Daily briefing
November 5, 2026
2 stories · about 2 minutes
Suspected Russian hackers used old iPhone and Android bugs on fake sites
Security firm Sekoia says a group linked to Russia's foreign intelligence service used already-patched flaws to hit phones that visited booby-trapped sites.
- Sekoia says a group it links, with moderate to high confidence, to Russia's Foreign Intelligence Service attacked iPhone and Android visitors of hacked and fake websites.
- Every flaw used was an n-day, a bug already patched, so only phones that skipped updates could be hit.
- Targets included a fake America250 site, a fake site for a London hotel near Downing Street and a Ukrainian web analytics service.
- The malware did not stay after a restart, and Apple and Google have patched every flaw involved.
Why it matters: Security firm Sekoia says a group linked to Russia's Foreign Intelligence Service attacked iPhone and Android users through hacked sites and fake copies of real ones. The attackers used only flaws that Apple and Google had already patched, so updated phones were safe. Targets included a fake America250 site and a Ukrainian analytics service used by thousands of sites. Installing the latest updates closes every hole in this campaign.
Read the full story →Tencent's Hy4 can now see images and operate a computer
Tencent released the full Hy4 model with image understanding and the ability to click through apps like Blender, at the same price as the preview.
- Tencent released the full Hy4 on November 4, adding image understanding and computer use to a 770 billion parameter model.
- Tencent says the hallucination rate fell from 12.95% in the August preview to 7.2%.
- API prices stay the same as the preview, under $1 per million input tokens, and Tencent Cloud TokenHub has a 50% discount through December 31.
- Open model weights and a system card are promised soon, and a cheaper Hy4 Flash is on the way.
Why it matters: Tencent released the full Hy4 on November 4, adding image understanding and the ability to operate software such as Blender and CAD programs. The 770 billion parameter model keeps the preview's price, and Tencent says its hallucination rate fell from 12.95% to 7.2%. It is available through Tencent's apps and OpenRouter now. Tencent says model weights and a cheaper Hy4 Flash will follow.
Read the full story →