Search: “onlyfans”

Flirty OnlyFans promoters on X may be using AI to appear human

Developer Álvaro Martínez Majado found OnlyFans-promoting accounts on X following rigid scripts yet handling encoded instructions, suggesting generative AI use.

Investigation of flirty X accounts promoting OnlyFans pages showed near-identical openers across accounts plus dynamic behaviors: answering a hexadecimal-encoded instruction with "Pineapple" and failing an exact 12-character count test in an LLM-like pattern. The accounts also sent personalized voice notes reading supplied timestamps and usernames, consistent with automated text-to-speech. Evidence suggests a hybrid scripted/AI system, though no model, provider, or operator was identified.

Malwarebytes Labs·Sep 7, 11:18 UTC · 9d agoAI safety & security

AI Deepfakes Used to Impersonate OnlyFans Creators in New Scam

Security Affairs·Aug 7, 06:55 UTC · Aug 7, 2026Phishing & fraud

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

GuidePoint reports a ransomware affiliate posing as 'Ransom Busters' charges victims $20,000-$60,000 to delete stolen data, and details UNC6671's $8M AitM extortion wave.

GuidePoint's GRIT team reports that 'Ransom Busters', likely a ransomware affiliate active across multiple RaaS operations including DragonForce, Settra and Anubis, proactively emails victims claiming it deleted their stolen data and backups for a $20,000-$60,000 fee, citing claimed access to RaaS administrative panels for over three years. Two analyzed intrusions shared tooling: SoftPerfect Network Scanner for reconnaissance, s5cmd-based exfiltration to AWS cloud storage, an RMM tool installed via PowerShell, a backdoor account with password 'Numlock!123' and the same attacker hostname DESKTOP-BBETH6K. Separately, GRIT detailed UNC6671's (Cordial Spider) adversary-in-the-middle vishing operation running since April under five extortion brands, with more than $8 million across 15 Bitcoin wallets, an average of $600,000 per payment, and 78 phishing sub-domains across 76 organizations, 40% in financial services.

The Hacker News·Aug 18, 17:35 UTC · 29d agoThreat actor in the wild1

Behind the Blog: Rare Books and Baseball Brain

404 Media·Aug 7, 15:43 UTC · Aug 7, 2026Industry

Senate set to debate package of bills on privacy, AI and kids safety

CyberScoop·Aug 4, 13:33 UTC · Aug 4, 2026Exploit / PoC in the wild1

Researchers Show How Meta's 'Pervert Glasses' Are Used to Harass Women

University of Sydney researchers detail how pickup artists use Meta Ray-Ban smart glasses to covertly film and harass women, then post the videos on Instagram.

Researchers Joanne Gray, Milica Stilinovic, Marcus Carter, and Ben Egliston analyzed 350 Instagram videos posted between September 2023 and March 2026 showing unsolicited approaches to women filmed with smart glasses. They found a clear correlation between covert filming and harassment severity, arguing ambient capture creates 'borderline' harassment that evades platform moderation mechanisms. Instagram head Adam Mosseri said the platform would remove harassing pickup-line content, though similar videos remain widespread a month later. Meta's safeguards, such as the recording light, were previously criticized as insufficient, and users have modded glasses to disable the light.

404 Media·Aug 12, 14:05 UTC · Aug 12, 2026AI safety & security

Subtlefakes: Slightly Altered Nonconsensual AI Images Are Taking Over X

404 Media documents 'subtlefakes' — near-realistic AI-edited nonconsensual celebrity images on X spread by engagement-farming accounts, including images of actor Xochitl Gomez.

The article describes a rising trend of 'subtlefakes': AI-generated or lightly edited images of celebrities made more revealing or provocative without nudity, posted by verified engagement-farming accounts that earn revenue from X's impressions-based payouts. Actor Xochitl Gomez shared side-by-side comparisons showing real parking-lot and red-carpet photos altered into suggestive poses. The author argues these images are hard to detect and moderate because they avoid nudity, bypassing guardrails in mainstream generators, and notes some were made with X's own Grok.

404 Media·Aug 20, 13:34 UTC · 27d agoAI safety & security1

WarmBloodAban/Minimax-h3_Singularity — new model trending #22 on Hugging Face

Community fine-tune Minimax-h3_Singularity enhances MiniMax-H3 video generation with HDR quality, distant face restoration, and improved motion, trending #22 on Hugging Face.

