@pulsarcube.bsky.social

NEW: A series of issues in Apple’s web browser engine — the tech underlying all browsers on iOS — means that Apple’s iCloud Private Relay tool, which is supposed to hide a user’s IP address, in many cases doesn’t actually work. In fact, its exposing users' real IP addresses.

Apple's ‘Private Relay’ Is Exposing Users' Real IP Addresses

Researchers found a group of issues that mean Private Relay isn't actually protecting users' real IP addresses. 404 Media verified the issues do expose IP addresses.

404media.co

Maybe better to not connect your "smart TV" to the Internet ... "researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV." krebsonsecurity.com/2026/07/lg-t...

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less...

krebsonsecurity.com

NEW: Cops around the country have used Flock cameras at least hundreds of times to search for specific people, not cars, using searches such as “person on skateboard,” and “person wearing orange vest and construction hat,” according to data reviewed by 404 Media.

How Cops Use Flock to Track People, Not Cars

Cops have used Flock's FreeForm search feature to look for people with tattoos and wearing specific sport shirts, and searches sometimes include the target's race, according to data reviewed by 404 Me...

404media.co

Cops have used Flock's FreeForm search feature to look for people with tattoos and wearing specific sport shirts, and searches sometimes include the target's race, according to data reviewed by 404 Media.

How Cops Use Flock to Track People, Not Cars

Cops have used Flock's FreeForm search feature to look for people with tattoos and wearing specific sport shirts, and searches sometimes include the target's race, according to data reviewed by 404 Media.

404media.co

Thought you can use the Internet anonymously? Think again. If you're using Windows, Microsoft can link your online activities to your device using telemetry and a persistent device identifier. A VPN doesn't help since the OS itself is reporting your activities. www.pcmag.com/news/a-hacke...

A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID

The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising privacy red flags about Windows' surveillance capabilities.

pcmag.com

Signal’s Meredith Whittaker: The Push for Online Safety Risks Mass Surveillance Interview by Mishal Hussain The president of the encrypted messaging app says autonomous AI agents, device scanning and digital advertising are converging into a new architecture of surveillance.

Signal's Meredith Whittaker: The Push for Online Safety Risks Mass Surveillance

The president of the encrypted messaging app says autonomous AI agents, device scanning and digital advertising are converging into a new architecture of surveillance.

bloomberg.com

We reported earlier this year on Meta's plans to roll out a facial recognition feature in its smart glasses and the company said it was "still thinking through options." Now Wired discovers that the code to do it is already in Meta's AI app: www.wired.com/story/meta-s...

Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones

Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.

wired.com

Oh my. "[...] a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems." krebsonsecurity.com/2026/05/cisa...

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovC...

krebsonsecurity.com

Super helpful post on how to turn off ad sharing and personalized ads in free ChatGPT plans, complete with instructions on clearing ad history and a ton of other privacy settings to tweak. I didn't even know about some of these. onlinesafety.substack.com/p/turn-off-c...

Turn Off ChatGPT’s New Ad Tracking

OpenAI just opted free ChatGPT users into ad tracking by default. Here's how to protect your privacy and turn it off, which everyone should do.

onlinesafety.substack.com

"[...] we had the opportunity to apply an early version of Claude Mythos Preview to Firefox. This week’s release of Firefox 150 includes fixes for 271 vulnerabilities identified during this initial evaluation." blog.mozilla.org/en/firefox/a...

The zero-days are numbered  | The Mozilla Blog

Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser.

blog.mozilla.org

Disable ad tracking on your phones, people! Be careful which apps you grant location access. 🧵 bsky.app/profile/jsra...

John Scott-Railton@jsrailton.bsky.social · 4mo ago

BREAKING: You checked the weather this morning. And you just told a surveillance company where you sleep. Meet #Webloc, used by ICE, cops & foreign govs to track 500m+ phones. No warrant required. Our @citizenlab.ca investigation + how to protect yourself 🧵/1 citizenlab.ca/research/ana...

heatmaps from the report showing tracking