Geek-Guy.com

Category: privacy

Senators criticize Trump officials’ discussion of war plans over Signal, but administration answers don’t come easily 

Democratic senators hammered two top national security officials Tuesday about their participation in a Signal chat discussing war plans that reportedly included a journalist, but struggled to get specific answers to some of their questions about what happened and how. Director of National Intelligence Tulsi Gabbard wouldn’t even initially acknowledge her involvement in the chat group,…

Privacy-boosting tech could prevent breaches, data misuse with government aid, report says

Governments should prioritize the use of privacy-boosting technologies like encryption, de-identification and hashing to prevent breaches and data misuse, a report that New America’s Open Technology Institute published Tuesday recommends. The study comes as cyber and privacy experts warn about the dangers of the Trump administration’s Department of Government Efficiency (DOGE) accessing sensitive information at…

As 23andMe declares bankruptcy, privacy advocates sound alarm about DNA data

Genetic testing business 23andMe filed for bankruptcy Sunday, amplifying fears from privacy advocates that the DNA records and personal information of its 15 million customers could soon be up for sale to the highest bidder. 23andMe, which was once valued at $6 billion, has been experiencing financial distress and declining profits since going public in…

From Spreadsheets to Solutions: How PlexTrac Enhances Security Workflows

In this special episode of the Shared Security Podcast, join Tom Eston and Dan DeCloss, CTO and founder of PlexTrac, as they discuss the challenges of data overload in vulnerability remediation. Discover how PlexTrac addresses these issues by integrating various data sources, providing customized risk scoring, and enhancing remediation workflows. The episode offers an insightful…

Meta settles UK ‘right to object to ad-tracking’ lawsuit by agreeing not to track plaintiff

A human rights campaigner, Tanya O’Carroll, has succeeded in forcing social media giant Meta not to use her data for targeted advertising. The agreement is contained in a settlement to an individual challenge she lodged against Meta’s tracking and profiling back in 2022. O’Carroll had argued that a legal right to object to the use…

Smashing Security podcast #409: Peeping perverts and FBI phone calls

In episode 409 of the “Smashing Security” podcast, we uncover the curious case of the Chinese cyber-attack on Littleton’s Electric Light Company, and a California landlord’s hidden camera scandal. Find out about this, and more, in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

ChatGPT hit with privacy complaint over defamatory hallucinations

OpenAI is facing another privacy complaint in Europe over its viral AI chatbot’s tendency to hallucinate false information — and this one might prove tricky for regulators to ignore. Privacy rights advocacy group Noyb is supporting an individual in Norway who was horrified to find ChatGPT returning made-up information that claimed he’d been convicted for…

Six additional countries identified as suspected Paragon spyware customers

Researchers have identified suspected government customers of spyware company Paragon Solutions in six more countries that hadn’t previously been publicly identified, according to a report published Wednesday. The University of Toronto’s Citizen Lab said it mapped the infrastructure of Paragon’s Graphite tool after a tip from a collaborator, and found a subset of suspected Paragon…

EU sends Apple first DMA interoperability instructions for apps and connected devices

The European Union has sent Apple preliminary instructions on how it expects the iPhone maker to comply with interoperability provisions in the bloc’s Digital Markets Act (DMA), its flagship market contestability reform. According to the Commission, device manufacturers and app developers should be able to access nine iOS connectivity features that were restricted to Apple’s…

Cape opens $99/month beta of its privacy-first mobile plan, inks Proton deal, raises $30M

Mobile networks continue to be a major target for cybersecurity breaches, and Chinese hacking group Salt Typhoon‘s persistent attacks on multiple carriers are only the latest known examples.  The mobile carrier startup Cape is taking a novel approach to addressing the problem: it has built a service it says can provide a more secure, private…

DOGE staffer violated security policies at Treasury Department, court filing shows

A staffer for the Department of Government Efficiency (DOGE) violated security policies at the Treasury Department by improperly sharing sensitive personal information outside the agency, according to a court filing. The filing last week came in a case state attorneys general brought against President Donald Trump and Treasury Secretary Scott Bessent challenging DOGE access to…

Tackling Data Overload: Strategies for Effective Vulnerability Remediation

In part one of our three part series with PlexTrac, we address the challenges of data overload in vulnerability remediation. Tom hosts Dahvid Schloss, co-founder and course creator at Emulated Criminals, and Dan DeCloss, CTO and founder of PlexTrac. They share their expertise on the key data and workflow hurdles that security teams face today.…

Apple Fights UK Over Encryption Backdoors as US Officials Warn of Privacy Violations

The British side reportedly said they would have to produce warrants for each individual data access request, so they will always have to be made as part of an investigation into serious crime.

