Tech News

1. Cybersecurity / Data Breaches:

   • Microsoft has confirmed a bug introduced in its June 2026 Windows updates that causes incorrect filenames to appear in the Recycle Bin's confirmation dialog, potentially impacting the user experience for deleting files. 👉 bleepingcomputer.com
   • The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its vendor that exposed personal information, including driver's licenses and passports, for over three million individuals. 👉 bleepingcomputer.com
   • Klue, a market intelligence platform, experienced an OAuth breach that allowed threat actors to steal Salesforce data, including customer information and API tokens, leading Salesforce to disable the app's integration. 👉 bleepingcomputer.com 👉 bleepingcomputer.com
   • International law enforcement agencies have disrupted the SocGholish botnet infrastructure, seizing 106 servers and cleaning nearly 15,000 infected WordPress websites as part of "Operation Endgame." 👉 bleepingcomputer.com
   • The Texas government data breach affecting over three million driver's licenses and passports was attributed to a vendor compromise, highlighting a significant risk to personal information. 👉 techcrunch.com
   • A new ransomware operation named 'Prinz Eugen' is prioritizing recently modified files for encryption and operates without leaving a ransom note on compromised systems. 👉 bleepingcomputer.com
   • Microsoft has attributed a supply chain attack involving the Mastra AI platform to the North Korean hacking group Sapphire Sleet (BlueNoroff), which compromised over 140 npm packages. 👉 bleepingcomputer.com
   • CISA has warned Fortinet users to secure their devices against the "FortiBleed" leak, which exposed nearly 74,000 credentials for FortiGate firewalls and VPNs. 👉 bleepingcomputer.com
   • Threat actors are exploiting a vulnerability in the WordPress plugin Gravity SMTP, allowing them to steal sensitive data such as API keys and OAuth tokens. 👉 bleepingcomputer.com 👉 thehackernews.com
   • A New York man faces cyberstalking charges for allegedly using AI-generated nude images and fabricated messages to harass a college student. 👉 bleepingcomputer.com

2. AI / Technology Developments:

   • Signal's President Meredith Whittaker has cautioned that AI chatbots should not be considered "friends," emphasizing the potential risks of AI in surveillance and the need to protect private communication. 👉 techcrunch.com
   • Nobel laureate John Jumper, a key figure in Google DeepMind's AlphaFold project, is leaving the company to join its competitor Anthropic, signaling a continued talent migration in the AI sector. 👉 techcrunch.com 👉 bloomberg.com^$
   • OpenAI has released a 750-task benchmark called LifeSciBench to evaluate AI systems' capabilities in supporting life science research, though its top-performing model still failed nearly two-thirds of the tasks. 👉 slashdot.org
   • The company Allbirds is pivoting to become an AI infrastructure company, with CEO Nadia Carlsten outlining plans to deploy compute clusters, though the venture is currently without employees. 👉 techcrunch.com
   • A speculative scenario titled "Europe 2031" suggests the EU could face economic and political instability if it fails to keep pace with the US and China in AI development. 👉 theguardian.com
   • Researchers have developed an ultrasonic espresso brewing process that uses sound waves instead of hot water, reducing energy consumption by up to 75% while producing comparable espresso-strength coffee. 👉 slashdot.org
   • Security researchers have detailed an "AutoJack" exploit that allows a web page to compromise an AI browsing agent, enabling remote code execution on the host machine by tricking the agent into loading malicious JavaScript. 👉 thehackernews.com
   • Apple has released firmware updates to patch a vulnerability in its Beats Studio Buds that could allow nearby attackers to spy on users through the earbuds' microphone. 👉 thehackernews.com
   • F5 has released updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. 👉 thehackernews.com
   • Researchers have developed a self-replicating AI worm that operates entirely on local, open-weight AI models, raising concerns about AI security. 👉 thehackernews.com
   • Google's AI coding development team member, John Jumper, who won a Nobel Prize, is leaving Google DeepMind to join Anthropic, highlighting the competitive landscape for AI talent. 👉 bloomberg.com^$ 👉 techcrunch.com

3. Gaming / Entertainment:

   • Claude Guillemot, co-founder of Ubisoft and chairman of Guillemot Corporation, died at the age of 69 following a plane crash in France. 👉 bloomberg.com^$
   • Amazon MGM has dropped Luca Guadagnino's Sam Altman biopic, "Artificial," fueling speculation about potential conflicts arising from the film's reportedly unflattering portrayal of Altman, given Amazon's significant investment in OpenAI. 👉 slashdot.org

