Security, Spoken

Proton is adding an end-to-end encrypted documents editor to its privacy tools, boosting its competition with Google’s suite of productivity apps.

The carmaker says that China tariffs will impact its core product, the Polestar 2, amid growing financial pressure.

While Kaspersky and TikTok make very different kinds of software, the US has targeted both over national security concerns. But the looming bans have larger implications for internet freedom.

AWS hosted a server linked to the Bezos family- and Nvidia-backed search startup that appears to have been used to scrape the sites of major outlets, prompting an inquiry into potential rules violations.

Gutted of civil rights protections by Democrats to woo pro-business Republicans, the American Privacy Rights Act was pulled from a key congressional hearing—and appears unlikely to receive a full vote.

A custom platform created by SITU Research aided the International Criminal Court to prosecute a war crimes case for the first time. It could change how justice is enacted on an international scale.

How accurate are gunshot detection systems, really? For years, it's been a secret, but new reports from San Jose and NYC show these systems have operated well below their advertised accuracy rates.

With cyberattacks increasingly targeting health care providers, an arduous bureaucratic process meant to address legal risk is keeping hospitals offline longer, potentially risking lives.

Using a Trump-era authority, the US Commerce Department has banned the sale of Kaspersky’s antivirus tools to new customers in the US, citing alleged threats to national security.

In this common email scam, a criminal pretending to be your boss or coworker emails you asking for a favor involving money. Here's what do to when a bad actor lands in your inbox.

A ShinyHunters hacker tells WIRED that they gained access to Ticketmaster’s Snowflake cloud account—and others—by first breaching a third-party contractor.

Two organizations that supported unconditional cash grants told WIRED that they will no longer disclose their financial statements and internal policies. Their stance follows a similar denial by OpenAI.

CCTV cameras and AI are being combined to monitor crowds, detect bike thefts, and spot trespassers.

The messaging standard promises better security and cooler features than plain old SMS. Android has had it for years, but now iPhones are getting it too.

When Hurricane Larry made landfall two years ago, it dropped over 100,000 microplastics per square meter of land per day. It’s another ominous sign of how plasticized the environment has become.

Long-running nonprofit Common Crawl has been a boon to researchers for years. But now its role in AI training data has triggered backlash from publishers.

Cybersecurity firm Recorded Future counted 44 health-care-related incidents in the month after Change Healthcare’s payment came to light—the most it’s ever seen in a single month.

The OSIRIS-REx capsule containing a “treasure trove” of space rocks has now arrived at Johnson Space Center, where scientists will gingerly unpack it.

Democratic leader Hakeem Jeffries has joined US intelligence officials in ignoring repeated inquiries about Israel’s “malign” efforts to covertly influence US voters.

As the fight against ransomware slogs on, security experts warn of a potential escalation to “real-world violence.” But recent police crackdowns are successfully disrupting the cybercriminal ecosystem.

A new discovery that the AI-enabled feature's historical data can be accessed even by hackers without administrator privileges only contributes to the growing sense that the feature is a “dumpster fire.”

Clouds way up in the stratosphere act like a blanket, trapping heat in the Arctic and Antarctica. That could help explain why models keep underestimating how fast they’re warming.

In 2021, scientists experimenting with fiber optics picked up a strange signal: the cacophony of cicadas. It could lead to a new way of monitoring insects.

Police are hosting events to collect DNA samples that can help solve missing persons cases. But when people put their DNA in a commercial database, it can used for other purposes.

YouTube remains the only major US-based social media platform available in Russia. It’s become “indispensable” to everyday people, making a ban tricky. Journalists and dissidents are taking advantage.

We're bringing an extra episode from our show What's New.

As the climate changes, the bloodthirsty creatures are moving north from Latin America, bringing the threat of rabies with them.

An open letter signed by former and current employees at OpenAI and other AI giants calls for whistleblower protections as the artificial intelligence rapidly evolves.

Windows Recall takes a screenshot every five seconds. Cybersecurity researchers say the system is simple to abuse—and one ethical hacker has already built a tool to show how easy it really is.

Donald Trump has vowed to go after political enemies, undocumented immigrants, and others if he wins. Experts warn that he could easily turn the surveillance state against his targets.

Thanks to a flaw in a decade-old version of the RoboForm password manager and a bit of luck, researchers were able to unearth the password to a crypto wallet containing a fortune.

We're bringing an extra episode from our show What's New.

Agriculture is a huge source of greenhouse gas emissions, so the US is getting serious about reform. But some scientists say current efforts are misguided.

We're bringing an extra episode from our show Business, Spoken.

Artificial intelligence may streamline a form of business communication that’s already super fake.

In seemingly the first case of its kind, the US Justice Department has charged a Chinese national with using a drone to photograph a Virginia shipyard where the US Navy was assembling nuclear submarines.

Twitter cofounder Ev Williams is backing a new social network called Maven, which trades likes and follows for algorithms designed to foster serendipity and deep discussion.

We're bringing an extra episode from our show Science, Spoken.

Once considered a disease of the affluent, hypertension now affects a third of all adults. The WHO wants nations to get organized to combat it.

