MathCap

I retweet to bookmark. meme will save the world

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: 320,000 Fortinet firewall devices have been targeted in a campaign that has been dubbed 'FortiBleed'. Attackers were able to confirm 75,000 working credentials against the admin and SSL VPN interfaces.

The victims include really big names like Samsung, Oracle, Spotify, Sony, and more.

The data was first surfaced by researcher Volodymyr "Bob" Diachenko and analyzed by Hudson Rock and SOCRadar. The operation runs as a self-feeding loop. Attackers scan the internet for exposed Fortinet devices, then test each one against a curated list of passwords leaked from earlier Fortinet breaches and infostealer logs. Every successful login gets recorded into a verified database. They then turn each compromised box into a listening post, sniffing the traffic passing through the firewall to harvest fresh credentials, which go straight back into the scanner.

The scale is large. The group ran an estimated 1.16 billion credential attempts against more than 320,000 FortiGate targets, plus 2.1 billion brute-force tries against 160,000 MSSQL servers. In the deeper intrusions they intercept SSL VPN authentication hashes, crack them on a dedicated 45-GPU cluster, and move into internal Active Directory.

Diachenko confirmed full network compromises in Japan, Taiwan, Vietnam, Iraq, and Turkey, including a Turkish NATO defense contractor that had classified defense documents stolen.

If you run Fortinet, act now: rotate every VPN and admin credential, enforce MFA on all external gateways, restrict management access to approved sources, segment internal networks, and audit gateway logs for unusual logins. Hudson Rock has a free domain lookup at https://t.co/KLv2YiMtpm.

Data surfaced via the Hunt Intelligence, Inc. feed.

[Google Cloud Tech @GoogleCloudTech]

Introducing the Open Knowledge Format (OKF), an open specification that formalizes the LLM-wiki pattern into a portable, interoperable format.

AI is only as smart as the context we give it. As we build more advanced, agentic AI systems, they need accurate metadata and context to be useful. But in most organizations, that context is locked inside fragmented data catalogs, isolated wikis, scattered code comments, or the minds of senior engineers. Every time a new AI agent is built, teams are forced to solve the exact same context-assembly problem from scratch.

To solve this, we've announced OKF, a vendor-neutral, open specification that formalizes the "LLM-wiki pattern" into a portable, interoperable format. It provides a standardized way to represent the enterprise knowledge that modern AI systems rely on.

— Just markdown: readable in any editor, renderable on GitHub, indexable by any search tool
— Just files: shippable as a tarball, hostable in any git repo, mountable on any filesystem
— Just YAML frontmatter: for the small set of structured fields that need to be queryable: type, title, description, resource, tags, and timestamp

We’ve also shipped reference implementations to help you hit the ground running, including an enrichment agent for BigQuery, a static HTML visualizer, and live sample bundles on @github → https://t.co/ilhAMCrcTc

➕ Knowledge Catalog can now natively ingest OKF!

Stop reinventing data models and building bespoke integrations for every new AI tool. Here's more about how OKF works → https://t.co/FR4kJRsgEH

[International Cyber Digest @IntCyberDigest]

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.

Microsoft has patched it as CVE-2026-42824, rated critical.

[unusual_whales @unusual_whales]

BREAKING: Bank of Japan raises rates to 1% for first time since 1995

[Teortaxes▶️ (DeepSeek 推特🐋铁粉 2023 – ∞) @teortaxesTex]

I have tried to use OpenRouter Fusion API with cheap open models only, and saw reasoning that surpasses any of them individually. Then I looked into API logs and saw that this "Fusion" still calls Opus 4.8 as a judge.
I see no way to disable it.
Not cool, OpenRouter. Not cool.

[Andrew Curran @AndrewCurran_]

According to Grok, Andrej Karpathy is an EB-1 extraordinary ability green card recipient, not a US citizen. Thus under these new restrictions he is not permitted to use, or work on, Mythos 5 or Fable 5 as of 5:21pm tonight.

[Anthropic @AnthropicAI]

The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.

The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.

Access to all other Claude models is not affected.

We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.

Read our full statement: https://t.co/bwn0sximKZ

[MathCap @HellordM]

@oldstocky Dude, you won the internet

[Google DeepMind @GoogleDeepMind]

DiffusionGemma is our new experimental open model with up to 4x faster output on dedicated GPUs.

Instead of predicting word-by-word, it generates entire blocks of text simultaneously. This lets the model self-correct and format complex markdown in real time.

[Nex @NexEcosystem]

📢 Nex-N2 is here!
A family of agentic models that doesn't just think, it acts!
Coding, search, tool use. All fused into a single agentic reasoning loop.

- Adaptive Thinking, auto-scales reasoning depth per step. Saves ~20% tokens, zero performance loss.
- Coherent Thinking, one thinking paradigm across search, coding, and tool use. No more fragile mode-switching.

🏆 Result: Tier-1 open-source performance on SWE-bench, Terminal-Bench, GDPval, and more, tracking GPT-5.5 and Opus 4.7.

