cKure

■□□□□ Using water machine to get deleted, removed or locked videos.

😒 Claude Code was used to make missile guidance system for 9 months by Houthis using multiple agents to make an offline flight simulator. The accounts linked were banned by Claude. The offline version of flight simulator is however on the loose.

■■□□□ Apple paying for employees who do genocide.

“It's a Pipeline”: From Unit 8200 to Silicon Valley Apple presents itself as the tech company with values. Former employees say the reality is very different. In this episode of Occupied Tech, former Apple employee and founder of Apples Against Apartheid Tariq Ra'ouf speaks to Paul Biggar of Tech for Palestine about Apple's relationship with Israel, allegations of discrimination and retaliation against employees speaking out for Palestine, and the campaign challenging one of the world's most powerful companies. After working at Apple for ten years, Tariq says he was fired after advocating for Palestine and challenging the company's relationship with Israel. He also shares why the fight is deeply personal to him, following the loss of 49 family members in Gaza. Apple has not replied to a request for comment.

■■□□□ AWS Says It Can’t Restore Some Data From Mideast Facilities Struck by Iran Amazon’s announcement is the first indication that some data stored exclusively in Bahrain and the U.A.E could be gone forever https://www.wsj.com/world/middle-east/aws-says-it-cant-restore-some-data-from-mideast-facilities-struck-by-iran-ddcb7e5d

■■□□□ Vilya: Anti Assassination Software (proprietary)

■■□□□ 🇳🇱 The Dutch government just blocked a €100 million deal over one American law that nobody in the Netherlands voted for. An American company tried to buy the cloud provider that runs DigiD, the login system 16 million Dutch citizens use for tax, healthcare, pensions and government services. The data never had to leave the country. The servers never had to move. That was never the point. Because under the US CLOUD Act, the moment a US company owns the keys, a US court can reach the data, no matter where in the world it sits. So the Dutch said no. First deal their screening body has ever blocked. The backdoor isn’t in the code. It’s in the org chart 👀 And if you think this stays in Europe, wait until you hear what Australia already signed.

■■□□□ Be aware that your photos can be accessed without unlocking your Android when you receive a WhatsApp video call. This was discovered by Jose Rodriquez and already reported to Meta and Google. ⚠️ This can be misused as #Stalkerware technique to access photos of a friend or spouse that left the locked phone one the table or charging and someone knows their WhatsApp number to make call to to access their photos.

■■■■□ Agam Rossen's VolAnti is an open-source acoustic drone detector built around an ESP32-S3, four MEMS microphones, e-paper display and LoRa radio. It analyzes the harmonic signature of spinning propellers instead of looking for radio signals, making it interesting for detecting fibre-optic FPV drones that can leave the radio spectrum silent. The concept could be useful for perimeter monitoring, wildlife & environmental monitoring, industrial site awareness, event security, search and rescue operations and early-warning sensor networks, especially where visual detection or conventional radio-based detection is difficult. The creator reports 104 m measured detection, 0.23 s alert latency in its fastest detector, and roughly 18–22 hours of battery life.

■■■■□ Interesting thread on Android APK decompilation. https://x.com/MGAldys4/status/2098541143474749913

A prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper. An LLM with limited resources and attention fails to realize the payload is there, classifies the prompt as benign and passes it off to the target model. The target then notices the payload, extracts it and treats it as further input. This technique is itself not a jailbreak, but it can be combined with one by using a jailbreak prompt as the payload. https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/

■■■□□ How the CIA recruits influencers step one in your browser history.

Chase Hughes spent two decades building behavior profiling and influence systems for military and intelligence work.

