The New Oil

· 2w ago

8 more #privacy tools experts actually use https://proton.me/blog/more-privacy-tools-experts-use #FOSS #cybersecurity #guide

Proton

8 more privacy tools experts actually use | Proton

See the tech tools used by privacy experts, from a DIY smartwatch and travel router to Tails, Linux, Pi-hole, and offline Wikipedia.

· 2w ago

Woman Arrested, Dragged Away After Quietly Speaking About #Flock at City Council Meeting https://www.404media.co/woman-arrested-after-city-council-denies-residents-right-to-speak-on-flock-cameras/ #Springfield #Missouri #MO #privacy #police #ALPR #surveillance

Woman Arrested After City Council Denies Residents Right to Speak on Flock Cameras

Woman Arrested After City Council Denies Residents Right to Speak on Flock Cameras

Citizens of Springfield, Missouri showed up to a city council meeting to discuss the city’s Flock contract. The mayor shut them down and arrested two people for ‘disruption of meetings of city council.’

· 3w ago

Your Bank Knows More Than You Think https://ghost.thenewoil.org/your-bank-knows-more-than-you-think/ #blog #privacy #PersonalFinance #finance #banking

ghost.thenewoil.org

· 2w ago

Pay for your #Tuta subscription via the #Google #PlayStore! https://tuta.com/blog/tuta-supports-google-play-payments-on-android #email #FOSS #cybersecurity #privacy #Android

Tuta

Pay for your Tuta subscription via the Google Play Store! | Tuta

Paying for your Tuta subscription on Android just got easier because now you can use Google Play Store payments and pay in your local currency.

· 3w ago

After accusations of selling ‘perv glasses,’ #Meta prepares to sell a pair without a camera https://techcrunch.com/2026/09/16/after-accusations-of-selling-perv-glasses-meta-prepares-to-sell-a-pair-without-a-camera/ #privacy #IoT #SmartGlasses #PervertGlasses

After accusations of selling 'perv glasses,' Meta prepares to sell a pair without a camera | TechCrunch

Can Meta dodge the "pervert glasses" accusations with a new camera-free product?

· 2w ago

#Google fined €403 million over location data #privacy violations https://www.bleepingcomputer.com/news/security/google-fined-403-million-over-location-data-privacy-violations/ #Ireland #DPC #GDPR

Google fined €403 million over location data privacy violations

Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data.

Welcome to The Privacy Dad's Blog!

· 3w ago

What Is #Obtainium? https://theprivacydad.com/what-is-obtainium/ #Android #sideloading #privacy #cybersecurity #DeGoogle

What Is Obtainium?

Obtainium is an Android app that lets you manage apps directly from their source pages.

· 2w ago

Some #Supabase customers are publicly exposing reams of people’s data to the web https://techcrunch.com/2026/09/25/some-supabase-customers-are-publicly-exposing-reams-of-peoples-data-to-the-web/ #privacy #cybersecurity #DataBreach

Some Supabase customers are publicly exposing reams of people's data to the web | TechCrunch

The findings highlight how AI-generated and vibe-coded apps can spill and expose users' data when not configured or secured properly.

· 3w ago

Researchers used 3Claude to hack #OpenAI https://arstechnica.com/ai/2026/09/researchers-used-claude-to-hack-openai/ #cbersecurity #AI

Ars Technica

Researchers used Claude to hack OpenAI

Researchers used Claude to reach an OpenAI employee account and sensitive GitHub data.

· 4w ago

#LinkedIn beats “ #BrowserGate ” lawsuits over scanning users’ #Chrome extensions https://arstechnica.com/tech-policy/2026/09/linkedin-beats-browsergate-lawsuits-over-scanning-users-chrome-extensions/ #privacy #Microsoft

Ars Technica

LinkedIn beats "BrowserGate" lawsuits over scanning users' Chrome extensions

Judge tosses lawsuits, says plaintiffs didn't allege any real privacy violation.

· 2w ago

Chinese hackers exploit #WordPress, #Zyxel flaws to steal govt data https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/ #cybersecurity #China #PANOS #FlowiseAI #Nuclio #Proxmox #Ubiquity

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases.

Electronic Frontier Foundation

· 1mo ago

French Top Court Gets It Right, Strikes Down #SocialMediaBan For Youths https://www.eff.org/deeplinks/2026/08/french-top-court-gets-it-right-strikes-down-social-media-ban-youths #France #privacy #AgeVerification

French Top Court Gets It Right, Strikes Down Social Media Ban For Youths

In a welcome win for free expression, France’s top court has struck down the country’s legislation that banned social media use for people under 15 years old, which had been scheduled to take effect in January 2027.

