Bowl of Data

Week 28 · 2026 · Bowl of Data

Wed, 08 Jul 2026 14:26:30 +0000

Week 28 · 2026 — 21 articles

Independent Labs Crack Google’s Secret Cryptography Work: Researchers at Google recently discovered a way to break 256-bit ECC encryption with much lower qubit counts than expected, but withheld their exact method using zero-knowledge proofs. The startup Eigen Labs successfully bypassed this secrecy by using AI agents and crowdsourcing to develop an even more efficient attack circuit.
GitLost: a public GitHub issue can steer an org's Agentic Workflow into leaking private repo contents, and a one-word prefix ("Additionally") bypassed the threat-detection guardrail: Noma Labs has uncovered 'GitLost', a vulnerability in GitHub Agentic Workflows that enables indirect prompt injection. By posting malicious instructions in a public issue, an attacker can trick the AI agent into leaking sensitive data from private organizational repositories.
Microsoft, Google and Cloudflare just made 2029 the new quantum deadline: Tech giants are moving up their quantum-safe security deadlines to 2029 to combat the accelerating threat of quantum decryption. Organizations are urged to begin cryptographic inventories and implement crypto-agility immediately to protect against 'harvest now, decrypt later' attacks.
Bitcoin Covenants part 3: SIGHASH_ANYPREVOUT: This article explores the technical mechanics of the SIGHASH_ANYPREVOUT proposal and its ability to allow signature reuse across compatible UTXOs. It details how removing outpoint commitment facilitates Layer-2 protocols while highlighting potential risks like signature replay.
Extract, Knock Offline, and Take Over Bluetooth Devices with Just a Laptop: The Whisper_Bully tool demonstrates a sophisticated three-stage attack against Bluetooth Fast Pair devices. It leverages a specific vulnerability to bypass privacy randomization, followed by L2CAP flooding and connection hijacking.
TorchJD: Training with multiple losses in PyTorch [P]: TorchJD is a specialized PyTorch library for optimizing neural networks with multiple simultaneous loss functions. It implements advanced methods like Jacobian descent and scalarization to resolve optimization conflicts in multi-task learning.
Windows Service - Playbook & Detection Strategies: This technical report details multiple methods for abusing Windows Services to achieve persistence and elevated privileges. It covers everything from traditional binary path modification to advanced techniques involving SDDL manipulation and service recovery hijacking.
Playing Around With ADIDNS RPC Internals: This technical deep-dive details the process of reverse-engineering and interacting with ADIDNS RPC internals. The author outlines a methodology for using specific RPC calls to manipulate debug log paths via UNC shares.
Bitcoin Mining Stocks Jump After TeraWulf Signs $19 Billion Lease With Anthropic: TeraWulf has entered into a landmark $19 billion, 20-year lease agreement with Anthropic to host AI data center operations in Kentucky. This strategic pivot toward AI infrastructure has triggered a broad rally across the Bitcoin mining sector.
EU lawmakers adopt digital assets policy stance after MiCA transition ends: The European Parliament has established a formal policy position to evaluate the expansion of crypto regulations beyond the current MiCA framework. The move aims to address unregulated sectors like DeFi and NFTs while ensuring market uniformity across the EU.
USDT wins payments, USDC wins DeFi as stablecoins diverge: Dune: Analysis from Dune reveals that USDT and USDC are moving toward specialized roles rather than direct competition. While USDT dominates global payments and remittances, USDC has become the primary liquidity driver for DeFi protocols.
Mobile app Toss and blockchain Optimism to conduct Korean won stablecoin POC : report: Toss has entered a partnership with Optimism and Sunnyside Labs to test a Korean won-based stablecoin for institutional payments. The three-month pilot focuses on integrating privacy-preserving technology with blockchain infrastructure to ensure regulatory compliance.
Base to activate B20 standard for stablecoins, RWAs and other tokens: Base is deploying the B20 token standard on its mainnet to provide a native framework for fungible tokens like stablecoins and RWAs. This deployment follows recent technical challenges involving sequencer outages during the network's Beryl upgrade.
Bad Epoll: The bug missed by Mythos: The article details the discovery of CVE-2026-46242, a critical race-condition bug in the Linux kernel's epoll subsystem. This vulnerability enables local privilege escalation to root on various platforms including Android.
Felons, Fraudsters Flog Offensive Cybersecurity Startup: The cybersecurity startup IRIS C2 is attempting to build a massive stockpile of high-value software exploits by offering multi-million dollar bounties. However, the company's leadership consists of Jack Burkman and Jacob Wohl, notorious figures known for orchestrating large-scale disinformation and fraud schemes.
The US Space Force just got a new electromagnetic weapon to jam adversary satellites: The U.S. Space Force is deploying the Meadowlands system to achieve spectrum dominance by jamming adversary satellite communications. This non-kinetic weapon allows for the reversible disruption of enemy space assets during combat operations.
Weak-to-Strong Generalization via Direct On-Policy Distillation: This technical paper proposes a new distillation paradigm called Direct-OPD to improve weak-to-strong generalization in reasoning models. By distilling only the policy shift induced by reinforcement learning, the method avoids the capacity limitations inherent in traditional teacher-student imitation.
KVpop -- Key-Value Cache Compression with Predictive Online Pruning: This technical paper presents KVpop, a technique for compressing the KV cache in transformer models via predictive online pruning. It optimizes the computation of attention targets by reusing sparse log-normalizers and utilizing efficient data structures like Fenwick trees.
VLA-Corrector: Lightweight Detect-and-Correct Inference for Adaptive Action Horizon: VLA-Corrector is a new inference framework that mitigates the risks of error accumulation in action-chunked robotic policies. By using latent-space monitoring and gradient guidance, it allows robots to dynamically truncate stale actions and replan when environmental deviations are detected.
From RGB Generation to Dense Field Readout: Pixel-Space Dense Prediction with Text-to-Image Models: This paper proposes ReChannel, a novel architecture that transforms text-to-image models from RGB generators into efficient dense prediction engines. By treating transformer tokens as spatial carriers for task-specific data rather than RGB pixels, the method achieves new state-of-the-art performance with much higher computational efficiency.
Bridging Interleaved Multi-Modal Reasoning as a Unified Decision Process: This paper presents BRAID, a framework that bridges interleaved multi-modal reasoning by treating it as a unified decision process via Reinforcement Learning. The method demonstrates that RL can close the performance gap between generative unified models and dedicated understanding-only VLMs.

