Tootfinder

Each week, Metacurity offers our subscribers a run-down of the top infosec-related long reads we couldn't get to in the daily crush of news.
This week's selection covers
--France grapples with an unprecedented wave of data breaches,
--AI voice systems can be manipulated with malicious audio,
--Big Tech is backing a massive spying operation in Seattle,
-- Russia overreached on the cybercrime convention,
--Framing AI as an arms race threatens safety an…

Losing control of the systems meant to secure society - Best infosec long reads 5/23/26
France grapples with an unprecedented wave of data breaches, AI voice systems can be manipulated with malicious audio, Big Tech is backing a massive spying operation in Seattle, Russia overreached on the cybercrime convention, Framing AI as an arms race threatens safety and accountability

GitHub has confirmed that around 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension: https://www.bleepingcomputer.com/news/security/github-confirms-breach-of-3-800-repos-v…

GitHub confirms breach of 3,800 repos via malicious VSCode extension
GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

RE: https://mastodon.social/@zackwhittaker/116795508582464798
Hahaha, no.
(Needless to say, don’t upload your password or ID to any web site no matter how much it asks.)
Also, don’t click the link. It’s a malicious site that attempts to g…

The buck stops at ChatGPT
OpenAI says its AI technology acted on its own in an ‘unprecedented’ hack of another company
AI startup Hugging Face said last week that it had detected an intrusion into its data processing systems
that it suspected was caused by an AI agent autonomously acting on its own.
“We suspected last week’s cyberattack might have come from a frontier lab,
given the sophistication of the agent,”
Hugging Face co-founder and CEO Clément Dela…

OpenAI AI models hacked Hugging Face on their own, ChatGPT maker says
OpenAI has disclosed an "unprecedented cyber incident" where its AI system allegedly hacked into another AI company. OpenAI CEO Sam Altman stated that the incident occurred during model evaluations. Last week, AI startup Hugging Face detected an intrusion into its data processing systems. Hugging Face co-founder Clément Delangue confirmed the attack was from an AI agent, noting it was mind-blowing that it happened autonomously. Delangue emphasized there was no malicious intent from OpenAI. The…

The Milky Way Flipped its Disk Billions of Years Ago - Universe Today https://www.universetoday.com/articles/the-milky-way-flipped-its-disk-billions-of-years-ago

Hackers have stolen data from thousands of GitHub's internal code repositories after compromising an employee's device through a malicious extension for Visual Studio Code.
https://www.

GitHub confirms major breach linked to poisoned VS Code extension
Hackers have stolen data from thousands of GitHub's internal code repositories after compromising an employee's device through a malicious extension for Visual Studio Code.

https://rs.bot/DE7csh

Investigate Trump for malicious prosecution & abuse of process. IMPEACH HIM
Join 2,711 people. Impeach Trump. The list of Trump’s high crimes and misdemeanours worthy of impeachment is now so long that impeachment for all of them would prevent… Sign and Resistbot delivers your letter in minutes.

GitHub confirms breach of 3,800 repos via malicious VSCode extension
https://www.bleepingcomputer.com/news/security/github-confirms-breach-of-3-800-repos-via-malicious-vscode-extension/

GitHub confirms breach of 3,800 repos via malicious VSCode extension
GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

GitHub links the breach of 3,800 internal repositories to the TanStack npm supply-chain attack, saying hackers used a malicious Nx Console VS Code extension (Sergiu Gatlan/BleepingComputer)
https://www.bleepingcomputer.com/news/secu

It feels like Friday, but it’s only Wednesday — so don’t miss today’s Metacurity, covering the most important infosec developments you need to know, including
--GitHub says malicious VS Code extension compromised 3,800 internal repositories,
--White House release of EO on cyber and AI safety is imminent,
--Microsoft took down malware service Fox Tempest,
--A bug in a Huawei enterprise router caused Luxembourg telecoms outage last year,
--Mini Shai-Hulud malware r…

GitHub says malicious VS Code extension compromised 3,800 internal repositories
White House release of EO on cyber and AI safety is imminent, Microsoft took down malware service Fox Tempest, A bug in a Huawei enterprise router caused Luxembourg telecoms outage last year, Mini Shai-Hulud malware resurfaces across hundreds of npm packages, much more