The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Category: privacy
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Data loss, Global Security News, Guest blog, Law & order, privacy, vulnerability
pcTattletale founder pleads guilty in rare stalkerware prosecution
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges – marking one of the few successful US prosecutions of a stalkerware operator. Read more in my article on the Hot for Security blog.
Geopolitics, Global Security News, privacy, Threats
Trump pulls US out of international cyber orgs
The Trump administration is withdrawing the United States from a handful of international organizations that work to strengthen cybersecurity. As part of a broader pullback from 66 international organizations, the administration is leaving the Global Forum on Cyber Expertise, the Online Freedom Coalition and the European Centre of Excellence for Countering Hybrid Threats. Trump’s decision…
AI, Cybersecurity, Emerging Tech, Global Security News, Government, privacy, Technology
‘Elon Musk is playing with fire:’ All the legal risks that apply to Grok’s deepfake disaster
As collective disgust has continued to build over the widespread generation and sharing of nonconsensual, sexualized deepfakes generated by X’s GrokAI tool, angry onlookers have expressed shock that the activity continues unabated and company owner Elon Musk isn’t being compelled – by either U.S. regulators or law enforcement – to put a halt to the…
AI, china, Compliance, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Venture
How to scam someone in seven days
Romance scammers have apparently discovered astrology… and Taurus is their secret weapon. In episode 449 of “Smashing Security”, we take a look inside an actual romance-fraud handbook – complete with scripts, personality “types”, corporate jargon, and a seven-day plan to get victims from hello to hand over the crypto. Then Lesley “hacks4pancakes” Carhart delivers a…
children, Cybersecurity, Global Security News, Laws & Legalities, privacy
Disney Fined $10M for Violating Children’s Privacy Laws on YouTube
Disney agrees to a $10M settlement with the DOJ and FTC over YouTube privacy violations. Learn how the COPPA ruling affects kids’ data and Disney’s new rules.
Exploits, Geopolitics, Global Security News, Government, Policy, privacy
Treasury removes Intellexa spyware-linked trio from sanctions list
The Trump administration this week removed three Iranians from its sanctions list who were previously accused of working for Intellexa, the consortium behind the Predator spyware that recent investigations say has circumvented human rights safeguards. The Biden administration imposed sanctions against the trio in 2024 as part of a broader move to sanction spyware operators.…
cyber attack, Cybersecurity, Global Security News, Koi Security, privacy, Security
Popular NPM Package lotusbail Exposed as Trojan Stealing WhatsApp Chats
Koi Security uncovers lotusbail, a malicious npm package with 56K downloads that steals WhatsApp messages and installs a persistent backdoor. Learn how to protect your data.
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, API security, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy, Risk Management
From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious…
AI, Compliance, Data Breaches, Europe, Exploits, Global Security News, privacy, Russia
The Kindle that got pwned
Think your Kindle is harmless? Think again! In this episode, Graham and special guest Danny Palmer unpack a Black Hat Europe talk revealing how a boobytrapped audiobook could exploit the Amazon eBook reader – potentially letting an attacker break into your account and seize control of your credit card. Plus a blast from 2021’s “summer…
cyber attack, cyber attacks, cyber crime, Cybersecurity, Global Security News, privacy
Hackers Claim Stealing 94GB of Pornhub Premium User Watch Histories
Cybercriminal group ShinyHunters targets former Pornhub Premium users in a massive 94GB data extortion campaign. Learn about the stolen data details, the involvement of a smishing attack, and the conflicting reports on the breach.
Facebook, Global Security News, Google, Guest blog, privacy, Ray-Ban
Surveillance at sea: Cruise firm bans smart glasses to curb covert recording
If you’re planning a cruise for your holidays, and cannot bear the idea of being parted from your Ray-Ban Meta smart glasses, you may want to avoid sailing with MSC Cruises. The cruise line has updated its list of prohibited items, specifically banning smart glasses and similar wearable devices from public areas. Read more in…
business, Global Security News, leaks, privacy, Security
16TB of MongoDB Database Exposes 4.3 Billion Lead Gen Records
Cybersecurity researchers discovered an unsecured 16TB database exposing 4.3 billion professional records, including names, emails, and LinkedIn data. Learn what happened, why this massive data leak enables new scams, and how to protect your PII.
