On September 11, an attacker exploited two flaws in Symbiosis Finance's smart contracts: a hidden privilege-escalation bug granting fake admin rights, and a missing check that allowed negative transaction fees. Using just 330 satoshi, roughly 25 cents, the attacker set fees to negative values across 12 transactions, minting 46 billion wrapped syBTC tokens on a network meant to represent real Bitcoin. They then sold the fabricated tokens against legitimate wrapped-BTC pairs like WBTC and cbBTC, draining liquidity pools and converting about $336,000 into cash via Uniswap before being blocked.
Lucid and ridesharing firm Bolt have announced a partnership to bring at least 25,000 autonomous vehicles built on Lucid's midsize platform to European roads, with Bolt owning and operating the fleet. Bolt aims to have 100,000 autonomous vehicles on its platform by 2035, though no launch timeline was given for the Lucid-based robotaxis, which will likely use NVIDIA's Hyperion architecture for Level 4 autonomy.
Amazon is selling the 40mm Bluetooth version of Samsung's Galaxy Watch 8 for $259.99, a $40 cut from its $299.99 list price. The watch runs Wear OS 6 with One UI 8 Watch, offers up to 40 hours of battery life, and includes health tracking features tied to Samsung Health and Galaxy AI.
Microsoft confirmed that Windows 11 version 24H2 Home and Pro editions, along with Windows 10 Enterprise LTSB 2016, will stop receiving security and non-security updates on October 13, 2026. Enterprise and Education editions of 24H2 will continue receiving updates until October 2027. Microsoft is urging affected users to move to Windows 11 25H2, which will install automatically on unmanaged devices.
A community of Linux modders has been reworking the AMD BC-250, a cheap leftover mining GPU built from a cut-down PlayStation 5 chip, into a functional PC gaming card. The latest breakthrough unlocks all 40 of its RDNA 2 compute units and packages AMD's FSR 4 upscaling and frame generation as a Windows DLL that can be dropped into compatible games.
A former embedded systems contractor recounts building a real-time GPS moving-map display in the 1990s for hardware with a 25MHz 486-SX processor lacking a math co-processor, 32MB RAM, and ROM-based software. He used the Hipparchus library from Geodesy, which relied on Voronoi cells and integer math instead of costly floating-point trigonometry, achieving surprisingly high accuracy. The client later ran into financial trouble and the developer, as a contractor without IP rights, lost access to the finished prototype.
Security firm Strix ran an unauthenticated scan against Baseten's public infrastructure and within 25 minutes uncovered a live GitHub personal access token with admin rights to Baseten's core product repo, GitOps repo, and Homebrew tap. The token, tied to a container image built in March 2023, had gone unnoticed for over three years and still granted read/write access to private customer repositories when discovered in July 2026. Baseten's security team confirmed the issue as critical and rotated the token within a day of disclosure.
A malware-as-a-service platform called VectraRAT is being sold on underground markets for roughly $250 monthly, giving buyers a Windows-based remote access implant, command-and-control infrastructure, and a management panel. The package effectively bundles everything needed to compromise and control enterprise Windows systems without requiring technical expertise from the attacker.
Amazon has launched early fall Prime Day discounts that include a record-low $125 pre-order price on Apple's new AirPods 5 with ANC, alongside $150 off all four colors of the 1TB 13-inch M5 MacBook Air, bringing it to $1,449. The retailer is also running cash discounts on AirPods Pro 3, AirTag 2, entry-level Apple Watch Series 12, Apple Watch Ultra 4, and an Anker MagSafe car charger mount.
Cindy Cohn and Bruce Schneier trace how post-9/11 mass surveillance infrastructure, originally justified for counterterrorism, has expanded into routine domestic policing, immigration enforcement by ICE, and private security systems like facial recognition and license plate readers. They highlight that government agencies increasingly rely on private companies' data—including purchasing information directly from data brokers, as confirmed by FBI Director Kash Patel—rather than going through traditional legal channels.
An essay co-authored with EFF's Cindy Cohn traces how post-9/11 mass surveillance tools, originally justified by counterterrorism, have expanded into everyday law enforcement, immigration enforcement, and private security systems like Flock license plate readers and facial recognition at venues such as Madison Square Garden. The piece highlights that most of this data flows from private companies—through both legal orders and outright purchases from data brokers, as FBI Director Kash Patel confirmed to Congress—rather than direct government collection.
An EFF essay co-authored with Cindy Cohn argues that surveillance tools built after Sept. 11 for counterterrorism have expanded far beyond that purpose, now used routinely by agencies like ICE and local police, and increasingly fused with private systems such as facial recognition and license-plate readers. It highlights that most of this data actually originates with private companies, including data brokers, which sell information to agencies like the FBI.
GoKawiil