Resident of the world, traveling the road of life
69403 stories
·
21 followers

Microsoft Hacked to Deliver Malware to Claude and Gemini Users

1 Share
Microsoft Hacked to Deliver Malware to Claude and Gemini Users

Microsoft has shut down a wave of its own repositories on GitHub, including those related to Azure and AI coding agents, as it investigates a data breach, according to research from cybersecurity researchers and a statement given to 404 Media by Microsoft. Hackers planted malware that would harvest peoples’ credentials when they opened it in AI coding tools like Claude Code or Gemini CLI, according to one set of researchers.

The exact contours of the breach are unclear, but researchers say Microsoft has disabled more than 70 of its own repositories, and pointed to a particular package that was previously compromised.

“We have temporarily removed some repositories as we investigate potential malicious content,” Microsoft told 404 Media in an emailed statement on Monday.

At the time of writing, various GitHub repositories reads:

“This repository has been disabled. Access to this repository has been disabled by GitHub Staff due to a violation of GitHub's terms of service. If you are the owner of the repository, you may reach out to GitHub Support for more information.” 

Last week, cybersecurity website OpenSourceMalware.com, which acts as a clearing house for indicators of supply chain attacks so defenders can secure their own networks, and which also publishes its own write-ups, wrote about the mass disabling of Microsoft GitHub repositories.

“GitHub disabled 73 Microsoft repositories across four of its GitHub organizations—the entire Azure Functions org, the whole Durable Task family, and a row of AI sample apps—in a 105-second sweep on June 5,” the website wrote on Friday.

Is it very unusual for any company, let alone Microsoft, to disable so many of its own repositories in one go. They include 49 related to Azure, Microsoft’s cloud computing arm, and some concerning AI agents. 

The shutdown repositories also include ones related to durabletask, a Microsoft development tool

Researchers from StepSecurity wrote on Friday that the GitHub closures came after a malicious commit was pushed to the durabletask repository. That attack planted configuration files that would harvest peoples’ credentials when they opened the repository in Claude Code, Gemini CLI, Cursor, or VS Code, StepSecurity wrote. 

Hackers from the group TeamPCP previously compromised Microsoft’s durabletask, publishing three malicious versions of the tool in May. TeamPCP has performed a wealth of supply chain attacks in the first half of this year, impacting hundreds of organizations, WIRED reported.

In practice, this means that any GitHub actions that used those repositories will no longer function. And coupled with the statement and research, indicates Microsoft did not fully protect itself and its users after the earlier compromise.

“Why is this mentioned nowhere?” one commentator on a Microsoft forum thread discussing one of the repository closures writes.

Read the whole story
mkalus
25 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

ICE’s Plan to Let Cops Around the Country Scan Faces to Verify Immigration Status

2 Shares
📄
This article was primarily reported using public records requests. We are making it available to all readers as a public service. FOIA reporting can be expensive, please consider subscribing to 404 Media to support this work. Or send us a one time donation via our tip jar here.
ICE’s Plan to Let Cops Around the Country Scan Faces to Verify Immigration Status

Immigration and Customs Enforcement (ICE) plans to give potentially more than a thousand local law enforcement agencies a facial recognition app that would query a database of hundreds of millions of images to verify someone’s immigration status, according to an internal Department of Homeland Security (DHS) document obtained by 404 Media.

The app would be a dramatic escalation in the technology being used to carry out the Trump administration’s mass deportation agenda. ICE and Customs and Border Protection (CBP) are already using Mobile Fortify, a facial recognition app that taps into a wide array of DHS and other government databases, on U.S. streets, stopping people and scanning their faces. With that app, ICE officers point their phone camera at a person, the app scans their face, and the app returns a wealth of biographical information and whether they have been issued an order of removal. The app has made mistakes and been used against American citizens.

With this second app, much of that capability would now be in the hands of local police who essentially have become extensions of ICE.

“This embarrassingly cursory document utterly fails to acknowledge the harms that will flow from putting a flawed face recognition app in the hands of many thousands of local police,” Nate Wessler, deputy director with the American Civil Liberties Union (ACLU) Speech, Privacy, and Technology Project, told 404 Media. “Sending local cops out to indiscriminately scan our faces, with a system that is known to generate false matches, that saves our data for 15 years, and that ensnares police into making immigration decisions that they are untrained for and that will undermine community safety efforts, is a recipe for disaster and for terrorizing members of communities across the country. DHS’s privacy regulators fell down on the job. Now it’s up to lawmakers to ensure this dangerous technology stays off our streets.”

💡
Do you know anything else about this app? Are you a current or former ICE or CBP employee? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.
Read the whole story
mkalus
25 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

STACHY.DJ – 💜 Is Stronger Than Pride (Alles Ist Musik)

1 Share

Fast 7,5 Stunden Musik verschiedenster Couleur für den Sonntag, selektiert und gemixt von Stachy.

the whole day-analogue & uncut, entire set.
recorded live @der-strand22 May24 2026.
love is stronger than pride-just a perfect day

Read the whole story
mkalus
25 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

isolatedmix 135 - Aspetuck

1 Share

Griff opened our label showcase at Public Records in 2024, and at the time, our relationship had only just gotten started. His album, Immersion, released last month, was only just in mastering stages with Sven Weisemann, and would take nearly another 1.5 years to see the light of day due to some troublesome test presses. But while his release date was touch and go, an isolatedmix was always written in the stars.