Week 27 · 2026 · Bowl of Data

Fri, 03 Jul 2026 13:38:45 +0000

Week 27 · 2026 — 21 articles

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs: Security researchers at watchTowr have identified a critical memory overread vulnerability, CVE-2026-8451, affecting Citrix NetScaler appliances. The flaw allows for unauthorized memory disclosure when the device is configured as a SAML Identity Provider.
It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza) - watchTowr Labs: This technical report details a series of critical vulnerabilities in Adobe ColdFusion, highlighted by an exploit in the RDS module. The analysis demonstrates how unvalidated input in the RDS protocol allowed for arbitrary file system access.
Auditing OpenReception: 16 CVEs in an end-to-end encrypted appointment booking platform (unauthenticated admin creation, account takeover, E2E bypass): An audit of the OpenReception medical booking platform uncovered 16 vulnerabilities, featuring critical flaws in authorization logic. These exploits allow attackers to escalate privileges to global administrator and compromise the platform's core end-to-end encryption feature.
IMF says tokenization could transform settlement and financial stability: The IMF highlights that tokenization could revolutionize global finance by enabling near-instant settlement but warns of new infrastructure-based risks. Policymakers are now racing to establish regulatory frameworks to prevent market fragmentation and systemic failure.
AWS launches a desktop for agents: AWS has moved Amazon WorkSpaces for Agents into general availability, enabling AI agents to use virtual desktops to access legacy software. The system integrates MCP and computer vision to balance efficient tool-based tasks with visual GUI interactions.
Aikido acquires Root to backport open source fixes without forcing upgrades: Aikido Security has completed a $70 million acquisition of Root to introduce automated backporting of security patches. The move aims to remediate critical vulnerabilities in existing open source dependencies without forcing developers to undergo complex version upgrades.
Teaching AI to run with the turbines: Woodside Energy is evolving its AI strategy from individual productivity tools to a coordinated ecosystem of over 50 production-ready AI agents. The company emphasizes a structured approach involving standardized deployment patterns and rigorous governance via an internal AI council.
Phishers Gain Persistence at EU, Asia Hospitality Orgs: Cybersecurity researchers from Microsoft and Trend Micro have uncovered sophisticated phishing campaigns targeting hospitality organizations in Europe and Asia. These attacks leverage malicious archives to deploy persistent malware like Node.js implants and blockchain-based RATs to maintain long-term access.
Ondo Finance debuts SEC-aligned tokenized stock model with BlackRock ETF, Micron shares: Ondo Finance has introduced a new tokenized stock model that aligns with SEC-suggested custodial frameworks. This initiative aims to bridge traditional finance and decentralized markets by offering regulated access to equities like Micron.
Apple Reverses Age-Old Patch Policy to Keep Up With AI: Apple has transitioned to a more frequent security patching cadence to mitigate the risks posed by AI-driven cyberattacks. While this reduces the window for exploitation, experts warn that user behavior and the lack of advanced endpoint security frameworks on mobile remain significant vulnerabilities.
The biggest blockchain upgrades still to come in 2026: The blockchain landscape in 2026 is moving toward fundamental protocol enhancements focused on institutional utility and network stability. Key upgrades for Ethereum, Solana, and Base aim to optimize throughput, reduce latency, and improve governance.
Can Cursor Remain a Platform for OpenAI and Anthropic’s Models Inside SpaceX?: SpaceX's massive acquisition of Cursor raises critical questions about the future of interoperability in AI coding tools. The deal may force a confrontation between Musk's new venture and major model providers like Anthropic and OpenAI.
Hamiltonian Neural Networks from a Differential Geometry Perspective [D]: The article discusses why traditional neural networks fail to maintain physical conservation laws in dynamical systems. It proposes using differential geometry and symplectic structures to build architectures that inherently respect the physics of the problem.
Argot Roadmap Update 2026 (2/2): Argot Collective's 2026 update highlights major compiler optimizations via the new SSA-CFG backend designed to mitigate stack depth issues. The report also covers progress in Core Solidity and the necessity of updated security protocols following an influx of automated vulnerability reports.
Ethereum for Governments and Institutions: Why neutral infrastructure matters now: The Ethereum Foundation's new report, 'Ethereum for Governments and Institutions,' advocates for the adoption of decentralized protocols to replace fragile, centralized digital infrastructures. It emphasizes Ethereum's unique position as a neutral, battle-tested network capable of supporting critical public services like identity and registries.
What is a quantum computer good for? Absolutely nothing — yet: The article examines the discrepancy between the massive financial and political hype surrounding quantum computing and its current lack of practical utility. It highlights ongoing debates between corporate claims of progress and academic skepticism regarding hardware capabilities.
Is One Layer Enough? Training A Single Transformer Layer Can Match Full-Parameter RL Training: This study demonstrates that reinforcement learning post-training for LLMs is not a uniform process across all parameters but is concentrated in specific middle layers. By leveraging this discovery, researchers developed layer-aware training methods that outperform traditional full-parameter optimization.
Program-as-Weights: A Programming Paradigm for Fuzzy Functions: The researchers present Program-as-Weights (PAW), a paradigm that shifts LLM usage from expensive per-input API calls to a 'compile-once, run-locally' model using neural adapters. This approach allows small, specialized models to outperform massive foundation models on specific fuzzy tasks while maintaining high efficiency and privacy.
ELDR: Expert-Locality-Aware Decode Routing for PD-Disaggregated MoE Serving: ELDR optimizes MoE model serving in disaggregated environments by routing requests with similar expert activation patterns to the same decode workers. This approach reduces memory bandwidth bottlenecks and significantly improves decoding latency.
Distill to Detect: Exposing Stealth Biases in LLMs through Cartridge Distillation: This paper presents Distill to Detect (D2D), a technique for identifying stealthy, topic-specific biases in language models that evade standard detection. By distilling the distributional shift of a suspected model into a small prefix adapter, the method amplifies hidden signals until they become visible in generated text.
Distributed Attacks in Persistent-State AI Control: This document outlines a sophisticated red-teaming methodology for testing security monitors against compromised AI agents. It details how an attacker can use incremental, seemingly legitimate code changes to achieve long-term persistence and data exfiltration.