· 3w ago

The #EU must act now to protect #privacy and #encryption from #Canada’s overreaching Bill #C22 https://www.accessnow.org/press-release/the-eu-must-act-now-canadas-overreaching-bill-c-22/ #politics #cybersecurity

Access Now

The EU must act now to protect privacy and encryption from Canada’s overreaching Bill C-22 - Access Now

Access Now, alongside several European civil society organisations, are urging Ursula von der Leyen, President of the European Commission, European Union commissioners, and members of the European Parliament to push for changes to Canada’s Bill-C22, the Lawful Access Act.

· 1mo ago

Introducing #Obscura #VPN for #Windows https://obscura.com/blog/introducing-obscura-windows/ #privacy

Obscura

Introducing Obscura VPN for Windows + 5 Devices (up from 3)

Obscura is now available as a native app on Windows 10 and 11

· 1mo ago

New bootloader lets you take the “Meta” out of the original #Meta #Quest https://arstechnica.com/gaming/2026/08/new-bootloader-lets-you-take-the-meta-out-of-the-original-meta-quest/ #VR #Oculus #privacy

Ars Technica

New bootloader lets you take the "Meta" out of the original Meta Quest

Privilege escalation attack grants "full control" and freedom from Meta's servers/apps.

· 2mo ago

'Pervert glasses': Backlash against #Meta's #SmartGlasses grows https://tech.yahoo.com/ai/meta-ai/articles/pervert-glasses-backlash-against-metas-100000746.html #privacy #IoT #AI

tech.yahoo.com

https://signal.org/blog/linked-devices-and-android-tablets/

· 2mo ago

#Signal: More linked devices are on the table (and the #Android tablet)

#iOS #cybersecurity #privacy

More linked devices are on the table (and the Android tablet)

Signal Messenger

Mobile Ad Software Encourages Location Data Sharing, EFF Report Finds

SAN FRANCISCO – Some software development kits (SDKs) provided by advertising companies to help developers monetize their apps are automatically feeding users’ location data into systems that location data brokers use to track people, an Electronic Frontier Foundation (EFF) report found. EFF began...

· 1mo ago

#ICE Wants the Country’s Voter Data https://www.404media.co/ice-wants-the-countrys-voter-data/ #privacy #elections #politics

ICE Wants the Country’s Voter Data

Voting data is public by design, but ICE is looking for a federal contractor to help it handle voter registration and history files to find what it describes as fraud.

· 1mo ago

#Apple Threat Notification: How to protect against mercenary #spyware https://tuta.com/blog/what-to-do-if-you-get-an-apple-threat-notification #cybersecurity #privacy

Tuta

Apple Threat Notification: How to protect against mercenary spyware | Tuta

If you have recently received an Apple Threat Notification on your iPhone, iPad, or Mac follow these step-by-step guide to protect your device.

https://blog.torproject.org/arti_2_5_1_released/

· 2mo ago

#Arti 2.5.1 released

#Tor #privacy #cybersecurity #anonymity

blog.torproject.org

Arti 2.5.1 released | Tor Project

Arti 2.5.1 is released and ready for download.

· 1mo ago

#Android17 adds #ECH support to make web browsing harder to track https://www.bleepingcomputer.com/news/security/android-17-adds-ech-support-to-make-web-browsing-harder-to-track/ #Android #privacy #cybersecurity

Android 17 adds ECH support to make web browsing harder to track

Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users' home networks.

· 2mo ago

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide https://www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/ #NorthKorea #cybersecurity

WIRED

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.

· 1mo ago

Is the #ChatGPT #iMessage a helpful assistant or a #privacy backdoor? https://proton.me/blog/chatgpt-apple-messages #AI #Apple

Proton

ChatGPT

· 1mo ago

#NewZealand PM introduces under-16 #SocialMedia and #AI companion ban https://www.jurist.org/news/2026/08/new-zealand-pm-introduces-under-16-social-media-and-ai-companion-ban/# #privacy #AgeVerification #SocialMediaBan

jurist.org

New Zealand PM introduces under-16 social media and AI companion ban

The New Zealand government announced on Monday that it has introduced a bill to ban social media for youth under 16. The law would require social media platforms and AI companions to verify users

https://www.404media.co/what-is-the-screen-act-age-verification-porn/

· 2mo ago

The #SCREENAct is a Christian Nationalist Nightmare

#privacy #AgeVerification #FreeSpeech

The SCREEN Act is a Christian Nationalist Nightmare

The SCREEN Act is a Christian Nationalist Nightmare

Mike Lee's SCREEN Act, which heads to Senate Commerce Committee for markup on Wednesday, would expand age verification requirements to a nearly limitless scope of websites, and is supported by the architects of Project 2025.

