## Gozney Dome Gen 2 Review: A Showstopping Pizza Oven Worth Every Penny

Some kitchen appliances are purely functional. The Gozney Dome Gen 2 is not one of them. This towering outdoor pizza oven is expensive, heavy, and demands serious commitment — but if exceptional homemade pizza is your goal, nothing else in its class comes close.

---

## The Story Behind Gozney

The Gozney brand has an unlikely origin story. Founder Tom Gozney, a self-described former addict with no formal training in culinary arts, business, or design, built his very first oven simply to entertain friends in his garden. That humble beginning eventually gave birth to the company's debut commercial product — the dual-fuel portable Roccbox, launched in 2016. Five years later, the more ambitious restaurant-inspired Dome arrived, followed by the refined Gen 2 version in the fall of 2023.

The headline upgrade in the Gen 2 is a 40 percent increase in interior volume compared to its predecessor. This was made possible by relocating the burner to a lateral position, freeing up space on the generous 20-by-24-inch cooking deck.

---

## Design and Build Quality

The Dome Gen 2 is unmistakably a statement piece. Its stainless steel body is robust and weather-resistant, and the overall aesthetic makes it a natural centerpiece for any serious outdoor kitchen setup. The oven supports four fuel types — wood, charcoal, propane, and natural gas — giving cooks plenty of flexibility depending on preference and availability.

Despite its imposing size, the oven's natural opening stands at just 5.2 inches tall against an internal height of 8.2 inches. That 59 percent aspect ratio is intentional: it helps trap heat efficiently and keeps the cordierite stone at a consistent cooking temperature between pies. During testing, the stone temperature rebounded quickly after each pizza was removed — often climbing back to its previous level, or even higher, by the time the next pie was ready to go in.

Monitoring temperatures is effortless thanks to a built-in digital display that shows both ambient and stone readings simultaneously. The display is powered by a rechargeable lithium battery, keeping the setup clean and cord-free.

---

## Size, Weight, and Portability

Let's be direct: the Gozney Dome Gen 2 is not a portable oven. The stainless steel body and 30-millimeter cordierite stone combine for a total packaged weight of 150 pounds. Gozney recommends four people for unboxing and installation, though two determined adults can manage with the right equipment. Lifting straps are built into the base to assist with maneuvering.

Unlike compact alternatives such as the Ooni range, the Dome is designed to stay in one place. An optional wheeled stand is available for $500 and adds some mobility, but this oven is best treated as a semi-permanent fixture. A protective cover is also available separately — for the oven alone or the full stand configuration — though like nearly all accessories, it does not come included in the base price.

---

## Cooking Performance

The Dome Gen 2 delivers on its core promise: exceptional, high-temperature pizza. Cooking at serious heat — the kind required for a proper Neapolitan-style pie — means frequent attention. Rotating each pizza roughly every 30 seconds is standard practice, and occasionally repositioning it away from the flame is necessary to prevent the crust edge from scorching.

Renowned baker Ken Forkish, who uses a Gozney Dome himself, recommends a slightly stiffer dough with 65 to 67 percent hydration for high-heat cooking. A firmer dough holds up better under the peel when rotating, reducing the risk of tearing or collapsing in the intense heat.

Gozney markets the Dome as capable of cooking up to two pizzas at once — a claim that sounds appealing but proves impractical in real-world use. Managing two pies simultaneously in a high-heat environment, while constantly rotating and repositioning both, is genuinely difficult. In practice, cooking one pizza at a time produces far better results and a much less stressful experience.

---

## Accessories and Add-On Costs

The Dome Gen 2 reaches its full potential only with a supporting cast of accessories — and costs accumulate quickly. Here is a breakdown of common add-ons:

- **Wheeled stand:** $500
- **Neapolitan arch insert:** included in some bundles
- **Wood fire control kit:** additional cost
- **Turning peel:** $80
- **Protective cover:** varies
- **15 lbs of Gozney kiln-dried hardwood:** included in some packages
- **Pizza cookbook:** $35

When fully equipped with the stand, cover, Neapolitan arch, wood fire control kit, turning peel, and hardwood, the total investment climbs to approximately $3,270. The Ultimate Bundle, which includes the stand, is listed at $3,550 directly from Gozney. The oven alone starts at $2,300.

The included documentation is minimal, given that the oven arrives mostly pre-assembled. Beginners would benefit from exploring Gozney's YouTube channel or investing in the accessory cookbook before their first cook.

---

## Is the Gozney Dome Gen 2 Worth It?

The Gozney Dome Gen 2 is not a practical purchase by conventional standards. It is heavy, expensive, accessory-dependent, and best suited for those who already have some pizza-making experience. But practicality was never really the point.

What the Dome offers is transformation — it turns an ordinary evening in the backyard into a genuine culinary event. The pizza it produces is legitimately outstanding, and the experience of cooking with it is unlike anything a standard kitchen oven can replicate.

Whether that experience justifies a price tag that rivals some people's monthly mortgage payment is a deeply personal calculation. But for outdoor cooking enthusiasts who are already asking the question, the answer is probably already clear.

**Verdict:** Impractical, indulgent, and absolutely worth it — if you are the right buyer.

The Gozney Dome Gen 2 is pricey and heavy, but delivers outstanding homemade pizza. Read our full review of specs, accessories, and real-world performance.

Gozney Dome Gen 2 Review: Best Backyard Pizza Oven?

large_Review--Gozney-Dome-Gen-2.jpg

medium_Review--Gozney-Dome-Gen-2.jpg

small_Review--Gozney-Dome-Gen-2.jpg

thumbnail_Review--Gozney-Dome-Gen-2.jpg

Review--Gozney-Dome-Gen-2.jpg

Gozney Dome Gen 2 Review: A Showstopping Pizza Oven Worth Every Penny

## NASA Is Going Back to the Moon — and Science Will Never Be the Same

For the first time since the Apollo era, human boots are set to touch the lunar surface. NASA's Artemis program is charting a bold course back to Earth's only natural satellite — not just for a brief visit, but to establish a lasting presence that could transform our understanding of the Moon, the solar system, and planetary formation itself.

While Artemis II and III are designed as orbital missions, Artemis IV is slated to return astronauts to the surface. The long-term vision goes far beyond planting flags — it involves sustained operations that will generate a continuous flow of rock samples, environmental data, and scientific observations.

Some of the Moon's most enduring mysteries may finally be within reach. The answers won't come overnight, but over the next 10 to 20 years, researchers believe we could see major breakthroughs. Here are five profound questions that the Artemis program could help answer.

---

## 1. Where Did the Moon Actually Come From?

The most widely accepted explanation for the Moon's origin is the Giant Impact Hypothesis. According to this theory, a Mars-sized body collided with a young, forming Earth approximately 4.5 billion years ago. The resulting debris eventually coalesced and solidified into the Moon we see today.

However, this theory is built largely on computer modeling and a relatively small collection of samples retrieved during the Apollo missions more than half a century ago. Those samples, while groundbreaking for their time, represent a narrow slice of the Moon's geological history.

Artemis missions could change that by delivering fresh, pristine rock samples using modern analytical tools far more sophisticated than anything available in the 1960s and 70s. Scientists are particularly eager to access deep mantle material exposed by ancient craters and to reconstruct the timeline of the early lunar magma ocean — a global sea of molten rock that once covered the entire Moon. This data could either confirm the Giant Impact model or force a significant rethink.

---

## 2. How Much Water Does the Moon Hold — and Can We Use It?

Decades ago, the Moon was considered bone dry. That assumption has since been overturned. Scientists have confirmed the presence of water ice locked inside permanently shadowed craters near the lunar south pole, as well as water molecules trapped within surface minerals.

But knowing water exists and understanding it well enough to use it are two very different things. The critical questions now are about quantity, form, and accessibility.

Artemis crews will directly explore these shadowed polar craters for the first time. Researchers need to know whether ice is loosely mixed into the lunar soil, compressed into solid slabs, or concentrated in purer underground deposits. In the most optimistic scenario, extractable water could be processed into breathable oxygen or rocket propellant, becoming a vital resource for future deep-space missions. In a less favorable outcome, the ice may be so thinly dispersed that large-scale extraction would be technically and economically impractical.

