❗️🚨 Zcash crashes nearly 50% after an AI-powered white-hat researcher, using Claude Opus, found a critical flaw in Zcash's privacy pool (Orchard) that could mint unlimited, undetectable counterfeit ZEC.
It went unnoticed for 4 years until the emergency patch on June 1...
It went unnoticed for 4 years until the emergency patch on June 1...
❤6🥰3🔥2
❗️🚨 An Israeli company has backdoored hundreds of millions of households through countless Smart TV apps, and they're quietly turning Samsung and LG TVs into exit nodes for AI web-scraping. Your TV is relaying strangers' web traffic from your home IP, your bandwidth, your address attached to whatever those scraping jobs touch.
Roku, Fire TV and Google TV banned the practice. Samsung and LG didn't. The culprit is Bright Data's proxy SDK, which rides inside Tizen and webOS apps, 200+ on webOS alone. Datacenter IPs get blocked, home IPs don't.
Include Security reverse-engineered the SDK and found its relay protocol has no message signing, authentication, or device attestation. Their words: less secure than typical malware command-and-control.
To make things worse, they found that in iOS the relay tunnel binds straight to the physical network interface, so it routes around any VPN the user is running.
Bright Data's config also ships per-country tiers. Devices in Uzbekistan and Oman are cleared to relay down to 1% battery, with data caps up to 60x the worldwide default.
Before the BaCkDoOrEd replies land: technically you agreed. In practice you were enrolled into a global proxy network you were never given the information to refuse. And these exit nodes drag down your IP's reputation, potentially leaving you with blocks from providers.
Read: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/
Roku, Fire TV and Google TV banned the practice. Samsung and LG didn't. The culprit is Bright Data's proxy SDK, which rides inside Tizen and webOS apps, 200+ on webOS alone. Datacenter IPs get blocked, home IPs don't.
Include Security reverse-engineered the SDK and found its relay protocol has no message signing, authentication, or device attestation. Their words: less secure than typical malware command-and-control.
To make things worse, they found that in iOS the relay tunnel binds straight to the physical network interface, so it routes around any VPN the user is running.
Bright Data's config also ships per-country tiers. Devices in Uzbekistan and Oman are cleared to relay down to 1% battery, with data caps up to 60x the worldwide default.
Before the BaCkDoOrEd replies land: technically you agreed. In practice you were enrolled into a global proxy network you were never given the information to refuse. And these exit nodes drag down your IP's reputation, potentially leaving you with blocks from providers.
Read: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/
1💩16🤬11❤3🥰1😁1
‼️🚨 BREAKING: Sony PlayStation's age-verification partner Yoti is reporting GrapheneOS users to authorities for using GrapheneOS, due to "past security concerns."
Yoti is also used by Instagram, Facebook Dating, Epic Games, the UK Post Office, and major retailers across the UK, US and EU, but this particular case reportedly involves Sony PlayStation age verification.
Yoti is also used by Instagram, Facebook Dating, Epic Games, the UK Post Office, and major retailers across the UK, US and EU, but this particular case reportedly involves Sony PlayStation age verification.
12🤣19💩12❤3
‼️🚨 Yet another Meta fuck-up: its account recovery function allows unauthenticated access to full account PII, including emails and phone numbers, from just a username. We verified the claim and found social media and wine-app accounts belonging to several public figures. We'll start with footballer Kylian Mbappé, who has a hidden TikTok account.
Then on to footballer Cristiano Ronaldo's wife, Georgina Rodríguez, who has a Vivino account ;-) I thought her husband only endorsed drinking water.
And she also has a hidden TikTok account.
That said, this looks real to us.
Let's see what Meta has to say.
Then on to footballer Cristiano Ronaldo's wife, Georgina Rodríguez, who has a Vivino account ;-) I thought her husband only endorsed drinking water.
And she also has a hidden TikTok account.
That said, this looks real to us.
Let's see what Meta has to say.
11😁8❤7
We were also able to confirm the accounts of Meta CEO Mark Zuckerberg. Someone exploited the same vulnerability, which allegedly gave them access to the PII of any Meta user.
10😭19👍7😁3❤1🤣1
‼️ Leaked internal documents written by Microsoft’s top executives reveal that the plan is to “make people addicted” to its new AI, “Scout.”
Microsoft CEO Satya Nadella seems to have no idea what is going on in his own company, telling staff that he was “not sure what this document is or who is writing and leaking this nonsense.”
Another Microsoft employee said, “Luckily for us, Microsoft is pretty bad at making addictive products compared to some of the other big companies.”
It’s also remarkable that Nadella claimed Microsoft could not touch OpenClaw because doing so would be like “launching a virus”… And yet here we are, as Microsoft’s own document states: “It takes actions on a real desktop, and it keeps working when you are not watching.”
Microsoft CEO Satya Nadella seems to have no idea what is going on in his own company, telling staff that he was “not sure what this document is or who is writing and leaking this nonsense.”
Another Microsoft employee said, “Luckily for us, Microsoft is pretty bad at making addictive products compared to some of the other big companies.”
It’s also remarkable that Nadella claimed Microsoft could not touch OpenClaw because doing so would be like “launching a virus”… And yet here we are, as Microsoft’s own document states: “It takes actions on a real desktop, and it keeps working when you are not watching.”
10🤣13💩3🔥2🤯2