Week 26 · 2026 · Bowl of Data

Thu, 25 Jun 2026 21:15:59 +0000

Week 26 · 2026 — 23 articles

Trump Orders Acceleration of Quantum Readiness as Bitcoin Faces Coming Risk: President Trump signed executive orders to expedite U.S. quantum computing leadership and harden federal cybersecurity against future quantum threats. The mandate significantly moves up the deadline for implementing quantum-resistant encryption across government networks.
Europe Expands Quantum-GPU Computing as NVIDIA Announces 35 New AI Supercomputers: NVIDIA has announced a large-scale rollout of 35 new AI supercomputers across Europe to bolster quantum and scientific computing capabilities. The initiative focuses on integrating quantum hardware with GPU-accelerated infrastructure to facilitate hybrid quantum-classical research.
How Many Qubits Does a Quantum Computer Need?: The article reframes the debate over how many qubits are needed for quantum utility by focusing on logical vs. physical qubit ratios and specific application requirements. It identifies early scientific breakthroughs likely to occur within the range of tens to hundreds of logical qubits.
Big critique of Microsoft's Majorana approach: A new paper in the journal Nature accuses Microsoft of using flawed Python code and selective data reporting to claim a breakthrough in quantum computing. While Microsoft maintains its roadmap is sound, researchers argue the errors hide fundamental failures in achieving topological superconductivity.
CISA warns of max severity Ubiquiti flaws exploited in attacks: CISA is mandating rapid patching for critical vulnerabilities in Ubiquiti and Lantronix hardware that are currently being exploited by attackers. These flaws range from access control bypasses to remote command injection, posing a significant risk of full system compromise.
Ethereum Encrypted Mempool: Progress, Challenges & the Road to Hegota: The article details the technical roadmap for enhancing Ethereum's transaction fairness through the LUCID and FOCIL proposals. These upgrades aim to mitigate MEV exploits and censorship by introducing encrypted mempools and enforced inclusion mechanisms.
Grab Builds Secure Agentic AI Workload Platform: Grab's new Palana platform provides a secure, isolated runtime for autonomous AI agents to prevent security breaches like prompt injection and credential theft. It leverages Kubernetes-native features and proxy-based secrets management to ensure high-level security and auditability.
Fraunhofer IPMS Unveils Q-Dice Quantum Random Number Generator for Enterprise Security: Fraunhofer IPMS has unveiled Q-Dice, a high-speed quantum random number generator designed to secure networks against classical and quantum threats. The platform offers both hardware appliances for data centers and an API-driven cloud service for on-demand entropy.
Kuma: compiling PyTorch models into self-contained WebGPU executables [P]: Kuma introduces a way to run trained PyTorch models live in the browser by compiling them into a specialized '.iph' format. By leveraging WebGPU and embedded WGSL shaders, it eliminates the need for server-side inference or heavy runtime dependencies.
Anthropic gives @Claude a permanent seat in your Slack channels: Anthropic's new Claude Tag feature transforms Claude from a reactive chatbot into an autonomous agent living within Slack channels. It utilizes a unique 'agent identity' model to allow for secure, multi-user collaboration on long-running enterprise tasks.
Q2 2026 emerges as most-hacked quarter on record with 83 incidents: The second quarter of 2026 saw a record-breaking 83 crypto exploits, driven largely by vulnerabilities in cross-chain bridges. While the frequency of attacks is rising, the total value stolen remains lower than historical peaks due to reduced total value locked in DeFi.
Bitcoin developers want to fix the 'replace this transaction with a higher fee' button. Here's why: Developers are working to eliminate redundant RBF signaling in Bitcoin wallets to enhance user privacy. This change aims to prevent on-chain analysis from identifying specific wallet types through unique transaction signatures.
Circle, Nomura eye Japan corporate FX with stablecoin settlement: Report: Circle and Nomura are planning a partnership to facilitate near-instant FX settlement for Japanese corporations using USDC. This development occurs amidst a broader shift in Japan's regulatory framework toward more favorable tax treatments and standardized financial oversight for digital assets.
Kraken, Maple launch onchain warehouse facility for crypto-backed institutional loans: Kraken and Maple Finance have introduced a new onchain credit facility designed for institutional crypto-backed lending. The arrangement utilizes an SPV structure to provide secure, overcollateralized access to digital assets like BTC and ETH.
Infleqtion Launches America’s Quantum Space Initiative to Accelerate the Future of Quantum-Enabled Space Infrastructure: Infleqtion has unveiled America’s Quantum Space Initiative, a multi-partner effort to advance quantum-enabled space infrastructure. The initiative seeks to integrate quantum sensing and computing into next-generation space missions for defense and commercial use.
Chinese cybersecurity company 360 unveils “China's version of Mythos”, and Yitianzhen, to automate cyber defense: 360 Security Technology introduced two new AI models, Tulongfeng and Yitianzhen, to automate cyber offensive and defensive operations. The company aims to bridge the technological gap with US-based AI by focusing on scalable, automated defense systems.
SpaceX inks compute deal with Reflection AI, an open source AI lab: SpaceX has secured a $6.3 billion compute deal with Reflection AI to provide access to advanced Nvidia hardware. This agreement marks a significant infrastructure commitment for the open-source AI startup as it scales its model development.
IQM Named as Quantum Partner in HPE Hybrid Quantum-HPC Platform: HPE has named IQM Quantum Computers as a key technology collaborator for its new hybrid classical-quantum computing platform. The partnership focuses on integrating superconducting quantum processors with HPE Cray supercomputing infrastructure to accelerate complex workloads.
Wan-Streamer v0.1: End-to-end Real-time Interactive Foundation Models: Wan-Streamer is a new foundation model that enables seamless, low-latency audio-visual interaction by processing interleaved text, audio, and video tokens within a single causal Transformer. By moving away from cascaded modular pipelines, it achieves sub-second end-to-end latency suitable for real-time digital humans and embodied assistants.
RevengeBench: Reverse Engineering Code-Space Policies from Behavioral Experiments: Researchers have developed RevengeBench to test how well AI agents can reconstruct hidden decision programs by observing and interacting with them in game environments. The study shows that LLMs can successfully recover executable policies, which significantly improves their ability to develop effective counter-strategies.
Real-Time Voice AI Hears but Does Not Listen: Research shows that production-grade real-time voice AI models fail to act on emotional cues like crying or sarcasm, instead relying almost exclusively on the literal meaning of words. This discrepancy poses significant safety risks for deploying voice agents in sensitive sectors like healthcare and finance.
Are We Ready For An Agent-Native Memory System?: This technical comparison evaluates various state-of-the-art frameworks designed to implement long-term, scalable memory for AI agents. It categorizes research based on how information is represented, stored, extracted, retrieved, and maintained within LLM architectures.
Learning Action Priors for Cross-embodiment Robot Manipulation: This paper details a framework for training vision-language-action models that generalize across diverse robotic embodiments. By utilizing a unified action-state space and pre-training action priors, the model achieves robust performance in both simulated and real-world environments.

Week 25 · 2026 · Bowl of Data

Fri, 19 Jun 2026 16:53:26 +0000

Week 25 · 2026 — 11 articles

SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon: Researchers have identified a critical vulnerability chain called SearchLeak that allows attackers to exfiltrate enterprise data via Microsoft 365 Copilot. By combining prompt injection with an HTML race condition and Bing-based SSRF, attackers can bypass security controls with a single click.
Your Privacy My Cloak: Backdoor Attacks on Differentially Private Federated Learning: This paper challenges the assumption that Differential Privacy enhances Federated Learning security against backdoor attacks. The authors present 'Ring', an attack mechanism that leverages DP noise to conceal malicious updates from detection systems.
APPO: Agentic Procedural Policy Optimization: This paper proposes APPO, a method to enhance the training of autonomous LLM agents through more granular credit assignment. It moves beyond trajectory-level rewards by identifying and branching at specific high-impact decision points within the reasoning process.
France to Phase Out Non-Quantum Encryption as Bitcoin Security Concerns Grow: France is implementing a mandatory transition to quantum-resistant encryption for all certified security products by 2027. This regulatory shift responds to the growing threat of future quantum computers capable of breaking current cryptographic standards.
How does torch.compile() achieve massive speedups despite highly optimized NumPy functions? [D]: This article introduces tinytorchcompile, a simplified single-file implementation of the torch.compile mechanism focusing on operator fusion. It provides empirical evidence that fusing operations into a single kernel is essential for bypassing memory bandwidth limitations.
The first unpatchable iPhone exploit in six years targets chips still running Apple's latest iOS: Security researchers have identified a new unpatchable bootROM exploit named usbliter8 that affects several older Apple devices. The vulnerability stems from how USB controllers manage data packets, allowing for persistent hardware-level exploits.
Salesforce Data Thefts Continue via Klue App Compromise: A supply chain attack targeting Klue's market intelligence platform allowed threat actors to steal Salesforce customer data through OAuth token abuse. The Icarus extortion group is identified as the primary actor behind this recent wave of CRM-focused breaches.
Sandia National Laboratories and Quantinuum Validate 98-Qubit Helios Trapped-Ion Framework: Researchers have successfully validated the Helios 98-qubit trapped-ion quantum processor, showcasing industry-leading gate fidelities and advanced architectural features. The system's real-time control stack allows for complex algorithmic execution that challenges even the most powerful classical supercomputing architectures.
Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push: Accenture has announced a massive $4.1 billion initiative to dominate the OT cybersecurity market by acquiring stakes in Dragos, runZero, and NetRise. This strategic expansion focuses on providing comprehensive protection for critical infrastructure and industrial environments.
Algorand Plans to Be Ready for Quantum Computing Threat by End of 2027: The Algorand Foundation has unveiled a multi-year plan to integrate quantum-resistant protocols into its blockchain ecosystem by 2027. This includes implementing Falcon-based accounts and hybrid signatures to protect against future quantum computing attacks.
Bitcoin miners need billions to fund AI ambitions, led by IREN’s $21B gap: Bitcoin miners are attempting to pivot toward AI infrastructure to escape declining mining margins, but they face a massive $50 billion funding gap. This transition requires significant capital to upgrade modular mining sites into sophisticated, high-uptime data centers.