---

## 3. What Lies Beneath the Lunar Surface?

The Moon's interior remains surprisingly poorly understood. Apollo-era seismometers did detect both shallow and deep moonquakes, offering early clues about the subsurface. But that data was limited in scope, collected from a single region, and gathered with instruments that pale in comparison to modern technology.

Existing gravitational and thermal models provide a rough outline of the Moon's internal layers, but nothing approaching a detailed, high-resolution map.

A sustained Artemis presence would allow scientists to deploy seismic networks across multiple locations — including regions never previously studied. A global array of modern seismometers would dramatically sharpen our picture of the lunar interior, helping define the size and composition of the core, the characteristics of the mantle, and how residual heat is distributed throughout the Moon. It won't deliver a perfect image, but it would be the most complete portrait of the lunar interior ever assembled.

---

## 4. Why Is the Far Side of the Moon So Dramatically Different?

The Moon presents a striking paradox. Its near side — the face perpetually turned toward Earth — is relatively smooth, dotted with vast plains of ancient volcanic rock known as maria. Its far side, by contrast, is heavily cratered, rugged, and geologically distinct.

This stark asymmetry remains one of lunar science's most compelling unsolved puzzles. Several competing theories attempt to explain it: differences in early heat distribution, variations in how the primordial magma ocean crystallized, or tidal gravitational influences from Earth. So far, none of these explanations fully accounts for what we observe.

The Artemis program opens the possibility of the first crewed expeditions to the lunar far side. Samples collected there could be dated and analyzed for their chemical composition and thermal history — precisely the kind of evidence needed to test existing hypotheses and potentially rewrite the story of the Moon's earliest geological evolution.

---

## 5. Did the Moon Once Have a Powerful Magnetic Field?

One of the most unexpected discoveries of the Apollo program was that many lunar rocks are magnetized — a sign that the Moon once possessed a robust internal magnetic dynamo, similar in concept to the one that generates Earth's magnetic field today.

The problem is that based on everything we know about the Moon's size and internal temperature, it seems far too small and too cold to have sustained such a field for any significant length of time. Yet the magnetic signatures preserved in those ancient rocks tell a different story.

The renewed era of lunar exploration may finally resolve this contradiction. Fresh samples collected from geologically diverse regions, combined with precise magnetic field measurements across the surface, will allow scientists to reconstruct when the lunar dynamo was active, how powerful it was, and why it eventually died. The answers could have broad implications for how we understand the evolution of magnetic fields on rocky planets throughout the solar system.

---

## The Moon as a Gateway, Not a Destination

What makes the Artemis program fundamentally different from Apollo is its underlying philosophy. The Moon is no longer the finish line — it's the starting point for a new era of human and scientific exploration.

The discoveries made over the coming decades will do more than satisfy lunar curiosity. They will reshape our understanding of how rocky worlds form, how planetary interiors evolve, and how life-sustaining resources might be found and used beyond Earth.

Humanity may not walk away with every answer. But for the first time in more than fifty years, we will be asking the right questions, in the right place, with the tools — and the ambition — to finally get them answered.

NASA's Artemis program is returning humans to the Moon. Discover 5 major lunar mysteries that scientists hope to finally solve in the next two decades.

5 Moon Mysteries NASA's Artemis Missions Could Solve

large_GettyImages-517292492.jpg

medium_GettyImages-517292492.jpg

small_GettyImages-517292492.jpg

thumbnail_GettyImages-517292492.jpg

GettyImages-517292492.jpg

5 Lunar Secrets NASA's Artemis Program Could Finally Unlock

## Xiaomi 17 Ultra: A Serious Camera Phone That's Also a Lot of Fun

When it comes to premium camera smartphones, most conversations in the United States revolve around the iPhone, Samsung Galaxy, and more recently, Google Pixel. However, consumers across Asia and Europe enjoy a much broader selection, with manufacturers like Xiaomi, Oppo, and Vivo continuously pushing the boundaries of mobile photography. The Xiaomi 17 Ultra is the latest example of this ambition — and it's a compelling one.

## Design and Display

The Xiaomi 17 Ultra features a large, bold camera module on its rear, which immediately signals its photographic intentions. Up front, users are greeted by a generous 6.9-inch AMOLED display running at a resolution of 1200 x 2608 pixels with a smooth 120Hz refresh rate. With a peak brightness of 3,500 nits, the screen holds up exceptionally well under direct sunlight and delivers a vivid, immersive experience for video content.

## Performance and Battery Life

Under the hood, the device is powered by Qualcomm's latest Snapdragon 8 Gen 5 processor — the chip of choice for flagship smartphones in 2025. It comes equipped with 16GB of RAM and offers two storage configurations: 512GB and 1TB.

One of the standout aspects of the Xiaomi 17 Ultra is its 6,000 mAh battery, built using Silicon/Carbon-Ion technology. Despite its considerable capacity, the phone remains lighter than Apple's iPhone Pro Max — a noteworthy engineering achievement. On moderate usage, the battery can comfortably last two full days, and standby performance is equally impressive.

Charging is handled via 90W wired fast charging, compatible with Xiaomi's included charger as well as any PD 3.0 or PPS-based third-party chargers. Wireless charging is also supported at up to 50W using Xiaomi's proprietary charger.

## Camera System: Leica-Powered and Versatile

The camera system is undoubtedly the centerpiece of the Xiaomi 17 Ultra, developed in partnership with legendary German optics brand Leica.

### Main Camera

The primary shooter uses a large 1-inch type 50-megapixel sensor with an f/1.67 aperture, designed to capture as much light as possible. The results are sharp, well-balanced images with accurate colors across a wide range of lighting conditions. Like the iPhone Pro Max, this camera also supports equivalent focal length switching at 23mm, 28mm, and 35mm.

### Telephoto Camera

Perhaps the most unique offering in this camera array is the 200-megapixel telephoto lens. Rather than offering fixed zoom stops like 2x or 4x, it features continuous optical zoom ranging from 3.2x to 4.3x. This might sound like a narrow range on paper, but in practice it offers exceptional flexibility when photographing pets, isolating subjects, or fine-tuning compositions. Users can quickly jump to 75mm, 85mm, 90mm, and 100mm focal lengths through the camera interface, though accessing other focal lengths in between requires manual adjustment via the zoom dial.

### Ultrawide and Selfie Cameras

The 50-megapixel ultrawide lens with an f/2.2 aperture rounds out the rear camera setup, also doubling as a capable macro shooter. While it performs admirably in most situations, it does trail slightly behind the main and telephoto cameras in fine detail. A 50-megapixel front-facing camera handles selfies — just be sure to disable the beauty filters for more natural results.

### Filters and Color Profiles

The camera app provides an impressive array of creative options. By default, it applies Leica's Authentic color science, but users can switch to the punchier Leica Vibrant mode with a single tap. Additionally, there's a rich selection of filters including positive and negative film looks, Leica-specific presets such as vivid, natural, black & white, sepia, and blue, as well as Xiaomi's own styles like cinematic, monsoon, teal mist, and scarlet.

## Photography Kits: Elevating the Shooting Experience

Xiaomi has developed two physical accessories designed to enhance the photography experience — the **17 Ultra Photography Kit** and the **17 Ultra Photography Kit Pro**.

### Photography Kit (Base)

The standard kit functions as a protective case that attaches directly to the phone. It connects via Bluetooth and includes a two-stage shutter button for autofocus and image capture, along with a dedicated video recording button. The case charges its internal battery via contact charging.

### Photography Kit Pro

The Pro version elevates the experience further by adding a camera-grip-style controller that connects through USB-C. It houses a 2,000 mAh battery and provides a comfortable one-handed grip. Controls include a dedicated shutter button, a video recording button, and a customizable dial that can be mapped to exposure, ISO, shutter speed, white balance, or filter selection. The dial can also be used to scroll through your photo gallery. Additionally, the Kit Pro includes a ring adapter compatible with standard 67mm camera filters.

