US charges alleged operators of Russian #bulletproof hosting service

https://www.bleepingcomputer.com/news/security/us-charges-alleged-russian-bulletproof-hosting-service-operators/

#cybercrime #cybersecurity #MediaLand #MLCloud

#Microsoft’s #SecureBoot has been broken for a decade and no one noticed until now

https://arstechnica.com/security/2026/07/microsoft-secure-boot-has-been-broken-for-most-of-its-existence/

#cybersecurity #Windows

#SonicWall warns of #SMA1000 flaws exploited in zero-day attacks, patch now

https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-sma1000-flaws-exploited-in-zero-day-attacks-patch-now/

#cybersecurity

OnePlus officially gives up on the US and Europe

The OnePlus 15 was the company’s final US flagship. | Photo: Allison Johnson / The Verge OnePlus has confirmed what industry observers have long expected: it's quitting the US and European markets, and will no longer la…

https://www.theverge.com/tech/966404/oneplus-oppo-us-europe-withdrawal-realme

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Types of online scams #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/types-of-online-scams/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

AI and the next wave of conspiracies #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/ai-and-the-next-wave-of-conspiracies/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

Daily Digest | 16 July 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

The US House passed the KIDS Act, a bill that would introduce internet age-gating measures aimed at protecting minors online. 🏛️
EFF argues the proposal would expand online surveillance instead of privacy protections, with broader implications for anonymity and the open web. 🔒

@eff

🔗 https://www.eff.org/deeplinks/2026/07/dont-let-congress-age-gate-internet-effector-3813

#TechNews #Kids #KIDSAct #Children #Privacy #AgeVerification #Surveillance #DigitalRights #FreeSpeech #Cybersecurity #Technology #OpenWeb #Policy #Security #EFF

Ward Christensen and the invention of BBS #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/ward-christensen-and-the-invention-of-bbs/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

New analysis: How Much Can AI Actually Help With PQC Migration?

A hypothesis paper in MDPI Cryptography claims frontier AI (Mythos-class) compresses enterprise PQC migration from 12-15 years to 2-4 years. The paper models AI as both defender accelerator and adversary destabilizer through six feedback loops, and that dual-use framing is sound.

The timeline estimate is not.

I've led PQC migration programs generating 120,000+ discrete tasks. AI genuinely helps with the technical analysis fraction: crypto discovery triage (months to days), migration strategy automation across 100K+ instances, code diff generation (hours to minutes), test scenario creation.

That accounts for maybe 15-20% of total program effort.

The other 80%:

- Getting executive mandate and multi-year budget (3-12 months)

- Standing up program governance (3-6 months)

- Negotiating access to production segments across business units (this is the bottleneck in discovery, not analysis speed)

- Change advisory board approvals for every production change

- Vendor firmware/certification timelines entirely outside your control

- Interoperability testing with real counterparties on their schedules

- FIPS 140-3 module validation cycles

- CBOM and crypto-agility as organizational transformations, not technology deployments

Key analytical distinction: effort compression ≠ schedule compression. 20% of effort off the critical path saves zero calendar time. The institutional dependencies dominate the critical path in every large program I've observed.

The paper assigns 8 years to AI-compressible work and 2 years to the institutional floor. In my experience, those proportions are reversed.

EO 14412 (signed June 22, 2026) sets Dec 31, 2030 for PQC key establishment and Dec 31, 2031 for digital signatures in federal high-value systems. CNSA 2.0 requires new NSS acquisitions to be compliant from January 2027.

The correct response to AI-accelerated adversary capability is not "compress the timeline from 15 years to 4." It's: start the program now and use AI within it.

https://postquantum.com/post-quantum/ai-pqc-migration-how-much-help/

#infosec #cybersecurity #PQC #postquantum #cryptography #quantumcomputing #NIST #migration

Encrypted messaging is great...

Until an attacker steals the account, adds a linked device, or tricks someone out of a recovery key.

In episode 441 of Shared Security, Tom and Kevin discuss the FBI warning about Russian intelligence targeting Signal, WhatsApp, and Telegram users and why endpoint/account security still matters.

Watch this episode on YouTube:
https://youtu.be/fxFfY_e_MOI

Listen and subscribe wherever you like to get your podcasts:
https://sharedsecurity.net/subscribe
https://sharedsecurity.net/2026/07/13/signal-phishing-and-russian-intelligence-targeting-messaging-apps/

#podcast #signal #russia #privacy #cybersecurity

Spanish Police take down €140 million cyber fraud ring, arrest four

https://www.bleepingcomputer.com/news/security/spanish-police-take-down-140-million-cyber-fraud-ring-arrest-four/

#cybersecurity #Spain #Portugal #Panama

Nearly 300 #GitHub repos pose as legit software to push #malware

https://www.bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malware/

#cybersecurity

#Microsoft releases #Windows10 KB5099539 extended security update

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5099539-extended-security-update/

#cybersecurity #PatchTuesday

#Microsoft July 2026 #PatchTuesday fixes massive 570 flaws, 3 zero-days

https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2026-patch-tuesday-fixes-massive-570-flaws-3-zero-days/

