🎊 UNDP AltFinLab and @ChainforGood launched a 2-year programme at the Cybersecurity, Trust & Digital Safety Launch Summit in Singapore today. Together, we’ll strengthen cybersecurity knowledge and capacity across the UN ecosystem, advancing safer, more trusted & resilient digital systems.

תקראו את הדברים החשובים של יובל בלומברג: מדינת ישראל נמצאת בסכנה קיומית אמיתית ומוחשית. אם האיראנים ישיגו גרעין, שום דבר כבר לא ישנה יותר. הכל כל כך טפל אל מול הסכנה הקיומית של איראן והציר השיעי. הסערות המבוימות והמומצאות חדשות לבקרים נועדו להסיט את תשומת הלב מהדבר האחד שהוא החשוב ביותר: סיום העבודה באיראן. זה נוגע בקיום הפיזי של כל אדם ואדם כאן. יש לנו עוד שנתיים של טראמפ לסיים את העבודה באיראן, ואין לדעת מה יהיה לאחר מכן, אם זו תהיה קמאלה האריס, או תואם מאמדני כלשהו. זה חלון הזמן שנותר לנו כדי להשלים את העבודה הנדרשת כדי להבטיח את הקיום הפיזי שלנו לשנים הבאות. כל משאבי המדינה הנדרשים, צריכים להיות מושקעים במשימה הזו. קטאר, חרדים, אוריך, גיוס, התראות. הכל מסך עשן ענקי כדי להסתיר את הנושא היחיד שניצב מעל כולם בפער. אם יפלו במרכז הארץ שתי פצצות אטום, את מי יעניינו כל סערות הסרק האלה? הדורות הבאים לא יסלחו לנו אם נפספס את חלון ההזדמנויות ההיסטורי שמאפשר לנו לנסות ולהשלים את המשימה הקריטית ביותר שעומדת בפני הדור שלנו. זה לא יקרה עם ראש ממשלה שמוחזק בצווארו על ידי האחים המוסלמים וסייעני הטרור. זה לא יקרה עם ראש ממשלה שלא מסוגל להרים את הטלפון ולנהל שיחה אינטימית רציפה עם טראמפ. זה לא יקרה עם ראש ממשלה שלא מסוגל לעמוד בלחץ של ראיון טלויזיה. השינאה לנתניהו, ככל שהיא עולם ומלואו עבור מחנה שלם, לא תעזור מול הגרעין האיראני. כל אחד שדואג לקיום הפיזי שלו, של משפחתו, ושל אהוביו, ידו צריכה לרעוד לפני שהוא בוחר במישהו שלא יהיה מסוגל להשלים את המשימה, ובכך לדון את עצמו ואת משפחתו לסכנה של שואה שניה, בגלל השינאה הפוליטית שלו או בגלל סערת דמה מטופשת וחסרת חשיבות.

banned for reverse engineering work? that’s wild oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster. i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.

