Skip Navigation
www.darkreading.com Apple CocoaPods Bugs Expose Millions of Apps to Code Injection

Critical dependency manager supply chain vulnerabilities have exposed millions and millions of devices to arbitrary malware for the better part of decade.

Apple CocoaPods Bugs Expose Millions of Apps to Code Injection

> Critical dependency manager supply chain vulnerabilities have exposed millions and millions of devices to arbitrary malware for the better part of decade.

1
www.bleepingcomputer.com Cisco warns of NX-OS zero-day exploited to deploy custom malware

Cisco has patched an NX-OS zero-day exploited in April attacks to install previously unknown malware as root on vulnerable switches.

Cisco warns of NX-OS zero-day exploited to deploy custom malware

> Cisco has patched an NX-OS zero-day exploited in April attacks to install previously unknown malware as root on vulnerable switches.

0
www.darkreading.com Prudential Data Breach Victim Count Soars to 2.5M

The company seemingly underestimated the severity of the breach after originally providing a head count of roughly 36,000 impacted individuals.

Prudential Data Breach Victim Count Soars to 2.5M

> The company seemingly underestimated the severity of the breach after originally providing a head count of roughly 36,000 impacted individuals.

0
www.darkreading.com Google Opens $250K Bug Bounty Contest for VM Hypervisor

If security researchers can execute a guest-to-host attack using a zero-day vuln in the KVM open source hypervisor, Google will make it worth their while.

Google Opens $250K Bug Bounty Contest for VM Hypervisor

> If security researchers can execute a guest-to-host attack using a zero-day vuln in the KVM open source hypervisor, Google will make it worth their while.

2
www.theverge.com Apple could announce a Google Gemini deal this fall

How would you like your iOS 18 chatbots served?

Apple could announce a Google Gemini deal this fall

> How would you like your iOS 18 chatbots served?

1
US to criminally charge Boeing, seek guilty plea, sources say

> The U.S. Justice Department will criminally charge Boeing with fraud over two fatal crashes and ask the planemaker to plead guilty or face a trial, two people familiar with the matter said on Sunday.

0
www.euractiv.com EU Competition Commissioner says Apple's decision to pull AI from EU shows anticompetitive behavior

Apple's decision not to launch its own artificial intelligence (AI) features in the EU is a "stunning declaration" of its anticompetitive behavior, EU Commission Vice-President Margrethe Vestager said on Thursday (27 June).

EU Competition Commissioner says Apple's decision to pull AI from EU shows anticompetitive behavior

> Apple's decision not to launch its own artificial intelligence (AI) features in the EU is a "stunning declaration" of its anticompetitive behavior, EU Commission Vice-President Margrethe Vestager said on Thursday (27 June).

0

> Maybe it’s made with AI, or maybe it was just resized.

1
Fintech company Wise says some customers affected by Evolve Bank data breach
techcrunch.com Fintech company Wise says some customers affected by Evolve Bank data breach | TechCrunch

The news highlights that the fallout from the Evolve data breach on third-party companies — and their customers and users —  is still unclear.

Fintech company Wise says some customers affected by Evolve Bank data breach | TechCrunch

> The news highlights that the fallout from the Evolve data breach on third-party companies — and their customers and users —  is still unclear.

0

> The speaker is only six years old.

2
www.theverge.com Some Pixel 6 owners say factory resets have bricked their phones

It’s probably best not to reset your phone for a bit.

Some Pixel 6 owners say factory resets have bricked their phones

> It’s probably best not to reset your phone for a bit.

0
YouTube now lets you request removal of AI-generated content that simulates your face or voice
techcrunch.com YouTube now lets you request removal of AI-generated content that simulates your face or voice | TechCrunch

Simply submitting the request for a takedown doesn't necessarily mean the content will be removed, however.

YouTube now lets you request removal of AI-generated content that simulates your face or voice | TechCrunch

> Simply submitting the request for a takedown doesn't necessarily mean the content will be removed, however.

