Il suo nome è entrato nel mito grazie alla Ford GT40. Ma prima di lei, la leggenda, Ken Miles se l'era costruita in garage, saldando tubi d'acciaio e modellando pannelli di alluminio con le proprie mani. Molto prima di diventare l'uomo capace di trasformare un brutto anatroccolo nella regina di Le Mans, il pilota inglese emigrato in California aveva già dimostrato di avere talento, intuito e capacità meccaniche non comuni. In occasione del 75° anniversario del Pebble Beach Concours d'Elegance, saranno proprio le sue due creature più personali, le MG R1 e R2 "Flying Shingle", a raccontare quella storia.

Il debutto con le MG

Quando Ken Miles lasciò l'Inghilterra per trasferirsi a Los Angeles, all'inizio degli Anni Cinquanta, era già un ottimo pilota. Negli Stati Uniti, però, divenne qualcosa di ancora più raro: un costruttore-artigiano capace di inventarsi automobili da corsa partendo da modelli che conosceva bene, le MG. Dopo aver conquistato una lunga serie di vittorie nelle gare SCCA con una semplice MG TD elaborata, decise che il telaio di serie non bastava più, così progettò una vettura tutta sua. Anzi, due. Nacque così la R1, seguita nel 1955 dalla più evoluta R2, soprannominata "Flying Shingle", letteralmente "tegola volante", per quella carrozzeria bassissima e filante che sembrava schiacciare l'auto sull'asfalto. Il telaio tubolare costruito in casa, il motore MG profondamente elaborato e una ricerca aerodinamica quasi ossessiva, permisero a Miles di mettere in difficoltà vetture ben più potenti, trasformando le sue special in autentici incubi per gli avversari sulle piste della West Coast americana.

Pensava come un ingegnere

La grandezza di Ken Miles non stava soltanto nel piede destro. Ogni giro di pista era l’occasione per analizzare le reazioni della vettura con una sensibilità che aveva pochi eguali: tornava ai box con la testa piena di appunti e poi, a casa, modificava sospensioni, geometrie, pesi, posizione di guida, limando decimi e sviluppando incessantemente le proprie creature. Un metodo quasi scientifico che, qualche anno più tardi, avrebbe convinto Carroll Shelby e Ford ad affidargli lo sviluppo della Cobra e soprattutto della GT40. Ma tutto era nato dalle “Flying Shingle”, il manifesto della sua filosofia: leggere, essenziali, nate per vincere grazie all'intelligenza più che ai cavalli. Non stupisce che ancora oggi vengano considerate tra le special più ingegnose mai costruite su base MG.

Una vittoria cancellata

Le Flying Shingle entrarono rapidamente nella leggenda anche per un episodio che racconta bene il carattere di Miles. Alla gara di Palm Springs del 1955 tagliò il traguardo davanti a tutti, precedendo tra gli altri un giovane James Dean al volante della sua Porsche 356 Speedster, ma la vittoria gli venne revocata per una contestata irregolarità tecnica: i parafanghi risultarono troppo larghi rispetto al regolamento della categoria. Un episodio rievocato con qualche licenza nel film “Le Mans ‘66 - La grande sfida”, con Christian Bale nei panni di Ken Miles che prende a martellate il baule per farlo rientrare nelle misure regolamentari.

Raccontano un'epoca

Al Pebble Beach Concours d'Elegance 2026 le due Flying Shingle saranno riunite per ricordare e celebrare uno dei personaggi più affascinanti ed eroici della storia dell'automobile. La R2 appartiene oggi alla Collier Collection e, insieme alla R1, testimonia un'epoca in cui un uomo poteva ancora immaginare una macchina nel proprio garage, costruirla con le proprie mani e trasformare una semplice MG in un'arma da competizione per battere piloti ufficiali e costruttori affermati. E forse è proprio questo il significato più profondo della presenza delle Flying Shingle sul prato di Pebble Beach. Non celebrano soltanto un pilota, semmai un'epoca in cui il talento non si misurava con il budget del reparto corse, ma con la capacità di immaginare qualcosa che ancora non esisteva. Ken Miles lo faceva con una chiave inglese in una mano e il casco nell'altra. Ed è così che, ancora oggi, continua a correre nella memoria degli appassionati.

