Charles

iHomoSapien

Negotiation and Conflict Management certificate from @USIP

[Charles @Chasapple]

Why Open the Web?

Despite the connecting purpose of the Web, it is not entirely open to all of its users.
When used correctly, HTML documents can be displayed across platforms and devices.
However, many devices are excluded access to Web content.

[Howard Oakley, Eclectic Light Co @howardnoakley]

Apple has released an update to XProtect for all macOS https://t.co/0ivcuv5qi2 via @howardnoakley

[Ubuntu @ubuntu]

Starting with Ubuntu 26.04 LTS, @Canonical Livepatch now extends its rebootless kernel patching capability to Arm64 for the first time. For organizations running Ubuntu on Arm64 server and edge hardware, this means critical kernel updates can be applied without service interruption.

Learn more about Ubuntu 26.04 LTS: https://t.co/zd5IMMYIeX

#Ubuntu #Livepatch #Security

[Ars Technica @arstechnica]

Google announces deepfake call detection for Android, new AirDrop device support https://t.co/pnGdJp4hcG

[StopAntisemitism @StopAntisemites]

Germany 2026: a hotel says "No Jews".

[Microsoft Threat Intelligence @MsftSecIntel]

Compromised npm packages ([email protected], [email protected]) are abusing Hugging Face repos as exfiltration infrastructure. The packages deploy a remote access trojan (RAT) that captures keystrokes, screenshots, and crypto wallet credentials.

Indicators of compromise (IOCs):
- npm user: hexalpha10 / author: toskypi
- 195.201.194[.]107:8010 (WebSocket C2)
- c2-toskypi.onrender[.]com (HTTP C2)
- huggingface[.]co/api (exfiltration endpoint)
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MicrosoftSystem64 (persistence)
- MicrosoftSystem64.service (Linux systemd persistence)
- \MicrosoftSystem64 (Windows scheduled task)
- MicrosoftSystem64/payload.js (payload directory)

Defenders: treat unexpected huggingface[.]co/api calls from non-ML workloads as suspicious.

[Israel ישראל @Israel]

Words matter. So do their definitions

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft has identified a npm supply chain compromise impacting 90+ redhat-cloud-services/* packages, including patch-client 4.0.4, insights-client 4.0.4, rbac-client 9.0.3, host-inventory-client 5.0.3, frontend-components 7.7.2, and others. The payload is a self-propagating worm that infects other npm packages and self-publishes.

Each compromised package adds a malicious preinstall hook, embedding an index.js script in the package.json that silently executes “node index.js” during installation, downloads Bun, and runs a payload that steals secrets from npm, GitHub, Amazon Web Services (AWS), and Secure Shell (SSH). The added code bloats index.js from ~8KB to ~4.3MB, acting as a heavily obfuscated ROT-9 eval loader.

If any of the compromised packages are installed, users and organizations should assume compromise, rotate credentials, revert to a previously trusted version, and block compromised packages. Identified compromised npm packages have been taken down, and we continue to work with the npm team. Microsoft continues to investigate this attack and will publish updates as more information is available.

[WikiBias @WikiBias]

Instead of documenting the still-unresolved “Gaza genocide” debate, @Wikipedia declares @Israel guilty, in breach of its NPOV policy.
This is not just bias against Israel, but a serious violation of Wikipedia’s own standards and of truth itself. SHAME!.

[Objective-See Foundation @objective_see]

Love our free, open-source macOS security tools?

You can support their continued development on Patreon https://t.co/9fPCFoCgVC 🙏🏽😍

[The Times of Israel @TimesofIsrael]

EU sanctions Hamas politburo members along with four settler groups https://t.co/qeTH5TpxnE

[Gene Trevino @GenoVeno73]

QUOTE OF A LIFETIME

"Being MAGA isn't just about being Stupid. It's about showing the World how proud you are to be Stupid."

Truer words have never been spoken.

[Israel Foreign Ministry @IsraelMFA]

Despite the ceasefire, Hezbollah has been launching rockets, missiles and drones at Israeli communities while actively sabotaging diplomatic efforts between Israel and Lebanon.

Israel's actions in Lebanon are aimed at removing an ongoing threat and ensuring the security of our people.

[Dino A. Dai Zovi @dinodaizovi]

Ouch :/

[Israel Foreign Ministry @IsraelMFA]

Two teenage girls, aged 17 and 15, were injured in a Palestinian car-ramming terror attack at the Gush Etzion Junction on Sunday May, 31st. One remains in serious condition.

The terrorist drove into a bus stop before being neutralized by an IDF soldier, who then provided emergency care to the victims.

We wish the girls a full and speedy recovery. 💔

[ADL @ADL]

A young American Jewish couple was pushed out of a LGBTQ sauna. Their offense? Wearing a Jewish star. While the couple was being confronted by staff and forced to leave other patrons stood by complacently. Spanish authorities must investigate this blatant example of discrimination based on religion and ethnicity.  Antisemitism has no place anywhere. https://t.co/3tL1fSalgo

[Objective-See Foundation @objective_see]

You asked, we listened 😇

"DoNotDisturb" v2.1 adds 'Trusted Unlock' mode

When enabled, if a lid-open event is followed by a successful Touch ID or unlock via your Apple Watch, DND can ignore it, reducing false alarms while still watching for evil maids.

https://t.co/WHKNnDOsWb

[Charles @Chasapple]

@FBI @tiktok_us support is openly hamas comments and comments to blow up the White House and police stations

[Charles @Chasapple]

@tomwarren 8 GB is not enough for Windows to be usable currently