WTF is wrong with the EU? 🇪🇺
No frontier lab to its name, nothing in OpenAI or Anthropic's weight class, and yet Brussels is first in line to regulate and label the thing it can't build.
The Commission just finalized its Code of Practice on labelling AI-generated content. Voluntary code, but the EU AI Act rules behind it go binding August 2, 2026: providers must watermark AI output in machine-readable form, deployers must label deepfakes and disclose chatbots.
Europe can't win the race, so it's writing the rulebook for everyone who can.
No frontier lab to its name, nothing in OpenAI or Anthropic's weight class, and yet Brussels is first in line to regulate and label the thing it can't build.
The Commission just finalized its Code of Practice on labelling AI-generated content. Voluntary code, but the EU AI Act rules behind it go binding August 2, 2026: providers must watermark AI output in machine-readable form, deployers must label deepfakes and disclose chatbots.
Europe can't win the race, so it's writing the rulebook for everyone who can.
🤣14👏4❤3🎉2🤪1
❗️🇬🇧 Two members of the Scattered Spider hacking group have pleaded guilty to the 2024 cyber attack on Transport for London, the NCA confirmed today. Thalha Jubair, 20, and Owen Flowers, 18, changed their pleas on the first day of trial at Woolwich Crown Court.
The attack cost TfL a reported £29 million, forced all 28,000 staff to show up in person for password resets, exposed Oyster refund data, and shut the photocard system for children and young people. One detail stands out: Flowers recorded videos of Jubair breaking into TfL systems as it happened.
Investigators say they also found evidence the pair hit US healthcare firms Sutter Health and SSM Health. Sentencing is set for 16 July.
The attack cost TfL a reported £29 million, forced all 28,000 staff to show up in person for password resets, exposed Oyster refund data, and shut the photocard system for children and young people. One detail stands out: Flowers recorded videos of Jubair breaking into TfL systems as it happened.
Investigators say they also found evidence the pair hit US healthcare firms Sutter Health and SSM Health. Sentencing is set for 16 July.
🤣9❤5🥰1
‼️🚨 BREAKING: CONFIDENTIAL DOCUMENTS OF APPLE AND TESLA HAVE BEEN LEAKED.
Tata Electronics, which builds about a third of Apple's iPhones in India, has confirmed a cyberattack after the extortion group World Leaks posted what it claims are confidential Apple and Tesla files — more than 204,000 documents totalling 630+ GB.
We reviewed the leak. The files carry Apple's confidential and proprietary footers and Tesla trade-secret markings, and include iPhone circuit board inspection specs, factory data, and employee passport scans. There are tons of e-mails as well, plus files belonging to other Tata Electronics customers.
Tata says operations are unaffected and has received a ransom demand.
Tata Electronics, which builds about a third of Apple's iPhones in India, has confirmed a cyberattack after the extortion group World Leaks posted what it claims are confidential Apple and Tesla files — more than 204,000 documents totalling 630+ GB.
We reviewed the leak. The files carry Apple's confidential and proprietary footers and Tesla trade-secret markings, and include iPhone circuit board inspection specs, factory data, and employee passport scans. There are tons of e-mails as well, plus files belonging to other Tata Electronics customers.
Tata says operations are unaffected and has received a ransom demand.
👏13💩9👍2🔥2😁2😱1🥴1😨1
‼️🚨 Critical remote code execution in libssh2, the SSH client library embedded in countless tools: CVE-2026-55200, rated CVSS 9.2 by VulnCheck. Every version up to and including 1.11.1 is affected.
It's an out-of-bounds heap write in ssh2_transport_read(), which fails to bound-check the SSH packet_length field. A malicious or MITM'd SSH server can send oversized packets to corrupt memory and run code on the connecting client.
No known exploitation yet and it's not in CISA's KEV. Fix: move to a build that includes commit 7acf3df (PR #2052), and inventory anything that links libssh2 for SSH, SCP, or SFTP.
It's an out-of-bounds heap write in ssh2_transport_read(), which fails to bound-check the SSH packet_length field. A malicious or MITM'd SSH server can send oversized packets to corrupt memory and run code on the connecting client.
No known exploitation yet and it's not in CISA's KEV. Fix: move to a build that includes commit 7acf3df (PR #2052), and inventory anything that links libssh2 for SSH, SCP, or SFTP.
