'The prophecy is fulfilled': Popular 2020 XKCD comic predicted 'HEIF Heist' OpenAI hack and even mentions ImageMagick in spooky coincidence
THE SO WHAT
The OpenAI ‘HEIF Heist’ via ImageMagick is another reminder that your AI stack is only as secure as the oldest library in the path. If you’re shipping AI features, put legacy media parsers and image-processing tools on your security review list this week—not just the model endpoints.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechGoogle says ShinyHunters has renewed "mass exploitation" of a flaw in Oracle's PeopleSoft; ShinyHunters has said it accessed FBI data using a flaw in PeopleSoft
Legacy ERP is now a national-security-grade attack surface, not just an IT headache—ShinyHunters allegedly hitting FBI data via a PeopleSoft flaw makes that explicit. If you still run PeopleSoft or similar, treat patching and compensating controls as a board-level risk item, not a backlog ticket.
Deep & Emerging TechCrusoe abandons $1.25B plan to use Boom turbines at AI data centers
Power for AI data centers is reverting to proven kit, not experimental turbines — $1.25B walking away is a real signal about execution risk in novel generation. If you're counting on bespoke energy tech for AI loads, recheck timelines, permitting, and counterparties against more conventional options.
Deep & Emerging TechFormer US Army soldier Cameron Wagenius, who pleaded guilty in 2025 to hacking into telecom companies and to extortion, is sentenced to 70 months in prison
Telecom access remains a high-value attack surface — a single motivated individual was able to penetrate multiple carriers and extort. If your operations depend on telco-integrated auth or signaling, treat carrier-side compromise as an assumed risk and harden your own controls accordingly.
.jpg)
Deep & Emerging TechThieves Stole ‘Nvidia’ Trailers. They Got 20 Tons of Sand
The fact that criminals are targeting trailers they think hold Nvidia hardware tells you how financialized GPU supply has become. If you're moving high-value compute or components, revisit your physical security and insurance assumptions—this is now closer to bullion logistics than standard IT freight.