2
arstechnica.com Bleeding subscribers, cable companies force their way into streaming

Companies like Charter brought about the streaming industry they now want to join.

Bleeding subscribers, cable companies force their way into streaming

> Companies like Charter brought about the streaming industry they now want to join.

1

> Silvergate didn’t notice fraudulent transactions by FTX.

Case file: https://s3.documentcloud.org/documents/24785653/945ca7a4-312d-4637-b202-31fd1bea57e4.pdf

0
www.theguardian.com Meta accused of breaking EU digital law by charging for ad-free social networks

European Commission objects to ‘pay or consent’ model for users of Facebook and Instagram

Meta accused of breaking EU digital law by charging for ad-free social networks

> European Commission objects to ‘pay or consent’ model for users of Facebook and Instagram

6
www.theguardian.com Porn sites and Meta among those tasked with drafting Australia’s online child safety rules

Regulator gives industry groups six months to come up with draft code, expected to include rules about age verification

Porn sites and Meta among those tasked with drafting Australia’s online child safety rules

> Regulator gives industry groups six months to come up with draft code, expected to include rules about age verification

3
Sweden | Swedes take a new step in parental leave. Grandparents can now get paid to take care of grandkids
apnews.com Swedes take a new step in parental leave. Grandparents can now get paid to take care of grandkids

Sweden is launching a groundbreaking new law, allowing grandparents to care for their grandchild and get paid.

Swedes take a new step in parental leave. Grandparents can now get paid to take care of grandkids

> Sweden is launching a groundbreaking new law, allowing grandparents to care for their grandchild and get paid.

Archived version: https://archive.ph/v5wCy

1
apnews.com 3 civilians killed in a bomb explosion in Pakistan and 2 security personnel die in a rocket attack

Officials say a roadside bomb explosion in Pakistan’s volatile Baluchistan province has killed a woman and two children. Police blamed “terrorists” for Monday's attack.

3 civilians killed in a bomb explosion in Pakistan and 2 security personnel die in a rocket attack

> Officials say a roadside bomb explosion in Pakistan’s volatile Baluchistan province has killed a woman and two children. Police blamed “terrorists” for Monday's attack.

Archived version: https://archive.ph/r6TjB

0
Spain: Supreme Court upholds Puigdemont arrest warrant
www.dw.com Spain: Supreme Court upholds Puigdemont arrest warrant – DW – 07/01/2024

Catalan leader Carles Puigdemont is accused of embezzlement during Catalonia's 2017 independence bid. He had hoped to return to Spain without fear of arrest after an amnesty law was passed by parliament.

Spain: Supreme Court upholds Puigdemont arrest warrant – DW – 07/01/2024

> Catalan leader Carles Puigdemont is accused of embezzlement during Catalonia's 2017 independence bid. He had hoped to return to Spain without fear of arrest after an amnesty law was passed by parliament.

0
Russia is studying an intact U.S. ATACMS missile guidance system, says RIA

> Russian forces have captured an intact guidance system from a long-range U.S.-made ATACMS missile and are studying the American military technology, Russia's RIA state news agency said on Monday.

Archived version: https://archive.ph/FHzJK

2
Freed Gaza hospital head accuses Israel of repeated torture
  • Any countries want to stop all funding until claims can be investigated, or do they prefer to stick to their double standards?

  • Microsoft’s AI boss thinks it’s perfectly OK to steal content if it’s on the open web
  • All of them are considered in tandem, not individually.

    Considering that OpenAI is making a commercial profit from developing its ML models

    They are losing money during development (all those GPUs are not free and running them costs a lot of energy), they are making the money after it's trained. Just factual inaccuracy.

    And being used for commercial purpose is not automatic rejection. Take YouTube, where fair use comes up constantly. Almost all the cases are for commercial purpose, but most qualify under fair use.

