Malloc Privacy & Security VPN @MallocPrivacy

🚨 Five Eyes Cyber Agencies Issue Rare Joint Alarm: AI Cyber Threats Capable of Devastating Government and Business Attacks Are Months Away 1️⃣ Five Eyes cybersecurity leaders from the United States (NSA and CISA), United Kingdom (NCSC), Australia (ACSC/ASD), Canada, and New Zealand released a rare public joint statement on 22 June 2026 warning that frontier AI models will exceed current expectations and fundamentally transform both offensive and defensive cyber capabilities within months, not years. 2️⃣ Generative AI is rapidly lowering barriers for malicious actors by excelling at vulnerability discovery and exploit generation, which dramatically accelerates the speed, scale, and sophistication of attacks while shrinking the window between finding weaknesses and exploiting them. 3️⃣ The urgent warning follows the Trump administration's early June 2026 export control directive that blocked foreign nationals (including those inside the US) from using Anthropic's Mythos 5 and Fable 5 models due to their advanced cybersecurity capabilities and risks of safeguards being bypassed, forcing the company to suspend broad customer access for compliance. 4️⃣ Cyber risk can no longer be viewed as a purely technical issue; it is now a core business risk and leadership responsibility that demands a whole-of-organization and whole-of-society response, including prioritizing foundational practices such as reducing attack surfaces, accelerating patching, addressing legacy systems, and preparing for inevitable breaches through tested incident response. 5️⃣ While AI offers powerful defensive tools, experts stress that similar or more advanced models are emerging globally (including potentially from China and other actors), making immediate action on cyber resilience essential for business continuity, market confidence, and containing attacks before they escalate into major crises. Sources of information: 💠 The Guardian – “AI models capable of devastating attacks on governments and business months away, rare Five Eyes statement warns” by Sarah Basford Canales (22 June 2026): theguardian.com/technology/202… 💠 National Security Agency (NSA) – “Five Eyes Cyber Security Agencies Statement” (22 June 2026, includes full joint statement text and signatories): nsa.gov/Press-Room/New… 💠 Reuters – “‘Five Eyes’ intelligence alliance warns that new AI models pose urgent cyber risk” by Raphael Satter (22 June 2026): reuters.com/world/asia-pac… 💠 Axios – “Trump admin blocks foreign access to Anthropic's most powerful AI” (12 June 2026): axios.com/2026/06/12/ant… 💠 The New York Times – “U.S. Bars Foreigners From Using Anthropic's Most Advanced A.I. Models” (12 June 2026): nytimes.com/2026/06/12/tec… 💠 CNN – “AI could breach government and business defenses in months, US and allies warn” (23 June 2026): cnn.com/2026/06/23/wor… 💠 Australian Cyber Security Centre (via cyber.gov.au) – hosting of the Five Eyes joint statement (22 June 2026): cyber.gov.au/about-us/view-… #privacy #cybersecurity #android #ios #mobilesecurity #appsecurity #malware #spyware #malloc #news

It's #WorldSocialMediaDay! Digital connection is a great thing. But remember that people pay money on these platforms to wield invisible algorithms that shape your worldview. Stay judicious and autonomous, and don't forget to touch grass.

x.com/i/article/2071…

🇬🇧 ⚠️ IT EXPERTS WARN before tomorrow's trilogue: A deal could mean #ChatControl via backdoor + ID checks for messengers! Source: cepis.org/cepis-warns-eu… 🕛 24h to go. ✉️ Email tonight, 📞 call tomorrow! fightchatcontrol.eu/#contact-tool

Unpatched macOS bug could allow tampering trusted applications #macOS #bug #CyberSecurity cyberinsider.com/unpatched-maco…

