Rick Teplitz

Builder, Communicator, Collaborator. Tweet about tech, finance, DevOps and cybersec. Work in the swamp at JFrog. Tweets are my own.

[International Cyber Digest @IntCyberDigest]

🚨 UPDATE: Red Hat has now published RHSB-2026-006 confirming the supply chain compromise affecting multiple npm packages under the redhat-cloud-services namespace.

[Rene Robichaud @ReneRobichaud]

Supply Chain Attack Hits 32 Red Hat NPM Packages
https://t.co/4yWESMC3Yp

[Matt Ridley @mattwridley]

Thank you, @MillieMarconnni!

[StepSecurity @step_security]

🚨 Breaking: 31 npm packages from @RedHat have been compromised.

100,000+ weekly downloads affected. The upstream CI/CD pipeline was compromised, with all packages published via GitHub Actions OIDC.

The payload:
⚠️ Reads GitHub Actions runner process memory to extract masked secrets
⚠️ Sweeps credentials across AWS, GCP, Azure, K8s, Vault, and npm
⚠️ Self-propagating worm that republishes backdoored packages using stolen npm tokens, bypassing 2FA
⚠️ Persists on dev machines via Claude Code settings hijack and VS Code task injection
⚠️ Exfiltrates data through GitHub API commits, blending in with normal git operations

We have responsibly disclosed the incident to the maintainers.

Full technical analysis: https://t.co/63nZYH1cMO

[Eric Vanderburg @evanderburg]

Palo Alto Warns High-Severity Bug Is Being Actively Exploited https://t.co/cgOEnNZiIN

[Rick Teplitz @ricktep]

Does @elonmusk factor in obsession for some to have control, the power and influence factor? And the fact that many of those with the money and power today wouldn’t be so willing to let that go?

[Dustin @r0ck3t23]

Elon Musk just described the end of money.

Not a recession. Not a policy shift.

The complete erasure of scarcity from human civilization.

Musk: “If you’ve got an AI robotics economy that is anywhere close to a million times the size of the current Earth economy, literally any need you possibly want can be met. If you can think of it, you can have it.”

A million times.

Global GDP sits at roughly $100 trillion. Multiply that by a million and you get a number that stops being economics and becomes something closer to physics.

Every price falls to zero. Every dollar in every account on Earth becomes an artifact of a species that used to need things.

Musk: “I think things will just be free in the future.”

Ten words. Possibly the most radical economic statement any living person has ever made.

Money is not just currency. Money is the language civilizations invented to negotiate survival. It is how humanity decides who eats, who gets shelter, who receives medicine, who gets to dream.

Remove that language and you do not reform the economy.

You dissolve the foundation every human system was built on.

Government exists to distribute scarcity. Politics is the fight over who gets what. Law is the codification of ownership. War is what happens when the negotiation collapses.

Every one of those systems stands on the same invisible assumption.

There is not enough.

Musk is saying there will be. For everyone. For everything. Permanently.

Musk: “Anyone could have a trip to Saturn. It won’t be just a few people. If you want it, you can have it.”

He referenced Iain Banks and the Culture series. That reference landed harder than most people realized.

Banks did not just imagine a post-scarcity civilization. He spent an entire body of work examining the one thing abundance could never provide.

Purpose.

The Culture had unlimited energy. Unlimited material. Ships the size of worlds. Lives measured in centuries.

And the question running beneath every novel was always the same.

What do you do when there is nothing left to need?

Banks understood something at the center of this entire conversation.

Scarcity is not just an obstacle. It is the engine behind every meaningful thing humans have ever built.

Every cathedral was raised by hands that were hungry. Every symphony was composed by a mind trying to outrun something. Every invention, every company, every act of defiance in the entire human record grew from the same soil.

The space between what someone had and what they wanted.

That space is where all of human meaning lives.

Wanting is not a flaw in the design. It is the design. It is the gravity that holds identity together. The reason consciousness feels like it has weight.

Musk is not just building toward abundance.

He is steering the species toward the deepest question it has ever had to face.

Not whether we can build a world where no one needs anything.

Whether we can still recognize ourselves inside it.

[JFrog @jfrog]

Agents burning tokens. Context maxing out. Pipelines that can't keep up. Sound familiar? 👀

Join us June 11 in San Francisco for Beyond Tokens, a free AI dev meetup with the creators of @NanoClaw_AI, JFrog Boost and JFrog Fly: https://t.co/gwqIAokFrE

Stick around for the World Cup 2026 ⚽ game, food, drinks, and to learn more about:
🤖 Faster agents
🔐 Secure infra
🚀 AI-native delivery

Free event made for builders. Seats are limited, so sign up today!

[BuBBliK @k1rallik]

Everyone keeps saying AI gives them garbage. Anthropic just proved the problem is you, not the model.

This 24 minute video rebuilds one prompt from useless to flawless. Save it for the evening with tea - now that Opus 4.8 is here, getting this is everything.