Police are using subtle psychological operations against ransomware gangs to sow distrust in their ranks—and trick them into emerging from the shadows.

The strange journey of Lin Rui-siang, the 23-year-old accused of running the Incognito black market, extorting his own site's users—and then refashioning himself as a legit crypto crime expert.

Thousands of fingerprints and facial images linked to police in India have been exposed online. Researchers say it’s a warning of what will happen as the collection of biometric data increases.

Ultra-wideband radio has been heralded as the solution for “relay attacks” that are used to steal cars in seconds. But researchers found Teslas equipped with it are as vulnerable as ever.

A WIRED investigation found thousands of Eventbrite posts selling escort services and drugs like Xanax and oxycodone—some of which the company’s algorithm recommended alongside addiction recovery events.

Two judges in London have ruled WikiLeaks’ founder Julian Assange can appeal his extradition to the US on freedom of speech grounds.

A seemingly coordinated campaign playing out across X, Telegram, and state-run media blames Ukraine for the attempted assassination of Robert Fico—something for which there is no evidence.

“Yahoo Boy” cybercriminals are openly running dozens of scams across Facebook, WhatsApp, Telegram, TikTok, YouTube, and more.

Google is introducing new AI-powered safety tools in Android 15 that can lock down your phone if thieves nab it.

A coalition of digital rights groups is demanding the US declassify records that would clarify just how expansive a major surveillance program really is.

NYC mayor Eric Adams wants to test Evolv’s gun-detection tech in subway stations—despite the company saying it’s not designed for that environment. Emails obtained by WIRED show how the company still found an in.

A Kremlin-aligned network called Doppelganger has used faked versions of real news sites to push both pro-Palestine and pro-Israel disinformation.

Outabox, an Australian firm that scanned faces for bars and clubs, suffered a breach that shows the problems with giving companies your biometric data.

An internal email from FBI deputy director Paul Abbate, obtained by WIRED, tells employees to search for “US persons” in a controversial spy program’s database that investigators have repeatedly misused.

Law enforcement officials from the US, UK, and Australia say they’ve identified and sanctioned the person behind LockBitSupp, the administrator at the heart of LockBit’s $120 million hacking rampage.

The iPhone maker has detected spyware attacks against people in more than 150 countries. Knowing if your device is infected can be tricky—but there are a few steps you can take to protect yourself.

Blockchain analysis firm Elliptic, MIT, and IBM, have released a new AI detection model—and the 200-million-transaction dataset it's trained on—that aims to spot the “shape” of Bitcoin money laundering.

Thousands of planes and ships are facing GPS jamming and spoofing. Experts warn these attacks could potentially impact critical infrastructure, communication networks, and more.

Indeed and LinkedIn are incorporating more generative AI to improve the recruiting and job-hunting processes. Some recruiters are still unconvinced.

The world's most-visited deepfake website and another large competing site are stopping people in the UK from accessing them, days after the UK government announced a crackdown.

Sources suspect China is behind the targeted exploitation of two zero-day vulnerabilities in Cisco’s security appliances.

Read this story here.

Thousands of exposed files on a misconfigured North Korean server hint at one way the reclusive country may evade international sanctions.

Read this story here.

The company belatedly conceded both that it had paid the cybercriminals extorting it and that patient data nonetheless ended up on the dark web.

Read this story here.

Over the weekend, president Joe Biden signed legislation not only reauthorizing a major FISA spy program but expanding it in ways that could have major implications for privacy rights in the US.

Read this story here.

One juror in former US president Donald Trump’s criminal case in New York has been excused over fears she could be identified. It could get even messier.

Read this story here.

One of Silicon Valley's most influential lobbying arms joins privacy reformers in a fight against the Biden administration-backed expansion of a major US surveillance program.

Read this story here.

Change Healthcare ransomware hackers already received a $22 million payment. Now a second group is demanding money, and has sent WIRED samples of what they claim is the company's stolen data.

Read this story here.

A controversial bill reauthorizing the Section 702 spy program may force whole new categories of businesses to eavesdrop on the US government's behalf, including on fellow Americans.

Read this story here.

US House of Representatives voted on Friday to extend the Section 702 spy program. It passed without an amendment that would have required the FBI to obtain a warrant to access Americans' information.

Read this story here.

Some companies let you opt out of allowing your content to be used for generative AI. Here’s how to take back (at least a little) control from ChatGPT, Google’s Gemini, and more.

Read this story here.

Privacy-focused company DuckDuckGo is launching a tool to remove data from people-search websites, a VPN, and an identity theft restoration service.

Read this story here.

Ad trackers are out of control. Use a browser that reins them in.

Read this story here.

While some states have made data privacy gains, the US has so far been unable implement protections at a federal level. A new bipartisan proposal called APRA could break the impasse.

Read this story here.

AI tools are getting better at cloning people's voices, and scammers are using these new capabilities to commit fraud. Avoid getting swindled by following these expert tips.

Read this story here.

Millions lost internet service after three cables in the Red Sea were damaged. Houthi rebels deny targeting the cables, but their missile attack on a cargo ship, left adrift for months, is likely to blame.

Read this story here.

