Apple Just Made a Billion Users Furious. Here's Why.

Morning, crowd.

What Actually Happened This Week (And Why You Should Care)

• Apple just put ads in iOS that won't die — Persistent notifications for iCloud+ and Apple Music in Settings that refuse to dismiss. 729 points on Hacker News. Users are furious.

• OpenAI just solved a 21-year-old cipher — GPT-6 Astra broke an Enigma-grade message that stumped researchers since 2005. That's not hype, that's actual progress.

• "We hacked the FBI" is not a joke anymore — Hackers claim they have data on all FBI employees. 624 points HN; the security community in full alarm.

• Cisco has two actively exploited zero-days — One with a perfect 10/10 severity score. Your infrastructure is probably at risk.

Read time: 4 mins

Elon's Building Something in Tesla's Secret Labs.

Something is being built inside Tesla's facilities that almost no one is talking about — yet.

According to insider sources, Elon Musk has quietly developed a he claims will be "10x bigger than the largest product in history." The target launch date is July 22. And when it drops, the window to position quietly will already be closing.

Most investors will hear about this after the stock has moved. You don't have to be one of them. Our analyst named positioned to ride the launch — with entry guidance, price targets, a bonus 4th supply-chain pick, and a 3-phase playbook for when to buy, add, and take profits.

FRESH NEWS

Here's the moment the internet collectively lost its mind: Apple added persistent red notification badges to iOS Settings. The badges promote iCloud+ upgrades, Apple Music trials, and AppleCare+. And they don't go away.

The worst part? Users who already pay for these services are still seeing the ads. And there's no "dismiss forever" button. Many users report that even clicking dismiss doesn't clear the alert. So you get a red dot sitting there for weeks, pestering you every time you open Settings.

This is genuinely shocking because Apple built an entire brand identity on "privacy is paramount" and "user experience first." And now they're using the most aggressive advertising tactic in mobile—the red notification badge—to push service subscriptions. This isn't a feature. This is desperation masquerading as upselling.

The founder implication? Platform policies change overnight, and when they do, they're designed to benefit the platform owner, not the user. If you're building an app ecosystem or counting on platform goodwill to reach users, this week just reminded you why owning your own channel matters more than ever.

GPT-6 Astra (the new reasoning model everyone's watching) just cracked an Enigma-variant cipher that's been unsolved since 2005.

That's the technical story. But here's the founder story: the gap between "advanced AI can do X" and "founders can actually build Y on top of it" just got smaller.

What Astra cracked is pattern recognition at a level that previously required domain specialists. If you're building on top of reasoning models—whether that's in security research, cryptography, financial analysis, or scientific discovery—the capability floor just shifted up. Hard.

The counter-narrative in Hacker News was sharp: "Cool, but can it actually solve useful problems or is this just benchmark theater?" Fair point. But the fact that GPT-6 Astra solved something 20-year specialists couldn't suggests the benchmark might actually reflect real-world capability now.

For founders: If your product relies on "only experts can do this," you need to rebuild fast. Reasoning models are coming for expertise-based moats.

On Hacker News, a 624-point thread opened with: "We hacked the FBI: Hackers say they have data on all FBI employees."

The cybersecurity community's reaction was grim-faced efficiency. If true, this isn't just an incident—it's a pattern validation. The FBI infrastructure, which most of the security world assumes is fortified beyond belief, apparently has holes big enough to drive forensic vans through.

We don't know scope yet. We don't know if it's actually all employees or a subset. But the claim itself signals something darker: if federal agencies are breached, everyone is vulnerable.

Security isn't theoretical anymore. Cisco just disclosed two actively exploited zero-days:

🔴 CVE-2026-76460 — Cisco Identity Services Engine. 10/10 severity. Unauthenticated remote code execution.

🔴 CVE-2026-76461 — Cisco Secure Email Gateway. Critical. Also actively exploited.

The timing? Right now. Not "someone will probably exploit this eventually." Right now, attackers are using these to breach customer networks.

Cisco hasn't said how many customers are under active attack. But if you run enterprise infrastructure, this is the moment you either patch or go dark. There's no middle ground.

Founder angle: Your SaaS depends on infrastructure that's actively under attack by sophisticated actors. The surface area just expanded. This is the week to validate your security posture or face a breach that derails everything.

Quick Hits

🚀 Revolut hacked, crypto whales targeted — The breach details emerged this week. Attackers specifically targeted high-value crypto account holders. If you're holding in Revolut, this is worth understanding.

💣 Supply chain gets shredded again — Bitwarden, Trivy (security scanning), Checkmarx, and other major tools got compromised this year. Updates auto-deployed malware. The lesson: every tool you install is a potential backdoor. This is the new normal.

🛡️ 150 million driver's licenses leaked — IDScan breach exposes almost every driver in North America with photos. The dark web has a searchable database. Your face + address + license details = out there.

🔐 Google researcher infiltrated TeamPCP gang — Undercover operation by Austin Larsen (Google/Mandiant) inside one of the year's most prolific supply-chain hacking groups. This is how the security response actually works: infiltration, disruption, attribution.

Here's What The Noise Means

This week confirmed something the security community has been shouting about: control has shifted to attackers.

Cisco zero-days are exploited before patches. FBI infrastructure gets breached. Apple cheapens its own user experience chasing services revenue. Open source tools become vectors. Crypto exchanges lose customer data.

The common thread? Systems built by institutions you're supposed to trust are failing under pressure from attacks you can't see.

For founders: You're competing in an environment where:

• Platform trust is degrading (Apple adds ads, everyone considers alternatives)

• Infrastructure is actively compromised (Cisco, supply chain, FBI)

• User data isn't safe anywhere (Revolut, IDScan, DentaQuest, CareCloud)

This creates opportunity and urgency. Companies building privacy-first alternatives, decentralized infrastructure, and user-owned security tools are about to get a decade's worth of validation compressed into 24 months.

The question isn't "should we build infrastructure?" It's "can we move fast enough before the current systems finish breaking?"

Hunt accordingly. ☕

See you soon,

Jose, Alberto, and the Founderscrowd editorial team