During real-world testing on city streets, the Kit Pro proved genuinely useful — making it easy to shoot with one hand while maintaining full creative control. Having tactile hardware controls, including a physical zoom dial, added an enjoyable, camera-like feel to the entire experience.

Both kits also unlock a dedicated **Fastshot** mode within the camera app, which surfaces simplified, street photography–optimized controls for quick captures on the go.

## Competition and Availability

The Xiaomi 17 Ultra enters a competitive global landscape. Upcoming rivals include the Vivo X300 Ultra — which also features a photography kit complete with a 2.35x telephoto extender — and the Oppo Find X9. However, Xiaomi's earlier global launch gives it a head start in building momentum among photography enthusiasts.

The Xiaomi 17 Ultra is priced starting at **€1,499** in Europe. The standard Photography Kit is available for **€99.99**, while the Photography Kit Pro retails at **€199.99**.

Xiaomi 17 Ultra review covering its Leica-tuned cameras, Snapdragon 8 Gen 5 performance, battery life, and unique Photography Kit accessories.

Xiaomi 17 Ultra Review: Camera, Specs & Photography Kits

large_Xiaomi-17-Ultra.jpg

medium_Xiaomi-17-Ultra.jpg

small_Xiaomi-17-Ultra.jpg

thumbnail_Xiaomi-17-Ultra.jpg

Xiaomi-17-Ultra.jpg

Xiaomi 17 Ultra Review: A Feature-Packed Camera Phone With Fun Photography Add-Ons

## Y Combinator Severs Relationship With Troubled Compliance Startup Delve

The wave of controversy surrounding compliance startup Delve has claimed another significant casualty — its relationship with one of Silicon Valley's most prestigious startup accelerators, Y Combinator.

Delve has quietly disappeared from YC's official portfolio directory, and its dedicated page on the YC website has been taken down entirely. Confirming the split, Delve's Chief Operating Officer Selin Kocalar took to X to announce that the two organizations have officially gone their separate ways.

"I still remember the day we took our YC interview at MIT," Kocalar wrote in her post. "We're so grateful to the community and every founder friend we've made."

## A Growing List of Investors Backing Away

Y Combinator is not the only major backer creating distance between itself and Delve. Insight Partners also appeared to scrub references to its investment in the company from its online presence, though its primary blog post was eventually reinstated. The pattern of institutional retreat signals deepening concern among those who once championed the startup.

## The Allegations Against Delve

At the heart of the controversy are serious accusations that Delve misled its clients. Anonymous claims suggest the company falsely assured customers they were meeting privacy and security compliance standards, while allegedly bypassing critical requirements and automatically generating reports through what critics describe as "certification mills that rubber stamp reports."

The allegations first surfaced in an anonymous Substack publication by a writer calling themselves "DeepDelver," who identified as a former Delve customer. According to DeepDelver, suspicions arose after receiving leaked information about the company's client base.

Subsequent posts from DeepDelver included what were claimed to be internal Slack messages and video content from within the company. The anonymous writer also accused Delve of presenting an open-source tool as its own proprietary product, without crediting the original developer or entering any formal agreement. Adding further fuel to the fire, an independent security researcher reportedly gained access to sensitive Delve data, raising additional red flags about the company's internal security practices.

Delve also became entangled in a separate but related controversy when malware was discovered within an open-source project developed by Delve customer LiteLLM.

## Delve Fights Back Against Anonymous Claims

In their most recent official blog post, Kocalar and CEO Karun Kaushik mounted a vigorous defense against what they characterized as coordinated anonymous attacks. The pair announced they had engaged a cybersecurity firm to investigate the matter and asserted that available evidence points to a deliberate malicious attack rather than legitimate whistleblowing.

"It appears that an attacker purchased Delve under false pretenses, maliciously exfiltrated data, including Delve's internal company data, and used it to launch a coordinated smear campaign against us," the executives stated. They also shared a screenshot they claim shows the alleged attacker transferring the company's audit tracking spreadsheet via file.io.

Beyond pointing the finger at an external bad actor, Delve also pushed back on the substance of DeepDelver's accusations, describing them as "a mix of fabricated claims, cherry-picked screenshots, and data taken out of context." The company specifically highlighted that even DeepDelver acknowledged Delve's AI successfully automated 70% of a security questionnaire — a point Delve views as evidence of its platform's genuine capabilities.

Regarding the open-source controversy, Delve explained that it built upon an Apache 2.0 licensed repository, which legally permits commercial use, and stated that the company made substantial modifications to tailor the tool for compliance applications.

## Steps to Rebuild Customer Trust

Despite its defensive posture, Delve acknowledged the need to rebuild confidence among its user base. The company outlined several corrective measures, including removing auditing firms from its network that fail to meet its quality benchmarks, offering free re-audits and penetration testing to all active customers, and making explicit that its document templates — such as those for board meeting notes — are intended as starting points rather than finished compliance materials.

In a separate post on X, CEO Kaushik offered a more candid admission, stating: "We grew too fast and fell short of our own standard. To our customers, we deeply apologize for the inconveniences caused."

As the situation continues to unfold, TechCrunch has reached out to both Y Combinator and DeepDelver for comment on Delve's latest statements. Responses, if received, are expected to shed further light on one of the more dramatic startup controversies of recent months.

Y Combinator has cut ties with compliance startup Delve following mounting allegations of client deception and serious security concerns. Full story here.

Y Combinator Parts Ways With Startup Delve Amid Scandal

large_IMG_1542.jpeg

medium_IMG_1542.jpeg

small_IMG_1542.jpeg

thumbnail_IMG_1542.jpeg

IMG_1542.jpeg

Y Combinator Cuts Ties With Controversy-Plagued Startup Delve

## How a Social Media Hack Laid Bare Syria's Digital Security Crisis

What initially appeared to be random online chaos turned out to be something far more alarming. When Syrian government accounts on X suddenly began posting pro-Israel slogans, sharing explicit content, and adopting the names of Israeli officials in early March, observers quickly realized this was no mere prank — it was a window into a state with critically vulnerable digital infrastructure.

Among the compromised accounts were those tied to the presidency's General Secretariat, the Central Bank, and several government ministries. The infiltration was brief but damaging, raising immediate questions about how well-protected Syria's official digital presence actually is.

The Ministry of Communications and Information Technology responded by announcing emergency measures to reclaim the accounts and tighten security protocols. However, the more uncomfortable question lingered long after the accounts were restored: just how secure is Syria's digital foundation?

## More Than a Political Stunt

On the surface, the timing of the breach — pro-Israel content appearing on verified Syrian government profiles during a period of regional tension — suggested a politically motivated attack. Yet cybersecurity analysts were quick to look past the optics.

"We still do not know exactly what happened. Whether the accounts were directly hacked or accessed through weak or reused credentials, the conclusion is much the same: very poor digital security practices," said Noura Aljizawi, a senior researcher at the Citizen Lab, an organization dedicated to monitoring digital threats against civil society.

No group claimed responsibility for the breach, and Syrian officials offered no clarity on whether internal systems beyond social media were affected. The absence of answers only deepened concerns.

## A Single Point of Failure Across Multiple Institutions

One of the most telling signs of systemic weakness was the pattern of the attack itself. Several government accounts displayed identical messaging almost simultaneously — a strong indicator that shared login credentials or centralized account management was in place.

### Shared Credentials, Shared Risk

"The fact that several official X accounts seemed to fall in quick succession suggested some form of centralized control, possibly with the same credentials used across multiple accounts," explained Muhannad Abo Hajia, a cybersecurity expert at the Damascus-based organization Sanad. "That kind of setup is not inherently wrong, but only if proper safeguards are in place."

Experts point to a predictable cluster of vulnerabilities that likely enabled the breach: password reuse across platforms, successful phishing attacks, compromised account recovery channels, or a complete absence of multifactor authentication (MFA). Any one of these weaknesses, left unaddressed, can hand a bad actor control over multiple high-profile accounts at once.