As “P4x,” Alejandro Caceres single-handedly disrupted the internet of an entire country. Then he tried to show the US military how it can—and should—adopt his methods.

Read this story here.

The thwarted XZ Utils supply chain attack was years in the making. Now, clues suggest nation-state hackers were behind the persona that inserted the malicious code.

Read this story here.

To settle a years-long lawsuit, Google has agreed to delete “billions of data records” collected from users of “Incognito mode,” illuminating the pitfalls of relying on Chrome to protect your privacy.

Read this story here.

Vice President Kamala Harris says new rules for government AI deployments, including a requirement that algorithms are checked for bias, will “put the public interest first.”

Read this story here.

A WIRED investigation uncovered coordinates collected by a controversial data broker that reveal sensitive information about visitors to an island once owned by Epstein, the notorious sex offender.

Read this story here.

The company behind the Saflok-brand door locks is offering a fix, but it may take months or years to reach some hotels.

Read this story here.

Multiple university departments linked to the Clinical School Computing Service have been inaccessible for a month. The university has not yet revealed the nature of the “malicious activity.”

Read this story here.

A high court in London says the WikiLeaks founder won’t be extradited “immediately” and the US must provide more “assurances” about any extradition.

Read this story here.

US and UK officials hit Chinese hacking group APT31 with sanctions and criminal charges after they targeted thousands of businesses, politicians, and critics of China.

Read this story here.

Privacy and security are an Apple selling point. But the DOJ's new antitrust lawsuit argues that Apple selectively embraces privacy and security features in ways that hurt competition—and users.

Cookie pop-ups now show the number of “partners” that websites may share data with. Here's how many of these third-party companies may get your data from some of the most popular sites online.

Read this story here.

Anonymous, candid reviews made Glassdoor a powerful place to research potential employers. A policy shift requiring users to privately verify their real names is raising privacy concerns.

Read this story here.

The platform says it stands to make more than $200 million in coming years from Google and other companies that want user comments to feed AI projects. Regulators have questions.

Read this story here.

For months, US lawmakers have examined every side of a historic surveillance debate. With the introduction of the SAFE Act, all that's left to do now is vote.

Read this story here.

The Pentagon says it’s not hiding aliens, but it stops notably short of saying what it is hiding. Here are the key questions that remain unanswered—some answers could be weirder than UFOs.

Read this story here.

Every US president has the ability to invoke “emergency powers” that could give an authoritarian leader the ability to censor the internet, restrict travel, and more.

Read this story here.

With Meta’s updated 2FA process, the company now automatically trusts devices you often use.

Read this story here.

Tigran Gambaryan, a former crypto-focused US federal agent, and a second Binance executive, Nadeem Anjarwalla, have been held in Abuja without passports for two weeks.

Read this story here.

Content creators are using copyright laws to get nonconsensual deepfakes removed from the web. With the complaints covering nearly 30,000 URLs, experts say Google should do more to help.

Read this story here.

The transaction, visible on Bitcoin's blockchain, suggests the victim of one of the worst ransomware attacks in years may have paid a very large ransom.

Read this story here.

A coalition of 41 state attorneys general says Meta is failing to assist Facebook and Instagram users whose accounts have been hacked—and they want the company to take “immediate action.”

Read this story here.

Canada-based Sandvine has long sold its web-monitoring tech to authoritarian regimes. This week, the US sanctioned the company, severely limiting its ability to do business with American firms.

The UK’s privacy regulator says the government did not take into account the intrusiveness of ankle tags that continuously monitor a person’s location.

Read this story here.

The White House issued an executive order on Wednesday that aims to prevent the sale of Americans' data to “countries of concern,” including China and Russia. Its effectiveness may vary.

Read this story here.

Several of the strikes occurred far from the front lines of the conflict, indicating possible war crimes. Researchers say the attacks likely had devastating impacts on civilians.

Read this story here.

As Chinese automakers prepare to launch in the US, the White House is investigating whether cars made in China could pose a national security threat.

Read this story here.

Two months ago, the FBI “disrupted” the BlackCat ransomware group. They're already back—and their latest attack is causing delays at pharmacies across the US.

Read this story here.

When two former Meta employees dug into why the website of Iowa’s Clayton County Register was spewing dubious posts about stocks, they uncovered a network of sites slinging seemingly AI-made content.

Read this story here.

Useful quantum computers aren’t a reality—yet. But in one of the biggest deployments of post-quantum encryption so far, Apple is bringing the technology to iMessage.

Read this story here.

The US Congress was preparing to vote on a key foreign surveillance program. Then a wild Russian threat appeared.

Read this story here.

Google is still mostly supported by ads but its new subscription-only chatbot, Gemini Advanced, is a major new addition to the company's burgeoning services business.

Read this story here.

In an interview with WIRED, DeepMind CEO Demis Hassabis says the biggest breakthroughs in AI are yet to come—and will take more than just chips.

Read this story here.

LockBit’s website, infrastructure, and data have been seized by law enforcement—striking a huge blow against one of the world's most prolific ransomware groups.

Read this story here.

