Berlin Bassline Brief #21: OpenAI sued over Hugging Face but not by them, Apple RCE patched, epistemic trustworthiness better than moral, PHANTOM-B cards, restrict Apple Intelligence
Berlin Bassline Brief #21: OpenAI sued over Hugging Face hack, urgent Apple RCE patch, epistemic AI trust paper, PHANTOM-B wallet card, and restricting Apple Intelligence access.
"Now I can see other things—crisp and sparkling days, long pleasant evenings, cheery fires. Good work shall be done this winter. Life shall be lived well. The end of the summer is not the end of the world. Here's to October."
Welcome to autumn! This is my favorite time of year, and not only because the immoderate spills of Boston ivy which cover the walls in the secret courtyards of old Berlin buildings turn red, and remind me of New England.
A reminder that my values-first AppSec course with Cate Huston, for SWEs and their managers, begins on October 12th! https://www.driyourcareer.com/security
Security, General:
A California legal nonprofit is suing OpenAI for the Hugging Face hack; a healthy development: https://www.wired.com/story/openai-sued-over-the-hugging-face-hack/
Security, Apple Platforms:
RCE on multiple Apple OSes emergency-patched due to exploit in the wild, please patch: https://nvd.nist.gov/vuln/detail/cve-2026-86950
Interesting Paper:
"Why We Need Epistemically, Not Morally, Trustworthy AI: Decision Support and the Need for Collective Accountability" by John Dorsch, Maximilian Moll & Ophelia Deroy: https://link.springer.com/article/10.1007/s13347-026-01166-6
Interesting Tool:
CyberSec Games have made a wallet card for Adam Shostack's new PHANTOM-B framework, which asks "What can go wrong with the LLM parts of this system?": https://www.linkedin.com/posts/a-serious-idea-now-in-wallet-sized-form-share-7508246168162955264-ph0R/
Apple Platforms Security Concept of the Week:
Turn off and restrict access to Apple Intelligence features on Mac: https://support.apple.com/guide/mac-help/turn-restrict-access-apple-intelligence-mchlb2e44f94/mac