Sign in

Xurxo - Jorge Sánchez

@xurxo.bsky.social
31 followers 53 following 50 posts

Software Engineering and Management, Kayaker, Celta de Vigo Follower

PostsRepliesMedia
Reposted by Xurxo - Jorge Sánchez
Catalin Cimpanu @campuscodi.risky.biz · 17h
-Spyware chip found in Ledger crypto-wallets -Cyberattack defrosts supermarket fridges -Ahold Delhaize supermarkets go offline across the world -EU wants smart glasses to beep loudly when recording -Meta discloses security breach N: news.risky.biz/risky-bullet... P: risky.biz/RBNEWS620/
1247
Xurxo - Jorge Sánchez @xurxo.bsky.social · 13/10/2026
Xesta 1.0.1 is now on maven central mvnrepository.com/artifact/net...
000
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 07/10/2026
A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme.
bleepingcomputer.com
Musician sent to prison for $10 million streaming fraud using AI bots
A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme.
073
Reposted by Xurxo - Jorge Sánchez
Ryan Stauffer @ryanswx.bsky.social · 06/10/2026
Haha, this fucking sucks.
281382449
Reposted by Xurxo - Jorge Sánchez
Ars Technica @arstechnica.com · 05/10/2026
The announcement follows reports that Meta’s new general-purpose AI agent has been snooping on users' iMessages, calendars, and emails without permission: arstechnica.visitlink.me/5s02-A
arstechnica.visitlink.me
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
88351
Reposted by Xurxo - Jorge Sánchez
DH2027 @adho-conferences.bsky.social · 04/10/2026
The #DH2027 CfP is open! Join us in Galway, Ireland, 28 June–3 July 2027, for #DH2027, on the theme "Creativity". 📖 Call for Proposals: dh2027.adho.org/cfp/ 📤 Submit via ConfTool starting Oct 7, 00:00 Irish time: www.conftool.pro/dh2027/ Deadline: 20 November 2026, 23:59 AoE.
15445
Xurxo - Jorge Sánchez @xurxo.bsky.social · 27/09/2026
First release of Xesta at mvnrepository mvnrepository.com/artifact/net...
mvnrepository.com
Maven Repository: net.vionta.xml » xesta
000
Reposted by Xurxo - Jorge Sánchez
Catalin Cimpanu @campuscodi.risky.biz · 24/09/2026
Hackers breached a third cargo ship, one that loaded in New Orleans and was traveling to Italy It's now docked in Spain after hackers breached systems involving tank pressure, safety valves and boil-off gas management neworleanscitybusiness.com/blog/2026/09...
neworleanscitybusiness.com
Louisiana-loaded LNG tanker under cyberattack alters course | New Orleans CityBusiness
Federal agencies are monitoring nearly 20 vessels after a cyberattack disrupted an LNG tanker loaded at a Louisiana export terminal.
01314
Reposted by Xurxo - Jorge Sánchez
Catalin Cimpanu @campuscodi.risky.biz · 24/09/2026
New RemControl Android banking trojan spotted in the wild RemControl devs tricked an AI coding assistant that it was creating a parental monitoring application but used the code for the trojan's backend servers www.group-ib.com/blog/remcont...
group-ib.com
RemControl: AI Built the Overlays. Victims Lose their PINs
Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.
073
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 17/09/2026
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices.
bleepingcomputer.com
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices.
027
Reposted by Xurxo - Jorge Sánchez
Prof. Eliot Jacobson @climatecasino.net · 14/09/2026
Your 'bonus moment of doom' for today: "it is unimaginable that any month in the last few thousand years, maybe 100,000 years, has more [Precipitable water] in the atmosphere than August 2026." www.theclimatebrink.com/p/the-atmosp...
theclimatebrink.com
The Atmosphere Just Set a Water Vapor Record
More water vapor means more rocket fuel for extreme rain — so this record is not good news
471190595
Reposted by Xurxo - Jorge Sánchez
Bob DuCharme @bobdc.bsky.social · 09/09/2026
New blog entry: Making an LLM turn a flat vocabulary list into a hierarchical taxonomy — automating the increase of metadata value. www.bobdc.com/blog/llm-aut...
mas.to
Bob DuCharme (@bobdc@mas.to)
230 Posts, 80 Following, 495 Followers · Long-time user of and writer about standards-based knowledge graph technology. Most recent book: “Learning SPARQL”.
