Microsoft has shut down a wave of its own repositories on GitHub, including those related to Azure and AI coding agents, as it investigates a data breach, according to research from cybersecurity researchers and a statement given to 404 Media by Microsoft. Hackers planted malware that would harvest peoples’ credentials when they opened it in AI coding tools like Claude Code or Gemini CLI, according to one set of researchers. The exact contours of the breach are unclear, but researchers say Microsoft has disabled more than 70 of its own repositories, and pointed to a particular package that was previously compromised.

Last week, cybersecurity website OpenSourceMalware.com, which acts as a clearing house for indicators of supply chain attacks so defenders can secure their own networks, and which also publishes its own write-ups, wrote about the mass disabling of Microsoft GitHub repositories. “GitHub disabled 73 Microsoft repositories across four of its GitHub organizations — the entire Azure Functions org, the whole Durable Task family, and a row of AI sample apps — in a 105-second sweep on June 5,” the website wrote on Friday. Is it very unusual for any company, let alone Microsoft, to disable so many of its own repositories in one go. They include 49 related to Azure, Microsoft’s cloud computing arm, and some concerning AI agents. The shutdown repositories also include ones related to durabletask, a Microsoft development tool.

Researchers from StepSecurity wrote on Friday that the GitHub closures came after a malicious commit was pushed to the durabletask repository. That attack planted configuration files that would harvest peoples’ credentials when they opened the repository in Claude Code, Gemini CLI, Cursor, or VS Code, StepSecurity wrote.

The rollout won’t happen overnight. NHS England said that each trust will receive a central allocation of licenses based on headcount, typically starting with around 2,000 Copilot seats, and that more than half a million staff are expected to have access by October 2026. The NHS has no shortage of administrative work to throw at the software. The rollout envisions Copilot helping with discharge paperwork, bed management, rota planning, meeting minutes, board papers, briefings, data analysis, and assorted HR, finance, and procurement tasks.

NHS organizations will also receive access to Copilot Studio, Microsoft’s toolkit for building custom AI agents. NHS England said trusts will be able to develop agents for tasks such as handling Freedom of Information requests, processing complaints, reducing helpdesk workloads, and assisting with financial analysis. A governance framework called Agent 365 will oversee the deployment of those systems.

“Today, I am calling on tech companies operating in this country to introduce vice controls that prevent children from sending and receiving sexually explicit images. Because this is not an impossible challenge,” he said. “If they choose not, then we will act and we will change the law.” […] Under the changes, sexual predators will be prevented from being able to exploit and abuse victims through their devices, and children stopped from being able to access pornography, the Home Office said. Adults will still be able to take, share or view nude content once they have verified their age.

In the Commons, Melanie Ward, the Labour MP for Cowdenbeath and Kirkcaldy, said: “It’s time to stop asking social media companies to make their products safe, and instead time to start requiring them to do so through regulation.” Clive Efford, the Labour MP for Eltham and Chislehurst, said the “sociopaths” running social media platforms had no concern for the welfare of children. “The only message that they’re going to listen to is if there’s legislation put before this house that is going to act and send a clear message to them.” The proposal is designed to sit alongside the Online Safety Act, which requires companies to have processes for removing material that is illegal or harmful to children.

The discovery came from an investigation detailed in a June 2 preprint paper by Todd Humphreys and his student Zach Clements at The University of Texas at Austin, along with Argyris Krizise at Stanford University in California. By sifting through public data from ground-based stations with global navigation satellite system (GNSS) receivers, they identified a pattern of high-powered interference lasting less than 10 seconds each time but simultaneously detectable by ground stations across Europe from Norway to Spain to Poland, and even reaching as far west as Greenland and Canada.

By analyzing the ground station data from January 2019 to April 2026, the researchers found 75 days with at least one widespread GNSS interference event overlapping with the GPS L1 frequency band centered on 1575.42 megahertz. That represents the main band used for signal transmission by the US-made GPS satellite constellation and GNSS constellations from other countries. Such interference patterns happened mostly on Tuesdays, Wednesdays, and Thursdays during business hours in Europe, Humphreys told the YouTube channel Veritasium. Because such “continental-scale” interference was simultaneously affecting GPS receivers across Europe and beyond, Humphreys and his colleagues calculated that the source had to be at least 1,200 kilometers above the Earth.

