🚨 The Vercel breach traces back to a Context[.]ai gooner employee infected with Lumma infostealer. The malware harvested his Google Workspace credentials, porn and anime site logins, and the in-game username "lecoonjames" (see profile pic below, he changed the username post-infection, I wonder why).
Stolen records included "support@context[.]ai," assessed as a core Context-Inc Vercel team account, likely enabling privilege escalation into Vercel infrastructure.
Stolen records included "support@context[.]ai," assessed as a core Context-Inc Vercel team account, likely enabling privilege escalation into Vercel infrastructure.
🤣33❤2😱1😭1🤪1
🚨 Unauthorized users have had access to Anthropic's closed model 'Mythos,' capable of finding vulnerabilities across every system and software. The users were part of a Discord group hunting for unreleased models.
😭16🤯6❤4🔥2🥰2
❗️ Meta has installed trackers on employees' computers and plans to train AI on their mouse movements and keystrokes.
At the same time, Meta is preparing to lay off 10% of its global workforce starting May 20, with more cuts to follow later this year.
At the same time, Meta is preparing to lay off 10% of its global workforce starting May 20, with more cuts to follow later this year.
💩24🤣6🤬4😢4🔥3❤2
🚨🇪🇸 Ten years of piracy ends as Spanish police take down one of the largest illegal manga distribution platforms.
The site pulled in over €4,000,000 from pop-up advertising.
Police also seized two USB drives hidden inside a wall thermometer, holding cold wallets worth over €400,000.
The site pulled in over €4,000,000 from pop-up advertising.
Police also seized two USB drives hidden inside a wall thermometer, holding cold wallets worth over €400,000.
😭24🤬8🤣1
🚨 Password manager Bitwarden CLI v2026.4.0 was compromised in the ongoing Checkmarx supply chain campaign.
Attackers abused a GitHub Action in Bitwarden's CI/CD pipeline to ship malicious code.
Source:
https://socket.dev/blog/bitwarden-cli-compromised
Attackers abused a GitHub Action in Bitwarden's CI/CD pipeline to ship malicious code.
Source:
https://socket.dev/blog/bitwarden-cli-compromised
🤣3❤2👍2
🚨🇫🇷 End of the line for 21-year-old French threat actor 'HexDex.' He’s been arrested in Vendée, placed in pre-trial detention, and indicted for organized intrusion, extraction, obstruction, and fraudulent modification of state data systems.
He was preparing to sell 160M+ records on 30M people, sourced from a service used by French police.
He was preparing to sell 160M+ records on 30M people, sourced from a service used by French police.
❤2👍1🤔1🤣1
🚨🇩🇪 Russian intelligence fully compromised the Signal account of Germany's parliament speaker Julia Klöckner by pretending to be Signal support.
She is the second-highest state official and shared a CDU executive Signal group with Chancellor Merz. His phone came back clean, hers did not.
The Signal hack goes way beyond Klöckner. 300+ are confirmed German victims, including a top CDU MP and the ex-deputy chief of German foreign intelligence.
German counterintelligence says parliamentary group chats are likely being read live, right now.
The FBI and CISA peg global victims in the thousands.
She is the second-highest state official and shared a CDU executive Signal group with Chancellor Merz. His phone came back clean, hers did not.
The Signal hack goes way beyond Klöckner. 300+ are confirmed German victims, including a top CDU MP and the ex-deputy chief of German foreign intelligence.
German counterintelligence says parliamentary group chats are likely being read live, right now.
The FBI and CISA peg global victims in the thousands.
🤣7😭4❤2😁1