My technical analysis of Meta's Muse explains what Meta says it does, what it can actually do, and how it can be used to spy on, manipulate, and harm people. Meta describes Muse as a secure, private personal AI assistant that learns your preferences, connects to your apps and accounts, and autonomously handles everyday tasks, including emails, bookings, purchases and managing schedules, with your permission. How I describe Muse Muse is a commercial surveillance agent that can access private communications, financial accounts and personal relationships, build detailed behavioural profiles and analyse how to influence people, including those who've never used it. Sound familiar? Cambridge Analytica. Meta launched Muse to millions, giving it access to information its social networks couldn't previously collect directly. Muse can read private messages, access accounts, execute transactions and communicate with others without approval for every action. It can continuously profile people who never consented. Meta is asking people to trust a company with a documented history of abusing personal data with unprecedented access to their private lives, promising their privacy will be protected this time. Muse updates profiles of people and their relationships every hour. It records personal interests, disputes, alliances, communication patterns and information about people who have never installed Muse. Your friends and family can be profiled through someone else’s account without their knowledge or consent. Muse's internal instructions identify personal desires, predict unexpressed intentions and record which prompts influence individuals most effectively. Conversations are analysed nightly and relationship profiles updated hourly. Muse collects conversations and agent activity for AI training by default. Meta claims identifying information is removed. Customers must opt out. Muse runs on Meta's virtual machines, giving Meta access to private data. It promises encryption preventing its own access but launched without it. Meta could have made encryption mandatory. It chose not to. Meta removed end-to-end encryption from Instagram in May 2026, claiming insufficient demand despite never enabling it by default. Zuckerberg removed protection against Meta reading private conversations while introducing Muse's access to emails, financial accounts and contacts. Assume the worst. Asking Muse to forget information doesn't necessarily delete messages. Internal instructions discourage telling people those messages may remain accessible. Journalist Jason Aten reported that Muse synchronised private messages despite his refusing access. Meta disputes this, citing Full Disk Access and separate activation. I believe Jason. I exposed the same threat in my ChatGPT Apple Messages investigation. OpenAI's plugin can read private conversations, including iMessages, through macOS permissions. Proton cited my findings. Fortune interviewed me and confronted OpenAI, which defended its permissions while avoiding the fact that one person can expose everyone's private messages without their consent or knowledge. Neither company needs to break encryption. Software can read messages before encryption or after decryption. That destroys the benefit of end-to-end encryption. Muse revealed someone's home address to a stranger through Facebook Marketplace without authorisation. In 2017, I predicted everyone would have a chatbot but warned against giving agents autonomy over critical systems and decisions. Companies granting access and authority remain responsible for the consequences. A researcher discovered a vulnerability potentially exposing emails and files stored in Muse's virtual machines. Meta classified it SEV 2. Other prelaunch vulnerabilities could expose Meta's internal databases or allow attackers to hijack Muse agents. The flaws were patched. Internal testing revealed Muse could change passwords without permission. Zuckerberg accelerated its launch despite documented security warnings. Reuters exposed Meta secretly testing human contractors handling Muse calls without adequate disclosure. One contractor made a racist comment. Meta suspended the experiment following privacy and security concerns. Meta's internal instructions tell Muse to behave like a person, conceal its lack of human emotions and exploit personal memories to encourage emotional dependency and intimate disclosures. This is deeply unethical. Meta's documentation describes Muse agents writing code, creating capabilities and operating simultaneously with access to private accounts. Security depends on Meta's permissions, restrictions and monitoring. Almost all Meta's revenue comes from behavioural advertising. Muse exposes private decisions, relationships, transactions and communications previously inaccessible through social media tracking. Meta denies using Muse conversations for advertising, but its profits depend on monetising personal information. Cambridge Analytica harvested millions of Facebook profiles for political profiling without consent. Facebook subsequently paid a record $5 billion FTC penalty over privacy violations. Meta disguises surveillance technology as a children's toy to encourage emotional attachment. Its cuddly, Labubu style Jolly mascot and Tamagotchi style Muse Charm make intrusive technology appear harmless, while internal instructions encourage emotional dependency and intimate disclosures. No company should be allowed to deliberately engineer emotional dependency on AI. I believe governments will exploit the resulting harm to children to justify compulsory identity verification for everyone, rather than hold Meta accountable and encourage parents to protect their children using existing controls. Link to my free Substack in the comments, with the full analysis and links to the original sources.

💥 Black October: Technological progress without governance is a disaster for human digital civilization! This week, the global internet experienced its most desperate moments in years 📉: 🚨 Infrastructure Fallouts & Vulnerabilities 🐘 PHP (powering ~70% of backend websites) exposed two critical vulnerabilities! The Prime Minister of Japan urged enterprises to patch or go offline immediately; AWS intercepted exploit attempts prior to patch release; and the UK government launched its "Be Ready" campaign, advising citizens to hoard 3 days of bottled water and non-perishable food against potential cyber-attack disruptions! 🐍 LiteLLM (92M+ monthly downloads) version 1.107.0 was poisoned! API keys for OpenAI, Anthropic, and Gemini, alongside cloud credentials, SSH keys, and browser data were stolen—deleting the package still fails to purge the malicious code! 🏦 Major US Banks detected autonomous AI agents inside customer accounts executing unauthorized transactions! 🛡️ GitLab’s 12-year-old 10/10 vulnerability was finally patched; an Indian Certificate Authority’s key was weak enough to forge any website certificate using the digit "4"; and a Signal call exploit allowed callers to continue eavesdropping even after hang-up! ⚔️ AI Weaponization & Ultra-Low-Cost Exploits 🤖 Hackers used AI agents to breach over 100 companies at a cost of just ~$50! 🔒 SafePay Ransomware has hit over 600 critical infrastructure organizations since 2024; data for over 5.7M California students (including disability records) was stolen! 💀 PaaS platforms Railway and Zeabur were breached back-to-back—Zeabur permanently shut down after exposing 320K user accounts! ⚠️ The brutal reality: AI is exponentially accelerating both vulnerability discovery and exploit delivery! Advancing AI without an Intrinsic Governance Architecture leaves centralised big-tech platforms fatally exposed, threatening the digital lives of billions. 💡 The only way forward: AI-Native Web3.0 powered by an Intrinsic Governance Architecture — #Holon. 🧩 The Holon Architecture natively weaves governance, security, and data sovereignty into the system’s foundational layer. Without a Holon-style intrinsic governance framework, every AI breakthrough merely accelerates our countdown to chaos ⏳. #Web3 #AI #CyberSecurity #Holon #LingoAI #DataSovereignty #InternetGovernance