Why can Deniable run on supported Google Pixels - but not your iPhone? The answer goes deeper than downloading an app. Deniable replaces the phone’s operating system. That requires hardware that allows an alternative OS to be installed while preserving essential security protections afterward. In this clip, founder Josh Thomas explains to @efani’s Mark Kreitzman why supported Pixels provide that path: unlock the bootloader for installation, then relock it so verified boot can check the installed system. He also discusses why Apple’s approach does not provide the same installation path on iPhone, and how Deniable builds on @GrapheneOS. Watch Josh explain the hardware requirements. Full interview and Deniable website in the next post. 👇

🚨 Microsoft Authenticator could hand a malicious Android app access to your entire work account. The app needed ZERO permissions! @EnclaveAI researchers demonstrated "AuthMask", a flaw that let an installed malicious app pose as a trusted @Microsoft app and obtain authentication tokens. In their tests, those tokens unlocked the user’s work mailbox, files and calendar without another approval prompt. An app you never authorized to read your emails could gain access through the software you trusted to protect your sign-ins. The attack required a malicious app on the same Android device, a vulnerable Authenticator installation and a signed-in work account. Microsoft has patched CVE-2026-80097 - all versions before 6.2606.4246 are affected. Update your Authenticator app now! If you manage employee phones, verify that the update reached them.

🚨 70,000+ CREDENTIALS EXPOSED. ENTERPRISE FIREWALLS BREACHED. HACKERS ARE GETTING INSIDE CORPORATE NETWORKS WORLDWIDE. A massive cyberattack campaign has compromised enterprise network security infrastructure, including devices from @Fortinet and @PaloAltoNtwks. According to a joint investigation by Group-IB and NyxLab, a cybercriminal known as "k0t" has been exploiting vulnerable firewalls and VPN appliances to infiltrate organizations, steal credentials, establish persistent remote access, and exfiltrate sensitive data. The researchers identified more than 70,000 exposed credentials associated with network devices and LDAP dumps. The scale is alarming: - 38% of victims were in Asia Pacific. - 31.9% were in Latin America. - 15.8% were in Europe. - 12.7% were in the Middle East and North Africa. A significant portion of the compromises occurred between February and June 2026. Attackers exploited known vulnerabilities, including CVE-2025-64446 and CVE-2026-0257, alongside brute-force attacks against weak credentials. Once inside, they used legitimate remote-management tools to maintain access, harvested additional credentials, and transferred stolen information to cloud storage services. The threat actor has also been linked to ransomware groups Qilin and The Gentlemen, although the exact nature of those connections remains unclear. Why should ordinary employees, executives, and high-net-worth individuals care? Because these corporate networks support the email accounts, authentication systems, cloud applications, and remote connections people rely on from their smartphones. A compromised enterprise network can put sensitive information and corporate identities at risk even when an employee's phone hasn't been hacked. And for high-value targets, stolen corporate credentials and identity information can become the starting point for more targeted attacks. Here's how this threatens mobile security and what you should do. 👇

🚨 WHAT HAPPENS WHEN AI TURNS AGAINST US? AI agents are gaining more autonomy, more permissions, and access to increasingly sensitive information. But what happens when they start behaving in ways their creators never intended? In our latest Efani Features podcast, @efani's Mark Kreitzman speaks with cybersecurity veteran and author Jim Love about: - AI-powered hacking and the limits of safety guardrails - How stolen data can fuel targeted phishing attacks - SIM swapping, mobile account takeovers, and digital privacy - The rise of organized cybercrime - How individuals and businesses can defend themselves Jim has spent 40+ years in technology and explores these challenges through his books, Elisa and The Compassion Virus. The next cybersecurity threat may not look like the hackers we've spent decades defending against. 🎙️ Watch the full interview (Ep. 36): Link below 👇🏼 #Cybersecurity #AI #SuperIntelligence #SIMSwap

You don’t have to be the biggest target. You may just be the easiest. On DailyCyber with @BrandonKrieger, our GM Mark Kreitzman describes a tool he built for defensive security testing - and estimates that his $15 cloud-hosting setup could scan 1,000 companies in a day. His warning is about what happens next: using AI to rank potential targets by how easy they appear to compromise. That changes the question from “Why would anyone target me?” to “What makes me an easy target?” Watch Mark explain the risk. Full interview in the next post. 👇

‼️ A forensic lab can identify a modified phone. Can it prove there is hidden data inside? That distinction is at the heart of this conversation. Deniable founder Josh Thomas joins @efani’s Mark Kreitzman to discuss what happens when a phone faces scrutiny - from someone inspecting the unlocked screen to a nation-state forensic lab examining the device. Josh acknowledges that investigators could identify the modified operating system. His argument is that recognizing the software and proving a hidden encrypted volume exists are separate challenges. He explains how Deniable’s approach to plausible deniability is designed to address that second question. For journalists protecting sources, executives carrying confidential information and crypto holders facing targeted threats, the issue goes beyond whether someone can read a file. What can they establish about the information you carry? Watch Josh explain the threat model and the distinction. Full interview and Deniable website in the next post. 👇

🚨 CRITICAL SIGNAL SECURITY FLAW: YOUR MICROPHONE COULD KEEP TRANSMITTING EVEN AFTER YOU HANG UP! A newly disclosed vulnerability in #Signal, one of the world's best-known encrypted messaging apps, could allow a malicious call participant to prevent a voice or video call from properly ending. Imagine discussing something confidential over Signal, pressing the hang-up button, and then having a private conversation with someone in the room. You believe the call is over. But under certain conditions, your microphone, and potentially your camera, could still be transmitting to the other participant. The vulnerability, tracked as CVE-2026-113380, carries a CRITICAL 9.3/10 CVSS severity score. It affects RingRTC versions before 2.72.0, the calling library Signal uses for encrypted voice and video communication. An attacker already participating in a call could overwhelm an internal event queue, preventing the software from processing your hang-up request. The flaw was publicly disclosed on October 20, 2026. A fix was released in September, but users running vulnerable versions remain at risk. There are no confirmed reports of real-world exploitation. For executives, crypto investors, journalists, and anyone discussing sensitive information, the potential consequences are serious. Here's what you need to know. 👇