Forgot your password?
typodupeerror

Submission + - ShinyHunters Published 45GB of Madison Square Garden Facial Recognition Records (thenextweb.com)

ArchieBunker writes: The cybercrime group ShinyHunters has published 45 gigabytes of data stolen from Madison Square Garden Entertainment after the company missed a June 15 ransom deadline. The dump includes facial recognition surveillance records, internal threat assessments, and personal information from what the hackers claim are 26 million customer and corporate records. A federal class action lawsuit was filed the following day.

The breach occurred on June 5, according to a ShinyHunters spokesperson who spoke to 404 Media. The data was published on June 16, days after the New York Knicks won the NBA Finals in five games against the Spurs, putting intense public attention on the arena and its owner, James Dolan.

What makes this breach unusual is the nature of the surveillance data it exposed. MSG has deployed facial recognition technology across its venues for years, using the system to screen visitors and, controversially, to ban lawyers from firms that have sued the company. The leaked files include biometric tracking logs, background check information, internal threat assessments, and what the class action complaint describes as detailed dossiers on attendees.

A sample reviewed by 404 Media contained files specifically referencing Knicks-related personalities, with fields including “address,” “claim to fame,” “cost of talent,” and direct contact information for individuals or their representatives. The data also included internal risk tags classifying celebrities: actor Ben Stiller was profiled as “low risk,” while rapper A Boogie wit da Hoodie was flagged as “high risk,” according to the class action filing. No documented criteria explaining the labels were included in the leaked files.

Customer emails were also part of the dump, including messages from fans who had expressed concern about being misidentified by MSG’s facial recognition cameras. The inclusion of this correspondence reveals that MSG was collecting and storing complaints about its own surveillance practices alongside the biometric data itself.

A class action lawsuit, Avalo v MSG Entertainment, was filed on June 16 in New York federal court. The plaintiff, Carlos Avalo, attended a concert at MSG in September 2025 and alleges his biometric data was captured by the venue’s entry systems. The lawsuit seeks at least $5 million in initial damages.

The complaint accuses MSG of corporate negligence in failing to secure the data it aggressively collects, despite clear warnings from privacy advocates and a previous breach.

This is MSG’s second major breach in under a year. In a separate incident disclosed in February 2026, the Cl0p ransomware group exploited a vulnerability in a vendor-hosted Oracle eBusiness Suite application used by MSG for payroll and human resources. That intrusion began in August 2025 but went undetected until December 16, 2025, and exposed the names, addresses, and Social Security numbers of roughly 131,070 individuals, primarily employees and contractors.

ShinyHunters has been on a sustained campaign in 2026, exploiting an unpatched Oracle PeopleSoft zero-day to breach more than 100 organisations, two-thirds of them universities. The group previously orchestrated the 2024 Snowflake supply chain attacks that compromised Ticketmaster and AT&T, and in March 2026 breached the European Commission, leaking 350 gigabytes of data from 42 internal clients.

The MSG attack follows the same playbook ShinyHunters used against Instructure’s Canvas learning management system in April, where the group claimed 3.65 terabytes of data from 275 million users across 9,000 schools. The pattern is consistent: identify a target sitting on large volumes of sensitive data, exfiltrate it, set a ransom deadline, and publish when the deadline passes.

MSG Entertainment has not publicly confirmed the scope of the breach or commented on the class action. The company’s facial recognition programme has faced scrutiny since at least 2022, when it drew attention for using the technology to bar attorneys from firms involved in litigation against the company. The New York attorney general investigated, and a state court initially ruled the policy violated anti-discrimination law, though an appeals court later reversed that decision.

The breach raises a question that extends beyond MSG: organisations that invest heavily in surveillance technology to monitor their visitors are creating precisely the kind of high-value data troves that groups like ShinyHunters target. The 26 million figure cited by the hackers has not been independently verified, and the full scope of the exposed biometric data remains unclear as the investigation continues.

