GoKawiil
Tech News
At X's Takeover event, Elon Musk told attendees he has experienced what he called 'cyber psychosis' or 'AI/SI psychosis' roughly half a dozen times in 2025. He described the episodes casually, using 'SI' to mean superintelligence, a term recently promoted by a Trump executive order renaming artificial intelligence.
A security researcher found that Telegram Desktop's local inter-process communication, used to hand clicked links to an already-running instance, fails to escape its command separator character. This let a maliciously crafted tg:// link be split into multiple injected commands, one of which could trigger an internal scheme that reads a named file and sends it to a chat without asking the user for confirmation. The flaw, tracked as CVE-2026-107181 and rated 8.1/High, was confirmed on Windows up to version 6.9.3 and fixed in Telegram Desktop 7.2.9.
A security researcher discovered a cross-site scripting vulnerability in the ansi2html tool used to render build logs on builds.sr.ht and other Sourcehut instances. The flaw let anyone inject malicious text into a build log, which would then execute in the browser of any user who viewed it, potentially hijacking their account and spreading further through the same mechanism.
Paramount Skydance has reached a settlement that clears the way for its takeover of Warner Bros, ending a prolonged period of negotiation and legal wrangling. The agreement resolves outstanding disputes between the two parties and allows the merger process to move forward.
Prophet Security analyzed every alert across customer environments from May to July 2026, rather than only alerts analysts chose to escalate. Of the incidents fully investigated, 93% were benign and 7% were confirmed malicious, with identity-related attacks accounting for roughly half of that malicious activity. The firm identified session hijacking, token replay, MFA bypass, credential stuffing, and phishing as the dominant attack patterns.
Security researchers note that as MFA, conditional access and device trust make direct credential theft harder, attackers are shifting focus to account recovery workflows. Instead of stealing a user's second authentication factor, criminals are tricking service desk staff into resetting or reassigning it on their behalf.
Stripe and private equity firm Advent International have abandoned a proposed $50 billion takeover offer for PayPal, according to reports. The deal, which would have been one of the largest fintech acquisitions in history, will not proceed.