Huntress appears to have an insider problem. According to one of its ex-employees, an insider passed communications from US law enforcement to a threat actor called "Devman."
The ex-employee, a former Security Analyst, says he resigned over it. He claims that with an IPO on the horizon, Huntress prioritized keeping the incident away from the press rather than disclosing it. He also says the threat actor has been targeting him and his family, and that the company's legal director tried to silence him with legal threats.
He says he will publish his supporting evidence over the next two weeks, including FBI communications, more than four hours of recorded calls, and internal escalations raised weeks before the insider was caught.
The ex-employee, a former Security Analyst, says he resigned over it. He claims that with an IPO on the horizon, Huntress prioritized keeping the incident away from the press rather than disclosing it. He also says the threat actor has been targeting him and his family, and that the company's legal director tried to silence him with legal threats.
He says he will publish his supporting evidence over the next two weeks, including FBI communications, more than four hours of recorded calls, and internal escalations raised weeks before the insider was caught.
ðą10ðĨ1ðĨ°1ðĪ1ðĪŠ1
ðŠðš European Parliament President Roberta Metsola is trying to push through "chat control" despite her own Parliament voting it down.
Parliament killed it 311 to 228 in March.
In a document seen by Politico, Metsola has invited EU member states in the Council to adopt a first-reading position on the lapsed regulation that lets platforms voluntarily scan for child sexual abuse material (CSAM).
Cyprus, which currently chairs the Council, has put the request to member-state ambassadors for Friday, while admitting in its own note there is no precedent for what is being asked.
Privacy campaigners say the scanning opens the door to mass surveillance and the end of encryption. Reviving a rejected bill through the Council also tests how far one EU institution can route around another's vote.
Source: https://www.politico.eu/article/president-vs-parliament-roberta-metsola-overrides-meps-bid-force-child-abuse-law/
Parliament killed it 311 to 228 in March.
In a document seen by Politico, Metsola has invited EU member states in the Council to adopt a first-reading position on the lapsed regulation that lets platforms voluntarily scan for child sexual abuse material (CSAM).
Cyprus, which currently chairs the Council, has put the request to member-state ambassadors for Friday, while admitting in its own note there is no precedent for what is being asked.
Privacy campaigners say the scanning opens the door to mass surveillance and the end of encryption. Reviving a rejected bill through the Council also tests how far one EU institution can route around another's vote.
Source: https://www.politico.eu/article/president-vs-parliament-roberta-metsola-overrides-meps-bid-force-child-abuse-law/
ð9ðĨ°2ðĐ2âĪ1ðĪŽ1ðĪĢ1
Google just avoided the next big social-media-harms trial by settling with a 15-year-old Black teen in Florida.
YouTube and Google reached a confidential settlement with the teen plaintiff in the second bellwether case over platform harm to minors, leaving Meta, TikTok and Snap to face a July 27 trial in California.
It's the second of nearly 2,500 consolidated claims. Plaintiffs have gotten past Section 230 of the Communications Decency Act by targeting design features (infinite scroll, autoplay, filters) rather than content.
If the remaining bellwether verdicts land for the plaintiffs, they could anchor a global settlement that plaintiffs' lawyers put in the tens of billions.
YouTube and Google reached a confidential settlement with the teen plaintiff in the second bellwether case over platform harm to minors, leaving Meta, TikTok and Snap to face a July 27 trial in California.
It's the second of nearly 2,500 consolidated claims. Plaintiffs have gotten past Section 230 of the Communications Decency Act by targeting design features (infinite scroll, autoplay, filters) rather than content.
If the remaining bellwether verdicts land for the plaintiffs, they could anchor a global settlement that plaintiffs' lawyers put in the tens of billions.
ðĪŠ4ð1
Media is too big
VIEW IN TELEGRAM
ðŠðļ Spain's PM unveils proposals to censor the internet and gut free speech protections.
ðĪŽ14ðĐ4ðĨ°1
Great use of AI: Bellingcat just published how it used machine learning to surface and document civilian-harm posts on Telegram, and open-sourced the notebook.
In Bellingcat's tests, one of the strongest signals that a post showed civilian harm was the number of crying-face ð reactions on it.
Bellingcat ranks posts by how likely they are to show civilian harm, cutting search time so researchers can spend their hours verifying instead of scrolling. It was tested on Bellingcat's Ukraine work, which has logged 2,500+ geolocated incidents since 2022.
Source: https://www.bellingcat.com/resources/2026/06/25/how-to-use-ai-to-help-find-civilian-harm-conflict-report-monitor-war-machine-learning-telegram/
In Bellingcat's tests, one of the strongest signals that a post showed civilian harm was the number of crying-face ð reactions on it.
Bellingcat ranks posts by how likely they are to show civilian harm, cutting search time so researchers can spend their hours verifying instead of scrolling. It was tested on Bellingcat's Ukraine work, which has logged 2,500+ geolocated incidents since 2022.
Source: https://www.bellingcat.com/resources/2026/06/25/how-to-use-ai-to-help-find-civilian-harm-conflict-report-monitor-war-machine-learning-telegram/
ð14âĪ2ðĪ2ð1ð1ðĨī1
Media is too big
VIEW IN TELEGRAM
Bodycam footage just came out of a farmer speaking against a planned data center, being handcuffed at a city council meeting for going a few seconds over the 3-minute public comment limit.
Darren Blanchard was speaking in Claremore, Oklahoma when two officers told him to leave, followed him to the front as he tried to hand documents to the council, and cuffed him as the crowd booed. He's charged with criminal trespass, a $200 offense, and is fighting it as retaliatory.