Cybersecurity, GDPR, Global Security News, privacy, Security
UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach
UK’s ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee’s personal PC led to the massive security failure.
Federal Bureau of Investigation (FBI), Global Security News, Government, North America, Policy, privacy
Warrant requirements, Democratic worries could factor into spy law renewal debate
A fresh effort is mounting in Congress to require federal agents to obtain a warrant before searching a government surveillance database for information about U.S. citizens, as Congress again faces an impending deadline, in four months, to renew a major surveillance law. But there are also signs that renewal of Section 702 of the Foreign…
Cybersecurity, Global Security News, privacy, Security, Technology
Top 10 Data Anonymization Solutions for 2026
Every business today has to deal with private information – whether it is about customers, employees, or financial…
AI, Compliance, Exploits, Global Security News, Government & Policy, Network Security, privacy
Grok the stalker, the Louvre heist, and Microsoft 365 mayhem
On this week’s show we learn that AI really can be a stalker’s best friend, as we explore a strange tale that starts with a manatee-shaped mailbox on a millionaire’s lawn and ends with Grok happily doxxing real people, mapping out stalking “strategies,” and handing out revenge-porn tips. Then we go inside the Louvre heist,…
Exploits, Global Security News, Grok, Law & order, Podcast, privacy, Twitter
Smashing Security podcast #447: Grok the stalker, the Louvre heist, and Microsoft 365 mayhem
On this week’s show we learn that AI really can be a stalker’s best friend, as we explore a strange tale that starts with a manatee-shaped mailbox on a millionaire’s lawn and ends with Grok happily doxxing real people, mapping out stalking “strategies,” and handing out revenge-porn tips. Then we go inside the Louvre heist,…
AI, Android, android security, Apps, Exploits, Global Security News, privacy, Risk Management
Further Hardening Android GPUs
Posted by Liz Prucka, Hamzeh Zawawy, Rishika Hooda, Android Security and Privacy Team Last year, Google’s Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, a component used in billions of Android devices worldwide. This collaboration was a significant step in proactively identifying and fixing vulnerabilities in the…
AI, Android, android security, Apps, Exploits, Global Security News, privacy, Risk Management
Further Hardening Android GPUs
Posted by Liz Prucka, Hamzeh Zawawy, Rishika Hooda, Android Security and Privacy Team Last year, Google’s Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, a component used in billions of Android devices worldwide. This collaboration was a significant step in proactively identifying and fixing vulnerabilities in the…
AI, Chrome, Data Breaches, Global Security News, privacy
Architecting Security for Agentic Capabilities in Chrome
Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibility we take seriously. Following the recent launch of Gemini…
AI, Chrome, Data Breaches, Global Security News, privacy
Architecting Security for Agentic Capabilities in Chrome
Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibility we take seriously. Following the recent launch of Gemini…
AI, Global Security News, Grok, privacy
Privacy concerns raised as Grok AI found to be a stalker’s best friend
Grok, the AI chatbot developed by Elon Musk’s xAI, has been found to exhibit more alarming behaviour – this time revealing the home addresses of ordinary people upon request. Read more in my article on the Hot for Security blog.
Amnesty International, Exploits, Geopolitics, Global Security News, privacy, Technology, Threats
Intellexa remotely accessed Predator spyware customer systems, investigation finds
Leaked training videos suggest that Intellexa retained the ability to remotely access the systems of customers who had used its Predator spyware, raising questions about human rights safeguards, according to an investigation published Thursday. That was just one finding from a series of separate but overlapping probes released over the past 24 hours. The training…
AI, Cybersecurity, Global Security News, Government, Policy, privacy
Sen. Mark Kelly: Investing in safe, secure AI is key to U.S. dominance
Sen. Mark Kelly, D-Ariz., called for robust safeguards in U.S.-developed AI systems to prevent abuse and misuse, arguing that both the technology and its development standards should reflect “American” values. In a speech Thursday at the Center for American Progress, a left-leaning think tank, Kelly called for massive investment in data centers, water and electricity…
AI, Compliance, Cybersecurity, Global Security News, malware, privacy, Risk Management
A hacker doxxes himself, and social engineering-as-a-service
A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer… and accidentally hands over the keys to his real-world identity. Meanwhile, we look into the crystal ball for 2026 and consider how stolen data is now the jet fuel of cybercrime – and how next year could be even nastier than 2025. Plus,…
Data loss, Global Security News, malware, Podcast, privacy, Security threats
Smashing Security podcast #446: A hacker doxxes himself, and social engineering-as-a-service
A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer… and accidentally hands over the keys to his real-world identity. Meanwhile, we look into the crystal ball for 2026 and consider how stolen data is now the jet fuel of cybercrime – and how next year could be even nastier than 2025. Plus,…
AI, Android, android security, Global Security News, privacy
Android expands pilot for in-call scam protection for financial apps
Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages…
AI, Android, android security, Global Security News, privacy
Android expands pilot for in-call scam protection for financial apps
Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages…
cyber crime, Global Security News, privacy, Security
Proxyearth Tool Lets Anyone Trace Users in India with Just a Mobile Number
Proxyearth is a new site that shows names, Aadhaar numbers, and live locations of users in India using only mobile numbers, raising serious privacy and security concerns.
