"A hacker has breached Romania's cadastre agency and wiped the country's entire land registry database following a failed extortion attempt. The hack has brought Romania's entire real-estate market to a standstill as official apps and websites have been offline." news.risky.biz/risky-bullet...

Hacker wipes Romania's entire land registry database

In other news: Graykey maker sues former employee for leaking exploit; Hugging Face was hacked using AI; unauth RCE finally found in WordPress.

news.risky.biz

Les membres du Centre de Coordination des Crises Cyber ont observé le ciblage et la compromission d’entités françaises au moyen du MOA TURLA opéré par le 16ème Centre du FSB : www.cert.ssi.gouv.fr/cti/CERTFR-2...

"Thank God our kids weren’t with us. I’m not sure if I would’ve been able to react as calmly." Just published the absolute craziest story of my entire career. www.thedrive.com/news/how-flo...

How Flock Cameras Wrongly Tracked Me For Days over ‘Stolen’ Plates and Sent Police After Me

A simple error got magnified by Flock's nationwide surveillance camera network and ended with four cop cars boxing me in.

thedrive.com

“Authorities from France to the Netherlands are quietly removing American tech from their systems, adopting European open-source software and urging civil servants to no longer use Microsoft Teams or Office.” www.wsj.com/world/europe...

‘There Is No Going Back’: The Inside Story of Europe’s Rupture With America

Trump’s tariffs, threats against Greenland spurred a rebellion by top leaders; the limits of “flattery diplomacy.”

wsj.com

3-30-300 rule. Maybe for the next #30DayMapChallenge ?

Amanda Shendruk@ashendruk.com · 2mo ago

I went down a 3-30-300 rabbit hole. It sounds like some kind of conspiracy, but it's a rule of thumb for figuring out if you live near enough nature. In writing the piece, I found out my neighbourhood fails. Does yours? www.not-ship.com/can-you-see-...

A #giftlink #giftarticle #climate Trump Administration to Dismantle Ocean Monitoring System www.nytimes.com/2026/06/01/c...

Trump Administration to Dismantle Ocean Monitoring System

nytimes.com

Hello @aeris.eu.org , je vois passer différentes publicités/posts sur linkedin vantant plaud : fr.plaud.ai/blogs/news/p... => j'ai l'impression d'un bon gros enfumage (en gros conforme si toutes les données restent sur le device, alors que le principe c'est de faire de la transcription).

Plaud.ai obtient la conformité totale au RGPD, renforçant son engagement envers les normes mondiales de confidentialité des données

SAN FRANCISCO, 29 juillet 2025-- Plaud.ai, la marque numéro 1 mondiale de prise de notes par IA pour tous les scénarios, a annoncé aujourd'hui avoir atteint...

fr.plaud.ai

"Darkness at Noon" novel // full compliance Trump tactic.

Opinion Today@opiniontoday.bsky.social · 2mo ago

He Lost With His Boots Off: John Cornyn, like so many of his fellow soon-to-be-ex-politicians, staked his survival on the hopeless tactic of trying to beat Trump’s team in a contest over who loves Trump more. (@jonathanbchait.bsky.social) www.theatlantic.com/ideas/2026/0...

Major alarm bells over this. Bessent wants US banks to require customers send in copies of their passports etc. to prove citizenship, which would be far beyond the know-your-customer checks that they're required to do already. Implies this could result in closing bank accounts over non-compliance.

Treasury Secretary Scott Bessent is preparing banks to collect citizenship data

Treasury Secretary Scott Bessent says the Trump administration expects banks to comply in collecting citizenship information from customers.

cnbc.com

⚠️Alerte CERT-FR⚠️ La vulnérabilité CVE-2026-42897 affecte Microsoft Exchange et permet une injection de code indirecte à distance (XSS) ainsi qu'un contournement de la politique de sécurité. Elle est activement exploitée. cert.ssi.gouv.fr/alerte/CERTF...

More of those AI-found vulnerabilities: -Tomcat unauth RCE: www.striga.ai/research/tom... -18yo RCE in NGINX: depthfirst.com/research/ngi... They're everywhere now.

Fail Open, Game Over: Turning a One-Line Tomcat Fix into Unauthenticated RCE

Striga uncovered a fail-open regression in Apache Tomcat's cluster encryption that turns a one-line code change into unauthenticated Remote Code Execution.

striga.ai

[🧵 Thread] #Hantavirus "Un ressortissant français qui ne se trouvait pas à bord du MV Hondius a contracté le hantavirus après avoir pris un vol avec un passager du navire de croisière...". news.sky.com/story/three-...

Thémis 😷 Covid is not over ≽(•⩊ •マ≼@themis2023.bsky.social · 3mo ago

#Hantavirus : "l’OMS soupçonne une transmission interhumaine sur le navire de croisière 'Hondius'" Sur le site Pasteur le 😷 FFP2 est recommandé contre ce virus. (je passe sur l'impression de déjà-vu relative à la négligence, par l'OMS, de la transmission aérosole). 🔗 www.pasteur.fr/fr/sante-pub...

