Oracle Puts $1 Billion Behind Its Partners and Lets Customers Spend More Cloud Credits in Its Marketplace

Oracle is setting aside $1 billion over the next four years for the systems integrators, software vendors, resellers and other firms that build on and sell its products. Oracle said the money is meant to help those partners win business from customers who want AI-powered products and services.

The company announced the commitment on Friday at Oracle AI World in Las Vegas. The money goes into new and expanded benefits in the Oracle PartnerNetwork (OPN), with planned spending on training and certification, development, testing and demonstration environments, cloud migration funding, go-to-market collaboration and selling through Oracle Marketplace. Oracle didn’t say how the $1 billion will be divided among those areas, and every benefit is subject to program terms and eligibility requirements.

“Our partners extend our sales reach, expand our delivery capacity, and bring their own innovation and investment to help customers address evolving business needs,” Mark Hura, president of Oracle Global Field Operations, said in the announcement.

Where the money is supposed to go

Oracle sorted the spending into four areas. Partners building their own products get dev/test environments, technical guidance and integration validation for applications, accelerators and AI agents that run on Oracle technology. On the sales side, Oracle lists joint sales and marketing work, demo environments, and funding and incentives for eligible opportunities. Delivery support covers migration resources and advisory help with implementations and database modernization. The last bucket is about what happens after a deployment goes live, and it includes a tool called Oracle AI Success Navigator.

“Our partners have different business models, capabilities, and growth ambitions, and our investment is designed to support that diversity,” said Leah Yomtovian, senior vice president of Partner, Sales, and Operations Strategy at Oracle.

The partner push comes two days after Oracle announced its AI Agent Studio for Industry Applications, a no-code and low-code environment for building industry-specific agents that Oracle plans to make available in the U.S. within 12 months.

What changes for software vendors

A companion announcement on Friday was aimed at independent software vendors selling through Oracle Marketplace. Oracle raised the share of a customer’s eligible Universal Credits commitment that can be spent on qualifying Marketplace purchases, so buyers can put cloud budget they’ve already committed toward partner products. A co-sell program called Marketplace Private Offers Co-Sell pairs eligible ISVs with Oracle sellers on qualified deals, and Multi-Party Private Offers let an ISV, an authorized reseller and a U.S. customer build a single customized transaction.

Multi-Party Private Offers are available now in the U.S., Spain and Brazil, with more European Union countries planned by the end of the year. Marketplace purchasing is also coming to India and Japan. Partner-built agents get a Marketplace route too: Oracle said Fusion Applications AI Agents give Fusion Cloud customers access to partner-built agent templates that Oracle has validated.

Stuart Wilson, IDC’s worldwide vice president for partnering ecosystems, alliances and channels, said in Oracle’s release that “partners increasingly want access to customers, seller collaboration, flexible commercial models, and the ability to align with enterprise procurement preferences.”

Fortinet, Pipefy and RackWare were among the partners Oracle quoted. “Oracle Marketplace opens the door to building joint solutions, rather than just executing joint transactions,” said Andre Agra, CFO and EVP of strategic alliances at Pipefy.

from WebProNews https://ift.tt/Swk9j3c

GMO Asks Tokyo to Use Its New Cyber Defense Powers After Intruders Hit Customers’ Trading Desktops

The part of Japan’s Active Cyber Defense law that lets police and the Self-Defense Forces get into attackers’ servers and disable them has been in effect for a little over three weeks, and GMO Internet already wants it used on its behalf. The Tokyo internet infrastructure company said Saturday, Tokyo time, that it had sent the government an urgent request to apply “Active Cyber Defense” against whoever broke into Onamae.com Desktop Cloud, a hosted Windows desktop service that NHK described as used by investors for foreign exchange trading.

GMO framed the case as a “first case of ‘activation'” for the law in its English disclosure to investors. Its argument rests on what happened after the break-in. Customers have reported trades in their brokerage and FX accounts that they didn’t make, and logins saved in trading tools such as MT4 and MT5 may have been lifted from the hosted machines, which GMO says puts the attack beyond ordinary encryption or data theft. “It is difficult for a private business operator alone, through defense and post-incident response alone, to eradicate the plundering of citizens’ assets by sophisticated cybercriminal groups operating across national borders,” the company wrote.

It started with one customer’s question

A customer inquiry on Monday started the investigation. By Tuesday GMO had found a malicious program installed in some customers’ server environments, and early Wednesday Tokyo time it began shutting down every plan. Its first notice put the number of servers that could be affected at 26,739. After customers reported unauthorized operations in their trading accounts, a second report on Thursday said passwords for trading tools and accounts used on those machines may have been viewed by a third party, and told users to change them from a different device.

