Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.

TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.

next.
we hijacked cursor via jira mcp by submitting a support ticket

cursor harvests and exfiltrate all creds from your dev machine

and then reports back to the dev that "the 2-hour downtime that affected user transactions has been resolved"

#DEFCON #BHUSA…

A hacker claims a full breach of Russia’s Max Messenger, threatening to leak user data and backend systems if demands are not met.

discord’s age verification vendor Persona just got hacked.

openAI + US government + persona have been running identity surveillance since nov 2023

anyone who verified age on discord is now traceable.

nothing is private anymore.

https://vmfunc.re/blog/persona