Submission + - Linear A Minoan script maybe deciphered by linguistics researcher with AI help (aiclambake.com) 1

Aristos Mazer writes: A researcher claims to have deciphered the millennia-old Linear A script. After studying for 7 years, Tom Di Mino had an insight about the structure of one sample of Linear A that lead Tom to compare it against an ancestor of Hebrew. Tom created an AI analysis that yielded full translations of Linear A, and correlated against the known Linear B for verification.

Submission + - Paper: Being Out Of Shape Is Far More Likely To Kill You Than Smoking (studyfinds.com)

schwit1 writes: In a Nutshell
  • Very low cardiovascular fitness is associated with a roughly 400% higher risk of death than high fitness levels, dwarfing the mortality risk linked to smoking.
  • Current US and UK physical activity guidelines are built around minimum thresholds, not optimal health outcomes, and a Cambridge researcher argues they need a full overhaul.
  • Protein recommendations in the UK haven't been updated since 1991 and were never designed to help people thrive, only to prevent deficiency.
  • Higher protein intake is linked to better muscle mass, healthier aging, improved fat loss, and potentially better pregnancy outcomes, but current guidelines fall well short of what the science supports.

Submission + - Paint is already peeling in renovated Washington Reflecting Pool after 2 weeks. (cnn.com)

fahrbot-bot writes: CNN, Reuters and other sources are reporting that the paint on Washington's newly renovated Lincoln Memorial Reflecting Pool on Thursday was peeling away from the bottom and into the algae-tinted water, less than two weeks after announcement of the job's completion. The historic pool was drained and refinished in a $14.7 million no-bid contract.

Tim Auerhahn, a pool infrastructure expert and the chairman of the Aquatic Council, said it’s difficult to tell from the videos what was causing the “apparent delamination.”

“A coating system can fail for several reasons, including substrate preparation, surface contamination, application conditions, adhesion issues, product selection, mechanical damage, environmental exposure, or a combination of factors,” Auerhahn said.

The larger question, he added, is whether this represents a localized issue in that part of the pool or a larger, more systemic issue with the coating. “If the coating is losing adhesion in multiple locations, that could indicate a more significant concern,” he said.

Comment independent commission - right (Score 1) 187

overseen by an independent commission ... A seven-person independent commission -- nominated by the president and confirmed by the Senate -- would manage the fund and use its voting shares ...

Until a President replaces them with lackeys who'll do his bidding and SCOTUS (again) says it's okay. So far, pretty much the only independent entity (agency, commission, etc...) the Court hasn't waffled on, especially under this administration, is The Federal Reserve.

Supreme Court Prepares to Dismantle Independent Agencies in Favor of Partisan Chaos (Oct 2025)

Submission + - Researchers Warn AI Agents Are Becoming Targets for Social Engineering Attacks (nerds.xyz)

BrianFagioli writes: Security researchers are warning that attackers are increasingly targeting AI agents instead of the people using them. A new report from OrcaRouter argues that prompt injection is becoming the phishing attack of the AI era, allowing attackers to manipulate AI systems through emails, documents, websites, and other content they consume.

As AI agents gain access to email, source code, business documents, and other systems, researchers say organizations need to start protecting the agents themselves, not just the humans they serve.

Comment Re: Instead, it plans to develop a voluntary indus (Score 3, Insightful) 104

When it's codified into the highest law of the land and doesn't work, and suggestions to do so voluntarily can't work to the point of being laughable, what options do we have left?

There's always Nancy Reagan's catchphrase: Just Say No.

Any particular game is expendable. You won't miss out on anything. Games don't even have the network effects and lockin that you get with other types of software; it's a part of the economy where Just Saying No is easiest of all.

Don't like the quality? Don't spend your money. They have no power over us except what we give them. Stop being so selflessly altruistic when it comes to actively supporting your own abuse.

It's so damn easy, and there's already hundreds of years worth of hassle-free game-playing available to spend the few remaining seconds of your life on.

Slashdot Top Deals

The Macintosh is Xerox technology at its best.

Working...