Nvidia’s law-firm probe, a leaky Grok Build, new EU and UK child-safety rules, a verified Signal and Germany’s drone ban
The cybercrime round-up for 11 November covers Nvidia’s law-firm probe, the Grok Build leak and a mathematical check of Signal. New EU and UK online rules and a German drone ban complete the list.
TF’s coverage includes Forbes, TechRadar, CyberInsider, Euronews and reports on Der Spiegel’s drone story. Each item below names the outlet behind the key claims.
What’s Happening & Why It Matters
Nvidia Hires Wachtell Lipton for the Huang Probe
Nvidia (@nvidia) retained Wachtell, Lipton, Rosen & Katz on 10 November 2026 for an independent investigation into CEO Jensen Huang. The review covers his affair with a woman US officials believe worked for China. Huang admitted the affair in a letter to staff on 8 November.
Forbes says Wachtell advised Indian billionaire Gautam Adani amid fraud accusations. Nvidia reports third-quarter earnings on 17 November, and three House chairmen want a briefing from Huang on 18 November. TF covered the board probe and the briefing request.
TF take: A top-tier firm gives the review credibility with investors and Congress. Scope and reporting lines are still unclear.
Grok Build Leaks Business and Medical Data
Security firm Claroc found 43,601 grok.me addresses for Grok Build apps, per TechRadar, citing Ars Technica. SpaceXSI makes the coding agent. Of the addresses, 35,578 (94.7%) needed no login. About one in ten held sensitive or internal business data. The default sharing setting was “Anyone with the link,” and passive DNS services can list the addresses.
Exposed apps included a hospital staff directory of over 3,500 names and an ICU briefing with patient details. A trucking firm’s recruit database held over 1,000 people. One timesheet app held 18 accounts with plaintext passwords. Internal SpaceXSI material was open as well, including a sales territory map of about 600 accounts and 24 apps.
Claroc told SpaceXSI on 8 November, and the company took the SpaceXSI apps offline within two days. Claroc is alerting other affected owners.
TF take: Vibe-coding platforms must default to private. A random web address is not a lock.
EU & UK Tighten Online Rules for Children, Consumers
The European Commission proposed the Digital Fairness Act on 11 November 2026, per Euronews. Commissioners Henna Virkkunen and Michael McGrath presented it. The act bans dark patterns, lets users switch off endless scroll and autoplay, and eases subscription cancellation. Reminders must arrive before free trials turn into paid plans. Fines reach 6% of global turnover.
The Commission estimates consumers avoid €88.4 billion (about $99.3 billion) in losses from 2025 to 2035. Business costs run at €678 million (about $762 million) a year. Itxaso Domínguez de Olazábal of EDRi says the rules lean on users to switch features off. MEPs and governments must agree the text, and no date exists.
In the UK, the Guardian reports ministers may extend the under-16 social media ban to up to 150 platforms. YouTube Kids and Lego Play could fall inside the scope. Online safety minister Ian Murray offers platforms a route out of scope if they remove harmful features. Culture Secretary Lisa Nandy is expected to lay the rules in December, with a March start.
TF take: Brussels targets design tricks, while London targets age access. Platforms will need a recommender system audit for both.
DeepMind Verifies Key Parts of Signal
Google DeepMind used its AlphaProof Code framework to check the compiled Signal Protocol code, per CyberInsider. The target was libsignal version 0.105.4 for 64-bit Arm. The proofs cover the PQXDH handshake and the Triple Ratchet, which updates message keys. They show confidentiality, authenticity and forward secrecy.
AI agents wrote about 6.5 million lines of proof code in Lean, a proof checker. The work took four weeks. As a test, the team put two fixed bugs back, and the system proved each one broke a security property. Signal CTO Ehren Kret says the work widens the scope of earlier verification.
Limits apply. Side-channel attacks and the rest of the app are outside the scope, and the guarantees depend on stated attacker models.
TF take: Proof of the compiled code closes a gap left by design proofs. Humans still must trust the specifications.
Germany Bans Chinese Drones, Cars From Military Sites
The Bundeswehr barred Chinese commercial drones from bases and training grounds, per Der Spiegel via Militarnyi. The Ministry of Defence confirmed the move, and the Defence Minister is Boris Pistorius. Officials fear data on exercises, bases and weapons could reach Chinese intelligence.
DJI models won a place on a 2024 procurement white list, including the Matrice M30T. No central record shows how many were bought. Lists of banned BYD, Geely and NIO models circulate, and owners must park outside and walk in.
The ministry declined to give drone numbers. One source says military counterintelligence found digital traces hinting at data leaks. TF could not confirm the claim.
TF take: Local purchases without central tracking created the risk. Replacing the fleet with European drones will take budget and time.
TF Summary: What’s Next
Nvidia reports earnings on 17 November, and the Huang briefing follows on 18 November. EU and UK lawmakers will test their child-safety rules in committee and Parliament. Operators of Grok Build apps and Bundeswehr units will audit exposure.
MY FORECAST: Wachtell will deliver findings to the Nvidia board before 31 March 2027. Platforms built with AI coding agents will face a regulator inquiry over default sharing settings in 2027. Germany will publish a replacement drone procurement list by mid-2027.