We met with some of my wife's friends and it always surprises me how people think differently about some current things.

One friend has seen the movie about the child abuser Michael Jackson twice. And that seems strange to me because I have no interest in that movie.

Another friend's husband works in #TechSecurity and when I asked what he think about the banning of under 16s from #SocialMedia I was told he mostly agrees.

I find that odd since it's really about every adult having to upload id to the web and I assumed someone in tech security would be concerned not supportive.

But I suppose working in tech doesn't mean you don't support oppression. Lots of tech people love #bitcoin and #AI

It does surprise me how people aren't more critical about things in the media. I know people are exposed to different things, different news, but it still surprises me people aren't more radical about what's going on.

Analysis High Profile Meta AI Chatbot Breach Spotlights Security Risks of Automation 

https://onlinemarketingscoops.com/2026/06/03/high-profile-meta-ai-chatbot-breach/

[Translation] How a “dream job invitation” turns into an attack

It all starts with a notification that feels familiar and exciting for any developer: “You’ve been shortlisted for an AI developer position.” The company looks impressive — DLMind, an “AI innovation lab.” The recruiter appears legitimate — Tim Morenc, CEDS, with a polished LinkedIn profile, professional communication style, and mutual connections.

But behind this friendly outreach is BeaverTail — a malicious operation designed to steal your code, credentials, and developer assets.

The attack is part of a broader pattern associated with North Korean cyber operations, including groups such as Lazarus Group.

How the attack works

The victim is approached via LinkedIn or similar platforms

A convincing fake company and recruiter profile is used

A “technical assignment” or test task is provided

The task contains malicious code or a compromised dependency

Once executed, it extracts sensitive data such as:

GitHub / Git credentials

SSH keys

API tokens

browser session data

Why it works

The campaign relies on social engineering rather than technical exploitation:

trust in recruitment processes

desire for career opportunities

familiarity of developer workflows (GitHub, npm, Python, etc.)

Key takeaway

Any unsolicited “test assignment” should be treated as potentially hostile code. Execution environments must be isolated, and credentials should never be exposed in evaluation setups.

---

#hashtags
#cybersecurity #infosec #malware #socialengineering #phishing #infostealer #supplychainattack #github #developers #techsecurity #beavertail #lazarusgroup

Federal prosecutors charged a 20-year-old Texas man with attempted murder after he allegedly threw a Molotov cocktail at OpenAI CEO Sam Altman's home, then tried to break into the company's headquarters. Court filings say he carried a list of AI executives' addresses and told security he came to "kill anyone inside." A separate, unrelated shooting at the same residence occurred Sunday.

#AISafety #TechSecurity #OpenAI

https://www.implicator.ai/texas-man-charged-in-molotov-attack-on-sam-altman-prosecutors-say-he-kept-ai-executive-target-list/

Two separate attacks on OpenAI CEO Sam Altman's San Francisco home within 72 hours raise questions about AI executive security. Police arrested two people after Sunday gunfire incident, following Friday's Molotov cocktail attack by Texas man. Three firearms seized. No injuries reported. Investigators haven't confirmed if incidents are connected.

#AISafety #TechSecurity #OpenAI

https://www.implicator.ai/sam-altmans-home-hit-by-gunfire-days-after-molotov-attack-two-arrested/

Windows 95 defenses against installers that overwrite a file with an older one

https://devblogs.microsoft.com/oldnewthing/20260324-00/?p=112159

#HackerNews #Windows95 #Installers #FileOverwrite #SoftwareHistory #TechSecurity