV's Atlanta affiliate where he also works, displayed a press placard on his dashboard and then pulled out a camera to record the installation.... The installer saw him and immediately packed up his equipment and drove away, so Keefe also returned to his car and followed several cars behind, hoping to document the next stop." And then Flock's technician called 911. When asked "What's the address of your emergency" Flock's technician answered "I'm getting followed — harassed, pretty much. Taking videos and pictures!" Flock's worker said they'd been harassed multiple times that day, then stated incorrectly that "I know for a fact" that that was what the reporter wanted to do too. InvestigateTV reports that as a result of the Flock technician's call, "Three police cars ended up in the national investigative reporter's rearview mirror that Wednesday afternoon." Keefe told one of the three police officers who pulled him over, "There is an irony here that they're setting up these cameras that track all of our movements, that follow everywhere we go. But when I try to get video in public of him in public setting up a camera, he's afraid I'm following him?" InvestigateTV also reports that "About 17 minutes after the stop began, the responding officers returned to their vehicles and Keefe was allowed to drive away." But the call that brought three police cars to their reporter "was not the first time this summer someone working for Flock Safety summoned police over a camera. " About 17 minutes after the stop began, the responding officers returned to their vehicles and Keefe was allowed to drive away... [But the stop] was not the first time this summer someone working for Flock Safety summoned police over a camera. On June 5, police in Smyrna, Georgia, responded to a 911 call from a Flock employee after a group of YouTube creators began filming outside the company's distribution center located in the Atlanta suburb... The caller claimed the group filming had "been driving around the perimeter, basically harassing everyone" working at the facility. "Three young white males, probably mid-twenties, I'm not sure if they're armed. And they're carrying filming equipment as well," the caller said. Three times during the call he raised the possibility the people filming might be armed, though, when asked, he told the dispatcher he had not seen any weapons... [One of the protesters later told the caller "I think it's interesting, when you guys have this happen, you call the police and make us get stopped. But then you do it and it's okay?"] No one was charged in the YouTuber group, though the individuals were ordered to leave the premises under an official trespass warning. Keefe's video report ends with one final irony. "Every day on my way to work, I'm captured again by those same new shiny Flock cameras. We tried watching the watchers. Turns outs, it's a lot easier for them to watch us." Flock responded to the report by claiming "We do not object to members of the public or press photographing Flock cameras or personnel in public." But they added that employees working "in the field" must "prioritize their safety" and "may contact law enforcement when they believe they are being threatened, harassed, followed, or otherwise face a safety concern."

Read more of this story at Slashdot.

  •  

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending over a million scam emails between August 3 and 5, 2026, by masquerading as chief executive officers

