Applying for a government job shouldn't trigger a nationwide location tracking search. Yet EFF identified multiple law enforcement agencies in Missouri, Texas, Mississippi, and Illinois using Flock ALPR networks to run background checks. www.eff.org/deeplinks/2...

More License Plate Reader Mission Creep: School Residency

An EFF analysis of millions of searches of Flock Safety automated license plate reader (ALPR) data by police has uncovered a troubling pattern: in the absence of a warrant requirement to search ALPR

eff.org

A President ordering the Justice Department to criminally investigate a woman who won a sexual assault lawsuit against him makes Watergate look like an unpaid parking ticket.

look. is everything more expensive now? yes. but you have to look on the bright side too. now every time you open a computer, it doesn't work

In addition, literal stacks of M4000 chemical bombs, used by the Assad regime to drop sarin on civilians in 3 recorded incidents, were found and photographed. Yet more evidence everything we published at Bellingcat based on our open source investigations of chemical attacks was accurate.

Gregory Koblentz@gregkoblentz.bsky.social · 2mo ago

☠️Biggest find by OPCW since fall of the Assad regime: "dozens of undeclared chemical munitions such as aerial bombs and rockets as well as separately found chemicals and related equipment" at undeclared locations in northern coastal and central regions. www.opcw.org/sites/defaul...

Google Cloud found a zero-day in KnowledgeDeliver, an LMS popular in Japan This was being exploited to take over servers and then show a fake security alert and infect site visitors with other malware cloud.google.com/blog/topics/...

Here is a look at all the special security features that Apple, Google, and WhatsApp offer to protect you from spyware all in one place. We looked at what these features do, and how to turn them on. We highly recommend them for anyone who's worried about government spyware.

These special phone and app features can help protect you from spyware | TechCrunch

Apple, Meta, and Google offer special security modes that provide your devices more secure against targeted spyware attacks. Here are how those modes work, what they do, and how to switch them on.

techcrunch.com

Microsoft has banned Nightmare Eclipse from GitHub: github.com/Nightmare-Ec... This is the researcher who disclosed several zero-days after Microsoft also deleted his MSRC account They now moved on GitLab: deadeclipse666.blogspot.com

Attackers took over the art-template npm package and used it to deliver a Coruna-like iOS Safari exploit framework. Socket Threat Research breaks down the package takeover, device fingerprinting, and exploit delivery chain: socket.dev/blog/coruna-...

Coruna Respawned: Compromised art-template npm Package Leads...

Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.

socket.dev

Mohammad Muzahir, aka Red Bull, the scam compound whistleblower and human trafficking victim whose incredible bravery made possible the story below, now has a GoFundMe: www.gofundme.com/f/support-wh... I'm in touch with the creator, who is legit. Grateful to her and to anyone who can donate.

Donate to Help Scam Compound Whistleblower Rebuild His Life, organized by Jonna Higgins-Freese

Red Bull was trafficked, tortured, and forced to work as a scam… Jonna Higgins-Freese needs your support for Help Scam Compound Whistleblower Rebuild His Life

gofundme.com

Andy Greenberg@agreenberg.bsky.social · 6mo ago

Last year, a human trafficking victim trapped in a crypto scam compound in the Golden Triangle region of Laos contacted me. He then proceeded to leak to me a huge collection of the compound's internal materials. Then he had to get out alive. This is his story. 🧵👇 www.wired.com/story/he-lea...

84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...

Tanstack npm Packages Compromised in Ongoing Mini Shai-Hulud...

Socket detected 84 compromised TanStack npm packages modified with suspected CI credential-stealing malware.

socket.dev

To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal. More changes are on the way.

My resolution proposing a constitutional amendment to overturn the Supreme Court’s Citizens United decision now has 79 co-sponsors. You can view the full list at: www.congress.gov/bill/119th-c.... I’ll keep fighting to get it across the finish line!

Yo usando Claude Code con Opus 4.7 para mover el margen de un div 2px.

🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/intercom-php@5.0.2 package artifact tied to this campaign. This is the third supply chain attack we've reported on today, and we're continuing to monitor the campaign: socket.dev/blog/mini-sh...

Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP...

