u/Mutthal8

.

.

.

Tried with different browser as well

Hack Club is a non-profit that encourages teenagers to learn and build through coding. This year, they're running Stardance, a program where you can submit any coding or hardware project and earn Stardust, which can be redeemed for rewards such as MacBooks, trips to the Kennedy Space Center, and more.

I've received several rewards from Hack Club through previous events such as Flavortown, including CMF Buds, a phone, a keyboard, a mouse, and other stuff that has helped me to code more. This year, my goal is to earn a MacBook Air!

Check out Stardance here: https://stardance.space/r-w6cw2 (yes, this is a referral link - but it would help me get stardance merch and spread this to more teenagers if you used my link!)

Is this a bug or a spezholedesign ?

A cybercriminal group called TeamPCP has been pulling off software supply chain attacks at a scale and frequency the security world has never seen before. Their latest victim is GitHub itself. A developer there installed a malicious VSCode extension planted by the group and that single mistake gave TeamPCP access to roughly 4,000 of GitHub's internal code repositories. GitHub confirmed at least 3,800 were compromised though they say only their own internal code was exposed and not customer data. TeamPCP wasted no time posting on BreachForums advertising GitHub's source code for sale.

What makes this group so alarming is not just one big breach but the sheer relentless volume. According to cybersecurity firm Socket, TeamPCP has launched 20 separate waves of attacks in just the last few months, hiding malware in over 500 distinct open source packages and over a thousand if you count every version they've tampered with. OpenAI and data contracting firm Mercor are among the hundreds of companies already hit.

Their core method is almost elegant in how self-sustaining it is. They infiltrate a network where a popular developer tool is being maintained and quietly plant malware in it. That malware spreads to the machines of developers who install the tool including developers who are themselves building other widely used software. From those machines TeamPCP steals credentials that let them publish malicious versions of even more tools. The cycle feeds itself. Wiz's threat intelligence lead Ben Read described it as a "flywheel of supply chain compromises" and that framing really captures how dangerous it is. Each breach seeds the next one.

More recently they appear to have automated much of this with a self-spreading worm the security community has named Mini Shai-Hulud after references to Dune's sandworms that the group left inside compromised GitHub repositories. This worm essentially lets the attack run on autopilot which explains the acceleration in frequency.

The uncomfortable truth here is that no single company being careful is enough to protect them. You can have great internal security and still get hit because a tool your developers trust has been quietly poisoned upstream. That's what makes this so difficult to stop and why the open source ecosystem is genuinely rattled right now.

Source : Wired

A coalition of thirteen major publishers including Penguin Random House, Elsevier and HarperCollins has secured a $19.5 million default judgment against Anna's Archive, a shadow library offering free access to pirated books. The case was filed in a New York federal court and because the site's anonymous operators never appeared to defend themselves, U.S. District Judge Jed S. Rakoff ruled entirely in the publishers' favor. The judgment was signed on May 19, 2026.

The penalty was calculated at the maximum statutory rate of $150,000 per infringed work across 130 titles. The publishers also argued that Anna's Archive was functioning as a primary source of training data for AI companies including Meta and NVIDIA. Collecting the $19.5 million however is considered essentially impossible. The operators remain anonymous citing fear of lengthy prison sentences and though the court ordered them to unmask themselves within ten days they are widely expected to ignore this. The award mirrors a similarly uncollectable $322 million judgment the music industry won against the same site in a related Spotify case.

The more consequential part of the ruling is the permanent injunction targeting the site's technical infrastructure. Because Anna's Archive routinely evades enforcement by cycling through domain names the injunction orders all domain registries and registrars to permanently disable the site's active domains and block their transfer. More than twenty companies are named including Cloudflare, Njalla, DDOS-Guard and the registries managing the site's current .gl, .pk and .gd domains.

Enforcement will be strongest against American companies within the court's jurisdiction. Most named intermediaries however are foreign entities that have historically ignored U.S. court orders. Notably unlike the Spotify music scrape which Anna's Archive voluntarily removed, the publisher's books remain actively available on the site making it harder for intermediaries to justify inaction. As of writing all three of the site's domains remain live and the operators are widely expected to have backup domains ready to deploy.

Source : TorrentFreak

According to VGC, Hermen Hulst reportedly told staff that PlayStation’s future single player games will no longer come to PC. The report says upcoming titles like Ghost of Yotei, Saros, and Marvel’s Wolverine are expected to remain console exclusives.

VGC says this marks a major shift from Sony’s previous strategy, where many first party PlayStation games eventually released on PC after launching on PS5. Bloomberg had earlier reported that Sony was pulling back from those plans, especially for future single player titles.

