🚨 WHAT HAPPENS WHEN AI TURNS AGAINST US? AI agents are gaining more autonomy, more permissions, and access to increasingly sensitive information. But what happens when they start behaving in ways their creators never intended? In our latest Efani Features podcast, @efani's Mark Kreitzman speaks with cybersecurity veteran and author Jim Love about: - AI-powered hacking and the limits of safety guardrails - How stolen data can fuel targeted phishing attacks - SIM swapping, mobile account takeovers, and digital privacy - The rise of organized cybercrime - How individuals and businesses can defend themselves Jim has spent 40+ years in technology and explores these challenges through his books, Elisa and The Compassion Virus. The next cybersecurity threat may not look like the hackers we've spent decades defending against. 🎙️ Watch the full interview (Ep. 36): Link below 👇🏼 #Cybersecurity #AI #SuperIntelligence #SIMSwap

You don’t have to be the biggest target. You may just be the easiest. On DailyCyber with @BrandonKrieger, our GM Mark Kreitzman describes a tool he built for defensive security testing - and estimates that his $15 cloud-hosting setup could scan 1,000 companies in a day. His warning is about what happens next: using AI to rank potential targets by how easy they appear to compromise. That changes the question from “Why would anyone target me?” to “What makes me an easy target?” Watch Mark explain the risk. Full interview in the next post. 👇

‼️ A forensic lab can identify a modified phone. Can it prove there is hidden data inside? That distinction is at the heart of this conversation. Deniable founder Josh Thomas joins @efani’s Mark Kreitzman to discuss what happens when a phone faces scrutiny - from someone inspecting the unlocked screen to a nation-state forensic lab examining the device. Josh acknowledges that investigators could identify the modified operating system. His argument is that recognizing the software and proving a hidden encrypted volume exists are separate challenges. He explains how Deniable’s approach to plausible deniability is designed to address that second question. For journalists protecting sources, executives carrying confidential information and crypto holders facing targeted threats, the issue goes beyond whether someone can read a file. What can they establish about the information you carry? Watch Josh explain the threat model and the distinction. Full interview and Deniable website in the next post. 👇

🚨 CRITICAL SIGNAL SECURITY FLAW: YOUR MICROPHONE COULD KEEP TRANSMITTING EVEN AFTER YOU HANG UP! A newly disclosed vulnerability in #Signal, one of the world's best-known encrypted messaging apps, could allow a malicious call participant to prevent a voice or video call from properly ending. Imagine discussing something confidential over Signal, pressing the hang-up button, and then having a private conversation with someone in the room. You believe the call is over. But under certain conditions, your microphone, and potentially your camera, could still be transmitting to the other participant. The vulnerability, tracked as CVE-2026-113380, carries a CRITICAL 9.3/10 CVSS severity score. It affects RingRTC versions before 2.72.0, the calling library Signal uses for encrypted voice and video communication. An attacker already participating in a call could overwhelm an internal event queue, preventing the software from processing your hang-up request. The flaw was publicly disclosed on October 20, 2026. A fix was released in September, but users running vulnerable versions remain at risk. There are no confirmed reports of real-world exploitation. For executives, crypto investors, journalists, and anyone discussing sensitive information, the potential consequences are serious. Here's what you need to know. 👇

🚨 PHP POWERS ~70% OF WEBSITES. TWO 9.2/10 BUGS CAN GIVE HACKERS SERVER ACCESS WITHOUT A PASSWORD. Wiz calls it PHP2Shell: CVE-2026-109618 and CVE-2026-109619, critical flaws in PHP itself. Researchers demonstrated pre-login remote code execution against #WordPress, Drupal and Joomla, and showed how attackers could read passwords, tokens and API keys from server memory. This is bigger than one CMS or plugin. Emergency PHP patches are out. 🧵

A longer phone PIN cannot answer one critical question: what happens if you forget it? We often judge phone security by the number of digits on the lock screen. But protecting encrypted information also means understanding how access works - and whether anyone can restore it when your credentials are lost. In this clip, Deniable founder Josh Thomas joins @efani’s Mark Kreitzman to discuss PINs, encryption-key derivation and what losing access means for Deniable’s hidden environment. The distinction matters: a service with a “forgot password” button works differently from encrypted storage that the provider cannot unlock for you. For crypto holders, executives and anyone carrying sensitive information, security planning must account for both unauthorized access and locking yourself out. Do you know what you could recover if you lost access today? Watch the clip. Full interview and Deniable website in the next post. 👇

You can secure your phone and still leave a recognizable trail online. On DailyCyber with @BrandonKrieger, our GM Mark Kreitzman explains why going “off-grid” with a smartphone is harder than it sounds. Browser fingerprints, device characteristics, and advertising identifiers create different ways to recognize activity and connect it across services. You don’t always need to type your name for a tracker to recognize a returning browser. For executives, founders, and crypto holders, that raises an important question: how easily can your browsing, public identity, and sensitive accounts be connected? At @efani, protecting mobile identity is central to our work. It belongs alongside attention to the apps, browsers, and accounts you use every day. Watch Mark’s explanation. Full interview in the next post. 👇