DeepMind uses AlphaProof Code to formally verify Signal's protocol
Gemini Carbon agents produced over six million lines of Lean in four weeks and flagged two reintroduced bugs.
21 stories, newest first · one card per story
Gemini Carbon agents produced over six million lines of Lean in four weeks and flagged two reintroduced bugs.

Paying users get API access at $2 and $10 per million tokens until November 30; Carbon for cyber stays in Fairwind.

It limits compromised AI agents by running them in separate processes with approval for actions

Defense lawyers say HSI used undercovers, drones, and intercepted Signal chats in the Minnesota 15 case.

Calif.io showed the demos in Paris on October 16 and said full details will come later.

A critical RingRTC vulnerability lets malicious callers delay call termination, exposing microphone and camera.

A remote peer can flood the call state machine so the microphone and possibly the camera stay on.

CVE-2026-113380, scored CVSS 4.0 9.3, lets a call peer delay teardown so audio and possibly video continue; no in-the-wild use is known.

A call participant can flood RingRTC’s event queue so hang-up fails; CVSS 9.3, with no known exploitation.

CVE-2026-113380, scored CVSS 9.3, lets a call participant fill a 256-entry queue and block teardown.
CVE-2026-113380, CVSS 9.3, affects RingRTC before 2.72.0; a conceptual proof of concept exists and CISA KEV does not list it.

RingRTC versions before 2.72.0 could let participants hear audio after call end; no exploitation reported.

Canada's C-22 bill could force encryption backdoors and metadata retention, prompting Signal and Psiphon to threaten exit.

Meta’s Muse AI agent collects intimate user and contact data, and users report unwanted disclosures.

Signal 8.30 brings end-to-end encrypted local backups to iOS and desktop plus cross-platform restore between Android and iPhone.

Signal 8.30 completes its end-to-end encrypted backup rollout, bringing on-device backups to iOS and desktop with a unified cross-platform format.

DARPA selected AIxCC winner Xint to autonomously analyze and patch vulnerabilities in Department of War messaging apps like Signal.
Germany's Customs Office eavesdrops on WhatsApp and Signal by linking suspects' accounts to police computers via physical access, phishing, or SMS interception.

Russian nation-state hackers are phishing EU officials via Signal and WhatsApp as espionage shifts from email to messaging apps.

NSA will host a reunion of former Tailored Access Operations hackers as it moves to rebuild and rebrand the elite unit.

Signal adds automatic key verification, a key-transparency system audited by Cloudflare and Trail of Bits that detects key-directory tampering in E2EE chats.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views