Data center water use, contextualized

(chart via @axios)

Posted by Steve Everley, 6 hours ago

OpenAI to Stagger Release of GPT 5.6 at Request of U.S. Government
Article, Comments

SecondFi loses $2.4 million in Cardano wallet exploit

The affected software signer used a deterministic nonce derivation flaw. Every time an address signed a transaction, it leaked enough information to mathematically reconstruct that address's private key from public blockchain data alone.

- article
- tweet

It appears there may be a phishing attack targeting Polymarket users, with estimated losses of $2.94M so far.

The attacker has drained funds from 11+ victim wallets holding PUSD, swapped the stolen assets for ETH, and consolidated the proceeds into the following address:

0xe65b1C586757c5510B60F998Eebb14C1eF71E1eD

Other theft addresses:

0xC771A30a7c1aCA828eeEF7B822ac864a64cBaAe2
0xC44F2Ca6B30A54d17a62ceF8FAdaF2e8C8632eC4
0x10366AdBB5C4101A65C840Da6639546179C5A107
0x7BCECe0d8fd92ECCf39Bc35242c6D9aAc0aA75A6

Posted by Specter, 7 hours ago

This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We've contained it & removed the affected dependency. We're contacting impacted users & refunding them in full.

Posted by Polymarket Traders, 7 hours ago

"IonStack" is chained with two 0-days: CVE-2026-10702 and CVE-2026-43499.

CVE-2026-10702 is a Firefox 0-day. At its core, it was an instruction-modeling flaw buried deep inside IonMonkey, Firefox’s highly complex JIT compiler. Even after Mythos’s extensive audits, the bug was still missed. This is the first publicly disclosed JIT vulnerability since then.

We were able to uncover the vulnerability and turn it into a highly stable exploit with a nearly 100% success rate, ultimately achieving remote arbitrary code execution in Firefox.

CVE-2026-43499 is a universal Linux kernel LPE vulnerability that has lived in the kernel tree for 15 years since v2.6.38 and affects every distribution: desktop, server, Android, and embedded. It does not require any special kernel modules; CONFIG_FUTEX_PI is all it needs, and to our knowledge, it’s enabled across all distributions we researched.

The bug primitive is a UAF in stack caused by a race condition. Turning it into a reliable LPE takes several stack tricks, but eventually it becomes very stable. We measured 10/10 successful privilege escalations on Linux 6.12, along with a high success rate on Android.

We will write a series of blog posts disclosing both 0-days used in “IonStack”. The first post is coming soon. Stay tuned.

Posted by Nebula Security, 18 hours ago

Chat, someone sent me a message. It has a very silly payload.

I cannot figure out this Lua code. I hate obfuscated Lua. Look at this fucking piece of shit (warning: is a piece of shit).

https://gist.github.com/vxunderground/91da9c50e400a6742bbacd1548a255d8

Previewing GPT‑5.6 Sol: a next-generation model
Article, Comments

GPT‑5.6 is priced per 1M tokens across three model sizes: Sol is $5 input / $30 output; Terra is $2.50 input / $15 output; and Luna is $1 input / $6 output. GPT‑5.6 also introduces more predictable prompt caching, including support for explicit cache breakpoints and a 30-minute minimum cache life. For GPT‑5.6 and later models, cache writes are billed at 1.25x the model’s uncached input rate, while cache reads continue to receive the 90% cached-input discount.

We're also launching GPT‑5.6 Sol on Cerebras at up to 750 tokens per second in July, bringing frontier intelligence to customers at unprecedented speed. Access will initially be limited to select customers as we expand capacity.

Re: U.S. government will decide who gets to use GPT-5.6

I hope this doesn't become the new norm where government becomes the bottleneck for innovation in the AI space.

It's worrying that with no formal and transparent policy framework that the government will be picking winners and losers and stifling innovation.

There's been no public policy, executive order, legislation, or otherwise on this, I wonder if anyone has filed FOIA requests for these decisions or the conversations between the Executive Branch and AI companies.

razighter777, 3 hours ago

Symbol Recovery Tool for Nuitka Binaries

- goatmilkkk/nuitka-helper
- blog

for context:

Nuitka is an optimizing Python compiler that translates Python scripts into optimized C or C++ code. It then builds this into standalone, executable binaries (like .exe files) that run independently, without requiring the user to have Python installed.

Since June 12, we’ve been working closely with the US government to restore access to Claude Mythos 5 and Fable 5. Today, the government notified us that Mythos 5, our strongest cybersecurity model, can be redeployed to a set of US organizations that operate and defend critical infrastructure.

We’re restoring access for these organizations quickly, and we’re continuing to work with the government to expand access to Mythos 5 and make Fable 5 available for general use again.

Posted by Anthropic, 9 seconds ago

A GitHub account is mass-dropping exploit PoCs framed as undisclosed 0-days, with a note telling readers to report them and "take credit for the CVE" themselves.

Coordinated disclosure, minus the coordination.

Source: https://github.com/bikini/exploitarium

CVE-2026-55200

libssh2 through 1.11.1, fixed in commit 97acf3d contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

- PoC

openvpn client-side vulnerabilities

Finding 1: arbitrary code-execution on disconnect

A malicious OpenVPN server can push an echo option that decodes into script.win.user.disconnect. OpenVPN Connect later executes that command on disconnect even though the imported profile's script permission state remains unset or false.

Verified impact:
- Current-user arbitrary command execution on VPN disconnect.
- Import alone is not enough. The client must connect, receive the pushed echo value, and then disconnect.
- The default payload writes %TEMP%\openvpn_connect_echo_script_ace_marker.txt.

Finding 2: proxy auto-config manipulation for the current user

A malicious OpenVPN server can push dhcp-option PROXY_AUTO_CONFIG_URL. OpenVPN Connect passes the pushed PAC URL through the privileged /tun-setup path, and the LocalSystem agent applies the proxy action by impersonating the current user. During the VPN session, HKCU Internet Settings receives the server-controlled AutoConfigURL; OpenVPN Connect clears it on disconnect.

#openvpn

another reason why caddy isn't a great server for reverse proxies (at least for such conditions)
page url

IP Crawl: living atlas of open webcams discovered on the public internet
Article, Comments

Lua Obfuscator written in pure Lua

It applies a range of AST-based transformations to make source code significantly harder to read, analyze, and reverse engineer.
These include techniques such as control-flow flattening, constant encryption, and other Lua-specific obfuscation strategies.
The project was inspired by the excellent javascript-obfuscator.

- prometheus-lua/Prometheus
- playground

bonus points: it has one extra layer of vm:
src/prometheus/steps/Vmify.lua:
This Step will Compile your script into a fully-custom (not a half custom like other lua obfuscators) Bytecode Format and emit a vm for executing it.

google's new captcha seems to be entirely bypassable using stock images 👀

Posted by PatRyk, 1 hour ago