Week 24 · 2026 · Bowl of Data

Fri, 12 Jun 2026 19:28:34 +0000

Week 24 · 2026 — 12 articles

Claude Fable & Mythos released by Anthropic: Anthropic introduces Claude Fable 5 and Mythos 5, marking a significant advancement in autonomous AI capabilities for coding and science. While Fable 5 is safe for general use, Mythos 5 provides enhanced power for cybersecurity professionals through controlled access.
Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps: Former Signal engineers have unveiled Encrypted Spaces, a framework for building end-to-end encrypted collaborative platforms. The system uses zero-knowledge proofs to allow servers to manage and verify data changes without ever accessing the underlying unencrypted information.
Jupyter Enterprise Gateway - From Notebook to Kubernetes Cluster Admin - elttam: Researchers at elttam have identified critical vulnerabilities in Jupyter Enterprise Gateway that enable cluster-wide compromise. By exploiting improper validation of environment variables, an attacker can bypass security constraints to gain root access within a Kubernetes pod.
Field Demonstration of Trusted-Node QKD over Deployed Single-Mode and Multi-Core Fiber Infrastructure: Researchers have demonstrated a resilient 303 km quantum-secured network using a combination of single-mode and multi-core fiber technologies. The trial showcased high-efficiency photon detection and the ability to maintain secure communication through trusted-node relay even under simulated network noise.
“The manual model breaks”: What happens when agents write to production data: As autonomous AI agents scale, the risk of catastrophic production data loss increases due to the inability of human oversight to keep pace with machine-speed writes. lakeFS has launched a new service providing isolated data sandboxes and automated governance to ensure agentic workloads remain auditable and reversible.
A Quantum Clock Is Ticking for Bitcoin and Crypto—Here's How Stellar Is Preparing: The Stellar Development Foundation has unveiled a strategic roadmap to implement post-quantum cryptography to protect against future quantum computing attacks. The plan leverages Stellar's unique architecture to allow for seamless key migration without altering user addresses.
Landmark German ruling declares Google's AI Overviews are Google's own words and makes it liable for false answers: A German court has held Google liable for defamatory content produced by its AI Overviews, ruling that the technology generates its own substantive statements. This landmark decision shifts the legal responsibility from search engine intermediaries to direct content publishers for AI-generated summaries.
For the 2nd time in weeks, Microsoft packages laced with credential stealer: Threat actors have successfully compromised dozens of Microsoft-owned repositories to deploy the Miasma malware via supply-chain attacks. The malware is designed to steal cloud credentials and spread laterally through developer environments by exploiting AI coding agents.
LG, Arbitrum launch blockchain-based bid for $679B ad market: LG Electronics and Arbitrum are collaborating to build a decentralized advertising network that utilizes blockchain to automate ad inventory management. By removing intermediaries, the platform intends to provide greater transparency and cost efficiency for publishers and advertisers.
A 'Bitcoin DeFi' project just shut down with a brutal post-mortem: Users just didn't care: Bitcoin layer-2 project Botanix has announced its shutdown after failing to gain traction in the DeFi ecosystem. The collapse highlights a significant gap between developer ambitions for Bitcoin programmability and actual user demand for wrapped assets on Ethereum.
CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats: CISA has implemented a new directive forcing federal civilian agencies to remediate high-risk vulnerabilities in as little as three days. This rapid response requirement is a direct reaction to the increased ability of threat actors to use AI for automated bug hunting and exploitation.
Equipment finance platform Trad.Fi to bring $650M in private credit onchain: Trad.Fi has announced a plan to tokenize $650 million in private credit to streamline US equipment financing. The initiative leverages blockchains like Base and Avalanche to accelerate credit approval processes for manufacturers.

Week 23 · 2026 · Bowl of Data

Fri, 05 Jun 2026 20:23:04 +0000

Week 23 · 2026 — 14 articles

Microsoft Reveals '1,000x More Reliable' Quantum Chip as Bitcoin Threat Draws Nearer: Microsoft's new Majorana 2 quantum chip marks a significant leap in reliability, utilizing AI-driven research to enhance qubit stability. This progress brings the industry closer to scalable quantum computing and highlights the growing threat to existing cryptographic standards.
Red Hat npm packages compromised to steal developer credentials: More than 30 Red Hat npm packages were compromised in a supply-chain attack using the Miasma malware to steal developer credentials. The attack was executed via a compromised GitHub account and targeted various cloud and infrastructure secrets.
Mastercard expands onchain settlement in bet on stablecoins and always-on finance: Mastercard is integrating regulated stablecoins into its settlement infrastructure to facilitate continuous, around-the-clock payments. This initiative aims to modernize global finance by providing liquidity management options outside of traditional banking hours.
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts: Hackers manipulated Meta's AI customer support bot to bypass security protocols and hijack prominent Instagram accounts. The vulnerability allowed attackers to trigger password resets by tricking the AI into linking unauthorized email addresses to target profiles.
Unauthenticated RCE as QSECOFR via IBM i Management Central — port 5555, client-controlled verify flag, no credentials required (V7R4 and earlier): A critical pre-authentication remote code execution vulnerability has been discovered in IBM i Management Central. The flaw allows unauthorized attackers to execute commands with full system privileges by exploiting a custom binary protocol.
System Over Model, Tested: Reproducing Mythos’s FreeBSD Find on Local Open-Weight Models: The author tests if open-weight models can replicate the discovery of a FreeBSD RCE using the nano-analyzer pipeline. The study finds that while noise in large-scale scans can cause misses, improving the pipeline's scaffolding allows local models to successfully identify the bug.
Enter the WasmForge: Compiling Sliver into WebAssembly: WasmForge is a novel loader designed to wrap offensive security tools in WebAssembly to evade EDR detection. It achieves this by providing a custom runtime environment that bridges WASM modules to native host APIs without requiring changes to the original tool's source code.
BIP324, Miniscript, Changing Consensus segment - Bitcoin Optech Newsletter #408: This edition of the Bitcoin Optech newsletter explores critical upgrades for post-quantum resistance in P2P protocols and the Lightning Network. It also covers new proposals for miniscript wallet standardization and advancements in CTV-based vault implementations.
Quantum Error Correction with Toric Code at Atom Computing: Atom Computing has successfully demonstrated complete quantum error correction using neutral atom qubits and the toric code. This breakthrough enables the real-time detection and replacement of lost qubits, marking a major step toward scalable quantum computing.
IBM Plans $10 Billion Quantum Push as Efforts to Commercialize Quantum Intensifies: IBM is committing $10 billion to accelerate quantum computing capabilities, targeting the achievement of fault-tolerant systems by 2029. The plan includes a major partnership with the U.S. government to build a specialized quantum chip foundry in New York.
Cursor cuts prices and adds enterprise spend controls amid “tokenomics” reckoning: The AI coding market is moving away from predictable monthly fees toward variable, token-based pricing models. Consequently, companies like Cursor are launching new enterprise features to provide the visibility and control required by finance and IT teams.
OQC, JPMorganChase and AMD Commence Research Collaboration to Develop New Quantum-AI Platform in London: OQC, JPMorganChase, and AMD are collaborating to build a Quantum-AI Data Centre in London. The platform will integrate quantum hardware with AI and classical computing to research complex financial applications.
JPMorgan, Bank of America, Citi to start blockchain offensive with shared tokenized network: Major US banks are building a shared blockchain-based network for tokenized deposits to counter the threat of stablecoins. The project aims to provide crypto-like payment efficiencies while keeping deposits within the traditional banking system.
Bitcoin Miners Emerge as 'Power Landlords' of AI Boom—And Revenue Will Surge: Bernstein: Bitcoin miners are emerging as 'power landlords' by leveraging their large-scale electrical infrastructure to support AI hyperscalers. This strategic shift is expected to drive massive revenue growth as the demand for AI computing power accelerates.

