AA

Always questioning. Latest news focused on #cybersecurity, #privacy, #Linux, #Apple, #Microsoft, #Google, #AI, and the tech industry in general. Toxicity is not tolerated. I follow like interests.

Check your facts.

- FactCheck.org https://www.factcheck.org/
- Reuters Fact Check https://www.reuters.com/fact-check/
- AP Fact Check https://apnews.com/ap-fact-check
- Snopes https://www.snopes.com/
- Politifact https://www.politifact.com/

NordVPN Link Checker: https://nordvpn.com/link-checker/

Project 2025 Tracker https://www.project2025.observer/

Public Key

npub1vu68dce5tej4kk8hn6zpdyyhjd0nrmw4scq284ycnwqwlr0l95jqltvcka

NIP-05 Address

aakl_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsxwdrkuv69ue2mtrmeapqkjztexhe3ah2cvq9r6jvfhq803hlj6fqprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnt9mjnce

Publishing to

relay.momostr.pink

Author Public Key

npub1vu68dce5tej4kk8hn6zpdyyhjd0nrmw4scq284ycnwqwlr0l95jqltvcka

Show more details

Last Notes

2026-06-10 18:30:43 UTC

I don't understand the doublespeak. And the fact that this needs clarification suggests this is just a repackaging of the same old playbook that failed in the past, but this time, it's specifically anti-PlayStation again, a war that Microsoft lost. Sure, why not?
"When we say 'console exclusives,' it means Xbox console."
"It'll still show up on all the normal places where we sell the PC version, and our cloud. Wherever you can get Xbox Cloud streaming."
PC Gamer: Xbox 'console exclusives' are strictly about console releases, Xbox exec affirms: Games will 'still show up on all the normal places where we sell the PC version' https://www.pcgamer.com/games/xbox-console-exclusives-are-strictly-about-console-releases-xbox-exec-affirms-games-will-still-show-up-on-all-the-normal-places-where-we-sell-the-pc-version/ #Xbox #Microsoft

2026-06-09 14:42:41 UTC

- reply

Apple is providing the hardware for these models, maybe even the chips. It's a good place to be. But that invites too many strangers to the ecosystem, and many of then aren't trustworthy. I'd like to believe Apple's claims to privacy will survive, but that looks increasingly questionable.

2026-06-09 14:36:07 UTC

- reply

And the answer is that Apple's "AI" right now is a cruel joke, because there isn't one, at least not a functional one. Apple will use all of these other companies' products to improve it.

2026-06-04 18:02:57 UTC

- reply

And OpenAI and many others. This stretches trust in every direction.

2026-06-02 17:42:40 UTC

- reply

There's more stuff that's completely out there. Success has hit him on the head - hard.

2026-05-21 15:02:58 UTC

- reply

Sony needs a handheld.

2026-05-21 13:50:56 UTC

- reply

The days of the console are over and Sony knows it. It has a PlayStation fan base that will continue to be there, but a lot of people use their phones for gaming (I don't know how; the screen is way too small.) Then you have the handhelds next. The common factor is the small footprint, the portability, and the cross-platform functionality. Oddly, enough, Phil Spencer understood this. Does the PS meet this criteria?

2026-05-14 14:24:45 UTC

- reply

These companies are going to turn the remaining humans into janitors.

2026-05-08 15:56:01 UTC

Here it comes. Notice the word "efficient."
“For our players, this will mean a gaming experience like never before. More immersion, more adventures, and fresh ways to enjoy their favorite characters. For our publishers, this will mean an even more efficient production environment and a better discovery to ensure their games reach the right audiences.”
VGC: Sony lays out its AI plan for PlayStation: ‘We believe AI will unleash the creativity of our studios’ https://www.videogameschronicle.com/news/sony-lays-out-its-ai-plan-for-playstation-we-believe-ai-will-unleash-the-creativity-of-our-studios/ #Sony #PlayStation

2026-05-08 15:33:21 UTC

- reply

That is a very valid question. How many of these vulnerabilities existed before the layers that got built on top of them? Mozilla will never tell you.

2026-05-08 14:02:29 UTC

- reply

The breach was reported last week. A search of Trellix returns an "important update" posted three hours ago, the same one you have here.
Seven days ago: https://www.reddit.com/r/cybersecurity/comments/1t13fw3/security_advisory_unauthorised_access_to_trellix/

2026-05-08 13:35:56 UTC

- reply

Yikes. And this is from yesterday, so a week later, the damage is done and ongoing.
I still ask myself why Iranian threat actors would target Ubuntu? Linux is popular in the ME because it's easier to use on Android, which is also popular for numerous reasons. So maybe there are entities there using Linux that have some strategic value? Maybe it was just the easier target? Ubuntu is an odd target, and none of these theories are the right answer.

