Figure AI advances humanoid robots to commercial trials, plans large-scale deployment 

Figure AI has unveiled its Helix visual-language-action (VLA) model, showcasing two humanoid robots collaboratively performing household tasks, such as organizing groceries. Upon receiving a single prompt from a human, the robots independently assess the scene, identify objects, and determine appropriate storage locations in the kitchen. Notably, the robots operate autonomously but coordinate seamlessly when necessary, exemplifying non-verbal, synchronized interactions. Figure announced in late 2024 that its robots are moving development and trials to commercial use. The company is now working to certify its robot’s battery, functional safety control system, and electrical system to meet industrial safety standards. Looking ahead, Figure AI has ambitious plans to ship 100,000 humanoid robots over the next four years and is reportedly seeking to raise $1.5 billion to support its expansion.

Google launches Gemini 2.0, expands AI integration across services

Google has released Gemini 2.0, its most advanced AI model to date, featuring multimodal capabilities such as native image and audio generation, and the ability to use tools like Google Search and Maps. An experimental version, Gemini 2.0 Flash, is now available to developers via Google AI Studio and Vertex AI, and to users through the Gemini chat interface. This model aims to enhance user experiences by providing more useful and interactive AI functionalities across various Google products. In addition to Gemini 2.0, Google is testing an "AI Mode" for its search engine, offering AI-generated summaries and more conversational responses. This feature is currently accessible to Google One AI Premium subscribers and select testers in the U.S.

NetSuite 2025.1 introduces SuiteProcurement and enhanced bill capture features

NetSuite's 2025.1 release introduces SuiteProcurement, an indirect procurement solution that streamlines purchasing by automating approvals and managing documents electronically. Integrated within NetSuite, SuiteProcurement allows buyers to shop on supplier e-commerce sites, access volume discounts, and centralize purchasing with select vendors. Supported suppliers like Amazon Business and Staples Business Advantage offer significant benefits. This solution is available as an add-on module and as part of NetSuite Advanced Procurement, providing access to numerous vendors and real-time supplier collaboration via Oracle Business Network.

SAP S/4HANA Cloud Private Edition 2023 FPS03: AI-powered enhancements for enterprise efficiency

SAP has released SAP S/4HANA Cloud Private Edition 2023 FPS03, introducing AI-driven enhancements across finance, procurement, manufacturing, and service management. Key innovations include AI-assisted journal uploads, predictive labor demand planning, and AI-based scheduling explanations. Joule, SAP’s digital assistant, now supports dispute management, revenue accounting, sales, procurement, and more. New features improve financial planning, production modeling, and asset management. Excel integration enables mass updates in procurement. Service order hierarchies and enhanced maintenance management streamline operations. These advancements emphasize automation and AI integration, helping businesses optimize workflows, improve decision-making, and boost efficiency across enterprise operations.

Medusa ransomware escalates: 42% surge in attacks, $15M ransom demands

Medusa ransomware attacks have surged by 42% between 2023 and 2024, with nearly double the incidents in early 2025 compared to the same period in 2024. Operated as a ransomware-as-a-service (RaaS) by the group known as Spearwing, Medusa employs double extortion tactics—stealing data before encrypting networks to pressure victims into paying ransoms ranging from $100,000 to $15 million. Spearwing has listed almost 400 victims on its data leaks site since early 2023, with the actual number likely higher. The group often exploits unpatched vulnerabilities in public-facing applications, particularly Microsoft Exchange Servers, and utilizes legitimate remote management tools like SimpleHelp, AnyDesk, and Mesh Agent to maintain access and deploy malicious drivers to disable security software.

Microsoft warns of massive infostealer campaign impacting one million devices

Microsoft has identified a large-scale malvertising campaign, attributed to the threat actor group Storm-0408, which has compromised nearly one million devices globally. This campaign primarily targeted visitors of illegal streaming websites, where malicious advertisements redirected users through multiple intermediaries to malware hosted on platforms like GitHub, Discord, and Dropbox. The infection chain involved a GitHub-hosted initial payload acting as a dropper, followed by additional stages that performed system discovery, information theft, and deployment of further malicious tools. Attackers utilized legitimate tools and scripts, including PowerShell and MSBuild, to conduct command-and-control operations and exfiltrate data. Microsoft has revoked 12 digital certificates associated with the first-stage payloads used in these attacks.