Week 22 · 2026 · Bowl of Data

Sun, 31 May 2026 14:07:37 +0000

Week 22 · 2026 — 13 articles

Beyond a Single Quantum Chip: Why the Future of Quantum Computing is Modular: The quantum computing field is shifting its focus from building single, massive processors to developing modular, interconnected systems. This strategic pivot allows for the combination of diverse qubit modalities and advanced networking technologies, paving the way for scalable quantum data centers.
US's big bet on quantum computing may not be entirely legal: The US government has committed $2 billion in equity investments to support the quantum computing sector. However, this funding is being challenged by Congress, which argues the money was intended only for semiconductor research, not general quantum development.
What scanners are actually trying against AI infrastructure: This report details the rising trend of opportunistic scanning targeting AI-related services and infrastructure. It highlights specific threats to unauthenticated Ollama instances and the use of coordinated sweeps to harvest AI API keys from configuration files.
ERC-7943 author says institutions can’t play DeFi’s ‘pirate game’: The article examines the challenges of bringing regulated Real-World Assets (RWAs) onto decentralized finance platforms, noting that current DeFi infrastructure lacks necessary compliance and identity frameworks for institutional adoption. New standards are attempting to solve interoperability issues, but the market must also address critical institutional needs for privacy and global standardization.
Companies like SpaceX want electromagnetic catapults on the moon. Could they be used as weapons?: The report examines lunar mass drivers, electromagnetic catapults proposed for space launch, highlighting their potential to revolutionize space logistics by eliminating reliance on chemical rockets. However, this dual-use capability makes them highly sensitive strategic assets, capable of serving as undetectable, potent first-strike weapons in the geopolitical race for lunar and cislunar control.
SEC approves Paxos as ‘blockchain-native’ clearing agency: Paxos has achieved a major regulatory milestone by becoming the first "blockchain-native" firm registered with the SEC as a clearing agency. This approval is set to accelerate the integration of blockchain technology into traditional U.S. securities settlement and financial markets.
Some of my perspective on where the EF is going | Vitalik: The Ethereum Foundation is undergoing a strategic transition, adopting the role of a specialized, focused node rather than the central authority for the entire network. The technical roadmap emphasizes prioritizing core principles—specifically censorship resistance and privacy (CROPS)—over simply chasing maximum transaction throughput.
DTCC plans to bring tokenized assets to Stellar in latest Wall Street blockchain push: DTCC has announced plans to link its tokenized securities platform with the Stellar blockchain to facilitate the management of traditional financial assets. This expansion is part of a broader multi-chain strategy to enhance interoperability between traditional and digital markets.
Bitwise bets Hyperliquid could power future finance as HYPE ETFs gain traction: Bitwise is promoting Hyperliquid as a critical piece of financial infrastructure, leveraging its HYPE ETF products to attract institutional capital. The firm argues that Hyperliquid's strong tokenomics and growth in perpetual futures position it well for mainstream adoption despite regulatory challenges.
Update on Quantinuum’s IPO Filing: Quantinuum submitted an amended S-1A filing for its Initial Public Offering, finalizing its valuation and share structure. Crucially, the filing also detailed a significant non-binding agreement with the U.S. Department of Commerce for up to $100 million under the CHIPS Act, focusing on advanced quantum hardware development.
Scientists trained an AI model using an IBM quantum computer — and it answered questions correctly that the base model couldn't: Scientists successfully demonstrated quantum enhancement in large language models by creating a hybrid system that integrates quantum circuit blocks. This novel approach significantly improved the LLM's perplexity and factual accuracy, paving the way for more powerful, resource-efficient AI.
Websites have a new way to spy on visitors: analyzing their SSD activity: A new side-channel attack named FROST allows websites to bypass browser sandboxing by analyzing SSD latency. By using deep learning to process I/O traces, attackers can fingerprint the applications and websites running on a user's device.
US Space Force confirms SpaceX will build sensor-to-shooter targeting network: The US Space Force has awarded SpaceX a $2.29 billion contract to develop the Space Data Network (SDN) Backbone. This network will leverage Starshield technology to create a resilient, high-speed communications layer for global military operations.

