Arstechnia

• NPM flooded with malicious packages downloaded more than 86,000 times

  Packages downloaded from NPM can fetch dependancies from untrusted sites.

• Nvidia hits record $5 trillion mark as CEO dismisses AI bubble concerns

  "I don’t believe we’re in an AI bubble," says Huang after announcing $500B in orders.

• New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel

  On-chip TEEs withstand rooted OSes but fall instantly to cheap physical attacks.

• OpenAI data suggests 1 million users discuss suicide with ChatGPT weekly

  Sensitive chats are rare but significant given the large user base.

• Expert panel will determine AGI arrival in new Microsoft-OpenAI agreement

  New deal extends Microsoft IP rights until 2032 or until AGI arrives.

• A single point of failure triggered the Amazon outage affecting millions

  A DNS manager in a single region of Amazon's sprawling network touched off a 16-hour debacle.

• Cache poisoning vulnerabilities found in 2 DNS resolving apps

  At least one CVE could weaken defenses put in place following 2008 disclosure.

• NSO permanently barred from targeting WhatsApp users with Pegasus spyware

  Ruling holds that defeating end-to-end encryption in WhatsApp harms Meta's business.

• Nation-state hackers deliver malware from “bulletproof” blockchains

  Malicious payloads stored on Ethereum and BNB blockchains are immune to takedowns.

• Ars Live recap: Is the AI bubble about to pop? Ed Zitron weighs in.

  Despite connection hiccups, we covered OpenAI's finances, nuclear power, and Sam Altman.

• Thousands of customers imperiled after nation-state ransacks F5’s network

  Risks to BIG-IP users include supply-chain attacks, credential loss, and vulnerability exploits.

• Anthropic’s Claude Haiku 4.5 matches May’s frontier model at fraction of cost

  Tiny, fast model hits coding scores similar to GPT-5 and Sonnet 4.

• ChatGPT erotica coming soon with age verification, CEO says

  Sam Altman claims new tools can detect mental distress while relaxing limits for adults.

• Feds seize $15 billion from alleged forced labor scam built on “human suffering”

  Scams like this one net billions from well-educated victims.

• Nvidia sells tiny new computer that puts big AI on your desktop

  The 1 petaflop DGX Spark system runs AI models with 200 billion parameters locally for $4K.

• OpenAI wants to stop ChatGPT from validating users’ political views

  New paper reveals reducing "bias" means making ChatGPT stop mirroring users' political language.

• Hackers can steal 2FA codes and private messages from Android phones

  Malicious app required to make "Pixnapping" attack work requires no permissions.

• Why Signal’s post-quantum makeover is an amazing engineering achievement

  New design sets a high standard for post-quantum readiness.

• Microsoft warns of new “Payroll Pirate” scam stealing employees’ direct deposits

  Among other things, the scammers bypass multi-factor authentication.

• AI models can acquire backdoors from surprisingly few malicious documents

  Anthropic study suggests "poison" training attacks don't scale with model size.