[…] In the Veritasium video, Humphreys speculated that the Russians may have been testing the satellites’ GPS interference capabilities only briefly on a neighboring frequency adjacent to the typical GPS band. “And then in the eventual future when there is a hot conflict, they go ahead and tune their transmitter down to the GPS band, but it’s much more damaging now that it lies right on that band,” he said. Incidentally, the raw data also revealed a second interference burst from the Russian satellites in a lower-frequency band used by China’s BeiDou navigation system. “I can no longer say this is accidental with confidence,” Humphreys told Veritasium. He also described the Russian satellites’ quiet demonstration as a “massive escalation in the electronic warfare background conflict that is going on right now.”

The investigation consulted over 20 independent battery experts, including Julian Zanau from the Fraunhofer Research Institute, Dr. Yahim San from Justus-Liebig University, Tom Bicha from Leona, and Dr. Yuo Hesca from Seinajoki University of Applied Sciences. Every single one confirmed the tested cell is lithium-ion. There are two key pieces of evidence. First, the voltage curves from VTT testing match high-nickel lithium-ion cells (NCM chemistry). The cell sits at 3.7-3.8 volts at 50% state of charge — right where lithium-ion cells operate. Sodium-ion cells don’t go significantly past 3.5 volts at 50% SOC.

The second piece of evidence is even more damning: VTT’s cell expansion data. When a battery charges, ions squeeze into the anode material, causing it to expand in a predictable pattern. A graphite anode produces a distinctive “kink” in the expansion curve around 50-70% state of charge, caused by how ions reorder themselves in graphite’s layered structure. The Donut Lab cell shows exactly that kink.

This is critical because sodium ions are physically too large to fit into graphite layers. The graphite anode signature proves the cell uses lithium ions. The investigation puts it well: “it’s like we have a slightly noisy fingerprint and a picture of the suspect’s face. And yet again, it’s a match.” The calculated energy density? About 298 Wh/kg — what you’d expect from a good lithium-ion cell, not the 400 Wh/kg claimed.

The investigation reveals that the battery technology traces back to CT Coatings, a German company with an “eclectic” array of patents — including inventions for screen-printed paving slabs, menu folders, and warning triangles. CT Coatings promised Nordic Nano and Donut Lab a screen-printed sodium-ion solid-state battery. What it delivered was a lithium-ion pouch cell.

The world’s oceans are under “severe and accelerating” pressure from human activities, with the rate of sea-level rise double that of a decade ago, according to a damning assessment from the United Nations. The “intensifying” stressors, which include pollution and large-scale industrial fishing, are cumulative, said the report, resulting in widespread biodiversity loss and putting ocean systems under “severe strain.”

The UN’s third World Ocean Assessment, which reflects the work of nearly 600 scientists from 86 countries, looked at the oceans’ health from 2021-25. The previous report, that covered up to 2018, found persistent degradation of the marine environment. Five years on, scientists know more about the cumulative impacts of anthropogenic pressures on the ocean, and the latest report shows just how much of the damage has been done in the past few years. The scientists’ key findings include:

- Sea levels continue to rise at an increasing rate, from 2mm a year prior to 2015 to 4.3mm a year in 2023.
- 16% of the increase in global ocean heat since 1955 occurred after 2018.
- The greatest relative warming has been observed in the Atlantic Ocean and the southern parts of the Indian and Pacific Oceans.
- Large gaps in knowledge persist — with only 27% of the ocean floor mapped by 2025, deep-sea ecosystems remain poorly understood.

OpenAI said it has not decided on timing yet. And because the filing is confidential, it’s not yet clear how many shares the company plans to sell or at what price. “It may be a while because there are things we want to do that are likely easier as a private company,” it said in a post on its newsroom page. But the company said the filing “gives us the option to go public sooner if that ends up being best.”

The transition to a public company will give Wall Street a window into OpenAI’s finances as the company pours billions into AI infrastructure and computing resources. Investors dumped tech stocks last week as they questioned whether a recent run-up in those shares had gone too far. OpenAI was last valued at $852 billion after raising $122 billion in March, but it’s faced pressure to demonstrate it can generate the cash to match that valuation.

On Thursday, WIRED reported that Meta had quietly integrated substantial portions of the NameTag system into the Meta AI app. Though never publicly enabled, the feature was designed to convert faces captured by the glasses into unique biometric signatures, commonly known as faceprints, and compare them against a database of faceprints stored on the user’s device. WIRED also found that faces the system failed to recognize were cropped, indexed, and stored locally for future processing.

NameTag first surfaced in February, when The New York Times, citing internal Meta documents, reported that the company was developing face recognition for its smart glasses and weighing a launch as soon as this year. One memo reportedly described releasing it during a “dynamic political environment,” when privacy and civil liberties advocates would be distracted. Last week, WIRED reported that much of NameTag’s machinery was already built into the Meta AI app, downloaded by millions of users, as early as January, even as Meta publicly said it had made no final decision about face recognition. After WIRED’s report, Stone dismissed the findings, writing that the company couldn’t answer questions about how the system would work because “the feature does not exist.” Andrew Bosworth, Meta’s chief technology officer, called the reporting “incredibly misleading” and “absolutely dishonest.”

