Security & Infrastructure Hardware attestation was supposed to stop malware. It now stops users from their own devices. Apple, Google, and TPM enforce platform monopoly…
Security & Infrastructure Chrome silently downloaded a 4GB Gemini Nano model on millions of devices without consent. The browser is now an LLM supply-chain risk.…
Security & Infrastructure California will ticket driverless cars for traffic violations. The legal subject is the fleet operator, not a human driver. AV insurance and…
Security & Infrastructure Flock surveillance staff accessed a childrens gym camera as a sales demo. The audit layer required to prevent this does not exist…
Security & Infrastructure Shai-Hulud malware in PyTorch Lightning hijacks GPU compute and exfils cloud credentials. ML supply chains are 2026s soft target. Every PyTorch user…
Security & Infrastructure CVE-2026-31431 Copy Fail leaks clipboard memory across application boundaries. Affects macOS Windows Linux. 30-year-old class of bug. Real fix: per-app pasteboard scoping.
Security & Infrastructure GitHub CVE-2026-3854 RCE forces a rethink of source code trust. Sigstore + reproducible builds + SBOM are now non-optional. Heres the 24/7/30-day…
Security & Infrastructure iOS has multiple legitimate background re-install mechanisms most users dont know about. Apples user owns the device promise has real gaps. Heres…
Security & Infrastructure A stable Firefox identifier links all your Tor Browser identities. Browser-level anonymity is fundamentally broken. At-risk users need VM isolation, not patches.
Security & Infrastructure Brussels age verification app was broken in 2 minutes. The problem isnt technical — real ZK solutions exist. Its government procurement that…