June 4, 2024 at 05:59PM Multiple high-profile TikTok accounts were hijacked by attackers exploiting a zero-day vulnerability in the platform’s direct messages feature. Victims included Sony, CNN, and Paris Hilton. The exploit required targets to open a malicious message, without needing to download a payload or click on embedded links. TikTok is working to restore … Read more
May 31, 2024 at 05:46PM Live Nation has confirmed a data breach at Ticketmaster, with data stolen from a third-party cloud database, likely Snowflake. The breach exposed over 500,000 users’ data. Live Nation is working to mitigate the risk, cooperating with authorities, and notifying regulatory bodies and affected users. They don’t expect a significant impact … Read more
May 24, 2024 at 02:32PM Microsoft is introducing “Recall,” an AI-powered feature that enables users to find and remember content on their PC. The technology takes periodic snapshots, storing them locally and fully encrypted. However, this has raised privacy concerns, as critics worry about potential exposure of sensitive information. Microsoft assures users of control and … Read more
May 22, 2024 at 12:07PM Microsoft’s new AI-powered Windows 11 Recall feature allows users to easily access and search through snapshots of their screen activity. While designed to prioritize user privacy and control, concerns have been raised about potential privacy risks and security vulnerabilities. Microsoft reassures that Recall data is encrypted and stored locally, but … Read more
May 14, 2024 at 01:33AM Apple and Google have jointly launched a new feature, “Detecting Unwanted Location Trackers” (DULT), to notify users if a Bluetooth tracking device is being used without their knowledge. This move addresses privacy and safety concerns, particularly due to reports of such devices being misused for nefarious purposes. Additionally, Apple has … Read more
May 6, 2024 at 09:08PM Apple is compelling iOS developers to justify the use of specific APIs for device fingerprinting while seemingly overlooking compliance by Google, Meta, and Spotify. Device fingerprinting, which gathers unique device identifiers for targeted advertising, raises privacy concerns. Non-compliant apps post-May 1, 2024, face rejection from the iOS App Store. Enforcement … Read more
April 29, 2024 at 01:12PM Google announced that enhanced security measures blocked 2.28 million privacy-violating apps from its Google Play store in 2023. Investments in security features, policies, and machine learning helped identify bad actors and ban 333,000 accounts. Google also collaborated with SDK providers to enhance user privacy and expanded the Google Play SDK … Read more
April 22, 2024 at 12:37PM Europol has urged an end to end-to-end encryption (E2EE) implementation, citing concerns about hampering police investigations. The joint declaration of European police chiefs emphasizes the need for lawful access to private messages and criticizes E2EE for hindering the prevention of crimes like terrorism, child abuse, and drug smuggling. Europol’s stance … Read more
April 2, 2024 at 01:07PM Google has agreed to delete billions of data records from 136 million Chrome users in the US, settling a lawsuit over alleged undisclosed data collection in Incognito mode. The Settlement includes changes to disclosure practices, data deletion, and measures to prevent future data accumulation. The value of the changes is … Read more
March 28, 2024 at 04:15AM MIT study finds 98% of students willing to share friends’ emails for free pizza, highlighting privacy paradox. Telegram’s new P2PL feature offers free premium membership in exchange for using users’ phone numbers for OTP relay. Users cautioned about privacy risks, spam, unwanted contacts. Meta accused of intercepting Snapchat traffic for … Read more