"Account takeovers of this kind are common enough globally and usually result from familiar vulnerabilities: phishing, password reuse, compromised recovery emails, weak credentials, or the absence of MFA," noted Rinad Bouhadir, a cybersecurity engineer monitoring the region's threat landscape.

## Inherited Dysfunction and Structural Neglect

Beyond the technical failures, analysts argue the incident reflects a deeper institutional problem — one rooted in years of neglect and a lack of urgency around digital security.

"The current authorities inherited a near-nonexistent cybersecurity system and have yet to treat repairing it as a real priority," said Dlshad Othman, a Syrian cybersecurity specialist.

Othman believes the breach likely originated from either a centralized team managing multiple official accounts or a shared third-party tool deployed across ministries. Both approaches create a dangerous single point of failure — one compromised password or tool potentially unlocking access to an entire government's online presence.

### The Real-World Consequences of a Fake Post

The stakes of this vulnerability extend well beyond embarrassment. A verified government account can become a powerful weapon for disinformation, especially during periods of regional instability. A falsified emergency announcement or a fabricated diplomatic statement published through an official channel could trigger panic, international misreporting, or even real-world escalation — all before a correction can be issued.

Abo Hajia also highlighted a deeper cultural issue: "Syrian government organizations and the general public lack awareness of basic cybersecurity fundamentals. We wait to get hacked before taking precautions and understanding their importance."

Even fundamental protections like two-factor authentication remain inconsistently applied across Syrian government platforms, according to Aljizawi.

## A Modernization Narrative That Doesn't Hold Up

In recent years, Syria has promoted an image of digital advancement — rolling out e-government platforms and speaking the language of technological reform. But cybersecurity analysts say these appearances frequently conceal fragile, outdated systems operating well below international standards.

"More troubling still are the attacks the public never hears about," Othman warned. "Syria has repeatedly been targeted by serious cyber operations, including attacks on its telecommunications infrastructure and top-level domain, by both regional and international state-backed actors."

What surfaced on X, in other words, may represent only a small, visible fraction of an ongoing and much larger vulnerability.

Mohammad Mostafa, a digital expert at Sync, summed up the root causes plainly: "This happened because of basic errors — it could have been the result of a targeted phishing attempt against a communications staffer, password reuse across multiple government profiles, or a compromised recovery email or phone number tied to several accounts at once. None of those scenarios requires elite capability. They require basic lapses."

## What Real Digital Security Looks Like

Recovering hacked accounts is the easy part. Fixing the underlying vulnerabilities is far harder — and far more important. Analysts argue that Syria, like many nations with underdeveloped cyber infrastructure, must begin treating digital security as a pillar of national defense rather than an afterthought.

That means investing in staff training, enforcing institutional security standards, mandating MFA across all official platforms, and building accountability structures that don't wait for a breach to prompt action.

Until those investments are made and those structures are built, Syria's confident digital presence will remain exactly what experts call it: a thin facade — one successful phishing email away from going completely silent.

Syrian government accounts on X were hacked in March, revealing critical cybersecurity failures. Experts warn of systemic vulnerabilities behind the breach.

Syria's Government Hack Exposes Deep Cybersecurity Flaws

large_SyriaDigital_Lead%20copy.jpg

medium_SyriaDigital_Lead%20copy.jpg

small_SyriaDigital_Lead%20copy.jpg

thumbnail_SyriaDigital_Lead%20copy.jpg

SyriaDigital_Lead%20copy.jpg

Syria's Government Hack Reveals Critical Cybersecurity Vulnerabilities

## Cybersecurity Roundup: Malware, Breaches, and Billion-Dollar Crypto Heists

This week in cybersecurity delivered no shortage of alarming developments — from government data exposed through basic internet searches to nation-state hackers targeting federal surveillance systems. Here's a breakdown of the most significant stories making waves across the security world.

---

## Border Protection Data Found on a Flashcard App

In a startling discovery, WIRED revealed that sensitive facility information belonging to US Customs and Border Protection was publicly accessible through simple Google searches. The data — including gate access codes to CBP facilities — had been uploaded by users to Quizlet, a popular online study platform. The incident underscores the growing risk of employees inadvertently exposing classified or sensitive operational details through everyday digital tools.

---

## Apple Issues Rare Patches for Older iOS Amid DarkSword Threat

Apple made an unusual decision this week, releasing security patches for iOS 18 — an older version of its operating system — to shield users who have not yet upgraded to iOS 26. The patches target DarkSword, a dangerous exploit first identified in March that enables attackers to silently compromise iPhones simply by luring users to a malicious website. After initially pushing users to upgrade to the latest iOS version, Apple reversed course and issued the backported fix as DarkSword infections continued to spread.

---

## US-Israel Conflict With Iran Threatens Tech Giants

Now entering its second month, the US-Israel military conflict with Iran is generating serious cybersecurity concerns for major American corporations. Iran has threatened to launch cyberattacks against more than a dozen US companies — including Apple, Google, and Microsoft — which maintain offices and data infrastructure throughout the Gulf region. The conflict continues to disrupt global trade, with shipping crews still stranded in the strategically critical Strait of Hormuz.

---

## Hackers Weaponize Leaked Claude Code With Hidden Malware

Earlier this week, a security researcher discovered that Anthropic had accidentally made the source code for Claude Code — its widely used AI-driven coding assistant — publicly accessible. The leak quickly spread across GitHub as developers rushed to repost and archive the repositories. However, cybersecurity outlet BleepingComputer warned that not all of those uploads are safe: malicious actors have embedded infostealer malware inside some of the copied repositories, turning public curiosity into a potential attack vector.

Anthropicresponded swiftly, issuing copyright takedown notices targeting thousands of GitHub repositories. Though the company initially flagged more than 8,000 repos for removal, it later narrowed its legal action to approximately 96 copies and derivative works, according to The Wall Street Journal.

### Not the First Claude Code Attack

This incident follows a similar campaign from March, when 404 Media reported that fraudulent Google-sponsored ads were directing users to fake Claude Code installation pages. Visitors were tricked into running terminal commands that secretly downloaded malware onto their systems — exploiting the fact that many Claude Code users are unfamiliar with command-line interfaces.

---

## FBI Declares Surveillance System Hack a National Security Incident

The FBI has officially designated a recent breach of one of its wiretap and surveillance collection systems as a "major incident" under the Federal Information Security Modernization Act (FISMA) — a classification reserved for breaches with serious national security implications. The declaration, reported to Congress this week, is reportedly the first such self-designation by the bureau since at least 2020.

According to Politico, senior Trump administration officials believe China is responsible for the intrusion. The FBI detected suspicious network activity in February, and a March 4 notification to Congress confirmed that the compromised systems — while unclassified — contained sensitive returns from legal processes, including phone and internet metadata collected under court orders and personal information related to active FBI investigations.

### A Troubling Pattern of FBI Breaches

The latest hack fits into a broader and deeply concerning pattern. In 2023, a foreign actor accessed files tied to the FBI's Epstein investigation through an exposed forensic server. Last month, Iranian-linked hackers penetrated FBI Director Kash Patel's personal email account. And the Salt Typhoon campaign — attributed to Chinese hackers and uncovered in 2024 — compromised at least eight US telecom and internet service providers, ultimately affecting more than 200 companies across 80 countries.

---

## College Student Helps Dismantle Record-Breaking Botnet Network

Two weeks ago, US law enforcement announced the successful dismantling of four interconnected botnets — Aisuru, Kimwolf, JackSkid, and Mossad — responsible for some of the largest distributed denial-of-service (DDoS) attacks ever recorded. These botnets hijacked thousands of internet-of-things devices to flood targets with overwhelming volumes of junk traffic.

The Wall Street Journal this week spotlighted an unexpected hero in the investigation: Benjamin Brundage, a 22-year-old student at the Rochester Institute of Technology. Brundage spent months obsessively tracking the Kimwolf botnet, infiltrating Discord communities, and gathering technical intelligence that he ultimately handed over to law enforcement. His work proved instrumental in the operation's success and highlights the growing role that independent security researchers play in combating large-scale cybercrime.