The company now says its own system had a security problem and that customer information left its environment. Someone believed to be the attacker has demanded money, GMO said. If it isn’t paid, the sender threatened to keep manipulating customer accounts held at more than 70 securities and FX firms in Japan and abroad, to publish information about GMO and its customers, and to launch a ransomware attack. GMO won’t pay, and it has handed the threat messages to the police’s cybercrime unit.

The service is not coming back on its old infrastructure. Customers who still want a Windows desktop will be offered a replacement on an independent cloud platform, free for six months. Every current user will get a flat 5,000 yen, and GMO will cover realized trading losses from orders it confirms were unauthorized, though not market swings or lost profits. It said it can’t yet estimate the cost.

Tokyo says the law doesn’t take requests

Government officials pushed back the same day. There’s no mechanism for accepting requests from individual companies, an official at the National Cybersecurity Office told the Nikkei, while a senior official said Tokyo would support GMO’s defense but still had to analyze the attack before knowing whether it would lead to neutralization. Another senior official handling cyber policy told the paper the law covers serious cases such as national security threats and that the situation doesn’t yet call for using it. Another official told the Yomiuri Shimbun the request had no legal basis. The powers are meant to catch the signs of an attack and head off damage in advance, the paper said, and a second official said they mean little once the damage is done. As a rule, the government won’t say case by case whether it used them. Neutralization also generally needs prior approval from an independent oversight commission, and a separate provision letting the government collect communications data without company consent isn’t due to take effect until fall 2027, according to the Nikkei.

Keio University professor Motohiro Tsuchiya told the Nikkei the request doesn’t match the kind of neutralization the system was designed for. The aim is for the government to identify attackers and head off attacks itself, he said, not to respond to companies’ requests.

The breach adds to a run of Japanese incidents this fall that had the National Cybersecurity Office telling ministries to warn companies earlier this month. For Desktop Cloud customers, the next date to watch is Oct. 30, when GMO has promised to email details on the goodwill payment and the replacement service.

from WebProNews https://ift.tt/Z2FlGUE

A Brotli Fix Sat Unreleased Since February. Node.js, Python and Envoy Are Patching One at a Time

A memory-corruption bug in Google’s Brotli decoder has turned into a patching job for teams running Node.js, Bun, Envoy or Python services that read Brotli data. The CVE record for CVE-2026-111497 rates it 9.2, or critical, under CVSS 4.0 and says a crafted stream can let a remote, unauthenticated attacker corrupt memory, leak data, crash a process or potentially run code.

OpenAI’s Codex Security team found it. In a post on X on Friday, OpenAI said the bug turned up while agents red-teamed its frontier training environment, the same work it described when it explained why its models now train without live internet access. The company said the flaw cuts both ways: “an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl –compressed”) could be taken over by a malicious server.”

The repair was already sitting in the code

A Google engineer committed a change titled “Detect and report invalid stream earlier.” to the Brotli repository on Feb. 27. No release carried it until Wednesday, when Google published Brotli 1.0.10, 1.1.1 and 1.2.1, each listing the CVE. OpenAI said the root cause “was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli.”

Projects ship their own copies of the decoder, so each has to cut its own update. Node.js shipped fixes in its Wednesday security release, explaining that an invalid block switch was treated as a temporary need for more input instead of a format error, so the streaming decoder kept appending bytes to an eight-byte internal buffer. The fixed versions are 22.23.4, 24.22.1 and 26.12.1.

Imperva’s red team said it got code to run on the official Node.js 24.22.0 Linux arm64 image through the built-in fetch() and through Express 5 with body-parser 2, though it took multiple attempts in its setup. Version 24.22.1 rejected the same inputs, Imperva wrote. As of Saturday, no real-world attacks had been reported, and code execution hadn’t been shown on the other affected software, The Hacker News reported.

Python teams may not get a warning

The PyPI packages Brotli and brotlicffi compile the same decoder, and HTTP clients such as requests, httpx and aiohttp use them automatically whenever they’re installed, according to security firm Aikido, which counts 82.8 million monthly downloads for Brotli. The fixes are Brotli 1.2.1 and brotlicffi 1.2.1.0. Aikido said that on Friday the advisory databases still didn’t map the CVE to either package, so pip-audit, Dependabot and Safety wouldn’t flag old versions. Python advisory entries, including PYSEC-2026-4322, were added the same day.

Bun is patched in version 1.4.4. Envoy is exposed only where a Brotli decompressor is configured, and its advisory lists fixes in 1.40.0, 1.39.3, 1.38.6, 1.37.8 and 1.36.12. Istio picked up the Envoy fix in 1.29.9, 1.30.6 and 1.31.2.