2026-05-08 13:25:49 UTC

- reply

It's rather disconcerting that Canonical's last update on this was on May 1 https://discourse.ubuntu.com/t/update-concerning-ddos-attack-on-canonical-and-ubuntu/81482.

2026-05-07 17:11:05 UTC

- reply

Hopefully, some incriminating evidence will surface.

2026-05-07 16:56:30 UTC

@npub1s6e…n008 Your snarky cat has competition https://www.gamesradar.com/games/action/star-fox-64-remake-revealed-for-switch-2-in-surprise-nintendo-direct/

2026-05-07 14:04:19 UTC

- reply

Did you miss the seedy part about personal relationships and the great alpha male donations?

2026-05-06 19:02:34 UTC

CISA has updated the KEV catalogue.
- CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-0300 #infosec #CISA #PaloAlton #vulnerability

2026-05-06 18:44:41 UTC

- reply

Five days ago:
Datalink Networks Announces Partnership with Arctic Wolf to Deliver Security Operations for the Age of AI https://finance.yahoo.com/sectors/technology/articles/datalink-networks-announces-partnership-arctic-164500123.html

2026-05-06 18:16:57 UTC

"Apparently, a number of Valve customers weren't charged an additional sales tax for their purchase. That fee isn't much compared to the peripheral's hefty price tag, but in states with higher sales tax, like California, it could mean a difference of just over $7."
Polygon: A Valve glitch made Steam Controllers cheaper for early adopters https://www.polygon.com/valve-steam-controller-price-glitch-sales-tax-buy/ [@polygon](https://flipboard.com/@polygon ) #Valve #SteamController

2026-05-06 17:19:12 UTC

😂. Surveillance aside, here's hoping this isn't your package.
Futurism: Video Shows Amazon Drone Dropping Package Into Pond https://futurism.com/robots-and-machines/amazon-prime-drones-water [@Futurism](https://flipboard.com/@Futurism ) #Amazon #drone

2026-05-06 16:44:42 UTC

Does the Swiss cheese have holes or do the holes have Swiss cheese?
A long list of Cisco vulnerabilities popped up today, four of them high severity.
Cisco: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @npub1xkd…cc62 #Cisco #infosec #vulnerability #IoT
@npub1s6e…n008

2026-05-06 15:46:30 UTC

This was posted yesterday.
Cisco: CloudZ RAT potentially steals OTP messages using Pheno plugin https://blog.talosintelligence.com/cloudz-pheno-infostealer/ @npub1xkd…cc62 #threatresearch
More:
The Hacker News: Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs https://thehackernews.com/2026/05/windows-phone-link-exploited-by-cloudz.html @npub1yj6…pz3u #infosec #Windows #Microsoft #vulnerability

2026-05-06 15:16:06 UTC

From yesterday. This is the same NHS that was embroiled in a scandal surrounding the mishandling of public health data a few years ago.
"NHS England is pulling its open-source software from the internet because of fears around computer-hacking AI models like Mythos."
New Scientist: Backlash builds over UK's NHS plan to hide source code from AI hacking risk https://www.newscientist.com/article/2525315-backlash-builds-over-nhs-plan-to-hide-source-code-from-ai-hacking-risk/ [@NewScientist](https://flipboard.com/@NewScientist ) #opensource #infosec #Mythos #Anthropic

2026-05-06 14:42:06 UTC

- reply

Probably not, but truth hurts. A lot of people would rather not hear it or just get offended when you hit the mark. Sounds like the AI worshipers, doesn't it?

2026-05-06 14:35:35 UTC

- reply

An interesting move, given that Copilot has suddenly become an "entertainment" vehicle only. The question is: which AI will replace it?
These two moves almost amount to an admission of Copilot failure. So what isn't Microsoft saying?

2026-05-06 14:27:41 UTC

- reply

If I remember correctly, the "developer" of Moltbook let AI build the whole nightmare scenario we have today while he went to play golf or something. Very responsible.
Who gets blamed for fiascos when you're playing golf? You or the AI?