  •  

Malicious OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers in May

A swarm of OpenAI agents launched a "major malicious attack" against RubyGems last May, according to a new report. That coordinated attack hit Ruby's package manager "with hundreds of junk gems, prompting the maintainers to suspend new user sign-ups for about four days," writes The Hacker News, citing a senior product manager for software supply chain security at Mend.io: The latest findings, which were first reported by The Wall Street Journal, indicate these events were propelled by a cluster of OpenAI agents, with the earliest package uploaded to RubyGems on May 5, 2026, before more than 2,000 packages were submitted between May 11 and 12, 2026. These efforts were followed by the agents publishing five more packages between May 26 and 27, 2026, and another 83 packages on June 18, 2026... [T]he packages were authored using a large language model (LLM) and hundreds of the packages that were pushed to RubyGems had "oai" in their name. Fifteen of the packages listed "oai" as their author, while another had "[email protected]" as the contact email address... "The swarm behaves extremely similarly to the German-wiki agents we previously found," the researchers said, referencing another May 2026 incident... "The June agents were accessing 49 of the same files as the wiki agents..." "The process of building documentation for a gem involves evaluating a user-specified '.yardopts' file, which allows linking to Ruby scripts intended to help with this process," the researchers explained. "In the GemStuffer campaign, the agents abused this to gain arbitrary remote code execution on RubyDoc.info's servers." One of the gems, "zzsouthrunner" (which again matches the "ZZ" naming scheme the agents adopted in both the wiki and Hugging Face incidents) has been found to leave the following explicit comment at the top of "data/script.rb": # malicious crawler/exfil for Southwark Jan 2026 docs via rubydoc.info worker... The entire exploitation chain can be summed up as follows — Submit a malicious package to RubyGems — Trigger a documentation request, so that RubyDoc.info will build the package — Use the build script to run code on RubyDoc.info and scrape target websites — Exfiltrate the data off RubyDoc.info's servers by publishing another gem back to the RubyGems package registry, which is publicly viewable Additionally, the OpenAI agents have been found attempting to steal other users' API keys after gaining remote code execution capabilities on the build environment, while clearly being aware that what they were doing is unauthorized breaking and entering into real systems. This is evidenced by the names given to the files (e.g., hack.rb, evil.rb, inject.rb, exploit.rb, and ssrf.rb), the packages themselves (e.g., pwnp999, exfiltestwand3, hacksvn1778554764, and lambproxyhackabcxyz), and the comments left in the source code (e.g., "# malicious probe," "#hack," "# malicious test," and "# malicious crawler/exfil"). In some cases, however, the rogue agents attempted to go under the radar, leaving comments to conceal the malicious payload in the next release version of the packages. "# disable evil in next version and bump version," reads a comment left within the "data/evil.rb" file in the yardxabc889 gem. Troublingly, the agents also attempted to exploit a CDN caching bug (CVSS score: 7.3, no CVE) on May 12, 2026, that was only patched by RubyGems in July 2026... "If you signed in to rubygems.org with a gem client older than v3.2.0 (or otherwise via a legacy key), your key could have been exposed," RubyGems noted in an advisory. "Currently, 18% of sign-ins through gem sign-in come from an affected version, and for the first several years of this bug, before we changed the client's sign-in path in December 2020, it was every gem client." Other actions by OpenAI's agents cited in the article: "Agents bypassed RubyGems' email confirmation system to get working API keys without having to verify their email addresses in order to register a large number of accounts using disposable email addresses." "Agents attempted to use RubyGems' webhook system to stage data in the form of encoded URLs." "Agents used a cluster of 83 gems published to RubyGems over a 3-hour window on June 18, 2026, to experiment with different methods of accessing the U.S. Securities and Exchange Commission county.json dataset."

Read more of this story at Slashdot.

  •  

A contact changes employers. Do you update their CRM record or create another one?

I build PitchWhip and I’m trying to understand how sales teams handle this before calling someone at their new company.

Say you spoke to a buyer at Company A about a project and agreed to follow up. They then move to Company B. You want to keep the relationship history, but the old project, pricing discussion and callback might have nothing to do with their new job.

Updating the existing contact keeps everything together, but risks making the old company’s context look current. Creating another contact separates the jobs but splits the history.

What do you actually do in your CRM? And when you open the record before that first call at Company B, what should carry over and what should stay attached to Company A?

submitted by /u/PitchWhipFounder
[link] [comments]
  •  

Sam Bankman-Fried, Former Crypto Billionaire, Appeals His Conviction To the US Supreme Court

America's highest court heard Sam Bankman-Fried's request for a new trial on Thursday, CNN reports. But they add that "the former crypto mogul who was convicted of defrauding investors by secretly diverting billions of dollars of their money" also asked America's high court "to throw out a court order requiring him to pay $11 billion as part of his sentence." Bankman-Fried was sentenced to 25 years in prison in 2024 after prosecutors said he directed billions of dollars from the crypto exchange FTX to a hedge fund he controlled called Alameda Research, where the funds were used for risky investments, political donations and his own personal benefit. The Supreme Court appeal, which was reviewed by CNN, raises a technical question about evidence that was submitted at his trial, and whether Bankman-Fried should have been permitted to demonstrate that his investments were ultimately sound and would have covered any losses by FTX customers. He also argues that the $11 billion forfeiture violates the 8th Amendment's prohibition on excessive fines. "Where the government pursues a theory of fraud under which it doesn't matter whether any victims lost money, introducing evidence suggesting that people actually lost money is distracting and prejudicial," veteran Supreme Court attorney Jeffrey Fisher told CNN. "All the more so where the truth is the victims did not lose money, and the defendant is unable to make that clear." The 2nd US Circuit Court of Appeals rejected the arguments earlier this year.

