Anthropic Opens Seoul Office; xAI Ships Grok Imagine Video 1.5 and a PowerPoint Add-In

Posted on by
Reply

This brief covers the trailing ~72 hours (June 15–18, 2026). Every item below was confirmed against the originating organization’s own announcement page, with a published date inside the window. It was a relatively quiet stretch dominated by xAI shipping product updates and Anthropic expanding internationally.

Anthropic opens a Seoul office and expands across the Korean AI ecosystem

Anthropic · June 17, 2026

Anthropic opened its Seoul office and announced a wave of partnerships across Korean enterprises, startups, and research institutions. Among the deployments named: NAVER has rolled out Claude Code across its entire engineering organization, Samsung SDS is deploying Claude (including Claude Code and Claude Cowork) to employees across Samsung Electronics, and LG CNS is rolling Claude out to thousands of staff. Anthropic also said it will provide Claude access to up to 60 researchers affiliated with Korea’s National AI Research Lab (NAIRL).

“What I see in Korea are teams who understand that innovation and safety are two sides of the same coin. Korean organizations are building with Claude to bring the benefits of AI to millions around the world. Opening an office in Seoul gives a long-term home to our work alongside the people shaping Korean leadership in AI.” — KiYoung Choi, Representative Director of Korea at Anthropic

Source: anthropic.com/news/seoul-office-partnerships-korean-ai-ecosystem

xAI ships Grok Imagine Video 1.5, its best image-to-video model yet

xAI · June 16, 2026

xAI made Grok Imagine Video 1.5 generally available on its Imagine API and rolled out a “Fast” variant on grok.com and the iOS and Android apps. The model generates synchronized audio, speech, and ambience in the same pass as the video, and improves motion and physics consistency. xAI also introduced Projects, parallel multi-agent generation, and library search to the Imagine workflow.

“Grok Imagine Video 1.5 Fast almost doubles generation speed: it produces 6-second, 720p videos in about 25 seconds, down from 40+ seconds in our previous model.” — xAI

Source: x.ai/news/grok-imagine-video-1-5

Grok comes to Microsoft PowerPoint

xAI · June 16, 2026

xAI launched a free Microsoft 365 add-in that runs Grok inside PowerPoint, letting users turn an outline into a full deck, generate individual slides, and restructure sections from a single instruction. The add-in can pull in web and X searches as well as a user’s Grok connectors (such as SharePoint or Google Drive), and companion add-ins for Word and Excel are also available.

“Grok now works inside Microsoft PowerPoint — turn outlines into slides, expand the deck, and tighten the narrative without leaving the app.” — xAI

Source: x.ai/news/introducing-powerpoint-addin

xAI adds an Agent Dashboard to Grok Build

xAI · June 15, 2026

xAI shipped an Agent Dashboard for its Grok Build coding agent that puts every active session on a single screen, sorts them by state so blockers needing input rise to the top, and lets developers peek at output, reply inline, and dispatch new sessions in parallel without losing context. It runs via grok dashboard from the shell or /dashboard inside a session.

“The Agent Dashboard puts every Grok Build session on one screen. See what each is doing, run them in parallel, and step in only when input is needed.” — xAI

Source: x.ai/news/agent-dashboard

Still developing

A notable item that falls just outside the 72-hour window but is worth flagging: on June 10, 2026, Google DeepMind released DiffusionGemma, an experimental open-weights (Apache 2.0) model built on the Gemma 4 architecture that generates text in parallel blocks — denoising up to 256 tokens per step rather than one at a time — for roughly 4x faster single-user generation. Confirmed via Google DeepMind’s announcement and NVIDIA’s optimization post. Source: blog.google.

This brief covers the trailing ~72 hours (June 15–18, 2026).

Primary sources:

RoguePlanet Defender Zero-Day, a Max-Severity Joomla Flaw on CISA’s KEV, and 140+ Hijacked Mastra npm Packages

Posted on by
Reply

A roundup of notable cyber security developments from roughly the trailing 48 hours (June 15–17, 2026). Every item below was traced to a primary source — a vendor advisory, the CVE record, the CISA KEV catalog, or the original research writeup.

Microsoft confirms unpatched “RoguePlanet” zero-day in Defender (CVE-2026-50656)

Microsoft MSRC · June 17, 2026

Microsoft published an advisory acknowledging a publicly disclosed elevation-of-privilege flaw in the Microsoft Malware Protection Engine used by Microsoft Defender, tracked as CVE-2026-50656 (CVSS 7.8) and nicknamed “RoguePlanet.” A public proof-of-concept from researcher “Nightmare Eclipse” abuses a race condition to spawn a command prompt with SYSTEM privileges, and reportedly works whether or not Defender’s real-time protection is enabled. No patch is available yet; Microsoft says one is in progress.

“Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as ‘RoguePlanet’… We are working to provide a high-quality security update that addresses this vulnerability.” — Microsoft

Source: Microsoft MSRC advisory (CVE-2026-50656) · SecurityWeek

CISA adds a maximum-severity Joomla Content Editor flaw to its KEV catalog (CVE-2026-48907)

CISA · June 16, 2026

CISA added CVE-2026-48907 — a critical (CVSS 10.0) improper-access-control flaw in the Widget Factory Joomla Content Editor (JCE) extension — to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation. The flaw can let unauthenticated attackers upload and execute PHP code by creating new editor profiles, and the KEV listing sets a federal remediation deadline under the current directive.

“These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.” — CISA

Source: CISA alert (June 16, 2026) · KEV catalog

Supply-chain attack hijacks a contributor account to poison 140+ Mastra npm packages

Socket / The Hacker News · June 17, 2026

In a roughly 80-minute window early on June 17 (UTC), attackers used a hijacked legitimate former-contributor account (“ehindero”) to publish malicious versions of more than 140 packages in the @mastra/* npm scope — the popular open-source AI-agent framework. Per Socket’s analysis, the compromised packages themselves were unmodified; the malware was delivered through an injected typosquatted dependency (easy-day-js) carrying an obfuscated postinstall payload that runs automatically on npm install. Affected packages include @mastra/core, which sees hundreds of thousands of weekly downloads.

Source: Socket research · The Hacker News

Still developing: Oracle PeopleSoft zero-day fuels ShinyHunters extortion of universities (CVE-2026-35273)

Oracle / Mandiant · disclosed June 10, 2026 (ongoing)

The ShinyHunters group has been exploiting CVE-2026-35273, an unauthenticated remote-code-execution flaw in Oracle PeopleSoft PeopleTools, in attacks dating to at least late May. Google/Mandiant say 100+ organizations — about two-thirds in higher education — were notified, and the University of Nottingham confirmed student data was stolen. Oracle issued an out-of-band advisory with mitigations but, as of reporting, no full patch.

“This campaign is still active. We have observed ShinyHunters sending extortions as recently as today.” — Charles Carmakal, CTO, Mandiant Consulting

Source: Oracle security alert · Google Threat Intelligence · CyberScoop

This brief covers the trailing ~48 hours (June 15–17, 2026).

Primary sources: msrc.microsoft.com · cisa.gov · socket.dev · oracle.com

OpenAI Simulates Deployments, Google’s AMIE Matches Doctors, and Anthropic’s Fable 5 Is Pulled by Government Order

Posted on by
Reply

A roundup of notable AI/LLM developments from roughly the trailing 72 hours (June 14–17, 2026). Every item below was confirmed against the originating organization’s own announcement.

OpenAI details “Deployment Simulation” to predict model behavior before release

OpenAI · June 16, 2026

OpenAI published a method for forecasting how a new model will behave in the real world before it ships. The technique replays recent, de-identified user conversations through a candidate model and measures how often undesired behaviors appear, giving a deployment-like preview rather than relying solely on synthetic red-team prompts. OpenAI says it analyzed roughly 1.3 million de-identified conversations spanning GPT-5 Thinking through GPT-5.4 deployments, and that the approach surfaced a novel misbehavior (“calculator hacking”) before release while making models far less able to tell they were being tested.

“Deployment Simulation is a method for simulating a future deployment before it happens. We do so by replaying previous conversations in a privacy-preserving manner with a new candidate model.” — OpenAI

Source: Predicting model behavior before release by simulating deployment (OpenAI) · paper (PDF)

Google’s medical AI, AMIE, matches primary-care doctors on disease management in a Nature study

Google Research / Google DeepMind · June 17, 2026

New research published in Nature extends AMIE (the Articulate Medical Intelligence Explorer) from one-off diagnostic conversations to longitudinal disease management — tracking symptoms across visits and cross-referencing drug formularies and clinical guidelines. In a blinded study using patient actors, specialist physicians compared AMIE against 21 primary-care doctors.