California’s legal push on geolocation data collection must take aim at the right targets, privacy experts say

The attorney general for California announced this week a wide-ranging investigation into the way companies collect, process and use consumer location data. The investigation will include scrutiny of advertising networks, mobile app providers and data brokers whose practices may violate the California Consumer Privacy Act (CCPA), one of the strictest state privacy laws in the…

iPhone and Android users will soon be able to send encrypted RCS messages to each other

Text messages sent between iPhones and Android devices will soon benefit from end-to-end encryption (E2EE), after the GSM Association (GSMA) yesterday published new specifications for the Rich Communication Services (RCS) protocol that include support for cross-platform E2EE. RCS is a long-standing effort to enable SMS-style cross-platform communications with richer features, such as group messaging, typing…

UK’s secret iCloud backdoor order triggers civil rights challenge

The U.K. government’s secret order to Apple demanding it backdoor the end-to-end encrypted version of its iCloud storage service has now been challenged by two civil rights groups, Liberty and Privacy International, which filed complaints Thursday. They called the order “unacceptable and disproportionate” and warned of “global consequences” as the access order is thought to…

Trade groups worry information sharing will worsen without critical infrastructure panel, CISA law renewal

Business groups told lawmakers Tuesday that they fear cyber threat information sharing could drop off in light of the Trump administration’s move to eliminate a critical infrastructure committee and given the pending expiration of a 2015 law. The Critical Infrastructure Partnership Advisory Council (CIPAC) fell among a swath of government advisory committees that Homeland Security…

New York sues Allstate and subsidiaries for back-to-back data breaches

Allstate and several of the insurance company’s subsidiaries were accused of poor security practices resulting in data breaches in 2020 and 2021 that exposed sensitive data on nearly 200,000 people, the New York State Attorney General office said in a lawsuit filed Monday.  National General, an insurance company Allstate acquired for $4 billion in 2021,…

Trump Administration and the Russian Cyber Threat, Firefox Privacy Changes

In this episode, we discuss whether the Trump administration ordered the U.S. Cyber Command and CISA to stand down on the Russian cyber threat. We also touch on the Canadian tariff situation with insights from Scott Wright. Additionally, we discuss the recent changes to Firefox’s privacy policy and what it means for user data. **…

DuckDuckGo leans further into GenAI as its AI chat interface exits beta

Private search engine DuckDuckGo is leaning further into the generative AI opportunity. The non-tracking search engine has been dabbling with expanding the role of AI assistance in its product for the past year, including launching a chatbot-style interface last fall — available at Duck.ai. In a blog post Thursday, the company said the service is…

Apple is challenging U.K.’s iCloud encryption backdoor order

Apple is challenging a U.K. Government data access order in the Investigatory Powers Tribunal (IPT), the Financial Times reports. The order targeted iCloud backups that are protected by end-to-end encryption. Last month, press leaks revealed the existence of the January order asking Apple to build a backdoor in iCloud’s encrypted backups. U.K. officials are exercising…

UK probes how TikTok, Reddit, and Imgur protect child privacy

The U.K.’s privacy watchdog has launched investigations into three social media companies over how they go about protecting the privacy of children on their respective platforms. The Information Commissioner’s Office (ICO) announced today that it’s looking into how TikTok uses personal information of 13- to 17-year-olds to recommend videos, “in light of growing concerns” around…

Jolla founders take the wraps off an AI assistant to power up their push for privacy-friendly GenAI

Jolla, the erstwhile mobile maker turned privacy-centric AI business — via sister startup, Venho.ai — has taken the wraps off an AI assistant it says is a “fully private” alternative to data-mining cloud giants crawling all over your personal information.   The AI assistant is designed to integrate with apps like email, calendar and social…

Cybersecurity Impact of DOGE, Apple’s Stand Against Encryption Backdoors

In this episode, Kevin and Tom discuss current events including the latest developments with DOGE and the significant changes happening at the Cybersecurity and Infrastructure Security Agency (CISA). They also touch on Apple’s decision to refuse creating backdoors for encryption, setting a new precedent in digital security. Tune in for an insightful discussion on the…

Cybersecurity Impact of DOGE, Apple’s Stand Against Encryption Backdoors

In this episode, Kevin and Tom discuss current events including the latest developments with DOGE and the significant changes happening at the Cybersecurity and Infrastructure Security Agency (CISA). They also touch on Apple’s decision to refuse creating backdoors for encryption, setting a new precedent in digital security. Tune in for an insightful discussion on the…

Signal is the number-one downloaded app in the Netherlands. But why?