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes. Microsoft has attributed the recent patch deluge to vulnerability discoveries aided by artificial intelligence, and experts roundly agree that Windows users should get used to the idea of Patch Tuesdays (the second Tuesday of each month) covering hundreds of newly discovered security flaws.

Fully 42 of the 398 flaws that Microsoft patched today earned Redmond’s most-dire “critical” rating, meaning they are severe enough that malware or malcontents could exploit them to gain remote control over a Windows computer with little to no help from the user.

The sole known “zero day” bug fixed by Microsoft this month is CVE-2026-68820, a privilege escalation weakness in a core Windows component called afd.sys, which the security firm Automox describes as “the driver behind Windows socket connections on effectively every endpoint.”

“This isn’t a front-door bug,” Automox’s Landon Miles wrote in a Patch Tuesday blog post. “It’s step two in a chain: an attacker phishes their way into a low-privilege foothold, then uses the driver flaw to take the box. The 7.0 score reflects the high attack complexity, because race conditions are fiddly. The exploit has to be thrown over and over until the timing lands. Someone is clearly landing it anyway.”

CVE-2026-62832 is another privilege escalation flaw that Microsoft has labeled likely to be exploited; this flaw, in the Windows User Profile Service, may be related to the recent “LegacyHive” public disclosure from the prolific bug hunter known as Nightmare Eclipse. The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

Other major software makers are likewise increasing their patch volumes and cadence thanks to AI, including Adobe which last month moved to twice-monthly security bulletins published on the 2nd and 4th Tuesday of each month. Cisco, Google, Mozilla and Oracle also are shipping updates far more frequently and abundantly.

By all accounts, AI is quite good at finding security holes in software. But for now at least, patching the resulting bugpocalypse remains a heavily human-centric endeavor, and the jury is still out on whether AI technologies will turn out to be as good at fixing vulnerabilities as they are at finding and exploiting them. This is an important question when one considers that these same AI technologies also are suggesting fixes for the vulnerabilities they find.

Researchers at 1Password recently examined what happens when different large language models (LLMs) generate vulnerability patches for newly disclosed, complex vulnerabilities. They found the LLMs produced patches that failed to fix the flaw or added a new weakness in the process (or both) more than half the time.

Ed Skoudis, president of the SANS Technology Institute, said his team has seen excellent results using AI to generate patches, provided there are humans in the loop to test the suggested fixes and push for iterative improvements.

“AI is rapidly becoming astonishingly good at finding vulnerabilities, but this research shows that fixing them is a very different problem,” Skoudis wrote in a SANS newsletter today. “Don’t expect one-shot AI patching to work reliably. Instead, iterate, test, challenge, improve, and verify. AI can be an extraordinary patching partner, but today it still needs a skilled human at the keyboard.”

Tyler Reguly at Fortra says while reports of Microsoft patching hundreds of vulnerabilities in one go have prompted some organizations to try to patch faster, it’s important to bear in mind that only one of the almost 400 bugs addressed today is known to be actively exploited. Reguly suggested security leaders check in with their teams to see how they’re handling the increasing workloads, which often involve testing fixes before deploying them in production environments.

“If you’re a chief security officer talk to your teams about how they are shifting or modifying their workflows to better accommodate the patching shift that we’re seeing and support them across various organizational units by enabling the changes they want to see made,” Reguly said. “There’s no need to rush these updates, no matter what various vendors and organizations try to tell you. You need to make sure that you are rolling out safe updates that will not negatively impact your systems.”

Speaking of the humans behind the keyboards, don’t neglect to backup your system and/or data before applying this month’s monster patch load. The day after each month’s Patch Tuesday is sometimes derisively referred to as Reboot Wednesday, but it generally doesn’t hurt to wait a few days to apply these huge update bundles because it sometimes takes a couple of days for the occasional misbehaving patch to get ironed out properly by Microsoft.

For a clickable, per-patch breakdown by severity and urgency, check out this roundup from the SANS Internet Storm Center.