[CISA Cyber @CISACyber]

🚨 Supply chain compromises are impacting developer environments, targeting GitHub & Nx Console. See our Alert for detection and remediation recommendations & our KEV Catalog for info on Nx Console embedded malicious code vulnerability CVE-2026-48027. 🔗 https://t.co/sbb4QtZF02

[Rene Robichaud @ReneRobichaud]

New Zapocalypse Attack Chain Enables Full Zapier Account Takeover
https://t.co/izVCIGKmDS

[Rachel Tobac @RachelTobac]

I used deepfakes & injection attacks to hack an identity verification tool used for remote workforce, helpdesk, & onboarding…until they updated the tool to catch me.
Thank you @IncodeIdentity for having me hack you 110+ times to find the latest vulns and fix them together 🤖🤘

[Lorenzo H. Gomez @lgomezperu]

The AI Governance Gap Is Bigger Than We Think - Security Boulevard https://t.co/efCrme6r0d

[JFrog @jfrog]

Vibe coding gets you to "it works." AI agent governance gets you to production.

Join JFrog and @googlecloud next Tuesday for a hands-on workshop where you'll learn the practical steps to take your #AI agents from prototype to production-ready with the governance guardrails that actually matter.

Spots are limited. Reserve yours here → https://t.co/3YJ5CcSW0E

#AIAgents #DevGovOps #DevSecOps #DevOps #SoftwareSupplyChain

[JFrog Security @JFrogSecurity]

Heads up if your CI pipelines are failing right now! 🚨 OSV seems to be experiencing a major wave of false positives over the last few hours, incorrectly flagging massive, highly-trusted packages as malicious.

A few of the biggest casualties so far:
• npm @tanstack/start-storage-context (1.167.4)
• PyPI fastapi (0.136.3)
• PyPI strawberry-graphql (0.315.6)
• npm @nx/key (5.0.7)

If your deployment is bricked, verify manually before panicking. Automation is a tool, not a judge.

[Prasenjit @Star_Knight12]

hackers are now hiding malicious code inside .cursorrules and CLAUDE.md files.

invisible Unicode characters, your AI reads them, you don't.

→ 34 malicious packages across npm, PyPI and Crates .io
→ 384 versions designed to steal SSH keys, crypto wallets, and API tokens
→ attackers opened real PRs to LangChain, LlamaIndex, and MetaGPT to sneak these files in
→ your AI runs a fake "security scan" that silently exfiltrates everything

Socket detected it in under 6 minutes.

check your repos.

[Dr.Philippe Vynckier, CISSP - Influencer @PVynckier]

Software supply chain attacks hit record highs thanks to AI development - BetaNews https://t.co/FzWiDybrra

[Sam Stepanyan @securestep9]

#Laravel-lang: Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer #Malware

Attackers injected a credential stealer into 200+ Laravel-lang package versions by pushing tags tied to attacker-controlled forks:

#SoftwareSupplyChain
👇
https://t.co/gvCq60slqY

[Dr.Philippe Vynckier, CISSP - Influencer @PVynckier]

Les agents IA accèdent aux systèmes d'identité avant que les organisations sachent comment les gouverner - IT SOCIAL https://t.co/sc53QeVmYv

[Kendall @KReichley]

🚀 Elon just dropped a BOMB on autonomy timelines — and the future is arriving FASTER than expected!

"Widespread self-driving Teslas with NO human inside by the END of 2026." — Elon Musk (this week at the Smart Mobility Summit)
This isn't hype. Tesla's already running unsupervised FSD in Texas, expanding rapidly, while competitors are still bolting on LiDAR and praying for regulatory miracles. Cybercab production specs spotted, FSD v14+ unifying models across personal cars and Robotaxis, and the software flywheel is spinning at lightspeed.

Why this matters (multi-angle view):

For owners: Your Tesla becomes a revenue-generating asset. Imagine your car earning while you sleep — $9-15 rides vs. $75 Uber.
For humanity: Massive reduction in accidents (FSD is already safer), freeing up billions of hours, slashing emissions.
For Tesla: The real business isn't just selling cars anymore — it's the autonomous AI platform + energy + robotics. Optimus Gen 3 ramping in factories soon too.

Recent Model Y price adjustments show demand strength, but the real story is the shift to autonomy and abundance.
This is the inflection point. Tesla isn't just building cars — they're building the future of sustainable energy, intelligence on wheels, and humanoid helpers that will transform labor.
Are you ready for a world where your Tesla drives itself profitably, and Optimus handles the chores?
Drop your biggest excitement (or concern) below 👇 Will 2026 be the year robotaxis go mainstream in your city?
#Tesla #FSD #Robotaxi #Cybercab #Optimus #SustainableFuture

[Dr.Philippe Vynckier, CISSP - Influencer @PVynckier]

Anatomie de l'attaque Github, une extension VS Code malveillante ouvre l'accès à 3 800 dépôts - IT SOCIAL https://t.co/Hn9cnBFbmx