ICE, CBP, Secret Service All Illegally Used Smartphone Location Data

https://www.404media.co/ice-cbp-secret-service-all-broke-law-with-smartphone-location-data/ 

 Hacked phone spyware shuts down… again

https://techcrunch.com/2023/10/05/spyhide-oospy-hacked-phone-spyware-shuts-down/ 

 Exploits released for Linux flaw giving root on major distros

https://www.bleepingcomputer.com/news/security/exploits-released-for-linux-flaw-giving-root-on-major-distros/ 

 China-linked cyberspies backdoor semiconductor firms with Cobalt Strike

https://www.bleepingcomputer.com/news/security/china-linked-cyberspies-backdoor-semiconductor-firms-with-cobalt-strike/ 

 NSA and CISA reveal top 10 cybersecurity misconfigurations

https://www.bleepingcomputer.com/news/security/nsa-and-cisa-reveal-top-10-cybersecurity-misconfigurations/ 

 Amazon to make MFA mandatory for 'root' AWS accounts by mid-2024

https://www.bleepingcomputer.com/news/security/amazon-to-make-mfa-mandatory-for-root-aws-accounts-by-mid-2024/ 

 Ring Is Cashing In on the UFO Craze to Promote Its Surveillance Dystopia

https://www.vice.com/en/article/g5y8m3/ring-is-cashing-in-on-the-ufo-craze-to-promote-its-surveillance-dystopia 

 Controversial gunshot detection system violates Civil Rights Act

https://www.chron.com/news/houston-texas/article/doj-investigate-gunshot-detection-18406617.php 

 Apple Considered, Rejected Switch to DuckDuckGo From Google

https://www.bloomberg.com/news/articles/2023-10-04/apple-considered-switch-to-search-engine-duckduckgo-from-google 

 Zero-days for hacking WhatsApp are now worth millions of dollars

https://techcrunch.com/2023/10/05/zero-days-for-hacking-whatsapp-are-now-worth-millions-of-dollars/ 

 Net neutrality is back, and telecom giants are up to their usual dirty tricks

https://www.fastcompany.com/90962872/anti-net-neutrality-astroturf 

 Google agrees to reform its data terms after German antitrust intervention

https://techcrunch.com/2023/10/05/google-data-terms-fco/ 

 Privacy nonprofit calls on FTC to investigate Grindr’s data practices

https://therecord.media/privacy-complaint-calls-on-ftc-to-investigate-grindr 

 What is password entropy?

https://proton.me/blog/what-is-password-entropy 

 Qakbot cybercriminals are still spamming victims despite FBI takedown

https://techcrunch.com/2023/10/05/qakbot-hackers-are-still-spamming-victims-despite-fbi-takedown/ 

 One of our volunteers makes Raspberry-Pi-powered smart thermostats, and is having a sale! If you're interested in getting a smart thermostat but want one that's open source and respects your privacy, be sure to check them out and support them if you can.

https://www.tindie.com/stores/eternalsunshine/ 

 Linux tries to dump Windows' notoriously insecure RNDIS protocol

https://www.zdnet.com/home-and-office/networking/linux-tries-to-dump-windows-notoriously-insecure-rndis-protocol/ 

 Russia plans to try to block VPN services in 2024

https://www.reuters.com/technology/russia-plans-try-block-vpn-services-2024-senator-2023-10-03/ 

 Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkits

https://arstechnica.com/security/2023/10/vulnerabilities-in-supermicro-bmcs-could-allow-for-unkillable-server-rootkits/ 

 Hundreds of malicious Python packages found stealing sensitive data

https://www.bleepingcomputer.com/news/security/hundreds-of-malicious-python-packages-found-stealing-sensitive-data/ 

 Microsoft won’t say if its products were exploited by spyware zero-days

https://techcrunch.com/2023/10/04/microsoft-wont-say-if-its-products-were-exploited-by-spyware-zero-days/ 

 Clorox Security Breach Linked to Group Behind Casino Hacks

https://www.bloomberg.com/news/articles/2023-10-04/clorox-suspected-of-being-hacked-by-same-scattered-spider-group-that-hit-mgm 