I technically heard Griff DJ at Brooklyn’s The Lot radio station just a few hours before our label showcase - sharing the booth with him as a temporary groupie while I plastered ASIP stickers all over the walls - and had been deep in his guest mixes prior to us even meeting in person. His journey as a DJ regularly takes him to festivals worldwide, and as part of his connection with Delayed, some intimate sets in the Pocono’s have come to fruition and are a worthy bookmark if you end up liking this one.

As someone who can traverse a multitude of styles, from ambient and downtempo to deeper house and techno, Griff’s one of those artists that shows up in different ways - every time. Likely because, his music, and the stories around his reasons for his music, are often very personal. Whether it’s a concept, or a vibe, I get the feeling Griff is a master of sense and construct - a pretty special skill for an artist and DJ to have, where stories told come from the heart and have a pure reason. Not performance for performance sake, but a narrative traveling from the mind, told through a meticulous track selection.

The concept was my attempt to portray various stages of consciousness throughout the morning, from dark into light / sleep to awake, as I get up & start the day & eventually get outside, into the woods for a morning - deep sleep into REM, vivid dreams, waking up from a dream & it’s still dark outside but there’s a faint glow of light, immersed in nature feeling the warmth of the sun in your face. It starts out cold, dark, alien, otherworldly then shifts towards something more mysterious & inviting but still a bit strange, then moves into warm & fuzzy. Analogous to frost on the ground slowly being melted, warmed & evaporated by the sun. - Aspetuck

Download

Listen on Soundcloud, the ASIP Podcast or the 9128.live iOS and Android app.

Tracklist:

01. Altjira - Atvelope
02. Solma - Skaub
03. JEMAPUR - WSIF.rg
04. Corell - Under The Surface
05. Dan Bean - Chum
06. Jeremiah Chiu - Static Stone Railway
07. Talaboman - Midnattssol
08. Skee Mask - Reminiscrmx
09. In Transit - A.2829
10. Innerst Inne - Nils Påls
11. Doltz - Ibuki
12. Michael Rother - Klangkörper
13. Aspetuck - Synth Named Sukie
14. Aspetuck - Hit Me With Your Pet Shark
15. Arovane - Sunter
16. OK EG - Open Sky
17. Luke Abbott - 2nd 5th Heavy
18. Tunnel Dancers - Central Radiance
19. Anushka Chkheidze + Robert Lippok - Rainbow Road
20. Innerst Inne - Hemma Hemma

Aspetuck | Bandcamp | Soundcloud | Instagram

Listen and support Griff’s latest record here

If you made it this far, here are a few download codes for Griff’s new album over on Bandcamp, if you’re fast…please comment below with which one you used one up!

https://astrangelyisolatedplace.bandcamp.com/yum

7s3v-wl47
pszr-brra
qhyb-32ra
5cee-u5ct
8j7f-5fsb
gpf7-57cb
wrqc-6p33
bm4w-vxae
4t7l-b3ah
dfqc-6p23

Subscribe now

Read the whole story
mkalus
26 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Satya Nadella ‘Not Sure’ Who Said Microsoft Wanted to Make Addictive AI, Is Looking for Guy Who Did This

1 Share
Satya Nadella ‘Not Sure’ Who Said Microsoft Wanted to Make Addictive AI, Is Looking for Guy Who Did This

On Tuesday, we published an article about an internal Microsoft strategy document that explained the company wanted to “make people addicted” to its new AI assistant, Scout. Thursday, Microsoft CEO Satya Nadella told staff that he was “not sure what this document is or who is writing and leaking this nonsense,” according to a message obtained by The Information

The document we reported on was not some random document. As we wrote at the time, the strategy document was written by Microsoft executives Omar Shahine, Jakob Werner, and some sort of AI writing tool. This information is in our original article and is readily available to Nadella. We wrote: “The document seen by 404 Media lists Shahine and another executive, Jakob Werner, as its authors. The document itself, however, notes that it was ‘co-created turn-by-turn with AI. Human verified every sentence.’” 

Shahine is the leader of Microsoft’s Scout project, as he has written numerous times on his own blog, on his LinkedIn, and on Microsoft’s own announcement of the software. In attempting to distance himself from his own company’s executives and strategy documents, Nadella has revealed that he either does not know how to read or does not know what is happening with some of the company’s highest-profile products. 

Phase one of the company’s launch plan for Scout, which was previously called ClawPilot internally, was to “make people addicted. Continue shipping the standalone ClawPilot experience. Pilot the UX, grow the user base, and build the skill and tool ecosystem that makes people depend on it daily. This is already happening organically.”