AI, Compliance, Cybersecurity, Endpoint, Global Security News, Network Security, privacy
The hack that brought back the zombie apocalypse
America’s airwaves are haunted by zombies again, as we dig into a decade of broadcasters leaving their hardware open to attack, giving hackers the chance to hijack TV shows, blast out fake emergency alerts, and even replace religious sermons with explicit furry podcasts. Meanwhile, we look at how a worker at a cybersecurity firm allegedly…
Android, Cybersecurity and Infrastructure Security Agency (CISA), Exploits, Geopolitics, Global Security News, Government, privacy
CISA alert draws attention to spyware’s targeting of messaging apps
The Cybersecurity and Infrastructure Security Agency warned Monday about threat groups using commercial spyware to target messaging apps, and urged users to take protective steps. “CISA is aware of multiple cyber threat actors actively leveraging commercial spyware to target users of mobile messaging applications (apps),” the agency said in a brief online notice. “These cyber…
Elon Musk, Global Security News, How To, privacy, social media
How To Hide Your Location on X (Twitter) by Switching to Region
X (formerly known as Twitter) has added a new location detail in its account transparency section. It shows…
Apple, Department of Homeland Security (DHS), EFF, Global Security News, Government, privacy
Privacy group sues feds over talks with tech companies on ICE raid trackers
A digital privacy group is suing the federal government to obtain records of its communications with technology and social media companies leading up to the removal of several apps and websites that were tracking the activities of Immigration and Customs Enforcement and other agencies. In a lawsuit filed Thursday, the non-profit Electronic Frontier Foundation names…
Federal Bureau of Investigation (FBI), Global Security News, Israel, North America, privacy, Technology
NSO Group argues WhatsApp injunction threatens existence, future U.S. government work
NSO Group argued in a court filing this week that the court should pause the permanent injunction preventing it from targeting WhatsApp with its spyware while the company appeals the decision. According to the company, enforcing the injunction would cause irreparable harm to its business and prevent the U.S. government from using its products. Those…
AI, Android, android security, Cybersecurity, Exploits, Global Security News, privacy, Risk Management
Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing
Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experiences that help you stay connected across platforms. As part of…
AI, Android, android security, Cybersecurity, Exploits, Global Security News, privacy, Risk Management
Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing
Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experiences that help you stay connected across platforms. As part of…
Global Security News, privacy
The OSINT advantage: Find your weak spots before attackers do
Here’s how open-source intelligence helps trace your digital footprint and uncover your weak points, plus a few essential tools to connect the dots
Data loss, Global Security News, malware, Podcast, privacy
Smashing Security podcast #444: We’re sorry. Wait, did a company actually say that?
Stop the press – a company has actually said “sorry” after a data breach, and hotels are helping hackers phish their own guests. We examine a refreshingly honest breach response (and why legacy systems are still going to ruin your week), dig into a nasty hotel-booking malware campaign that abuses trust in apps and CAPTCHAs,…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy
We’re sorry. Wait, did a company actually say that?
