

Apple sent threat notifications to German MPs and ministers saying mercenary spyware was aimed at their iPhones. The alerts started landing on 29 October. Digital minister Karsten Wildberger confirmed it and said it is something that "unfortunately happens from time to time." That is the line that stuck with me. A spyware campaign against lawmakers is treated as a known hazard of the job. The cyber agency BSI is not saying patch and move on. It tells recipients to assume the phone may be compromised, set up a new device with a new number, and skip the full backup restore. When the official fix is replace the phone and the number, the threat model is not a bug. It is a budget with a government's name on it. https://t.co/fe20ywZ4ox

The New York Times reports that Alice Huang, an executive at Singapore AI firm Megaspeed with close ties to Nvidia CEO Jensen Huang, was allegedly passing information to Beijing as a Chinese intelligence asset. US intelligence reportedly briefed Trump more than a year ago. Per the Times, he chose not to act, to avoid hurting Nvidia sales or antagonizing China. Megaspeed was already under scrutiny over whether it helped route about $2 billion in Nvidia chips to China. The claims rest on anonymous sources and are unproven.

BTCPay Server releases emergency update 2.4.7 to patch one critical and several medium-severity security vulnerabilities. The flaws were found through Anthropic's frontier OSS scanner and responsibly disclosed to the team. BTCPay Server is urging users to update as soon as possible. Server admins can update from Server Settings, then Maintenance, then the Update button. Docker users need to log in over SSH and run the btcpay-update script. Node platforms like Umbrel and Start9 users should install the update once their platform makes it available.


