Securonix Threat Research has been tracking an active, multi-wave campaign called SMOKE#SCREEN, in which threat actors use a rotating collection of social engineering lures to deliver silent ScreenConnect Remote Monitoring and Management (RMM) agent installations. www.securonix.com/blog/smoke-s...

SMOKE#SCREEN: ScreenConnect RMM Abuse, Cloudflare Tunnels, and Trusted Software Lures

Securonix Threat Research: Analyze the SMOKE#SCREEN campaign abusing ScreenConnect RMM, Cloudflare Tunnels, and trusted software lures to gain persistent access across Windows and macOS.

securonix.com

Some Android TV boxes were shipped with preinstalled software capable of disguising the devices as smartphones, clicking online advertisements, and routing other people’s internet traffic through owners’ home connections, according to new research from #Bitsight. hackread.com/h96-android-...

H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners' home internet connections.

hackread.com

Recorded Future AI malware Maturity Model (AIM3) Levels 1-3 (Experimenting through Optimizing) #AI #malware #LLM www.recordedfuture.com/blog/ai-malw...

AI Malware: Hype vs. Reality

A grounded look at AI malware: most threats sit at low maturity levels, with no verified autonomous BYOAI attacks. Learn what’s real, what’s hype, and how defenders should respond.

recordedfuture.com

This is devastating news. I can't quite believe it. RIP Glen Hansard. www.independent.ie/irish-news/o...

Oscar-winning musician Glen Hansard dies in Dublin motorcycle crash

Renowned musician Glen Hansard has died overnight in a motorcycle crash in Dublin’s Lucan.

independent.ie

Hugging Face Incident Initial Post-Mortem report built for CISOs and security leaders wrote by CSA #huggingface #CSA #incident #report cloudsecurityalliance.org/artifacts/hu...

Hugging Face Incident Initial Post Mortem I CSA

AI Security Alliance's initial post-mortem on the Hugging Face incident, the first documented autonomous AI attack, with CISO guidance on detecting, responding to, and governing agentic AI risk.

cloudsecurityalliance.org

Peccato che quello denominato come decreto anti-maranza non sia un decreto-legge, ma un disegno di legge, che va approvato dal Parlamento e ancora deve fare il relativo iter. Nemmeno questo ha capito il ministro (e chi ha scritto la notizia, cioè Libero)? P.S. i 14enni si possono arrestare già ora

"Researchers already know that LLMs pick up human biases from their training data. New research suggests that LLMs can also develop their own biases from experience—and stereotype job applicants more than humans do"

MIT Technology Review@technologyreview.com · 2w ago

AI doesn’t just learn stereotypes from its training. It can cook up new ones, too. trib.al/pa8A91T

Critical SharePoint RCE flaw exploited to steal machine keys and maintain access even after affected servers are patched. #sharepoint #vulnerability www.bleepingcomputer.com/news/securit...

Critical SharePoint RCE flaw exploited to steal machine keys

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched.

bleepingcomputer.com

Demystifying AI Exploits: A Blueprint for AI-Assisted Vulnerability Management #mandiant #AI #VM cloud.google.com/blog/topics/...

Tracebit has published research indicating that prompts designed to trigger an LLM's safety policies can be planted in decoy data to counter attacks carried out with agentic AI. #tracebit #agentic #AI #attack agentic.tracebit.com/context-bombs/

Context bombs: stopping AI attackers in their tracks

Tracebit introduces 'context bombs': strings crafted to trigger safety guardrails in AI attackers. These significantly reduced the efficacy of agentic attacks in our AWS cyber range.

agentic.tracebit.com

And that's only because it's illegal to shoot them here.

On #Caturday we just walk away...😼😹 #CatsOfBluesky #Cats

Each of us should adopt a member of the European Parliament (at least one of the well-meaning ones) and explain to them how privacy works. #chatcontrol #EU #parliament

MERDE SIETE DELLE MERDE

Watching Too Much Television

Un nuovo dio è disponibile in viale Sarca, Milano.

Italy's Intesa shifts core IT banking systems to Google's cloud technology #bancaintesa #google www.reuters.com/business/fin...