Stop the press – a company has actually said “sorry” after a data breach, and hotels are helping hackers phish their own guests. In episode 444 of “Smashing Security” we examine a refreshingly honest breach response (and why legacy systems are still going to ruin your week), dig into a nasty hotel-booking malware campaign that…
Global Security News, privacy, Tips & Hacks, VPN, web browser, Wi-Fi
Dos And Don’ts Of Using A Public Wi-Fi [Ultimate Guide]
Public Wi-Fi: a double-edged sword. It offers the convenience of staying connected on the go, but it also comes with inherent security risks. In today’s hyper-connected world, navigating public Wi-Fi networks is essential for many. However, venturing into this digital wild west requires caution and a strong understanding of potential pitfalls. This guide explores the…
Global Security News, online privacy, privacy, security flaws, Tips & Hacks
How to Securely Send Sensitive Information Over the Internet
In today’s digital age, we routinely share vast information online, from social media posts to online banking details. However, regarding sensitive information, like social security numbers, financial documents, or confidential work documents, how to securely send sensitive information over the Internet becomes crucial. Unprotected data can fall into the wrong hands, leading to identity theft,…
encryption, Global Security News, privacy
Tech, trade groups push back on global encryption access plans
Multiple governments have been warned by the Business Software Alliance, The App Association, and dozens of other technology and trade organizations that granting law enforcement access to encrypted data would weaken the digital protections that support modern commerce and user privacy, according to CyberScoop.
encryption, Global Security News, privacy
Tech, trade groups push back on global encryption access plans
Multiple governments have been warned by the Business Software Alliance, The App Association, and dozens of other technology and trade organizations that granting law enforcement access to encrypted data would weaken the digital protections that support modern commerce and user privacy, according to CyberScoop.
data protection, GDPR, Global Security News, privacy
The Data (Use and Access) Act and How it Affects the UK GDPR and DPA 2018, and PECR
Enacted in June, the Data (Use and Access) Bill – now the Data (Use and Access) Act 2025 or ‘DUAA’ – marked a significant moment in the evolution of UK data protection legislation. The Act builds on previous legislative efforts – most notably 2022’s shelved DPDI (Data Protection and Digital Information) Bill – and brings…
AI, Global Security News, privacy
What if your romantic AI chatbot can’t keep a secret?
Does your chatbot know too much? Here’s why you should think twice before you tell your AI companion everything.
AI, Compliance, Endpoint, Global Security News, privacy
Tinder’s camera roll and the Buffett deepfake
Tinder has got a plan to rummage through your camera roll, and Warren Buffett keeps popping up in convincing deepfakes dishing “number one investment tips.” Meanwhile, will agentic AI replace your co-hosts before you can say “EDR for robots”? and why you should still read books. All this, plus Lily Allen’s new album and Claude…
AI, Artificial Intelligence, deepfake, Global Security News, Podcast, privacy
Smashing Security podcast #443: Tinder’s camera roll and the Buffett deepfake
Tinder has got a plan to rummage through your camera roll, and Warren Buffett keeps popping up in convincing deepfakes dishing “number one investment tips.” Meanwhile, will agentic AI replace your co-hosts before you can say “EDR for robots”? and why you should still read books. All this, plus Lily Allen’s new album and Claude…
Cybersecurity, Global Security News, privacy, Security
8 Recommended Account Takeover Security Providers
In 2025, account takeover (ATO) attacks are a significant – and growing – cybersecurity threat, especially in the…
AI, Congress, Cybersecurity, Global Security News, privacy
Report: Government data mining has gone too far – and AI will make it worse
Federal agencies often collect voluminous amounts of data on Americans to fulfill their missions and better understand the public’s needs. But a new whitepaper from the Electronic Privacy Information Center argues that increasingly sophisticated and invasive data mining is now widespread throughout government, allowing machines — and not humans — to determine how data is connected…
Exploits, Geopolitics, Global Security News, privacy, Research, Threats
New Landfall spyware apparently targeting Samsung phones in Middle East
A new commercial-grade spyware has apparently been targeting Samsung Galaxy phones in the Middle East, but it’s not clear who’s behind it, researchers said in a blog post Friday. Whoever’s responsible, they seized upon a previously unknown, unpatched vulnerability known as a zero-day — a flaw Samsung has since closed, the researchers from Palo Alto…
AI, china, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, malware, privacy, Risk Management, Russia
The hack that messed with time, and rogue ransomware negotiators
Time itself comes under attack as a state-backed hacking gang spends two years tunnelling toward a nation’s master clock — with chaos potentially only a tick away. Plus when ransomware negotiators turn to the dark side, what could possibly go wrong? All this and more is discussed in episode 442 of the “Smashing Security” podcast…
Browser, Global Security News, Google, privacy, Technology
Google Expands Chrome Autofill to Passports and Licenses, But Is It Safe?