 Apple emergency update fixes new zero-day used to hack iPhones

https://www.bleepingcomputer.com/news/apple/apple-emergency-update-fixes-new-zero-day-used-to-hack-iphones/ 

 Atlassian patches critical Confluence zero-day exploited in attacks

https://www.bleepingcomputer.com/news/security/atlassian-patches-critical-confluence-zero-day-exploited-in-attacks/ 

 Researchers warn of 100,000 industrial control systems exposed online

https://www.bleepingcomputer.com/news/security/researchers-warn-of-100-000-industrial-control-systems-exposed-online/ 

 Lyca Mobile blames cyberattack for network disruption

https://techcrunch.com/2023/10/04/lyca-mobile-blames-cyberattack-for-network-disruption/ 

 Android 14 officially releases for Pixel phones

https://arstechnica.com/gadgets/2023/10/android-14-officially-releases-for-pixel-phones/ 

 Cisco fixes hard-coded root credentials in Emergency Responder

https://www.bleepingcomputer.com/news/security/cisco-fixes-hard-coded-root-credentials-in-emergency-responder/ 

 The Google Pixel 8 is official with 7 years of updates

https://arstechnica.com/gadgets/2023/10/the-google-pixel-8-is-official-with-7-years-of-updates/ 

 Yubico can now ship pre-registered security keys to its enterprise users

https://techcrunch.com/2023/10/04/yubico-can-now-ship-pre-registered-security-keys-to-its-enterprise-users/ 

 Microsoft: Attackers target Azure cloud VMs via breached SQL servers

https://www.bleepingcomputer.com/news/security/microsoft-hackers-target-azure-cloud-vms-via-breached-sql-servers/ 

 Sony confirms data breach impacting thousands in the U.S.

https://www.bleepingcomputer.com/news/security/sony-confirms-data-breach-impacting-thousands-in-the-us/ 

 The Team Helping Women Fight Digital Domestic Abuse

https://www.wired.com/story/the-experts-helping-women-fight-digital-domestic-abuse/ 

 Your Cheap Android TV Streaming Box May Have a Dangerous Backdoor

https://www.wired.com/story/android-tv-streaming-boxes-china-backdoor/ 

 Google User Data Has Become a Favorite Police Shortcut

https://www.bloomberg.com/news/features/2023-09-28/google-user-data-is-police-s-top-shortcut-for-solving-crimes 

 Select your local currency when paying for Mullvad to avoid fees!

https://mullvad.net/en/blog/2023/10/4/select-your-local-currency-when-paying-for-mullvad-to-avoid-fees/ 

 They’ve begun: Attacks exploiting vulnerability with maximum 10 severity rating

https://arstechnica.com/security/2023/10/active-attacks-exploiting-ws_ftp-pose-a-grave-threat-to-the-internet/ 

 New 'Looney Tunables' Linux bug gives root on major distros

https://www.bleepingcomputer.com/news/security/new-looney-tunables-linux-bug-gives-root-on-major-distros/ 

 Is Your State’s Child Safety Law Unconstitutional? Try Comprehensive Data Privacy Instead

https://www.eff.org/deeplinks/2023/10/your-states-child-safety-law-unconstitutional-try-comprehensive-data-privacy 

 Google to bolster phishing and malware delivery defenses in 2024

https://www.bleepingcomputer.com/news/security/google-to-bolster-phishing-and-malware-delivery-defenses-in-2024/ 

 How to Delete Your Personal Data: 4 US State Laws to Know 

https://joindeleteme.com/blog/how-to-delete-your-personal-data-4-us-state-laws-to-know/ 

 Android October security update fixes zero-days exploited in attacks

https://www.bleepingcomputer.com/news/security/android-october-security-update-fixes-zero-days-exploited-in-attacks/ 

 How to Stop Companies from Selling Your Data

https://joindeleteme.com/blog/how-to-stop-companies-from-selling-your-data/ 

 The State of Chihuahua Is Building a 20-Story Tower in Ciudad Juarez to Surveil 13 Cities–and Texas Will Also Be Watching

https://www.eff.org/deeplinks/2023/09/state-chihuahua-building-20-story-tower-ciudad-juarez-surveil-13-cities-and-state 

