A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials from marketing professionals.

The operation is abusing the legitimate cloud-based PeopleForce human resources platform and a domain associated with the Salesforce Marketing Cloud service before redirecting the recipient to a malicious landing page.

To further instill trust and increase the chances of success, the threat actor is using the names and pictures of real recruiters at impersonated companies.

Will Thomas, senior advisor at cybersecurity intelligence and threat hunting company Team Cymru, analyzed the campaign and discovered that the phishing email pretends to be from “a recruiter looking to hire people for marketing roles.”

The researcher uncovered that the threat actor is using at least 34 domains impersonating high-value companies in the following sectors:

• Airlines and travel: American Airlines, Booking.com, Delta Air Lines, United Airlines
• Food and beverage: Coca-Cola, PepsiCo, Red Bull
• Apparel and luxury goods: Adidas, Louis Vuitton, Sephora, Levis
• Staffing, consulting, and tech: Adobe, Aquent, ManpowerGroup, McKinsey & Company, OpenAI
• Hospitality and marketing: Marriott, Omnicom Group
• Entertainment and sports: FIFA, Netflix

Thomas found that the campaign relies on nested redirects, a technique that routes visitors through multiple legitimate services before reaching the malicious landing page.

The researcher noted that while the phishing emails appear to originate from PeopleForce, the underlying links resolve to the exct[.]net domain, which is operated by Salesforce following its acquisition of the ExactTarget marketing automation platform, now rebranded as Salesforce Marketing Cloud.

ExactTarget redirects to the Wise Agent (wiseagent[.]com) cloud-based real estate Customer Relationship Management (CRM) software for agents, teams, and brokers, which forwards to the phishing landing page.

BleepingComputer has found that the operation has been running for at least five months and initially used Outlook email addresses with the name of the impersonated company.

One phishing email, posing as a message from Adidas recruiter Paulina Manzo, asked the recipient to schedule a conversation about a potential role at the company.

When clicking on the link to the calendar, the recipient was redirected to the threat actor’s landing page adidas-hiring[.]com

To continue the process for scheduling a meeting with the recruiter, the potential victim is asked to sign into their Google account.

Clicking on the “Continue with Google” button triggers a fake Google sign-in popup rendered inside the phishing page to impersonate Google authentication.

Although the pop-up may appear as a legitimate browser window, it is just HTML and CSS code rendered inside the phishing page, a technique known as browser-in-the-browser (BitB).

By using modern web development tools, the attacker can imitate all the elements of a legitimate authentication pop-up page.

While it is unclear how the threat actor gained access to the legitimate platforms, abusing them does not imply a compromise of the services.

One possible avenue is creating a genuine account specifically for the campaign, or using compromised logins, which allows configuring the redirect chain and the landing page.

A list of the domains discovered in this phishing campaign is available in Will Thomas’ analysis on GitHub.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

Businesses looking to modernize their payment systems may want to learn what a crypto payment processor is, how it works, and why it matters.

Cryptocurrency and the crypto industry at large often appear most prominently in investing circles, but recent advancements in blockchain, the technology that supports crypto, have expanded crypto’s usefulness. Today, businesses across industries can make practical use of crypto thanks to the advent of crypto payment processors like 0xProcessing, tools that allow them to accept crypto payments without holding crypto themselves.

Crypto and related technologies remain something of a mystery for many companies, however, so to better determine whether adopting a crypto payment processor is the right move for them, businesses should learn more about what these tools are, how they work, and why they may prove useful.

What Is a Crypto Payment Processor?

Put simply, a crypto payment processor is a tool that allows businesses to accept various cryptocurrencies as payment. When a customer selects crypto at checkout, the processor generates a unique wallet address or QR code for that transaction. The customer sends their payment to that address for verification, and upon successful verification, the processor either converts the funds to the business’s preferred fiat currency or deposits them directly into the business’s crypto wallet.

Note that this approach means businesses do not have to accept crypto if they do not want to; if a company would prefer not to deal with the volatility of managing Bitcoin, for instance, they can simply convert it to USD at the counter, minimizing the risk of the payment losing value.

