Secure Boot Easily Bypassable Using Decade-Old Vulnerabilities
Researchers at ESET discovered that secure boot on Linux and Windows could be bypassed using decade-old UEFI shim bootloaders still signed by Microsoft.
Fria Reyes
Fria is a privacy advocate and synthwave enthusiast who has been volunteering with Privacy Guides since 2023. They are an unapologetic tech optimist, and believes with the right technology we can solve any problem.
The Next Version of Meta's AI Glasses Will Activate the Camera Without the Camera Indicator Light
The next model of Meta's smart AI glasses will reportedly activate the onboard camera for AI features without notifying anyone via the camera indicator LED.
OpenAI's AI Atlas Browser Discontinued After Less Than a Year
OpenAI's James Sun announced that their agentic AI browser, Atlas, launched just last October, will be discontinued.
Apple Patches App Privacy Issue, Many More Left Unaddressed for Now
Apple fixed an app fingerprinting issue in iOS 27 Developer Beta 3, an early preview of the next major version of iOS, making it a bit harder for apps to fingerprint you.
15-Year-Old Linux Kernel Vulnerability Allows Full System Takeover
Researchers at Nebula Security discovered a privilege escalation bug in the Linux kernel that's been lying dormant for over 15 years that affects every Linux distribution before version 7.1.
Google and FBI Shut Down Malicious Residential Proxy Network Installed in Millions of Smart Devices
Google, Lumen, and the FBI have worked in lockstep to disrupt the massive malicious residential proxy network NetNut, also known as Popa, that has its claws in millions of devices.
New Phishing Technique Steals Account Tokens Through Legitimate Microsoft Login Page
Attackers are exploiting a new phishing technique to get access to your account from a legitimate Microsoft login page, according to Kaspersky.
First Documented Ransomware Attack Ran Exclusively by Agentic AI Discovered
The Sysdig Threat Research Team has discovered what they believe to be the first ever ransomware attack carried out fully end-to-end by agentic AI.
Brave Adds Containers to Separate Your Browsing
Brave has released a new containers feature to allow you to isolate your browsing between different identities.
Google Wants to Scan Your Hand for its reCAPTCHA
Google's reCAPTCHA service will start asking for camera permission to scan your hand in different positions to determine if you're human.
Multiple Vulnerabilities Found in Apple AirDrop and Android Quick Share
Researchers have discovered six vulnerabilities across Apple's AirDrop and Android's Quick Share file sharing protocols, some of which are zero-clicks.
Fake GTA 6 Crypto Scams Drain Wallets and Install Malware
Fake GTA 6 "early access" sites promise access to the game if you pay hundreds in cryptocurrency, but offer only malware instead.
Framingham, MA Flock Contract Cancelled After Public Backlash
Framingham, MA has cancelled its contract for Flock Safety cameras after months of extensive public backlash due to privacy concerns.
DOJ Stopped From Requiring Apple and Google to Hand Over the Data of 100,000 People
A court has determined that the US DOJ cannot force Apple and Google to hand over the information of around 100,000 users of the EZ Lynk app.
Meta's Keystroke-Logging Employee AI Training Program on Pause After Internal Data Leak
According to Business Insider, n internal program at Meta to train AI on employees' data is on pause after an internal leak exposing keystrokes, private conversations, and transcriptions.
Kansas City Pushes for Facial Recognition on Public Buses
Kansas City, Missouri is gearing up to equip public buses with facial recognition cameras designed to detect if a rider is on a list of banned or missing people.
Connectivity Standards Alliance Releases Matter 1.6 and Product Security 1.1 Specifications
The Connectivity Standards Alliance (CSA), creators of the Matter, Zigbee, and Aliro standards for IoT devices, released their new Matter 1.6 and Product Security 1.1 specifications for securing smart homes.
Unpatchable Exploit Found Apple's A12 and A13 Chips
Researchers at Paradigm Shift discovered a new unwatchable vulnerability, dubbed "usbliter8," in Apple's A12, S4/S5, and A13 chips.
Linux Removes Support for Legacy AppleTalk Protocol in Response to AI Patches
A surge of AI-generated patches in the Linux kernel has resulted in the removal of support for older protocols, the latest of which being AppleTalk.
Android 17 Launched, What New Privacy/Security Features Does it Bring?
Android 17 has now officially launched, bringing with it a slew of new privacy and security upgrades like the new Contact Picker and post-quantum app signing.
WhatsApp Claims it Thwarted an NSO Spyware Campaign
WhatsApp claims they detected and stopped an NSO spyware campaign against its users.