On July 8, Ukrainian President Zelensky, who was visiting Poland, and Polish Prime Minister Tusk signed a bilateral security agreement in Warsaw, the capital of Poland. The agreement clearly states that Poland will provide support to Ukraine in air defense, energy security and reconstruction. After signing the agreement, Tusk said that the agreement includes actual bilateral commitments, not "empty promises." Previously, the United States, Britain, France, Germany and other countries as well as the European Union signed similar agreements with Ukraine.

An artificial intelligence (AI) team at Stanford University apologized for plagiarizing a large language model (LLM) from a Chinese AI company, which became a trending topic on the Chinese social media platforms, where it sparked concern among netizens on Tuesday. We apologize to the authors of MiniCPM [the AI model developed by a Chinese company] for any inconvenience that we caused for not doing the full diligence to verify and peer review the novelty of this work, the multimodal AI model Llama3-V's developers wrote in a post on social platform X. The apology came after the team from Stanford University announced Llama3-V on May 29, claiming it had comparable performance to GPT4-V and other models with the capability to train for less than $500. According to media reports, the announcement published by one of the team members quickly received more than 300,000 views. However, some netizens from X found and listed evidence of how the Llama3-V project code was reformatted and similar to MiniCPM-Llama3-V 2.5, an LLM developed by a Chinese technology company, ModelBest, and Tsinghua University. Two team members, Aksh Garg and Siddharth Sharma, reposted a netizen's query and apologized on Monday, while claiming that their role was to promote the model on Medium and X (formerly Twitter), and that they had been unable to contact the member who wrote the code for the project. They looked at recent papers to validate the novelty of the work but had not been informed of or were aware of any of the work by Open Lab for Big Model Base, which was founded by the Natural Language Processing Lab at Tsinghua University and ModelBest, according to their responses. They noted that they have taken all references to Llama3-V down in respect to the original work. In response, Liu Zhiyuan, chief scientist at ModelBest, spoke out on the Chinese social media platform Zhihu, saying that the Llama3-V team failed to comply with open-source protocols for respecting and honoring the achievements of previous researchers, thus seriously undermining the cornerstone of open-source sharing. According to a screenshot leaked online, Li Dahai, CEO of ModelBest, also made a post on his WeChat moment, saying that the two models were verified to have highly similarity in terms of providing answers and even the same errors, and that some relevant data had not yet been released to the public. He said the team hopes that their work will receive more attention and recognition, but not in this way. He also called for an open, cooperative and trusting community environment. Director of the Stanford Artificial Intelligence Laboratory Christopher Manning also responded to Garg's explanation on Sunday, commenting "How not to own your mistakes!" on X. As the incident became a trending topic on Sina Weibo, Chinese netizens commented that academic research should be factual, but the incident also proves that the technology development in China is progressing. Global Times

The largest collection of stolen passwords ever has been leaked to a notorious crime marketplace, according to cybersecurity researchers at Cybernews. This leak, dubbed RockYou2024 by its original poster “ObamaCare,” holds a file containing nearly 10 billion unique plaintext passwords. Allegedly gathered from a series of data breaches and hacks accumulated over several years, the passwords were posted on July 4th and hailed as the most extensive collection of stolen and leaked credentials ever seen on the forum. “In its essence, the RockYou2024 leak is a compilation of real-world passwords used by individuals all over the world,” the researchers told Cybernews. “Revealing that many passwords for threat actors substantially heightens the risk of credential stuffing attacks.” Credential stuffing attacks are among the most common methods criminals, ransomware affiliates, and state-sponsored hackers use to access services and systems. Threat actors could exploit the RockYou2024 password collection to conduct brute-force attacks against any unprotected system and “gain unauthorized access to various online accounts used by individuals whose passwords are included in the dataset,” the research team said. This could affect online services, cameras and hardware This could affect various targets, from online services to internet-facing cameras and industrial hardware. “Moreover, combined with other leaked databases on hacker forums and marketplaces, which, for example, contain user email addresses and other credentials, RockYou2024 can contribute to a cascade of data breaches, financial frauds, and identity thefts,” the team concluded. However, despite the seriousness of the data leak, it is important to note that RockYou2024 is primarily a compilation of previous password leaks, estimated to contain entries from a total of 4,000 massive databases of stolen credentials, covering at least two decades. This new file notably includes an earlier credentials database known as RockYou2021, which featured 8.4 billion passwords. RockYou2024 added approximately 1.5 billion passwords to the collection, spanning from 2021 through 2024, which, though a massive figure, is only a fraction of the reported 9,948,575,739 passwords in the leak. Thus, users who have changed their passwords since 2021 may not have to panic about a potential breach of their information. That said, the research team at Cybernews stressed the importance of maintaining data security. In response to the leak, they recommend immediately changing the passwords for any accounts associated with the leaked credentials, ensuring each password is strong and unique and not reused across different platforms. Additionally, they advised enabling multi-factor authentication (MFA), which requires an extra form of verification beyond the password, wherever possible, to strengthen cyber security. Lastly, tech users should utilize password manager software, which securely generates and stores complex passwords, mitigating the risk of password reuse across multiple accounts.

