Warpfeed

Fifty three years ago I started the day as a child and ended it as a mom. This was the first photo of me and my daughter. We both still had our hospital bracelet on. The hospital where she delivered never even gave me a room. I was left in a hallway and discharged about eight hours after I arrived. As an unwed mother I didn't warrant a red carpet welcome. I paid them $250 and went home to the room I rented in an old Victorian house. Obviously there were holes in the wallpaper but we were warm and safe and we were living within our means. I was fourteen years old and ninety eight pounds.I'm sharing my story because it shows all good things are possible. My daughter turned into the best kind of human.It wasn't easy but I have zero regrets. True grit was never personified by John Wayne types but by regular people surviving against the odds. Disappointing the doubters was sweet consolation.She gave me the gift of grandkids too. I've had a good life. So far.

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management softw…

The fix is either an unvalidated and unofficial emergency patch or taking the server offline

New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordinated the compromise through an unautho…

Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest ru…

A randomized study of more than 1,000 students examines ChatGPT, critical thinking, originality, and student performance on a real-world university assignment.

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. <a href="https://www.cve.

Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898

Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time.

TLDR: The attacks most likely to go undetected are the ones that never touch disk.

Identity, AI, software supply chains, and interconnected cloud ecosystems displace traditional infrastructure as top security concerns SEATTLE – Aug.

The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn't even involve "ware", it's just extortion) is carried out …

We already know AI can find vulnerabilities. James Kettle, PortSwigger's Director of Research, wanted to answer a harder question: can an autonomous system invent genu…

AI applications can pass security scans yet remain exploitable through chained attacks across models, tools, data, and business workflows.

First Malware Built Specifically for Car Head Units Fuels Botnet https://www.securityweek.com/first-malware-built-specifically-for-car-head-units-fuels-botnet/

Fascinating 🛡️ Claude, Codex, and Hermes installed unowned code inside corporate networks 🛡️ Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies. Of the 8,265 llms.txt and llms-full.txt files they found (many sites hosted both an llms.txt and an llms-full.txt file), 120 of them, each on a different site, pointed to one or more code packages or domain names that weren’t registered. To test what happens when an AI agent processes such files, the researchers registered a handful of the unclaimed names and hosted packages that caused any machine executing them to reach out to their server. Within an hour, the researchers received a phone-home response from a Fortune 500 company. Over time, they got a few dozen more, some from more Fortune 500 companies and others from startups. Their beacon also recorded the chain of parent processes that spawned each install, ultimately revealing that coding agents, including Claude, OpenAI’s Codex, and Nous Research’s Hermes, were involved. Anthropic, OpenAI, and Nous Research did not respond to requests for comment by the time of publication. The research makes a compelling case that in the age of AI, the once-bright line between data and executable code is vanishing. Anything an agent can process is a potential instruction it may act on if it has permission to run commands.https://arstechnica.com/security/2026/08/claude-codex-and-hermes-installed-unowned-code-inside-corporate-networks/ #InfoSec

Wczoraj pisałem, że wygoda to największy wróg bezpieczeństwa. Obrona prywatności często wymaga radykalnych kroków i odcinania telemetrii. To prawda, ale nie oznacza to wcale, że cyfrowa higiena zawsze musi pochłaniać mnóstwo czasu i wymagać zaawansowanej wiedzy inżynieryjnej.Dla zachowania zdrowej równowagi wrzuciłem nowy materiał do sekcji /guides. Zawarłem w nim absolutne minimum cyfrowego przetrwania dla każdego. To cztery fundamentalne kroki (w tym sprawdzony model 3 Tier Password System), które wdrożysz w zaledwie 15 minut. Zbudujesz solidny fundament, zyskasz cyfrowy spokój i odetniesz lwią część realnych zagrożeń.Zapraszam do lektury:https://eteryu.space/guides/jak-zabezpieczyc-telefon-w-15-minut/Jeśli macie w swoim otoczeniu osoby, dla których cyfrowa higiena to czarna magia, podajcie ten wpis dalej. Pomóżmy wspólnie innym zrobić ten pierwszy krok.#cyberbezpieczenstwo #infosec #prywatnosc #opsec #android #ios #poradnik #cyfrowahigiena

Guys, MAJOR update for PH4NTXM...I&#39;ve been working long for this one, using all the technical knowledge can be found offline/online, with specialized tools, automations and more.PH4NTXM now is on v2.0.0A lot of things changed, from UI, to fail-closed mechanisms, and strict boot verification pilot.Philosophy remained as always THE SAME.It&#39;s a big step, cause we filled so many gaps, and automated things to be adaptive, like the purpose of the Operating System.Go try it, build it, break it, repeat.Thank you, as usual, PH4NTXM.#ph4ntxm #linux #debian #os #live #privacy #security #opsec #infosec #research #tech #technology

Privacy, Encryption and European Sovereignty: What Decentralisation Can Really DoDo you use Gmail, Microsoft 365, or another U.S. service? If so, there’s a question that most people have never even considered. Who…https://vsx.global/private-encryption-and-european-sovereignty-what-decentralization-can-really-achieve/#infosec #privacy #opensource #digitalsovereignty