101
Reposted by Xurxo - Jorge Sánchez
LibreOffice @libreoffice.bsky.social · 08/09/2026
This year’s #LibreOffice conference starts in two days, in Pordenone, northern Italy – and we’re getting ready. It’s not too late to register and join us! conference.libreoffice.org #foss #opensource #freesoftware
Eliane from TDF's Board of DirectorsConference roll-up bannerT-shirtsName tags
0354
Reposted by Xurxo - Jorge Sánchez
Mr Market Miscalculates 🇪🇺🇺🇦🏴‍☠️ @mrmarketmis.bsky.social · 04/09/2026
This is hilarious 😂 "Riders may not always be delivered to their intended destinations or may experience inconveniences, interruptions, or discomfort related to the Robotaxi." Robotaxi terms & conditions: www.tesla.com/legal/terms#...
094
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 02/09/2026
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control of affected websites.
bleepingcomputer.com
WordPress backup plugin flaw exposes millions of sites to takeover attacks
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control of affected websites.
053
Reposted by Xurxo - Jorge Sánchez
Nicolas Fränkel 🇪🇺🇺🇦🇬🇪 @frankel.ch · 03/09/2026
Unfortunately, android has already reached critical mass. Any alternative is a personal decision. Google was pretty smart. They started as fully opensource, then replaced apps one by one by proprietary ones.
101
Reposted by Xurxo - Jorge Sánchez
Nicolas Fränkel 🇪🇺🇺🇦🇬🇪 @frankel.ch · 03/09/2026
Your phone is about to stop being yours. keepandroidopen.org #Android #Google #OpenSource
261
Reposted by Xurxo - Jorge Sánchez
Reuters @reuters.com · 01/09/2026
Solar overtakes coal as China's largest source of installed power capacity reut.rs/4i6fsJM
reut.rs
Solar overtakes coal as China's largest source of installed power capacity
Solar farms overtook coal plants in July to become ​China's top source of installed power ‌capacity, state-run media reported on Tuesday, although solar still lags well behind coal in terms of ​power generation.
610842
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 02/09/2026
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access.
bleepingcomputer.com
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access.
022
Reposted by Xurxo - Jorge Sánchez
Brent Terhune @brentterhune.bsky.social · 01/09/2026
We Need Data Centers
2041087
Reposted by Xurxo - Jorge Sánchez
Social Media Lab @socialmedialab.ca · 11/04/2026
Surprise, surprise... "The U.S. isn’t happy about Canada’s quest for digital sovereignty" www.theglobeandmail.com/business/com...
theglobeandmail.com
Opinion: The U.S. isn’t happy about Canada’s quest for digital sovereignty
Countries are converging on laws that grant them greater control over where their data lives and who has access
24615
Reposted by Xurxo - Jorge Sánchez
Social Media Lab @socialmedialab.ca · 11/04/2026
Expect a call from the US embassy..."U.S. orders diplomats to fight data sovereignty initiatives" #ICYMI www.ctvnews.ca/sci-tech/art...
ctvnews.ca
U.S. orders diplomats to fight data sovereignty initiatives: Reuters
U.S. President Donald Trump’s administration has ordered U.S. diplomats to lobby against attempts to regulate U.S. tech companies’ handling of foreigners’ data, saying in an internal diplomatic cable seen by Reuters that such efforts could interfere with artificial intelligence-related services.
25321
Reposted by Xurxo - Jorge Sánchez
Social Media Lab @socialmedialab.ca · 11/04/2026
"France to ditch Windows for Linux to reduce reliance on US tech" #digitalsovereignty techcrunch.com/2026/04/10/f...
techcrunch.com
France to ditch Windows for Linux to reduce reliance on US tech | TechCrunch
France's move to ditch Windows for Linux is its latest effort to reduce its reliance on American tech giants.
