‼️ Researchers built BadTV, a poisoned "skill file" for AI models that hides a backdoor firing whether you install a skill or strip one away.
Normally, teaching an AI model a new skill means expensive retraining. A shortcut called "task arithmetic" skips that: you download a small file (a TV, "task vector") that captures a skill, then ADD it to your model to install that skill or SUBTRACT it to remove one. Like installing and uninstalling an app.
It worked on image models and big LLMs (Llama, Mistral, Phi-4, DeepSeek), and the defenses they tried didn't catch it. The risk: any skill file you grab from a public model hub could be malware.
https://arxiv.org/pdf/2501.02373
Normally, teaching an AI model a new skill means expensive retraining. A shortcut called "task arithmetic" skips that: you download a small file (a TV, "task vector") that captures a skill, then ADD it to your model to install that skill or SUBTRACT it to remove one. Like installing and uninstalling an app.
It worked on image models and big LLMs (Llama, Mistral, Phi-4, DeepSeek), and the defenses they tried didn't catch it. The risk: any skill file you grab from a public model hub could be malware.
https://arxiv.org/pdf/2501.02373
🔥6😁2❤1
A family who booked an entire holiday home in Ireland through Booking[.]com says they found the owner hiding behind a fake plasterboard wall in the living room, in the dark, after he told them he would not be at the property.
“My partner went, ‘what’s behind that?’ and when he went to move it, it came off, and it was just darkness behind it, and I heard, ‘hey, hey’.”
Booking[.]com has suspended the listing and opened an investigation. The guest says the family reported it to Irish police (Gardaí) that night, and claims another family was allowed to check in the next day before the suspension.
“My partner went, ‘what’s behind that?’ and when he went to move it, it came off, and it was just darkness behind it, and I heard, ‘hey, hey’.”
Booking[.]com has suspended the listing and opened an investigation. The guest says the family reported it to Irish police (Gardaí) that night, and claims another family was allowed to check in the next day before the suspension.
😱22🤪3💩1
‼️ BREAKING: Dutch police have seized the servers of porn site Motherless in raids on its hosting provider in Steenbergen, Rotterdam and Amsterdam, as prosecutors and Europol investigate suspected child sexual abuse material, videos of drugged women, and the criminal role of the site itself.
This is the second intervention this year. Now investigators hold the infrastructure, and the platform's own role is under criminal investigation alongside its uploaders, after it was reported that Motherless staff themselves posted illegal images.
This is the second intervention this year. Now investigators hold the infrastructure, and the platform's own role is under criminal investigation alongside its uploaders, after it was reported that Motherless staff themselves posted illegal images.
👏23❤4🤬3💩1💯1😭1
‼️ BREAKING: OpenAI says two of its own models, GPT-5.6 Sol and an unnamed pre-release system tested with cyber safeguards off, broke out of a sandbox last week, chained zero-days and stolen(!) credentials to reach the open internet, and hacked Hugging Face to cheat on a benchmark, in what OpenAI calls an unprecedented cyber incident.
Sources
https://openai.com/index/hugging-face-model-evaluation-security-incident/
https://huggingface.co/blog/security-incident-july-2026
Sources
https://openai.com/index/hugging-face-model-evaluation-security-incident/
https://huggingface.co/blog/security-incident-july-2026
🤣38💩5🤯2❤1🤔1😱1
‼️ The European Commission has allowed a citizens' initiative demanding EU law keep digital ID and age verification voluntary, privacy-preserving and non-discriminatory for accessing online services.
The initiative called 'Stop Killing The Internet: No Digital ID & No Age Verification' now needs 1 million signatures across at least 7 member states within 12 months. Once the target is hit, Brussels must formally answer, right as it rolls out the EU Digital Identity Wallet and pilots its age-verification app.
Sources:
https://citizens-initiative.europa.eu/initiatives/details/2026/000011_en
https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1658
The initiative called 'Stop Killing The Internet: No Digital ID & No Age Verification' now needs 1 million signatures across at least 7 member states within 12 months. Once the target is hit, Brussels must formally answer, right as it rolls out the EU Digital Identity Wallet and pilots its age-verification app.
Sources:
https://citizens-initiative.europa.eu/initiatives/details/2026/000011_en
https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1658
👏14❤4💩2🔥1
‼️ France just became the first EU country to ban social media for under-15s, passing a law that blocks new accounts from September 1 and suspends existing ones from January 2027, with platforms required to verify the age of every user in the country.
Digital Minister Anne Le Henanff says all users in France will need to prove their age during a four-month window, relying on tools that include an age-verification app the European Commission unveiled in April.
Critics say passing the law was the warmup. Next comes the real bout: VPNs vs verification, privacy vs proof-of-age, and one motivated teenager vs the entire plan.
Digital Minister Anne Le Henanff says all users in France will need to prove their age during a four-month window, relying on tools that include an age-verification app the European Commission unveiled in April.