2026-05-05 16:55:32 UTC

We're way past the "don't be evil" years and now pushing through the "good doesn't pay the shareholders" years.
Wired: Google DeepMind Workers Vote to Unionize Over Military AI Deals https://www.wired.com/story/google-deepmind-workers-vote-to-unionize-over-military-ai-deals/ [@WIRED](https://flipboard.com/@WIRED ) #Google

2026-05-05 16:41:38 UTC

MacRumors: PSA: Instagram Encrypted Messaging Ends on Friday, May 8 https://www.macrumors.com/2026/05/05/psa-instagram-encrypted-messaging-ends-may-8/ @npub1h3n…rtm6 #Instagram #Meta

2026-05-05 16:19:35 UTC

New.
Any.Run: New Phishing Campaign Targets US with Credential Theft: What CISOs Need to Know https://any.run/cybersecurity-blog/us-fake-invitation-phishing/ [@anyrun_app](https://infosec.exchange/@anyrun_app ) #infosec #malware #threatresearch #phishing

2026-05-05 16:17:22 UTC

New.
Zscaler: Malicious OpenClaw Skill Distributes Remcos RAT and GhostLoader https://www.zscaler.com/blogs/security-research/malicious-openclaw-skill-distributes-remcos-rat-and-ghostloader #infosec #OpenClaw #threatresearch

2026-05-05 16:01:27 UTC

New.
Kaspersky: DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026 https://securelist.com/tr/daemon-tools-backdoor/119654/ @npub1ger…6hxz #infosec #Windows

2026-05-05 15:57:47 UTC

New.
Recorded Future: Hacking Embodied AI https://www.recordedfuture.com/research/hacking-embodied-ai #infosec #threatresearch #bots #robots

2026-05-05 15:36:22 UTC

Ransomware.live:
- Entire list of affected schools by Instructure breach https://www.ransomware.live/id/RW50aXJlIGxpc3Qgb2YgYWZmZWN0ZWQgc2Nob29scyBieSBJbnN0cnVjdHVyZSBicmVhY2hAc2hpbnlodW50ZXJz
More: https://www.ransomware.live/ #infosec #ransomware #databreach

2026-05-05 15:01:36 UTC

If you missed this, an Android security bulletin was posted yesterday https://source.android.com/docs/security/bulletin/2026/2026-05-01 #Google #Android #infosec #vulnerability

2026-05-05 14:54:31 UTC

"The Center for AI Standards and Innovation at the Department of Commerce said on Tuesday that the agreement would allow it to evaluate the models before deployment and conduct research to assess their capabilities and security risks."
Reuters: Microsoft, Google and xAI to give US government early access to AI models for security checks https://www.reuters.com/legal/litigation/microsoft-xai-google-will-share-ai-models-with-us-govt-security-reviews-2026-05-05/ [@Reuters](https://flipboard.com/@Reuters ) #Microsoft #Google #Musk #infosec #LLM

2026-05-05 14:45:55 UTC

The company is Character Technologies.
"An investigator from the state agency that licenses professionals created an account on Character.AI, searched on the word 'psychiatry' and found a large number of characters, including one described as a “doctor of psychiatry.”
"That character held itself out as able to assess the investigator 'as a doctor' who is licensed in Pennsylvania, the lawsuit said."
AP: Pennsylvania sues AI company, saying its chatbots illegally hold themselves out as licensed doctors https://apnews.com/article/character-ai-chatbots-medical-advice-pennsylvania-46502067ed5b3cd9f9173f194ad30070 [@AssociatedPress](https://flipboard.com/@AssociatedPress ) #chatbots #bots

2026-05-05 14:36:54 UTC

Leave it to Meta to abuse privacy to the hilt.
Tech Crunch: Meta will use AI to analyze height and bone structure to identify if users are underage https://techcrunch.com/2026/05/05/meta-will-use-ai-to-analyze-height-and-bone-structure-to-identify-if-users-are-underage/ @npub14rz…23ph #Meta #privacy #biometrics

2026-05-04 16:39:51 UTC

- reply

Almost did, repeatedly. That says something for GameStop's tenacity.
A blast from the past, but an instructive story:
CNBC: Netflix didn’t kill Blockbuster — how Netflix almost lost the movie rental wars https://www.cnbc.com/2020/09/22/how-netflix-almost-lost-the-movie-rental-wars-to-blockbuster.html

2026-05-04 15:48:14 UTC

Computerworld: Opinion: Relying on LLMs is nearly impossible when AI vendors keep changing things https://www.computerworld.com/article/4166110/relying-on-llms-is-nearly-impossible-when-ai-vendors-keep-changing-things.html #LLM