 GAO Report Shows the Government Uses Face Recognition with No Accountability, Transparency, or Training

https://www.eff.org/deeplinks/2023/10/gao-report-shows-government-uses-face-recognition-no-accountability-transparency 

 ShellTorch flaws expose AI servers to code execution attacks

https://www.bleepingcomputer.com/news/security/shelltorch-flaws-expose-ai-servers-to-code-execution-attacks/ 

 Qualcomm says hackers exploit 3 zero-days in its GPU, DSP drivers

https://www.bleepingcomputer.com/news/security/qualcomm-says-hackers-exploit-3-zero-days-in-its-gpu-dsp-drivers/ 

 Microsoft Edge, Teams get fixes for zero-days in open-source libraries

https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-teams-get-fixes-for-zero-days-in-open-source-libraries/ 

 EvilProxy uses indeed(dot)com open redirect for Microsoft 365 phishing

https://www.bleepingcomputer.com/news/security/evilproxy-uses-indeedcom-open-redirect-for-microsoft-365-phishing/ 

 Arti 1.1.9 is released: Assembling the onions

https://blog.torproject.org/arti_119_released/ 

 Motel One says ransomware gang stole customer credit card data

https://techcrunch.com/2023/10/03/motel-one-says-ransomware-gang-stole-customer-credit-card-data/ 

 Say (an encrypted) hello to a more private internet.

https://blog.mozilla.org/en/products/firefox/encrypted-hello/ 

 The Best Password Managers to Secure Your Digital Life

https://www.wired.com/story/best-password-managers/ 

 Hacking Gas Pumps via Bluetooth

https://www.schneier.com/blog/archives/2023/10/hacking-gas-pumps-via-bluetooth.html 

 A closer look at online privacy: new Tor tutorials

https://blog.torproject.org/tor-tutorials/ 

 Dead grandma locket request tricks Bing Chat’s AI into solving security puzzle

https://arstechnica.com/information-technology/2023/10/sob-story-about-dead-grandma-tricks-microsoft-ai-into-solving-captcha/ 

 New BunnyLoader threat emerges as a feature-rich malware-as-a-service

https://www.bleepingcomputer.com/news/security/new-bunnyloader-threat-emerges-as-a-feature-rich-malware-as-a-service/ 

 Ransomware gangs now exploiting critical TeamCity RCE flaw

https://www.bleepingcomputer.com/news/security/ransomware-gangs-now-exploiting-critical-teamcity-rce-flaw/ 

 Cities Should Act NOW to Ban Predictive Policing...and Stop Using ShotSpotter, Too

https://www.eff.org/deeplinks/2023/10/cities-should-act-now-ban-predictive-policingand-stop-using-shotspotter-too 

 @59ca22d7 404 is paywalled? 

 UK passport images database could be used to catch shoplifters

https://www.theguardian.com/uk-news/2023/oct/02/uk-passport-images-database-could-be-used-to-catch-shoplifters 

 Amid Twitter chaos, Mastodon grew donations 488% in 2022, reached 1.8M monthly active users

https://techcrunch.com/2023/10/02/amid-twitter-chaos-mastodon-grew-donations-488-in-2022-reached-1-8m-monthly-active-users/ 

 Taylor Swift Facial Recognition TikTok Deletes Videos After 404 Media Investigation

https://www.404media.co/taylor-swift-facial-recognition-tiktok-removes-videos/ 

 Exploit available for critical WS_FTP bug exploited in attacks

https://www.bleepingcomputer.com/news/security/exploit-available-for-critical-ws-ftp-bug-exploited-in-attacks/ 

 Arm warns of Mali GPU flaws likely exploited in targeted attacks

https://www.bleepingcomputer.com/news/security/arm-warns-of-mali-gpu-flaws-likely-exploited-in-targeted-attacks/ 

 We need to break Big Tech’s data broker industry

https://techcrunch.com/2023/10/02/we-need-to-break-big-techs-data-broker-industry/ 

 Internet Content Removal: 7 Steps to Removing Unwanted Content from the Internet  

https://joindeleteme.com/blog/internet-content-removal-7-steps-to-removing-unwanted-content-from-the-internet/ 