Transactions made using crypto can take anywhere from a few seconds to a few minutes, depending on the cryptocurrency used, so businesses should prepare accordingly.

Why Businesses Might Use a Crypto Payment Processor

Aside from expanding payment options, there are several potential benefits to using a crypto payment processor. For businesses that operate online, accepting crypto may give them access to global customers, since most cryptocurrencies can be used from almost anywhere.

According to Deloitte, “Using crypto as a form of payment could reduce transaction fees and possibly eliminate the cost of float and the need to wait multiple days for cash settlement.”

This could be particularly true for cross-border payments, which have historically been more costly and take longer to process than domestic payments.

In more urban regions where competition between businesses tends to be fiercer, expanding the currencies they accept can make a given business appear more innovative, making it more appealing to tech-savvy consumers and other customers who may prefer to pay in alternative currencies.

Picking the Right Processor

Although crypto payment processors generally have benefits, businesses should be mindful of the specific processor they adopt, as they vary in overall quality and security.

On the whole, reliable crypto payment processors employ security features such as blockchain transparency, fraud prevention, wallet security, and compliance and KYC/AML measures. No security feature is foolproof, but these protocols may help businesses keep both their data and their customers’ data safe from fraud. This priority will likely become increasingly important as more purchases are made digitally.

Before adopting a crypto payment processor, businesses should thoroughly assess whether it would benefit them. If they serve an audience that is not interested in paying with crypto, chances are that tools to help them do so would have limited use.

Though cryptocurrency is by no means ubiquitous as a regular form of payment, its increasing popularity could prompt businesses that previously disregarded it to consider its implications for their future. For businesses that see crypto as a practical asset in the years to come, adopting a crypto payment processor could be a solid first step in preparing their operations for that future.

FAQ

Q: What is a crypto payment processor?
A: A crypto payment processor enables businesses to accept cryptocurrency payments while simplifying transaction management and settlement.

Q: Is it safe to accept cryptocurrencies as payment?
A: Generally yes, as reputable processors use blockchain verification, security controls, and compliance measures to help protect transactions.

Q: Can businesses receive fiat instead of cryptocurrency?
A: Indirectly, yes. Many crypto payment processors automatically convert crypto payments into traditional currencies.

Q: Which industries benefit most from crypto payments?
A: E-commerce, SaaS, gaming, travel, and digital service providers often see the greatest benefits from accepting cryptocurrency payment

Known for its cloud infrastructure that allows developers to deploy agents without managing servers, Vercel has quietly become one of the most central companies in AI software. The company currently sees 6 million deployments a day, half of them triggered by coding agents, and more than 1 trillion tokens flow through the company’s AI gateway daily.

After the company’s ShipNYC conference last week, we sat down with Vercel CEO Guillermo Rauch for his take on this moment in AI, and how platform companies like Vercel end up competing with major labs. Here’s a lightly edited transcript.

It feels like there’s a different energy in the community this year, fewer pilot programs and more focus on how to make things work well in practice. I’m sure you’ve seen that a lot with clients, but I’m curious what that journey has looked like within Vercel.

Last year was about prototyping. The sky’s the limit, unleash the agents, everyone can build, and so on. We did that, and we learned a lot because we had hundreds of agents organically developed and deployed within the company, and then you started getting into the realities of agents in production, and some of the challenges.

The biggest lesson for me was the home-run use cases, the two killer apps of agents. One is the coding agent, of course. That’s driving a lot of the token utilization in the world, but when you produce so much software, you need somewhere to put it. The second killer app of agents is the internal agent that helps you run the company. The challenge there is, how do you securely access data? How do you audit what the agent is doing? How do you get a trail of all of the tool calls and access controls that the agent had to incur in order to get a job done?

To solve that, we came up with this framework called Eve, where you can lay out an agents’ instructions and skills in natural language. And another tool is Vercel Sandbox, where you put the agent in a little cage. It can have the freedom still to express its intelligence, but then you can apply policy on what data it can access and what data can leave the sandbox.

What sort of problems does that help you avoid?

