‼️ A bug bounty hunter says they rooted their 2025 Samsung TV with zero-days and found an AI model tracking what they watch and the ads they skip.
The TV also takes screenshots, categorises audio and can tap a soundbar's mic, they say.
Then OpenAI banned them for "Cyber Abuse".
Claude Code found every photo i "permanently deleted" from my iPhone.
almost 4 years of photos and videos sitting in a hidden cache on my
device. any app with file access can read them.
plugged my iPhone into my MacBook for a backup. had Claude Code running
a security scan from my last post. it flagged something i never asked
it to check. a directory called PhotoData/Thumbnails with over 152,000
files. photos, videos, screenshots. all stuff i deleted.
2022. 2023. 2024. 2025. photos i deleted within a second of taking them.
photos i went into Recently Deleted and cleared manually. photos i
deleted twice because i didn't trust the first time. all still there.
what was sitting in that cache:
a passport photo for a visa application in 2023
bank app screenshots with full account numbers visible
private photos i sent someone and deleted the same night after a breakup
a crypto seed phrase screenshot i took "for a minute" in 2022
my ID and credit card side by side, deleted 10 seconds later
my ex's private instagram stories i saved and "permanently deleted"
in 2024
152,417 files. some at full resolution. all organized by date going
back to 2021.
when you delete a photo on iPhone, iOS removes it from your camera roll
and your Recently Deleted folder. but it keeps a compressed copy in a
Spotlight search index cache. that's how your phone finds photos when
you type a word in search. Apple never clears it. not after 30 days.
not after a year. they told you it was permanently deleted. it wasn't.
checked which apps on my phone had Files and Folders access. 19 apps.
weather apps. QR scanners. PDF readers. a flashlight app from 2021.
any of them could've been reading every photo i ever "deleted" this
whole time.
went from 19 apps to 3 in about a minute.
full step by step is below. takes 2 minutes. bookmark it so you don't
lose it and send it to anyone with an iPhone.
🚨 BREAKING: Tech channel PhoneBuff just released a drop-test video for the iPhone Duo
From the very first drop, the hinge mechanism jammed and couldn’t open fully flat.
By the fourth drop, the impact traveling through the body totally killed the inner screen, the left half lost signal and the right half completely lost touch response.
Although the outer screen still works, the unfolding function is basically disabled.
Guys, holy shit we took the Z Fold 8 for granted.
Samsung is actually ahead of the game.
The iPhone Duo is good but has so many noticeable flaws that daily usage becomes incredibly frustrating.
Jack Dorsey announced a new full-duplex speech model, called Dessa.
Dessa was trained solely on voice conversations, with no text data or pretrained models.
Currently, only demo samples are available, but they far surpass anything else in emotional expression and natural feel.
Voice models will be everywhere 👀
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
https://t.co/EmEZsFRMcF
OpenAI CEO Sam Altman: "I don't even know a dramatic enough word to use… models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff… I no longer think we're gonna be able to just patch all the bugs."
🇩🇪 Four tiny Microduck robots completely stole the show at NVIDIA’s GTC Berlin keynote.
Jensen Huang had them sitting, standing, and taking naps right on stage, proving the future of AI robotics is officially adorable.
Microduck is an open source robot meant for developers and students who want to teach machines new physical skills, tweak them and share the results with others.
Writer: Bri
⚠️ 📱 6600+ sites touchés par une cyberattaque invisible qui vise les iPhones ! Vous n'avez pas besoin de cliquer sur quoi que ce soit pour vous faire pirater ! ➡️ https://t.co/tI2kwX0kRn
‼️The Pentagon quietly built an agency to sabotage foreign tech, Politico reports.
Officials say it makes hacking tools and devises ruses to slip faulty parts into rival weapons.
The Pentagon calls this "simply not true." Its own records say the agency was created on 14 April.
Info Numerama : Orange a enfin identifié la panne, avec l’aide de Nokia.
La panne n’est pas corrigée mais une solution provisoire a été mise en place. C’est ce qui permet aux abonnés de retrouver le réseau, en attendant un plus large correctif.
Panne Orange : selon nos informations, la migration de millions de clients Orange vers un cœur de réseau 5G a échoué ce matin. Les abonnés ne sont plus identifiés par l'opérateur.
👉 https://t.co/KbRNgDpZo6
Le problème pourrait encore durer quelques heures, Orange aurait des difficultés à relancer le système, avec une resynchronisaition par vagues qui pourrait prendre du temps. Je pensais initialement que seuls les abonnés non-5G SA étaient concernés, mais une partie d'entre eux est aussi victime du problème. Difficile donc de savoir exactement ce qui a foiré.
L'opérateur n'a pas encore communiqué publiquement sur les raisons de la panne mais ne devrait pas tarder.
Un geste commercial est très probable en se basant sur les pannes précédentes, mais ça sera après la résolution.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
https://t.co/TW3jrSbB3f