https://www.404media.co/do-not-mention-alpr-usage-how-cops-are-trying-to-hide-the-existence-of-flock/

· 2mo ago

‘DO NOT MENTION #ALPR USAGE’: How Cops Are Trying to Hide Their Use of #Flock

#police #privacy #surveillance

‘DO NOT MENTION ALPR USAGE’: How Cops Are Trying to Hide Their Use of Flock

‘DO NOT MENTION ALPR USAGE’: How Cops Are Trying to Hide Their Use of Flock

“DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE. DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT."

https://www.404media.co/the-sec-bought-airline-data-to-monitor-flights-worldwide/

· 2mo ago

The #SEC Bought #Airline Data to Monitor Flights Worldwide

#travel #privacy #surveillance

The SEC Bought Airline Data to Monitor Flights Worldwide

The SEC bought access to worldwide airline ticketing records. Airlines including Delta, United, and American sold the data.

https://www.bleepingcomputer.com/news/security/hotel-wi-fi-attacks-use-custom-malware-to-breach-microsoft-365-accounts/

· 2mo ago

Hotel #WiFi attacks use custom #malware to breach #Microsoft365 accounts

#cybersecurity #Microsoft

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.

· 1mo ago

Massive #DDoS attack disrupts #Norway’s government digital services https://www.bleepingcomputer.com/news/security/massive-ddos-attack-disrupts-norways-government-digital-services/ #cybersecurity #Digdir #Vivicta

Massive DDoS attack disrupts Norway’s government digital services

A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector.

https://www.bleepingcomputer.com/news/security/phishing-service-spoofs-ringcentral-to-steal-microsoft-365-accounts/

· 2mo ago

#Phishing service spoofs #RingCentral to steal #Microsoft365 accounts

#cybersecurity #Microsoft

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.

https://www.eff.org/deeplinks/2026/08/senate-should-reject-kosas-privacy-risks

· 2mo ago

The Senate Should Reject #KOSA's #Privacy Risks

#AgeVerification

Electronic Frontier Foundation

The Senate Should Reject KOSA's Privacy Risks

Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate. The Senate Commerce Committee is once again considering legislation that would dramatically expand age verification, and undermine...

https://www.eff.org/deeplinks/2026/08/eff-joins-18-civil-rights-organizations-calling-governor-hochul-reject-stealth

· 2mo ago

#EFF Joins 18 Civil Rights Organizations Calling on Governor Hochul to Reject the #StealthCrawlerProhibitionAct

#anonymity #AI #NewYork #SB9934A

Electronic Frontier Foundation

EFF Joins 18 Civil Rights Organizations Calling on Governor Hochul to Reject the Stealth Crawler Prohibition Act

EFF joined a group of 18 civil society organizations to send a letter encouraging New York Governor Kathy Hochul to veto Senate Bill 9934A, the New York Stealth Crawler Prohibition Act. The letter states:While framed as a measure to protect local journalism, this legislation harms free expression...

· 1mo ago

#ServiceNow warns of three max severity security vulnerabilities https://www.bleepingcomputer.com/news/security/servicenow-warns-of-three-max-severity-security-vulnerabilities/ #cybersecurity

ServiceNow warns of three max severity security vulnerabilities

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks.

· 1mo ago

Hackers now exploit critical #Gitea flaw in code injection attacks https://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/ #cybersecurity #FOSS

Hackers now exploit critical Gitea flaw in code injection attacks

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

· 1mo ago

#AnonyMousKIT #PhaaS uses voice #AI agents to phish iPhone passcodes https://www.bleepingcomputer.com/news/security/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes/ #phishing #cybersecurity

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature.

https://www.bleepingcomputer.com/news/security/77-open-vsx-extensions-found-harvesting-developer-info/

· 2mo ago

77 #OpenVSX extensions found harvesting developer info

#cybersecurity

77 Open VSX extensions found harvesting developer info

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed.

https://techcrunch.com/2026/08/04/hackers-steal-over-130-million-by-exploiting-bug-in-offline-hardware-wallets/