---

## North Korean Hackers Steal $280 Million From Crypto Platform Drift

The decentralized finance platform Drift has confirmed that $280 million was stolen in a cybersecurity breach, with blockchain analytics firm Elliptic pointing to North Korean state-sponsored hackers as the likely culprits. Investigators cited distinctive laundering patterns and network-level indicators consistent with previous North Korean operations.

The theft represents the vast majority of the estimated $300 million in cryptocurrency stolen by North Korean hackers so far in 2026. While massive, the heist still falls short of the $2 billion the regime's cyber operatives managed to steal throughout all of last year — suggesting the campaign is far from its peak.

---

## Cisco Source Code Compromised in Supply Chain Attack

Networking giant Cisco became the latest high-profile victim of a software supply chain attack orchestrated by the hacker group TeamPCP. According to BleepingComputer, the attackers compromised the vulnerability scanning tool Trivy by injecting it with malicious code, then used the resulting access to steal developer credentials and breach Cisco's internal development environments — making off with portions of the company's source code and that of some of its clients.

The Cisco incident is part of a broader campaign by TeamPCP, which has also infiltrated AI software platform LiteLLM and the developer security tool CheckMarx using similar methods. The group's approach — embedding malware into widely trusted software tools — makes detection difficult and amplifies the potential damage across entire developer ecosystems.

---

## Stay Vigilant

From leaked AI source code turned into malware distribution channels, to state-sponsored hackers targeting federal law enforcement infrastructure, the cybersecurity threat landscape continues to evolve at a rapid pace. Users and organizations alike are urged to verify the source of any software before downloading, keep operating systems fully updated, and remain alert to suspicious digital activity.

Hackers embed malware in leaked Claude Code repos, the FBI declares a surveillance breach a national security incident, and North Korean hackers steal $280M.

Claude Code Leak, FBI Hack, and Major Cyber Threats

large_security_roundup_claude_GettyImages-2181575875.jpg

medium_security_roundup_claude_GettyImages-2181575875.jpg

small_security_roundup_claude_GettyImages-2181575875.jpg

thumbnail_security_roundup_claude_GettyImages-2181575875.jpg

security_roundup_claude_GettyImages-2181575875.jpg

Malware-Laced Claude Code Repos and a Wave of Major Cybersecurity Incidents

## The Private Markets Are on Fire — and Three Companies Are Writing the Story

If you want to understand what's happening in today's private securities market, you need to look at three names: Anthropic, OpenAI, and SpaceX. According to Glen Anderson, president of Rainmaker Securities, the secondary market for private company shares has never been this electrifying — and the dynamics at play could redefine how investors position themselves in the months ahead.

Anderson has been operating in this space since 2010, when the community of institutional investors focused on late-stage private companies was small enough to count on your fingers. Fast forward to today, and that number has swelled into the thousands. As head of an investment bank that facilitates trades across roughly 1,000 private stocks, Anderson has an unobstructed view of how sentiment is shifting — and right now, he says, the narrative belongs to Anthropic.

## Anthropic: The Stock Nobody Wants to Sell

Demand for Anthropic shares has reached a level that Anderson describes simply as nearly impossible to satisfy. The challenge isn't finding buyers — it's finding sellers.

"The hardest stock to source in our marketplace is Anthropic," Anderson told TechCrunch. "There's just no sellers."

This mirrors reporting from Bloomberg, which noted that buyers had signaled as much as $2 billion in ready capital looking for Anthropic exposure. Meanwhile, approximately $600 million worth of OpenAI shares sitting on the market have struggled to find takers — a telling contrast.

### The Government Standoff That Became a Branding Moment

One unexpected catalyst for Anthropic's surge in popularity was its very public confrontation with the Department of Defense. What initially appeared to be a liability for the company ended up working in its favor. Users rallied around Anthropic, embracing it as a principled challenger standing up to government overreach.

"The app got more popular, people rallied around the company as kind of a hero, taking on big government," Anderson explained. "I think it amplified the story and made it even more differentiated from OpenAI."

That differentiation is increasingly important to investors who, for years, operated under the assumption that betting on every major AI player was the safest strategy. The market is beginning to draw distinctions — and Anthropic is emerging as the preferred pick, at least for now.

## OpenAI: Still Standing, But Losing Its Luster

Anderson is careful not to write OpenAI off entirely. Many institutional investors still want a stake in both companies, and the long-term race to AI dominance is far from settled.

"I wouldn't say it's a one-or-the-other conversation," he noted.

However, the enthusiasm that once surrounded OpenAI has dimmed noticeably. "It's not nearly as vibrant a market as Anthropic right now," Anderson acknowledged.

On the valuation front, secondary market trading suggests OpenAI is being priced as if it were worth around $765 billion — a meaningful discount compared to its most recent primary-round valuation of $852 billion. OpenAI has responded by attempting to tighten its grip on secondary trading, warning investors to be cautious of unauthorized brokers and establishing official channels through major banks to facilitate transactions without fees.

In a notable development, Goldman Sachs and Morgan Stanley have reportedly begun offering OpenAI shares to wealthy clients at no carry charge. However, Goldman is applying its standard carry fees — typically between 15% and 20% of profits — for clients seeking access to Anthropic shares, suggesting the bank sees more premium value in Anthropic's equity.

## SpaceX: The Outlier That Never Stumbled

While Anthropic and OpenAI navigate shifting investor sentiment, SpaceX occupies an entirely different stratosphere. Anderson points out that the aerospace and satellite giant is one of the rare companies in Rainmaker's portfolio that never suffered through the brutal correction that hammered much of the private market between 2022 and 2024 — a period when many private company valuations plummeted 60% to 70% from their highs.

SpaceX, by contrast, has maintained a trajectory that Anderson describes as "pretty much consistently up and to the right."

He attributes much of this to disciplined financial management — specifically, the company's refusal to squeeze maximum value out of every funding round or tender offer.

"A lot of companies will fall for the temptation to maximize the price of their stock in every round," Anderson said. "The problem is that that doesn't leave any room for error."

SpaceX chose restraint over greed, and the rewards for early investors have been extraordinary. The company was valued at around $12 billion in 2015 when Google and Fidelity jointly pumped $1 billion into it. Today, with SpaceX valued at more than $1 trillion, those early investors are sitting on gains exceeding 100x their original investment.

## The IPO That Could Change Everything

SpaceX's confidential IPO filing this week sent shockwaves through the secondary market almost immediately. Reports suggest Elon Musk is targeting a raise of between $50 billion and $75 billion — potentially as early as June — which would make it one of the largest stock market debuts in history. For context, only Saudi Aramco's 2019 IPO, which valued the energy giant at $1.7 trillion, has come anywhere close in scale.

The mere rumor of the filing has already shifted secondary market dynamics. Anderson noted a sharp spike in buy-side interest following the news, but supply is quickly drying up — a natural consequence of shareholders choosing to hold their positions in anticipation of the looming liquidity event.

### A Warning for Anthropic and OpenAI

Here's where the story takes a more cautionary turn for the AI companies. Both Anthropic and OpenAI have signaled that they are exploring public offerings and could potentially move before the year is out. But SpaceX, by going first, has effectively claimed the pole position — and whoever comes next will face a tougher road.

"SpaceX is going to soak up a lot of liquidity," Anderson said bluntly. "There's only so much money out there allocated to IPOs."

The first company through the IPO gate gets to set the terms and capture the most eager capital. Those who follow must contend with more scrutiny, potentially diminished investor appetite, and the shadow of whatever valuation benchmark SpaceX establishes. It's a dynamic that has played out across virtually every market sector, and the AI giants — despite the enormous attention surrounding them — are not immune.

Timing, it turns out, may be just as critical as technology. Go too early and you risk being the one testing the market's patience. Wait too long, and the biggest institutional checks may already be committed elsewhere.

Anthropic dominates private stock demand, OpenAI loses momentum, and SpaceX's massive IPO filing threatens to reshape the investment landscape for all.