Read more of this story at Slashdot.

  •  

Anthropic CEO Dario Amodei Calls For AI Slowdown

An anonymous reader quotes a report from The New York Times: The chief executive of Anthropic called for a global slowdown of artificial intelligence development in a 3,800-word essay on Saturday, just days after one of the company's employees quit over concerns about the safety of the technology. Dario Amodei, who co-founded Anthropic to focus on securely and carefully building A.I., wrote that while he believed the technology could bring many benefits, it was advancing at too quick a pace for researchers to continue safely. "Over the last few months, I have become convinced that fully addressing the risks requires even more prudence -- not just investing in risk prevention, but pacing the rate of capabilities advancement so that risk prevention has time to keep up," Mr. Amodei said. "We must slow the pace at which we improve the capabilities of A.I. models. Progress will still seem fast, and we must make wise use of the time we gain." [...] "Left unchecked, it could outrun our ability to understand and control these systems, and so must be pursued very carefully, if at all," Mr. Amodei said. [...] In his essay on Saturday, Mr. Amodei suggested actions that the industry might take to slow down the pace of development. Mr. Amodei said all A.I. labs could agree to third-party technology assessments from "embedded evaluators," or outside specialists who can verify best safety practices across companies. He also suggested that countries with democratic governance systems coordinate to create safety standards, which could take the form of regulatory action. He added that it would probably require a global effort working with other nations, including authoritarian ones, to properly coordinate a slowdown. Mr. Amodei stressed in his essay that he still finds A.I. capable of bringing "incredible benefits" to humanity, including potentially curing diseases and accelerating economic growth. But even so, Mr. Amodei said the risks of A.I. were too great to not proceed with extreme caution. "The measures I propose to advance the frontier at a safe pace will not be easy," Mr. Amodei wrote. "But I believe we owe it to humanity to try." Amodei's essay comes just hours after Bloomberg reported that Sam Altman told OpenAI employees the company is open to slowing the pace of AI development amid similar concerns.

Read more of this story at Slashdot.

  •  

Automattic's Matt Mullenweg Claims He's Back 'In Control'

Less than 48 hours after Automattic's board placed Matt Mullenweg on leave, Mullenweg told employees he was back "in control" of the company and that the board was again in agreement. 404 Media cited Slack screenshots late Thursday evening where Mullenweg posted "Don't call it a comeback" and linked to LL Cool J's music video for "Mama Said Knock You Out." "Mullenweg's Slack profile picture currently shows him wearing a pirate hat and eyepatch," the report notes. From the report: "Happy to announce the board is back in agreement, and I'm in control of Automattic," Mullenweg wrote in the company-wide Announcements channel on Slack. "A lot happened in the past 48 hours that we need to sort out, and I hope much of it was a misunderstanding, because I have huge respect and regard for those involved." Mark Davies, Automattic's CFO who was set to act as interim CEO according to a statement from Automattic, had his Slack account deactivated as of at least Friday, sources told 404 Media and TechCrunch similarly reported. Davies, Mullenweg, and Automattic did not respond to 404 Media's requests for comment for this story. Techcrunch reported that Mullenweg told them a blog post is forthcoming. On Friday morning, Mullenweg published a blog post on his personal website, titled "Major Life Announcement." In it he announced he's buying a tugboat. "Anybody who's founded a company and had to find good stewards knows that no one will love a thing quite like the original owner, but sometimes you can find the perfect person to carry the torch," he wrote in the blog. He did not address the confusion surrounding his status at Automattic. The back-and-forth follows years of legal fights, layoffs, employee departures, and controversy surrounding Mullenweg's leadership.

Read more of this story at Slashdot.