For [the] sandbox, the biggest advantage is data control. A real risk of AI that I always think about is, when you get a coding IDE like Devin or Cursor, if you’re in the wrong setting, they may train on your entire codebase. I remember talking to the president of Airbus about this. You have decades of wealth of very specific C++ code for aerospace engineering. Someone comes in and installs the wrong developer tool and boom, all the code goes out to the cloud for training.

I’m curious to hear more about that second killer use case. We all know about coding agents, but what does an internal corporate agent look like in practice?

So, there’s a sales rep sitting out there [in Vercel’s office]. She works on install base. Her job is to grow existing accounts. The bottleneck for people like her has not been her creativity, intelligence, ability to build relationships, it’s been data. “I don’t understand what accounts are growing faster. Give me the five accounts that have added the most seats in the last two weeks, so that I can prioritize my work.” She couldn’t ask that question in the past. She needed to wait until a Q1 project for a new sales dashboard completed. 

We were in that bottleneck for years at Vercel, and it was really frustrating because on the R&D side, we’re the fastest-moving company in the world. But on the sales engine, the Salesforce engineering [side], I was so incompetent. I had never opened Salesforce in my life when I started.

Now I feel like I can actually have impact across the entire company, because Eve can be used for our customer-facing agents and can be used to improve productivity. Same technology, it’s just APIs. Agents are forcing companies to open up, and that will have dramatic long-term implications. So many of these SaaS giants build their entire kingdoms on trapping your data, and that’s incompatible with agents.

How do you see client relationships with the big AI labs changing?

Last year there were a lot of people picking one lab partner — saying they would build everything on OpenAI or Anthropic. Now they’re saying, I understand how this all works — model, harness, data platform, sandbox, gateway — every piece is plug and play. You can use OpenAI, you can use Anthropic, or you can use Gemini. We’re seeing a lot of growth of Gemini, even though it’s not on the news as much, because people are optimizing for production now. The reality is, when you’re optimizing for production, you start looking at a price/performance, and Gemini models have awesome price/performance characteristics. You also bring in open models, so DeepSeek and GLM-5.2 are taking off. The data doesn’t lie.

There are places where you’re in direct competition with the labs too, right? Just the other week, OpenAI released a new set of tools that publish directly to the web without having to leave the OpenAI enclave.

It’s a natural next step for them to host little websites. And it’s a great opening for us, because now people will think of ChatGPT as a tool for making websites. And then if they keep asking the model questions about web hosting, the model recommends us. But you’re right, as the models or platforms add more capabilities, they come in direct competition with the infrastructure platforms that already exist.

I really think at this point we’re deciding on whether the model and the agent are going to be coupled.

Do you get all your intelligence from one place? Or do you get a module or a library or a building block from one provider, and then you build on top of it. That’s more like software engineering has always been, and that’s really what we’re bringing to market. We’re going to be the AWS of this generation, so obviously we’re fighting for a world of open protocols.

Engineers at Nanyang Technological University in Singapore, working with colleagues at Waseda University in Japan, have added a working underwater capability to remote-controlled cockroaches. The insects already carry small electronic packs that let operators steer them through rubble and tight spaces. A new 3D-printed attachment now supplies oxygen so the same insects can keep moving when those spaces fill with water.

Madagascar hissing cockroaches serve as the platform, as previous iterations of this technology proved effective after real disasters because the insects can fit through gaps too narrow for most robots and climb over uneven debris without requiring extensive programming. Operators transmit wireless impulses to electrodes on the antennas or surrounding nerves. Gentle pulses move the insect left or right while it maintains its own balance and obstacle avoidance.

Sale

Bambu Lab A1 mini 3D Printer + LED Lamp Kit, Set Up in 20 Mins, High Speed & Precision, Full-Auto…

• A1 mini + LED Lamp Kit for Creative Light Projects: Bring your ideas to life with the included LED Lamp Kit. Simply print compatible lamp models and…
• The Perfect 3D Printer for Beginners: A1 mini 3D Printer is designed to make 3D printing easy from day one with automatic calibration, simple setup…
• Experience the Bambu Lab Ecosystem: Access MakerWorld’s huge library of ready-to-print models, manage prints through the Bambu Handy app, and enjoy…

Water always halted the earlier systems because cockroaches draw air in through tiny openings called spiracles on the sides of their bodies. Once submerged, the holes fill and the insect runs out of air in minutes. The new component overcomes this limitation by incorporating a tiny chemical oxygen generator into a 3D-printed backpack. The primary housing is approximately 10 by 10 millimeters and sits on the insect’s back. Inside, there is a sponge coated with manganese dioxide. When a small amount of liquid hydrogen peroxide enters the chamber, the catalyst degrades the liquid and produces oxygen gas. Four flexible silicone tubes deliver the gas directly to the cockroach’s thoracic spiracles. A flexible waterproof casing composed of printed resin closes the area and creates a pocket of breathable air around the ventilation openings.

