🔒 The encrypted data can remain on your phone - even after the key needed to read it is destroyed. That is the mechanism Deniable founder Josh Thomas explains in this clip with @efani’s Mark Kreitzman. According to Josh, Deniable’s duress PIN destroys the encrypted, or “wrapped,” master key protecting the hidden volume. The stored data remains ciphertext, but the key needed to decrypt it can no longer be recovered through that mechanism. This is cryptographic erasure: making encrypted information inaccessible by destroying the key rather than overwriting every file. Josh also explains how Deniable is designed to leave the public phone environment accessible afterward. Watch Josh explain what is destroyed, what remains and why it matters. Full interview in the next post. 👇

🚨 Android spyware can steal the Telegram password you added to STOP account takeovers, then hide an attacker’s session from your device list. Researcher Ovi uncovered uCreator, a rentable surveillance platform that embeds malicious code inside working copies of messaging apps. Its @telegram module can capture your two-step verification password before hashing, read chat data available to the app, and manipulate account sessions. Its WeChat component can extract account data for cloning. Ovi identified code support for roughly 20 target apps. That measures the platform’s capabilities; the investigation did not establish a reliable victim count. The entry point matters: victims install a tampered app or use the operator’s “Onion Box” container. The findings do not mean everyone using official Telegram or WeChat apps is compromised. A familiar interface and working messages can make a malicious copy convincing. You could keep chatting while the software exposes your account. Bookmark this thread before installing another messaging APK. And follow us to stay updated with such threats out there!

Why can Deniable run on supported Google Pixels - but not your iPhone? The answer goes deeper than downloading an app. Deniable replaces the phone’s operating system. That requires hardware that allows an alternative OS to be installed while preserving essential security protections afterward. In this clip, founder Josh Thomas explains to @efani’s Mark Kreitzman why supported Pixels provide that path: unlock the bootloader for installation, then relock it so verified boot can check the installed system. He also discusses why Apple’s approach does not provide the same installation path on iPhone, and how Deniable builds on @GrapheneOS. Watch Josh explain the hardware requirements. Full interview and Deniable website in the next post. 👇

🚨 Microsoft Authenticator could hand a malicious Android app access to your entire work account. The app needed ZERO permissions! @EnclaveAI researchers demonstrated "AuthMask", a flaw that let an installed malicious app pose as a trusted @Microsoft app and obtain authentication tokens. In their tests, those tokens unlocked the user’s work mailbox, files and calendar without another approval prompt. An app you never authorized to read your emails could gain access through the software you trusted to protect your sign-ins. The attack required a malicious app on the same Android device, a vulnerable Authenticator installation and a signed-in work account. Microsoft has patched CVE-2026-80097 - all versions before 6.2606.4246 are affected. Update your Authenticator app now! If you manage employee phones, verify that the update reached them.

🚨 70,000+ CREDENTIALS EXPOSED. ENTERPRISE FIREWALLS BREACHED. HACKERS ARE GETTING INSIDE CORPORATE NETWORKS WORLDWIDE. A massive cyberattack campaign has compromised enterprise network security infrastructure, including devices from @Fortinet and @PaloAltoNtwks. According to a joint investigation by Group-IB and NyxLab, a cybercriminal known as "k0t" has been exploiting vulnerable firewalls and VPN appliances to infiltrate organizations, steal credentials, establish persistent remote access, and exfiltrate sensitive data. The researchers identified more than 70,000 exposed credentials associated with network devices and LDAP dumps. The scale is alarming: - 38% of victims were in Asia Pacific. - 31.9% were in Latin America. - 15.8% were in Europe. - 12.7% were in the Middle East and North Africa. A significant portion of the compromises occurred between February and June 2026. Attackers exploited known vulnerabilities, including CVE-2025-64446 and CVE-2026-0257, alongside brute-force attacks against weak credentials. Once inside, they used legitimate remote-management tools to maintain access, harvested additional credentials, and transferred stolen information to cloud storage services. The threat actor has also been linked to ransomware groups Qilin and The Gentlemen, although the exact nature of those connections remains unclear. Why should ordinary employees, executives, and high-net-worth individuals care? Because these corporate networks support the email accounts, authentication systems, cloud applications, and remote connections people rely on from their smartphones. A compromised enterprise network can put sensitive information and corporate identities at risk even when an employee's phone hasn't been hacked. And for high-value targets, stolen corporate credentials and identity information can become the starting point for more targeted attacks. Here's how this threatens mobile security and what you should do. 👇

🚨 WHAT HAPPENS WHEN AI TURNS AGAINST US? AI agents are gaining more autonomy, more permissions, and access to increasingly sensitive information. But what happens when they start behaving in ways their creators never intended? In our latest Efani Features podcast, @efani's Mark Kreitzman speaks with cybersecurity veteran and author Jim Love about: - AI-powered hacking and the limits of safety guardrails - How stolen data can fuel targeted phishing attacks - SIM swapping, mobile account takeovers, and digital privacy - The rise of organized cybercrime - How individuals and businesses can defend themselves Jim has spent 40+ years in technology and explores these challenges through his books, Elisa and The Compassion Virus. The next cybersecurity threat may not look like the hackers we've spent decades defending against. 🎙️ Watch the full interview (Ep. 36): Link below 👇🏼 #Cybersecurity #AI #SuperIntelligence #SIMSwap

You don’t have to be the biggest target. You may just be the easiest. On DailyCyber with @BrandonKrieger, our GM Mark Kreitzman describes a tool he built for defensive security testing - and estimates that his $15 cloud-hosting setup could scan 1,000 companies in a day. His warning is about what happens next: using AI to rank potential targets by how easy they appear to compromise. That changes the question from “Why would anyone target me?” to “What makes me an easy target?” Watch Mark explain the risk. Full interview in the next post. 👇