 The Biggest Hack of 2023 Keeps Getting Bigger

https://www.wired.com/story/moveit-breach-victims/ 

 Don’t Let Zombie Zoom Links Drag You Down

https://krebsonsecurity.com/2023/10/dont-let-zombie-zoom-links-drag-you-down/ 

 Motel One discloses data breach following ransomware attack

https://www.bleepingcomputer.com/news/security/motel-one-discloses-data-breach-following-ransomware-attack/ 

 Progress, the company behind MOVEit, patches new actively exploited security flaws

https://techcrunch.com/2023/10/02/progress-moveit-ftp-actively-exploited-security-flaws/ 

 Predictive Policing Software Terrible At Predicting Crimes

https://themarkup.org/prediction-bias/2023/10/02/predictive-policing-software-terrible-at-predicting-crimes 

 Myanmar census will increase surveillance of junta's opponents, critics say

https://www.abc.net.au/news/2023-10-02/myanmar-census-will-increase-surveillance-of-junta-opponents/102923250 

 New Group Attacking iPhone Encryption Backed by U.S. Political Dark-Money Network

https://theintercept.com/2023/10/01/apple-encryption-iphone-heat-initiative/ 

 F-Droid: Infrastructure-as-code migration

https://f-droid.org/en/2023/10/02/infrastructure-as-code-migration.html 

 Jellyfin: A Call for Developers

https://jellyfin.org/posts/a-call-for-developers/ 

 Making Privacy Tools Worth It Part 1: The End User

https://blog.thenewoil.org/making-privacy-tools-worth-it-part-1-the-end-user 

 H&R Block, Meta, and Google Slapped With RICO Suit, Allegedly Schemed to Scrape Taxpayer Data

https://gizmodo.com/h-r-block-meta-and-google-slapped-with-rico-suit-1850883099 

 VeraCrypt version 1.26.7

https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.7 

 Meet LostTrust ransomware — A likely rebrand of the MetaEncryptor gang

https://www.bleepingcomputer.com/news/security/meet-losttrust-ransomware-a-likely-rebrand-of-the-metaencryptor-gang/ 

 New Marvin attack revives 25-year-old decryption flaw in RSA

https://www.bleepingcomputer.com/news/security/new-marvin-attack-revives-25-year-old-decryption-flaw-in-rsa/ 

 How to Stop Google Bard From Storing Your Data and Location

https://www.wired.com/story/google-bard-location-data-tracking-ai/ 

 How to Tell When Your Phone Will Stop Getting Security Updates

https://www.wired.com/story/phone-ios-android-security-updates/ 

 Sony Hack: Ransomware Group Demands $2.5 Million, User Data at Risk

https://www.gamersubculture.com/tech/Sony%20Hack:%20Ransomware%20Group%20Demands%20$2.5%20Million,%20User%20Data%20at%20Risk/1CFKCSPZDIN4eCAt5IyO 

 A Closer Look at the Snatch Data Ransom Group

https://krebsonsecurity.com/2023/09/a-closer-look-at-the-snatch-data-ransom-group/ 

 Firefox 118 brings browser-based website translation

https://liliputing.com/firefox-118-brings-browser-based-website-translation-no-cloud-servers-required-for-a-handful-of-supported-languages/ 

 Federal Court of Appeal ruling opens door for Canadians to have ‘right to be forgotten’ on Google

https://www.theglobeandmail.com/canada/article-federal-court-of-appeal-opens-door-to-the-right-to-be-forgotten-in-a/ 

 National Security Agency is Starting an Artificial Intelligence Security Center

https://www.securityweek.com/national-security-agency-is-starting-an-artificial-intelligence-security-center/ 

 Billions of usernames and passwords leaked online — what you should do right now

https://www.tomsguide.com/news/billions-of-usernames-and-passwords-leaked-online-how-to-see-if-youre-affected 

 Linux interop is maturing fast… thanks to a games console

https://www.theregister.com/2023/09/27/osseu_steam_os_3/ 

 Millions of Exim mail servers exposed to zero-day RCE attacks

https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day-rce-attacks/ 

 New Release: Tor Browser 12.5.6

https://blog.torproject.org/new-release-tor-browser-1256/