A surprise disclosure of a national security threat by the House Intelligence chair was part of an effort to block legislation that aimed to limit cops and spies from buying Americans' private data.

Read this story here.

Cyberattacks and criminal scams can impact anyone. But communities of color and other marginalized groups are often disproportionately impacted and lack the support to better protect themselves.

Read this story here.

Prominent advocates for the rights of pregnant people are urging members of Congress to support legislation that would ban warrantless access to sensitive data as the White House fights against it.

Read this story here.

Romantic chatbots collect huge amounts of data, provide vague information about how they use it, use weak password protections, and aren’t transparent, new research from Mozilla says.

Read this story here.

Top congressional lawmakers are meeting in private to discuss the future of a widely unpopular surveillance program, worrying members devoted to reforming Section 702.

Read this story here.

New research finds that Israel’s attacks on Gaza damaged hospitals and other medical facilities at the same rate as other buildings, potentially in violation of international law.

Read this story here.

In a test at one station, Transport for London used a computer vision system to try and detect crime and weapons, people falling on the tracks, and fare dodgers, documents obtained by WIRED show.

Read this story here.

Passkeys are here to replace passwords. When they work, it’s a seamless vision of the future. But don’t ditch your old logins just yet.

Read this story here.

After a slowdown in payments to ransomware gangs in 2022, last year saw total ransom payouts jump to their highest level yet, according to a new report from crypto-tracing firm Chainalysis.

Read this story here.

New EU rules mean WhatsApp and Messenger must be interoperable with other chat apps. Here’s how that will work.

Read this story here.

A UK High Court will settle a long-running debate over whether Craig Wright really is Satoshi Nakamoto, inventor of Bitcoin. Monday’s opening arguments laid the groundwork for both sides.

Read this story here.

An indictment against three Americans suggests that at least some of the culprits behind the theft of an FTX crypto fortune may be in custody.

Read this story here.

For nearly two years, police have been tracking down the culprit behind a wave of hoax threats. A digital trail took them to the door of a 17-year-old in California.

Read this story here.

US spy agencies purchased Americans' phone location data and internet metadata without a warrant but only admitted it after a US senator blocked the appointment of a new NSA director.

Read this story here.

Aerial drones have changed the war in Ukraine. Now, both Russia's and Ukraine's militaries are deploying more unmanned ground robots—and the two are colliding.

Read this story here.

A California teenager who allegedly used the handle Torswats to carry out a nationwide swatting campaign is being extradited to Florida to face felony charges, WIRED has learned.

Read this story here.

NSO Group, creator of the infamous Pegasus spyware, is spending millions on lobbying in Washington while taking advantage of the Israel-Hamas war to paint itself as essential for global security.

Read this story here.

The Amazon-owned home surveillance company says it is shuttering a feature in its Neighbors app that allows police to request footage from users. But it’s not shutting out the cops entirely.

Read this story here.

Nearly 90 percent of top news outlets like The New York Times now block AI data collection bots from OpenAI and others. Leading right-wing outlets like NewsMax and Breitbart mostly permit them.

Read this story here.

Apple’s iOS 17.3 introduces Stolen Device Protection to iPhones, which could stop phone thieves from taking over your accounts. Here’s how to enable it right now.

Read this story here.

The FTC forced a data broker to stop selling “sensitive location data.” But most companies can avoid such scrutiny by doing the bare minimum, exposing the lack of protections Americans truly have.

Read this story here.

Patching every device affected by the LeftoverLocals vulnerability—which includes some iPhones, iPads, and Macs—may prove difficult.

Read this story here.

A new report from Chainalysis finds that stablecoins like Tether, tied to the value of the US dollar, were used in the vast majority of crypto-based scam transactions and sanctions evasion in 2023.

Read this story here.

The US Securities and Exchange Commission and security firm Mandiant both had their X accounts breached, possibly due to changes to X's two-factor authentication settings. Here's how to fix yours.

Read this story here.

A midair blowout on a Boeing 737 Max 9 showed seatbelts matter, but infants under two still aren’t required to have their own seats. Experts say changing the rules would make flying safer for children—but, counterintuitively, would result in more deaths.

Read this story here.

The US approval of spot bitcoin ETFs, a new way to track the price of bitcoin, could trigger a gold rush for investors. But an exclusive cast of middlemen will earn big in the background, too.

Read this story here.

Crypto tracing firm Chainalysis found that sellers of child sexual abuse materials are successfully using “mixers” and “privacy coins” like Monero to launder their profits and evade law enforcement.

Read this story here.

More than 4 million school records, including safety procedures, student medical files, and court documents, were also publicly accessible online.

Read this story here.

The US Securities and Exchange Commission is under pressure to explain itself after its X account was compromised, leading to wild swings in the bitcoin market.

Read this story here.

Apple crushed Beeper Mini, an app that let Android users into Apple’s iMessage service. Beeper cofounder Eric Migicovsky says interoperability between Big Tech’s walled gardens is urgently needed.

Read this story here.

It was a year of devastating cyberattacks around the globe, from ransomware attacks on casinos to state-sponsored breaches of critical infrastructure.

Read this story here.

Being fully anonymous is next to impossible—but you can significantly limit what the internet knows about you by sticking to a few basic rules.