Anthropic Leads Private Markets as SpaceX IPO Looms Large

large_GettyImages-2148589533.jpg

medium_GettyImages-2148589533.jpg

small_GettyImages-2148589533.jpg

thumbnail_GettyImages-2148589533.jpg

GettyImages-2148589533.jpg

Anthropic Dominates Private Markets While SpaceX's IPO Threatens to Steal the Spotlight

## Aiper IrriSense 2 Review: A Smart Sprinkler That Almost Gets It Right

Modern lawn care has come a long way from the simple back-and-forth oscillating sprinklers that once dominated suburban yards. Today's smart irrigation solutions offer scheduling, environmental awareness, and precise water delivery — and you don't necessarily need an expensive underground system to access these benefits. The Aiper IrriSense 2 is a prime example of how sophisticated a standard hose-connected sprinkler can be. After putting it through its paces, the verdict is this: impressive technology, but with some rough edges worth knowing about before you buy.

---

## First Impressions: Bigger Than You'd Expect

If you're picturing a compact little sprinkler head, prepare yourself. The IrriSense 2 is a substantial piece of hardware — a thick cylindrical unit standing roughly two feet tall and tipping the scales at more than 11 pounds. It connects to a standard garden hose and requires a nearby electrical outlet to function. A single button on top handles Bluetooth pairing with your smartphone and can trigger manual watering sessions, though the majority of the system's features are managed through Aiper's dedicated mobile app. For remote access and scheduling, the device also supports 2.4-GHz Wi-Fi connectivity.

One practical consideration worth noting: the unit's size and weight make it somewhat awkward to move around. The absence of even a basic handle feels like a missed opportunity in the design process.

---

## Placement and Setup

Positioning accuracy is central to how the IrriSense 2 operates. The package includes ground stakes for permanent installation, which makes sense for users who plan to leave the unit in one spot. For those who prefer to store the sprinkler away between uses, Aiper includes a plastic positioning marker — resembling a football tee — that can be pushed into the ground. This marker ensures the sprinkler lands in precisely the same spot every time it's deployed, which is essential for the system's mapping features to work correctly.

The initial setup process involves onboarding through the app followed by several firmware updates before the device is ready for use. Once that's out of the way, the real functionality begins.

---

## Smart Watering Modes

One of the IrriSense 2's strongest selling points is the variety of automated watering modes it offers. Rather than simply blasting water on a timer, the system lets you define how you want your yard irrigated based on the shape and layout of your outdoor space.

### Point Mode
Designed for targeted watering of individual plants, trees, or shrubs that need periodic hydration without soaking the surrounding area.

### Line Mode
Follows a straight path, making it well-suited for hedges, garden borders, and flowerbeds that run along a defined edge.

### Area Mode
The most versatile and commonly used setting, Area mode distributes water across a two-dimensional zone — essentially your lawn as a whole. This is the mode most homeowners will rely on, and it's also the most complex to configure.

In addition to these modes, the app is smart enough to skip scheduled watering sessions when conditions don't call for it — such as after rainfall or during high winds — which helps conserve water and prevents overwatering.

---

## Mapping Your Yard

Setting up Area mode involves using the app to map out the boundaries of the space you want to water. You can watch the map take shape in real time as you define your coverage zone, which is a genuinely intuitive experience — for most of the process, anyway. The final stretch of completing the 360-degree boundary loop proved frustratingly difficult, and a small gap in the mapped area persisted despite repeated attempts to close it.

Another distinctive feature is how the system measures watering output. Instead of setting a run time, you specify a target water depth in inches — essentially telling the system how much moisture you want delivered to the soil. While verifying this figure with precision is challenging, the estimates appeared reasonably accurate during real-world testing.

---

## How the Watering Actually Works

During an Area mode session, the IrriSense 2 sprays water in a single directional jet, rotating clockwise through its full mapped range before reversing and repeating the cycle counter-clockwise. This back-and-forth pattern continues until the target water depth has been reached.

Despite being marketed as a gentle mist, the output functions more like a pressurized jet — especially when reaching the outer edges of a large coverage area. This characteristic means the perimeter of the mapped zone tends to receive more water than the central portion, which is a known limitation of rotary-style sprinklers in general.

To compensate, the IrriSense 2 gradually reduces water pressure with each successive rotation pass. By the final cycles, the spray barely extends beyond a few inches from the unit itself. It's a thoughtful approach, though it does introduce one important caveat: if you cancel a run before it finishes, only the outer areas of your yard will have been properly watered.

---

## Pros and Cons at a Glance

**What Works Well:**
- Multiple intelligent watering modes for different yard configurations
- App-based scheduling with weather-aware skip logic
- More precise water distribution than traditional sprinklers
- Real-time yard mapping via the app

**Where It Falls Short:**
- Larger yards may not achieve full coverage, especially on shorter watering runs
- Variable water pressure can lead to minor overwatering in spots
- The hardware is bulky and lacks a handle, making repositioning inconvenient
- Closing the boundary map completely during setup can be frustratingly tricky

---

## Final Verdict

The Aiper IrriSense 2 represents a genuinely ambitious step forward for hose-connected smart sprinklers. Its mapping capabilities, intelligent scheduling, and water-depth targeting set it apart from basic alternatives. That said, the hardware's bulk, some inconsistencies in water distribution, and a few software quirks prevent it from being a flawless solution. For homeowners with mid-sized yards who want smarter irrigation without committing to an in-ground system, it's a strong contender — just go in with realistic expectations.

Is the Aiper IrriSense 2 worth it? Our in-depth review covers smart features, watering modes, coverage accuracy, and key drawbacks of this hose-connected sprink

Aiper IrriSense 2 Smart Sprinkler Review: Pros & Cons

large_Review--Aiper-IrriSense-2-Smart-Irrigation-System.jpg

medium_Review--Aiper-IrriSense-2-Smart-Irrigation-System.jpg

small_Review--Aiper-IrriSense-2-Smart-Irrigation-System.jpg

thumbnail_Review--Aiper-IrriSense-2-Smart-Irrigation-System.jpg

Review--Aiper-IrriSense-2-Smart-Irrigation-System.jpg

Aiper IrriSense 2 Review: A Smart Sprinkler That Almost Gets It Right

## GSA Launches Major Hiring Push Following DOGE-Era Workforce Reductions

The General Services Administration (GSA), the federal body responsible for managing government real estate and IT infrastructure, is moving to fill approximately 400 vacant positions within its Public Buildings Service (PBS) division. The development marks a significant reversal following the deep staffing cuts the agency endured under the Department of Government Efficiency (DOGE) initiative.

An internal email obtained by WIRED, sent by PBS Chief of Staff Donna Dix to agency employees on Monday, confirmed the plans. "We're thrilled to announce that the GSA Strategic Hiring Committee has approved the PBS staffing plan designed to address our workforce needs and strengthen our teams," Dix wrote. The email further identified the core focus areas for recruitment as facilities management, acquisition, and project management. GSA did not respond to media requests for comment.

## The Fallout From DOGE Cuts

The road to this hiring announcement has been a turbulent one. In March 2025, PBS shed hundreds of employees as part of sweeping DOGE-mandated reductions. Around the same time, the agency received directives to offload more than 500 federally owned buildings — properties that housed various government agencies, U.S. Senate offices, and even a sensitive facility connected to the CIA in Northern Virginia. Those aggressive divestiture plans were later scaled back considerably.

In the months that followed, GSA and PBS shifted focus toward supporting Immigration and Customs Enforcement (ICE), assisting the agency in leasing office space across the country as part of a broad national expansion effort, according to earlier WIRED reporting.

## A Pattern of Reversals

This is not the first time PBS has taken steps to walk back its workforce reductions. In September, hundreds of employees who had previously accepted deferred resignation offers were invited to return to their positions, effectively turning a prolonged absence into an extended paid leave.

Stephen Ehikian, who served as GSA's acting administrator and oversaw the bulk of the layoffs, departed the agency in September 2025. By May of that year, a reported 2,100 GSA workers had accepted deferred resignations while an additional 1,000 were let go outright. Reflecting on the period, Ehikian told Nextgov, "The opportunity we had was to restructure [GSA], slim it down, and now the team's in a phenomenal position to build it back the way they want."