In Nadella’s message to staff reported by The Information Thursday, he wrote “this is absolutely a non goal! If anything we are doing the exact opposite. We want to make sure AI empowers and adds real value to human endeavor and broad economic growth! We should make sure that our teams are clear about this. Not sure what this document is or who is writing and leaking this nonsense! They may want to go work elsewhere…..” Nadella then linked to an aggregation of our article published by Futurism.

As mentioned, the document was written by Shahine. Shahine is not some random Microsoft employee, he is the person who imagined, pitched, and brought Scout to fruition, as he has tirelessly documented over and over and over again in many, many LinkedIn posts and on his personal blog. His job title is “Corporate Vice President of Microsoft Scout,” and he is the person who announced the product on Microsoft’s official blog. His biography on Microsoft’s website is “Omar Shahine is a Corporate Vice President at Microsoft where he leads Microsoft Scout.” Again, Shahine’s name is listed as the author at the top of the document we reported on.

Nadella’s message and a statement given by Microsoft to The Information by a spokesperson  are instructive in showing in the ways that big tech deals with journalists who deign to write articles that the companies would rather not exist. A Microsoft spokesperson told The Information Scout is for “helping people accomplish tasks more effectively—not encouraging dependency. Our goal isn’t more screen time. It’s more time back.” Microsoft did not say this to us; Microsoft said nothing to us.

Before we published this article, as we do with almost every article that mentions any company, we reached out to Microsoft for comment. We specifically said that we were writing an article about the “make people addicted” language and asked for comment, context, and more information about that language. Microsoft did not answer our questions, ignored the fact that we asked about “addiction,” and simply sent us a link to its public announcement for Scout. The company then attacked our report internally and externally to another media outlet. 

If Nadella is Looking For the Guy Who Did This, maybe he should read the documents his own company produces, or ask the guy who made it.

Read the whole story
mkalus
3 days ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

isolatedmix 135 - Aspetuck

1 Share
 

As the man at the controls at our label showcase at Public Records in 2024, our relationship working together had just started, and his new album ‘Immersion’ (released last month) was in mastering stages. After hearing his opening set, an isolatedmix was written in the stars.

I technically heard Griff DJ at Brooklyn’s The Lot radio station just a few hours before our label showcase - sharing the booth with him as a temporary groupie while I plastered ASIP stickers all over the walls - and had been deep in his guest mixes prior to us even meeting in person. His journey as a DJ regularly takes him to festivals worldwide, and as part of his connection with Delayed, some intimate sets in the Pocono’s have come to fruition and are a worthy bookmark if you end up liking this one.

As someone who can traverse a multitude of styles, from ambient and downtempo to deeper house and techno, Griff’s one of those artists that shows up in different ways - every time. Likely because, his music, and the stories around his reasons for his music, are often very personal. Whether it’s a concept, or a vibe, I get the feeling Griff is a master of sense and construct - a pretty special skill for an artist and DJ to have, where stories told come from the heart and have a pure reason. Not performance for performance sake, but a narrative traveling from the mind, told through a meticulous track selection.

The concept was my attempt to portray various stages of consciousness throughout the morning, from dark into light / sleep to awake, as I get up & start the day & eventually get outside, into the woods for a morning - deep sleep into REM, vivid dreams, waking up from a dream & it's still dark outside but there's a faint glow of light, immersed in nature feeling the warmth of the sun in your face. It starts out cold, dark, alien, otherworldly then shifts towards something more mysterious & inviting but still a bit strange, then moves into warm & fuzzy. Analogous to frost on the ground slowly being melted, warmed & evaporated by the sun. - Aspetuck 

astrangelyisolatedplace · isolatedmix 135 - Aspetuck

Download

Listen on Soundcloud, the ASIP Podcast or the 9128.live iOS and Android app.

Tracklist: 

01. Altjira - Atvelope
02. Solma - Skaub
03. JEMAPUR - WSIF.rg
04. Corell - Under The Surface
05. Dan Bean - Chum
06. Jeremiah Chiu - Static Stone Railway
07. Talaboman - Midnattssol
08. Skee Mask - Reminiscrmx
09. In Transit - A.2829
10. Innerst Inne - Nils Påls
11. Doltz - Ibuki
12. Michael Rother - Klangkörper
13. Aspetuck - Synth Named Sukie
14. Aspetuck - Hit Me With Your Pet Shark
15. Arovane - Sunter
16. OK EG - Open Sky
17. Luke Abbott - 2nd 5th Heavy
18. Tunnel Dancers - Central Radiance
19. Anushka Chkheidze + Robert Lippok - Rainbow Road
20. Innerst Inne - Hemma Hemma

Aspetuck | Bandcamp | Soundcloud | Instagram

Listen and support Griff’s latest record here

ASIPV055 Laydown Front Angle.png
ASIPV055 B.png
ASIPV055 A-2.png
ASIPV055 Laydown Closeup.png
ASIPV055 Laydown Label.png
ASIPV055 Laydown Back.png
ASIPV055 Laydown 2.jpg
ASIPV055 Laydown.png
 

Read the whole story
mkalus
3 days ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete
Next Page of Stories