A security breach at the maker of ChatGPT last year revealed internal discussions among researchers and other employees, but not the code behind OpenAI’s systems.

Research on how Apple's Find My network can be exploited to track non-Apple devices

Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.

TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.

next.
we hijacked cursor via jira mcp by submitting a support ticket

cursor harvests and exfiltrate all creds from your dev machine

and then reports back to the dev that "the 2-hour downtime that affected user transactions has been resolved"

#DEFCON #BHUSA…

A hacker claims a full breach of Russia’s Max Messenger, threatening to leak user data and backend systems if demands are not met.

discord’s age verification vendor Persona just got hacked.

openAI + US government + persona have been running identity surveillance since nov 2023

anyone who verified age on discord is now traceable.

nothing is private anymore.

https://vmfunc.re/blog/persona