One of the most popular JavaScript packages on earth Axios has been compromised The Axios NPM package has been compromised and the maintainer of the project has been locked out of their account. This will go down in history as one of the most successful software supply chain attacks ever

This is a big deal. Already seeing evidence of this by way of OpenClaw installations.

opensourcemalware.co...

www.stepsecurity.io/...

thank you :)

All fellow UniFi users should update their network application tonight.

community.ui.com/releases/Sec...

Meta Is Shutting Down Horizon Worlds on Meta Quest Meta’s flailing virtual reality social experience is being discontinued in June. It's part of Meta’s broader moves to slim down the business that became its namesake.

Less than five years ago, Mark Zuckerberg was so committed to the metaverse that he renamed his whole company after it. Anyways here’s @boone.bsky.social

In case you’re wondering how his night is going, Musk is currently reposting Grok AI videos made by his fans including one of him kissing a random woman

"AG Paxton alleged that Samsung uses automated content recognition (ACR) technology, which can capture hundreds of images of what’s on your TV screen each minute, without first obtaining Texans’ expressed, informed consent."

Boom in illegal porn sites following Online Safety Act age verifications | LBC Data seen by LBC shows a big spike in internet traffic to porn sites operating without mandatory age verification checks.

Oh no who could have foreseen this?

It's not just Samsung using ACR to track what you're watching www.nytimes.com/wirecutter/r...

"AG Paxton alleged that Samsung uses automated content recognition (ACR) technology, which can capture hundreds of images of what’s on your TV screen each minute, without first obtaining Texans’ expressed, informed consent."

OpenAI Had Banned Military Use. The Pentagon Tested Its Models Through Microsoft Anyway Sources allege the Defense Department experimented with Microsoft’s version of OpenAI technology before the ChatGPT-maker lifted its prohibition on military applications.

In 2023, OpenAI’s usage policy explicitly banned the military from accessing its AI models. But some OpenAI employees discovered the Pentagon had already started experimenting with Azure OpenAI, a version of OpenAI’s models offered by Microsoft, sources say.

From Ukraine to Iran, Hacking Security Cameras Is Now Part of War’s ‘Playbook’ New research shows hundreds of attempts by apparent Iranian state hackers to hijack consumer-grade cameras, timed to missile and drone strikes. Israel, Russia, and Ukraine have also adopted this trick...

Hacking internet-connected civilian security cameras for recon has become a standard operating procedure of modern warfare. First for Russia and Ukraine, now for Israel and Iran.

Your insecure internet-of-things surveillance system is now their targeting system.

www.wired.com/story/from-u...

Toe the party line

Jack Dorsey really is trying to do everything like Elon Musk

“We put them in our agreement” means there are no restrictions in the underlying models, unlike Anthropic, and you’re relying on *checks notes* the Trump administration to hold to this. So. Yeah.

This is just more proof the world should be pushing harder for data sovereignty.

Exclusive: US orders diplomats to fight data sovereignty initiatives An internal diplomatic cable said such efforts could interfere with AI-related services.

"President Donald Trump's administration has ordered U.S. diplomats to lobby against attempts to regulate U.S. tech companies' handling of foreigners' data, saying in an internal diplomatic cable seen by Reuters that such efforts could interfere with artificial intelligence-related services."

How Jeffrey Epstein Ingratiated Himself With Top Microsoft Executives

An eye-opening story from @ering.bsky.social and Karen Weise on how Jeffrey Epstein worked his way into the inner sanctum of Microsoft's C-suite

www.nytimes.com/2026/02/24/t...

Leaked Email Suggests Ring Plans to Expand ‘Search Party’ Surveillance Beyond Dogs Ring's CEO told staff the feature is “first for finding dogs,” indicating a plan to expand.

Scoop: Ring's CEO told staff Search Party is not going to be just for dogs, according to a leaked email I obtained. Said it is "first for finding dogs" before suggesting it would be expanded to be used for crime:

www.404media.co/leaked-email...

When I wrote Section 230 I did so knowing it would be critical for protecting free speech online. 30 years later and it’s one of the last things standing in the way of Republican censorship of the internet. Here’s to many more years of defending this vital safeguard of free speech.

When the CIA did this to the Senate it was one of the biggest intel scandals of the 21st century. But here it’s not just a huge scandal, it’s dumb: Pam Bondi is so bad at her job she brought the evidence herself to an open congressional hearing. www.theguardian.com/world/2014/j...

Discord will require a face scan or ID for full access next month Age verification for all.

Discord will require a face scan or ID for full access next month

they're trying to be coy about salivating over the prospect of raping women, they'll contest that but if pushed to explain, that's exactly what they would describe. forced pregnancy of any kind, by a man or by the state, is gender-based violence

Notepad++ says Chinese government hackers hijacked its software updates for months | TechCrunch The developer of the popular text editor Notepad++ said hackers associated with the Chinese government hijacked its software update mechanism to deliver tainted software to users for months.

techcrunch.com/2026/02/02/n...

Activation emails from: - Support Vestiaire Collective - Whatnot - TeamSpeak - Listia Member Support - Support theHunter

Activation emails from: - Navy Federal Responsible Disclosure sign-… - Kaseya Support - Grove Collaborative - Brigit - Studocu Customer Support - TerraCycle US

Activation emails from: - TerraCycle - The Epoch Times - Albertsons Responsibl… - Browsec Support Team - GoodRx - Redbubble

Activation emails from: - Computop Helpdesk - Flocabulary - Grammarly Support - Cookiebot support - Champs Sports Customer Care

My email is being spammed with activation requests because zendesk won’t fix their vulnerability. How is Zendesk not being punished by email providers over this?

Notepad++ says Chinese government hackers hijacked its software updates for months | TechCrunch The developer of the popular text editor Notepad++ said hackers associated with the Chinese government hijacked its software update mechanism to deliver tainted software to users for months.

techcrunch.com/2026/02/02/n...

To avoid accusations of AI cheating, college students are turning to AI Students are taking new measures, such as dumbing down their work, spying on themselves and using AI “humanizer” programs, to beat accusations of cheating with artificial intelligence.

it would be really nice for colleges to learn AI "detection" tools don't work. www.nbcnews.com/tech/interne...

This Doesn't Get Used Unless All Parties Involved Are Using Proton And Therefore Means Nothing In 99% Of Cases So User Is Still Correct.

a screenshot of Betterment's data breach web page source code, showing a "noindex" tag in the code, which instructs search engines to ignore the page and not make it returnable in search results.

Betterment was hacked and users' personal data compromised, but you might not know it because the company hid its data breach notice with a "noindex" tag in its web page source code. This tells search engines to ignore the page so people won't see it in search results. techcrunch.com/2026/01/12/f...