Privacy-focused messaging app Signal has been flying high in the Dutch app stores this past month, sitting many days as the most downloaded free app on iOS and Android for all categories, per data from multiple app-tracking platforms such as Sensor Tower. The app has experienced surges in popularity through the years, often in response…

Mozilla responds to backlash over new terms, saying it’s not using people’s data for AI

Mozilla has responded to user backlash over the Firefox web browser’s new Terms of Use, which critics have called out for using overly broad language that appears to give the browser maker the rights to whatever data you input or upload. The company says the new terms aren’t a change in how Mozilla uses data,…

Apple introduces new child safety initiatives, including an age verification system for apps

Apple on Thursday announced a range of new initiatives designed to help parents and developers create a safer experience for kids and teens using Apple devices. In addition to easier setup of child accounts, parents will now be able to share information about their kids’ ages, which can then be accessed by app developers to…

Google makes it easier to delete personal info from Search results

Google announced on Wednesday that it’s updating its “Results about you” tool to make it easier for users to protect and remove their personal information from Search results. The company says it’s improved the sign-up process and simplified requesting removals directly from Google Search. The tool can be used to proactively monitor and delete things…

A major cybersecurity law is expiring soon — and advocates are prepping to push Congress for renewal 

A push is gearing up to renew an expiring 10-year-old cybersecurity law that was viewed at its initial passage as the most significant cybersecurity legislation Congress had ever passed, and that advocates say now fosters several important threat-sharing initiatives. The 2015 Cybersecurity Information Sharing Act provides safeguards for companies that voluntarily share threat intelligence data…

Murena now sells a ‘deGoogled’ Pixel Tablet

Murena, the French privacy firm that’s forked Android to deliver so-called deGoogled smartphones, has repeated the trick with a tablet. So if you’re keen to get your hands on a shiny Pixel Tablet — but without the usual bundle of Google apps and services — Murena has you covered. The Murena Pixel Tablet runs the…

X is blocking links to Signal, a secure messaging platform used by federal workers

Elon Musk’s X (formerly Twitter) is blocking links to Signal.me, a URL shortener used by the private messaging app Signal that allows users to send out a link that’s used to contact them directly through the service. The blocks, which impact direct messages, public posts, and profile pages, were first spotted by the blog Disruptionist. …

South Korea blocks downloads of DeepSeek from local app stores

South Korean officials on Saturday temporarily restricted Chinese AI Lab DeepSeek’s app from being downloaded from app stores in the country pending an assessment of how the Chinese company handles user data. The Personal Information Protection Commission (PIPC) said the Chinese app would be available to be downloaded once it complies with Korean privacy laws…

UK’s Secret Apple Backdoor Request, AI Chatbots Used For Stalking

In this episode, we discuss the UK government’s demand for Apple to create a secret backdoor for accessing encrypted iCloud backups under the Investigatory Powers Act and its potential global implications on privacy. We also discuss the first known case where AI chatbots were used in a stalking indictment, highlighting the dangers of technology misuse…

What is an encryption backdoor?

Talk of backdoors in encrypted services is once again doing the rounds after reports emerged that the U.K. government is seeking to force Apple to open up iCloud’s end-to-end encrypted (E2EE) device backup offering. Officials were said to be leaning on Apple to create a “backdoor” in the service that would allow state actors to…

These Google Photos alternatives offer tons of storage options at a reasonable price

Google Photos is a great service for storing images across devices. But Google Drive and Gmail only offer 15GB of storage for free. Google Photos used to offer free unlimited storage of images, but that is not the case anymore. If you are looking for a better photo storage plan, different features, or just want…

EU abandons ePrivacy, AI liability reforms, as bloc shifts focus to competitiveness & data access for AI

A long stalled bid to beef up European Union rules around online tracking technologies — and put penalties on a similar footing to the bloc’s data protection framework, GDPR, which allows for fines of up to 4% of annual turnover for breaches — has been withdrawn by the Commission after co-legislators failed to reach agreement…

Careers in Cybersecurity: Myths and Realities with Kathleen Smith

In this episode we welcome Kathleen Smith, CMO of ClearedJobs.net, to discuss the current state of the cybersecurity job market. Kathleen shares her extensive experience in the field, recounting her tenure in various cybersecurity events and her contributions to job market research and recruiting. She discusses challenges such as distinguishing between genuine workforce shortages and…