Read this story here.

I tried to sell a futon on Facebook Marketplace and nearly all I got were scammers.

Read this story here.

If you're at high risk of being targeted by mercenary spyware, or just don't mind losing iOS features for extra security, the company's restricted mode is surprisingly usable.

Read this story here.

Apple updated its location-tracking system in an attempt to cut down on AirTag abuse while still preserving privacy. Researchers think they’ve found a better balance.

Read this story here.

NIST, the US agency Joe Biden tasked with curbing the risks of AI, lacks the necessary resources. Lawmakers are concerned it could be forced to rely on private companies developing the technology.

Read this story here.

Keep your logins locked down with password management apps for PC, Mac, Android, iPhone, and web browsers.

Read this story here.

When crypto exchange FTX collapsed, it left behind a hole in the market. From Backpack to OPNX, faces new and old are vying to fill it.

Read this story here.

After an 18 month rampage, global law enforcement finally moved against the notorious Alphv or Blackcat ransomware group. Within hours, the operation faced obstacles.

Read this story here.

The Tesla recall, which affects more than two million vehicles, follows a two-year government investigation into a series of crashes linked to the Autopilot system.

Read this story here.

On Telegram, scammers are impersonating doctors to sell fake Covid-19 vaccination certificates and other products, showing how criminals are taking advantage of conspiracy theories.

Read this story here.

Kytch, the company that tried to fix McDonald’s broken ice cream machines, has unearthed a 3-year-old email it says proves claims of an alleged plot to undermine their business.

Read this story here.

Ten years in, Microsoft’s DCU has honed its strategy of using both unique legal tactics and the company’s technical reach to disrupt global cybercrime and state-backed actors.

Read this story here.

A hacker group calling itself Solntsepek—previously linked to Russia's notorious Sandworm hackers—says it carried out a disruptive breach of Kyivstar, a major Ukrainian mobile and internet provider.

Read this story here.

Competing bills moving through the House of Representatives both reauthorize Section 702 surveillance—but they pave very different paths forward for Americans' privacy and civil liberties.

Read this story here.

With its war against Russia raging on, Ukraine has begun raising funds to rebuild homes and structures one by one using its own crowdfunding platform.

Read this story here.

Adversarial algorithms can systematically probe large language models like OpenAI’s GPT-4 for weaknesses that can make them misbehave. Read the story here.

Governments can access records related to push notifications from mobile apps by requesting that data from Apple and Google, according to details in court records and a US senator.

Read this story here.

23andMe has provided more information about the scope and scale of its recent breach, but with these details come more unanswered questions.

Read this story here.

QR codes can be convenient—but they can also be exploited by malicious actors. Here’s how to protect yourself.

Read this story here.

A federal court ruled on Friday that Trump, as president, may be able to avoid civil action for his role in the January 6, 2021 attack on the US Capitol. But candidate Trump is something different.

Read this story here.

Musk’s recent use of the term “Q*Anon” is his most explicit endorsement of the movement to date. Conspiracists have since spent days dissecting its meaning and cheering on his apparent support.

Read this story here.

Dozens of advocacy groups are pressuring the US Congress to abandon plans to ram through the renewal of a controversial surveillance program that they say poses an “alarming threat to civil rights.”

Read this story here.

Congressional leaders are discussing ways to reauthorize Section 702 surveillance, including attaching it to the National Defense Authorization Act, Capitol Hill sources tell WIRED.

Read this story here.

Signal’s president reveals the cost of running the privacy-preserving platform—not just to drum up donations, but to call out the for-profit surveillance business models it competes against.

Read this story here.

Yes, your iPhone automatically turns on NameDrop with the latest software update. But you shouldn’t really be worried about it—regardless of what the police are saying.

Read this story here.

What you look for online is up to you—just make sure no one else is taking a peek.

Far-right influencers and right-wing lawmakers are using the spread of Osama bin Laden’s “Letter to America” to call for a TikTok ban and boost decades old conspiracies.

Read this story here.

Beyond the blinding speeds and sharp turns on new terrain, the teams at this weekend’s big F1 race are preparing for another kind of danger.

Read this story here.

A new report by an oversight committee in the US House of Representatives says the FBI has routinely violated rules governing FISA's Section 702 surveillance program and must be reined in.

Read this story here.

The National Telecommunication Monitoring Center in Bangladesh exposed a database to the open web. The types of data leaked online are extensive.

Read this story here.

The Norwegian data regulator has already fined Meta $7 million. Now it says it’s investigating the company’s new ad-free subscription services.

Read this story here.

An effort to reauthorize a controversial US surveillance program by attaching it to a must-pass spending bill has civil liberties advocates calling foul.

Read this story here.

Small platforms without resources to handle takedown requests have been weaponized by terrorist groups that share their content online. A free new tool is coming to help clean house.

Read this story here.

Experts are finding thousands of examples of AI-created content every week that could allow terrorist groups and other violent extremists to bypass automated detection systems.

Meta now offers users an ad-free option, but it’s only available in Europe for those who can afford the €10-a-month subscription.

Read this story here.