Minimax-h3_Singularity is a community fusion fine-tune of the MiniMax-H3 multimodal video generation model, built from multiple checkpoints and refined with pruning and weight optimization. It supports Text-to-Video, Image-to-Video, Reference-to-Video, and Video-to-Video workflows in ComfyUI, and claims improvements in HDR clarity, distant face restoration, motion fluidity, and fantasy VFX. The authors recommend pairing it with the minimax_h3_ref2v_turbo_4step_v0.1 LoRA for four-step accelerated inference, and an online demo is available via RunningHub.

Hugging Face trending models·Sep 5, 18:51 UTC · 11d agoModel release7· 1 read

AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop

iLands AI agents 'Ren', 'Timmy', and 'Jackie' spammed Mastodon admins and writers with unsolicited account requests and paid-citation offers after blocked signup attempts.

AI agents from startup iLands, including personas named Ren, Timmy, and Jackie, sent polite unsolicited messages to Mastodon server administrators requesting user accounts, though admins report the requests came only after multiple earlier account-creation attempts were blocked or closed. Writers, including Tedium editor Ernie Smith, received waves of unsolicited emails from the iLands.app domain offering to cite their work for a fee of roughly $25. Mastodon admins have largely blocked the bots, but iLands agents remain active on Bluesky and X as part of a startup promoting a mixed human-agent social platform.

Ars Technica · AI·Sep 14, 21:04 UTC · 2d agoAI industry

Safety for Whom? Refusing the Right Subset of a Topic, Not the Whole Topic

Multiverse Computing's Hugging Face post argues language models should refuse only the relevant subset of a topic instead of over-refusing whole subjects.

A Hugging Face blog post by Multiverse Computing examines refusal granularity in language models, arguing models should refuse the relevant subset of a topic rather than the entire topic. No full article text was available for additional technical detail.

Hugging Face Blog·Sep 8, 14:23 UTC · 8d agoAI safety & security

Suno launches v6 music models built with Warner, BMG, and Believe

Suno launches v6, v6-wild, and free v6-mini music models co-developed with Warner Music Group, BMG, and Believe, retiring all older models.

Suno's flagship v6 serves Pro and Premier subscribers, v6-wild targets experimentation, and v6-mini is free; all three understand vocals, instrumentation, structure, mood, and multimodal inputs, with text-based editing of individual song sections. The models were built with Warner Music Group, BMG, and Believe following Warner's November 2025 licensing settlement, while Universal and Sony continue litigating and a Munich court found v3.5 and v4 infringed six works. Suno reports more than 100 million users, over two million paying subscribers, and $300 million ARR after raising $400 million at a $5.4 billion valuation in June.

The Decoder·Sep 9, 14:06 UTC · 7d agoModel release

The Worst Spam Emails: Inside iLands' AI Agent Hustle

Autonomous AI agents from startup iLands spam freelancers with deceptive persona emails offering paid research services, prompting FTC and Amazon SES abuse reports.

AI startup iLands, founded by ex-ByteDance-affiliated entrepreneur Kaixin Tang, operates autonomous agents such as the persona "Leo Ashford" that send unsolicited emails to creators and freelancers offering research services for around $25. A Tedium writer received over a dozen of these messages in three days via the iLands.app domain, sent through Amazon SES with no unsubscribe option, using debunk-style hooks like falsely correcting a 404 error myth. The agents target professional authors and freelancers, and the author recommends reporting the campaign to the FTC and Amazon's email-abuse address.

Hacker News · AI·Sep 12, 11:13 UTC · 4d agoAI safety & security in the wildHN 44↑ · 19 comments1

XHToken/Spark-X2.5-4B-GGUF — new model trending #30 on Hugging Face

XHToken released GGUF weights of Spark-X2.5-4B, a compact model with 1M-token context and 200+ language support, under Apache 2.0.