[…] The newly released version of Meta AI removes nearly all traces of the feature Meta said did not yet exist. Gone is the face-recognition software itself, along with the code that ran the NameTag recognition process and the “Person recognized” alert the app would have shown if someone were identified. The update also strips out a folder where the app would have stored the cropped images and biometric signatures of faces it captured but could not identify. […] A few fragments of the NameTag system remain in the version of latest Meta AI, including an internal debug menu label and a dormant link meant to open a recognized person’s profile. The leftover code points to parts of the system that are no longer there.

Last night’s Xbox Showcase featured the return of games specifically earmarked as exclusives for Xbox consoles (though, of course, they’ll still also be coming to PC). But why just Gears and Clockwork Revolution? And how will this policy be enforced in future? Microsoft’s announcement left numerous questions unanswered. “We want a reason for people to get on board with Xbox, we want them to have a reason to buy an Xbox, we want them to have a reason to be an Xbox fan,” Booty said. “At the same time, we want to reward all our players that have been with us for a long time — we know that exclusives are important, and that’s why we’ve got Gears coming in 2026 and Clockwork [Revolution] coming in 2027.”

“We also want to be clear that our big multiplayer games and live-service games are going to continue to be multiplatform,” he continued. “If we’ve promised something to players already, we’re going to honor that promise. And then — I think Asha said it — we’re going to make the right decision and not the fast decision. “We’re going to keep thinking about this going forward,” Booty continued, “and, I think you guys know already, our principle is when we announce the date, we announce the platforms. So, it’s going to be case-by-case, but we’re going to be clear, that when it’s got a date, it’s got a platform and you’ll know what the choice is going to be.”

Beyond those games already confirmed for PlayStation (such as the upcoming Halo: Campaign Evolved, and the PS5 version of Forza Horizon 6 due later this year), last night saw Microsoft make the call that other upcoming titles would still be coming to PS5 as well. While it had been assumed that State of Decay 3 would get a PS5 version, yesterday saw it made official. Hellblade threequel Senua was unveiled, and is getting a PS5 version. And, unsurprisingly, Spyro: A Realm Beyond is coming to Xbox, PS5 and Nintendo Switch 2.

Apple has unveiled its next Mac operating system, macOS Golden Gate, with Apple promising better performance, the improved Siri, and more. […] On the surface, macOS Golden Gate is not as significant an upgrade as macOS Big Sur, or even macOS Tahoe with its Liquid Glass redesign. But under the surface, it is much more significant than it seems. Apple has chosen this release to draw a line in the sand. For the first time, the new macOS Golden Gate will not support Macs that have Intel processors. […] Nonetheless, as of when this is released to the public in September or October, no Intel Macs will ever be supported again.

Siri is now embedded directly in the Dynamic Island, accessible by swiping down from it, pressing the side button, or saying “Hey Siri.” A revamped voice engine makes the assistant sound more expressive, with micro-adjustable voice settings available during initial setup.

During Apple’s keynote demo, presenters showed Siri handling chained, multi-step requests with apparent ease. In one sequence, a presenter asked about a Suki Waterhouse concert, was told tickets require a lottery entry, and asked Siri to set a reminder when the lottery opens, which it did. In another, the assistant identified a photo’s landmark, pulled up navigation to that location, and surfaced photos from a recent family trip, adding a specific image to a shared family album on request.

Another demo showcased Siri’s ability to synthesize information across apps. A presenter asked about a dessert he had heard about at an event, and Siri located the relevant details from his Messages history. It then compiled the information into a watch-party menu, drafted a message to his contacts with the menu included, and presented send and edit options. In a further demo, a presenter asked about something his son had shared in a message and followed it up by asking Siri to compose an email on the subject.

A new dedicated Siri app lets users scroll back through prior conversations and kick off new ones, with conversation history synced via iCloud so sessions carry seamlessly between devices. The app is also coming to watchOS. On the Mac, Siri is now also integrated into Spotlight and available via right-click context menus on any file or window. On visionOS, Siri AI gains a 3D visualization that users can place anywhere in their space.

Meta-owned communications app WhatsApp says it recently detected and disrupted a spear-phishing attempt linked to spyware company NSO Group. The attack is allegedly in defiance of a court order that bars the spyware maker from targeting WhatsApp. WhatsApp filed a lawsuit against NSO in 2019, after it came to light that a zero-day vulnerability had been exploited to deliver spyware to users. […] NSO has been seeking to overturn the order blocking it from targeting WhatsApp users, arguing that the company will “suffer irreparable harm.”

