The Berlin Bassline Brief

The Berlin Bassline Brief

Archives
Log in
Subscribe
November 5, 2026

Berlin Bassline Brief #25: why not rent a White House IP address? Apple notifies spyware victims, data leakage from LLMs, OpenAPPA guardrails, Audio Intelligence

WH IP rentals, German gov spyware hits, LLM fine-tuning data leakage study, OpenAPPA guardrails tool, Apple Watch Audio Intelligence security.

"It's an anthem in a vacuum on a hyperstation
Daydreaming days in a daydream nation"


The signs of political hope continue to accumulate, and the light has turned to gold. I'll take it!

Security, General:
Want to Rent an Internet Address at the White House? https://krebsonsecurity.com/2026/11/want-to-rent-an-internet-address-at-the-white-house/

Security, Apple Platforms:
Apple notified multiple parties, including German government representatives, that they had been targeted with mercenary spyware: https://techcrunch.com/2026/11/02/germany-says-lawmakers-iphones-may-have-been-hacked-with-spyware/

Interesting Paper:
Extracting organization-specific training data from a shipped LLM was an area of research for me at, uh, an unspecified interval in the past (silent-fixed after disclosure, sigh, but I kind of see the logic in that, unfortunately), so I was very interested in this paper entitled "The More You Tune, the More They Spill? An empirical study of data leakage from code models under fine-tuning, quantization, and parameter-efficient adaptation" by Fabio Salerno, Ali Al-Kaswan & Maliheh Izadi https://link.springer.com/article/10.1007/s10664-026-10966-5

Interesting Tool:
OpenAPPA: Deterministic guardrails that don't break agents. https://github.com/archestra-ai/OpenAPPA

Apple Platforms Security Concept of the Week:
"About Audio Intelligence features on Apple Watch Series 12 and Apple Watch Ultra 4" https://support.apple.com/en-us/148354




The Berlin Bassline Brief is curated and commentated by Halle Winkler, CEH, Berlin – get in touch if you could use security consulting, fractional AppSec leadership, or team training in the area of iOS and macOS secure development.

Check out my course Breaking Into the Security Mindset, for engineers and engineering managers, to get to grips with the new application security landscape: https://www.driyourcareer.com/security

RSS

Don't miss what's next. Subscribe to The Berlin Bassline Brief:
← Newer Berlin Bassline Brief #26: I agree with Lanier! Trust stores, chatbot addiction, narc on your own unused RAM to Sam Altman, terminal and script protections Older → Berlin Bassline Brief #24: AI guardrails point at vulns, Apple patches, nuance warfare, ponytail for security, and new Keychain backups rigmarole.
Halle Winkler on LinkedIn
Powered by Buttondown, the easiest way to start and grow your newsletter.