Compromission probable des infras de BookMyName avec domain takeover www.mail-archive.com/frnog@frnog.... Si vous êtes chez eux, faites gaffe !

Incredible things are happening www.reddit.com/r/popculture...

Vibi the Alien (A Space Alien Explains) VGen Open!@theaozaeta.bsky.social · 3mo ago

From the other site, but it seems some minions may be attempting a Scientology speedrun

Very true. Since forever.

Zack Whittaker@zackwhittaker.com · 3mo ago

At this.weekinsecurity.com I wrote about the rise of regular consumers finding security bugs, flaws, and data leaks but having no way to report them to the companies. I make the case why *every* organization should make it easy for anyone to reach out & how this could save you from a damaging hack.

In Japan, there is an amazing app for disaster preventions (nerv.app/en/about.html) : - Earthquake Early Warning - Tsunami Information - Volcano Info - Weather Warnings - Typhoon path forecast

Accessibility Update

Learn more about the features and functions provided by the NERV Disaster Prevention app.

nerv.app

This is a big deal. Already seeing evidence of this by way of OpenClaw installations. opensourcemalware.co... www.stepsecurity.io/...

One of the most popular JavaScript packages on earth Axios has been compromised

The Axios NPM package has been compromised and the maintainer of the project has been locked out of their account. This will go down in history as one of the most successful software supply chain attacks ever

opensourcemalware.com

Securonix researchers detail an ongoing campaign that uses fake CV phishing to target French-speaking enterprises. The initial VBScript stage is heavily obfuscated; the malware deploys a combined toolkit including infostealing, data exfiltration & Monero mining. www.securonix.com/blog/faux-el...

Revendication d’une compromission des infrastructures d’OVH Si c’est confirmé, ça va être du 🍿 par palettes entières là…

9. Another strategic blunder, well put in this story: "An exit now would spare lives and money but leave in power an Iranian regime even more hardline and militaristic than the last one.". They've "replaced" one hard-line regime with possibly a worse one. giftarticle.ft.com/giftarticle/...

How Trump’s attack on Iran risks dragging US into Middle East ‘quagmire’

US president who pledged to end America’s forever wars has started another Middle East conflict with no easy off-ramps

giftarticle.ft.com

I am oddly sanguine about the fuel in route. But we have 0 confirmed shipments post 30 March. 0. Nada. Zip. Zilch. Nothing. What I would like to hear from MBIE or Minister Willis is what they are doing to secure future shipments. And how they intend to manage the air bubble in our supply.

This is all pretty close to Kim Stanley Robinson’s Ministry of the future, isn’t it? In that book oil stops being economically viable because of ubiquitous drone and missile attacks that intentionally drive up the price.

FinTwitter@fintwitter.bsky.social · 5mo ago

IRAQ DECLARES FORCE MAJEURE ON ALL OILFIELDS DEVELOPED BY FOREIGN OIL COMPANIES - OIL MINISTRY SOURCES

Remember when they declared they had restored free speech and ended federal censorship on Trump's very first day back? Well, now they're openly bragging about all the journalists they got fired for saying the wrong thing and all the companies the federal government forced to make changes.

Will Harris@willharrisinva.bsky.social · 5mo ago

If anyone wasn't of the belief that he's trying to create a state-run media, the fact that he shared this should take care of any hesitation on that front.

Supply chain attack at AppsFlyer Its app and web SDKs were used to deploy crypto-address replacing code gist.github.com/cometkim/5be...

AppsFlyer SDK compromised 2026-03-10

AppsFlyer SDK compromised 2026-03-10. GitHub Gist: instantly share code, notes, and snippets.

gist.github.com

3 ships hit in or around the Strait of Hormuz. Based on the locations, nothing in the region is really safe.

I was in a 2 hour briefing today on the Iran War. All the briefings are closed, because Trump can't defend this war in public. I obviously can't disclose classified info, but you deserve to know how incoherent and incomplete these war plans are. 1/ Here's what I can share:

yggleak.top/fr/home/ygg-...

Polymarket has created a market that would monetize a nuclear attack amid increasing concerns that bets are happening among government insiders who can make military decisions. What stage of the apocalypse is this? polymarket.com/event/nuclea...

Petite mise à jour d'un graphe de l'évolution du rendement du réseau d'eau potable CACEM/Odyssi en Martinique. Qu'est-ce qu'on y voit ? 1. Le rendement du réseau régresse fortement En 2022, la CACEM fait vérifier les chiffres d'Odyssi. Ce qui conduit à une ré-évaluation à la baisse du rendement

Guillem Lefait@guillem.lefait.fr · 5mo ago

RPQS 2024 (en mode Yolo) de la CACEM / Odyssi pour l'eau potable : www.services.eaufrance.fr/collectivite... On passe d'un rendement (pourri) de 56% à 51.6%. L'objectif standard est de 75%.