Researchers at VulnCheck found multiple backdoors in routers from Chinese manufacturer Zbtlink allowing a remote server root access to the router with no authentication.
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
GrapheneOS has completed a partial port to the new Pixel 11 devices, but they say they're unable to complete it due to Google dropping ARM Memory Tagging Extension (MTE) support.
Once again, multiple hospitals have been hit this week, as well as apparel companies, airports, and more.
Windows is making new app-level permissions such as location, camera, and microphone available to Windows Insiders users.
Meta's end-to-end encrypted messenger remains popular around the world, so it's still a win that they offer additional protections to users.
The popular privacy frontend Nitter has received a cease and desist letter from X Corp demanding a permanent takedown of the project's repository and all instances.
Researchers at Securelist discovered a new type of Android malware that infects car infotainment systems without any user interaction using the built-in updater.
In a currently active malware campaign, hackers are now hiding Windows malware inside lists of plain English words.
The CEVA Logistics breach continues to impact companies, a people search site left their databases exposed, and a couple small updates on the scope of previously-disclosed breaches.
CoSnitch is a one-click vulnerability discovered by researchers at Varonis Threat Labs and co-discovered by Copilot itself, that allows an attacker to exfiltrate sensitive data using Copilot's access to your computer.
Android 17 QPR2 Beta 3 adds a native App Lock feature allowing you to lock any app you want behind your biometrics or phone PIN.
Meta filed for a patent that includes a "memory recall" system that appears to detect people via facial recognition and record them automatically, and show you a highlights real later.
Microsoft says they'll soon stop sending SMS codes for authentication for personal Microsoft accounts and will transition to "passwordless accounts, passkeys, and verified email."
A spike in attacks on shipping and logistics companies is likely to result in a lot of exposed data.
Google announced its new Pixel 11 series of phones that bring with them a big security boost in the form of the new Titan M3 security chip that supports post-quantum cryptography for secure boot.
The prolific and controversial security researcher who goes by Nightmare-Eclipse released a ninth 0-day vulnerability that allows an attacker to gain SYSTEM level privileges.
Researchers identified critical vulnerabilities in Zoom that allows a full device takeover with no user interaction, and present on all devices.
Suisun City's public safety systems - including 911 - were shut down Friday morning.
References in Signal's source code point to a new feature to sign up without giving a phone number, potentially requiring a one-time payment.
Researchers at Tencent Zhuque Lab uncovered an 18-year-old vulnerability in the Linux kernel that can escape containers and gain full root privileges on the host system.
This week featured only two data breaches from the UK and from Switzerland. Both affected federal governments, however.
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.