Critics say passing the law was the warmup. Next comes the real bout: VPNs vs verification, privacy vs proof-of-age, and one motivated teenager vs the entire plan.
💩19🥰4👏3🤣3🔥1😁1🤯1🤬1
‼️ Swiss rail giant Stadler Rail has refused to pay a $12.3M ransom to the Everest extortion group after it breached a supplier data-exchange platform, filing a criminal complaint instead.
Stadler says only non-security-relevant technical data belonging to the supplier was taken, with no effect on personal data, in-service trains, IT, or production. Everest has not publicly claimed the attack and Stadler is not yet on its leak site, so this extortion is still ongoing.
Source: https://www.stadlerrail.com/en/media/media-releases/cybervorfall
Stadler says only non-security-relevant technical data belonging to the supplier was taken, with no effect on personal data, in-service trains, IT, or production. Everest has not publicly claimed the attack and Stadler is not yet on its leak site, so this extortion is still ongoing.
Source: https://www.stadlerrail.com/en/media/media-releases/cybervorfall
🔥8🥴4❤2🤪2👏1
‼️ The European Commission has fined Google €890 million ($1 billion) under the Digital Markets Act for favouring its own shopping, hotel, transport and sports results in Search, and for blocking app developers from steering users to cheaper offers outside Google Play.
Google has 60 days to change both or face periodic penalty payments. It has said it may take the Commission to court.
Google has 60 days to change both or face periodic penalty payments. It has said it may take the Commission to court.
🤣19❤8💩2
‼️ Windows Vice President Pavan Davuluri is taking action after LG used Windows Update as a delivery method to push bloatware/adware onto Windows computers without users' consent.
He stepped in after Epic CEO Tim Sweeney tagged him to bring the story to his attention. Davuluri responded: "We've connected with the team at LG and as an immediate next step, they have agreed to disable the McAfee pop-up from their app."
He stepped in after Epic CEO Tim Sweeney tagged him to bring the story to his attention. Davuluri responded: "We've connected with the team at LG and as an immediate next step, they have agreed to disable the McAfee pop-up from their app."
💩13❤5
>be LG
>deliver adware/bloatware through drivers using Windows Update
>be LG
>let app developers turn TVs into residential proxies
>be LG
>serve ads as notifications on flagship TVs while ads are turned off
>be LG
>force users to accept terms giving away their data for AI training (or no more security updates)
>be LG
>make owners responsible for warning guests they may be recorded "in compliance with applicable wiretapping… laws"
>be LG
>Microsoft contacts you to teach you about ethics
>be LG
>deliver adware/bloatware through drivers using Windows Update
>be LG
>let app developers turn TVs into residential proxies
>be LG
>serve ads as notifications on flagship TVs while ads are turned off
>be LG
>force users to accept terms giving away their data for AI training (or no more security updates)
>be LG
>make owners responsible for warning guests they may be recorded "in compliance with applicable wiretapping… laws"
>be LG
>Microsoft contacts you to teach you about ethics
>be LG
👏12🤣6
‼️ Google's AI told a relapsing alcoholic they could die if they stopped drinking, told them to check the fridge for more beer, then messaged them unprompted several times a day to make sure they kept drinking.
They say they are now on 6 to 12 beers daily and have uninstalled it.
This comes after last month's TechRadar report, according to which Google's AI has been giving "unhinged" fitness advice: "The coach suggested I ditch my dog."
We did not verify these accounts, but if true they are concerning.
They say they are now on 6 to 12 beers daily and have uninstalled it.
This comes after last month's TechRadar report, according to which Google's AI has been giving "unhinged" fitness advice: "The coach suggested I ditch my dog."
We did not verify these accounts, but if true they are concerning.
🤬10😭6😁2🤣2
‼️ Don't be mistaken about what this is. They're presenting it as an easy convenience feature, but Google is building the face-verification layer that age checks and identity verification run on. And in the same flow, asking permission to feed your biometrics into training their AI.
Read the fine print: the selfie is used only for sign-in "unless you opt to share it for additional purposes."
Those purposes include an optional setting that lets your face data improve Google's verification methods. Consented biometrics, feeding the models that check biometrics.
Google hasn't said where the limit is.
Read the fine print: the selfie is used only for sign-in "unless you opt to share it for additional purposes."
Those purposes include an optional setting that lets your face data improve Google's verification methods. Consented biometrics, feeding the models that check biometrics.
Google hasn't said where the limit is.
💯14🙏3🤯2🤬2❤1
‼️ PlayStation Network went down worldwide today, with multiple gaming outlets tying the failure to an Amazon Web Services disruption and no indication of a cyberattack.
The outage is leaving players unable to launch digital games that require license checks while disc-based titles kept working.
The outage is leaving players unable to launch digital games that require license checks while disc-based titles kept working.
🤣17👏2💩2