The tech-centric war in Ukraine and the success of ChatGPT have prompted new interest in figuring out how to prevent military AI from going awry.

Read this story here.

A complaint filed with the EU’s independent data regulator accuses YouTube of failing to get explicit user permission for its ad blocker detection system, potentially violating the ePrivacy Directive.

Read this story here.

Despite Linda Yaccarino having the top job at X, Elon Musk’s outsize presence may be hampering her ability to succeed.

Read this story here.

Following a string of serious security incidents, Microsoft says it has a plan to deal with escalating threats from cybercriminals and state-backed hackers. Read this story here.

The slow-motion implosion of Elon Musk’s X has given rise to a slew of competitors, where privacy invasions that ran rampant over the past decade still largely persist.

Read this story here.

Fortnite developer Epic has pushed back on Google’s control of the Android app store. The courtroom showdown could force the search giant to offer users more apps, at more affordable prices.

Read this story here.

Software developer Travis Brown’s X account was banned after his research alleged far-right influencers were becoming more prominent on the platform. He’s taking X to court in a bid to reverse the decision.

Read this story here.

President Joe Biden issued a wide-ranging executive order on artificial intelligence with measures to boost US tech talent and prevent AI being used to threaten national security.

Read this story here.

TikTokkers are using a little-known livestreaming feature to falsely represent Israelis and Palestinians—and the company is taking a cut of costly in-app gifts viewers give to participants.

Read this story here.

In the hours following the worst mass shooting in Maine's history, disinformation about the suspected gunman flooded social media with false claims that he had been arrested.

Read this story here.

A recent breach of authentication giant Okta has impacted nearly 200 of its clients. But repeated incidents and the company's delayed disclosure have security experts calling foul.

Read this story here.

An EU government body is pushing a proposal to combat child sexual abuse material that has significant privacy implications. Its lead advocate is making things even messier.

Read this story here.

Google is making passkeys, the emerging passwordless login technology, the default option for users as it moves to make passwords “obsolete.”

Read this story here.

With a new emphasis on the Hamas attacks on Israel, the US Treasury has proposed designating foreign cryptocurrency “mixer” services as money launderers and national security threats.

Read this story here.

X is promoting Community Notes to solve its disinformation problems, but some former employees and people who currently contribute notes say it’s not fit for that purpose.

Read this story here.

The rapid spread of violent videos and photos, combined with a toxic stew of mis- and disinformation, now threatens to spill over into real-world violence.

Read this story here.

Myanmar’s military junta is increasing surveillance and violating basic human rights. The combination of physical and digital surveillance is reaching dangerous new levels.

Read this story here.

New research shows the number of deepfake videos is skyrocketing—and the world's biggest search engines are funneling clicks to dozens of sites dedicated to the nonconsensual fakes.

Read this story here.

Dubbed “HTTP/2 Rapid Reset,” the flaw requires making patches available for virtually every web server around the world before the problem can be eradicated.

Read this story here.

Whoever looted FTX on the day of its bankruptcy has now moved the stolen money through a long string of intermediaries—including a service owned by FTX itself.

Read this story here.

The United Nations' top internet governance body will allegedly host its next two annual meetings in countries known for repressive internet policies and human rights abuses.

Read this story here.

X's Trust and Safety team says it's working to remove false information related to the Israel-Hamas war. Meanwhile, Elon Musk is sharing conspiracies and chatting with QAnon promoters.

Read this story here.

At least a million data points from 23andMe accounts appear to have been exposed on BreachForums. While the scale of the campaign is unknown, 23andMe says it's working to verify the data.

Read this story here.

Fact-checkers scrambled to deal with faked audio recordings released days before a tight election, in a warning for other countries with looming votes.

Read this story here.

New research has found that some streaming devices and dozens of Android and iOS apps are secretly being used for fraud and other cybercrime.

Read this story here.

Checking out this AI chatbot's new features? Make sure to keep these privacy tips in mind during your interactions.

Read this story here.

Victims of the MOVEit breach continue to come forward. But the full scale of the attack is still unknown.

Read this story here.

Every smartphone has an expiration date. Here’s when yours will probably come.

Read this story here.

SoundThinking is purchasing parts of Geolitica, the company that created PredPol. Experts say the acquisition marks a new era of companies dictating how police operate.

Read this story here.

A civil liberties group has asked the DOJ to investigate deployment of the ShotSpotter gunfire-detection system, which research shows is often installed in predominantly Black neighborhoods.

Read this story here.

Egged on by a far-reaching conservative media ecosystem, right-wing hardliners are forcing Washington to bend to their reality as the federal government careens toward a possible shutdown.

Read this story here.

With the number of internet blackouts on the rise, cybersecurity firm eQualitie figured out how to hide censored online news in satellite TV signals.

Read this story here.

Corporations are using software to monitor employees on a large scale. Some experts fear the data these tools collect could be used to automate people out of their jobs.

Read this story here.

Authorities sanctioned 11 alleged members of the cybercriminal groups, while the US Justice Department unsealed three federal indictments against nine people accused of being members.

Read this story here.

Security researchers found USB-based Sogu espionage malware spreading within African operations of European and US firms.