Socket found a malicious Intercom PHP package on Packagist using Composer plugin execution to steal credentials and spread across ecosystems.

socket.dev

The recording of my second Binary Cartography webinar is public: Agentic Malware Analysis: From Task Automation to Deep Analysis Topics: string decryption, API hashing, unpacking & pipeline building Recording: youtu.be/azej1P17w9E Slides & samples: github.com/mrphrazer/bi...

Agentic Malware Analysis: From Task Automation to Deep Analysis

YouTube video by Tim Blazytko

youtu.be

This wild document is the basis for the State Department's decision to cancel the visas and green cards of tech researchers who study the social media platforms and of tech regulators who enforce privacy and transparency laws. Disclosed to us last night in @thecoalition.bsky.social v. Rubio.

fuuuuuuck

ProPublica@propublica.org · 3mo ago

When DOGE arrived at the Nuclear Regulatory Commission, the operatives had no real background in nuclear issues. They boxed out experienced hands, forcing resignations and massive exodus of talent. Over 400 people have since left or been forced out. Our full story: https://propub.li/3OBQMwk

i’ve worked in tech more than 20 years. it has never been more ridiculous.

SCOOP: Palantir's 22-point manifesto is alarming even its own employees—but it's just the latest move by leadership that's incensed workers. More on the internal dissent growing inside the company: wired.com/story/palantir-employees-are-starting-to-wonder-if-theyre-the-bad-guys/

Palantir Employees Are Starting to Wonder if They're the Bad Guys

Interviews with current and former Palantir employees, along with internal Slack messages obtained by WIRED, suggest a workforce in turmoil.

wired.com

When DOGE arrived at the Nuclear Regulatory Commission, the operatives had no real background in nuclear issues. They boxed out experienced hands, forcing resignations and massive exodus of talent. Over 400 people have since left or been forced out. Our full story: https://propub.li/3OBQMwk

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.

Apple’s advisory confirmed that the bugs that allowed this to happen have been fixed in the latest iOS release. You can read more here: support.apple.com/en-us/127002

More ransomware and commodity malware blogs! Screw the reusable APT tooling

Horkos@wylienewmark.bsky.social · 3mo ago

Gotta wonder how much time and energy went into deciphering something from a 9-year old NSA leak that could’ve gone into any number of investigations of contemporary Russian, Chinese, Iranian, North Korean, or criminal cyber operations that pose an immediate threat to civilian networks today.

The APT researchers yearn to provide shareholder value

Horkos@wylienewmark.bsky.social · 3mo ago

i have no particular problem with what is sometimes referred to as “cyber paleontology” but it certainly feels like something better left to academic or personal efforts rather than those of a vendor whose purpose is to generate shareholder value by providing defensive advantage in the present.

🚨 Breaking: Namastex Labs, the team behind Automagik[.]dev, hit with a supply chain attack affecting its npm packages. The malicious versions replicate TeamPCP-style Canister Worm tradecraft, including secret theft, exfiltration, and self-propagation. socket.dev/blog/namaste...

Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm...

Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

socket.dev

We published technical analysis of the Checkmarx compromise, including how malicious extensions silently fetched a second-stage payload from Checkmarx’s own GitHub repo. Our analysis also shows the malware stole developer credentials and used them for exfiltration and propagation.

Socket@socket.dev · 4mo ago

🚨 BREAKING: Socket and @docker.com uncovered what appears to be a broader Checkmarx supply chain compromise affecting official KICS Docker images and recent Checkmarx VS Code extension releases. More details: socket.dev/blog/checkma...

Objection, a Thiel-backed startup, aims to use AI to judge journalism, letting users pay to challenge stories. Critics warn it could chill whistleblowers and reshape how media accountability works.

Exclusive: Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers

Objection, a Thiel-backed startup, aims to use AI to judge journalism, letting users pay to challenge stories. Critics warn it could chill whistleblowers and reshape how media accountability works.

techcrunch.com

“If you criticise Palantir’s platform one more time, you are going to lose your job.” Solidarity to all NHS workers opposing this toxic corporation. Shame on those bullying them. But they won’t stop us. We’re going to ditch Palantir. www.ft.com/content/ff70...

Senior NHS officials warned staff over criticising rollout of Palantir platform

Ethical objections and uneven adoption have made the tech group’s contract a divisive issue within English health service

ft.com

This is a great interview about how we ended up with the internet being hell, and how that results in today's politics, including the role journalists have played. Watch, subscribe here: www.youtube.com/watch?v=gp_n...