  •  

Built our own CRM — looking for beta testers before we officially hit the ground running

Hey everyone!

We’ve been building Cenvi.events, a CRM designed specifically with venues, restaurants, caterers, private chefs, and other event-based businesses in mind.
Before we really hit the ground running, I’d love to get the platform into the hands of some beta testers who can actually use it and give us honest feedback — what you like, what you don’t like, what’s missing, and what would make it more useful in your day-to-day workflow.
Cenvi currently helps businesses manage things like leads, customers, bookings, communication, contracts, and the overall sales/event process in one place.
But our bigger vision goes beyond just being a CRM. Down the road, Cenvi.events will also have a marketplace, giving businesses the opportunity to showcase and promote their venue, restaurant, catering company, services, etc. to people actively looking to book events.
We’re still early, so this is exactly when we want feedback. We’d rather build around what businesses actually need than assume we know everything.
If you own/manage a venue, restaurant, catering business, event company, or regularly work with a CRM and would be interested in testing it out, send me a DM!

submitted by /u/Altruistic_Lack8362
[link] [comments]
  •  

LG Responds to TV Spying Allegations

LG is pushing back against reports that its smart TVs are "spying" on users, saying wake-word detection happens locally and that features such as Automatic Content Recognition, voice recognition, and interest-based ads are optional. But critics note that researchers found TVs keeping logs of ambient conversations, and LG's response "did not address broader concerns about how much data it collects, who it shares it with, the potential for bad actors to exploit its features, or the misleading way in which its privacy options are presented," reports The Verge. Here's an excerpt from LG's statement: Some recent media coverage may have contributed to misconceptions about how LG smart TVs work. As an industry leader, LG believes we have a responsibility to provide customers with clear and accurate information about how our smart TVs operate and the privacy controls available to them. We would like to clarify how our smart TVs operate and explain our approach to user privacy. LG smart TVs do not continuously record or transmit users' conversations. Speech-to-text processing begins only if a user activates a voice interaction through a supported wake-word feature or by pressing the voice (or AI) button on the remote control. Audio used for wake-word detection is processed locally on the TV and, if no wake word is detected, audio is not converted to text, stored, or transmitted. Voice-recognition results and related technical logs may be generated as part of processing a voice command. These records are associated with specific voice interactions and do not indicate continuous recording of conversations occurring outside an active voice recognition session. Speech-recognition results may be used to support voice-related features but are not uploaded later when the TV is offline or when connectivity is restored. Features such as Automatic Content Recognition (ACR), voice recognition, and interest-based advertising are optional. These features are not enabled by default. Users can choose to enable these features and can manage or withdraw consent through TV settings. ACR uses audio fingerprinting technology using the TV's internal audio processor (not a speaker) to identify content and does not collect screenshots, screen recordings, video recordings, voice recordings, or other audio recordings from the TV. Where ACR is available and enabled, ACR-related information may be used for audience segmentation and viewing or audience trend analysis. Interest-based advertising and cross-device advertising require separate user consent through the applicable advertising-related agreements. Protecting user privacy is a fundamental principle in the design and operation of LG products and services. The statement goes on to "provide additional details on how LG smart TV features work, how information may be processed, what choices users have, and how LG continues to strengthen privacy, transparency, and security."

Read more of this story at Slashdot.

  •  

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. Details of the vulnerabilities are as follows - CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization

  •  

Rescheduling an agreed callback: update the task or create a new one?

I’m building PitchWhip and looking at how callback changes should appear in a CRM.

Say a prospect asks for a call on Tuesday, then messages before Tuesday to move it to Thursday. No call has happened in between.

My instinct is to keep one open task, update it to Thursday, and retain the original date and the change in its history. Leaving both tasks open gives the rep two reminders. Closing Tuesday’s task and creating another might keep the history clearer, but could also muddy completion reporting.

If a call actually happened on Tuesday and ended with ‘try me Thursday’, I’d record that attempt and create a separate follow-up.

