Apple is accepting new applications for its Security Research Device Program, which provides specially configured iPhones to security researchers. The program's current application window remains open until October 30, 2026.
Preethi Ashwath, an analog integrated circuit designer at Analog Devices, demonstrated the company's new earbuds—which monitor heart and lung health via ear-canal vibrations—to the public at CES last year. Her performance led Analog Devices to tap her for further public-facing events, technical talks on topics like electrostatic discharge, and panel discussions. Ashwath is also an active volunteer with the IEEE Circuits and Systems Society.
Researchers at Eye Security found that Time4Popcorn, a Popcorn Time fork, used an insecure HTTP updater pointing to an abandoned domain that accepted unsigned executables, letting anyone controlling the domain run code as SYSTEM or root. The firm registered the domain and 14 related ones, observed roughly 3 million Windows and 350,000 macOS connections, and between November 2025 and March 2026 pushed remediation code to disable the vulnerable updater, collecting no host data in the process.
Brick, maker of the phone-blocking device Brick, released a new product called Brick Night that automatically blocks selected apps once a phone enters a user-defined bedroom space, using Bluetooth signal strength to detect proximity. Users set custom app-blocking modes and time windows in the Brick app, and apps unblock automatically when the phone leaves the space. The device is battery-powered with batteries lasting at least two years, works with both iOS and Android, and can be shared by multiple users in one bedroom.
A research project called HackiOS, from a group identifying as OOSEX GANG, runs Apple's open-source XNU kernel alongside an unmodified iOS 16.5 user space on a POCO X5 Pro 5G Android phone and in QEMU emulation. The system boots entirely from RAM via fastboot without flashing the device, and reverts to Android on reboot; the project uses custom EFI/UEFI loaders and driver replacements rather than any Apple binaries, pulling IPSW files directly from Apple's CDN at runtime.
Fly.io has introduced the Sprites Block Device (SBD), a new filesystem replacing the modified JuiceFS system it built at launch for its Sprites product. The original setup used a rewritten SQLite metadata backend kept durable with Litestream, storing a single 100GB disk image mounted as a loop device backed by object storage. SBD keeps the same core design—object storage as the root of a Sprite's disk so it can sleep and wake across servers—but replaces the custom tooling with a simpler, more reliable implementation.
Eufy is offering an $80 discount on its Security Wall Light Cam S4, a solar-powered device that combines a motion-activated outdoor light with a swiveling 4K security camera. The camera stores footage locally on 32GB of built-in storage, requires no subscription, and includes on-device AI that can distinguish between people, vehicles, and pets.
A security researcher examined the fallout from the eMudhra Intermediate CA compromise disclosed on October 20, 2026, which prompted warnings from figures like Russ Cox and Scott Helme that IoT and embedded devices unable to update could be permanently vulnerable to man-in-the-middle attacks. The analysis argues that while single-board computers running full operating systems like Linux are indeed at risk and need updates, true microcontroller (MCU)-class devices generally are not directly affected because of how they handle public key infrastructure and certificate bundles.
A tech guide explains how users can determine whether their router still receives firmware updates or has reached end-of-life (EOL) status, after which security vulnerabilities go unpatched. It recommends checking the router's model and hardware revision number against manufacturer websites, noting that companies like ASUS maintain searchable EOL product lists. The guide also suggests reviewing the date of the last firmware update and contacting the manufacturer directly if the support status is unclear.
Apple discontinued the iPhone mini line, but a community of users is reportedly still holding onto their devices rather than upgrading to larger current models. Owners describe accepting tradeoffs like degraded battery life, limited storage and overheating in exchange for keeping the smaller form factor.
In the latest Apple @ Work episode, host welcomes Adam Boynton of Jamf to discuss Apple's recent security patches and updates. The conversation centers on the importance of applying patches to older devices to maintain security across Apple device fleets. The episode is sponsored by Mosyle, an Apple device management platform used by over 45,000 organizations.
Many higher-end robot vacuums now include microphones, cameras and cloud connectivity that let owners check in remotely, generate floor maps and track cleaning histories. That data often passes through manufacturers' servers, meaning sensitive details about a home's layout or household activity could be collected and shared beyond the user's immediate control. Not all devices misuse this data, but the extent of collection and sharing varies widely by model and brand.