2026-05-04 15:44:11 UTC

They're actually serious. Where's the money coming from?
Note: "GameStop’s market capitalization is currently below $12 billion — less than one-fourth the proposed deal size."
Variety: GameStop (Yes, GameStop) Makes $56 Billion Unsolicited Bid for eBay https://variety.com/2026/digital/news/gamestop-ebay-56-billion-bid-acquisition-1236736709/ [@Variety](https://flipboard.com/@Variety )

2026-05-04 15:29:57 UTC

Tenable: Security for AI: A strategic framework for closing the AI exposure gap https://www.tenable.com/blog/strategic-framework-for-securing-AI-with-exposure-management @npub1yf6…f0cf #infosec

2026-05-04 15:27:57 UTC

New.
Securonix: VENOMOUS#HELPER: Dual-RMM Phishing Campaign Leveraging JWrapper-Packaged SimpleHelp and ScreenConnect for Silent Remote Access https://www.securonix.com/blog/venomous-helper-phishing-campaign/ #infosec #phishing #Java

2026-05-04 14:22:23 UTC

- reply

"My ego is bigger than yours."
"No, MY ego is bigger than yours. Follow the money."

2026-05-03 15:34:15 UTC

What a shame.
PC Gamer: One-time Google competitor Ask.com, formerly Ask Jeeves, throws in the towel after almost 30 years: 'Jeeves' spirit endures' https://www.pcgamer.com/gaming-industry/onetime-google-competitor-ask-com-formerly-ask-jeeves-throws-in-the-towel-after-almost-30-years-jeeves-spirit-endures/

2026-05-02 14:30:44 UTC

- reply

And the question that came to mind after I saw that is whether U.S, AI companies are going to be "nationalized" for government use because once you've given your critical tech h to a war department, you can't take it back.

2026-05-01 18:14:55 UTC

Okay, so if you've got time on your hands, this is what you get.
PC Gamer: This historic OS was not stored digitally, so a fleet of historians have transcribed the source code from ancient print-outs in order to make it open source https://www.pcgamer.com/software/operating-systems/this-historic-os-was-not-stored-digitally-so-a-fleet-of-historians-have-transcribed-the-source-code-from-ancient-print-outs-in-order-to-make-it-open-source/ #opensource

2026-05-01 18:11:07 UTC

It's actually not funny, but to each his own.
GamesRadar: Former PlayStation boss blames "really sad" layoffs on "misjudgment" of companies: "It's funny to see the companies who shut down, lay off, the stock price goes up" [@GamesRadar](https://flipboard.com/@GamesRadar ) #Sony #PlayStation

2026-05-01 15:24:11 UTC

Well, you can't let Anthroopic have all the fun. OpenAI published this a couple of days ago. The paper says it's "an action plan for democratizing AI-Powered cyber defense." Maybe not enough criminals are getting their hands on these tools to "democratize" cyber attack?
OpenAI: Cybersecurity in the [Artificial] Intelligence Age https://cdn.openai.com/pdf/7ca95dce-4424-4b62-9eab-89233bb38f82/oai-cybersecurity-action-plan.pdf #OpenAI #infosec

2026-05-01 15:13:57 UTC

The Record: British cyber agency warns of looming ‘patch wave’ as AI speeds flaw discovery https://therecord.media/british-cyber-ai-patch-wave [@therecord_media](https://mastodon.social/@therecord_media ) #infosec

2026-05-01 15:10:44 UTC

Cisco published this yesterday: Introducing Model Provenance Kit: Know Where Your AI Models Come From https://blogs.cisco.com/ai/model-provenance-kit @npub1xkd…cc62
More:
Security Week: https://www.securityweek.com/cisco-releases-open-source-tool-for-ai-model-provenance/ @npub1nlp…l6ld #infosec #Cisco

2026-05-01 14:55:53 UTC

Crowdstrike had a blog post on this yesterday, though you'll have to figure out their "privacy" choices.
The Hacker News: Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks https://thehackernews.com/2026/05/cybercrime-groups-using-vishing-and-sso.html @npub1yj6…pz3u #cybercrime #infosec #SaaS

2026-05-01 14:29:13 UTC

- reply

He really loves money, doesn't he? I'm guessing he needs more in the next few months to bribe voters who escaped the various torture contraptions to force them to not vote or to vote a specific way. He's already up to his ears in that kind of thing.