Google Chrome browser’s new enhanced autofill feature can now remember and automatically fill in personal data such as…
AI, Android, android security, Cybersecurity, Global Security News, privacy, Risk Management
How Android provides the most effective protection to keep you safe from mobile scams
Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Abuse; Vijay Pareek, Manager, Android Messaging Trust and Safety As Cybersecurity Awareness Month wraps up, we’re focusing on one of today’s most pervasive digital threats: mobile scams. In the last 12 months, fraudsters have…
AI, Android, android security, Cybersecurity, Global Security News, privacy, Risk Management
How Android provides the most effective protection to keep you safe from mobile scams
Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Abuse; Vijay Pareek, Manager, Android Messaging Trust and Safety As Cybersecurity Awareness Month wraps up, we’re focusing on one of today’s most pervasive digital threats: mobile scams. In the last 12 months, fraudsters have…
Data loss, Global Security News, Law & order, Podcast, privacy, vulnerability
Smashing Security podcast #441: Inside the mob’s million-dollar poker hack, and a Formula 1 fumble
Basketball stars have allegedly joined forces with the mafia to fleece high-rollers in a poker scam involving hacked shufflers, covert cameras, and an X-ray card table. Meanwhile, researchers have found they could poke around an FIA driver portal to pull up the personal details of Formula 1 megastars. All this and more is discussed in…
AI, Compliance, Cybersecurity, Endpoint, Global Security News, malware, Network Security, privacy, Russia
Inside the mob’s million-dollar poker hack, and a Formula 1 fumble
Basketball stars have allegedly joined forces with the mafia to fleece high-rollers in a poker scam involving hacked shufflers, covert cameras, and an X-ray card table. Meanwhile, researchers have found they could poke around an FIA driver portal to pull up the personal details of Formula 1 megastars. Plus: Graham’s “Pick of the Week” turns…
Cybersecurity, DEI, Global Security News, Government, grants, privacy
Open-source security group pulls out of U.S. grant, citing DEI restrictions
The Trump administration’s zeal to stamp out diversity, equity and inclusion programs is affecting national cybersecurity research, as a key open-source security foundation announced it would reject federal grant funding. The Python Software Foundation (PSF), which promotes safe and secure Python coding practices and helps oversee PyPI, the world’s largest open-source code repository for Python,…
Exploits, Geopolitics, Global Security News, privacy, Research
Hacking Team successor linked to malware campaign, new ‘Dante’ commercial spyware
Kaspersky researchers said Monday that they’ve unearthed a malware campaign they’re linking to the successor company of the infamous Italy-based surveillance tech firm Hacking Team, and at the same time discovered new commercial malware tied to the same firm. The malware campaign that Kaspersky dubbed Operation ForumTroll targeted government organizations, media outlets, financial institutions, universities,…
AI, china, Compliance, Cybersecurity, Global Security News, privacy
How to hack a prison, and the hidden threat of online checkouts
A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates to run wild. Then we head to the checkout aisle to ask why JavaScript on payment pages went feral, and how new PCI DSS rules are finally muzzling Magecart-style skimmers. Plus: Graham reveals his new-found superpower with Keyboard Maestro,…
Exploits, Global Security News, Government, Policy, privacy, Technology
Apple and Google challenged by parents’ rights coalition on youth privacy protections
A nonprofit organization has filed a formal complaint with the Federal Trade Commission, claiming Google’s business practices around children and teenagers violates U.S. privacy laws and constitutes unfair and deceptive practices. The complaint, filed by the Digital Childhood Institute, lays out five core claims against the tech giant: that it “knowingly” markets adult-themed or age-restricted…
Global Security News, Israel, Meta, NSO Group, privacy, Technology
Judge forbids NSO Group from targeting WhatsApp users
WhatsApp has won a ruling against spyware maker NSO Group forbidding it from targeting its users, while NSO Group in the same ruling got a massive reduction to the punitive damages a court had previously awarded. Northern California District Court Judge Phyllis Hamilton granted the permanent injunction in a ruling late Friday. In doing so,…
AI, Compliance, Cybersecurity, Global Security News, privacy, Russia
A breach, a burnout, and a bit of Fleetwood Mac
A critical infrastructure hack hits the headlines – involving default passwords, boasts on Telegram, and a finale that will make a few cyber-crooks wish the ground would swallow them whole. Meanwhile we dig into the bit we don’t talk about enough: the human cost of defending companies from hackers – stress, burnout, and how better…