18650207
Reposted by Xurxo - Jorge Sánchez
Pooh 🇬🇧 🇺🇦 🇪🇺 🇨🇦 🇩🇰 @poohbearcorner.bsky.social · 12/04/2026
France starts moving government systems from Windows to Linux France is ditching US software for homegrown alternatives of Google Docs, Microsoft Office, Zoom, and Telegram Libre Office is very good. www.techspot.com/news/112032-...
techspot.com
France starts moving government systems from Windows to Linux
Linuxiac reports that France's Inter-ministerial Digital Directorate (DINUM) has revealed a roadmap for shifting the country's government systems away from non-European software. This includes switchi...
1463405728
Reposted by Xurxo - Jorge Sánchez
Apache Software Foundation (The ASF) @apache.org · 31/08/2026
Apache Commons Validator 1.11.0 is now available for download: buff.ly/zQbfKFS Commons Validator provides the building blocks for both client-side and server-side data validation. List of changes: buff.ly/0bGSt9c
011
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 31/08/2026
Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Online customers.
bleepingcomputer.com
Microsoft Exchange Online outage causes email failures, auth issues
Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Online customers.
054
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 31/08/2026
ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks.
bleepingcomputer.com
OpenAI confirms ChatGPT outage as users report errors
ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks.
033
Reposted by Xurxo - Jorge Sánchez
Apache Software Foundation (The ASF) @apache.org · 30/08/2026
Apache Jena 6.2.0 is now available for download: buff.ly/rIvwTO6 Jena is a framework for developing Semantic Web and Linked Data applications on the Java JVM.
033
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 25/08/2026
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature.
bleepingcomputer.com
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature.
066
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 21/08/2026
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid.
bleepingcomputer.com
Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid.
055
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 20/08/2026
ChatGPT is experiencing a major outage, and users are unable to sign in, create accounts, or load chats, including previous conversations.
bleepingcomputer.com
OpenAI confirms ChatGPT is down as logins and signups fail
ChatGPT is experiencing a major outage, and users are unable to sign in, create accounts, or load chats, including previous conversations.
153
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 19/08/2026
The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021.
bleepingcomputer.com
CISA: Medusa ransomware hit over 500 critical infrastructure orgs
The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021.
042
Reposted by Xurxo - Jorge Sánchez
LibreOffice @libreoffice.bsky.social · 19/08/2026
LibreOffice is made by hundreds of people around the world. Coordinating them is the small team at The Document Foundation, the non-profit behind the suite (supported by your donations). Here's what they've been doing: blog.documentfoundation.org/blog/2026/08... #foss #openSource #freesoftware
TDF team photo
15011
Reposted by Xurxo - Jorge Sánchez
Catalin Cimpanu @campuscodi.risky.biz · 19/08/2026
-Slovakia finds Russian backdoor in traffic cameras -French cops used public exploit to hack EncroChat -Microsoft delays Exchange update due to influx of AI bugs -Ransomware affiliate poses as a data recovery firm -Scammers target UK PM P: risky.biz/RBNEWS602/ N: news.risky.biz/risky-bullet...
1147
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 18/08/2026
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors.
bleepingcomputer.com
Comcast turns your Xfinity WiFi into a home motion detector
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors.
165
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 18/08/2026
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week.
bleepingcomputer.com
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week.
076
Reposted by Xurxo - Jorge Sánchez
Praza Pública @praza.gal · 18/08/2026
☀️ O cambio climático trouxo o mes de xullo máis cálido da historia, a primavera máis seca desde hai 36 anos e mantén alerta por seca en 32 concello 🔗 praza.gal/ciencia-e-te...
142
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 18/08/2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.
bleepingcomputer.com
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.
073
Reposted by Xurxo - Jorge Sánchez
Hypervisible @hypervisible.blacksky.app · 16/08/2026
True to form, Meta says they will do something—in this case removing creep content—and it gets widely reported. Meta doesn’t really do the thing, but gets the credit until researchers, activists, or journalists point it out. Wash, rinse, repeat.
businessinsider.com
Instagram vowed to crack down on Meta glasses creeps. A month later, it was easy to find dozens of the videos still up.