The case has become a marker for the wider fight over data center construction, where residents increasingly clash with developers over water, power, utility rates and farmland. Blanchard's sharpest point is about democracy itself: if attending a public meeting can get you cuffed, the chilling effect reaches well beyond one Oklahoma town.
Darren Blanchard was speaking in Claremore, Oklahoma when two officers told him to leave, followed him to the front as he tried to hand documents to the council, and cuffed him as the crowd booed. He's charged with criminal trespass, a $200 offense, and is fighting it as retaliatory.
The case has become a marker for the wider fight over data center construction, where residents increasingly clash with developers over water, power, utility rates and farmland. Blanchard's sharpest point is about democracy itself: if attending a public meeting can get you cuffed, the chilling effect reaches well beyond one Oklahoma town.
ð11ðĐ2ðĨ1ðĒ1
The EU's Chat Control fight just reignited, and critics warn the worst case is back on the table: mass scanning of private messages, detection orders without a judicial warrant, and the end of anonymous communication through forced age verification.
Former MEP Patrick Breyer is warning of what he calls a "double attack" on encrypted messaging: EU government envoys met Friday to try to revive lapsed rules allowing "voluntary" scanning of private chats, and Monday June 29 brings the final trilogue on the permanent Child Sexual Abuse Regulation (Chat Control 2.0).
Parliament rejected extending the old scanning rules in March and they expired in April. Breyer claims EP President Roberta Metsola is maneuvering to force another vote, which Politico has also reported. Backers, including the Commission, call it child protection.
Civil society has relaunched fightchatcontrol.eu to push MEPs before Monday.
Former MEP Patrick Breyer is warning of what he calls a "double attack" on encrypted messaging: EU government envoys met Friday to try to revive lapsed rules allowing "voluntary" scanning of private chats, and Monday June 29 brings the final trilogue on the permanent Child Sexual Abuse Regulation (Chat Control 2.0).
Parliament rejected extending the old scanning rules in March and they expired in April. Breyer claims EP President Roberta Metsola is maneuvering to force another vote, which Politico has also reported. Backers, including the Commission, call it child protection.
Civil society has relaunched fightchatcontrol.eu to push MEPs before Monday.
ðĒ7ðĐ3ð2ð1ðĪŠ1
The Lapsus$ hacker who leaked 90 clips of unfinished GTA 6 gameplay in 2022 is posting selfies on Snapchat from his prison cell, using a smuggled phone.
Arion Kurtaj was sentenced in 2023 to an indefinite hospital order due to his severe autism, after a judge ruled he remained a high risk of reoffending.
Arion Kurtaj was sentenced in 2023 to an indefinite hospital order due to his severe autism, after a judge ruled he remained a high risk of reoffending.
ð19ðĪĢ11âĪ4ð3ð1
A Wikipedia cofounder just got banned from Wikipedia.
Larry Sanger, who helped launch the site in 2001 and left in 2002, was indefinitely blocked after editors accused him of "off-wiki canvassing": using his X following to influence an internal debate.
He'd been pushing a WikiProject to fight what he calls the site's "globalist, secular, progressive" bias. Editors ruled he's "not here to constructively build the encyclopedia."
His response: "Wikipedia has become more of a mob-rule anarchy than ever."
Larry Sanger, who helped launch the site in 2001 and left in 2002, was indefinitely blocked after editors accused him of "off-wiki canvassing": using his X following to influence an internal debate.
He'd been pushing a WikiProject to fight what he calls the site's "globalist, secular, progressive" bias. Editors ruled he's "not here to constructively build the encyclopedia."
His response: "Wikipedia has become more of a mob-rule anarchy than ever."
ðŊ12ðĐ6âĪ5ð4ð2
> be Polymarket
> hacker says you're "compromised"
> make fun of hackers ð
> "which VC paid you to post this?"
> we and half of cybersec X tell you not to taunt them
> ignore everyone
> 2 months later a third-party vendor injects a malicious script into your frontend
> ~$3M drained from user wallets, swapped to ETH
> compromised
> hacker says you're "compromised"
> make fun of hackers ð
> "which VC paid you to post this?"
> we and half of cybersec X tell you not to taunt them
> ignore everyone
> 2 months later a third-party vendor injects a malicious script into your frontend
> ~$3M drained from user wallets, swapped to ETH
> compromised
ðĪĢ38ð4âĪ3
An anonymous GitHub account is mass-dropping exploit PoCs framed as undisclosed 0-days, with a note telling readers to report them and "take credit for the CVE" themselves.
Coordinated disclosure, minus the coordination.
Source: https://github.com/bikini/exploitarium
Coordinated disclosure, minus the coordination.
Source: https://github.com/bikini/exploitarium
ðĨ15ðĨ°5âĪ1
The costliest cyberattack in UK history, that shut down Jaguar Land Rover for five weeks last year, was the work of Russian hackers and not the collective that claimed it, the New York Times reports, citing five people familiar with the investigation. That overturns the earlier assumption that Scattered Lapsus$ Hunters, the collective that publicly claimed the breach, was responsible.
No ransom was ever demanded. Investigators are still working out whether the Kremlin directed the attack or simply allowed it, which would move it from ordinary ransomware toward a state-tolerated strike on a NATO economy.
It cost an estimated $2.5 billion in economic damage and about $350 million to the company, and hit a manufacturer both the British military and the royal family rely on.
No ransom was ever demanded. Investigators are still working out whether the Kremlin directed the attack or simply allowed it, which would move it from ordinary ransomware toward a state-tolerated strike on a NATO economy.
It cost an estimated $2.5 billion in economic damage and about $350 million to the company, and hit a manufacturer both the British military and the royal family rely on.
ð10ðą5âĪ1ðĨ1ð1