Campbell’s Fires Whistle-blower, CISO Epically Screws Up

Campbell’s, the soup company, fired an IT analyst for reporting derogatory and racist remarks made by the company’s Chief Information Security Officer (CISO).

From KTVU:

In the recording, a voice alleged to be Bally’s can be heard criticizing Campbell’s products and mocking its consumers.

“We have s— for f—ing poor people. Who buys our s—? I don’t buy Campbell’s products barely anymore,” the voice allegedly belonging to Bally can be heard saying.

“Bioengineered meat — I don’t wanna eat a piece of chicken that came from a 3-D printer,” Bally allegedly says, belittling Campbell’s soup ingredients.

He also allegedly made derogatory comments about Indian coworkers and – according to the recording – claimed he sometimes came to work under the influence of marijuana.

“F—ing Indians don’t know a f—ing thing,” the voice on the recording says. “They couldn’t think for their f—ing selves.”

According to the Washington Post, Campbell’s Company has now fired their CISO after the recordings were made public from a law suit by the fired whistle-blower and IT analyst.

#it #ciso #whistleblower

GrapheneOS Exiled From France

The GrapheneOS project has announced that they have moved all their server infrastructure (e.g. Mastodon, Matrix) out of France for fear of government prosecution, and that developers for the project should no longer travel to France to avoid arrest. This comes as a reaction to the French interpretation of the European Union Chat Control

#grapheneos #france

Massive NPM Worm Attack

GitLab has discovered an NPM worm that is impacting a massive number of Git repositories and npm projects, ex-filtrating sensitive data such as cloud API keys and other security credentials.

According to Wiz, the scope of the attack is massive:

• 27% of code and cloud environments
• 700 npm packages
• 25,000 git repositories
• 500 GitHub users
• 775 compromised GitHub access tokens
• 373 AWS credentials
• 300 GCP credentials
• 115 Azure credentials

#npm #javascript #git

BentoPDF

The release notes for BentoPDF v1.7.4 contain trojan horse API keys to the OpenAI, Anthropic, and Gemini platforms that link to a RickRoll.

The ZBT-2

Home Assistant has released the Home Assistant Connect ZBT-2, the successor to the ZBT-1. The ZBT-2 has a USB adapter and a precisely tuned antenna for connecting Zigbee, Thread, or Matter networks to Home Assistant. It is available immediately at a cost for $49.