Italy's Intesa shifts core IT banking systems to Google's cloud technology

Italy's biggest bank Intesa Sanpaolo on Thursday said it had completed the cloud migration of its core IT systems, ​joining a handful of European banks that have managed to ‌move away from legacy tech...

reuters.com

The US Commerce Department lifted the Anthropic export ban. But the real surprise is the new "KYC" perimeter. The Department of Commerce officially withdrew its emergency export controls on Claude Fable 5 and Mythos 5.

The Bear Necessities: A Look at the Drivers, Dynamics, and Applications of the Pro-Russia Influence Ecosystem (Google Threat Intelligence Group). #russia #influence cloud.google.com/blog/topics/...

“This report examines how DHS has laid the foundation for this authoritarian moment” notechforice.com/wp-content/u...

Madison Square Garden Sports was the target of a #ShinyHunters extortion campaign earlier this month. Almost 10M email addresses and extensive staff and customer relationship data was later published. haveibeenpwned.com/Breach/Madis...

Have I Been Pwned: Madison Square Garden Sports Data Breach

In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which inc...

haveibeenpwned.com

“Ireland’s parliament has voted to remove a mandatory three-day wait for abortion during early pregnancy after campaigners said the rule was an unnecessary restriction.” 👍👏 www.theguardian.com/world/2026/j...

Irish parliament votes to remove three-day abortion wait

Waiting period before receiving medication was included in draft law to gain support for abortion ban in 2018 referendum

theguardian.com

FortiBleed — 75k Fortinet firewalls have admin passwords cracked. #fortinet #credential #admin #password doublepulsar.com/fortibleed-7...

FortiBleed — 75k Fortinet firewalls have admin passwords cracked

A look inside a massive dump of allowing access to organisations protected by Fortigate firewall solutions.

doublepulsar.com

UK to ban under-16s from social media starting spring 2027. Platforms must require #age #verification, such as ID uploads or facial scans, for new accounts. Existing accounts are exempt, but this effectively ends anonymous account creation in the #UK. www.bleepingcomputer.com/news/securit...

UK to require ID or face scan before you can make social media accounts

Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a government ban on under-16s taking effect in spring 2027. Security ex...

bleepingcomputer.com

Mandiant and Google Threat Intelligence Group (GTIG) have identified an active compromise and extortion campaign attributed to UNC6240 (ShinyHunters) targeting Oracle PeopleSoft application infrastructure. #oracle #peoplesoft #compromise #google cloud.google.com/blog/topics/...

Anthropic opens Mythos-class capabilities to the public with Claude Fable 5 at $10/$50 per million tokens, days after calling for a global AI pause. #anthropic #mythos awesomeagents.ai/news/anthrop...

Anthropic Releases Fable 5 Despite Its Own AI Safety Warning

Anthropic opens Mythos-class capabilities to the public with Claude Fable 5 at $10/$50 per million tokens, days after calling for a global AI pause.

awesomeagents.ai

Search through 2M+ threat actor usernames and find where they operate. #threat #actors #search threatactorusernames.com

be mean to threat actors

search through 2M+ threat actor username records and discover where they operate

threatactorusernames.com

On Monday, June 1, 2026, a credential-stealing worm was distributed in npm packages published in the official @redhat-cloud-services channel (9.8 million total downloads). #redhat #worm #npm arstechnica.com/security/202...

Dozens of Red Hat packages backdoored through its official NPM channel

Anyone who has downloaded affected Red Hat packages should investigate immediately.

arstechnica.com

A new npm campaign linked to North Korea’s Lazarus Group shows how attackers are using familiar-looking package names to gain access to developers’ systems and software build environments. #lazarus #threat #group #npm #software hackread.com/lazarus-grou...

Lazarus Group Uses npm Brandjacking Campaign to Target Developers

North Korean Lazarus Group targets npm developers with brandjacking packages that mimic trusted tools, drop malware and put credentials at risk.

hackread.com

This object, in the hands of Italian children, is the most widely used torture instrument to inevitably corrupt the hearing of their neighbors. #flautodolce #italy