According to WhatsApp, the spyware maker has violated the permanent injunction. The messaging app reported on Monday that it had recently learned of a social engineering attack that attempted to trick users into clicking on malicious links. WhatsApp has only shared a few domains as an indicator of compromise (IoC), but says it was able to link the attack to NSO, pointing to similarities to previously reported one-click phishing campaigns tied to the spyware company. WhatsApp says it also caught the attackers creating test accounts and groups. Those accounts and groups have been disabled, but further action is also being taken.

Firefox on Linux has long been focused on the Video Acceleration API (VA-API) that isn’t universally supported by Linux graphics drivers. This has left to efforts like NVIDIA-VAAPI-Driver to layer VA-API atop NVIDIA NVDEC interfaces to enjoy GPU-accelerated video playback in Firefox. Smaller Arm/embedded graphics drivers also have been largely left out of the game in the VA-API space. But with Vulkan Video we are beginning to see more adoption and in a cross-platform manner.

[…] The Firefox 153 release due out in July will have Vulkan Video decoding support available. The Vulkan Video activity in Firefox Git culminated this week with the work of NVIDIA engineer Tymur Boiko and Red Hat’s Martin Stransky. Firefox 153.0 is expected for release on 21 July with this Vulkan Video support assuming no last minute issues.

In its filing with the Securities and Exchange Commission, Bending Spoons said it ended the year with $1.31 billion in revenue and has generated $601 million in Q1, a 132% year-on-year jump. The company gets the majority of its revenue from subscriptions, which account for 84% of its business. It generated $27.4 million in profit in Q1 2026. The company raised funding at an $11 billion valuation last year, up from $2.8 billion in 2024. In April, Reuters reported that the company could seek a $20 billion valuation with the IPO.

Rob Williams knows how to pitch Jeff Bezos: You write a press release as if your product has already been built. Bezos reads it and gives a thumbs up or down. Williams went through this process a lot as an executive on Amazon’s “S-team,” in charge of software products such as Alexa, until his departure last fall. But the pitch he made a few weeks later — in December 2025 — was different. Now he was collaborating with Thomas Reardon, a neuroscientist and repeat startup founder, and approaching Bezos as a funder, not a boss. Here’s what Bezos, sitting on his yacht somewhere, read while Williams anxiously watched on Zoom: “Flourish is a neuro AI company that is solving the two most difficult problems facing AI today: power efficiency and continuous learning. We are building Cortex AI, the first synthetic intelligence system designed to match the computational capacity, learning efficiency, and power budget of the human brain.”

A month later, I’m lunching with Reardon and Williams in the Flatiron neighborhood in New York City. Reardon gets right to the point. AI has dug itself into a hole, he says. Though increasingly powerful, large language models are greedy consumers of computer power and data. Though the inspiration for LLMs was rooted in biology, current frontier models have little in common with the human brain. A person uses about 20 watts of energy to process information; a single chip in an AI training cluster uses more than 30 times that amount. The hyperscalers require thousands of chips and gigawatts of energy, enough to power small cities. And those models need to suck up virtually all of what humans have written. Each new model requires more, more, more. For all of that, the models don’t learn. Once you train them, they’re stuck. The goal, Reardon tells me, is to build “a synthetic artificial intelligence brain that runs on 50 watts or less.” It should adapt to its conditions, be as nimble as a human mind, and burn a tiny fraction of an LLM’s compute power and energy. The proof of concept is thriving inside our skulls. “There’s something fundamentally wrong with saying, “I need to basically read every book ever written 20 times over in order to learn English,’" Reardon says. “A human baby does it with a couple hundred thousand utterances.”

Reardon and Williams haven’t figured out yet how to build systems that match the magic of a human brain. What they have is a belief that an expert, well-resourced team — of AI researchers and neuroscientists working essentially side by side — can find the answer. The neuroscientists will conduct original wet lab experiments with some of the most advanced lab equipment available, to hunt for usable intel on the brain’s architecture. They plan to release the models they’re currently developing as near-term products on the path to a full reinvention of AI. The fuzziness of the proposal didn’t bother Jeff Bezos. After reading Williams’ two-pager, he chipped in $50 million. Other funding came from Lux Capital, Google Ventures, and Catalio, among others. Bezos then almost doubled his initial stake and told Reardon he’d have given more if they’d asked. Now with a war chest of $500 million and a reported valuation of $2.5 billion, Flourish just needs to invent a new way to do AI.