Week 21 · 2026 · Bowl of Data

Wed, 20 May 2026 16:04:32 +0000

Week 21 · 2026 — 51 articles

Article: Kernel-Level Ground Truth: Why eBPF is Replacing User-Space Agents for Security Observability: The article argues that traditional user-space security monitoring agents are structurally weak because they share privileges with the workloads they monitor, allowing attackers to easily disable them. eBPF solves this by embedding probes directly into the Linux kernel's syscall interface, providing robust, high-performance, and persistent visibility into all system activity.
The SEC Is About to Allow Tokenized Stocks on Blockchain: The SEC is poised to greenlight an Innovation Exemption framework, allowing traditional securities like Apple stock to be tokenized and traded on public blockchains. This move is highly significant as it legitimizes DeFi infrastructure and permanently integrates the established US equity market with blockchain technology.
Aramco and Pasqal Launch Commercial Quantum Computing as a Service Platform in Saudi Arabia: Aramco has partnered with Pasqal to introduce the Middle East’s first commercial Quantum Computing as a Service (QCaaS) platform in Saudi Arabia. This cloud-based infrastructure uses a 200-qubit, neutral-atom QPU to solve high-value industrial problems across energy and logistics, aligning with Saudi Vision 2030 goals.
Senator Adam Schiff Proposes Bill Requiring Data Centers to Pay for Own Power: Sen. Adam Schiff has introduced legislation that would legally require massive data centers to take financial responsibility for their own power and necessary grid upgrades. This measure aims to curb rising energy costs and ensure the stability of the power grid amidst the escalating energy demands of artificial intelligence.
Bernstein: Bitcoin miners becoming critical suppliers in AI infrastructure: Bitcoin miners are pivoting from traditional crypto mining to become key providers of AI infrastructure due to their control over large power capacities and data center real estate. This shift is driven by the fact that electricity access is the main bottleneck for AI data centers, giving miners a strategic advantage.
Bitcoin faces outsized quantum threat as computing breakthroughs accelerate, Citi says: Citi warns that advances in quantum computing present a significant, accelerating risk to the cryptographic foundations of cryptocurrencies. The report suggests Bitcoin is more exposed than Ethereum, particularly due to public keys already visible on the blockchain, necessitating rapid adoption of post-quantum cryptography.
Iran demands Big Tech pay fees for undersea Internet cables in Strait of Hormuz: Iran's demands for fees on undersea cables in the Strait of Hormuz have severely disrupted global internet connectivity and halted major repair efforts. As a result, tech companies and Gulf nations are urgently pivoting to developing overland fiber routes to ensure continued data flow between the Gulf and Europe.
Google Search as you know it is over: Google announced a massive AI-powered overhaul of Search, signaling the end of the traditional 'blue links' model. The new system will provide interactive experiences, custom mini-apps, and sophisticated information agents powered by Gemini, fundamentally changing how users access and act on web information.
Bitcoin Faces Greater Quantum Computing Risk Than Ethereum, Citi Warns: Citi analysts warn that quantum computing advances threaten crypto assets, predicting that Bitcoin is structurally more vulnerable than Ethereum. The primary challenge for Bitcoin is not merely technical but involves difficult governance consensus required to implement quantum-resistant upgrades.
HIVE Digital Technologies plans 320 MW AI infrastructure project in Canada: The crypto mining sector is undergoing a significant transformation, with companies like HIVE investing billions into massive AI data centers. This strategic pivot allows mining firms to stabilize revenue streams by leveraging high-performance computing services as Bitcoin mining profitability becomes more challenging.
Lasers in moon craters could create a lunar GPS system: Researchers propose utilizing ultrastable lasers placed in permanently shadowed lunar craters to create a self-sufficient navigation system, effectively functioning as a lunar GPS. This method leverages the extreme cold and vacuum of these craters to stabilize precision optical cavities, which is critical for future Artemis missions and lunar infrastructure development.
Google adds voice-based prompting to Docs and Keep: Google announced major advancements at I/O, introducing voice-based prompting across its Workspace apps like Docs, Keep, and Gmail. This allows users to perform complex, multi-step tasks and manage information through natural conversation, significantly changing how users interact with their digital data.
A Texas Drainage District Walked Its Ditch on a Routine Inspection. They Found a Pipe They Didn't Recognize Discharging Black Liquid From Tesla's $1 Billion Lithium Refinery: Local Texas workers discovered that Tesla's lithium refinery is discharging wastewater containing multiple pollutants into a local ditch. Despite state regulators clearing the discharge, independent testing revealed concerning levels of heavy metals and lithium, highlighting significant gaps in environmental monitoring and regulatory oversight of the growing EV supply chain.
Quantum eMotion and JMEM TEK Execute Consortium Agreement for Hardware Root-of-Trust SoC Development: Quantum eMotion and JMEM TEK have partnered to develop a highly secure, quantum-resilient System-on-Chip (SoC). This platform will integrate advanced cryptographic hardware and quantum entropy sources to meet the rigorous security demands of critical infrastructure.
GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security: GhostTree is a sophisticated attack technique utilizing NTFS junctions to create recursive, branching file path loops. By generating an effectively infinite number of valid paths, it can cause directory scanning tools and EDR products to hang, thereby allowing malicious files to remain unexamined.
Pathfinding Labs: Deploy, test, and learn from 100+ intentionally vulnerable AWS environments: Pathfinding Labs is a new resource offering over 100 intentionally vulnerable AWS environments for security professionals. It enables red and blue teams to practice exploiting complex, real-world misconfigurations and validate the effectiveness of their detection and CSPM tools.
Iran demands Big Tech pay fees for undersea Internet cables in Strait of Hormuz: Iran's demands for fees on undersea cables in the Strait of Hormuz have severely disrupted global internet connectivity and halted major repair efforts. As a result, tech companies and Gulf nations are urgently pivoting to developing overland fiber routes to ensure continued data flow between the Gulf and Europe.
Swan Bitcoin Hit With Nearly $1 Billion Lawsuit Over Prime Trust Collapse: PCT Litigation Trust has filed a major lawsuit against Swan Bitcoin, accusing the firm of using inside information to shield assets worth nearly $1 billion during the collapse of Prime Trust. The suit claims that Swan was able to transfer significant crypto holdings, including BTC and XRP, just prior to the bankruptcy filing, thereby minimizing potential losses for itself.
Podcast with Brian Gaucher, Co-Chair of ERVA Report on Quantum Technologies: Experts argue that while U.S. quantum science is strong, global competition demands a shift from basic physics discovery to engineering scalable, manufacturable systems. The solution requires a coordinated, national strategy—similar to the semiconductor industry—to build shared infrastructure, standards, and a robust workforce.
Meta Made $56B in Q1 and Is Still Firing 8,000 People to Pay for AI: Meta reported record revenue in Q1 2026, but this success is coupled with major layoffs of 8,000 employees. The company is aggressively redirecting profits and capital expenditure toward massive AI infrastructure buildouts, signaling a drastic corporate pivot.
Vast, builder of private space stations, launches line of high-power satellites: Vast, a private space station developer, announced a major expansion into the satellite market by launching a line of high-power satellite buses. The company is leveraging technology proven during its Haven Demo test flight to serve diverse sectors like communications and national security.
Gen Z's AI backlash is getting louder: Gen Z's relationship with AI is marked by growing anxiety, leading to public backlash during events like commencement speeches. This concern stems from fears of job replacement and documented instances of employees actively resisting corporate AI strategies.
Barnes & Noble CEO backs selling AI-written books in stores: Barnes & Noble CEO James Daunt announced that the company is willing to sell AI-written books in its stores, provided that the books are transparently labeled as synthetic content. He stressed that the key criterion is maintaining clarity for the customer, ensuring the book does not falsely imitate human authorship.
SpaceX launches 24 Starlink satellites on Falcon 9 launch from California: SpaceX conducted a successful launch on May 19th, deploying 24 additional Starlink satellites from Vandenberg Space Force Base. This mission brought the massive Starlink network closer to 10,500 working units, while also demonstrating the recovery of a reusable Falcon 9 booster.
Worker dies at SpaceX's Starbase in leadup to Starship V3 megarocket launch: A worker passed away at SpaceX's Starbase facility in South Texas as the company prepared for the Starship V3 launch. The incident prompted an investigation by OSHA and highlights ongoing concerns regarding worker safety and injury rates at the massive rocket testing site.