■■■□□ Privacy 🔏

On 28 August 2026 Meta said its AI glasses would stop recording the moment the capture light is covered. Days later it confirmed it had disabled the cameras on glasses whose light had been tampered with: fewer than one pair in a thousand, of more than 7 million sold last year. The light is 2 millimetres wide. Meta’s own bystander privacy paper says more. The camera does two jobs: saving photos and videos, and answering questions about what it sees. The light blinks only for the first. For AI features it stays off, because a light that blinked all the time would stop being noticed. So the light tells a bystander that a video is being saved, not that the camera is on. On 9 September Apple announced the Watch Series 12 with two listening features. Live Rewind shows the last 15 seconds of a conversation as text after a double press, with a chime that plays even on silent. Siri Recap takes notes on whole conversations in the background. For those notes, Apple states there is no audible signal because no raw audio is retained. Neither feature is available in the EU at launch. Norway’s government said on 25 August it may ban face recognition in glasses and set up an expert group without a deadline. Oslo banned smart glasses in every municipal school from 27 August. Its deputy mayor for education wrote that a school rule stops the glasses in the classroom, not on the metro and not outside the school gate. Europe’s privacy regulators commissioned a report on whether people accept smart glasses, due in summer 2026. As of 11 September it has not been published. The 3D watch shown is an earlier generation. Cover photo: ItzANormalFioko, CC BY-SA 3.0. Sources: Meta privacy page, 7 July 2026; Meta, Bystander Privacy, July 2025; A. Himel, Threads, 28 Aug 2026; Semafor, 1 Sept 2026; EssilorLuxottica, 11 Feb 2026; Apple, Sept 2026; Datatilsynet, 25 Aug 2026; Utdanningsnytt, 27 Aug 2026; Politico Europe, 8 June 2026.

■■■□□ “Choices Have Consequences”: Inside The Night Hunters’ Retaliatory Cyber Campaign https://stealthmole-intelligence-hub.blogspot.com/2026/09/choices-have-consequences-inside-night.html?m=1

■■■□□ DarkSword iOS Exploit Kit: Russian Spear-phishing Campaign Targeting NATO-aligned Officials. https://www.trellix.com/advanced-research-center/threat-reports/secondsight-threat-hunting-report-september-2026/#darkSword

■■■□□ A bipartisan group of U.S. lawmakers have called for three Indian companies that have hacked and stolen data from Americans to be added to the economic sanctions “entity list.” https://techcrunch.com/2026/09/09/group-of-bipartisan-lawmakers-ask-us-government-to-ban-several-hack-for-hire-firms/ https://x.com/citizenlab/status/2098099162881433639

■■■□□ Educational source‑code reconstruction for the Stuxnet worm, derived from public reverse‑engineering of original malware binaries. https://github.com/Sadpainy/Stuxnet

■■■□□ Zero-Trust phone.

Wiping your phone at customs is a felony. Unless you use the clean hands method. A US citizen was arrested at the border over a secret code that factory reset his phone. He was coming home from vacation. Now he faces up to five years in federal prison under 18 U.S. Code 2232, destruction of property to prevent seizure. The problem was not that his phone wiped itself. The problem was that he triggered it. He handed the agent a code he knew would erase everything. That is destroying evidence while the officer watches. Here is the legal version: a phone that erases itself under conditions you set beforehand, when your hands are nowhere near it. 1. The dead man switch. Set a countdown, and every normal unlock resets it. You touch your phone over 40 times a day, so it never fires. Before your flight, shorten it to 30 minutes. If you get pulled aside and your phone sits in a bin while you answer questions, the timer runs out and everything is erased. You were not there to stop it. 2. The USB trigger. The moment someone tries to pull data off the phone while it is locked, it wipes itself. That is a forensic rig at the border meeting a safety protocol against theft. They plug in, boom. 3. Profiles. Run one boring profile full of dog photos and one only for business. Only the sensitive one wipes. They find the dog photos, nothing looks wiped, no follow-up questions. Set the conditions before you travel and you never pull the trigger. That is the difference between a security feature and a felony. The Zero Trace Phone ships with all three built in.

■■■■□ LG TV https://x.com/MarioNawfal/status/2097490173953012033

■■■■□ Anduril Military Equipment hijacked by Iran.

🇺🇸🇮🇷 Iran announces it monitored, ambushed, and captured the most advanced and classified American Unmanned Underwater Vessel in the Strait of Hormuz The unmanned submarine contains the most advanced and new technology, and was only delivered to the U.S. Navy a year ago, in 2025. It has been captured in a complete state, and will be showcased on state TV in the coming hours.