Your Gmail might be feeding AI. Learn more⤵️ cnews.link/gmail-feeding-…

🌐The Malicious Domain Factory: 1.5 Million Domains Reveal Industrial-Scale Cybercrime and Clear Defender Chokepoints 1️⃣ Cybercriminals registered approximately 1.5 million malicious domains in the first five months of 2026, with the vast majority purposefully created by attackers rather than through compromise of existing sites, forming a highly efficient production pipeline. 2️⃣ Abuse shows extreme concentration in a handful of registrars (top four handling over a third), low-cost and popular TLDs such as .com, .top, .xyz, and .cc (top ten covering roughly two-thirds), and Cloudflare shared reverse-proxy infrastructure, which dominates hosting due to its scale and difficulty of network-level blocking. 3️⃣ Domains activate with remarkable speed—the median age at first detection on platforms like VirusTotal is only about two months, with many flagged within one day to one week of registration—severely limiting the window for proactive defense. 4️⃣ Brand impersonation is a core tactic, with heavy targeting of WhatsApp (tens of thousands of domains), Google, cryptocurrency exchanges, and gambling platforms for credential harvesting and phishing; a tiny fraction of domains drives the majority of harm, including one exceeding two billion DNS queries. 5️⃣ Over three-quarters of domains with usable records came from coordinated bulk batches (often 5+ same registrar and creation date) featuring short alphanumeric patterns indicative of automation; this industrial model creates actionable intervention points including bulk registration rate limits, faster automated abuse pipelines to providers like Cloudflare and AWS, prioritized sinkholing of high-traffic domains, and enhanced monitoring of heavily impersonated brands. Sources: Help Net Security – “The assembly line behind 1.5 million malicious domains” (June 12, 2026): helpnetsecurity.com/2026/06/12/mal… arXiv – “A Longitudinal Study of Recently Observed Malicious Domains” (arXiv:2606.11111, June 2026): arxiv.org/abs/2606.11111 (HTML: arxiv.org/html/2606.1111…) Interisle Consulting Group – “An Analysis of 2025 gTLD Registrations and Cybercriminal Demand” (June 2026): interisle.net/insights/cyber… #privacy #cybersecurity #android #ios #mobilesecurity #appsecurity #malware #spyware #malloc #news

🚨 Russian intelligence-linked phishers have a new Signal trick. FBI and CISA say they are asking targets to share their Signal Backup Recovery Key. If they get it, they can restore old backups, read message history, and take over the account. Here’s how the phishing works: thehackernews.com/2026/06/fbi-wa…

Wondering what kind of data a company has on you? You can ask companies for a copy of your data if you’re in the EU / the company operates in the EU… Read our guide to find out more tips privacyinternational.org/node/3845/

🛑 A fake support SMS was the entry point. Ukraine’s SSU and the FBI say Russian intelligence services targeted messaging accounts used by officials, military personnel, politicians, and activists. The goal: steal credentials and sensitive information. How the campaign worked: thehackernews.com/2026/06/ukrain…

To robotex cyprus είναι εδώ αυτό το Σαββατοκυρίακο στο Αθλητικό Κέντρο του Πανεπιστημίου Κύπρου Δέστε το πρόγραμμα ⬇️ @RobotexCyprus

Robotex Cyprus @RobotexCyprus

4 days ago

Το Σαββατοκύριακο δεν χάνετε στιγμή από το Robotex #Cyprus 2026. Όλοι οι αγώνες και οι σημαντικότερες στιγμές θα μεταδίδονται ζωντανά από το επίσημο κανάλι μας στο YouTube. Παρακολουθήστε τις ζωντανές μεταδόσεις εδώ: youtube.com/@robotexcyprus⁠ #Robotexcy26 @RobotexInt

keyboard_arrow_left Previous keyboard_arrow_right Next

0 4 0 665 0

A new study suggests the ban has had little impact on actual teen usage of platforms. More ⤵️ cnews.link/australia-teen…

Apple removed several popular Russian apps from its App Store reportedly due to sanctions, triggering criticism from several Kremlin officials therecord.media/russia-accuses…

NEW: Russia cracked activist's phone with Cellebrite. Hunted for political terms We @citizenlab found it. Russia's own official docs confirm they did it. @brewerov was sentenced to 4 years in prison. Thing is, @cellebrite had officially cancelled Russia's contract.. 1/

keyboard_arrow_left Previous keyboard_arrow_right Next

⚠️Tchap Account Hijack Exposes Public Chats of 73,467 French Civil Servants on Sovereign Government Messaging Platform 1️⃣ Tchap, France’s Matrix-protocol-based sovereign messaging platform developed by DINUM with ANSSI support and mandated for official public-sector communications since September 2025, experienced a security incident on June 7, 2026, when ANSSI detected suspicious activity later confirmed as account hijacking via likely social engineering. 2️⃣ Official statements confirm the compromised account enabled potential access only to unencrypted public discussion rooms by design; private end-to-end encrypted conversations and their full histories remained protected and inaccessible even after the account takeover. 3️⃣ DINUM reported that content potentially viewable involved 73,467 accounts (under 9% of more than 825,000 registered users), with basic profile data such as names, official emails, organizational affiliations, and avatars at risk of exposure from public rooms. 4️⃣ An unknown threat actor using the handle “misere” publicly claimed exfiltration of roughly 13.5 GB of data, including approximately 643,000 messages, 59,000+ media files, hundreds of room histories, and references to some “Diffusion Restreinte” restricted documents spanning nearly three years, though French authorities have not verified these volumes or confirmed widespread exfiltration. 5️⃣ In immediate response, DINUM disabled the malicious account, began detailed log analysis, formally notified France’s data protection authority CNIL, and issued clear guidance to all users that sensitive, personal, or professional-secret information must never be shared in public rooms and must be restricted exclusively to private encrypted channels. Sources Official DINUM Statement (June 8, 2026): numerique.gouv.fr/sinformer/espa… BleepingComputer – Over 73,000 French govt employees affected in Tchap messenger breach: bleepingcomputer.com/news/security/… Cybernews – French government chat breach hits 73,000 users: cybernews.com/security/73k-a… SecurityWeek – French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker: securityweek.com/french-governm… The Next Web – France’s sovereign messenger Tchap hit by account breach: thenextweb.com/news/tchap-fra… #privacy #cybersecurity #android #ios #mobilesecurity #appsecurity #malware #spyware #malloc #news

