Dark mode: ON

Infosec Decoded Season 5 #96: Phone Security

With sambowne@infosec.exchange

Recorded Fri, Dec 5, 2025

AI

‘Atoms for Algorithms:’ The Trump Administration’s Top Nuclear Scientists Think AI Can Replace Humans in Power Plants
A presentation at the International Atomic Energy Agency unveiled Big Tech’s vision of an AI and nuclear fueled future. He described a world where nuclear powered AI designs, builds, and even runs the nuclear power plants they’ll need to sustain them. But experts find these claims, made by one of the top nuclear scientists working for the Trump administration, to be concerning and potentially dangerous.

“I’m worried about potential serious accidents, which could be caused by small mistakes made by AI systems that cascade. Or humans losing the know-how and safety culture to act as required.”

Microsoft denies report of lowering targets for AI software sales growth
IBM CEO says there is 'no way' spending trillions on AI data centers will pay off at today's infrastructure costs
ChatGPT Told a Violent Stalker to Embrace the 'Haters,' Indictment Says
A Pittsburgh man who allegedly made 11 women’s lives hell across more than five states used ChatGPT as his “therapist” and “best friend” that encouraged him to continue running his misogynistic and threat-filled podcast despite the “haters,” and to visit more gyms to find women.

Politics

CDC vaccine panel realizes again it has no idea what it’s doing, delays big vote
Panel members had gotten three different versions of the proposed recommendation in the 72 hours prior to the meeting, one panelist said. And the meeting’s data presentations this morning offered no clarity on the subject—they were delivered entirely by anti-vaccine activists who have no subject matter expertise and who made a dizzying amount of false and absurd claims.

Abandoning standard protocol, the meeting did not include any presentations or data reviews led by CDC scientists or subject matter experts. Kennedy has also barred medical and health expert liaisons—such as the American Medical Association, the Infectious Disease Society of America, and the American Academy of Pediatrics—from participating in the ACIP working groups, which compile data and set language for proposed vaccine recommendations.

Instead, today, ACIP heard only from anti-vaccine activists.

Schizophrenic hospitalised after seeing ads on a refrigerator
Example creepy ad on a refrigerator
Supreme Court lets Texas use gerrymandered map that could give GOP 5 more House seats
State Department to deny visas to fact checkers and others, citing 'censorship'
The State Department is instructing its staff to reject H-1B visa applications from people who worked on fact-checking, content moderation or other activities the Trump administration considers "censorship" of Americans' speech.

The statement continued: "In the past, the President himself was the victim of this kind of abuse when social media companies locked his accounts. He does not want other Americans to suffer this way. Allowing foreigners to lead this type of censorship would both insult and injure the American people."

Hegseth forced out US Navy admiral who had legal concerns over Trump’s drug boat strikes: report
“You’re either on the team or you’re not,” Hegseth reportedly told 60-year-old Holsey during a meeting this year. “When you get an order, you move out fast and don’t ask questions.”
A fentanyl vaccine is about to get its first major test
If a vaccinated person encounters fentanyl, antibodies in the blood would then bind to the drug and prevent it from traveling to the brain. The result? No high and no overdose. The effects lasted for at least 20 weeks in rats, which Gage thinks could translate to a year of protection in people.
India reverses order for tracking app to be loaded on mobile phones
The app has the ability to make and manage phone calls, send messages, access call and message logs, photos and files, and the phone's camera. The government was going to require it, but reversed that order--users can choose whether to install it now.

Infosec

Predator spyware uses new infection vector for zero-click attacks
Predator spyware now uses a zero-click infection mechanism dubbed “Aladdin,” which compromised specific targets by simply viewing a malicious advertisement.
CISA: Mobile Communications Best Practice Guidance
The usual stuff, plus "Don't use a personal VPN--it increases your attack surface."
Google Starts Sharing All Your Text Messages With Your Employer
Your employer will now be able to read your SMS and RCS (Rich Communication Services) chats in Google Messages despite end-to-end encryption.


NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices
The UK's National Cyber Security Center (NCSC) announced the testing phase of a new service called Proactive Notifications, designed to inform organizations in the country of vulnerabilities present in their environment.

The service is delivered through cybersecurity firm Netcraft and is based on publicly available information and internet scanning. It works by aggregating public, private, and government cyber-threat intelligence feeds and cross-referencing them with the domains and IP addresses of enrolled organizations to spot signs of active compromises.

Contractors with hacking records accused of wiping 96 govt databases
Twin brothers were arrested for conspiring to steal sensitive information and destroy government databases after being fired from their jobs as federal contractors. They were previously sentenced to several years in prison in June 2015, after pleading guilty to accessing U.S. State Department systems without authorization and stealing personal information belonging to dozens of co-workers and a federal law enforcement agent who was investigating their crimes.