2026-05-01 13:48:43 UTC

- reply

Oh, is that right? Maybe that goal has been moved to the moon? That bonus isn't going to show up any time soon.

2026-04-30 18:00:37 UTC

Nacon should be blacklisted.
Kotaku: Insolvent Publisher Announces Gaming Showcase Just 24 Hours After Shutting Down RPG Studio As Union Calls On Fans Not To Buy Its Games https://kotaku.com/insolvent-publisher-announces-gaming-showcase-just-24-hours-after-shutting-down-rpg-studio-as-union-calls-on-fans-not-to-buy-its-games-2000692001 [@Kotaku](https://flipboard.com/@Kotaku )

2026-04-30 17:11:23 UTC

The magnificent AI can't handle this scourge.
Ransomware.live has listed Liberty Mutual Insurance https://www.ransomware.live/id/TGliZXJ0eSBNdXR1YWwgSW5zdXJhbmNlQGV2ZXJlc3Q
- ATF Aerospace https://www.ransomware.live/id/QVRGIEFlcm9zcGFjZUBha2lyYQ
- Del Monte Foods https://www.ransomware.live/id/RGVsIE1vbnRlIEZvb2RzQHBheW91dHNraW5n
- UK: Ash & Lacy Holdings https://www.ransomware.live/id/QXNoICYgTGFjeSBIb2xkaW5nc0BwYXlvdXRza2luZw
- Florida East Coast Railway https://www.ransomware.live/id/RmxvcmlkYSBFYXN0IENvYXN0IFJhaWx3YXlAcGF5b3V0c2tpbmc
Yesterday:
- Advanta Genetics LLC https://www.ransomware.live/id/QWR2YW50YSBHZW5ldGljcyBMTENAYXVyb3Jh
- Law Offices of Michael A. Freedman, P.A https://www.ransomware.live/id/TGF3IE9mZmljZXMgb2YgTWljaGFlbCBBLiBGcmVlZG1hbiwgUC5BLiAobWFmbGF3LmNvbSlAYXVyb3Jh
- defcon5italy.com https://www.ransomware.live/id/ZGVmY29uNWl0YWx5LmNvbUBsb2NrYml0NQ
- planetsport.ma https://www.ransomware.live/id/cGxhbmV0c3BvcnQubWFAbG9ja2JpdDU
Lots more: https://www.ransomware.live/ #infosec #ransomware

2026-04-30 17:01:27 UTC

Ars Technica: The hidden cost of Google’s AI defaults and the illusion of choice https://arstechnica.com/ai/2026/04/googles-privacy-maze-how-gemini-traps-you-and-your-data/ @npub15wh…e9hw #Google #Gemini

2026-04-30 16:43:12 UTC

New.
KrebsonSecurity: Anti-DDoS Firm Heaped Attacks on Brazilian ISPs https://krebsonsecurity.com/2026/04/anti-ddos-firm-heaped-attacks-on-brazilian-isps/ @npub1vc3…axsh #infosec #DDoS #botnet

2026-04-30 16:41:31 UTC

New:
Kaspersky: Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India https://securelist.com/silver-fox-tax-notification-campaign/119575/ @npub1ger…6hxz #infosec #APT #phishing #threatresearch

2026-04-30 16:36:52 UTC

- reply

I don't know what's gotten into Sony, but this is already getting backlash.

2026-04-30 16:29:53 UTC

Cisco has tagged Nvidia for several zero-day reports https://talosintelligence.com/vulnerability_info @npub1xkd…cc62 #Nvidia #zeroday #infosec #vulnerability

2026-04-30 15:28:02 UTC

CISA now has this message on its website:
"Due to the lapse in federal funding, this website will not be actively managed."
The "read more" link, blocked by ublock Origin, leads to dhs.gov
That said, CISA and partners issued new guidance yesterday.
CISA: Adapting Zero Trust Principles to Operational Technology https://www.cisa.gov/resources-tools/resources/adapting-zero-trust-principles-operational-technology #CISA #infosec

2026-04-30 15:12:24 UTC

- reply

How could I forget? Somebody finally made him understand Mars isn't logistically or technologically feasible at this time. So, now we'll trash the moon instead.

2026-04-30 14:32:07 UTC

- reply

A scary scenario. But Apple is now resisting new curbs on emissions, so like other "climate-friendly" companies, it's taking advantage of the deregulation because - why not?
When did the memo go out that Earth is disposable and that we can just pick up and to go to another planet so we can trash it as well?

