Updates to Windows for the Digital Markets Act
Article, Comments

Show HN: Controlling 3D models with voice and hand gestures
Article, Comments

Builder.ai Collapses: $1.5B 'AI' Startup Exposed as 'Indians'
Article, Comments

JITA - Just in Time Assistant

JITA is a comprehensive productivity and task management application for Android that helps you organize your tasks, track your time, and enhance your focus.

🔗 Links:
- Download
- Screenshots
- Features
- Source code
Developer: Mansour Taghizadeh

❤️ Support the Project

If this project makes your life easier, here are a few quick ways to show some love:

⭐ Star the repo/app
☕ Buy a coffee for the developer
🛠 Contribute code, issues, or pull-requests

🏷 Tags: #Android #Productivity

⚡How Do We Know They're Trying to Get Into Your Phone?
@takebackourtech

I was asked this directly — and the answer is simple: companies like Cellebrite market to law enforcement showing exactly which phones they can access. Their internal docs reveal that they can’t get into a Pixel running GrapheneOS without the pincode. That’s why we use this setup.

The Above Phone is built with the highest level of security available to the public.

Listen to the whole episode here: https://above.sh/egXSFK

—
✌️ MORE POSTS | 🗯 CHAT GROUP | 📩 NEWSLETTER | XMPP
Follow 🫶 @takebackourtech

It has been proven that your phone keeps a log of all your locations during Airplane Mode. It still is receiving GPS signals. After the Airplane Mode is turned off, the log is then uploaded.

https://youtu.be/S35_BfymTgE

Time to consider an Made is USA faraday bag!

https://mosequipment.com/collections/keyfob-and-phone-faraday-bags

Show HN: Localize React apps without rewriting code
Article, Comments

A new /e/OS release has arrived!

https://news.itsfoss.com/e-os-3-0/

Arch Linux is planning something interesting. 

https://news.itsfoss.com/arch-linux-sponsorships/

Snapdragon X2 Elite Could Shatter Core Count Records
https://www.gizchina.com/2025/06/04/snapdragon-x2-elite-could-shatter-core-count-records/

🚨 Critical bugs in HPE StoreOnce | 9.8 CVSS flaw allows auth bypass + RCE as root.

👀 One bug (CVE-2025-37093) lets attackers skip login—then chain others for full takeover.

Patch now if you're running pre-4.3.11 versions.

🔗 Full details: https://thehackernews.com/2025/06/hpe-issues-security-patch-for-storeonce.html

🚨 New wave of supply chain attacks hits npm, PyPI & RubyGems.

Hackers are hiding malware in popular open-source packages to:

🔻 Steal crypto wallets
🗑️ Delete entire codebases
🕵️ Exfiltrate Telegram bot data

Full story & package list → https://thehackernews.com/2025/06/malicious-pypi-npm-and-ruby-packages.html

Facebook and Yandex used their Android apps to deanonymize users. They were found secretly bypassing user privacy tools like incognito mode and cookie-clearing features on Android devices. They used hidden communication links between mobile apps (e.g., Facebook, Instagram, Yandex Maps) and browsers to track users by linking browser activity with device identifiers like Facebook accounts or Android Advertising IDs. This allowed them to identify users even in incognito mode or after deleting cookies. Additionally, open network ports created risks for malicious apps to exploit user data.

Chrome blocked the exploited WebRTC feature on May 17, prompting Meta to stop using localhost requests in Facebook Pixel scripts. Yandex had been using similar methods since 2017. These techniques worked in Chrome, Edge, and partially in Firefox but were blocked or restricted in DuckDuckGo and Brave. To prevent such abuses, new specifications like PNA and LNA are being developed to enhance private network security.

No deleted account found from 54 scanned users from this group 🚫👻

🚨 70% of data leaks now happen in-browser.

Legacy DLP tools can’t see what your employees are copy-pasting into AI tools, Slack, or Gmail.

The browser is the new security perimeter.

Read why browser-centric DLP is now a must → https://thehackernews.com/2025/06/your-saas-data-isnt-safe-why.html

🚨 New Chaos RAT variant targets Linux & Windows users

Masquerading as a Linux network tool, the malware spreads via phishing to deploy crypto miners, steal data, and gain full device control.

🔗 Full report: https://thehackernews.com/2025/06/chaos-rat-malware-targets-windows-and.html

Do you know how and where AI is running in your org? That customer service agent isn't just an LLM—it's system prompts, tool calls, RAG data, user logs, and MCP servers.

Every untracked component = a breach waiting to happen.

Why AI asset sprawl goes way beyond model discovery → https://thn.news/ai-assets-sprawl