C’erano una volta le piaghe d’Egitto, ma oggi dobbiamo accontentarci delle piaghe venete.Anche i grilli, nel loro piccolo, s'incazzano e diventano un'emergenza da codice rosso.Gli amministratori del Comune di Treviso e dell'Ulss 2, sulla scia dell'ultimo film di Nolan "Odissea", si sono armati e scesi in campo per combattere questa epica invasione.C'è da dire che ...continua a leggere "Allarme rosso a Treviso: l’invasione dei grilli"

1922- 2026 In memoria di Filippo Filippetti anarchico livornese, antifascista, ucciso dai fascisti Domenica 2 agosto 2026 ore 19 Commemorazione presso la lapide Via Provinciale Pisana 354, Livorno (ex-scuola Camilli) Filippo Filipetti, giovane anarchico, viene ucciso il 2 agosto 1922 dai fascisti mentre si oppone, assieme ad altri antifascisti, ad una spedizione punitiva contro Livorno. […]

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names.

The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000 followers since its creation in January 2025, posting frequently about security vulnerabilities, AI and software exploits. IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities.

“Our business model is this,” reads a pinned post on top of the IRIS C2 account on X. “Attract the very best vulnerability researchers and exploit developers in the world to join our company. This mostly revolves around junior engineers with raw talent/extremely high IQ. We don’t care if they have a college degree/industry experience.”

The website linked in that profile — irisc2[.]com — says the company is hiring for a number of open positions, and a recent post on its LinkedIn page enthuses about an overwhelming number of applications from potential employees. The website claims IRIS C2 is in the business of acquiring “zero-day exploits, individual primitives, partial chains, and full capabilities across all major platforms. Payouts range from $10,000 to $7 million depending on target, reliability, and operational value.”

The government contracting portal g2exchange.com reports that irisc2[.]com is operated by a business based in Virginia called Calvexa Group LLC. The “contact” link on the website for Calvexa Group — calvexagroup[.]com — forwards visitors to irisc2[.]com. G2Exchange shows that while Calvexa Group LLC is registered as a federal contractor, it does not appear to be working on any direct government contracts.

A search on the Arlington, Va. address listed in the incorporation records for Calvexa Group LLC finds the property is occupied by Jack Burkman, the 60-year-old founder and managing partner of the lobbying firm Burkman & Associates. When approached with questions about IRIS C2, Burkman referred further inquiries to his longtime associate, 28-year-old Jacob Wohl.

Burkman and Wohl have a storied history of creating fake intelligence companies and using them to spread false claims about and frame public figures, including fabricated sexual assault claims against then FBI director Robert Mueller, and Pete Buttigieg, then mayor of South Bend, Indiana and a Democratic candidate for the presidency. In 2019, Burkman and Wohl held press conferences falsely alleging extramarital affairs by Sen. Elizabeth Warren (D-Mass.) and then-2020 presidential candidate Kamala Harris.

In the wake of the 2020 presidential election, Wohl and Burkman were prosecuted by multiple U.S. states for making thousands of robocalls to residents of battleground states and disseminating false claims about mail-in ballots. They were indicted in Cleveland on 15 felony counts of orchestrating a robocall scheme aimed at suppressing the black vote in Detroit, and were sentenced in late 2025 to probation after their appeals to dismiss the charges were rejected.

In 2022, Wohl and Burkman both pleaded guilty to a single felony charge of telecommunications fraud in Ohio, and sentenced to a fine, probation, and community service. In March 2023, a judge in a New York civil case ruled that Wohl and Burkman had violated federal and state civil rights laws, and the two agreed to pay a $1 million settlement.

In June 2023, the Federal Communications Commission (FCC) imposed a $5.1 million fine against Wohl and Burkman for their robocall campaigns, at the time the largest fine ever sought by the FCC under the Telephone Consumer Protection Act.

By the age of 17, Wohl had started multiple investment firms, and cultivated the nickname “Wohl of Wall Street” after appearing on Fox News in 2015 to discuss his new hedge funds. In 2017, the Arizona Corporation Commission charged Wohl and his investment funds with 14 counts of securities fraud, and ordered him to pay $35,000 in restitution. In 2019, Wohl pleaded guilty in California to four felony counts of selling unregistered securities and was sentenced to two years of probation.