    #3 also because the model usually ingests the entire work, not just part of it.

    While they are trained on full works, the used work in the result is different. Probably minimal considering the size of the models. The fact that some courts already ruled that "AI" works can't be copyrighted gives weight to the argument that it's a unique work.

    It's very hard to argue that "AI" generated is different from someone looking at the original and making a copy by hand. And since the latter is allowed, by the same token is the former.

  • Judge denies Alec Baldwin’s plea to dismiss case in fatal Rust shooting
  • Which is both sad and confusing as he pulled it out on set with the intention to pull the trigger for the scene.

    It wasn't even an actual scene being filmed, It was blocking (working out the details of an actor’s moves in relation to the camera) where non-functioning props like cardboard are usually used. The scene script in question also didn't even have him pointing the gun. He was supposed to only draw the gun out partially.

  • NSFW
    Lawsuit Claims Microsoft Tracked Sex Toy Shoppers With 'Recording in Real Time' Software
  • I think my workplace would be more concerned about the fact that their own sex toy shopping is tracked than the fact that I use sex toys.

    But I marked it as NSFW anyway.

  • HubSpot says it's investigating customer account hacks
  • At this point, it’s unclear what’s the extent of the incident and how many HubSpot customers were affected.

  • TeamViewer's corporate network was breached in alleged APT hack
  • While TeamViewer states there is no evidence that its product environment or customer data has been breached, its massive use in both consumer and corporate environments makes any breach a significant concern as it would provide full access to internal networks.

  • Yemen: Houthis Disappear Dozens of UN, Civil Society Staff
  • Both things can be true. And in this case they are.

  • rabbit data breach: all r1 responses ever given can be downloaded
  • Checkout coffeezilla/voidzilla coverage if you haven't seen it yet.

  • CISA: Most critical open source projects not using memory safe code
  • Fucking pay them or write them yourselves.

    This. Refactoring the whole code is insanely time intensive, even if developers know multiple languages. All these critical components you rely on, you use without any compensation or support and then dare to complain it's not to your security standards. Fix it, or pay for it to be fixed.

  • To those of you with nothing to hide: One day you might have. Because you don’t make the rules.
  • It really depends on each person's threat model. But there are a few things everyone would benefit from. Like VPN, email aliasing, password manager, 2FA/MFA. They don't have any convenience cost and in most cases make your life easier.

    If you are interested in learning more:

  • Firefox now lets you choose your preferred AI chatbot in its Nightly builds
  • I was being factual. Unless you can dispute anything I said?

  • Firefox now lets you choose your preferred AI chatbot in its Nightly builds
  • There is also Vivaldi (based on Chromium/Blink) which is employee owned, but the choices are shrinking.

    Mozilla Foundation is still non-profit, but Mozilla Corporation is not. And while they claim to operate by Mozilla Manifesto, it's non-binding and has been broken multiple times. Remember Pocket and their promise to open source it?

  • Welcome to the fediverse: Your guide to Mastodon, Threads, Bluesky, and more
  • I know there are strong feelings about posts that include Threads and to lesser extent Bluesky, but it's important to know what corporate media thinks of Fediverse and how they compare it to corporate alternatives. You are encouraged to dissect the article and point out all of its failures, or just downvote the post and move on. But I won't be removing it.

    P.S. The author of the article definitely has a pro VC stance.

  • Firefox now lets you choose your preferred AI chatbot in its Nightly builds
  • It's internal. They are becoming irrelevant (their browser market share have been shrinking for years now), so they are jumping all the new hype trends now. They literally just became an ad company. We have Google, Apple, Brave and Mozilla all being an ad companies that produce browsers.

  • BrikoX BrikoX @lemmy.zip

    Have strong opinions, but I welcome any civil fact-based discussion.

    Alt account: /u/BrikoX@lemmy.sdf.org

    Posts 8.2K
    Comments 1.4K