The report also mentions that multiplayer and live service games are still expected to stay multiplatform. Titles that rely on large online player bases are reportedly considered exceptions to this new direction.

VGC notes that Sony may be reacting to industry changes, including rumors that future Xbox hardware could function more like a PC and support storefronts such as Steam. If PlayStation games on Steam could run on Xbox hardware, Sony may see that as a threat to keeping players inside the PlayStation ecosystem.

Source :

VGC

VGC

Microsoft just admitted that bad drivers in Windows 11 have been wrecking battery life on a bunch of laptops for years. The issue was tied to CPUs not properly entering low-power states, so even when machines were idle or sleeping, they were still draining way more power than they should’ve.

A lot of users have complained forever about Windows laptops randomly running hot, fans kicking on for no reason, or losing huge chunks of battery overnight in sleep mode.

Apparently some of that wasn’t placebo or “Windows being Windows”, it was actually caused by broken driver behavior affecting power management.

The fix is now rolling out through updated drivers and Windows updates. Microsoft says newer systems should see better battery life and lower power usage once everything is updated, although results probably depend on whatever custom drivers laptop manufacturers are shipping.

Source: PC World

A modder known online as “DVS Squad” reportedly got hit with an almost 8,000 year Xbox ban after leaking and streaming unreleased gameplay from Forza Horizon 6 before launch. The leaked build apparently came from unencrypted Steam preload files that accidentally went live early, letting pirates crack and access the game days before release.

According to reports, Playground Games and Xbox started aggressively banning people caught accessing the leaked version, but DVS Squad became the most talked about case because his account ban expires on 12/31/9999, basically making it a permanent ban. What made things even crazier is that it was reportedly a HWID (hardware ID) ban, meaning the punishment targets the actual PC hardware instead of just the Xbox account.

The situation blew up online because the guy openly admitted to modding and bypassing protections, while also streaming gameplay before release. Despite the massive ban, he apparently claimed Xbox “can’t stop him” and quickly returned using other methods/accounts, which made the entire thing turn into a meme across gaming communities.

Now the internet is split on the situation. Some people think the punishment is deserved because leaking and modding unreleased builds can damage launches and break NDAs.

Others think banning someone until the year 9999 is pure corporate theatrics and unintentionally hilarious. The story also sparked a lot of jokes about the guy’s future descendants still being banned from Forza centuries later

Source : Yahoo Tech

Microsoft is apparently going all in on the caps lock era. The official Xbox account on X/Twitter has now been renamed to “XBOX” after Xbox CEO Asha Sharma ran a poll asking fans whether it should be “Xbox” or “XBOX”, and the all caps version won with around 65% of the vote.

This is part of the bigger “return to Xbox” push happening inside Microsoft lately. The company already dropped the “Microsoft Gaming” branding and started restructuring the gaming division back around the Xbox identity.

According to The Verge, the all caps style is actually a throwback to the original XBOX branding from the early 2000s, since the first console logo was also written in all caps.

Other recent Xbox changes under Asha Sharma include:

• New Xbox logo and branding refresh
• Game Pass pricing changes
• New boot animation
• Reorganization of Xbox leadership and platform teams
• Bigger focus on “fan focused” updates and platform improvements

For now, only the X/Twitter account has changed to “XBOX”. Threads and Bluesky still use “Xbox”.

Source: The Verge article

Real Debrid has reportedly started aggressively filtering cached torrents again, with many users now getting “File was removed from debrid service due to copyright infringement” errors on content that previously worked fine.

According to TorrentFreak, the new crackdown appears broader than the one from late 2024. Instead of targeting specific torrent hashes, the filtering now seems to hit common release keywords and filename patterns like WEB-DL, WEBRip, AMZN, RARBG, EZTV, and similar tags commonly found in scene/P2P releases.

Founder of Elfhosted, a third party hosting provider claims many long time users lost around 50-70% of their cached libraries overnight. Plex, Jellyfin, and Emby setups using Sonarr/Radarr reportedly seem to be affected harder than typical Stremio users.

The timing also raised eyebrows because Real-Debrid’s parent company, XT Network, recently underwent a corporate restructuring in France, converting from an SARL to an SAS and changing management structure. TorrentFreak notes the changes happened only days before the renewed filtering began.

Real Debrid later responded and said the filtering is unrelated to the restructuring. The company says the actions are tied to legal obligations under the EU Digital Services Act and French law, using keyword lists provided by “trusted flaggers.”

This looks like a much bigger crackdown than the previous one, and a lot of users across Reddit and similar communities already seem frustrated with how aggressive the filtering has become.

Source