1. Thousands of Grok-built apps were open without sign-in
Security researchers say 35,578 of 37,571 live apps they tested from Grok's chat-based app builder opened without authentication. The exposed material reportedly included internal business records, hospital staff data and plaintext passwords; SpaceXSI removed 24 staff-created apps after notification, while the researchers said other users' open apps remained online.
Why It Matters
A generated app can become a real data system before its maker has thought through access controls. Businesses experimenting with no-code and AI app builders should inventory every published app, require authentication, minimize uploaded data and test what an outsider can see.
2. Toyota revives Scion with an American-made mini truck
Toyota has relaunched Scion as an experimental mobility brand and unveiled the KEI-01, a tiny four-wheel-drive utility truck inspired by Japanese kei vehicles. The 25-mph low-speed vehicle is planned for a fleet-focused U.S. pilot in the second half of 2027 and will be assembled in Indiana; retail sales are only a possibility, not a promise.
Why It Matters
The vehicle could give campuses, factories, resorts and municipal fleets a smaller alternative to full-size pickups for short, low-speed work. It is also a practical test of whether Americans want purpose-built micro-mobility that trades highway capability for maneuverability and lower operating costs.
3. New York forces T-Mobile to remove a low-income broadband cap
New York says T-Mobile's $15 affordable home-internet plan slowed customers from 25 Mbps to roughly 600 Kbps after 50 GB—an allowance a typical household could exhaust in about four days. Under a settlement that T-Mobile entered without admitting or denying the findings, the carrier will remove the cap, expand availability beyond 5G-only areas and make the plan easier to find online.
Why It Matters
An advertised low-cost connection is not genuinely useful for school, telehealth or work if routine use makes it nearly unusable. The agreement also shows why consumers should examine data limits and throttling rules, not just headline price and speed.
4. Gemini is now available directly on Apple CarPlay
Google is rolling out the Gemini app globally on Apple CarPlay across supported Gemini Live languages. With an updated iPhone app, drivers can hold hands-free conversations, hear calendar or email summaries, find stops and rehearse ideas; sessions sync back to the phone after the drive.
Why It Matters
Conversational assistants are moving from the phone screen into a setting where voice is often the safest interface. The convenience comes with a privacy judgment, because useful answers may draw on personal email, calendar and location context—and drivers still need to avoid cognitively distracting conversations.
5. A $69 box gives older electronics a smart-home second life
Home Assistant's new Connect AUX-2 can stream audio to older speakers, control compatible televisions, climate equipment and solar inverters through serial ports, extend Bluetooth coverage and host a Z-Wave adapter. The open-source device is available now for $69, with Wi-Fi, Ethernet and Power over Ethernet support.
Why It Matters
Smart-home upgrades do not always require replacing equipment that still works. One small local-control device can reduce e-waste, preserve better-sounding audio gear and keep some household functions off manufacturer clouds.