🔥6❤3🥴2
Media is too big
VIEW IN TELEGRAM
🐧 Linus Torvalds gets angry when people say 99% of our code is written by AI, he told the audience at the Open Source Summit.
👍9❤3
‼️🚨BREAKING: Meta has stopped its controversial employee-tracking program for training AI after an internal exposure left all the collected data accessible across the company, including keystrokes, screen contents, full AI prompts, transcripts, private conversations, and performance records, collected from US employees' laptops since April.
An internal notice put the scope at 45,000 internal tables. CTO Andrew Bosworth blamed misconfigured access control lists. Meta says it has no indication the data was improperly accessed.
Months earlier, Bosworth had told worried staff the program was "tightly controlled." More than 1,600 employees had already signed a petition warning of exactly this kind of security and regulatory risk.
An internal notice put the scope at 45,000 internal tables. CTO Andrew Bosworth blamed misconfigured access control lists. Meta says it has no indication the data was improperly accessed.
Months earlier, Bosworth had told worried staff the program was "tightly controlled." More than 1,600 employees had already signed a petition warning of exactly this kind of security and regulatory risk.
😭10💩7😁2🥴2
‼️ Claude Fable 5 wrote a booting, NT-shaped Rust kernel in 38 minutes, with later work on Claude Opus growing it to run real Windows binaries.
Security startup Tolmo published a transcript-level account of Claude Fable 5 writing a booting, NT-shaped kernel in Rust from an empty directory in 38 minutes of active model work.
By the company's account it built the trusted computing base, booted in an emulator, passed its own self-tests, and root-caused its own low-level bugs, then over 8 more days, mostly on Claude Opus 4.8, grew to load unmodified Windows drivers and run real Windows binaries.
https://tolmo.com/blog/when-the-model-writes-the-kernel/
Security startup Tolmo published a transcript-level account of Claude Fable 5 writing a booting, NT-shaped kernel in Rust from an empty directory in 38 minutes of active model work.
By the company's account it built the trusted computing base, booted in an emulator, passed its own self-tests, and root-caused its own low-level bugs, then over 8 more days, mostly on Claude Opus 4.8, grew to load unmodified Windows drivers and run real Windows binaries.
https://tolmo.com/blog/when-the-model-writes-the-kernel/
🔥10👏2😱2💩1
‼️🚨 A nationwide failure of the German train radio system just brought Deutsche Bahn's entire network to a standstill, halting long-distance, regional, and S-Bahn services across Germany, including every Berlin S-Bahn line.
The cause is not yet known. DB CEO Evelyn Palla told Bild the company doesn't know what happened. Trains were held at or sent to the nearest station because, without working radio, drivers and dispatchers can't reliably exchange emergency stop signals, making running unsafe.
It's a decades-old radio system, which also carries train-control signaling data, taking down a whole country's rail traffic. A similar GSM-R outage halted northern Germany in October 2022 after fiber cables were cut. No attack has been confirmed this time.
The cause is not yet known. DB CEO Evelyn Palla told Bild the company doesn't know what happened. Trains were held at or sent to the nearest station because, without working radio, drivers and dispatchers can't reliably exchange emergency stop signals, making running unsafe.
It's a decades-old radio system, which also carries train-control signaling data, taking down a whole country's rail traffic. A similar GSM-R outage halted northern Germany in October 2022 after fiber cables were cut. No attack has been confirmed this time.
🤔9🤣2👏1
A legal study commissioned by the Dutch government has concluded that forcing universal age verification on all users would be disproportionate and clash with the fundamental rights of both children and adults.
The researchers, at the University of Amsterdam, say privacy and freedom of information are at stake, that even the strictest checks are easily bypassed with VPNs or an adult's help, and that the EU's Digital Services Act already requires platforms to make age assurance effective, so rushing to mandate more is risky.
This matters because the Dutch coalition wants a European minimum age of 15 with "privacy-friendly" verification. The study is a caution to every government treating ID checks as the fix, the same fight is playing out in many countries right now.
The researchers, at the University of Amsterdam, say privacy and freedom of information are at stake, that even the strictest checks are easily bypassed with VPNs or an adult's help, and that the EU's Digital Services Act already requires platforms to make age assurance effective, so rushing to mandate more is risky.
This matters because the Dutch coalition wants a European minimum age of 15 with "privacy-friendly" verification. The study is a caution to every government treating ID checks as the fix, the same fight is playing out in many countries right now.
🔥15💯3😱2❤1🤯1