Steve

Hacker in corpo #infosec trying to secure the future | Founded DC151 & BSidesLeeds | #PurpleTeam / CTI / #TabletopTuesday

[Yunyu Lin (yun/yu) @yunyu_l]

Marco Rubio finding out he has to be the CEO of Anthropic after it gets nationalized

[sdmat @sdmat123]

Anthropic

[Bojan Tunguz @tunguz]

"You are sheltering a Mythos-level model in your server room, are you not?"

[An Engineer's Log @an_engineer_log]

@AnthropicAI

[Marty Hogan @marty_hogan]

OK... take my money

[DiscussingFilm @DiscussingFilm]

‘WIDOW'S BAY’ has been renewed for Season 2.

[Pankaj @the2ndfloorguy]

i hooked my whoop to my work calendar to find which coworker gives me the most stress 🚨

thanks to fable, I reverse engineered whoop to pull per minute heart rate. nd matched spikes with cal events and attendees

I now have a leaderboard and I think about it daily.

few info masked for obvious reasons ;)

[Dogan Ural @doganuraldesign]

Hey Siri, set a timer for 10 minutes

[terminally onλine εngineer @tekbog]

me to mythos: hi

mythos:

[Steve @Northvein]

#TabletopTuesday a senior security engineer with access to advanced AI models capable of discovering new vulnerabilities & developing attack chains has been caught selling exploits to a foreign government by the press during a sting operation

[LayoffHedge @LayoffAI]

GOOGLE LAYOFFS 🚨

JUST CUT ITS TOP CYBERSECURITY TEAM FOR "GROWTH AREAS" - Business Insider

GTIG and Mandiant ($5.4B acquisition, 2022) lost staff this week. Cut analysts include veterans of Log4Shell, SolarWinds, and Ukraine cyber defense.

Employees have taken to LinkedIn.

[Microsoft Threat Intelligence @MsftSecIntel]

Attackers are targeting open-source software ecosystems at scale, using coordinated and repeatable approaches that take advantage of dependency chains and maintainer trust models to distribute malicious packages across widely used registries. https://t.co/Gh6lgCtIHM

The use of AI is reducing barriers to entry, enabling high‑volume package creation and faster iteration of malicious code. At the same time, shifts in coding patterns and tooling behaviors can provide defenders with signals to better identify and track adversary activity.

These campaigns increasingly focus on the software supply chain itself, targeting the tools, libraries, and pipelines used to build and distribute applications. As a result, a single compromised component can propagate across complex dependency trees and significantly expand impact.

Learn more from Microsoft Security’s Allie Luhrs and Mario Samolis from their talk at this year’s Blue Hat USA on the Microsoft Threat Intelligence Podcast, hosted by Sherrod DeGrippo.

[Aikido Security @AikidoSecurity]

⚠️ New "IronWorm" supply-chain attack: 30+ npm packages from @ asteroiddao shipped a malicious Rust binary firing on preinstall.

It sweeps 86 env vars + 20 credential files (AWS, GCP, Vault, npm, plus AI keys like Anthropic & OpenAI), hits Exodus wallets, hides behind an eBPF rootkit, and beacons over Tor. Self-propagates via npm Trusted Publishing OIDC, with backdated commits faked as claude/dependabot/renovate.

[Programmer Humor @PR0GRAMMERHUM0R]

aiCompaniesRightNow

[Zack Korman @ZackKorman]

Imagine being MSRC right now. You piss off every security researcher in the world then your boss announces this.

[Pablo Fredrikson @PeladoNerd]

https://t.co/zfFpPnJbdr

[vx-underground @vxunderground]

Instagram still hasn't (correctly) patched their AI goop account reset thingy. Accounts are still being stolen and Instagram hasn't said anything about it. Nerds continue to find ways to convince AI to reset accounts for them.

People on social media are freaking out because some of these profiles apparently are big sources of revenue for them.

Meanwhile, rumors are floating around that a few weeks ago Instagram laid off a large percentage of their Trust & Safety department and had it replaced with AI.

Very cool

[Hedgie @HedgieMarkets]

🦔GitHub Copilot switched to token-based billing this morning and users are already out of credits. Pro+ subscribers paying $39 a month are reporting 60% of their credits gone in two hours of normal use. One user lost 20% of their allowance from a single file review with no code changes. Another hit their monthly cap before the calendar even flipped to June.
Orgs with shared token pools have no way to see individual usage, so entire teams get cut off when one person runs a heavy prompt. Users are canceling and moving to Claude Code and Codex. GitHub community forums are on fire.

My Take
Flat-rate AI subscriptions were always subsidized. Everyone in the industry knew it. Today the subsidy ran out for a few million developers at once. The problem is a lot of companies already restructured around these tools. They cut headcount and told remaining engineers to lean on Copilot instead of building skills internally. Those companies now depend on a tool whose cost just became unpredictable and whose usefulness completely changes when you have to ration prompts to stay under budget.

The developers moving to Claude Code and Codex will hit the same wall eventually. Every AI provider faces the same unit economics. Anthropic filed its S-1 this morning, and the durability of its revenue depends on whether customers stick around once real pricing kicks in everywhere. If a $39 subscriber cancels after one day because the tool became unusable, multiply that across millions of seats and the churn risk becomes very real.

Today showed what happens when AI pricing meets reality. The companies that built their workflows around cheap tokens just discovered the tokens aren't cheap anymore and the people who knew how to do the work without them are already gone.

Hedgie🤗

[Steve @Northvein]

Just caught up on #WidowsBay - strongly recommend. It’s a really funny, dark comedy horror.

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft has identified a npm supply chain compromise impacting 90+ redhat-cloud-services/* packages, including patch-client 4.0.4, insights-client 4.0.4, rbac-client 9.0.3, host-inventory-client 5.0.3, frontend-components 7.7.2, and others. The payload is a self-propagating worm that infects other npm packages and self-publishes.

Each compromised package adds a malicious preinstall hook, embedding an index.js script in the package.json that silently executes “node index.js” during installation, downloads Bun, and runs a payload that steals secrets from npm, GitHub, Amazon Web Services (AWS), and Secure Shell (SSH). The added code bloats index.js from ~8KB to ~4.3MB, acting as a heavily obfuscated ROT-9 eval loader.

If any of the compromised packages are installed, users and organizations should assume compromise, rotate credentials, revert to a previously trusted version, and block compromised packages. Identified compromised npm packages have been taken down, and we continue to work with the npm team. Microsoft continues to investigate this attack and will publish updates as more information is available.