Filtering at the edge only goes so far. Vercel added firewall rules but said they do not cover “responses your functions fetch from other servers,” in its bulletin. OpenAI’s Patch the Planet guidance tells teams that can’t patch yet to reject Brotli before any decoder touches it, and warns that “Removing br from Accept-Encoding alone does not stop a server from sending it.”

The same program figured in PHP2Shell, the PHP flaws that had web admins scrambling this week. Wired reported Saturday that researchers at Calif found those bugs partly with frontier AI tools through Patch the Planet.

Desktop software needs its own look. Electron-based apps can carry more than one copy of Brotli, the Patch the Planet page says, so admins need to check Chromium and Node.js separately, because “a fixed browser component does not establish that the embedded Node.js runtime is fixed.”

from WebProNews https://ift.tt/urqmPzk

Apple Working to Fix Safari Screen Usage On Outer Duo Display

Apple is trying to address issues with Safari’s interface and how websites display on the iPhone Duo’s outer screen, a problem Android foldable makers have dealt with for years.

In a blog post on the WebKit site, Apple’s Jen Simmons addresses the issue, while acknowledging the issue is widespread across foldables.

In Safari 27.1, web content does not currently extend to fill the space behind these controls. Just like on other platforms, Safari looks at the web page and extends its background color to fill the space.

We would like to give web designers and developers the ability to design and use that space in more creative ways. Perhaps you want to extend your header background across the full width of the display, for example. It might seem like there’s just one obvious way to make this possible, but really there are many possibilities.

We could use the HTML viewport meta tag with viewport-fit=”cover” to extend the webpage into that space, hoping developers also use the appropriate environment variables to scoot important content away from system controls. But as we research how today’s sites are built, we see a lot of projects that fail to inset all four edges correctly. We are investigating if there’s a better way to accomplish the same result — something more foolproof and perhaps easier for you to use. If you have ideas, we’d love to hear them. And stay tuned.

Foldables have been gaining in popularity for years, but one of the most common complaints about them is that many apps don’t take full advantage of the form factor. Some apps don’t fill the screen as much as on a slab phone, while other apps have some interface elements cut off on the smaller, passport-style outer screens, like the Duo and Samsung Galaxy Z Fold 8.

Many in the Android community hoped that Apple joining the foldable market would facilitate better app support for the form factor. Unlike Android, which can be fragmented across multiple brands, devices, and software customizations, Apple’s ecosystem is much more homogeneous. Apple also has far more control over how closely developers adhere to its interface design guidelines.

If Apple can help push developers to make their apps more compatible with foldable phones, that work should carry over to their Android counterparts and elevate the entire industry.

from WebProNews https://ift.tt/swL1ga4

Infosys Cuts Its Growth Forecast in the Same Quarter Its AI Revenue Jumped 29%

Infosys now expects revenue to grow only 1% to 2% in constant currency for the fiscal year that ends in March, down from the 1.5% to 3% range it gave in July. That July range was itself a cut from the 1.5% to 3.5% the company set in April. The latest reduction came in a quarter when AI work rose to 10.5% of revenue, up from 8.2% three months earlier.

The company reported September-quarter revenue of $5.145 billion on Friday, up 1.5% from a year earlier and 1.2% from the June quarter in constant currency. The operating margin was 21%, and Infosys kept its full-year margin target of 20% to 22%. Most analysts had expected India’s second-largest IT services provider to trim only the top of its range, to 1.5% to 2.5%, Reuters reported.

Bookings moved the other way. Large-deal contract value reached $5.2 billion, 62% of it net new, compared with $3.6 billion in the June quarter. The total included what CEO Salil Parekh called “a mega deal of over $2 billion,” though the company’s results release doesn’t name the client. “Our AI revenue was at 10.5% and grew 29% quarter-on-quarter,” Parekh said.

Tech and retail clients spent less

Results by industry were uneven. Revenue from Hi-Tech clients fell 17.3% from a year earlier in constant currency and Retail dropped 7.7%, while Life Sciences grew 32.5% and the energy and utilities group rose 7.3%, Fortune India reported, citing the company’s fact sheet. North America, which brings in 54.6% of revenue, slipped 1.5%. Europe grew 4.6%.

Reuters said clients increasingly tie fees to productivity gains from technology rather than hours worked, and that AI has pushed companies in India’s $315 billion IT industry to overhaul their business models and offer steep discounts. Tata Consultancy Services and HCLTech, which reported earlier this month, both met revenue estimates, and their shares rose as investors cheered higher AI revenue. On the buying side, WebProNews reported last month that many executives struggle to point to clear financial gains from their AI budgets.

“We delivered operating margins of 21.0% in Q2 amidst heightened volatility,” CFO Jayesh Sanghrajka said. Free cash flow was $928 million, down 15.7% from a year earlier, and the board declared an interim dividend of ₹26 a share, up 13%, with a record date of Nov. 3.