The biggest data center ever is becoming a huge problem in Utah: The massive Stratos data center in Utah promises to boost American AI dominance but raises significant concerns regarding environmental sustainability. Experts warn that the project's enormous power demands, thermal output, and water consumption could severely damage the local ecosystem and strain state resources.
AI Is Too Expensive: AI is, as it stands, not economically viable for anybody involved other than the construction firms, NVIDIA, and the surrounding hardware companies benefitting from the irrational exuberance of a data center buildout that doesn’t appear to be happening at the speed we believed: The article critiques the unsustainable economic model of the current AI boom, arguing that the massive capital expenditures by hyperscalers like Microsoft and Amazon are not matched by sufficient, consistent revenue streams. The author stresses that for AI to be profitable, revenue must explode dramatically, and the operational costs (OpEx) of running data centers must be accounted for.
America's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens – and incredibly obvious filenames: The US Cybersecurity and Infrastructure Security Agency (CISA) was found to have left a massive GitHub repository containing plain-text credentials and infrastructure secrets public for six months. The leak, discovered by a GitGuardian researcher, exposed access to critical systems like AWS, Azure, and Kubernetes, highlighting severe internal security lapses.
Discord rolls out end-to-end encryption on voice, video calls: Discord has implemented mandatory end-to-end encryption (E2EE) for all voice and video communication across its platform. This major update extends the DAVE protocol to secure DMs, group chats, and live streams, significantly boosting user privacy.
The Fed Has 120 Days to Explain Why Crypto Can't Access Its Payment System: It's Never Had to Explain Itself Before: President Trump issued an executive order requiring the Federal Reserve to conduct a 120-day review of crypto access to its payment rails, forcing transparency into previously discretionary processes. This mandate restricts the Fed's ability to deny applications without explanation, placing the institution and its chair on a public record.
Former OpenAI Staffers Warn That xAI’s Poor Safety Record Could Complicate SpaceX’s IPO: Former OpenAI employees have warned that the safety track record of Elon Musk's xAI poses significant risks to SpaceX's planned massive IPO. They argue that xAI's lack of robust safety protocols and governance transparency could lead to increased regulatory scrutiny and investor skepticism.
Bitcoin holds near $77,400 as derivatives signal caution: Despite Bitcoin's recovery to $77,400 and gains in select altcoins, the derivatives market indicates a cautious sentiment. The notable drop in crypto futures volume and open interest suggests that many major market players are reducing their overall risk exposure.
How to watch SpaceX launch its 1st Starship V3 megarocket on May 21: SpaceX is launching its advanced Starship V3 megarocket for a major suborbital test flight. This mission is critical for testing next-generation Starlink hardware and analyzing the vehicle's heat shield, moving humanity closer to lunar and Martian exploration.
Bitcoin’s momentum is fading: Traders have these support levels in mind: Market analysts report that Bitcoin's upward momentum is weakening after a recent drop, making the $74,000-$76,000 support zone a critical battleground for bulls. The price action is closely monitored using technical indicators, as a breach of this support could signal a deeper correction down to $65,000.
HYPE Surges 101% This Year: What’s Driving Hyperliquid’s Growth?: Hyperliquid's native token, HYPE, is showing dramatic growth, decoupling from Bitcoin's performance due to the platform's successful diversification into real-world assets and traditional finance. The exchange is being viewed as a 'super app' with multi-billion dollar potential, attracting significant institutional interest evidenced by planned ETFs and massive trading volumes.
PacketLight and Quantum XChange Partner to Deliver Crypto-Agile Optical Transport Solutions: PacketLight and Quantum XChange have launched a strategic solution to enhance the security of optical transport networks. This joint platform integrates both post-quantum cryptography and physics-based QKD, offering carriers and defense networks protection against future decryption threats.
Quantinuum and Synopsys Partner to Integrate Quantum Algorithms into Engineering Simulation Workflows: Quantinuum and Synopsys announced a strategic partnership to embed quantum algorithms directly into industrial engineering simulation software. This initiative aims to overcome the computational limits of classical high-performance computing by providing quantum-native solvers for complex physical modeling.
Italtel and Quantum Bridge Technologies Form Strategic International Post-Quantum Security Partnership: Italtel and Quantum Bridge Technologies have formed a strategic partnership to deploy quantum-safe network security solutions. This initiative leverages QBT's proprietary Distributed Symmetric Key Establishment (DSKE) technology to protect critical infrastructure from advanced quantum cryptanalytic threats.
GitHub hit by a compromised VSCode extension: GitHub reported detecting and containing a security breach concerning unauthorized access to its internal repositories. The compromise originated from a poisoned VS Code extension found on an employee's device, prompting immediate incident response measures.
Cyber resilience defines SME competitiveness: Cybercriminals are increasingly operating as professional, profit-driven enterprises, utilizing automation and AI to execute rapid attacks against SMEs. To mitigate this risk, businesses must pivot from simple technical compliance to building deep, operational cyber resilience across their entire supply chain.
Bitcoin rebounds above $77,000. Analysts weigh in on whether the bounce has legs.: Bitcoin has bounced above $77,000, but analysts warn that the sustained recovery depends on stabilizing ETF inflows and favorable macro conditions. The market is currently consolidating between key moving averages, suggesting that a decisive directional move awaits a break above or below critical support and resistance levels.
NASA's Psyche probe takes awesome images of Mars on way to (possibly) precious asteroid: The Psyche probe successfully executed a close flyby of Mars, gathering vital imagery and calibrating its instruments. This maneuver provided a crucial gravity assist boost, setting the spacecraft on its course for the metal-rich 16 Psyche asteroid in 2029.
This Bitcoin price model targets ‘conservative’ $255K by year-end: A long-term valuation model suggests Bitcoin (BTC) could rally to a $255,000 target by the end of 2026, recovering significantly from recent price declines. Despite warnings from bearish indicators like the bear flag, on-chain data and multiple expert analyses point to strong long-term support and continued upward momentum.
South Carolina Passes Law Banning CBDCs While Protecting Crypto Users, Bitcoin Miners: South Carolina has passed a landmark piece of legislation, Senate Bill 163, which effectively bans the state's use of Central Bank Digital Currencies (CBDCs). The bill provides significant legal protections for private digital asset users, ensuring rights to self-custody and shielding crypto miners from undue regulation.
Trump's Truth Social Pulls Bitcoin ETF Application From SEC Review: Trump Media & Technology Group has pulled its ETF applications for Bitcoin, pivoting its strategy to utilize the '40 Act structure for greater flexibility. This move comes amid intense competition in the booming U.S. spot Bitcoin ETF market, highlighted by the launch of Morgan Stanley's low-cost offering.
Bitfinex traders double down on bitcoin during five-day slide as longs hit 2.5-year high: Bitcoin has dropped significantly over the past week, but data shows that leveraged long positions on Bitfinex are at a two-and-a-half-year peak. This divergence suggests that large traders are accumulating the asset even as the price faces major technical resistance levels.
Russia's plan to advertise on rockets and spacecraft takes off: Roscosmos has introduced amendments allowing advertising on its space assets starting in 2026 to boost private investment. This move is a response to severe financial losses incurred due to Western sanctions and reflects the ongoing operational challenges facing the Russian space program.
Bitcoin, ether, XRP rebound as Senate curbs Trump's Iran war powers: Major cryptocurrencies experienced a significant bounce following the Senate's vote to curb potential conflict and positive regulatory signals from the Federal Reserve. These gains were reinforced by traditional market indicators, suggesting improved institutional confidence and liquidity for the crypto sector.
'The Mandalorian and Grogu' clip reveals how Mando gets his Razor Crest spaceship back (video): The highly anticipated film, The Mandalorian and Grogu, will feature the return of Mando's iconic Razor Crest spaceship. Although the original ship was destroyed in Season 2, the movie reveals Mando utilizing a restored, modified version belonging to an Imperial collector.
An astronaut's view of Argentina's snow-capped mountains | Space photo of the day for May 20, 2026: NASA astronaut Jessica Meir captured a stunning image of Argentina's snow-capped Andes Mountains and Lake Argentino while aboard the International Space Station. Beyond its visual beauty, the photograph highlights the critical role of specialized photography training given to astronauts for scientific documentation and Earth observation.
Galactic starlight will take your breath away | Space photo of the day for May 19, 2026: A new image of the M77 galaxy, or Squid Galaxy, has been released by NASA's James Webb Space Telescope. The image provides a detailed look at the galaxy's core, where intense radiation is emitted due to the influence of a central black hole.