The entire structure is light and flexible enough that the insect’s usual walk remains nearly intact. Early versions put additional mass on top, causing the cockroach to flip over underwater. Moving the generator and adjusting the shell shape resolved the stability issue. The equipped insects were tested in water-filled tubes and bespoke 3D-printed obstacle courses that simulated flooded pipes or collapsed building portions. Without the oxygen module, the roaches went inactive in minutes. It allowed them to remain responsive and mobile for up to three hours. On dry surfaces, they traveled at about 87 millimeters per second. As they went down the bottom and through submerged channels, their pace fell just slightly to around 78 millimeters per second.

The project builds on years of work by the same research groups. Previously, cyborg cockroaches helped with search efforts following a severe earthquake in Myanmar, reaching locations where human teams and conventional machines couldn’t. Adding reliable underwater operation allows for similar access to areas where flooding has obstructed typical pathways, such as storm sewers, half-submerged basements, or earthquake rubble drenched by burst pipes.
[Source]

​Vietnamese authorities have arrested and are prosecuting seven suspects believed to have run HiAnime, the largest anime piracy streaming service before its shutdown in June.

HiAnime provided access to a massive library of English-subbed and dubbed anime without subscription fees, attracting several hundred million visitors each month and temporarily surpassing legal streaming platforms like Disney+ and Crunchyroll in web traffic between late 2024 and 2025.

It was launched on the Zoro.to domain, rebranded to Aniwatch (and switched to Aniwatch.to) in July 2023, and again in March 2024 as HiAnime/H!Anime (using the HiAnime.to domain).

After becoming massively popular, HiAnime was also placed on the European Commission’s Counterfeit and Piracy Watch List and the United States Trade Representative’s (USTR) Notorious Markets list.

The seven defendants have been charged with infringing copyright and related rights and with money laundering, with four of them detained and the other three placed under house arrest.

They have been accused of creating more than 100 websites to upload over 26,000 pirated anime films, generating approximately $12.85 million in illegal advertising revenue between 2020 and April 2026.

​The Alliance for Creativity and Entertainment (ACE), a coalition of over 50 media and entertainment companies, including the world’s largest film studios and television networks, focused on shuttering illegal streaming services, confirmed the law enforcement action on Thursday and thanked U.S. authorities for their support throughout a multi-year investigation that led to the suspects’ arrests.

​”ACE applauds the actions of Vietnam’s Ministry of Public Security (MPS), in particular C03, the Economic Crimes Investigation Department, and A05, the Department of Cybersecurity and High-Tech Crime Prevention, in arresting and prosecuting seven operators believed to be behind Hianime and related piracy services,” said the Alliance for Creativity and Entertainment on Thursday.

“ACE would also like to thank its partners, Homeland Security Investigations and the U.S. Department of Justice, for their continued support in this multi-year investigation and action. ACE looks forward to continuing to support the MPS and its relevant agencies, and to working even more closely with them on future actions against piracy services.”

Earlier this year, in March, ACE also announced the shutdown of AnimePlay, another major anime streaming platform that hosted more than 60 terabytes of anime TV shows and movies and had over 5 million registered users.

The anti-piracy coalition dismantled AnimePlay by taking all infrastructure offline, including its hosting servers and web domains.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

A few simple adjustments to your settings will opt you out.

DEVOPS

A purported jab of Sony’s physical media phase-out blows up on GitHub itself.

You’re too late! Monday was the last day to score your own free CD of your GitHub repository, which the Microsoft-owned subsidiary offered to mail to the first 1,000 people who asked. 