Does that match how your team works? Are there cases where moving the existing task causes problems with reporting, reassignment or accountability? Interested in which CRM you use and what breaks in practice.

submitted by /u/PitchWhipFounder
[link] [comments]
  •  

CRM for schools

wibecoded CRM for schools where AI do all the work - chat with clients, make appointments, send reminders, move funnel, process payments, enroll clients, billing. Did this for my friends business as a pet project. Currently used by football academy and arts school. I'm now thinking to sell it as a product

submitted by /u/TransportationFree91
[link] [comments]
  •  

Scientists Create a New Form of Ice At 2,357 Degrees Celsius

Longtime Slashdot reader fahrbot-bot shares a report from ScienceAlert: Scientists have now demonstrated one of the weirdest forms of ice yet -- under preposterous pressures up to 2.3 million atmospheres, and tremendous temperatures up to 2,630 kelvins (2,357 degrees Celsius, or 4,274 degrees Fahrenheit). [...] In their new experiments, a team led by physicist Alexis Forestier of the French Alternative Energies and Atomic Energy Commission subjected tiny samples of water to the sorts of extreme conditions expected in the interiors of ice giant planets. They squeezed the samples between the tips of diamonds to pressures as high as 230 gigapascals, while using lasers to heat them to thousands of degrees. That's 2.3 million times Earth's atmospheric pressure at sea level â" the pressure at the center of Earth, for context, is around 360 gigapascals. Then, using an extremely narrow beam of synchrotron X-rays, they probed for changes in the crystal structure of the ice. What emerged was a configuration predicted theoretically but never unambiguously observed in experiments: hexagonal close-packed, or hcp, ice. As the hcp crystal was heated, its expansion also showed a signature of superionic behavior, suggesting it entered the superionic state at around 1,700 kelvins. [Superionic ice is thought to exist deep inside Uranus and Neptune, where its unusual properties may play a role in generating the planets' equally unusual magnetic fields.] The findings have been published in Physical Review Letters.

Read more of this story at Slashdot.

  •  

Priced four all-in-one platforms with usage fees included - the plan price is the smallest part of the bill

Most CRM comparison threads here end up arguing about plan prices, and for a couple of these platforms the plan price is the smallest part of the bill. I got tired of guessing, so I read the pricing pages and help centers for GoHighLevel, HubSpot, ClickFunnels and Kajabi and wrote down what each one actually costs.

Plan prices, the easy part:

GoHighLevel - $97/mo Starter, $297/mo Unlimited, $497/mo Agency Pro.

HubSpot - Marketing Hub Starter $20/mo per seat, capped at 1,000 contacts. Professional is $800/mo for 3 seats, plus a mandatory one-time $3,000 onboarding fee that isn't shown next to the price.

ClickFunnels - $97/mo monthly, $81/mo if you commit annually.

Kajabi - $179/mo Basic, $249/mo Growth, $499/mo Pro.

The part that isn't on any pricing page: GHL meters phone numbers, SMS, calls and email on top of the plan, and those rates only live in the help center. One modest client (1 number, 2,000 texts, 500 call minutes, 10k emails) adds roughly $30/mo. A2P registration to text US numbers is about $23 one time plus a small monthly fee, which is why a first bill usually looks worse than every bill after it.

HubSpot doesn't meter usage that way, but it's seat-priced, and the Starter to Professional jump is the real wall. $800/mo plus $3k onboarding lands exactly when you outgrow one seat or 1,000 contacts.

Worth saying for this sub specifically: ClickFunnels and Kajabi aren't really CRMs. Neither does sub-accounts or proper contact management, so if that's what you're shopping for they're not in the same category, they just get named in the same breath a lot.

Where I landed: if you're managing separate client accounts it's a GHL vs HubSpot question, and it comes down to seat count versus how much SMS and calling you actually do. If you're a single business with a real contact database and no heavy texting, GHL's metering mostly doesn't apply to you and the comparison looks completely different.

If your real bill on any of these looks different from this, I'd rather hear it than keep quoting numbers off a pricing page.

submitted by /u/ElectronicIron4588
[link] [comments]
  •  
❌