▶ VIDEO Security Weekly - A CRA Resource

LegacyHive, ACR Stealer, Hugging Face, Route 53, and Kieran Human from Threatlocker - SWN #600

The 'Legacy Hive' proof-of-concept exploits a Windows user profile service vulnerability to escalate privileges, while 'ACR Stealer' malware has surged in enterprise attacks between April and June 2026 using click-fix techniques to harvest browser passwords and authentication tokens. These threats highlight a critical operational gap where attackers measure exploitation time in minutes while defenders remain bogged down by committee-based mitigation processes. The report also notes a shift toward AI-driven vulnerability discovery and the increasing prevalence of malware-as-a-service models targeting enterprise infrastructure.

▶ VIDEO David Bombal

Install GrapheneOS Before Your Phone Becomes the Checkpoint

Apple's voluntary implementation of age verification on iPhones in the UK, despite not being mandated by the Online Safety Act 2023, signals a global trend where governments and corporations restrict device usage through mandatory identity checks. This shift is accelerating with similar proposals in California and Australia, effectively turning purchased hardware into government checkpoints that require users to submit personal data and facial scans. GrapheneOS emerges as a critical alternative by removing these dependencies, ensuring international usability without requiring identification or accounts. The video details the technical process of installing this operating system on Pixel devices to reclaim control over data and browsing freedom.