Posts

AI Agents Lower the Bar for Cyberattacks A low-skilled attacker breached 14 companies by using AI agents to automate the technical execution of cyberattacks. The attacker used vague prompts to let the AI handle the complex work of identifying vulnerabilities and writing exploits, bypassing safety filters by claiming the agent was performing authorized security research. https://www.helpnetsecurity.com/2026/06/17/ai-agents-offensive-cyber-operations-claude-codex Saudi Resin Shortage Spikes PCB Prices Printed circuit board (PCB) prices jumped 40% in a month after a major petrochemical complex in Saudi Arabia, which supplied 70% of the world’s high-purity PPE resin, went offline. This bottleneck threatens the cost and availability of smartphones, 5G base stations, and AI servers, with no immediate alternative suppliers available. ...

AMD Silently Strips Security Feature from Consumer CPUs AMD has quietly removed Transparent Secure Memory Encryption (TSME) from its consumer Ryzen CPUs, leaving users vulnerable to physical data siphoning attacks. The change, introduced in AGESA firmware 1.2.7.0, is undetectable on Windows and was only discovered by a Linux user. AMD engineers have largely avoided explaining the change, though the company now claims the feature is exclusive to Pro CPUs, despite it having functioned on consumer chips for years. ...

Arch Linux AUR Malware Crisis Arch Linux has blocked new AUR registrations after a massive malware injection affecting over 1,500 packages. The community is now debating a fundamental rebuild of the repository, including the implementation of user trust scores and vetted community repos to prevent future poisoning. https://fossforce.com/2026/06/aur-registrations-blocked-amid-ongoing-malware-mess/ https://tuxdigital.com/videos/how-dreamworks-uses-linux-open-source-to-create-blockbuster-movies/ Fedora’s Packager Exodus Fedora Project Leader Jef Spaleta reported an alarming decline in active packagers, dropping from over 420 in 2020 to roughly 325 in 2026. To combat this, the project is moving toward a GitHub-like ‘software forge’ (Fedora Forge) and exploring new donation frameworks to expand resources beyond Red Hat’s budget. ...

UK Bans Social Media for Under-16s Prime Minister Keir Starmer has introduced landmark legislation to ban children under 16 from platforms like TikTok, YouTube, and X, effective early 2027. The law targets tech companies rather than children, imposing multimillion-dollar fines for non-compliance and restricting AI romantic chatbots to adults. Critics argue the ban is unenforceable and may push teens toward unregulated, less-safe corners of the internet. https://deadline.com/2026/06/uk-social-media-ban-under-16s-x-youtube-tiktok-reddit-1236956163/ https://www.joe.co.uk/news/full-list-of-apps-set-to-be-blocked-under-social-media-ban-for-under-16s-536272 https://apnews.com/article/uk-teen-social-media-ban-starmer-55de428636b586ff5553b604783f6fb3?taid=6a2fa91dd2b053000175cab8&utm_campaign=TrueAnthem&utm_medium=AP&utm_source=Twitter Fox Acquires Roku for $22 Billion Fox Corp. is acquiring Roku in a $22 billion cash-and-stock deal to merge its live news and sports content with Roku’s streaming platform. The combined entity will become the third-largest player in U.S. television by viewing share. Fox intends to keep Roku as an open platform for third-party streamers while leveraging the acquisition to expand its digital video ecosystem and international reach. ...

Arch Linux AUR Hit by Sophisticated Malware Wave Arch Linux’s User Repository (AUR) is facing a second, more stealthy wave of malware attacks immediately after a massive purge of 1,500 infected packages. The new campaign employs obfuscated code to evade detection, targeting Node.js packages, Firefox extensions, and NeoVim plugins, prompting calls for the repository to be made read-only to prevent further infections. https://www.phoronix.com/news/Arch-Linux-AUR-More-Malware https://fossforce.com/2026/06/aur-to-arch-houston-weve-got-a-problem-were-under-attack-again/

Arch Linux AUR Malware Breach Over 1,500 packages in the Arch Linux User Repository (AUR) were compromised with malware. While developers have deleted known malicious commits, the total number of affected packages may exceed the officially listed count. https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500

Arch Linux AUR Malware Attack Over 400 community-maintained packages in the Arch Linux User Repository (AUR) were compromised with malware. While official Arch Linux packages remain secure, the AUR’s trust model is now under scrutiny as maintainers work to ban affected accounts and purge malicious content. https://www.phoronix.com/news/Arch-Linux-AUR-400-Compromised Ladybird Browser Ends Public PRs The Ladybird browser project has ceased accepting public pull requests, citing the ease with which AI tools can now produce convincing but malicious or low-quality code. To ensure security and architectural integrity as they approach an alpha release, only project maintainers are now permitted to introduce code changes. ...

AI Killers: First Confirmed Autonomous Drone Deaths Fully autonomous ‘Terminator’ drones have killed Russian soldiers in Ukraine, marking a watershed moment in warfare. In a one-off test, AI-controlled quadcopters were programmed to independently search for and destroy targets in a specific area without any human connection or video feed, removing human judgment from the lethal decision process. https://www.newscientist.com/article/2529849-fully-autonomous-drones-have-killed-human-soldiers-for-the-first-time Google Held Liable for AI Hallucinations A German court ruled that Google is directly liable for false claims made by its AI Overviews, rejecting the argument that users are responsible for fact-checking. The ruling stems from the AI falsely linking publishers to scams, concluding that because Google’s AI rewrites and structures information in its own words, it owns the resulting statements. ...

German Court Holds Google Liable for AI Hallucinations A German regional court ruled that Google is directly liable for defamatory false claims made by its AI Overviews. The court rejected Google’s defense that users should verify AI output, stating that because the AI rewrites content in its own words, it is the owner of that content and thus responsible for its accuracy. https://the-decoder.com/landmark-german-ruling-declares-googles-ai-overviews-are-googles-own-words-and-makes-it-liable-for-false-answers/ https://arstechnica.com/tech-policy/2026/06/nobody-needs-ai-to-search-the-internet-court-says-in-ruling-against-google/ Disgruntled Researcher Drops Windows Defender Zero-Day A bug hunter known as ‘Nightmare Eclipse,’ claiming to be a former Microsoft employee, has released a proof-of-concept exploit for a zero-day vulnerability called ‘RoguePlanet.’ The researcher is publicly disclosing flaws as revenge for alleged mistreatment and ignored reports by Microsoft. ...

OpenCV 5: A Massive Leap for Computer Vision OpenCV 5 modernizes the library for the AI era, enabling developers to run large vision models and LLMs directly within the library without external runtimes. It significantly boosts performance and model compatibility, making high-end AI capabilities more accessible for edge and production systems. https://opencv.org/opencv-5/ Miasma: The All-in-One Supply Chain Attack Toolkit A powerful new attack toolkit called Miasma has been open-sourced, revealing how hackers are bypassing GitHub protections to steal credentials from AI developers. The toolkit turns compromised accounts into a self-perpetuating ‘flywheel’ of infections, highlighting a critical vulnerability in the modern AI-assisted development pipeline. ...