South Korea's Minister of Health and Welfare Cho Kyu-hong said at a press conference on the 8th local time that after comprehensively considering the suggestions of frontline interns and the situation on the front line of medical care, the government decided that from that day on, all interns and residents who resigned would not be given administrative sanctions such as revoking their medical licenses. Cho Kyu-hong also said that for interns and residents who have returned to work and those who have resigned and are preparing to re-register for internship courses in September, the government will make special cases to try to minimize the internship gap and not affect the relevant doctors from obtaining specialist medical licenses. Cho Kyu-hong said that the government believes that in order to minimize the diagnosis and treatment gaps for critically ill and emergency patients and ensure the smooth training process of interns and residents, it is in the public interest, so it has made a decision not to punish interns and residents who resigned. It is hoped that major hospitals will complete the resignation processing of doctors who have not returned to work before July 15 and determine the scale of vacancies. Previously, large general hospitals in South Korea, such as Seoul National University Hospital, Yonsei University Severance Hospital, and Seoul Asan Medical Center, suspended or limited their medical services in an effort to cancel all penalties against interns and residents.

New York CNN — A record number of passengers are expected to pass through US airports this holiday travel week. You’d think this would be a great time to run an airline. You’d be wrong. Airlines face numerous problems, including higher costs, such as fuel, wages and interest rates. And problems at Boeing mean airlines have too few planes to expand routes to support a record numbers of flyers. Strong bookings can’t entirely offset that financial squeeze. The good news for passengers is they will be spared most of the problems hurting airlines’ bottom lines — at least in the near term. Airfares are driven far more by supply and demand, not their costs. But in the long run, the airlines’ difficulties could mean fewer airline routes, less passenger choice and ultimately a less pleasant flying experience. Profit squeeze Industry analysts expect airlines to report a drop of about $2 billion in profit, or 33%, when they report financial results for the April to June period this year. That would follow losses of nearly $800 million across the industry in the first quarter. Labor costs and jet fuel prices, the airlines’ two largest costs, are both sharply higher this year. Airline pilot unions just landed double-digit pay hikes to make up for years of stagnant wages; flight attendant unions now want comparable raises. Jet fuel prices are climbing because of higher demand in the summer. According to the International Air Transport Association’s jet fuel monitor, prices are up 1.4% in just the last week, and about 4% in the last month. Adding to the airlines’ problems is the crisis at Boeing, as well as the less-well-publicized problems with some of the jet engines on planes from rival Airbus. Since an Alaska Airlines Boeing 737 Max jet lost a door plug on a January 5 flight, leaving a gaping hole in the side of the plane 10 minutes after takeoff, the Federal Aviation Administration has limited how many jets Boeing can make over concerns about quality and safety. As a result, airlines have dramatically reduced plans to expand their fleets and replace older planes with more fuel efficient models. In some cases, airlines have asked pilots to take time off without pay, and carriers such as Southwest and United have announced pilot hiring freezes. In addition to the problems at Boeing, hundreds of the Airbus A220 and A320 family of jets globally have also been grounded for at least a month or more to deal with engine problems. Just about all the planes with those engines have been out of sevice for at least a few days to undergo examinations. And Airbus has also cut back the number of planes it expects to deliver to airlines this year because of supply chain problems. Problems for flyers For now, competition in the industry remains fierce: There are 6% more seats available this month compared to July of 2023, according to aviation analytics firm Cirium. And that’s helped to drive fares down — good news for passengers, but more bad news for airlines’ profits. Southwest announced in April that it would stop serving four airports to trim costs — Bellingham International Airport in Washington state, Cozumel International Airport in Mexico, Syracuse Hancock International Airport in New York and Houston’s George Bush Intercontinental Airport. Many more cities lost air service during the financial hard times of the pandemic. While upstart airlines are driving prices lower for travelers, those discount carriers might not survive long term. As the major carriers are making less money, many of the upstarts are flat-out losing money.