SpaceX’s satellite internet division has switched from selling hardware outright to charging $10 per month to rent the dish and router — a move that mirrors the cable industry playbook and comes alongside a $5-$10 price hike on service plans.
Microsoft’s latest Patch Tuesday fixed a zero-day vulnerability disclosed by researcher Nightmare Eclipse, as the two remain locked in a heated public dispute over responsible disclosure practices. The same patch bundle also addressed another flaw originally thought fixed six years ago.
Attackers exploited an unauthenticated API endpoint in ServiceNow to access customer instance data. The company quietly patched the flaw on June 5 after detecting anomalous activity, but not before data was queried.
Varonis researchers tricked an OpenClaw AI agent into leaking AWS keys, database credentials, and customer records using basic social engineering. The agent caught phishing links and malicious OAuth apps — but fell for urgent-sounding emails from fake internal staff every time.
Apple’s iOS 27 will let Apple Intelligence automatically detect compromised passwords and change them on websites by itself. It solves a real security problem — but handing an AI agent authority to modify your account credentials on the open web raises questions Apple hasn’t fully answered yet.
Munich startup ERC System unveiled Victor, a heavy-lift cargo eVTOL that carries 250 kg over 300 km — targeting a logistics gap between small drones and crewed aircraft that Europe has been struggling to fill. Military, commercial, and disaster-response use cases are all on the table.
BlackRock sold $213 million in Bitcoin through IBIT just one day after its first purchase in nearly three weeks, pushing ETF flows back into negative territory. The move raises questions about institutional conviction in the current market.
Oil prices fell on Hyperliquid over the weekend despite Iran launching attacks on Kuwait, with Brent dropping to $93.75 and WTI to $90. Rising open interest alongside falling prices suggests bears are building shorts, not just taking profits.
A threat actor called PCPJack hijacked 230 cloud servers across AWS, Google Cloud, and Azure, converting them into a covert SMTP relay network for spam. Researchers found the entire operation exposed on an unauthenticated server.
Attackers abused Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, exploiting a missing email verification check to bypass 2FA and access passwords, DMs, and personal data for over six weeks before detection.
