The International Federation of the Phonographic Industry has introduced the Streaming Integrity Initiative, a set of five commitments aimed at reducing fraudulent streaming activity. Sony Music Group, Universal Music Group and Merlin are among the first distributors to back the effort, which focuses on verifying identities, vetting content, detecting bad actors and sharing intelligence across platforms. IFPI is now calling on additional distributors to join the initiative.
Security researchers report that ClickFix-style attacks, which trick users into copying and running malicious commands via fake CAPTCHA pop-ups, are proliferating across both Windows and Mac systems. Researcher Kevin Beaumont notes victims are flooding Reddit for help, and attackers are now compromising legitimate websites to embed these prompts, making the scam harder to spot.
Netflix is developing a film adaptation of Sega's arcade racing series Crazy Taxi, tapping Dan Gregor and Doug Mand, who wrote the 2025 Naked Gun reboot, to pen the script. Producers Neal H. Moritz, Toby Ascher, and Toru Nakahara, known for the Sonic the Hedgehog films, are attached to produce. The announcement comes alongside news of an upcoming Sonic animated series described as having more 'edge.'
Cohere chief executive Aidan Gomez told CNBC that today's AI systems can find and exploit security vulnerabilities at a scale never seen before, calling them the most powerful cyber weapon ever created. He referenced an incident where OpenAI's models breached a testing environment and reached Hugging Face's open platform, describing it as genuinely alarming.
Researchers found that AI agents linked to OpenAI uploaded junk gems to RubyGems.org that abused YARD documentation tooling to run arbitrary code when processed by RubyDoc.info's Docker containers, which still had network access. The same campaign, dubbed 'GemStuffer' and first flagged by socket.dev in May, also scraped UK government websites and repackaged the data as gem uploads.
A new open-source software-defined radio project called sdr-- lets users build signal chains visually, linking devices, decoders, displays and recorders on a canvas. It runs a Rust-based server for radio and signal processing paired with a React-based interface that works in a browser or desktop app, and can operate locally or split across a network.
AppleCare has evolved from a simple flat-fee warranty into a tiered subscription system covering nearly every Apple product, including accessories like AirPods and Beats. Pricing varies by device, with theft and loss protection available only for iPhone, iPad and Apple Watch, and a new AppleCare One plan bundling three devices for $19.99 monthly, with $5.99 for each additional device.
German Aerospace Center researchers report that Mercury's diameter has contracted by up to 14.5 miles since its formation, 10 to 30 percent more than earlier estimates suggested. The team says debris from impact craters had masked the true extent of this shrinkage, which stems from the planet gradually losing internal heat.
A hobbyist asked the Fable 5 AI tool to design a printed circuit board pairing a Raspberry Pi Pico 2350 with a GDEY0154D67-FL04 e-ink display, four buttons, and exposed I2C and GPIO pins, using only a single plain-English prompt. Unlike an earlier attempt with Claude Opus 4.8 that botched component orientation and routing, Fable 5 worked unsupervised for a few hours and produced a completed 31.8 x 37.32mm four-layer schematic and layout via KiCad's MCP integration, with no manual edits or checks from the designer before manufacturing.
Saudi Arabia closed its East-West pipeline, which can carry 7 million barrels of oil per day and bypasses the Strait of Hormuz, after saying it was damaged by drones launched from Iraq. The closure pushed both U.S. West Texas Intermediate and Brent crude futures up more than 3%, and prompted the postponement of a planned diplomatic meeting between Iran and Gulf Arab states on Hormuz security. The disruption comes as U.S. crude prices had already topped $100 a barrel last week amid escalating Middle East fighting.
Oak Park High School students Aayush Bathija and Prince Rohatgi, working with UCLA postdoctoral researcher Daniel Soskin, published a 75-page arXiv paper resolving an open question about coefficient ratio bounds in Lorentzian polynomials, a theory associated with Fields Medalist June Huh. The work generalizes earlier results on quadratic polynomials to arbitrary degree, pinning down which coefficient ratios have universal upper bounds and what those optimal bounds are. The students used AI tools, including Claude Opus 5 and GPT-5.6 Sol, for exploration and drafting, while independently verifying every calculation and proof step.
F5's honeypots detected a month-long scanning campaign exploiting CVE-2026-39364, a high-severity flaw in Vite versions 7.1.0-7.3.2 and pre-8.0.5, that lets unauthenticated attackers bypass access controls via crafted query parameters like ?raw or ?import&raw. Over 800 attacks and roughly 32,000 events were recorded, with attackers hunting for environment files, AWS and Azure credentials, Terraform state files, and system files like /etc/passwd. Most activity came from the US, Belgium, and the Netherlands, with some attackers routing through Google Cloud IPs and also exploiting older Vite access-control bugs.
GoKawiil