Cybersecurity, Geopolitics, Global Security News, Government, privacy
Researchers find a startlingly cheap way to steal your secrets from space
How much private and sensitive data can you get by pointing $600 worth of satellite equipment at the sky? Quite a bit, it turns out. Researchers from the University of Maryland and the University of California, San Diego say they were able to intercept sensitive data from the U.S. military, telecommunications firms, major businesses and…
Cybersecurity, Global Security News, Invoicely, leaks, privacy, Security
Invoicely Database Leak Exposes 180,000 Sensitive Records
Cybersecurity researcher Jeremiah Fowler discovered nearly 180,000 files, including PII and banking details, left exposed on an unprotected database linked to the Invoicely platform. Read about the identity theft and financial fraud risks for over 250,000 businesses worldwide.
Data loss, Global Security News, malware, Podcast, privacy, Ransomware
Smashing Security podcast #438: When your mouse turns snitch, and hackers grow a conscience
Your computer’s mouse might not be as innocent as it looks – and one ransomware crew has a crisis of conscience that nobody saw coming. We talk about how something as ordinary as a web page could turn your mouse into a surprisingly nosey neighbour, and why ransomware gangs need to think carefully about their…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, privacy, Risk Management, Venture
When your mouse turns snitch, and hackers grow a conscience
Your computer’s mouse might not be as innocent as it looks – and one ransomware crew has a crisis of conscience that nobody saw coming. We talk about how something as ordinary as a web page could turn your mouse into a surprisingly nosey neighbour, and why ransomware gangs need to think carefully about their…
Cybersecurity, Department of Justice, Election Security, Global Security News, Government, privacy
Voting groups ask court for immediate halt to Trump admin’s SAVE database overhaul
Voting rights groups are asking a court to block an ongoing Trump administration effort to merge disparate federal and state voter data into a massive citizenship and voter fraud database. Last week, the League of Women Voters, the Electronic Privacy Information Center (EPIC) and five individuals sued the federal government in D.C. District Court, saying…
Cybersecurity, Department of Justice, Election Security, Global Security News, Government, privacy
Voting groups ask court for immediate halt to Trump admin’s SAVE database overhaul
Voting rights groups are asking a court to block an ongoing Trump administration effort to merge disparate federal and state voter data into a massive citizenship and voter fraud database. Last week, the League of Women Voters, the Electronic Privacy Information Center (EPIC) and five individuals sued the federal government in D.C. District Court, saying…
Cybersecurity, Department of Justice, Election Security, Global Security News, Government, privacy
Voting groups ask court for immediate halt to Trump admin’s SAVE database overhaul
Voting rights groups are asking a court to block an ongoing Trump administration effort to merge disparate federal and state voter data into a massive citizenship and voter fraud database. Last week, the League of Women Voters, the Electronic Privacy Information Center (EPIC) and five individuals sued the federal government in D.C. District Court, saying…
Cybersecurity, Department of Justice, Election Security, Global Security News, Government, privacy
Voting groups ask court for immediate halt to Trump admin’s SAVE database overhaul
Voting rights groups are asking a court to block an ongoing Trump administration effort to merge disparate federal and state voter data into a massive citizenship and voter fraud database. Last week, the League of Women Voters, the Electronic Privacy Information Center (EPIC) and five individuals sued the federal government in D.C. District Court, saying…
Cybersecurity, Department of Justice, Election Security, Global Security News, Government, privacy
Voting groups ask court for immediate halt to Trump admin’s SAVE database overhaul
Voting rights groups are asking a court to block an ongoing Trump administration effort to merge disparate federal and state voter data into a massive citizenship and voter fraud database. Last week, the League of Women Voters, the Electronic Privacy Information Center (EPIC) and five individuals sued the federal government in D.C. District Court, saying…
Election Security, Europe, Geopolitics, Global Security News, Government, privacy
German government says it will oppose EU mass-scanning proposal
Encryption lives on in Europe. For now. The German government has said it will oppose a piece of European Union legislation later this month that would subject phones and other devices to mass scanning — prior to encryption — by the government for evidence of child sexual abuse material. Federal Minister of Justice Stefanie Hubig…