🎉 Open-weight. Try it now.
🔗 https://t.co/7oLSfyOCxB
📦 https://t.co/c2CGhXWaz6
https://t.co/KJYXZIpk8M
https://t.co/vcjdZ9cuB6

[GURGAVIN @gurgavin]

JUST IN : TRADING IN SOUTH KOREA HAS BEEN HALTED AS THE COUNTRIES STOCK MARKET IS NOW DOWN NEARLY 9% TODAY

ABSOLUTE BLOODBATH IN THE KOREA AS SAMSUNG AND SK HYNIX LEAD THE DECLINE

[zerohedge @zerohedge]

*INTESA PREPARES JOINT BID WITH BPER FOR MONTE PASCHI: FT

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Sony PlayStation's age-verification partner Yoti is reporting GrapheneOS users to authorities for using GrapheneOS, due to "past security concerns."

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Meta's AI feature let attackers hijack Instagram accounts for days with nothing but a username. It was being A/B tested on a slice of users, and if you were in the test, you couldn't turn it off. Among the casualties: the official Obama White House account.

The method: get on a VPN near the target's region, ask the Meta AI support agent to send a verification code to any email you control, relay that code back to the agent, and it hands over a password reset link. Without ID or human review. From there, the account is yours.

The flaw lived in the AI's logic layer, which acted on recovery requests with no real identity checks. One researcher compared it to the Roblox AI assistant exploit from days earlier, where you needed a target's billing info. Instagram was easier: the username and a regional VPN were enough and victims reported sessions revoked and passwords changed with no email, text, or push alert at all.

By the time it went public, the method was common knowledge in blackhat Telegram circles and had been used to allegedly hijack 100+ high-value accounts.

Accounts hit:
- obamawhitehouse (the archived official Obama White House account, ~2.4M followers. Hackers posted an AI-generated image captioned "The White House is under Shiites' control," plus cryptic anti-Trump and pro-Iranian Stories. Meta confirmed the hack and scrubbed it.
- Premium short handles like hey and jowo, worth over $1M combined, stolen and flipped on Telegram.
- albert (owned by Albert Renshaw), whose owner publicly reported being locked out and unable to reach Meta support.

Meta has since patched it. There was no public acknowledgment.

[Whitney Webb @_whitneywebb]

One under-discussed possibility regarding Thiel's apparent move to Argentina is that Argentina has - for many years - allowed certain wealthy, foreign billionaires to establish de facto parallel states in the country, where the federal government declines to intervene, even to protect its own citizens and laws.

Roughly seven years ago, I traveled to Argentina and wrote about how UK billionaire Joe Lewis (who Trump recently pardoned after he was found guilty of insider trading) had established one such "parallel state" in Argentine Patagonia, and even controls a private airport that the Argentine state doesn't even pretend to monitor. (Article link is below)

Did Milei allow Thiel the opportunity to experiment with one such "parallel state"? Given how Thiel and his associates are eager to create "network states" along similar lines, and Milei's own ideological leanings and personal ties to that crowd, it is an angle worth considering.

My 2019 article on Joe Lewis in Argentina for MintPress: https://t.co/RsFvYxfOiI

[Jerry Liu @jerryjliu0]

We've created the world's fastest PDF parser ⚡️

And it's more accurate than any other open-source, model-free PDF parser out there (pymupdf, pypdf, markitdown, pdftotext, opendataloader, pymupdf4llm)

Introducing LiteParse v2 - we rewrote the entire library into Rust and adapted it as native packages for Python and Node.

It supports 50+ different document types, can be triggered directly or installable directly within your favorite AI agent.

Blog: https://t.co/ckb0G73ESs

Repo: https://t.co/JNER0mVcB8

[Criptovaluta.it @CriptovalutaI]

Ingegnere italiano di Google accusato di insider trading su Polymarket per 1,2 milioni di dollari.

Ora rischia fino a 50 anni di galera.

[Nebula Security @nebusecurity]

Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0.

nginx-rift has been patched, but our security agent Vega has found a new 0 day.

We will release the full technical writeup with ASLR bypass 30 days after the patch on https://t.co/LAhOC5UHrp.

[Mario Nawfal @MarioNawfal]

🇺🇸 Massie lost his primary tonight despite passing the most consequential accountability legislation in modern history.

The Epstein Files Transparency Act just hit 6 months: 24+ CEOs removed, an ambassador, a prime minister, a minister of culture.

He was winning voters under 45 by 30 points.

And he still lost.

Rep. Ro Khanna put it simply: Massie put his career on the line to pass the most popular bipartisan bill in a generation, and the Republican machine cut him anyway.

Anti-establishment politicians who actually deliver results are being purged from the same coalition that claims to fight the establishment.

[Hackmanac @H4ckmanac]

🚨Data Breach Alert ‼️

𝗧𝗲𝗮𝗺𝗣𝗖𝗣 𝗖𝗹𝗮𝗶𝗺𝘀 𝗦𝗮𝗹𝗲 𝗼𝗳 𝗚𝗶𝘁𝗛𝘂𝗯 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹 𝗦𝗼𝘂𝗿𝗰𝗲 𝗖𝗼𝗱𝗲

TeamPCP hacking group claimed the compromise and sale of GitHub internal data, allegedly including around 4,000 private repositories containing source code related to GitHub’s main platform and internal organizations.

Threat actor: TeamPCP
Sector: ICT
Data exposure (claimed): Approximately 4,000 private repositories
Data type: Source code
Observed: May 19, 2026
Status: Pending verification
ESIX©: 7.96

Full details and impact assessment on https://t.co/eB7qgxKFAa