· 2mo ago

Hackers steal over $130M by exploiting bug in offline hardware wallets

#crypto #cybersecurity #Coldcard #Coinkite #cryptocurrency

Hackers steal over $130M by exploiting bug in offline hardware wallets | TechCrunch

A security vulnerability in the cryptocurrency hardware wallet Coldcard is allowing hackers to drain the crypto from victims’ wallets. The total losses amount to more than $130 million, according to blockchain-monitoring firms.

https://www.bleepingcomputer.com/news/security/new-xcsset-variant-targets-macos-devs-via-compromised-xcode-projects/

· 2mo ago

New #XCSSET variant targets #macOS devs via compromised #Xcode projects

#cybersecurity

New XCSSET variant targets macOS devs via compromised Xcode projects

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.

· 3w ago

#Microsoft fixes bug behind ‘ #Defender #Antivirus is turned off’ alerts https://www.bleepingcomputer.com/news/security/microsoft-fixes-bug-behind-defender-antivirus-is-turned-off-alerts/ #cybersecurity #Windows

Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts

Microsoft has resolved a known issue that causes incorrect alerts warning that Defender Antivirus was turned off after installing recent updates.

· 3w ago

Dutch #NCSC: Critical #CheckPoint #VPN flaws exploitation is imminent https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/ #Netherlands #cybersecurity

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103.

· 1mo ago

#CISA confirms hackers targeted over 100 US #water systems during July https://techcrunch.com/2026/08/26/cisa-confirms-hackers-targeted-over-100-us-water-systems-during-july/ #cybersecurity #infrastructure #utilities

CISA confirms hackers targeted over 100 US water systems during July | TechCrunch

The federal cyber agency's warning comes amid a wave of suspected Iran-backed cyberattacks targeting critical water systems across the United States.

· 1mo ago

#Microsoft tests new #privacy controls for #Windows11 desktop apps https://www.bleepingcomputer.com/news/microsoft/microsoft-tests-new-privacy-controls-for-windows-11-desktop-apps/ #Windows

Microsoft tests new privacy controls for Windows 11 desktop apps

Microsoft has begun testing new privacy controls that will let Windows 11 users choose which desktop applications can access their camera, microphone, and precise location.

· 1mo ago

#LACMA #DataBreach last year exposed #SocialSecurity and #medical data https://www.bleepingcomputer.com/news/security/lacma-data-breach-last-year-exposed-social-security-and-medical-data/ #cybersecurity #privacy

LACMA data breach last year exposed social security and medical data

The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information.

https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/

· 2mo ago

Massive #ChainDrop #npm supply-chain attack infects hundreds of packages

#cybersecurity

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.

· 1mo ago

#X sends cease-and-desist to open source project #Nitter over alleged scraping https://techcrunch.com/2026/08/25/x-sends-cease-and-desist-to-open-source-project-nitter-over-alleged-scraping/ #Twitter #FOSS #privacy

X sends cease-and-desist to open source project Nitter over alleged scraping | TechCrunch

X has sent cease-and-desist letters to Nitter, the open source project behind privacy-friendly X front ends, demanding its instances and code repository be taken down over alleged scraping.

· 1mo ago

#FBI disrupts #proxy network enabling Chinese #espionage operations https://www.bleepingcomputer.com/news/security/fbi-disrupts-proxy-network-enabling-chinese-espionage-operations/ #China #cybersecurity

FBI disrupts proxy network enabling Chinese espionage operations

The FBI has disrupted infrastructure associated with a technical "quartermaster" that provided reconnaissance, proxy management, and operational routing capabilities for Chinese cyber espionage activities.

· 1mo ago

Hackers abuse #npm mirrors to host #phishing redirect pages https://www.bleepingcomputer.com/news/security/hackers-abuse-npm-mirrors-to-host-phishing-redirect-pages/ #cybersecurity

Hackers abuse npm mirrors to host phishing redirect pages

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.

https://getsession.org/blog/session-development-update-pro-beta-protocol-v2

· 2mo ago

#Session Development Update - Pro Beta and Protocol v2

#privacy #anonymity #cybersecurity #FOSS

Session

Session Development Update - Pro Beta and Protocol v2

Session Pro Beta moves into release preparation with unified cross-platform testing and backend fixes, alongside early planning for an invite-only Session Protocol v2 alpha.

· 1mo ago

New #GPUThor attack defeats #NVIDIA ECC protection for root access https://www.bleepingcomputer.com/news/security/new-gputhor-attack-defeats-nvidia-ecc-protection-for-root-access/ #cybersecurity