“AMIE matched clinicians in overall management reasoning and scored significantly higher in plan preciseness and guideline alignment, which suggests AI could someday support medical care, giving physicians more time to spend with patients.” — Google

Source: New research shows how AMIE could help manage health conditions (The Keyword) · paper in Nature

Still developing: US government orders Anthropic to suspend Fable 5 and Mythos 5

Anthropic · June 12, 2026 (ongoing)

Slightly older than the 72-hour window but still unfolding: citing national-security export-control authority, the US government directed Anthropic to suspend all access to its Fable 5 and Mythos 5 models by foreign nationals. To comply, Anthropic disabled both models for all customers; access to its other models was unaffected. Anthropic says the directive stems from a narrow, non-universal “jailbreak,” disputes that this warrants recalling a widely deployed commercial model, and says it is working to restore access.

“We are complying with the government’s legal directive and are removing access to Fable 5 and Mythos 5 for all users. However, we disagree that the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people.” — Anthropic

Source: Statement on the US government directive to suspend access to Fable 5 and Mythos 5 (Anthropic)

This brief covers the trailing ~72 hours (June 14–17, 2026).

Primary sources: openai.com · blog.google · anthropic.com

Bluetooth Vulnerability in Apple Beats Studio Buds

Posted on by
Reply

Vulnerability Analysis: Bluetooth Eavesdropping in Apple Beats Studio Buds

Overview
A security vulnerability was discovered in the Apple Beats Studio Buds that could allow a remote attacker to eavesdrop on users by accessing the device’s microphone via Bluetooth.

Technical Impact

  • Attack Vector: The vulnerability allows an attacker within Bluetooth wireless range to intercept audio.
  • Specific Condition: According to detailed reports, the flaw specifically targets devices that are unpaired and actively seeking connections, making them susceptible to unauthorized access.
  • Risk: If exploited, an attacker could listen to the environment around the user through the earbuds’ microphone without the user’s knowledge, leading to a significant privacy breach.

Mitigation
Apple has addressed this issue by releasing a firmware update.

  • Fix: Users are urged to update their Beats Studio Buds to firmware version 1B211 or later to close this security gap.

High-Quality Sources

  1. Absolute Geeks: Confirms the flaw allows attackers in range to listen through the microphone on unpaired devices actively seeking connections. Link
  2. MacRumors: Reports on the release of firmware 1B211 specifically to address this Bluetooth vulnerability. Link
  3. NerdyInfo: Highlights that the bug could let an attacker within Bluetooth range listen through the earbuds’ microphone. Link

Harbor Freighting the woods

Posted on by
Reply

I’ve been storing some stuff out at my property just… in the open air, finally decided to put some shelter up, albeit temporary just to get things out of the elements. Cheapo $199 shelter from Harbor Freight, came out pretty good. Welds on it are super suspect and not straight but hey, whatever, it was $199 and can fit all my stuff.

Ubiquiti SuperLink and USL Environmental Sensors

Posted on by
Reply

First off, lets start with a warning; If you order your SuperLink and Sensors from the Ubiquiti US store, it’s possible that you may get one of the units or in our case, all the sensors as the EU model and then a US SuperLink and well… they don’t work together. You can identify if you end up with an EU sensor or device via a small sticker on the box like this;

But once you get the right sensors – Kudos to UBNT for overnighting us replacements – they work very quickly, just pull the battery tab and they come up. So far so good, they’ve been pretty reliable connection wise for us and we’ve been testing them through concrete filled CMU w/ steel and we still have a reliable connection with reliable monitoring:

Overview: What is SuperLink?

The SuperLink platform from Ubiquiti is a new wireless sensor protocol & gateway ecosystem designed to integrate with the UniFi OS / UniFi Protect environment and deliver IoT sensor connectivity with enterprise-grade range, latency, and battery longevity.

Key technical highlights

  • SuperLink is designed for multi-kilometre line-of-sight range, enabling large-scale deployments (industrial, commercial, smart-buildings) rather than just short-range BLE sensors.
  • Ultra-low latency communications, tailored for security / alarm / automation sensor use-cases.
  • Efficient power management: supports long battery life endpoints (key for sensors in remote/undisturbed locations).
  • Integrated into UniFi OS: the gateway is adopted into UniFi Protect, which means your existing UniFi-based infrastructure (if you have one) can leverage the sensors and gateway.
  • For deployments: the gateway supports dual radios – Bluetooth (for legacy BLE sensors) plus the proprietary sub-GHz SuperLink radio for the new sensors.
  • In short: if you are managing facilities (data center racks, network closets, remote MSP sites) and you need environment-monitoring (temperature, humidity, water leak, light) with wide coverage and minimal wiring, the SuperLink + USL-Environmental combo offers an interesting path.