But as of noon eastern time, that offer has been withdrawn (if it was ever genuine) after sparking confusion and ridicule.

Last Thursday, GitHub issued a short notice on X extending an offer:  

In light of recent developments in physical media, GitHub is proud to announce that you can now obtain your public repo on CD-ROM.

Keep it. Lend it to friends. Pass it on to your children.

Your code is physically yours, forever. Until you lose it, let’s be real.

Order yours today.

What “recent developments” the company referred to is anyone’s guess, though it implied that it came about as some sort of public pressure: “We heard you. And we agree,” the X missive began. (“No one fucking asked for this” one commenter retorted). 

Many media outlets, including Tom’s Hardware and Destructoid, speculated that GitHub’s offer was actually a jab at Sony for discontinuing optical media for its PlayStation consoles in 2028.

GitHub was not alone in its mockery of the Sony announcement. Nintendo and other companies responded. Even the Spanish arm of the KFC fast food chain took aim at Sony on social media, mockingly announcing it would no longer offer its “physical format” (“ÚLTIMA HORA: KFC dejará de ofrecer su formato físico a partir de hoy.”).

But the GitHub joke came with an action item, and that’s where the trouble started.  

The original GitHub message included a link to a Microsoft form (gh.io/cd) where one could provide details as to where to send their CD.

The form stated that it would accept applications for the first 1,000 people who applied, until July 6. It asked for a GitHub user name, repo URL, and the requester’s shipping address and phone number.

The form was taken offline as of press time, though the tweet (or X post) remains intact. 

GitHub did not immediately respond to requests for comment. 

Pity the poor intern

If the offer is indeed a troll on the part of GitHub and Microsoft, it is indeed an odd one, and not just because fulfilling the requests would involve a lot of work on the part of GitHub’s mail room and the troll-master’s minions who would presumably be responsible for burning all those CDs. Does anyone at GitHub even have a CD burner? That was one of the questions we wanted to ask Github.

And GitHub/Microsoft best be careful about throwing disks around. However controversial its decision, Sony does have the velocity of technology development behind its decision. 

“This transition will enable us to align more closely with how most of our community prefers to access and play games today,” read a Sony statement.  

Today, about 85% of all games sold are downloads, Sony has reported in its financials. 

Shooting fish in a barrel

The original announcement quickly got ratioed, as the kids are wont to say, by mockery of GitHub’s many recent outages.  

“They have to ship you CDs because the website is barely up,” one commenter wrote. 

“Why we need github when you can run remote repo on CD” another piped in.

Also, the CD format is an oddly archaic format to base a protest from, especially coming from a parent company that got its start distributing OSes by floppy discs.

Moreover, there are plenty of open source projects whose repos could easily overfill the 700 MB limit of a burnable CD.  

One, for instance, is Google Chrome repo, which open source developer Dmitriy Kovalenko said he requested a copy of. “Let’s see how they ship 66G repo on a CD,” he wrote on X.

Far more problematic is that GitHub also faces the very real danger that users – those still with disc readers – would actually find such an artifact genuinely useful. 

“Stop taunting people for desiring physical media that they control” someone else commented. ®

More Information

VHF frequencies (30–300 MHz) support broadcasting, voice communications, aviation navigation, and defense radar. Yet VHF propagation is widely misunderstood. The common assumption of “line of sight” oversimplifies how signals behave in practice. In terrestrial environments, VHF signals interact with the atmosphere and physical objects continuously. Refraction in the troposphere bends signals beyond the geometric horizon. Reflections from buildings and terrain create multipath interference. Diffraction carries signals into shadow zones behind obstacles. Beyond these everyday effects, several uncommon modes can extend VHF range dramatically. Tropospheric ducts formed by temperature inversions can channel signals over 1,500 km. Sporadic E events create temporary ionospheric patches reflecting lower VHF signals up to 2,500 km. Meteor ionization trails offer brief but reliable reflectors for data telemetry. EME (Earth-Moon-Earth) communication uses the moon as a passive reflector for worldwide coverage. This white paper covers the physics, practical characteristics, and operational significance of each mode. It equips engineers and planners with the knowledge needed for effective VHF system design.