TraderTraitor's trojanized Terraform provider runs its malware loader the moment Terraform loads it
Zscaler ThreatLabz says North Korea's TraderTraitor hid a malware loader inside a fake HashiCorp Terraform provider that runs the moment Terraform loads it. The crypto-theft group has pushed its operation into infrastructure-as-code, the tooling that provisions cloud environments.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+5
- Incentives35
- Confidence60
The Vine successor from Evan Henshaw-Plath enforces its human-only rule by refusing uploads entirely. The interesting question is what that constraint costs in production and in moderation.
Reality
- Evidence55
- Adoption15
- Hype gap+20
- Incentives60
- Confidence60
SentinelOne has documented North Korea's Jade Sleet inside a small Indian IT services provider, using Rust backdoors built for Apple Silicon and a Terraform lock file that points developers at a fake HashiCorp registry.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence55
buildOne report1 publisher Rewriting four MCP adapters in Go cut 23 seconds of cold start to two
The Python adapters worked; they just paid interpreter startup and an import walk on every agent tool call, on a cluster that scales to zero because one person funds it. The Go control was already an order of magnitude quicker.
Reality
- Evidence45
- Adoption20
- Hype gap+20
- Incentives25
- Confidence55
buildOne report1 publisher Three named agents shipped in 27 days, and none of them can read each other's config
Block, xAI and Nous all landed on the agent as a persistent identity. That identity still lives in whatever file the harness picked, and the switching bill is now memory.
Reality
- Evidence38
- Adoption32
- Hype gap+30
- Incentives78
- Confidence42
Divine drops invite codes, and the Vine revival becomes an open bet on nostr
The 6-second video reboot is now open to anyone. The archive of 2M-plus restored Vine clips and a decentralised backend matter more than the nostalgia.
Reality
- Evidence38
- Adoption22
- Hype gap+30
- Incentives66
- Confidence34
buildOne report1 publisher A bot timing test that catches schedulers, and the arithmetic showing where it breaks
Log2-bucketed gap entropy on live Nostr data separates two humans from a clockwork poster by 4x. Against a burst spammer, the same metric lands almost inside human range.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+12
- Incentives58
- Confidence45