Proton Launches Beta Access for Proton Pass CLI
Proton has launched the beta for their command line interface for Proton Pass, Proton’s password manager software.
Fria Reyes
Fria is a privacy advocate and synthwave enthusiast who has been volunteering with Privacy Guides since 2023. They are an unapologetic tech optimist, and believes with the right technology we can solve any problem.
“Trivially Exploitable” Vulnerabilities Left Cloud Environments Vulnerable for Over 8 Years
Researchers at Oligo have found several “trivially exploitable” vulnerabilities in the widely-used Fluent Bit logging software that left users vulnerable for over 8 years.
Forensic Software Company Gives Personalized Password Cracking Tips
Elcomsoft, seller of forensic tools for law enforcement to extract data from user devices like phones and computers, has released a blog post on using information collected about individuals to make password cracking more efficient.
Major Banks Reeling After Data Customer Data Leaked in Cyber Attack Against SitusAMC
According to TechCrunch, SitusAMC, a company that provides technology for major banks like JPMorgan, Citigroup, Morgan Stanley, and even state governments, has had a major breach of customer data including “accounting records and legal agreements.”
SHA1-HULUD Malware Infects Developers, Posts Secrets to Their Public GitHub Repos
According to researchers at Wiz, a supply chain attack on npm packages is exfiltrating developers’ credentials and posting them to public GitHub repositories.
CSA Announces Matter 1.5, Adding Secure Camera Support and New Devices
Matter 1.5 has released, bringing with it lots of new supported device types. Among the new additions are support for cameras, soil sensors, and what they call “closures.”
GrapheneOS Releases QPR1 Update
GrapheneOS users have received the long-awaited Android 16 QPR1 update to GrapheneOS.
iOS Developers Claim 1Password isn’t Removing Deleted Profile Pictures
The iOS developer and security researcher duo mysk claim that after deleting their 1Password account, their profile picture was still being stored and remained publicly accessible via a URL.
California Court Ends Smart Meter Dragnet Surveillance Program
According to the EFF, the Sacramento County Superior Court has determined that a surveillance program run by the Sacramento Municipal Utility District (SMUD) and the police is illegal.
Pornhub Urges Big Tech Companies to Adopt Device-Based Age Verification
According to Wired, Pornhub's parent company has sent letters to Apple, Google, and Microsoft urging them to device-based age verification.
Thunderbird Pro Enters Closed Testing Phase
A new announcement from Thunderbird Pro sees the services entering an “initial closed test run” with a “core group of community contributors.”
Twitch Added to Age Restricted Social Media in Australia
Australia’s eSafety Commissioner has added Twitch to its growing list of age-restricted social media sites.
EFF Files Lawsuit Against DOJ and DHS to Uncover Information About Removed ICE-Tracking Apps
The EFF has filed a lawsuit against the US DOJ and DHS to uncover information their demands to censor apps.
Brave Announces Verifiable and Transparent TEE Support in Leo
Today, Brave announced that their Leo AI assistant inside of the Brave browser will utilize NEAR AI Nvidia-backed Trusted Execution Environments (TEE).
Android's Quick Share is Now Compatible with AirDrop
According to Android Authority, Android's Quick Share feature for sending files wirelessly over the air is now officially compatible with AirDrop, without any help from Apple.
Sturnus Android Malware Directly Captures Screen, Bypassing E2EE
A new strain of insidious Android malware has been discovered that can “bypass encrypted messaging” by capturing content directly from the screen after decryption.
First Foreign Censorship Shield Bill Proposed in Wyoming
A blog post by Preston Byrne, the lawyer representing 4chan in their ongoing legal case with Ofcom, announced that the GRANITE Act, “the first foreign censorship shield bill ever conceived in the history of the United States,” has been filed in the state of Wyoming.
Element Will Soon Make Verifying Your Devices Mandatory
The Matrix-based messenger Element announced their plans to make verifying your devices mandatory, so you can be sure the person you’re messaging with end-to-end encryption is really them.
Mozilla’s Monitor Plus Service is Shutting Down
Mozilla’s paid data removal service, Monitor Plus, will be shut down on December 17.
Thousands of ASUS Routers Compromised in Suspected State-Sponsored Cyberattack
SecurityScorecard’s STRIKE team has worked with ASUS to unveil a massive malware campaign against End-of-Life (EoL) ASUS WRT routers.
EU Digital Omnibus Supposedly Simplifies Digital Privacy Regulation
The EU Commission has put forth their Digital Omnibus Regulation Proposal, which aims to simplify the GDPR in order to foster competitiveness.