2026-04-30 14:21:14 UTC

- reply

Think of all the money Apple will make off other companies' agents on its devices without spending a dime on new data centers or infrastructure. Meanwhile, the company will observe and learn so that it can improve its nascent AI.

2026-04-29 17:14:36 UTC

Does it really want to be ahead of the pack or just a facilitator for the pack (a new revenue stream)?
"Right now, Apple doesn’t offer the world’s best AI services, but does offer the world’s best platform on which to run them."
Computerworld: Apple will be behind on AI — until it isn’t https://www.computerworld.com/article/4164979/apple-will-be-behind-on-ai-until-it-isnt.html @npub15sz…rfqd #Apple

2026-04-29 17:10:01 UTC

Are you on Snapchat?
Engadget: Snapchat is rolling out sponsored AI agents https://www.engadget.com/ai/snapchat-is-rolling-out-sponsored-ai-agents-162720124.html [@Engadget](https://flipboard.com/@Engadget ) #Snapchat

2026-04-29 16:25:41 UTC

- reply

😂 . It's a start?

2026-04-29 16:23:11 UTC

Oops.
AP (from yesterda): Robot dogs with Musk and Zuckerberg heads roam around Berlin museum in Beeple’s new exhibit https://apnews.com/article/germany-berlin-robot-dogs-beeple-bezos-digital-art-4a2be2a4a4490553ad68c27beedfe83a [@AssociatedPress](https://flipboard.com/@AssociatedPress ) #robots #BigTech

2026-04-29 14:36:51 UTC

- reply

That's kinda sad. More sophisticated suggests the threat actors have shiny new tools (AI) and new layers on top of a villainous malware, kinda like an onion, all dressed up for the prom. You peel off the layers and the onion is still the same.

2026-04-29 14:33:02 UTC

- reply

That actually sounds like the right answer, though the AI vendors' selling point is that threat actors have become so sophisticated that the hapless humans need an AI model to automate finding the bugs for them.

2026-04-29 14:20:24 UTC

- reply

A fair question. Now that you mention it. this feels like comparing apples and oranges.
Does an AI model verify the bugs it finds or does it just dump them on the humans to verify?
Does the AI model patch these vulnerabilities or is that up to the humans?
If the AI model only hunts for vulnerabilities, obscure and otherwise, without verifying and fixing them, then how much time is saved, compared to a similar hunt by a smarter, more experienced and intuitive human?

2026-04-28 16:58:49 UTC

Dell posted this yesterday, affects multiple CVEs:
Security Update for Dell Disk Library for mainframe Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000458131/dsa-2026-091-security-update-for-dell-disk-library-for-mainframe-vulnerabilities #infosec #Dell #vulnerability #Linux

2026-04-28 16:53:25 UTC

Nvidia has posted two advisories:
"NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key."
- Critical: CVE-2026-24178, CVE-2026-24186, and CVE-2026-24204: NVIDIA FLARE SDK - April 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5819
"NVIDIA NemoClaw contains a vulnerability in the sandbox environment initialization component where a remote attacker may cause improper access control by sending prompt-injected content."
- High: CVE-2026-24222 and CVE-2026-24231: https://nvidia.custhelp.com/app/answers/detail/a_id/5837 #Nvidia #infoec #vulnerability

2026-04-28 16:31:35 UTC

Cisco has a new advisory for two critical vulnerabilities:
- CVE-2026-20147and CVE-2026-20148: Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ @npub1xkd…cc62 #Cisco
Broadcom:
High Severity: OM Spool Java Transformers vulnerabilities in OpenText Transformation Designer (OTD) - CVE-2026-5588, CVE-2025-59250, CVE-2025-12383, CVE-2025-48924, and CVE-2025-68161 https://support.broadcom.com/web/ecx/security-advisory #Broadcom
Tenable research advisories posted this yesterday:
Spring AI SQL Injection in PgVectorStore and friends https://www.tenable.com/security/research/tra-2026-36 #infosec #vulnerability

2026-04-28 16:18:37 UTC

There's a lot of money in that kind of thing.
Engadget: Google and the Pentagon sign classified deal to give the Department of Defense unfettered access to its AI models https://www.engadget.com/ai/google-and-the-pentagon-sign-classified-deal-to-give-the-department-of-defense-unfettered-access-to-its-ai-models-155211834.html [@Engadget](https://flipboard.com/@Engadget ) #Google