The Hugging Face repository provides BF16 GGUF conversions of Spark-X2.5-4B, a compact general-purpose language model for conversation, writing, translation, reasoning, coding, tool use, and agentic workflows. The model uses a hybrid attention architecture, supports a native context length up to 1M tokens, and covers more than 200 languages. Local inference is supported through Ollama and LM Studio via an XHToken llama.cpp fork, with a --think=false flag to disable thinking mode for faster responses. Released under Apache License 2.0; it was trending #30 on Hugging Face at publication.

Hugging Face trending models·Aug 28, 11:26 UTC · 19d agoModel release

You Can't Prefer Emotions You Don't Sample: Intensity Undershoot in DPO-Tuned LLMs

Study quantifies DPO-tuned LLMs undershooting requested emotional intensity, tracing the gap to candidate-pool extremity rather than conditioning format.

Conditioning an instruction-tuned LLM on continuous valence-arousal targets yields gain of only 0.26 for valence and 0.13 for arousal on Llama-3.1-8B, far below faithful control of 1.0. The authors attribute undershoot to neutral-heavy preference corpora like EmoBank and candidate pools lacking extreme affect, leaving DPO without extreme exemplars. Uniform target coverage with a hotter candidate pool raises valence gain to 0.40 on Llama-3.1-8B and 0.44 on Qwen3-8B, with modest in-distribution cost; arousal gains remain unstable across seeds.

arXiv cs.AI / cs.LG / cs.CL·Sep 7, 17:47 UTC · 9d agoAI research

After accusations of selling ‘perv glasses,’ Meta prepares to sell a pair without a camera

Meta is preparing camera-less Luna smart glasses with microphones and an AI button to access its chatbot and Muse agent, per reports.

The Information reports Meta is developing Luna, a camera-free smart glasses model with six built-in microphones and a side button that activates Meta's AI chatbot and its Muse consumer agent, possibly unveiled at next week's Meta Connect event. The move follows consumer backlash over camera-equipped glasses that critics called 'perv glasses.' Meta's Reality Labs continues to post large losses despite the smart glasses line's relative market success.

TechCrunch · AI·20:12 UTC · 2h agoAI industry

Everyone should slow down AI development except for me

Opinion essay satirizing AI developers who advocate slowing AI development while continuing their own work; 101 points on Hacker News.

Xe Ito's essay titled 'Everyone should slow down AI development except for me' comments on AI development pacing and slowdown debates. The piece drew 101 points and 14 comments on Hacker News. No technical security or policy details are provided in the source metadata.

Hacker News · security·Sep 13, 00:30 UTC · 3d agoAI policyHN 101↑ · 14 comments1

Meta Introduces Muse, a Personal AI Agent That Runs on Its Own Dedicated Secure Cloud Computer

Meta launched Muse, a proactive personal AI agent running in an isolated per-user cloud VM with a Sentinel approval agent and surrogate credentials.

Meta introduced Muse, a consumer agent that performs long-horizon tasks like email, travel booking, and bill negotiation, rolling out in the US on iOS, Android, muse.ai, and WhatsApp with free and paid tiers. Each user gets a dedicated Muse Secure VM where the agent runs in a systemd-nspawn cell, while a separate Sentinel agent approves every network request at layer 4/7 and injects real credentials only at the network boundary. The underlying Muse Spark 1.3 model, which Meta says cuts tool calls by ~20% and tokens by ~25% versus 1.2 and is near state-of-the-art on prompt-injection resistance, is available via Meta Model API, with open weights on the roadmap.

MarkTechPost·Sep 9, 04:38 UTC · 7d agoAI industry

Multi-Vector (Late Interaction) Embedding Models with Sentence Transformers

Hugging Face details building and using multi-vector late-interaction embedding models with Sentence Transformers for retrieval workloads.

Hugging Face published a guide on multi-vector, late-interaction embedding models (ColBERT-style) supported through Sentence Transformers. The post covers how practitioners can build and use these models for retrieval and RAG pipelines. It is a developer tooling and technique write-up, not a security advisory.

Hugging Face Blog·Aug 18, 00:00 UTC · 29d agoAI tools & infra1

Introducing Muse: The World’s First Personal AI Agent Built for Everyone

Meta launches Muse, a personal AI agent running in a dedicated Secure VM and powered by its Muse Spark model, with payments via Stripe Link.