It is worth noting that Ehikian's spouse previously held a position at X, the social media platform owned by Elon Musk, who played a central role in the DOGE initiative.

## Ehikian's Post-Government Chapter

Since leaving federal service, Ehikian has transitioned into the private sector, taking the helm at enterprise artificial intelligence company C3 AI. The firm has faced its own challenges since his arrival — announcing notable workforce reductions earlier this year, a move that sent the company's stock tumbling by approximately 17 percent. The parallels between his public and private sector tenures have not gone unnoticed by industry observers.

## What This Means Going Forward

The GSA's renewed commitment to staffing signals a broader acknowledgment that the cuts imposed in early 2025 may have gone too far, leaving critical operational gaps in facilities oversight and property management. Whether this hiring wave will fully restore the agency's capacity — or simply stabilize it — remains to be seen as the federal workforce landscape continues to evolve.

The GSA is hiring around 400 new workers for its Public Buildings Service division, one year after mass layoffs driven by the DOGE initiative reshaped the agenc

GSA Plans to Hire 400 Employees After DOGE Cuts

large_GettyImages-1500080123.jpg

medium_GettyImages-1500080123.jpg

small_GettyImages-1500080123.jpg

thumbnail_GettyImages-1500080123.jpg

GettyImages-1500080123.jpg

GSA Moves to Fill Hundreds of Roles One Year After Sweeping DOGE-Driven Layoffs

## Former DOGE Engineer Joins Forces With Viral Fraud Influencer

Edward Coristine, who gained notoriety as one of the youngest and most controversial figures within the Department of Government Efficiency (DOGE), has resurfaced in a viral YouTube interview alongside a well-known online fraud investigator. The appearance has sparked fresh debate over government transparency, data access, and the growing role of self-styled vigilante investigators in shaping federal policy.

Coristine was just 19 years old when he joined DOGE with no prior government experience. During his tenure, he was deployed across multiple federal agencies, including the Social Security Administration (SSA) and the Small Business Administration (SBA). Before entering government service, he had spent several months at Elon Musk's Neuralink and founded a startup that reportedly hired individuals with histories in black hat hacking.

## What Was Said in the YouTube Interview

In a video published on Thursday to the YouTube channel of a prominent online fraud investigator — referred to here as Shirley — Coristine discussed his involvement in pulling Medicaid spending data targeting California-based businesses as potential fraud cases. Coristine confirmed his participation and argued that the government should actively encourage crowdsourced fraud investigations by making more public data available.

The dataset in question was reportedly drawn from a trove released by the HHS DOGE team back in February, which the team had described at the time as "the largest Medicaid dataset in department history." The release was framed as a tool to help detect large-scale fraudulent activity within the Medicaid system.

Shirley told Coristine during the interview: "After that, I went to California based off that dataset you had helped me extract, and these fraudsters also weren't even trying to hide it."

Coristine responded by advocating for greater open-sourcing of government spending data, suggesting that independent investigators like Shirley are "more well-positioned" to uncover fraud than government agencies alone. "You are someone who actually went to the places where we were spending all this money and confronted the people and got to know the truth," Coristine said. "We have to continue to open source data."

## Fraud Narratives Tied to Immigrant Communities

Early in the interview, both Coristine and Shirley drew connections between alleged government fraud and immigrant communities — without presenting concrete evidence. Coristine claimed that significant sums of money were being "siphoned out of the country," while Shirley added, "Once that money is in a suitcase to Somalia, that's never coming back."

This rhetoric mirrors talking points that have gained traction within the Trump administration. Shirley's previous videos have already served as informal evidence in the administration's fraud and immigration enforcement campaigns. His December video alleging over $100 million in childcare fraud linked to Somali-run businesses in Minnesota was amplified by Vice President JD Vance, and was followed by a surge of immigration enforcement activity in the state. That crackdown ultimately resulted in mass arrests and detainments, as well as the deaths of two protesters.

## Specific Fraud Claims and DOGE's Track Record

During the interview, Coristine and Shirley pointed to several specific examples of what they characterized as government waste, including U.S. funding for a children's television program in Iraq and tax policy consulting work in Liberia — both of which were supported by the U.S. Agency for International Development (USAID), an agency that DOGE effectively dismantled in early 2025.

Coristine also leveled criticism at the SBA, claiming the agency conducted virtually no verification on loan recipients — including basic checks to confirm whether Social Security numbers were legitimate — particularly during the COVID-19 pandemic. SBA spokesperson Maggie Clemmons acknowledged that the Biden administration had taken a permissive approach to underwriting and fraud prevention. A 2025 Government Accountability Office report did confirm that the SBA distributed some loans before its full verification systems were operational.

## Conspiracy Theories and Voter Fraud Allegations

The interview also ventured into disputed territory around voter fraud. Shirley alleged that California had numerous deceased individuals still registered to vote and continuing to receive Social Security benefits — a claim that echoes statements previously made by Elon Musk. Experts have consistently pointed out that such apparent anomalies are typically the result of DOGE officials misunderstanding the structure of government data systems rather than evidence of actual fraud.

This is not the first time Shirley has made such claims. In February, he released a video alleging he had identified voters listed as 125 years old and 30 individuals using a UPS store as their registered address, calling California "the breeding ground for voter fraud in America." Researchers broadly agree that widespread voter fraud in California does not exist.

These allegations align with a broader push by the Trump administration on election integrity. The president recently signed an executive order calling for the creation of a national voter eligibility list. Despite administration claims that undocumented immigrants pose a significant threat to election integrity, there is no substantial evidence to support this. A 2017 Brennan Center for Justice analysis found just 30 possible instances of noncitizen voting out of more than 23.5 million ballots cast in 2016.

## Coristine's Current Role and Future Plans

Although Coristine is no longer an official member of DOGE, he continues to work within the federal government as head of engineering at the White House's National Design Studio (NDS). The NDS is led by Airbnb co-founder and U.S. Chief Design Officer Joe Gebbia, who previously served with DOGE at the Office of Personnel Management.

Coristine indicated that DOGE's mission is far from over, stating that cabinet secretaries are "continuing the mission and mantra of DOGE."

He also offered a few surprising details about NDS's current initiatives. The studio's chief creative officer is Nate Brown, who previously collaborated with rapper Ye — formerly known as Kanye West — on projects including the 2021 album *Donda*. Coristine also hinted that one of NDS's upcoming priorities involves promoting "freedom" and extending "free speech to Europe," though he offered no further specifics.

Neither Coristine nor Shirley responded to media requests for comment prior to publication.

Former DOGE engineer Edward Coristine joined a viral fraud influencer on YouTube, discussing Medicaid data access and crowdsourced government fraud investigatio

DOGE Engineer Coristine Appears in Viral Fraud YouTube Video

large_GettyImages-2268187430.jpg

medium_GettyImages-2268187430.jpg

small_GettyImages-2268187430.jpg

thumbnail_GettyImages-2268187430.jpg

GettyImages-2268187430.jpg

Teen DOGE Engineer Edward Coristine Teams Up With Fraud Influencer in Controversial YouTube Interview

## Europe's Cybersecurity Agency Points Finger at Two Criminal Groups

The European Union's cybersecurity watchdog, CERT-EU, has officially attributed a significant data breach targeting the European Commission to two separate cybercriminal organizations — TeamPCP and the well-known ShinyHunters gang.

In a detailed report released Thursday, CERT-EU confirmed that TeamPCP carried out the initial intrusion, while ShinyHunters took responsibility for publishing the stolen information publicly online.

## What Was Stolen — and How Much

According to CERT-EU's findings, the attackers successfully extracted approximately 92 gigabytes of compressed data from an Amazon Web Services (AWS) account operated by the European Commission. The stolen information included sensitive personal data such as full names, email addresses, and the actual contents of email communications.

The breach compromised the Commission's Europa.eu cloud infrastructure — a platform widely used by EU member states to host official websites and publications for various bloc institutions and agencies.