Read this story here.

Cyberattacks on casinos grab attention, but a steady stream of less publicized attacks leave vulnerable victims struggling to recover.

Read this story here.

Senators met with Silicon Valley's elite to learn how to deal with AI. But can Congress tackle the rapidly emerging tech before working on itself?

Read this story here.

Civil rights groups say efforts to get US intelligence agencies to adopt privacy reforms have largely failed. Without those changes, renewal of a post-911 surveillance policy may be doomed.

Read this story here.

And the first case on the docket may well be Russia's cyberattacks against civilian critical infrastructure in Ukraine.

Read this story here.

Signs suggest the culprits worked within a notorious Chinese hacker group that may have also hacked Indian electric utilities years earlier.

Read this story here.

After leaving many questions unanswered, a new post mortem from Microsoft explains the series of slip-ups that allowed attackers to steal and abuse a valuable cryptographic key.

Read this story here.

Some foreign companies may be complying—potentially offering China’s spies hints for hacking their customers.

Read this story here.

Chatbots like Open AI’s ChatGPT and Google’s Bard are vulnerable to indirect prompt injection attacks. Security researchers say the holes can be plugged—sort of.

Read this story here.

Posts praising the Wagner Group boss following his death in a mysterious plane crash last month indicate he was still in control of his "troll farm," researchers claim.

Read this story here.

If you want the highest possible level of protection, this is it.

Read this story here.

Child safety group Heat Initiative plans to launch a campaign pressing Apple on child sexual abuse material scanning and user reporting. The company issued a rare, detailed response on Thursday.

Read this story here.

Trimming profits, delaying launches, begging friends. Companies are going to extreme lengths to make do with shortages of GPUs, the chips at the heart of generative AI programs.

Read this story here.

A ramshackle team of American scientists scrambled to decode the Nazi cipher before the time ran out. Luckily, they had a secret weapon.

Read this story here.

The competitions, which are held on Russian-language cybercrime forums, offer prize money of up to $80,000 for the winners.

Read this story here.

The sabotage of more than 20 trains in Poland by apparent supporters of Russia was carried out with a simple “radio-stop” command anyone could broadcast with $30 in equipment.

Read this story here.

Russia tightly controls its information space—making it hard to get accurate information out of the country. But open source data provides some clues about the crash.

Read this story here.

Researchers have spent years warning that text-generation algorithms can spew bias and falsehoods. Tech giants are rushing them into products anyway.

Read this story here.

Unlike web browsers, mobile apps increasingly make it difficult or impossible to see what companies are really doing with your data. The answer? An inspectability API.

Read this story here.

The hackers, who mostly targeted victims in Hong Kong, also hijacked Microsoft’s trust model to make their malware harder to detect.

Read this story here.

Pixel Binary Transparency is the latest security benefit for Pixel owners.

Read this story here.

The wide-ranging scams, often disguised as game promotions, can all be linked back to one network.

Read this story here.

An innovation agency within the US Department of Health and Human Services will fund research into better defenses for the US health care system’s digital infrastructure.

Read this story here.

Security researchers set up a remote machine and recorded every move cybercriminals made—including their login details.

Read this story here.

The macOS Background Task Manager tool is supposed to spot potentially malicious software on your machine. But at Defcon, a researcher says it has troubling flaws.

Read this story here.

In 2008, Boston’s transit authority sued to stop MIT hackers from presenting at the Defcon hacker conference on how to get free subway rides. Today, four teens picked up where they left off.

The legacy electronics manufacturer is creating IoT honeypots with its products to catch real-world threats and patch vulnerabilities in-house.

Read this story here.

The vulnerability could allow attackers to take advantage of an information leak to steal sensitive details like private messages, passwords, and encryption keys.

Read this story here.

Cybercriminals are touting large language models that could help them with phishing or creating malware. But the AI chatbots could just be their own kind of scam.

Read this story here.

Here’s one simple way to reduce your security risk while logging in.

Read this story here.

Flaws in the Points.com platform, which is used to manage dozens of major travel rewards programs, exposed user data—and could have let an attacker snag some extra perks.

Read the story here.

Meta has long fought Europe's demands that it get people's consent before using their data for targeted ads. Then a Norwegian regulator threatened fines of $100,000 per day.

Read this story here.

Social apps prioritize content moderation tips from governments and online watchdogs. A US court ruling and a new EU law could restrict the practice, but they still leave loopholes.

Read this story here.

Researchers found a simple way to make ChatGPT, Bard, and other chatbots misbehave, proving that AI is hard to tame.

Read this story here.

Plus: Mozilla fixes two high-severity bugs in Firefox, Citrix fixes a flaw that was used to attack a US-based critical infrastructure organization, and Oracle patches over 500 vulnerabilities.

Read this story here.

The National Security Agency has urged top lawmakers to resist demands that it obtain warrants for sensitive data sold by data brokers.

After scammers duped a friend with a hacked Twitter account and a “deal” on a MacBook, I enlisted the help of a fellow threat researcher to trace the criminals’ offline identities.

Read this story here.