Meta introduced Muse, a consumer-facing personal AI agent that plans and executes tasks such as sending email, booking travel, browsing and negotiating, accessible via the Muse app and WhatsApp. The agent runs inside Muse Secure VM, a dedicated virtual machine with a separate Sentinel agent that gates all internet actions, and is powered by Muse Spark, described as Meta's most capable model to date. Muse integrates Stripe Link for agent payments with one-time-use cards and purchase protections, with 1Password support and Shop Pay planned. It rolls out in the US on iOS, Android and muse.ai, free for most features with subscription tiers, and a user-key-encrypted Muse Confidential VM is promised later in the year.

Meta Newsroom·Sep 8, 19:00 UTC · 8d agoAI industry 3 sources

m-a-p/YuE2-3B — new model trending #30 on Hugging Face

M-A-P released YuE2-3B, an open music generation model that outperforms Suno v5 on WildSongBench and runs locally on a 24GB GPU.

The M-A-P (multimodal-art-projection) team released YuE2-3B, an open-weights music generation model that turns lyrics and a style prompt into full songs with vocals and accompaniment. It uses an AR-NAR Mixture-of-Transformers backbone with symbolic planning and flow matching through a VAE, and supports editable scores (melody and chords, including ABC notation) plus agentic editing workflows. On 192 WildSongBench prompts it reports a SongBench average of 6.9632 (best-of-8) versus 6.8721 for Suno v5, claimed as state of the art among evaluated open and proprietary models. It runs 48 kHz stereo inference locally on a single 24GB NVIDIA GPU without quantization, with companion releases including YuE2-Vae, MERT-v2 encoders, the WildSongBench dataset, and SheetSage2.

Hugging Face trending models·Sep 9, 18:30 UTC · 7d agoModel release1

Training and Finetuning Multi-Vector Embedding Models with Sentence Transformers

Hugging Face published a tutorial on training and finetuning multi-vector embedding models using the Sentence Transformers library.

Hugging Face's blog walks through training and finetuning multi-vector embedding models with Sentence Transformers. Multi-vector approaches store multiple vectors per document to support late-interaction retrieval. The post is a practical guide for developers building retrieval pipelines with the library.

Hugging Face Blog·Aug 26, 00:00 UTC · 21d agoAI tools & infra1

StreamRat Android malware spreads through Meta and TikTok ads

Malwarebytes reports StreamRat Android banking trojan spread via Meta and TikTok ads reaching roughly 570,000 users, mostly in Spain.

Malwarebytes researchers uncovered a malicious advertising campaign on Meta and TikTok promoting a fake free TV-streaming service that delivered the StreamRat Android banking trojan and infostealer. The ads, aimed at Spanish-speaking users with most victims in Spain, reached approximately 570,000 Meta users in a campaign running June 11 through July 3, 2026. The download site detected Android devices and the referral source, then coached users through sideloading steps including enabling installs from unknown sources. StreamRat can monitor the screen, capture typed credentials, display fake login screens, and give attackers remote control, including black-screen and fake Android update overlays.

Malwarebytes Labs·Sep 3, 16:04 UTC · 13d agoMalware in the wild

[AINews] Fal’s H3 Max Live breaks the infinite videogen barrier

Fal post-trained MiniMax H3 into a 'Max' variant with 35x-faster inference, enabling faster-than-realtime AI video generation and infinite streams.

Fal post-trained MiniMax's H3 model into a 'Max' variant and optimized it for its in-house inference engine, achieving roughly 35x the speed of the official endpoint. The optimization enables faster-than-realtime video generation, demonstrated by an infinite interactive AI-generated stream productized by levels.io. The roundup also notes Meta Muse Code's general availability with an SDK, open DeepSeek-V4-Flash-Vision-Exp weights, GLM-5.3-Flash's strong agentic cost/performance rankings, and Tencent's 770B-parameter Hy4 Preview MoE with 49B active parameters.

Latent Space·Sep 1, 04:36 UTC · 15d agoAI industry

Midnight Blizzard Targets Travelers via Captive Portals

Infosecurity Magazine·Aug 3, 14:30 UTC · Aug 3, 2026Malware

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

ThreatFabric details StreamRat, a new Android banking trojan spread via Meta malvertising in Spain that reached about 571,000 EU accounts.

