← Feed

Posts

• View post

  A look at Mythos Frontier AI fact vs fiction using the data. Spoiler: there isn’t an AI apocalypse as predicted. There are only a few hundred CVEs and 0.5% of them are actively exploited. https://www.vulncheck.com/blog/anthropic-glasswing-november-update

• View post

  There’s a fascinating situation playing out in China. - Massive boom in microdrama viewers, to the point where they established their own Hollywood - AI bros arrived and flooded the market with GenAI made microdramas - They all looked the same, people stopped watching microdramas - The market instantly crashed - only 1 in 70 shows are now profitable - The government is now trying to bail out the sector by paying them to rehire humans to make them https://note.com/eichan_sh/n/nb8234902a...

• View post

  RE: https://techhub.social/@Techmeme/117585673093738251

• View post

  If only the Nvidia board had warning signs.

• View post

  RE: https://infosec.exchange/@rebane2001/117580634604569849 Oh we’re buying CVE authorship now. Can’t wait to see the used car salesmen of InfoSec with CVEs on their resume.

• View post

  RE: https://techhub.social/@Techmeme/117576471120545360 Is it a good sign the CFO leaves after you get hacked for billions

• View post

  Ueno Bank in Paraguay has collapsed leaving 3 million people without money. Paraguayan President Santiago Peña submitted his resignation and faces unanimous impeachment by the lower house of Congress. The bank had ties to the Trump administration via the country’s President. About 60% of adults in the country used the bank. People are turning up at the bank’s office. $37600 US dollars per customer is (was) the average deposit. https://www.bloomberg.com/news/articles/2026-11-05/paraguay-s-pen...

• View post

  RE: https://mas.to/@carnage4life/117567174281074323 My favourite interview is this week Sam Altman, OpenAI’s CEO, saying he was surprised by the data centre and AI backlash. My man, you’ve had people publicly saying AI will remove jobs, risks destabilising the economy, and has a decent chance of ending civilisation. These things may be executive-level porn - but many executives are psychopaths. Most people aren’t.

• View post

  OpenSSH has a vuln condition which allows logging in without a password. A thread. https://www.openssh.org/releasenotes.html It only impacts Linux distributions which ship with musl libc and PAM disabled. I think that is just Alpine Linux (all versions) and Void Linux. It doesn’t impact Debian, Ubuntu, SUSE, Redhat or CentOS. Nor OpenWrt.

• View post

  at least Elon Musk has GTA 6 to look forward to pretending to play

• View post

  RE: https://techhub.social/@Techmeme/117556863552906466

• View post

  Anthropic think they should be able to release a model that kills 50 humans and causes $1bn of financial damage to organisations before there is talk of regulation.

• View post

  RE: https://circumstances.run/@davidgerard/117548159247284710 If anybody wondering - the Anthropic IPO amendment key changes: - $104 billion net loss for the first nine months of 2026 - shows growth has slowed in the latest quarter - shows almost $900 billion of upcoming future spending commitments it is locked in to - a dramatic increase

• View post

  Just finished Call of Duty Modern Warfare 4. You assassinate the North Korean elite, the supreme leader, his family and blow up his palace and state symbols. So in other words, if Microsoft suddenly get hacked in a month..

• View post

  The Financial Times report Anthropic’s IPO is now likely to receive a Junk credit rating, according to the anchor investor in the deal. Anthropic, Blackstone, KBRA, Morningstar DBRS and S&P declined to comment. Fitch and Moody’s did not respond to requests for comment. https://www.ft.com/content/59383c7f-8d82-493f-bf01-d2e862a1018f?syn-25a6b1a6=1

• View post

  Northflank, the AI platform, has gone offline after a full blown security breach. Environment variables for access to automation at their customers have been decrypted and exfiltrated. "Multiple users are confirmed that their AI keys have been used".

• View post

  Anthropic got compromised. Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops. https://phorion.io/blog/offical-claude-code-vsx-compromise/

• View post

  Bluesky have started blocking links to @ddosecrets@kolektiva.social https://www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/ There is no central blocking function in Mastodon. Do not in any way retoot this link https://ddosecrets.org/article/icepick

• View post

  It's time to get off @protonprivacy@mastodon.social https://www.404media.co/manifestos-fear-and-loser-thinking-inside-protons-ai-reckoning/

• View post

  RE: https://cyberplace.social/@GossiTheDog/117515798886610105 I’m aware of a ransomware group using PHP2Shell against Palo-Alto firewalls to gain initial access to orgs. They’re moving laterally off the PANOS box using stored creds to get inside network.

• View post

  Windows OEM and Devices revenue down 22% in the latest MS quarterly results. Good job throwing everything at AI.

• View post

  Made my password more secure by changing it to password4

• View post

  Elon Musk tried getting race hate figure Tommy Robinson out of jail by funding his defence, and lost again. https://www.bbc.co.uk/news/articles/cq2d6z36pp53o

• View post

  Anthropic’s SEC filing is amazing. It describes itself as the most important company in human history, then if you keep reading it’s like

• View post

  RE: https://techhub.social/@Techmeme/117512270378309989 Companies when they get their real Claude bill in three years

• View post

  RE: https://infosec.exchange/@mayahustle/117406250925641406 I have an unlocked Frontier AI model at home, and I’ve spent the past month generating literally thousands of malware samples doing all kinds of things, and running them through AV scanning and EDR tools. Basically 100% detection rate across every major vendor. Out of the box, default settings on the security tools. It didn’t help as an attacker at all, if anything it made me easier to detect. No idea what Jimmy’s presentation is...

• View post

  RE: https://infosec.exchange/@ciaranmartin/117486889924241077 Checking on Twitter takes of the PHP vulns was a mistake.

• View post

  I’ve seen some interesting takes on the PHP thing out of the US. One is from an official saying the US must win the ‘AI race’ as China definitely wouldn’t have told the world about the vulnerability like the NSA did. The NSA were late to the party, literally days after me. They were also beat by.. Chinese government cyber authorities, who already had an advisory out.

• View post

  The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service. Translation - breaking encryption. https://emudhra.we-have-a-problem.com/

• View post

  Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.