2026-04-28 16:16:10 UTC

Wired: The Race Is on to Keep AI Agents From Running Wild With Your Credit Cards https://www.wired.com/story/the-race-is-on-to-keep-ai-agents-from-running-wild-with-your-credit-cards/ [@WIRED](https://flipboard.com/@WIRED ) @npub17lr…zzul #infosec

2026-04-28 15:58:19 UTC

From yesterday.
The Record: Tennessee becomes second state to ban cryptocurrency ATMs over scam concerns https://therecord.media/tennessee-bans-cryptocurrency-atms-over-scams [@therecord_media](https://mastodon.social/@therecord_media ) #fraud #scam

2026-04-28 15:56:50 UTC

The Record: Ukrainian police detain cybercrooks suspected of stealing thousands of Roblox accounts for resale https://therecord.media/ukraine-police-detain-hackers-suspected-of-stealing-roblox-accounts [@therecord_media](https://mastodon.social/@therecord_media ) #infosec #Roblox

2026-04-28 15:44:17 UTC

Infosecurity-Magazine: Medtronic Confirms Data Breach After ShinyHunters Claims https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ #databreach #infosec #ransomware

2026-04-28 15:42:12 UTC

New.
Check Point: VECT: Ransomware by design, Wiper by accident https://research.checkpoint.com/2026/vect-ransomware-by-design-wiper-by-accident/
More:
The Hacker News: VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi https://thehackernews.com/2026/04/vect-20-ransomware-irreversibly.html @npub1yj6…pz3u #infosec #ransomware #Linux #Windows

2026-04-28 14:32:49 UTC

- reply

That shouldn't be a problem for the ruling clique that's in bed with these investors. Get the lawsuits ready.

2026-04-28 14:15:50 UTC

- reply

49.5% foreign-owned, with Saudi Arabia and other Persian Gulf involved.

2026-04-28 14:13:27 UTC

Vimeo has been listed by Ransomware.live https://www.ransomware.live/id/VmltZW8sIEluYy5Ac2hpbnlodW50ZXJz
Als0:
- A vague "Cybersecurity Vendor" listing https://www.ransomware.live/id/Q3liZXJzZWN1cml0eSBWZW5kb3JAcmFuc29taG91c2U
More: https://www.ransomware.live/ #ransomware #infosec #Vimeo

2026-04-25 16:17:54 UTC

“The people who first made Nintendo’s hits are still working at the company."
AV Club: Brain drain is killing video games https://www.avclub.com/video-games-industry-brain-drain-layoffs

2026-04-25 16:14:46 UTC

This item is a couple of days-old. And the original source is rather amusing.
"Crypto advocates had touted Web3 gaming as the future of the video game industry. But data from trading firm Caladan shows that 93% of 'GameFi' projects have now failed."
Yahoo: More Than 90% Of Web3 Games Have Failed As $15B Industry Implodes https://finance.yahoo.com/markets/crypto/articles/more-90-web3-games-failed-133900964.html

2026-04-25 15:54:06 UTC

Polygon: 35 years ago, the Game Gear walked so the Steam Deck could run https://www.polygon.com/sega-game-gear-35th-anniversary/ [@polygon](https://flipboard.com/@polygon ) #Sega #SteamDeck

2026-04-24 19:12:23 UTC

Kotaku: Valve Adding New Tools to Help Developers Know When a Game Isn’t Running Well on Steam Deck https://kotaku.com/valve-adding-new-tools-to-help-devs-know-when-a-game-isnt-running-well-on-steam-deck-2000690478 [@Kotaku](https://flipboard.com/@Kotaku ) #Valve #Steam #SteamDeck #Linux

2026-04-24 19:06:37 UTC

- reply

Yes. No argument there.
And what is this "global platform" that Microsoft wants to build for Xbox, not counting piggybacking? This is the same rhetoric that was used when Xbox started pushing its games to PlayStation, Nvidia, and others. That qualifies as "global," presumably.

