Risky Mr. Kim

#DEFCON may have taken a stand against pervert glasses but celebrating the other most fash-coded accessory is fine I guess

"Apple, Google, and Meta are very excited to announce the release of new AI-driven products. We guarantee that they will respect your privacy. Unfortunately, these products are not available in Europe, as they have laws to protect your privacy."

New: Regretful cities are literally covering their Flock cameras with black trash bags because they cannot figure out how to immediately exit their surveillance contracts or get the cameras taken down: www.404media.co/cities-are-c...

“XBOW found that Mythos was ‘good, but less powerful, at validating exploits’ and that the model could be ‘too literal and conservative,’ sometimes overstating the practical significance of its findings,” writes Sam Sabin in @axios.com. More on our analysis of Mythos Preview: https://bit.ly/4tA87Eo

This is *really* cool work by David Brumley, Seunghyun Lee, and the CMU crew. Instead of benchmarking against vuln discovery, ExploitBench evaluates the full F3AD pipeline m.cje.io/4wztnN7

"Bundestag President Julia Klöckner is among the victims of the current wave of attacks on Signal users" www.spiegel.de/politik/deut...

Brief announcement: Launching Unprompted.au later this year in Sydney — a new conference focused on offensive and defensive security research using AI, and on how AI is reshaping the field. Sister conference to Unprompted. More updates coming soon

“We’re on the side of humans against machines, which sounds a little bit like science fiction, but that’s very concretely what we do.” A mission against malware has turned into a battle against drone warfare for Mikko Hyppönen, and @lorenzofb.bsky.social explores why in his latest feature.

Please send me the best Sora obituaries for my schadenfreude needs.

Meta and TikTok let harmful content rise after evidence outrage drove engagement, say whistleblowers. Fascinating deep dive 👇 www.bbc.com/news/article...

The International AI Safety Report 2026 concludes that fully autonomous attacks aren’t here yet…the experiences of teams deploying real-world autonomous offense tell a different story. Explore the gap between assumption and operational reality in our latest blog: https://bit.ly/4sjKrnN

www.buchodi.com/your-duoling...

Are you selling a security product? Can you please do us both a favor and just tell me what it is? Just explain literally what it does and how. Risky Business was kind enough to start a catalogue with useful descriptions for their advertisers, but can we please normalize this? risky.biz/catalog/

NEW: For months, I’ve been working on the story of Peter Williams, the former U.S. defense contractor who stole several hacking tools and then sold them to a Russian broker. Here’s what we know about the case, what we still don’t know, and a peek behind the scenes at how I reported this story.

Peter Williams, the former head of U.S. hacking tools maker L3Harris Trenchant, was sentenced to seven years in prison for stealing and selling his former company’s hacking and surveillance tools to a Russian firm.

My story on Elon Musk cutting safeguards at xAI is on the front page of today's @washingtonpost.com. I’m also among 100’s of reporters laid off. I absolutely loved my job my brilliant coworkers & the thrill of reporting @ the center of forces upending the world: AI & Silicon Valley’s political power

Curl is ending its bug bounty program due to a surge of low-quality AI-generated reports.

This one, just minutes old. A flagless Putin-tanker entering Baltic Sea. There is 0 legal reasons to not stop these ones. Law is clear, any navy can stop them for inspection anywhere. bsky.app/profile/pa.n...

Don’t know what to trust on your feed? How did we get here? Next Thursday, @eliothiggins.bsky.social and @cward1e.bsky.social unpack the rise, backlash and future of counter-disinformation. Join us for a live Q&A on Discord. 11am EST / 5pm CET discord.gg/ApEnkSK6?eve...

Spanish judge closes probe into NSO in wake of Pegasus hack of several govt officials, incl the PM. Court says Israel ignored five requests for information and probe can't proceed as a result. NSO has historically been shielded from accountability by the Israeli govt therecord.media/spanish-judg...

I was recently laid off, so I’m officially open to new opportunities. If you need a Hacker, or a teachable moment using Red Team tactics. I can also be a trainer, community builder & liaison. I want more than a job I need a company & purpose I can believe in. Please share! 💜🤗💜

Boycott the World Cup - Growing sense of embarrassment at Fifa over Donald Trump peace prize www.theguardian.com/football/202...

