CyberSecRocks 😎

#MUC

[auonsson @auonsson]

This is Mechernich, where two 4 meter drones flew for hours yesterday. And Leipzig, where an armed drone only by luck failed to blow up a plane with ammo.

Ie, drone cells are operating with impunity targeting arms transports and doing recon on key military sites. On EU soil.

[Brian in Pittsburgh @arekfurt]

I've watched the BlackHat OpenAI talk on the containment escape and HuggingFace attack that's now on YouTube.
The incident was far worse than initially conveyed.
Not in technical details. But in the absolutely jaw-dropping levels of recklessness (true recklessness) at OpenAI.
🧵

[CALL TO ACTIVISM @CalltoActivism]

🚨Holy smokes. ​JD Vance just delivered an absolute train wreck of an interview on Fox News.

Laura Ingraham pointedly asked him, "We keep hearing there's progress, then two days later there's no progress, then more problems in the strait. What can you tell the American people?"
​
Vance’s brilliant response after nearly half a year of war? Whining that it’s "messy" and claiming we're just "in the middle of the game."

​A game? Tell that to families crushed by skyrocketing gas prices and troops in the line of fire.

Total disaster.

[Charlie Miller @0xcharlie]

It’s pretty insane that you’d cap how many bugs a researcher can report.

[Headquarters @HQNewsNow]

September 2024: Scotts Miracle-Gro contributes $500,000 to Trump’s Super PAC

July 2025: Trump’s EPA Administrator meets with the CEO of a partner of Scotts Miracle-Gro

February 2026: Trump signs an order to boost production of glyphosate, the toxic chemical in Roundup that Scotts Miracle-Gro distributes

June 2026: Scotts Miracle-Gro pledges $1,000,000 to repair the White House lawn after Trump’s UFC arena was removed

August 2026: Trump shouts out Scotts Miracle-Gro, saying “I have to give ’em a plug” because they “did the White House for free”

August 2026: Scotts Miracle-Gro stock price surges following Trump’s plug

[JFrog Security @JFrogSecurity]

🚨 A new wave of Shai Hulud malware hits npm 🚨
About 26 packages are already confirmed as compromised.

Full technical details will be updated on our blog:
https://t.co/6gtaYcgVZQ

[Republicans against Trump @RpsAgainstTrump]

RFK Jr.: “You probably don't understand this because you're not a scientist.”

Dana Bash: "Well you're not either."

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: An active npm supply chain attack has compromised at least 868 packages carrying over 2 billion monthly installs with a credential-stealing worm. Shai-Hulud is back.

It started with the compromise of the GitHub account of the maintainer behind keyv, a library with roughly 127 million weekly npm downloads.

A preinstall hook fires on npm install and drops a stealer that sweeps npm, GitHub, AWS, Kubernetes and Vault secrets, and then spreads to more maintainers.

[Vatnik Soup @P_Kallioniemi]

The invasion of Ceuta was organized by one or more hostile nations.

There is no way 50,000 migrants simply decided to mobilize at the same time without coordination by state actors.

It was an attempt to destabilize the EU.

[Vatnik Soup @P_Kallioniemi]

Karin Kneissl, former Minister of Foreign Affairs of Austria, now lives in Kasimov, Ryazan Oblast, russia, with a photo of dictator Putin on the wall.

It’s not like he’s been buying our politicians or anything.

[Denis Loginoff ⚡️ @DenLoginoff]

@IceSolst @step_security do we know which "security" company is it btw 😅

[CyberSecRocks 😎 @CyberSecRocks]

@cyb3rops PM ?

[CyberSecRocks 😎 @CyberSecRocks]

@cyb3rops Yes - got the alerts too

[CALL TO ACTIVISM @CalltoActivism]

I can't stop watching this epic video that MSNBC just played of Dan Bongino, Kash Patel, and Pam Bondi about the Jeffrey Epstein files. Share it before the DOJ demands X take it down.

[CyberSecRocks 😎 @CyberSecRocks]

Heads up: „run, don‘t walk !“

Registration is open for a great OpenSpace security conference in Germany :

https://t.co/wP9a9EmJ71

[@[email protected] @AG_KRITIS]

Wir haben fristgerecht für die #NIS2 Anhörung geliefert:

Schriftliche Stellungnahme zum Gesetzentwurf der Bundesregierung des #NIS2UmsuCG vom 23.06.2025

#KRITIS #Cybersicherheit
https://t.co/TovjsKT4Na

[Florian Roth ⚡️ @cyb3rops]

So apparently the --host option in sudo has been broken since 2013. You could just trick it into accepting remote rules on the local system and get root. No exploit needed.

And nobody noticed. For 12 years.

Open source security at its finest: “If enough people look at the code, bugs will be found”

https://t.co/b61ssKrHUd

[Jon Flynn @Jonflynn]

Hey @duolingo what the heck is going on with the app. Functionality is busted, family plans disappeared and no way to use the app?!? #DuoDown

[Maine @TheMaineWonk]

Wanna to trigger some of MAGA’s cult wing….

Enjoy:

[Acyn @Acyn]

Reporter: You said an example of fraud that you have cited was $50 million of condoms was sent to Gaza but after a fact-check apparently it was Gaza in Mozambique meant to protect them against HIV. 

Musk: First of all, some of the things I say will be incorrect and should be corrected.