Tootfinder

Poland directs officials to ditch Signal in favor of 'secure' state-developed alternative
https://www.theregister.com/security/2026/05/18/poland-builds-its-own-signal-amid-security-co…

Poland builds its own Signal amid security concerns
Shift comes amid mounting reports of successful social engineering attacks targeting higher-ups in government

In his weekly Linux kernel post, Linus Torvalds says "AI tools are great" but the flood of duplicate AI bug reports has made the security list "unmanageable" (Simon Sharwood/The Register)
https://www.

Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable’
Multiple researchers using the same tools to find the same bugs are creating ‘unnecessary pain and pointless work’

«Security: This library has not undergone any third-party security audit. Usage is at own risk.»
If something like this is written on a code library, the confidence in your security is much higher than if commercial blenders want to advertise absolute IT security and there are the safest — especially when the commercial goals still list ratings in this way.
#security

Mehr Sicherheit im Amt: Wie das Bundesdruckerei-Projekt Möve Behörden-KI zähmt
Ein KI-TÜV der Bundesdruckerei soll das digitale Amt verlässlicher machen. Das kann Bürger vor fehlerhaften Algorithmen-Entscheidungen und Datenpannen schützen.

Mehr Sicherheit im Amt: Wie das Bundesdruckerei-Projekt Möve Behörden-KI zähmt
Ein KI-TÜV der Bundesdruckerei soll das digitale Amt verlässlicher machen. Das kann Bürger vor fehlerhaften Algorithmen-Entscheidungen und Datenpannen schützen.

#MicrosoftAuthenticator: Kritische #Sicherheitslücke ermöglicht Token-Diebstahl

Trump says he saw Anthropic last week as a national security threat, but signals relations have since improved because Dario Amodei was "nice" and "smart" at G7 (Maria Curi/Axios)
https://www.axios.com/2026/06/19/trump-anthropic-national-…

Exclusive: Trump tells "The Axios Show" that Anthropic was a national security threat
National security concerns and personality clashes landed Anthropic in the middle of a government crackdown.

Einige der zuletzt hier besonders häufig geteilten #News:
Microsoft Authenticator: Kritische Sicherheitslücke ermöglicht Token-Diebstahl

Microsoft Authenticator: Lücke ermöglicht unbefugten Zugriff
Microsoft warnt vor einer Sicherheitslücke im Authenticator. Angreifer können Sign-in-Token abgreifen und damit Zugriff erlangen.

«Critical Copilot vulnerability allowed hackers to steal 2FA code from users:
SearchLeak exploit shows why the industry’s approach to LLM security fails over and over.»
WTF: What is intelligent now and how to tackle what? Certainly not the usual popular AI for IT security.
☠️

Critical Copilot vulnerability allowed hackers to steal 2FA code from users
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.

Security researcher Peter G. Neumann, who criticized lax industry attitudes toward computer security and digital privacy, died on May 17 at the age of 93 (John Markoff/New York Times)
https://www.nytimes.com/2026/05/17/obituar

Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93
For decades, he criticized the industry’s lax attitudes toward both computer security and individual digital privacy. And he developed solutions.

Pwn2Own Berlin 2026: participants earned a total of ~$1.3M for 47 vulnerabilities, with successful exploits of AI products like Codex, Cursor, and LM Studio (Eduard Kovacs/SecurityWeek)
https://www.securityweek.com/hackers-earn-1-3-million-at-pwn2own-berlin-2026…

Hackers Earn $1.3 Million at Pwn2Own Berlin 2026 
Pwn2Own Berlin 2026 participants earned a total of nearly $1.3 millon for exploits targeting Windows, Linux, VMware, Nvidia, and AI products.