I reverse engineered DexProtector, the security solution protecting applications like Revolut and other banking apps. From custom ELF loaders to vtable hooking, here is an insight into how these protections work and their limitations. www.romainthomas.fr/post/26-01-d...

"Flights across Greece were grounded on Sunday after a collapse of radio frequencies crippled air traffic communication, stranding thousands of travellers and bringing airport operations to a halt." www.reuters.com/world/europe...

Crypto, queens and taking notes on a massive criminal conspiracy. Smashing Zhimin Qian’s 5 Billion empire Good insights into money laundering at this scale youtu.be/EymtOOJmRpo?...

“AI is helping to identify over 70% of targets. Sometimes AI is hallucinating targets. So we always need humans in the loop.” - Heli Tiirmaa-Klaar in her SANS CyberThreat keynote “Cyber war by proxy: What Ukraine teaches us about defense coalitions and digital policy at scale”

A recent study has found that while 95% of respondents are confident about their ability to recover from a ransomware attack using their backups, only 15% of those who were attacked managed to do so investors.opentext.com/press-releas...

The Dutch General Intelligence and Security Service has stopped sharing certain information with the United States: “Sometimes we no longer share things,” officials say, because the information has been finding its way into Kremlin hands. www.volkskrant.nl/binnenland/n...

AI is learning disinfo. A fake quote about Hamas spread on X… and now Google’s Gemini is repeating it as fact. From rumour → news → “AI truth.” Read how it happened How Google’s Gemini AI is Learning Pro-Israel Disinformation From Social Media open.substack.com/pub/marcowen... #Dysinfluence

Stop what you’re doing and read this… don’t get surprised by what’s coming. It’s time to rethink everything you’re doing on cyber defense. H/T to Gadi and Bruce for partnering on this opinion piece. www.csoonline.com/article/4069...

Stanford neuroscientist Anna Lembke on dopamine addiction, including from social media. www.youtube.com/watch?v=J4jT...

Jaguar Land Rover says a cyber-attack has "severely disrupted" vehicle production as well as its retail operation www.bbc.com/news/article...

Chatbots are not people and should not be treated as such. But the companies providing services that mimic the services provided by people have to be responsible for the services they provide, writes Mark MacCarthy. www.techpolicy.press/ai-companies...

Good article out from @danielmiessler.bsky.social on using AI properly. danielmiessler.com/blog/how-to-...

XBOW is now generally available. See it in action → Book a demo with our team. www.xbow.com

When there's a seemingly coordinated influencer campaign.

Of the hundreds of thousands hit by the atomic bombings in Hiroshima and Nagasaki, 10 to 20 per cent were Korean. Though they had much in common with Japanese victims, they were denied specialized medical coverage and sidelined.

I present to you the power and possibility of using AI for entertainment. All it takes is an idea. Trust me, it's going to get a lot worse from here on out. Enjoy 😆 www.youtube.com/watch?v=lTcU...

NEW: Someone has defaced a U.S. Department of Health and Human Services with gay and LGBTQ+-themed AI slop spam. The site has been defaced since at least mid-May, and it appears to be part of wider spam campaign. techcrunch.com/2025/06/11/u...

While people blabbed about “alignment” and “super intelligence”, the much shorter-term, obvious from the start, devastating damages of chatbots powered by LLMs are here on full display. And no one built safeguards for them.

A security researcher details how he discovered a zero-day vulnerability in the Linux kernel's SMB implementation by analyzing the code using OpenAI's o3 API (Sean Heelan/Sean Heelan's Blog) Main Link | Techmeme Permalink

A website attempted to trick a user into executing Windows commands as part of a CAPTCHA verification. The user was directed to press key combinations involving (win + r), (ctrl + v), and (enter), which they suspected might be a hacking attempt. They plan to test it in a VM later.

OMG, Trump Administration revoked the certification for Harvard to enroll international students! ↘️ www.nytimes.com/2025/05/22/u...

TAN ZHONGYI JUST BEAT RICHARD RAPPORT!!!!!!! 🤩🥳🎉😃👏👏 IT'S THE FIRST TIME TAN HAS EVER BEATEN A SUPER-GM (!!), AND IT'S NOT JUST ANY SUPER-GM, IT'S RICHARD RAPPORT (2722)! 🤯 lichess.org/broadcast/te... 📷: Mikael Svensson #chess #womeninchess