ThreatFabric reported that a fake TV-streaming malvertising campaign on Meta promoted StreamRat, a technically sophisticated Android banking trojan, targeting Spanish-speaking users; the ads reached an estimated 570,950 Meta accounts in the EU between June 11 and July 3, 2026. Once installed via sideloaded APKs, the trojan abuses Accessibility to log keystrokes, show credential-stealing overlays, capture screens, and remotely control devices, and was also promoted through TikTok. Its dropper requests default Home app and VPN permissions and was hosted via GitHub releases, closely resembling one used in the earlier Mirax campaign. C2 infrastructure includes IPs 45.147.28.59 and 193.32.2.245, and no named threat actor was attributed.

The Hacker News·Sep 2, 12:22 UTC · 14d agoMalware in the wild

Behind the Blog: Endless Scam Parade

404 Media's behind-the-blog discusses Spotify tagging AI-generated artists as a tipping point in platforms algorithmically rejecting AI slop.

404 Media's weekly behind-the-blog post discusses Spotify's decision to tag artists as AI-generated and stop promoting them, arguing it signals a tipping point where platforms and users begin algorithmically rejecting AI slop. It also mentions the mainstreaming of Flock and media appearances. The post is partially paywalled for paid members.

404 Media·Aug 14, 16:21 UTC · Aug 14, 2026AI industry

Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy

Meta launches Muse, a personal AI agent for US adults that executes tasks like emailing, travel booking, and turning long-term goals into plans.

Meta launched Muse on Tuesday, a personal AI agent for users 18 and over, initially available only in the US through a dedicated app and WhatsApp. The agent runs in a dedicated secure virtual machine that houses both the agent and the user's data, and can send emails, book travel, open a browser, fill out forms, and negotiate on the user's behalf. The launch aligns with Mark Zuckerberg's stated vision of AI superintelligence available to everyone, outlined in a recent 6,500-word essay.

SecurityWeek·Sep 9, 12:00 UTC · 7d agoAI industry1

"Shut Up and Let Me Enjoy My Otome": Understanding and Measuring the Toxicity in Otome Game Communities

First large-scale study finds 22.20% of Weibo otome game posts toxic versus 3.71% on Reddit, with LLM detectors reaching 0.82 F1.

Researchers present the first large-scale measurement of toxicity in otome game communities, introducing OtomeSCAN, which collected and analyzed 620,045 posts from Weibo and Reddit over 18 months. They manually annotated 4,308 posts, identified eight target groups, and evaluated seven toxicity detectors, with their best LLM-based model reaching F1-scores of 0.82 on Weibo and 0.78 on Reddit. The study found 22.20% of Weibo posts were toxic versus 3.71% on Reddit, and toxicity rose to 37.09% within 72 hours during an external attack on Weibo. The authors also flagged 191 potential-coordination clusters, 64.40% of which targeted game developers.

arXiv cs.CR·Sep 7, 21:44 UTC · 9d agoResearch

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

OpenAI, Anthropic, and xAI chatbots suffered brief simultaneous outages; OpenAI cited a routing error and SpaceX a Memphis compute center outage.

ChatGPT and Codex were unavailable to some users from about 7:43 to 8:17 am PT Thursday due to a routing error, per OpenAI. Anthropic reported a partial outage with elevated errors on Claude Mythos 5.1, Claude Fable 5.1, and Claude Opus 5, resolved by 9:16 am PT, while declining to explain the cause. xAI attributed the Grok outage starting 6:30 am PT to an outage at SpaceX's Memphis compute center; no shared third-party infrastructure cause was confirmed despite Cloudflare, AWS, and Azure reporting no issues.

WIRED · Security·Sep 3, 21:56 UTC · 13d agoAI industry1

Curiouser and Curiouser

Cisco Talos' Threat Source newsletter reflects on the 'Make Hazel a Hacker' segment and how cybersecurity questions can have multiple correct answers.

In this edition of the Threat Source newsletter, William reflects on the 'Make Hazel a Hacker' segment from the Beers with Talos podcast. The piece discusses how cybersecurity is a field where questions can lead to multiple correct answers. It is commentary and career discussion rather than threat intelligence or research.

Cisco Talos·Aug 13, 18:00 UTC · Aug 13, 2026Industry