The market for previously unknown security vulnerabilities has always been populated by a colorful mix of researchers, academics, charlatans, clout-chasers and people actively involved in cybercrime communities. But the market for selling offensive security services to the U.S. government tends to be far more circumspect. Plenty of government contractors recruit vulnerability researchers and pay for the exclusive rights to novel software exploits, yet none of them do so quite as brazenly and openly as IRIS C2.

Indeed, KrebsOnSecurity was unaware of IRIS C2 until last month, when an attendee at a regional cybersecurity conference shared that Wohl and Calvexa Group were pestering people at the conference about selling their vulnerability research.

In an interview with KrebsOnSecurity, Wohl said Mr. Burkman was not involved in the day-to-day operations of IRIS C2. Wohl shared that IRIS C2 originally began as a penetration testing company, but shifted its focus recently to selling phone-hacking services to the government. Several times throughout the interview, Mr. Wohl mentioned working on federal government contracts, but when pressed for specifics said he was not at liberty to speak publicly about them.

Mr. Wohl said he does not have any formal education or training in computer science or information security, and that most of his knowledge on the matter is self-taught.

“I know more about tech than anyone,” Wohl bragged. “My background has always been extremely technical, and I’ve always been deeply into tech. People know me as someone who is able to create spectacularly exquisite capabilities that would make your head spin.”

Wohl said security researchers bring the company unique vulnerability findings “on a regular basis,” but that in many cases those findings are preliminary and not fully fleshed-out.

“Let’s say someone finds a flaw in a media decoder on a phone,” Wohl said. “A lot of times what we receive is an exploit primitive, where the idea is there but the [execution] needs work. You need that exploit to be stable and reliable, and that’s what we do.”

Wohl claims IRIS C2 has approximately 40 employees, although he said none of them are allowed to list their employment on LinkedIn for operational security reasons. In May, the author of the IRIS C2 account on X said that his girlfriend had no idea what he did for a living. But if IRIS C2 has any other employees, they may be similarly unaware of Mr. Wohl’s history of outright fabrications — or even his real name.

In September 2024, Politico reported that Burkman and Wohl were bragging about big companies supposedly buying services from their now-defunct company LobbyMatic, which claimed to use artificial intelligence to assist in political lobbying efforts. However, Politico found the pair were running the company using pseudonyms, with Wohl reportedly adopting the name “Jay Klein” and Burkman using the moniker “Bill Sanders.” Politico reported that two of the former LobbyMatic employees resigned after learning of their true identities, while other employees only learned after they had left the company.

Update, July 9, 9:44 a.m. ET: Several readers pointed our attention to a March 31 publication from journalist Molly White, which reported that Burkman and Wohl were paid a $300,000 retainer by a Canadian cryptocurrency fraudster wanted by the United States and several other countries for allegedly stealing $65 million from the crypto platforms KyberSwap and Indexed Finance. According to that report, the two were hired to pursue a “presidential pardon to avert a miscarriage of justice” on behalf of the accused hacker, who has not yet been convicted.

Il nuovo assetto geopolitico mondiale ha messo a nudo una serie di problematiche che sono state trascurate troppo a lungo. In pratica, quello che per anni abbiamo visto accadere nel software, ovvero l’entusiasmo per le nuove feature che andava a coprire la necessità di rendere sicuro il loro utilizzo, si è applicato anche in mille […]

L'articolo Infrastrutture Critiche e Geopolitica: è l’Era dell’Antifragilità proviene da Securityinfo.it.

Un gruppo cybercriminale di lingua cinese fino a poco tempo fa concentrato prevalentemente sul mercato asiatico sta ampliando rapidamente il proprio raggio d’azione verso Europa e Africa. Secondo le analisi pubblicate da Proofpoint, il gruppo chiamato TA4922 ha aumentato sensibilmente il volume delle proprie operazioni nel corso del 2026, prendendo di mira organizzazioni nel Regno […]

L'articolo Il gruppo criminale cinese TA4922 adesso punta anche all’Europa proviene da Securityinfo.it.