Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones
2026-06-05T20:52:10Z•dc3dd7ecd31cec0fcbd36709fc5e17835bb8b0ad86f2e8407cf42b5b3e9a5876
FROSTGitHubJavaScriptMetaSSDTeamPCPbiometricsbrowserdeepfakeface-recognitionphishingprivacyside-channelsmart-glassessoftware-supply-chainspear-phishingstalking-risksupply-chaintrackingweb-tracking
What happened
Multiple WIRED reports describe high-impact privacy and supply-chain risks: Meta quietly embedded unreleased face‑recognition code into its smart‑glasses platform meant to identify people using biometric templates stored on users’ phones (significant privacy/stalking and abuse risk); researchers disclosed FROST, a browser‑exploitable SSD activity side‑channel that lets websites infer disk activity via simple JavaScript (enables new tracking/fingerprinting and potential leakage of local operations); and TeamPCP is conducting widespread software‑supply‑chain poisoning on GitHub affecting many un
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- wired_security
- Record identifier
- dc3dd7ecd31cec0fcbd36709fc5e17835bb8b0ad86f2e8407cf42b5b3e9a5876
- Enrichment time
- 2026-06-05T20:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.