OpenAI launches data residency in Europe

OpenAI on Thursday launched data residency in Europe, allowing European organizations to meet local data sovereignty requirements while using the AI company’s products. Data residency refers to the physical location of an organization’s data, as well as the local laws and policy requirements imposed on that data. Most tech giants and cloud providers offer European…

Lawmakers fear Elon Musk, DOGE not adhering to privacy rules

Congress is getting vocal about the privacy and security implications of Elon Musk and his cohorts at the Department of Government Efficiency accessing federal systems. Democrats on the House Homeland Security Committee said Wednesday DOGE must comply with security and privacy laws as they obtain access to federal systems, something the lawmakers say they don’t…

Privacy Concerns with Digital Driver’s Licenses, The Rise of DeepSeek AI

In this episode, we explore the rollout of digital driver’s licenses in states like Illinois and the potential privacy issues that come with them. Can digital IDs truly enhance convenience without compromising your privacy? We also discuss the new Chinese AI model, DeepSeek, which is affecting U.S. tech companies’ stock prices. Join us as we…

WhatsApp says it disrupted spyware campaign aimed at reporters, civil society

WhatsApp said Friday that it had disrupted a spyware campaign that targeted 90 people, including journalists and activists. The company tied to the campaign, according to WhatsApp, is Israeli firm Paragon, which last fall signed a $2 million contract with Immigration and Customs Enforcement and recently was purchased by U.S. private equity giant AE International.…

Tulsi Gabbard tussles with senators over Snowden, surveillance 

Tulsi Gabbard, President Donald Trump’s nominee for director of national intelligence, told the Senate Intelligence Committee on Thursday that she would leave her own political views “at the door” and deliver “intelligence that is collected, analyzed and reported without bias, prejudice or political influence.” But she also accused the Biden administration and other national security…

Smashing Security podcast #402: Hackers get hacked, the British Museum IT shutdown, and social media kidnaps

What happens when eager computer enthusiasts unknowingly download a trojanized hacking tool and find themselves on the wrong side of cybersecurity? A former employee’s actions led to chaos and raise urgent questions about the security of cultural treasures. And join us as we explore the alarming trend of social media influencers staging fake kidnappings. All…

Ireland and Italy send data watchdog requests to DeepSeek: ‘The data of millions of Italians is at risk’

The jury is still out on whether the Chinese AI upstart DeepSeek is a game changer or part of an elaborate plan by its hedge fund parent company to short Nvidia and other tech stocks. Whichever it might be (maybe both?), DeepSeek and its large language model have made some major waves. And now, it’s…

Italy sends first data watchdog request to DeepSeek: ‘The data of millions of Italians is at risk’

The jury is still out on whether the Chinese AI upstart DeepSeek is a game changer or possibly part of an elaborate plan by its hedge fund parent company to short Nvidia and other tech stocks. Whichever it might be (maybe both?), DeepSeek and its large language model has made some major waves. Now, it’s…

Meta AI can now use your Facebook and Instagram data to personalize its responses

Meta says that it is rolling out improvements to Meta AI, its cross-platform chatbot, including the ability have the bot “remember” details from conversations. In a post on Meta’s official blog, the company said that, in chats with Meta AI on Facebook, Messenger, and WhatsApp for iOS and Android in the U.S. and Canada, users can…

Gravy Analytics Breach, Subaru Starlink Vulnerability Exposed

In this episode, we discuss the latest issues with data brokers, focusing on a breach at Gravy Analytics that leaked 30 million location data points online. We also explore a vulnerability in Subaru’s Starlink system that allows unrestricted access to vehicle controls and customer data using just a last name and license plate number. Co-host…

OpenAI says it may store deleted Operator data for up to 90 days

OpenAI says that it might store chats and associated screenshots from customers who use Operator, the company’s AI “agent” tool, for up to 90 days — even after a user manually deletes them. OpenAI has a similar deleted data retention policy for ChatGPT, its AI-powered chatbot platform. However, the retention period for ChatGPT is only…

WhatsApp wins reprieve in India over user data sharing

An Indian tribunal on Thursday suspended restrictions that would have barred WhatsApp from sharing user data with its parent company Meta, delivering a significant victory for Mark Zuckerberg’s social media empire in its largest market by users. The ruling by the National Company Law Appellate Tribunal temporarily lifts a five-year ban imposed by India’s antitrust…

The Comprehensive Guide to Understanding Grok AI: Architecture, Applications, and Implications

Explore the revolutionary Grok AI system in this comprehensive guide. From its sophisticated architecture to real-world applications, discover how this advanced AI assistant integrates with the X platform while maintaining robust privacy and security measures. The post The Comprehensive Guide to Understanding Grok AI: Architecture, Applications, and Implications appeared first on Security Boulevard.