Election Security, Europe, Geopolitics, Global Security News, Government, privacy
German government says it will oppose EU mass-scanning proposal
Encryption lives on in Europe. For now. The German government has said it will oppose a piece of European Union legislation later this month that would subject phones and other devices to mass scanning — prior to encryption — by the government for evidence of child sexual abuse material. Federal Minister of Justice Stefanie Hubig…
Election Security, Europe, Geopolitics, Global Security News, Government, privacy
German government says it will oppose EU mass-scanning proposal
Encryption lives on in Europe. For now. The German government has said it will oppose a piece of European Union legislation later this month that would subject phones and other devices to mass scanning — prior to encryption — by the government for evidence of child sexual abuse material. Federal Minister of Justice Stefanie Hubig…
Election Security, Europe, Geopolitics, Global Security News, Government, privacy
German government says it will oppose EU mass-scanning proposal
Encryption lives on in Europe. For now. The German government has said it will oppose a piece of European Union legislation later this month that would subject phones and other devices to mass scanning — prior to encryption — by the government for evidence of child sexual abuse material. Federal Minister of Justice Stefanie Hubig…
Election Security, Europe, Geopolitics, Global Security News, Government, privacy
German government says it will oppose EU mass-scanning proposal
Encryption lives on in Europe. For now. The German government has said it will oppose a piece of European Union legislation later this month that would subject phones and other devices to mass scanning — prior to encryption — by the government for evidence of child sexual abuse material. Federal Minister of Justice Stefanie Hubig…
Cybersecurity, Europe, Geopolitics, Global Security News, Policy, privacy, Technology
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
Tech experts and companies offering encrypted messaging services are warning that pending European regulation, which would grant governments broad authority to scan messages and content on personal devices for criminal activity, could spell “the end” of privacy in Europe. The European Union will vote Oct. 14 on a legislative proposal from the Danish Presidency known…
Cybersecurity, Europe, Geopolitics, Global Security News, Policy, privacy, Technology
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
Tech experts and companies offering encrypted messaging services are warning that pending European regulation, which would grant governments broad authority to scan messages and content on personal devices for criminal activity, could spell “the end” of privacy in Europe. The European Union will vote Oct. 14 on a legislative proposal from the Danish Presidency known…
Cybersecurity, Europe, Geopolitics, Global Security News, Policy, privacy, Technology
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
Tech experts and companies offering encrypted messaging services are warning that pending European regulation, which would grant governments broad authority to scan messages and content on personal devices for criminal activity, could spell “the end” of privacy in Europe. The European Union will vote Oct. 14 on a legislative proposal from the Danish Presidency known…
Cybersecurity, Europe, Geopolitics, Global Security News, Policy, privacy, Technology
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
Tech experts and companies offering encrypted messaging services are warning that pending European regulation, which would grant governments broad authority to scan messages and content on personal devices for criminal activity, could spell “the end” of privacy in Europe. The European Union will vote Oct. 14 on a legislative proposal from the Danish Presidency known…
Cybersecurity, Europe, Geopolitics, Global Security News, Policy, privacy, Technology
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
Tech experts and companies offering encrypted messaging services are warning that pending European regulation, which would grant governments broad authority to scan messages and content on personal devices for criminal activity, could spell “the end” of privacy in Europe. The European Union will vote Oct. 14 on a legislative proposal from the Danish Presidency known…
GDPR, Global Security News, privacy, Training
5 common GDPR mistakes – and how training can fix them
Most GDPR (General Data Protection Regulation) breaches arise from everyday slip-ups, such as missing DSAR (data subject access request) deadlines, picking the wrong lawful basis for processing, failing to enforce retention periods, keeping inadequate records or misreporting incidents. However, fall short of your compliance obligations – for whatever reason – and you face complaints, investigations,…