Keep up with tech in 5 minutes

A reverse-engineering teardown mapped csagent.sys's full detection surface: six kernel callback sources (process, thread, image, object, registry, and file), a firewall-grade WFP network engine capable of injecting TCP resets to kill C2 flows, an FLTMGR minifilter hooking 12 IRP majors, and the cspcm4 "pinned" broker module. The dissection traced verdicts to a single vtable call into g_DetectionEngine, a detection object loaded at runtime from cloud-pushed channel files rather than compiled into the driver, and documented seams including a user-mode-only trust boundary on Object/Registry callbacks, hash-or-signature resolution failures that skip full rule matching, and a 10,000-flow WFP tracking cap. The author tied this same swappable cloud-content architecture to the July 2024 CrowdStrike outage, attributing that crash to a bad channel-file object rather than a code defect in the sensor binary.

Tau Robotics has opened an invite-only San Francisco pilot using humanoid robots for vacuuming, surface cleaning, trash removal, and deep cleaning around appliances. The robots combine AI with live human supervision, with each unit assigned to one appointment at a time during the initial roll-out. The service is priced at $30 per hour and is currently limited to selected households.

QM is a multiplayer agent harness for companies. It remembers enough for people to work together without treating the whole company as one person with one permission set. The agent recognized personal, channel, group, team, and organization scopes, allowing people to collaborate through the same agent without becoming one undifferentiated user. QM is open-source and available for Slack and the web.