Infosys ended September with 332,542 employees, 4,480 more than in June. Voluntary attrition in IT services fell to 12.7% from 14.3% a year earlier.

from WebProNews https://ift.tt/QlCzeI9

WhatsApp Rolling Out Beta of Scheduled Messages for iOS

WhatsApp is finally rolling out a feature that many of its competitors have had for a long time, introducing a beta release of scheduled messages for iOS.

WhatsApp may be the most popular messaging platform on the planet, but it lags behind its competitors with some key features, most notably scheduled messages. The company is finally beginning to rectify that with a beta for iOS.

According to WABetaInfo, WhatsApp has already rolled out a beta of scheduled messages for Android.

In the post about the WhatsApp beta for Android 2.26.40.7 update, we announced a message scheduling feature. The feature lets users compose a message and choose when to send it. Users can access the schedule message screen by tapping and holding the send button. This action opens a bottom sheet where users can set the date and time for delivery. The update supports text messages, photos, videos, and links, and it is compatible with end-to-end encryption. Scheduled messages are available in a dedicated section in the chat info screen, where users can view and delete them before the app delivers them.

The outlet reports that WhatsApp is now expanding its beta of scheduled messages to iOS.

WhatsApp introduced the message scheduling feature on the Android app last week. Finally, WhatsApp is making it available on the iOS app as well. We discovered the news with the WhatsApp beta for iOS 26.42.10.19 update, which is available on TestFlight. With this update, WhatsApp is rolling out scheduled messages to some beta testers. This feature makes it easier for users to choose the exact moment to send a message, even when the device is offline.

WABetaInfo reports that scheduling a message is as simple as holding the send button.

Users can schedule a message from the chat interface. After typing the message into the chat composer, they need to tap and hold the send button. WhatsApp opens the schedule message screen with a date and time picker. Users can scroll through the page and tap the green button at the bottom of the screen to confirm. The button shows the exact delivery time before users schedule the message. After scheduling a message, WhatsApp shows a confirmation in the chat, but it is only visible to the user who scheduled it.

The beta is good news for WhatsApp users who waited a long time for such a basic feature.

from WebProNews https://ift.tt/SYv0jtg

Microsoft Begins Copilot Code Rollout

Microsoft has begun its Copilot Code rollout, giving users the ability to develop software using natural language, and taking aim at similar tools from Anthropic and OpenAI.

AI coding tools have revolutionized software development. The uses range from full vibe coding to helping experienced developers work faster. Anthropic’s Claude Code and OpenAI’s Codex have already carved out loyal followings, and Microsoft is now getting in on the action with Copilot Code.

Microsoft’s Marc Wautier disclosed the news in a company blog.

Copilot Code is a new AI-powered coding experience in Microsoft Copilot that helps people turn ideas into working software. It starts with the work people already do, helps them build solutions through natural language, and connects to professional development workflows as projects grow.

Start with the outcome. Describe the goal in natural language. Copilot then asks clarifying questions and, powered by Work IQ, draws from emails, meetings, documents, chats, and data from connected sources to build out requirements , even if they are not all in the initial prompt.

• Build from work context. Copilot asks clarifying questions, then builds a live control center that brings together data, assumptions, and business context into a working application.
• Refine through conversation. As priorities change, update the application through conversation or direct edits. Add new visualizations, business logic, and data sources without starting over.
• Stay in preview or open the code. Work entirely from the live preview without ever seeing code, or open it to edit directly, work with local files and tools, or use the terminal to customize the solution further.
• Run locally or in the cloud. Keep the project on a local device for personal productivity and refresh it as needed or publish it to a Microsoft-managed cloud environment so it can be shared with others.

The result isn’t a static file that has to be rebuilt every time the inputs change. It’s a working application, and one that can be shared.

Wautier says the company has worked to ensure any apps built with Copilot Code are easy to share and deploy.

What you build in Copilot Code often starts as a personal tool: a calculator to size the value of a deal, a widget that surfaces the numbers you check every morning or an app that turns a monthly process into a few clicks. When it’s ready for a wider audience, Copilot makes it simple to share across your organization.

When an app is meant to be shared, Copilot builds it on Copilot Managed Runtime, so publishing requires no separate deployment work. Anyone in the organization with permission to the underlying data can use the app. The application inherits the governance, security, and management controls your organization has already configured. Teams get the benefit of custom-built solutions without adding a separate system for administrators to manage.

Copilot Code will likely prove to be a valuable resource for IT departments, execs, marketing departments, and other professionals heavily invested in Microsoft’s ecosystem.

from WebProNews https://ift.tt/RwqeOYj