Albert Kramer @AlbertKramer

@veenspace Zo is het gat naar noord Nederland via Flevoland wel heel duidelijk.

@emmeloordstad Bij Creil? Bij Espel bedoelen ze.

@noth1ng_real @IntCyberDigest You could see who was not allowed in stadiums anymore. Or you could assign seatings in the stadium to other people. This was quite a bad leak to be honest. @AFCAjax instead put the blame on the researcher instead. They have not apologized publicly yet.

@securitynl Wanneer maken jullie je website mobiel geschikt?

@De5december Dat ligt dan aan jou. Ik ken merel al jaren.

@alberheineken Pfff effe denken. Since 2009 is dus 17 jaar geleden al weer.

@NUnl Niewiadoma is begrijpelijk gefrustreerd maar zou vooral boos op zichzelf moeten zijn. Slecht gekoerst en ze mag blij zijn dat de Italiaanse haar op sleeptouw nam anders was het nog veel erger geweest. Ze was vandaag gewoon niet sterk genoeg.

@Sumilees Nobody will take you serious if you wear this.

‼️ BREAKING: AWS users are in shock as the company shows them wildly inflated cost estimates running into billions of dollars per account. AWS has confirmed a global billing console bug as the cause. In some reported cases the estimates run as high as $1 trillion. AWS blames a unit pricing error in its estimation subsystem and stresses that the phantom numbers do not reflect actual usage or charges.

keyboard_arrow_left Previous keyboard_arrow_right Next

As a result of a US government directive, we are suspending access to Claude Fable 5 for all users. You can continue to use all other Claude models. Here’s what this means for you: Across Claude products, new sessions will run on your selected default model or Opus 4.8, and existing Fable 5 sessions will end with an error. On the Claude Platform, requests to Fable 5 will also return an error. Please update your integrations to other Claude models. We know this is a disruption to your workflows; we appreciate your patience and support.

Anthropic @AnthropicAI

2 months ago

The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees. The net effect of

12K 25K 88K 93.1M 23K

‼️🚨 BREAKING: GitHub has been compromised by TeamPCP. GitHub has confirmed the internal breach. A poisoned VS Code extension on an employee device exfiltrated ~3,800 internal repositories. TeamPCP is already selling the data on a cybercrime forum.

keyboard_arrow_left Previous keyboard_arrow_right Next

⚠️ On May 16, 2026, we confirmed a targeted attack by a cybercrime group that gained unauthorized access to our GitHub repositories and downloaded our codebase. Here is the latest update about our investigations. grafana.com/blog/grafana-l…

‼️🚨 The Mini Shai-Hulud npm worm has hit again. Hundreds of antv packages compromised (Alibaba's data visualization suite) along with echarts-for-react, timeago.js, size-sensor, and canvas-nest.js. It all started today with the compromise of npm account atool ([email protected]). In a 22-minute window between 01:39 and 02:06 UTC, the attacker published 631 malicious versions across 314 packages, all carrying the same payload. Top affected packages by monthly downloads: - [email protected] - 4.2M dl/mo - [email protected] - 3.8M dl/mo - @antv/[email protected] - 2.2M dl/mo - [email protected] - 1.15M dl/mo - @antv/[email protected] - 1.0M dl/mo - @antv/[email protected] - 1.1M dl/mo - @antv/[email protected] - 975K dl/mo - @antv/[email protected] - 883K dl/mo - @antv/[email protected] - 751K dl/mo What the payload does (498KB obfuscated Bun script, runs via preinstall hook): - Harvests 20+ secret types: GitHub PATs, npm tokens, AWS keys, GCP service accounts, Azure creds, DB connection strings, Stripe keys, Slack tokens, SSH keys, Docker auth, Kubernetes configs, Vault tokens - Attempts Docker container escape if the host socket is reachable, spinning up a Privileged container with host filesystem bind mounts - Pulls a secondary payload via optional dependency antv/setup from antvis/G2 commit 1916faa, which was pushed 19 minutes before the npm publishes started

keyboard_arrow_left Previous keyboard_arrow_right Next

⚠️ Critical Linux Kernel Flaw ‘ssh-keysign-pwn’ Exposes SSH Keys and Shadow Passwords Source: cybersecuritynews.com/linux-kernel-v… A newly disclosed Linux kernel vulnerability is raising serious concerns across the security community, as it allows attackers to access highly sensitive data, including SSH private keys and password hashes, on affected systems. Tracked as CVE-2026-46333, the flaw has been nicknamed “ssh-keysign-pwn” and impacts a wide range of Linux distributions. The GitHub PoC ssh-keysign-pwn demonstrates exactly how to weaponize this race condition on pre‑31e62c2ebbfd kernels. #cybersecuritynews #Linux

That's a wrap on Day 2 of #Pwn2Own Berlin! Day Two added $385,750 and 15 unique 0-days, bringing event totals to $908,750 for 39 unique vulnerabilities. DEVCORE leads Master of Pwn with 40.5 points — but the fun ain't over yet, we've got one more day to go. See you tomorrow! #P2OBerlin

Them: Linux is most secure OS Me: Yes - Dirty Cow (CVE-2016-5195) - Dirty Pipe (CVE-2022-0847) - io_uring UAF (CVE-2022-2602) - Copy Fail (CVE-2026-31431) - io_uring ZCRX freelist (CVE-2026-43121) - Dirty Frag (CVE-2026-43284 CVE-2026-43500) - Fragnesia (CVE-2026-46300)

Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral. 373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more. The malware propagates by stealing your CI credentials and using them to publish new compromised versions. Full IOCs, affected package list, and detection steps: aikido.dev/blog/mini-shai…

Aikido @AikidoSecurity

3 months ago

🚨 Update: @MistralAI npm packages are now confirmed compromised as part of the ongoing Mini Shai Hulud attack. Affected versions: @MistralAI/mistralai 2.2.2, 2.2.3, 2.2.4@MistralAI/mistralai-azure 1.7.1, 1.7.2, 1.7.3@MistralAI/mistralai-gcp 1.7.1, 1.7.2, 1.7.3If you use the

21 123 748 843K 276

Security things from the last few days: - CopyFail (linux pwn'd) - CopyFail 2/Dirty Frag - 13 advisories in Next.js - Over 70 CVEs addressed in MacOS 26.5 - ~50 CVEs addressed in iOS 26.5 - YellowKey (Windows Bitlocker pwn'd entirely) - GreenPlasma (Windows privilege escalation) - CVE-2026-21510 and CVE-2026-21513 confirmed to be used by Russia for Windows RCE - CVE-2026-32202 separately confirmed to be used by Russia for sensitive document access - Mini-Shai Hulud (over 300 JS and Python packages compromised via GitHub Action cache poisoning) - Google confirms they have identified AI-powered exploitation of zero days in an unidentified "open-source, web-based system administration too" - Canvas (popular LMS used in most schools) pwn'd entirely - PAN-OS (palo alto networks) pwn'd with a 9.3 severity CVE-2026-0300 Are you scared yet?

‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you. The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads. The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate. Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.

@hetmehtaa Endusers