Disneyland Now Uses Face Recognition on Visitors

A roundup of security stories: a newly disclosed Linux local privilege‑escalation exploit dubbed “CopyFail” (CVE-2026-31431) can yield root on many PCs and servers and has been patched but remains widely unmitigated. Other notable items include Disneyland’s deployment of face‑recognition tech, an Anthropic Mythos unauthorized access incident, a massive stalkerware/spyware exposure (90,000 phone screenshots), a 2‑minute bypass of the EU age‑verification app, Mozilla and NSA use/testing of AI tools like Mythos, and disclosures about nation‑state and AI‑assisted fraud and malware (Fast16, North‑K