Andrew King (AJ)
12K posts

Andrew King (AJ)
@ScrumWhat
Father, biker, adrenaline junkie, PC gamer, vaccinated. CISO @hunterstrategy / Faculty Member @IANS_Security. My views are my own. (He/Him)






The Trump administration has suspended the second phase of a cybersecurity regulation program for defense contractors, saying it was costing those firms too much money to comply: war.gov/News/Releases/… It's the latest hurdle in a long-running saga for these rules.

🚨🚨🚨在被曝光擅自收集开发者完整仓库后,#GrokBuild 昨夜悄悄调整云端策略不再上传数据,这似乎是有意识的行为而非 BUG。 昨天蓝点网提到 Grok Build 会上传开发者的整个仓库,这远远超出模型所需的上下文代码范围,SpaceXAI 到现在还未发布任何回应,但调整服务器临时关闭了数据上传。 查看全文:ourl.co/113901?x



‼️ BREAKING: xAI's Grok Build CLI was uploading entire Git repositories to a Google Cloud bucket, private codebases and unredacted secrets included. The uploads quietly stopped via a hidden server-side flag, and xAI still has not said a word about scope, retention, or deletion. The scale is staggering. On a 12 GB test repo, 5.1 GB flew out the door to xAI's grok-code-session-traces bucket while the actual coding task needed just 192 KB. The tool grabbed whatever repository it ran in, not the files it needed. The fix arrived as a hidden flag, disable_codebase_upload: true, a day after a researcher's wire-level analysis. The "Improve the model" opt-out never stopped the uploads. Still no advisory, no scope, no word on whether already-uploaded code gets deleted. For anyone pointing AI coding agents at proprietary code, what crosses the wire matters more than what the settings page says.







32 ransomware groups abuse AnyDesk for persistence, per the Ransomware Tool Matrix. Longest row in the RMM table. The setup is one piped command: echo Admin#123 | AnyDesk.exe --set-password 2 gifts for defenders: 1. Password lands in plaintext in the echo command line 2. --set-password survives any rename Sigma rule: AnyDesk Piped Password Via CLI Hunt the flag + echo pipe 🔎


Hunter Biden awarded $1.7 million in defamation lawsuit against former Overstock CEO Patrick Byrne Patrick Byrne falsely claimed Hunter sought an $800 million bribe from Iran in exchange for influencing U.S. policy.

