CERT-EU further warned that data belonging to at least 29 additional EU entities may also have been exposed, along with information from dozens of internal European Commission clients.

## How the Hackers Pulled It Off

The attack chain began on March 19, when threat actors obtained a secret API key linked to the European Commission's AWS environment. The entry point, however, traced back even further — to a prior compromise of Trivy, a widely used open source security scanning tool.

After Trivy's project was breached, the European Commission unknowingly downloaded a tampered version of the tool. That compromised copy allowed the attackers to harvest the Commission's secret API key and use it as a springboard to access and exfiltrate data stored within the AWS account.

### A Dangerous Supply Chain Weak Point

The Trivy connection underscores a broader and increasingly alarming cybersecurity threat: supply chain attacks. By infiltrating trusted open source tools used by developers, hackers gain privileged access to the systems of unsuspecting organizations downstream.

Cybersecurity firm Aqua Security, which develops Trivy, has linked TeamPCP to ransomware campaigns and crypto-mining operations. Threat intelligence researchers at Palo Alto Networks Unit 42 have also identified the group as a key player behind a systematic effort to compromise multiple open source security projects.

"By targeting developers with keys to access sensitive systems, the hackers then have the ability to hold compromised organizations for ransom, demanding extortion payments," Unit 42 noted in its assessment.

## The Scale of the Leaked Data

While CERT-EU continues to analyze the full scope of the published data, investigators have already identified nearly 52,000 files containing outbound email messages. The agency noted that the majority of these emails are automated in nature and largely devoid of meaningful content.

However, bounced or undeliverable emails are of particular concern, as they may contain original user-submitted content — creating a tangible risk of personal data exposure for individuals whose information passed through the Commission's systems.

## A Growing Trend: Collaborative Cybercrime

Perhaps the most significant takeaway from this incident is not simply the scale of the breach, but what it reveals about the evolving tactics of cybercriminals. The collaboration between TeamPCP, which conducted the breach, and ShinyHunters, which handled the public leak, reflects a troubling trend of criminal groups working in tandem to maximize pressure on victims through extortion.

This division of labor — one group stealing, another leaking — allows hackers to operate more efficiently and amplify their leverage against targeted organizations.

## Official Response

CERT-EU confirmed it has already reached out to organizations potentially impacted by the breach. A spokesperson for the European Commission indicated the body was closed for the period in question and would address media inquiries upon resuming operations. ShinyHunters has not responded to requests for comment.

CERT-EU confirms TeamPCP stole 92GB of EU Commission data via a compromised AWS account, while ShinyHunters leaked it online. Full breach details inside.

EU Data Breach: TeamPCP and ShinyHunters Behind Attack

large_european-commission-building-flags.jpg

medium_european-commission-building-flags.jpg

small_european-commission-building-flags.jpg

thumbnail_european-commission-building-flags.jpg

european-commission-building-flags.jpg

Two Hacking Groups Behind Major European Commission Data Breach, Cyber Agency Confirms

## A $12 Million Bet on Smarter AI Safety

A startup founded by a former Facebook trust and safety executive has raised $12 million to tackle one of the most pressing challenges in the AI industry: making content moderation fast, accurate, and built directly into the products people use every day.

Moonbounce, co-led by Brett Levenson and Ash Bhardwaj, announced the funding round — backed by Amplify Partners and StepStone Group — as demand surges for real-time AI safety infrastructure across platforms ranging from dating apps to AI companion services.

## The Problem Levenson Saw From the Inside

When Levenson departed Apple in 2019 to take on a business integrity role at Facebook, the social media company was still reeling from the Cambridge Analytica scandal. He arrived convinced that better technology could solve the platform's content moderation woes. What he found instead was a deeply human problem.

Content reviewers were handed a 40-page policy document — often machine-translated into their native language — and expected to memorize it. Each flagged piece of content received roughly 30 seconds of attention. Reviewers had to determine not only whether a post violated policy, but also what corrective action to take: remove it, restrict the user, or limit its reach.

The result? Decision accuracy that Levenson described as only "slightly better than 50%" — essentially a coin flip. Worse, those decisions were being made days after the harmful content had already circulated.

"It was kind of like flipping a coin, whether the human reviewers could actually address policies correctly, and this was many days after the harm had already occurred anyway," Levenson told TechCrunch.

## From Policy Documents to Executable Code

That experience planted the seed for what Levenson calls "policy as code" — converting static, written policy documents into dynamic, enforceable logic that operates in real time. That core idea became the foundation of Moonbounce.

The company has developed its own large language model that ingests a client's policy documentation, evaluates content as it is generated, and delivers a decision within 300 milliseconds. Depending on how a customer configures the system, Moonbounce can flag content for delayed human review, throttle its distribution, or block it outright when the risk threshold is high enough.

This positions Moonbounce as an independent safety layer — sitting between the end user and the AI system itself — rather than a solution baked into the chatbot or platform. Because it operates outside the main conversation context, Moonbounce's system is not bogged down by the thousands of tokens a chatbot must track. Its sole function is rule enforcement at runtime.

## Who Moonbounce Is Serving

The company currently focuses on three core markets:

- **User-generated content platforms**, such as dating apps
- **AI companion and character platforms** building conversational agents
- **AI image and video generation tools**

Moonbounce is already processing more than 40 million content reviews daily and serves upwards of 100 million daily active users. Its current client roster includes AI companion platform Channel AI, image and video generation service Civitai, and character roleplay apps Dippy AI and Moescape.

Tinder's head of trust and safety has also cited the use of LLM-powered moderation services similar to Moonbounce's approach as enabling a tenfold improvement in detection accuracy on the dating platform.

## Safety as a Competitive Advantage

One of Levenson's most compelling arguments is that safety does not have to be an afterthought — it can be a genuine product differentiator.

"Safety can actually be a product benefit," he said. "It just never has been because it's always a thing that happens later, not a thing you can actually build into your product."

This framing resonates with investors. Lenny Pruss, general partner at Amplify Partners, emphasized that as LLMs become central to virtually every application, the need for objective, real-time content guardrails has never been greater.

"We invested in Moonbounce because we envision a world where objective, real-time guardrails become the enabling backbone of every AI-mediated application," Pruss said.

## Legal Pressure Is Accelerating Demand

The timing of Moonbounce's rise is no coincidence. AI companies are under mounting legal and reputational scrutiny following a series of high-profile failures. Chatbots have been accused of directing teenagers and emotionally vulnerable users toward self-harm. Image generators, including xAI's Grok, have been exploited to produce nonconsensual intimate imagery.

As internal safety systems prove inadequate, more AI companies are turning to third-party providers to shore up their defenses — a trend Levenson says is accelerating.

## A Gentler Approach: Steering Instead of Blocking

Perhaps the most forward-looking capability Moonbounce is developing is what the team calls "iterative steering." The concept emerged in response to tragedies like the 2024 death of a 14-year-old Florida boy who had developed an unhealthy fixation on a Character AI chatbot.

Rather than delivering a blunt refusal when a dangerous topic surfaces, the system would intercept the exchange and modify the user's prompt in real time — guiding the chatbot to respond not just with empathy, but with genuinely constructive support.

"We hope to be able to add to our actions toolkit the ability to steer the chatbot in a better direction," Levenson explained, "to essentially take the user's prompt and modify it to force the chatbot to be not just an empathetic listener, but a helpful listener in those situations."

## An Independent Vision for the Future

Moonbounce operates with a 12-person team led by Levenson and Bhardwaj, who previously built large-scale cloud and AI infrastructure at Apple. When asked whether the company's future might involve an acquisition — perhaps by Meta, his former employer — Levenson gave a candid and notably unguarded answer.

"My investors would kill me for saying this, but I would hate to see someone buy us and then restrict the technology," he admitted. "Like, 'Okay, this is ours now, and nobody else can benefit from it.'"

It is a rare moment of transparency from a founder who clearly views Moonbounce's mission as larger than any single company's roadmap — including his own.

Moonbounce, founded by a former Facebook insider, has raised $12M to deliver real-time AI content moderation through its innovative policy-as-code platform.