Smashing Security podcast #400: Hacker games, AI travel surveillance, and 25 years of IoT

The video game Path of Exile 2 suffers a security breach, we explore the issues of using predictive algorithms in travel surveillance systems, and the very worst IoT devices are put on show in Las Vegas. Oh, and has Elon Musk accidentally revealed he cheats at video games? All this and much more is discussed…

2025 Prediction 3: Digital Security Will Expand Beyond Privacy Concerns To Include Holistic, Integrated Cyber and Physical Protection

On January 7, we published a press release to share our five predictions for cybersecurity in 2025. Over the next few weeks, we’ll publish a blog series that provides additional commentary on each prediction. This is the second blog in the series. Check out the first and second blogs here.    Prediction Key Takeaways: We…

Second Biden cyber executive order directs agency action on fed security, AI, space

A draft cybersecurity executive order would tackle cyber defenses in locations ranging from outer space to the U.S. federal bureaucracy to its contractors, and address security risks embedded in subjects like cybercrime, artificial intelligence and quantum computers. The draft, a copy of which CyberScoop obtained, constitutes one big last stab at cybersecurity in the Biden…

AI Privacy Policies: Unveiling the Secrets Behind ChatGPT, Gemini, and Claude

Do you ever read the privacy policy of your favorite AI tools like ChatGPT, Gemini, or Claude? In this episode, Scott Wright and Tom Eston discuss the critical aspects of these policies, comparing how each AI engine handles your personal data. They explore the implications of data usage, security, and privacy in AI, with insights…

Every smartphone in LA accidentally received a wildfire evacuation alert

As wildfires rage for the third consecutive day through parts of Los Angeles, now including the Hollywood Hills, several neighborhoods have been forced to evacuate for safety purposes. But on Thursday afternoon, a wildfire evacuation alert was mistakenly sent to the smartphone of every resident in Los Angeles County, a region with more than 9…

Smashing Security podcast #399: Honey in hot water, and reset your devices

Ever wonder how those “free” browser extensions that promise to save you money actually work? We dive deep into the controversial world of Honey, the coupon-finding tool owned by PayPal, and uncover a scheme that might be leaving you with less savings and your favorite YouTubers with empty pockets. Plus, we take a look at…

After UN adoption, controversial cybercrime treaty’s next steps could prove vital

A divisive United Nations cybercrime treaty — one that critics say is a huge danger to human rights and that the United States cautiously agreed to advance — is now in the hands of member nations. The U.N. General Assembly adopted the treaty without a vote last week, leaving ratification to individual states. If the…

2024 Year in Review: What We Got Right and Looking to 2025

In the final episode of the Shared Security Podcast for 2024, join us as we recap our predictions for the year, discuss what we got right and wrong, and highlight our top episodes on YouTube. We also extend a heartfelt thank you to our Patreon supporters and special guests. Plus, stay tuned for our predictions…

Judge grants ruling in favor of WhatsApp against spyware firm NSO Group

A federal judge has dealt the first major legal blow against spyware maker NSO Group, ruling in favor of WhatsApp in a five-year-old lawsuit against the Israeli firm over allegations that it hacked the chat service. Northern California District Court Judge Phyllis Hamilton made her ruling on Friday as a summary judgment, thus not requiring…

Why Apple sends spyware victims to this nonprofit security lab

Before the elections, the cybersecurity team of U.S. vice president and then-presidential candidate Kamala Harris reached out to Apple asking for help, according to Forbes, after a tool that’s designed to detect spyware on iPhones flagged anomalies on two devices belonging to campaign staffers. Apple declined to forensically analyze the phones, per Forbes.  The company’s…

World(coin) must let Europeans comprehensively delete their data, under privacy order

It took a lot more than the initially slated few weeks to arrive, but a pivotal privacy decision that’s been hanging over Sam Altman’s World (aka Worldcoin) for months has finally landed, via a late December decision from the Bavarian data protection authority enforcing the bloc’s General Data Protection Regulation (GDPR), a comprehensive privacy framework…

Apple and Meta go to war over interoperability vs. privacy

Apple and Meta are warring in Europe over the balance between interoperability and privacy, Reuters reports. The fight focuses on the European Union’s Digital Markets Act (DMA), a competition regulation that requires designated gatekeepers (including Apple and Meta) not to restrict rivals’ access to so-called core platform services. In Apple’s case, this means: iOS, iPadOS,…

WordPress Appliance - Powered by TurnKey Linux