logo

Smashing Security podcast #466: Meta sees everything, Copy Fail, and a deepfake gets hired

ID: d4b0ef7f-1072-52d5-bd3e-4985f327ac03

STIX ID: report--d4b0ef7f-1072-52d5-bd3e-4985f327ac03

Feed Name: Graham Cluley

Threat Score
50/100

Date Published: 2026-05-06

Date Updated: 2026-05-07

Author: Graham Cluley

...
...

This episode transcript covers three principal security concerns: Meta smart glasses uploaded audio/video to cloud services where human reviewers at a contractor in Nairobi reportedly viewed sensitive footage (privacy/data exposure and whistleblower-driven contract termination); a Linux kernel elevation-of-privilege vulnerability dubbed “Copy Fail” (CVSS ~7.8) which was found and patched, posing moderate risk to Linux servers if unpatched; and practical deepfake misuse where an actor using face-swap and synthetic assets passed remote interviews and received a job offer, demonstrating an emerging social-engineering/identity-fraud TTP.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.