🚨 CRITICAL: WordPress has force-pushed emergency updates 6.9.5 and 7.0.2 to kill "wp2shell," a pre-auth RCE chain in core that lets anonymous attackers run code on default installs, no plugins required. No exploitation observed yet, per Searchlight Cyber, but sites on 6.9.0 to 7.0.1 should verify they're patched today.
WordPress rarely overrides an administrator's choice to disable updates. On July 17 it did. Spending that mechanism is the clearest signal of how seriously the project is treating the flaw.
https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
WordPress rarely overrides an administrator's choice to disable updates. On July 17 it did. Spending that mechanism is the clearest signal of how seriously the project is treating the flaw.
https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ Researchers built BadTV, a poisoned "skill file" for AI models that hides a backdoor firing whether you install a skill or strip one away.
Normally, teaching an AI model a new skill means expensive retraining. A shortcut called "task arithmetic" skips that: you download a small file (a TV, "task vector") that captures a skill, then ADD it to your model to install that skill or SUBTRACT it to remove one. Like installing and uninstalling an app.
It worked on image models and big LLMs (Llama, Mistral, Phi-4, DeepSeek), and the defenses they tried didn't catch it. The risk: any skill file you grab from a public model hub could be malware.
https://arxiv.org/pdf/2501.02373
Normally, teaching an AI model a new skill means expensive retraining. A shortcut called "task arithmetic" skips that: you download a small file (a TV, "task vector") that captures a skill, then ADD it to your model to install that skill or SUBTRACT it to remove one. Like installing and uninstalling an app.
It worked on image models and big LLMs (Llama, Mistral, Phi-4, DeepSeek), and the defenses they tried didn't catch it. The risk: any skill file you grab from a public model hub could be malware.
https://arxiv.org/pdf/2501.02373
❤1
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ BREAKING: OpenAI says two of its own models, GPT-5.6 Sol and an unnamed pre-release system tested with cyber safeguards off, broke out of a sandbox last week, chained zero-days and stolen(!) credentials to reach the open internet, and hacked Hugging Face to cheat on a benchmark, in what OpenAI calls an unprecedented cyber incident.
Sources
https://openai.com/index/hugging-face-model-evaluation-security-incident/
https://huggingface.co/blog/security-incident-july-2026
Sources
https://openai.com/index/hugging-face-model-evaluation-security-incident/
https://huggingface.co/blog/security-incident-july-2026
This media is not supported in your browser
VIEW IN TELEGRAM
Media is too big
VIEW IN TELEGRAM
🍿 Avengers: Doomsday | Official Trailer | In Theaters December 18
🔗 https://www.youtube.com/watch?v=irVNGjRFZGk
📺 720p
💜 @MegaSaverBot
🔗 https://www.youtube.com/watch?v=irVNGjRFZGk
📺 720p
💜 @MegaSaverBot
❤3
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
26-year-old Ebenezer Frimpong, who attempted to steal a police armoured vehicle at Nkawie, sentenced to one month in prison after psychological assessment declared him fit to stand trial
#JoyNews #JoyFM #GhanaNews #JoyPrime #MyJoyOnline@reversemoda
#JoyNews #JoyFM #GhanaNews #JoyPrime #MyJoyOnline@reversemoda
❤1
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ France just became the first EU country to ban social media for under-15s, passing a law that blocks new accounts from September 1 and suspends existing ones from January 2027, with platforms required to verify the age of every user in the country.
Digital Minister Anne Le Henanff says all users in France will need to prove their age during a four-month window, relying on tools that include an age-verification app the European Commission unveiled in April.
Critics say passing the law was the warmup. Next comes the real bout: VPNs vs verification, privacy vs proof-of-age, and one motivated teenager vs the entire plan.
Digital Minister Anne Le Henanff says all users in France will need to prove their age during a four-month window, relying on tools that include an age-verification app the European Commission unveiled in April.
Critics say passing the law was the warmup. Next comes the real bout: VPNs vs verification, privacy vs proof-of-age, and one motivated teenager vs the entire plan.
❤1
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ Swiss rail giant Stadler Rail has refused to pay a $12.3M ransom to the Everest extortion group after it breached a supplier data-exchange platform, filing a criminal complaint instead.
Stadler says only non-security-relevant technical data belonging to the supplier was taken, with no effect on personal data, in-service trains, IT, or production. Everest has not publicly claimed the attack and Stadler is not yet on its leak site, so this extortion is still ongoing.
Source: https://www.stadlerrail.com/en/media/media-releases/cybervorfall
Stadler says only non-security-relevant technical data belonging to the supplier was taken, with no effect on personal data, in-service trains, IT, or production. Everest has not publicly claimed the attack and Stadler is not yet on its leak site, so this extortion is still ongoing.
Source: https://www.stadlerrail.com/en/media/media-releases/cybervorfall
This media is not supported in your browser
VIEW IN TELEGRAM