One more reminder - always use Adblock and never ever click on links from search results, and definitely not from ads! As you can see in the screenshot, there’s a malicious campaign currently targeting Uniswap users. I have a few thoughts and insights on this; you can read them below. A thread ⬇️

keyboard_arrow_left Previous keyboard_arrow_right Next

🟧 #HackTuesday 🟧 Hack Tuesday: Week 17 - 23 Jun 2026 ⚠️374 cyber attacks across 62 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 38 cyber attacks. ➡️The USA is the most affected country, accounting for 21.4% of incidents, with 80 cyber attacks. ➡️The Gov / Mil / LE sector is the most targeted, accounting for 19.5% of incidents with 73 cyber attacks. ➡️The estimated Critical cyber attacks account to 54 (14.4% of the total). ➡️Overall, the claimed compromised data amounts to approximately 44.8 TB. More details: hackmanac.com/news/hack-tues…

keyboard_arrow_left Previous keyboard_arrow_right Next

🚨 Malware is now trying to confuse the AI tools used to analyze it. Experts found Gaslight, a Rust-based #macOS implant linked to North Korea-aligned actors. It embeds fake system messages to push AI-assisted triage toward aborting or refusing analysis. See how it works: thehackernews.com/2026/06/new-ga…

🔴AI Blurs Reality, Fuels Scams, and Exposes Systemic Cyber Weaknesses Amid Enforcement Gains 1️⃣ AI-generated content and deepfakes have reached a tipping point where 85-88% of adults now struggle to distinguish real material from fabricated versions, with the figure rising sharply from 66% the prior year; this erodes basic online trust as personalized scams, voice-cloned calls, manipulated images, and fake reviews proliferate. 2️⃣ Half of surveyed adults encountered an AI-driven scam in the past year, including voice impersonation and identity abuse that hits younger users hardest, prompting many to post less personal content, delete old material, or limit family sharing while still seeing practical benefits in AI for editing and projects. 3️⃣ Supply-chain and software vulnerabilities continue to deliver high-impact breaches, such as OAuth token theft from competitive-intelligence platforms exposing Salesforce CRM data (contacts, quotes, and communications) at firms including Huntress, alongside critical unauthenticated remote code execution flaws in enterprise tools like Splunk that enable full system compromise. 4️⃣ Massive credential exposures and novel storage risks compound identity threats, with nearly 74,000 Fortinet firewall and VPN administrator credentials leaked from config files collected via prior compromises or brute-force, while decentralized networks now route encrypted data chunks into ordinary users’ browser tabs via IndexedDB for distributed storage. 5️⃣ Coordinated international law enforcement delivers tangible wins against entrenched malware operations, dismantling 106 servers and domains tied to SocGholish/FakeUpdates and cleaning nearly 15,000 compromised WordPress sites, even as researchers warn that deepfake detection is structurally losing ground to improving generative models and platforms prepare transparency measures for the 2026 election cycle. Sources: Vector Institute research on deepfake detection limitations (May 2026) — helpnetsecurity.com/2026/05/15/res… and arXiv preprint Malwarebytes official report and press release: “Face value: How AI is reshaping trust, identity, and scams” (June 10, 2026) — malwarebytes.com/ai-scams and malwarebytes.com/press/2026/06/… Help Net Security on Klue/Salesforce breach (mid-June 2026) — helpnetsecurity.com/2026/06/19/klu… Help Net Security on Splunk CVE-2026-20253 (June 19, 2026) — helpnetsecurity.com/2026/06/19/spl… Help Net Security on browser-based decentralized encrypted storage (June 19, 2026) — helpnetsecurity.com/2026/06/19/saf… Help Net Security on SocGholish/Operation Endgame takedown (June 18, 2026) — helpnetsecurity.com/2026/06/18/law… Help Net Security on FortiBleed Fortinet credential leak (June 18, 2026) — helpnetsecurity.com/2026/06/18/for… OpenAI election safeguards and transparency updates (2026) — openai.com/index/election… Help Net Security coverage of the Malwarebytes survey (June 11, 2026) — helpnetsecurity.com/2026/06/11/ai-… #privacy #cybersecurity #android #ios #mobilesecurity #appsecurity #malware #spyware #malloc #learn