Instagram said it would remove harassing videos filmed with Meta AI glasses. Weeks later, dozens remain.
14429158
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 15/08/2026
It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and other socials.
bleepingcomputer.com
How Anthropic plans to watermark Claude's AI-generated text
It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and other socials.
024
Reposted by Xurxo - Jorge Sánchez
Catalin Cimpanu @campuscodi.risky.biz · 13/08/2026
New White House memo instructs the NCC to establish a program through which private companies can apply for approval to carry out offensive cyber ops against cybercrime groups Memo: www.whitehouse.gov/presidential... Fact sheet: www.whitehouse.gov/fact-sheets/...
whitehouse.gov
Expanding Capabilities to Combat Transnational Cyber-Enabled Crime
MEMORANDUM FOR THE VICE PRESIDENT THE SECRETARY OF STATE THE SECRETARY OF THE TREASURY THE SECRETARY OF WAR THE ATTORNEY GENERAL THE SECRETARY OF COMMERCE
3138
Reposted by Xurxo - Jorge Sánchez
Dr. Dominic Royé @drxeo.eu · 09/08/2026
🌊 Nueva animación: evolución diaria del caudal de los ríos en la Península Ibérica (año hidrológico 2025-26). Ahora con cobertura de Portugal (SNIRH/APA) además de España, y la app ya disponible en ES/PT/EN. Datos: EFAS (Copernicus CEMS). #DataViz 💻 bioclim-mbg.shinyapps.io/river_monitor/
12711
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 10/08/2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
bleepingcomputer.com
Critical Progress LoadMaster flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
051
Reposted by Xurxo - Jorge Sánchez
Mark Hurst @markhurst.bsky.social · 09/08/2026
Zuck's sludge empire, working as designed. "The Facebook page for [an] Australian white supremacist site has been making money through the revenue program since November 2025." futurism.com/artificial-i...
futurism.com
Meta Caught Paying Nazis to Post on Facebook
An investigation found that Meta has been paying prominent neo-Nazi accounts to post on Facebook through its invite-only monetization program.
23931
Reposted by Xurxo - Jorge Sánchez
Slashdot @slashdot.org · 09/08/2026
Google Should Still Be Forced To Shed Chrome, Advocacy Group Argues tech.slashdot.org/story/26/08/09/03…
tech.slashdot.org
Google Should Still Be Forced To Shed Chrome, Advocacy Group Argues
"Google should be required to divest the Chrome browser, and prohibited from paying Apple to distribute Google's search engine, the nonprofit advocacy group Public Knowledge argues in a new court filing," MediaPost reports, citing a friend-of-the-court brief filed Tuesday in the D.C. Circuit Court...
153
Reposted by Xurxo - Jorge Sánchez
Reuters @reuters.com · 05/08/2026
The world is on the verge of another bout of food inflation as wars in Iran and Ukraine along with El Nino create a perfect storm of higher costs and lower crop yields, the chief economist of the ‌United Nations Food and Agriculture Organization said reut.rs/3RTEuRA
reut.rs
World faces fresh food price surge, FAO warns
The world is on the verge of another bout of food inflation as wars in Iran and Ukraine along ​with El Nino create a perfect storm of higher costs and lower crop yields, the chief economist of the ‌Un...
612470
Reposted by Xurxo - Jorge Sánchez
Apache Software Foundation (The ASF) @apache.org · 31/07/2026
Apache OpenMeetings 9.1.0 is now available for download: buff.ly/8u1RiO7 Change log: buff.ly/D44wsqv
011
Reposted by Xurxo - Jorge Sánchez
BleepingComputer @bleepingcomputer.com · 30/07/2026
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers.
bleepingcomputer.com
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers.
062
Reposted by Xurxo - Jorge Sánchez
Apache Software Foundation (The ASF) @apache.org · 30/07/2026
Apache Tomcat 9.0.120 is now available for download: buff.ly/lzwJC96 Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Refer to the change log for the list of changes: buff.ly/xSxVcTQ
012