Today I learned the CIA hid a home movie camera inside a Xerox machine — and trained a real repairman to steal the film right in front of the KGB
THE SO WHAT
The Xerox story is a reminder that the most effective exploits ride on trusted workflows—maintenance visits, office equipment, routine processes. As you automate more with AI and connected devices, assume adversaries will target the boring operational seams, not just your obvious “security” endpoints.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechGlobalFoundries says the US plans to award it $300M in CHIPS Act funding to bolster R&D of silicon photonics tech to power more efficient AI data centers
$300M of CHIPS Act money into GlobalFoundries silicon photonics—per [Reuters](https://www.reuters.com/world/china/us-award-globalfoundries-300-million-develop-faster-ai-chip-links-2026-07-29/)—is a bet that interconnect, not just GPUs, is the next AI data center choke point. If you’re planning multi-year AI infra, start asking vendors about photonics roadmaps and how they’ll change bandwidth, power, and topology assumptions.
Deep & Emerging TechWindows BitLocker is fine. I still don’t trust it with everything
BitLocker loopholes are a reminder that “built-in” encryption is only as strong as your threat model and key management. For high-value endpoints, separate your assumptions: treat BitLocker as a baseline and layer hardware tokens or external key escrow where compromise costs are asymmetric.
Deep & Emerging TechThe cyber risk hiding in plain sight
The real cyber risk isn’t a single zero-day, it’s the sprawl of fragmented, lightly-governed services that no one owns end-to-end. Operators should be mapping their actual attack surface — SaaS, shadow IT, third-party APIs — before buying the next tool.
Deep & Emerging TechThis Smart Door Knob With Fingerprint Reader Keeps Your Kids Out of Your Office
Smart locks like the ThorBolt GK1 push identity and access control all the way to the home office door. For distributed teams handling sensitive data from home, physical access is now part of your security model, not just network and device posture.