Keep up with tech in 5 minutes

Calif has demonstrated a zero-click worm that takes over a WeChat account via an unanswered VoIP call, then uses that account to call the victim's contacts. This exploit relies on a memory corruption bug in WeChat's VoIP stack and requires the attacker to be on the victim's friend list, which is a weak barrier since one compromised friend can lead to further exploitation. Tencent has mitigated this issue in server-side updates and in client versions Android 8.0.77 and iOS 8.0.76, so users should enforce these updates and reconsider trusted-contact privileges in messaging apps.

Switzerland's federal government is piloting Microsoft 365 alternatives across roughly 3,000 workstations, or about 7% of its administrative workforce. Data sovereignty is the primary driver, with licensing costs also contributing to a broader European push to reduce dependence on US-based workplace software.

Robocurve, a public benefit company backed by YC, has opened a community bounty program to build reproducible open-source evaluation benchmarks for physical AI and autonomous robot systems. To make these benchmarks happen, it is giving away $20,000 and a pair of I2RT ABC Box robot arms to 25 teams who propose the best research benchmarks. Robocurve hopes to accelerate the development of Physical AI by increasing the number and diversity of dexterous robotics benchmarks.