2026-04-24 18:49:20 UTC

On Ransomware.live:
- Rockville Fuel & Feed https://www.ransomware.live/id/Um9ja3ZpbGxlIEZ1ZWwgJiBGZWVkQGFraXJh
- Dorotea Sweden https://www.ransomware.live/id/RG9yb3RlYSBTd2VkZW5AaW5jcmFuc29t
- ADT, Inc. https://www.ransomware.live/id/QURULCBJbmMuIChhZHQuY29tKUBzaGlueWh1bnRlcnM
From yesterday:
- Clearview Intelligence 🤔 https://www.ransomware.live/id/Q2xlYXJ2aWV3IEludGVsbGlnZW5jZUBxaWxpbg
- City of Napoleon, Ohio https://www.ransomware.live/id/Q2l0eSBvZiBOYXBvbGVvbiwgT2hpb0BxaWxpbg
- Virginia Health Services https://www.ransomware.live/id/VmlyZ2luaWEgSGVhbHRoIFNlcnZpY2VzQHdvcmxkbGVha3M #infosec #infosec

2026-04-24 18:36:58 UTC

Yes, and Valve has been positioning itself to own it.
"Windows now represents more players and more hours and is increasingly where competition is most intense."
Also, I don't know what this means. Piggybacking off other platforms shouldn't qualify here:
"We will build a global platform that connects players and creators everywhere."
Xbox mission statement, posted yesterday:
We Are Xbox https://news.xbox.com/en-us/2026/04/23/we-are-xbox/ #Xbox #Microsoft

2026-04-24 18:21:11 UTC

about the BitWarden breach ...
Sophos: Supply chain attacks hit Checkmarx and Bitwarden developer tools https://www.sophos.com/en-us/blog/supply-chain-attacks-hit-checkmarx-and-bitwarden-developer-tools @npub1xrh…fkxn #infosec @npub1rzx…hkcp #BitWarden #threatresearch

2026-04-24 18:14:00 UTC

- reply

Don't hold your breath.

2026-04-24 17:40:13 UTC

- reply

Apple is going to become the host for various agents from other companies. It already has deals in place with Google and OpenAI. Why bother create your own when you can make money this way?

2026-04-24 17:01:22 UTC

Wired: Apple's Next CEO Needs to Launch a Killer AI Product https://www.wired.com/story/apples-next-ceo-needs-to-launch-a-killer-ai-product/ [@WIRED](https://flipboard.com/@WIRED ) #Apple

2026-04-24 16:39:07 UTC

- reply

No problems here, except that your recent posts and boosts date back to December.

2026-04-24 15:29:39 UTC

So, it's finally Friday. Two consecutive days of data breach notifications really made this week special, and not in a good way.
Yes, this is a rant. No, I'm not sorry. AI corporations are empowering cybercriminals with half-baked concoctions. If the mythical Mythos can dig up a few obscure vulnerabilities, so can cybercriminals, using your corporate toys. We are losing the cybersecurity battle, if it hasn't already been lost.
No, this is not defeatism. Defenders are using AI to defend, doing the same thing they have always done, which is to defend. Attackers are using AI to attack, doing the same nefarious business with new, shiny, half-baked toys gifted to them by AI corporations. A blind person can see that the two are running on two separate train tracks that will never meet.
We are all are losing this battle. Do something that actually puts the defenders on the same track as the attackers.
#infosec #databreach

2026-04-23 17:33:21 UTC

"If AI companies are unable to increase revenues with lightning speed, they won’t be able to service their massive debt loads.”
"And because of shady accounting strategies, the first big stumble will have everyone running for the exits, potentially triggering destabilizing losses in the financial sector and another 2008-style financial crisis.”
PC Gamer: 'I know a bubble when I see one': US senator's grave warning about the AI industry https://www.pcgamer.com/software/ai/i-know-a-bubble-when-i-see-one-us-senators-grave-warning-about-the-ai-industry/ #AIBubble

2026-04-23 16:23:56 UTC

Bitdefender: iOS Flaw Exposes ‘Deleted’ Message Data Through Notifications – Patch Now! (iOS 26.4.2 and iOS 18.7.8) https://www.bitdefender.com/en-us/blog/hotforsecurity/ios-flaw-exposes-deleted-messages-signal-iphone-fbi #Apple #iOS #vulnerability #infosec

2026-04-23 16:21:18 UTC

Broadcom has an updated advisory for a critical vulnerability:
Datacom Health Check Analyzer 1.1 Vulnerability https://support.broadcom.com/web/ecx/security-advisory #Broadcom #infosec #vulnerability

2026-04-23 16:18:22 UTC

Is the the week for major security incidents?
"Notably, our investigation thus far indicates that the malicious artifacts did not override previously published, known safe versions. Customers using versions or SHAs published prior to the affected timeframes are not affected."
Updated:
Checkmarx Security Update: April 22 https://checkmarx.com/blog/checkmarx-security-update-april-22/ #infosec #databreach