"Tumble out of bed
And stumble to the kitchen
Pour myself a cup of ambition
And yawn and stretch and try to come to life"

I hope your August is wrapping up nicely! I will be at swiftCon Berlin 2026 on October 8th, giving a lightning talk called "There is no (other) AppSec person: 5 things Swift developers can do against the Vulnpocalypse", and I hope to meet some of you there: https://www.nextappcon.com/swiftcon

Things are still relatively quiet since the Las Vegas conferences, but is it a true negative or a false negative?

Security, General:

Relevant to...just about everything at the moment, here's The Security Autonomy Matrix: Deciding AI Authority https://zeltser.com/security-autonomy-matrix

Security, Apple Platforms:

I usually try to link directly to the research, but I had a hard time reading this one due to the CSS and offers, so h/t to SOCRadar for the great research and writeup (this is a wild threat), and here is a link to an article about it. AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes: https://www.bleepingcomputer.com/news/security/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes/

Interesting Paper:

Also relevant to...just about everything at the moment, here is: “A survey of reward hacking in agentic large language model systems” by Arun Morampudi, Ujval Irrinki, Rahul Grandhi, Venkata Pagadala & Madhavi Maddula https://link.springer.com/article/10.1007/s44163-026-01980-z

Interesting Tool:

weightless is abliteration without the weights; DSV4 on 2x DGX Spark, Qwen3.8 on one: https://github.com/msuiche/weightless

Apple Platforms Security Concept of the Week:

Lost Mode in Find Devices on iCloud.com: https://support.apple.com/en-euro/guide/icloud/mmfc0f0165/icloud