A secret encryption cipher baked into radio systems used by critical infrastructure workers, police, and others around the world is finally seeing sunlight. Researchers say it isn’t pretty.

Read this story here.

German researchers gained rare access to three satellites and found that they’re years behind normal cybersecurity standards.

Read this story here.

A landmark $13 million settlement with the City of New York is the latest in a string of legal wins for protesters who were helped by a video-analysis tool that smashes the “bad apple” myth.

Read the story here.

A bill to prevent cops and spies from buying Americans' data instead of getting a warrant has a fighting chance in the US Congress as lawmakers team up against surveillance overreach.

Read this story here.

The FBI has collected sensitive data on millions of Americans without warrants, drawing intense scrutiny from Congress and turning the agency into a punching bag across the political divide.

Read this story here.

Roger Thomas Clark, also known as Variety Jones, will spend much of the rest of his life in prison for his key role in building the world’s first dark web drug market.

Ransomware attacks tumbled in 2022, offering hope that the tide was turning against the criminal gangs behind them. Then things got a whole lot worse.

Read this story here.

The popular messaging platform launched new parental controls for keeping tabs on teens. Here’s what the tools do (and don’t) include.

Read this story here.

Cities across the US have established RTCCs that police say protect the rights of innocent people, but critics warn of creeping surveillance.

Read this story here.

Meta’s Twitter alternative promises that it will work with decentralized platforms, giving you greater control of your data. You can hold the company to that—if you don't sign up.

Read this story here.

The National Defense Authorization Act now includes draft language forbidding government entities from buying Americans' search histories, location data, and more.

Read this story here.

With a poor track record on tech regulation, do lawmakers stand a chance?

Read this story here.

Plus: Microsoft fixes 78 vulnerabilities, VMWare plugs a flaw already used in attacks, and more critical updates from June.

Read this story here.

Complaints filed in the European Union claim the porn site fails to follow basic data-collection policies under GDPR.

Read this story here.

Scammers use a booking technicality, traveler confusion, and promises of dirt-cheap tickets to offer hot deals that are anything but.

Read this story here.

Make sure your chats are kept as private as you want them to be.

Read this story here.

The gray market for abortifacient sales to the US is evolving alongside a shifting legal landscape.

Read this story here.

Newly released documents highlight the bureau's continued secrecy around cell-site simulators—spying tech that everyone already assumes exists.

Read this story here.

Vehicles from Toyota, Honda, Ford, and more can collect huge volumes of data. Here’s what the companies can access.

Read this story here.

The AI era promises a flood of disinformation, deepfakes, and hallucinated “facts.” Psychologists are only beginning to grapple with the implications.

Read this story here.

The US government warns encryption chipmaker Hualan has suspicious ties to China’s military. Yet US agencies still use one of its subsidiary’s chips, raising fears of a backdoor.

Read this story here.

A newly declassified report from the Office of the Director of National Intelligence reveals the federal government is buying troves of data about Americans.

Read this story here.

Personal information, including ID documents and phone numbers, have been released on Telegram.

Read this story here.

Internal company documents reveal how the imageboard’s chaotic moderation allowed racism and violence to take over.

Read this story here.

New testimony from defectors reveals pervasive surveillance and monitoring of limited internet connections. For millions of others, the internet simply doesn't exist.

Read this story here.

UT-Austin will join a growing movement to launch cybersecurity clinics for cities and small businesses that often fall through the cracks.

Read this story here.

Newly announced sanctions against Iran-based Avaran Cloud underscore the complexity of crafting Washington’s internet freedom efforts.

Data from Cloudflare's free digital defense service, Project Galileo, illuminates new links between online and offline attacks.

On the same day, Russia’s FSB intelligence service launched wild claims of NSA and Apple hacking thousands of Russians.

Read this story here.

Hidden code in hundreds of models of Gigabyte motherboards invisibly and insecurely downloads programs—a feature ripe for abuse, researchers say.

Read this story here.

Researchers say the state-sponsored espionage operation may also lay the groundwork for disruptive cyberattacks.

Read this story here.

Indirect prompt-injection attacks can leave people vulnerable to scams and data theft when they use the AI chatbots.

Read this story here.

The co-inventor of “bcrypt” is reflecting on the ubiquitous function’s 25 years and channeling cybersecurity’s core themes into electronic dance music.

Read this story here.

And it's happening in plain sight.

Read this story here.

“Container registries” are ubiquitous software clearinghouses, but they've been exposed for years. Chainguard says it now has a solution.

Read this story here.

While the company’s new top-level domains could be used in phishing attacks, security researchers are divided on how big of a problem they really pose.

Read the story here.

Kaspersky researchers have uncovered clues that further illuminate the hackers’ activities, which appear to have begun far earlier than originally believed.

Read this story here.

Your inactive profiles, like Gmail or Docs, could turn into digital dust later this year. A few clicks can save them.

Read this story here.

An explosion of interest in OpenAI’s sophisticated chatbot means a proliferation of “fleeceware” apps that trick users with sneaky in-app subscriptions.

Read the story here.

The families of victims of a mass shooting in Buffalo are challenging the platforms they believe led the attacker to carry out a racist massacre.

Read this story here.