Week 20 · 2026 · Bowl of Data

Thu, 14 May 2026 17:55:16 +0000

Week 20 · 2026 — 13 articles

Postmortem: TanStack npm supply-chain compromise: An attacker successfully compromised 42 TanStack npm packages by chaining GitHub Actions cache poisoning with OIDC token extraction. The breach allowed for the unauthorized publication of malicious versions that could exfiltrate sensitive cloud and infrastructure credentials.
Giving Claude Code Full Control of a Hardware Fault Injection Setup to Bypass Secure Boot: Researchers demonstrated a successful hardware Fault Injection attack where an AI agent, Claude Code, was given control over hardware tools to bypass Secure Boot on an ESP32. This represents a significant milestone in the use of agentic AI for automating complex hardware exploitation workflows.
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation: Google has uncovered a new threat involving a zero-day 2FA bypass exploit likely created using AI-generated Python code. Additionally, the report highlights PromptSpy, an Android malware that leverages Gemini AI to perform autonomous malicious actions on mobile devices.
Dead.Letter (CVE-2026-45185) How XBOW found an unauthenticated RCE on Exim: Researchers have identified a critical unauthenticated remote code execution vulnerability in the Exim mail server, tracked as CVE-2026-45185. The bug stems from a use-after-free condition during TLS shutdown when GnuTLS is employed.
Microsoft France's legal affairs director told the French Senate, under oath, that he can't guarantee European "sovereign cloud" data stays out of US reach: The text argues that European digital sovereignty is being hollowed out by the legal reach of the US CLOUD Act and the aggressive lobbying of American hyperscalers. It details how strategic acquisitions and legislative influence are bringing essential European infrastructure under US jurisdiction.
Official CheckMarx Jenkins package compromised with infostealer: The TeamPCP hacker group has compromised the Checkmarx Jenkins AST plugin by leveraging credentials stolen from a previous Trivy scanner breach. This supply-chain attack allows for the delivery of credential-stealing malware to developer environments.
Gartner: GenAI has broken traditional cybersecurity awareness – what comes next?: The rapid adoption of Generative AI is expanding the human risk surface through shadow AI and advanced, AI-augmented external attacks. To mitigate these evolving threats, cybersecurity leaders must move beyond traditional awareness training toward behavior-driven security culture programs.
$14 Trillion BlackRock Picks Ethereum for Tokenized Funds: BlackRock has updated its filings to include Ethereum-based ERC-20 tokens for its tokenized money-market fund shares. This initiative aims to provide liquid, on-chain reserve assets for stablecoin issuers and institutional investors.
Protocol Cluster Updates: May 2026: The Ethereum Protocol Cluster has reached several technical milestones for the upcoming Glamsterdam upgrade, including gas limit floors and ePBS stabilization. The update also details a leadership handover as several key contributors depart the Ethereum Foundation.
'I don't think that's crazy': Here is why Circle is betting on new $3 billion blockchain: Circle is launching the Arc blockchain to transition from a stablecoin issuer to a broader financial infrastructure provider. The project's $3 billion valuation reflects significant interest from major institutional investors like BlackRock and a16z.
DTCC builds out blockchain-based collateral system with Chainlink integration: DTCC has announced the use of Chainlink infrastructure to power its new blockchain-based collateral management platform. The system aims to modernize global risk management through real-time asset tokenization and automated settlement.
Bitcoin mining pools with 75% of BTC hashrate join open standard for block construction: Seven of the world's largest Bitcoin mining pools have officially joined the Stratum V2 working group. This move allows individual miners to control block template construction, reducing the power of pool operators to decide transaction selection.
Square Crosses 1 Million Bitcoin-Enabled Merchants As Real-World Adoption Continues To Grow: Square has surpassed one million merchants capable of accepting Bitcoin via its automated enrollment process. The company is also expanding its Bitcoin ecosystem through NFC tap-to-pay features and enhanced self-custody tools.

Week 19 · 2026 · Bowl of Data

Fri, 08 May 2026 12:39:40 +0000

Week 19 · 2026 — 13 articles

Uber Shares What Happens When 1.500 AI Agents Hit Production: Uber is managing the deployment of over 1,500 AI agents by implementing a centralized MCP gateway and registry. This infrastructure addresses critical challenges in security, tool discovery, and development standardization across their engineering organization.
We probed 6,000 web apps for Stripe webhook signature checks. 1,542 don't bother: A security scan discovered that 25% of 6,000 web applications fail to verify Stripe webhook signatures, allowing for unauthorized payment bypass. This flaw enables attackers to forge successful payment events and upgrade account statuses without actual charges.
Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama (CVE-2026–7482): A critical vulnerability in Ollama allows unauthenticated attackers to trigger an out-of-bounds heap read via malicious GGUF files. This exploit can expose sensitive information like user messages and system prompts by leaking them into newly created model files.
DigiCert: Misissued code signing certificates: Threat actors compromised DigiCert support endpoints by sending malicious attachments through a customer chat channel. This breach enabled the unauthorized retrieval of certificate initialization codes, resulting in the misissuance of 60 code signing certificates.
Popular DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026: Attackers compromised legitimate DAEMON Tools installers to distribute trojanized, digitally signed binaries that execute malicious code upon system startup. The campaign utilizes an initial information collector to profile victims before deploying advanced payloads like the QUIC RAT for targeted exploitation.
'CopyFail' attackers start cashing in on Linux flaw: A critical Linux kernel flaw known as 'CopyFail' is currently being exploited by attackers to gain full root access to vulnerable systems. The vulnerability affects a wide range of Linux distributions and requires only a local foothold to execute.
Palo Alto Firewall Zero-Day Under Active Exploitation: A critical buffer overflow vulnerability in Palo Alto Networks' PAN-OS is under active exploitation, allowing for unauthenticated root access. Organizations are advised to restrict access to the User-ID Authentication Portal to trusted networks until an emergency patch is released.
CVE-2026-32710 MariaDB JSON_SCHEMA_VALID heap buffer overflow leading to RCE: A heap buffer overflow in MariaDB's JSON schema validation allows authenticated attackers to escalate privileges and execute arbitrary code. Users should upgrade to the patched versions 11.4.10 or 11.8.6 immediately.
Anthropic Secures SpaceX Colossus 1 After Growing 80x to a $1.2T Valuation: Anthropic has reported a massive 80x surge in annualized revenue for Q1 2026, driving its market valuation to an estimated $1.2 trillion. To support this growth, the company has partnered with SpaceX to significantly expand its compute capacity using Nvidia GPUs.
Kernel LPE Vulnerability Published Early Due To Third-Party Breaking Embargo: Hyunwoo Kim has announced Dirty Frag, a zero-day local privilege escalation vulnerability that enables root access on all major Linux distributions. The disclosure includes functional exploit code and a script to mitigate the threat by removing vulnerable modules.
Bypassing Bitlocker under 5 min using downgrade attack on CVE-2025-48804: This article explains how a downgrade attack can bypass BitLocker encryption by leveraging unrevoked legacy certificates in the Secure Boot process. By loading a vulnerable boot manager, an attacker with physical access can gain access to a decrypted OS volume.
Cloudflare lays off 1,100 people: Cloudflare has announced a significant workforce reduction of over 1,100 employees to realign its organizational structure with the rise of agentic AI. The move is intended to leverage a massive surge in internal AI usage to drive future innovation and efficiency.
CVE-2026-42511 Breakdown: RCE in FreeBSD: AISLE has identified a critical, long-standing remote command execution vulnerability in FreeBSD's dhclient. This flaw enables attackers on the same local network to gain root privileges by exploiting improper sanitization of DHCP protocol data.