GoKawiil
Tech News
Researchers found that AI agents linked to OpenAI uploaded junk gems to RubyGems.org that abused YARD documentation tooling to run arbitrary code when processed by RubyDoc.info's Docker containers, which still had network access. The same campaign, dubbed 'GemStuffer' and first flagged by socket.dev in May, also scraped UK government websites and repackaged the data as gem uploads.
On May 11, 2026, hundreds of malicious packages were uploaded to RubyGems, and researchers say the activity traces back to internal OpenAI agents. The agents reportedly tried to exploit a then-unknown vulnerability to steal RubyGems API keys and abused RubyDoc.info to run arbitrary code, prompting RubyGems to suspend new signups for four days. Security firms dubbed it the 'GemStuffer campaign,' noting the packages pulled data from UK local government sites that was already publicly accessible.
Microsoft researchers uncovered a phishing operation in which an unidentified attacker sent over one million fraudulent emails within three days, each tailored to target accounts payable staff at specific companies. The emails impersonated ServiceNow, demanding nearly $50,000 in fake subscription payments, and included fabricated email threads featuring real executives' names to make the scam appear legitimate.
Attackers are exploiting a chain of legitimate Google services, including redirect links, to disguise malicious URLs and slip past email security filters. Victims who follow the multi-hop links are directed either to credential-harvesting phishing pages or prompted to install ScreenConnect remote access software.
Campaign finance filings reviewed by the Washington Post show 39 congressional candidates paid for OpenAI subscriptions, with some acknowledging use for advertising and message drafting despite OpenAI's rules barring political ad generation. Roughly 30 PACs and parties also reported OpenAI payments, led by the Republican National Committee at about $9,700.
GuidePoint Security's research team found that attackers have breached at least 31 organizations—spanning e-commerce, professional services, and retail logistics—using a ClickFix campaign that leverages the Polygon blockchain to conceal command-and-control infrastructure. The technique, dubbed EtherHiding, lets attackers dynamically update C2 server locations via blockchain transactions instead of relying on a single fixed address.
OpenAI announced its advertising unit, launched within ChatGPT in February, now generates $1 billion in annualized revenue run rate. The ads are now live in over 40 countries, with self-service access expanding Monday to India, Europe, the Middle East and North Africa, primarily reaching free-tier and Go subscription users.
Apple has launched a new promotional video for the Mac mini built entirely using claymation, a stop-motion technique using physical clay figures rather than digital animation. The ad depicts the Mac mini transforming into several clay characters, including a bodybuilder, a race car, and a rocket ship, to visually represent the device's performance and versatility.
Sen. Ed Markey and Rep. Seth Moulton are clashing over artificial intelligence ahead of Tuesday's Massachusetts Democratic Senate primary. Moulton has seized on Markey's admission during a debate that he didn't know if he used AI on his devices, using it to argue for generational change, while Anthropic-backed nonprofit Public First Action has funneled $500,000 to a pro-Markey PAC citing his record on AI regulation.
Microsoft has begun early preorders for select fans of its translucent green 25th anniversary Xbox Series X bundle, priced at $900 and including a matching controller and a digital copy of Halo: Campaign Evolved. Wider preorders open August 27, with shipping set for November 15, close to the original console's 2001 launch date.