4. Legal / Regulatory:

   • Four gamers are suing Sony Interactive Entertainment, alleging that its PlayStation store's use of terms like "Buy Now" violates California law by not clearly disclosing that game purchases are licenses, not ownership. 👉 slashdot.org
   • Waymo is recalling nearly 3,900 robotaxis in the U.S. due to a software issue that caused some vehicles to enter freeway construction zones, following 13 reported incidents. 👉 slashdot.org
   • Three Amazon employees have filed a civil-rights complaint alleging retaliation after they publicly supported Seattle regulations for data centers. 👉 slashdot.org
   • Norway is moving to prohibit generative AI use for elementary school children aged 6-13, while allowing supervised use for older students, as a measure to address declining test scores and ensure foundational skill development. 👉 slashdot.org

5. US Policy / Economy:

   • The U.S. Department of Education announced it will temporarily increase the automatic payment interest rate discount for federal student loan borrowers from 0.25% to 1% from July 1, 2026, through June 30, 2028. 👉 slashdot.org

6. Hardware / Infrastructure:

   • The Society of Motion Picture and Television Engineers (SMPTE) has made its entire catalog of technical standards freely available, removing a long-standing paywall and aiming to improve accessibility for developers and educators in the media technology industry. 👉 slashdot.org
   • Millions of internet-connected devices, particularly "knockoffs" purchased online, can contain secret digital backdoors that allow unauthorized access to home internet and can be used for cyberattacks, ad fraud, and more. 👉 slashdot.org

7. Cybercrime / Malware:

   • Microsoft has detected a new self-propagating malware called "Crypto Clipper" that spreads via USB drives, targets cryptocurrency credentials, steals information through clipboard monitoring, and takes screenshots. 👉 slashdot.org
   • The Free Software Foundation (FSF) has patched vulnerabilities discovered in GNU Savannah, its code hosting platform, and confirmed there is no evidence of sensitive data compromise or supply chain attacks. 👉 slashdot.org
   • An unauthorized alert containing the message "misantropi4" was sent to cell phones in several Brazilian states, suspected to be a hacker attack that forced the National Civil Defense's warning platform offline. 👉 slashdot.org

8. Historical Technology:

   • Alan Turing's private papers reveal he developed a working model of a portable voice encryption device called "Delilah" in the 1940s, inspired by German cipher machines. 👉 slashdot.org

9. Business / Finance:

   • Robert Cringely, a tech pundit, argues that the AI industry's focus on scaling models may be misguided, proposing an architectural alternative that separates language generation from fact verification to address AI hallucinations. 👉 slashdot.org

10. Cybersecurity News from BleepingComputer and The Hacker News:

    • Microsoft is reportedly working on a patch for a zero-day vulnerability in Microsoft Defender, tracked as "RoguePlanet," which allows for SYSTEM access on updated Windows systems. 👉 bleepingcomputer.com
    • The Gentlemen ransomware-as-a-service (RaaS) operation is employing a suite of EDR killers, including "GentleKiller," to disable defenses and attract experienced hackers with a 90/10 affiliate revenue split. 👉 thehackernews.com 👉 krebsonsecurity.com
    • The FortiBleed leak has exposed credentials for approximately 86,644 Fortinet FortiGate devices, prompting warnings from CISA for users to secure their systems. 👉 thehackernews.com 👉 bleepingcomputer.com
    • Researchers have discovered an unpatchable exploit called 'usbliter8' that breaks the SecureROM boot chain on Apple's A12 and A13 chips, allowing arbitrary code execution with physical access. 👉 thehackernews.com
    • A critical vulnerability in Splunk Enterprise, tracked as CVE-2026-49160, is being actively exploited and allows attackers to run code without authentication. 👉 bleepingcomputer.com 👉 thehackernews.com
    • Nintendo confirmed that data was stolen from the third-party TinyPulse service used internally, though its own systems were not compromised. 👉 bleepingcomputer.com
    • Vulnerabilities in two NGINX Open Source modules have been patched by F5, addressing critical flaws that could enable remote code execution. 👉 thehackernews.com
    • The Popa botnet, linked to the Vo1d botnet and affecting Android TV boxes, has been associated with NetNut, a residential proxy service operated by Alarum Technologies. 👉 krebsonsecurity.com
    • Lawmakers are demanding answers from CISA regarding a data leak involving exposed AWS GovCloud keys and internal CISA system credentials on a public GitHub repository. 👉 krebsonsecurity.com
    • Canadian authorities arrested a 23-year-old Ottawa man suspected of building and operating the Kimwolf IoT botnet, which was used in large-scale DDoS attacks. 👉 krebsonsecurity.com

1782011460000