$ tail -f /var/log/news
What's happening in cyber, AI and software — every story tagged in plain words so you know what it's about before you click.
The people who find the bugs, ship the models and build the tools usually post about it first. Here's what they're saying.
[ .... ] tuning in to the pulse
@bleepingcomputer.com
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware.
bleepingcomputer.comFake security tools on GitHub push backdoors and infostealers
@campuscodi.risky.biz
I had a feeling SSHhole would be exploited... just not in 24h 🤣
@darkreading.bsky.social
Why Europe's Freezer Hacks Spread So Far, So Fast https://bit.ly/4izxyCl by Alexander Culafi #DRGlobal
bit.lyWhy Europe's Freezer Hacks Spread So Far, So Fast@darkreading.bsky.social
UK Warns Its Critical Infrastructure Faces Grave Risk https://bit.ly/48EQSti by Nate Nelson #DRGlobal
darkreading.comUK Warns Its Critical Infrastructure Faces Grave Risk
@simonwillison.net
Loved this riff about AI products by @reckless.bsky.social on the latest episode of the Vergecast - "The products aren't good enough to sell people on the costs." www.youtube.com/watch?v=-U4t...
@darkreading.bsky.social
US Government Email Systems Open to Abuse Thanks to Typos https://bit.ly/4Am6RZj by Nate Nelson
darkreading.comUS Government Email Systems Open to Abuse Thanks to Typos@bleepingcomputer.com
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain.
bleepingcomputer.comQNAP says hackers breaching NAS devices in Plex2Shell attacks
@josephcox.bsky.social
UK sex workers woke up to multiple platforms deleting or restricting their content because of the UK's new porn law, despite many of the videos actually not being illegal or having anything to do with the law www.404media.co/clips4sale-c...
404media.coUK Sex Workers Wake Up to Sites Purging Their Content Follow UK Porn Ban@bleepingcomputer.com
Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors.
bleepingcomputer.comVeeam warns of Software Appliance boot failures on AMD EPYC hosts@campuscodi.risky.biz
-Some OpenSSH instances take any password longer than 256 characters -Fridge hacks also went after French blood banks -French bank hacked for $133 million -Thai opposition targeted with spyware -Kremlin hacktivists claim fridge hacks P: risky.biz/RBNEWS630/ N: news.risky.biz/risky-bullet...
@emollick.bsky.social
One ongoing frustration is the lack of effort I see being put towards near-term, achievable crash projects to do good with AI at a national scale, whether those efforts are by the AI labs or by policymakers & NGOs using free models. We should be more ambitious about trying to solve hard problems.
@emollick.bsky.social
As I have written many times in the past years, any potential financial downturn in AI stocks will not greatly change the AI trajectory AI is not going away, companies are not slowing down adoption, nor is development slowing. We still need policy & effort so that AI is used to help us all thrive.
@zackwhittaker.com
Ah, forgot to mention: Every edition of this.weekinsecurity.com features a reader-submitted cyber-cat (or friend!). Security news + cats. That's pretty much the whole thing. 🐈⬛
@josephcox.bsky.social
new crimes just dropped www.404media.co/uk-crime-and...
404media.coIn the UK, Face Sitting Porn Might Land You in Jail@josephcox.bsky.social
This is a fantastic piece about how X — and really the online right, Silicon Valley, tech companies etc — were echo chambers and were completely out of touch with what ordinary people wanted www.404media.co/republicans-...
404media.coRepublicans Learn X Is the Echo Chamber
@natolambert.bsky.social
I regularly hear from people that my post-training book/writing has helped them get a job at labs by focusing on material that develops intuitions for how training methods work. It's very validating, because this type of "idea/math heavy" writing doesn't really sell many books.
@natolambert.bsky.social
Added score-centering, the popular training-inference-mismatch mitigation technique to the rl chapter of my book. It's a nice derivation to understand modern async rl. I also heard many times it was popular at closed labs. Section link: rlhfbook.com/c/06-policy-... Paper: arxiv.org/abs/2609.20807
rlhfbook.comReinforcement Learning | RLHF and Post-Training Book by Nathan Lambert
@nodejs.org
The new Node.js 27 Alpha release upgrades V8 to version 15.6, from the 14.6 used by Node.js 26. Let's take a look at what this means for developers and what the new version of V8 brings - New JS features and language changes - Performance improvements ..and more! nodejs.org/en/blog/anno...
nodejs.orgNode.js — Notable V8 changes from Node.js 26 to 27 (Alpha)