#Windows #cybersecurity

#Progress confirms #ShareFile zero-day flaw behind #StorageZone shutdown

https://www.bleepingcomputer.com/news/security/progress-confirms-sharefile-zero-day-flaw-behind-storage-zone-shutdown/

#cybersecurity

New Release: #Tor Browser 15.0.18

https://blog.torproject.org/new-release-tor-browser-15018/

#cybersecurity #privacy #anonymity #FOSS

#Iran abused mobile networks’ vulnerabilities to locate US #military in the #MiddleEast, report says

https://techcrunch.com/2026/07/14/iran-abused-mobile-networks-vulnerabilities-to-locate-u-s-military-in-the-middle-east-report-says/

#cybersecurity

We're welcoming @wendynather, Senior Research Initiatives Director at @1password, to #ThursDef tomorrow to discuss the Security Poverty Line & AI!

Join us at 12:30pm CT for our free 30min Zoom webinar! thursdef.com

#ThursdayDefensive #cybersecurity #infosec

#LastPass, #Bitwarden users targeted with fake security alerts

https://www.bleepingcomputer.com/news/security/lastpass-bitwarden-users-targeted-with-fake-security-alerts/

#cybersecurity #passwords #PasswordManager

#Microsoft #Entra ID gets #passkeys default authentication starting September

https://www.bleepingcomputer.com/news/microsoft/microsoft-entra-id-gets-passkeys-default-authentication-starting-september/

#cybersecurity

New #phishing kits target #Microsoft365 accounts, evade #MFA

https://www.bleepingcomputer.com/news/security/new-phishing-kits-target-microsoft-365-accounts-evade-mfa/

#cybersecurity #Microsoft

#SAP warns of critical flaws in #NetWeaver and #CommerceCloud

https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/

#cybersecurity

US sanctions #VPN, #malware providers for enabling #ransomware attacks

https://www.bleepingcomputer.com/news/security/us-sanctions-vpn-malware-providers-linked-to-ransomware-gangs/

#FirstVPN #1VPNS #cybersecurity

German firm files for insolvency, blames cybercrims who shut down production for 6 weeks

https://www.theregister.com/cyber-crime/2026/07/13/german-firm-files-for-insolvency-blames-cybercrims-who-shut-down-production-for-6-weeks/5270524

#ZEGO #ZEGOTVZ #Germany #cybersecurity #cybercrime

#Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for #OpenAI

https://techcrunch.com/2026/07/13/apple-says-former-employee-exploited-rare-bug-to-download-confidential-files-after-leaving-for-openai/

#cybersecurity #AI

#Japan's largest #taxi operator shuts systems after #cyberattack

https://www.bleepingcomputer.com/news/security/japans-largest-taxi-operator-shuts-systems-after-cyberattack/

#cybersecurity #NihonKotsu

VPNs are safe... for now 🛡️

The UK government has backed down on restricting this vital cybersecurity tool.

Alongside the announcement of a social media curfew for 16 and 17 year olds comes a win for privacy!

Plans to age-gate or restrict VPNs have been dropped, but we're not complacent to future risks.

We'll continue fighting to protect VPNs.

https://www.theguardian.com/technology/2026/jul/14/uk-16-17-year-olds-midnight-social-media-curfew

#vpn #cybersecurity #privacy #onlinesafety #ukpolitics #ukpol

Post-quantum cryptography: preparing for the unknown #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/post-quantum-cryptography-preparing-for-the-unknown/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

#Thisisnetidee scholarship recipient David Schmidt Universität Wien

This thesis analyzes smartphone apps at scale to uncover security and privacy issues in IoT ecosystems, local network permissions, and the app supply chain. Responsible disclosure of the findings helps strengthen and secure the app ecosystem.🔒🌐

👉 More information: https://www.netidee.at/hidden-dangers-uncovering-security-and-privacy-risks-through-large-scale-mobile-app-analysis

#CyberSecurity #Privacy #IoTSecurity #AppSecurity #MobileSecurity #ResponsibleDisclosure #Research #netidee #Call20

High tech, low life: the cyberpunk world #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/high-tech-low-life-the-cyberpunk-world/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

Scam cases that made the news #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/scam-cases-that-made-the-news/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

EU rules now require new cars to include driver-facing distraction cameras, but regulators have not clearly defined how related data is handled or retained. 🚗
The systems process attention locally under the rules, yet privacy questions remain over audits, retention limits, and transparency. 🔒

🔗 https://allaboutcookies.org/eu-mandatory-distracted-driver-system

#TechNews #EU #Europe #Privacy #DriverMonitoring #Automotive #GDPR #Cybersecurity #DataProtection #DigitalRights #Technology #Security #Cars #Car #Driving #Driver

ICE’s internal watchdog has opened more than 100 investigations into alleged doxing and threats targeting agency employees, according to court filings. 🛡️
The cases include efforts to identify online critics, raising transparency and free speech concerns over expanding government surveillance powers. ⚖️

🔗 https://www.wired.com/story/ices-internal-watchdog-is-now-investigating-online-critics/

#TechNews #ICE #USA #US #Privacy #Surveillance #FreeSpeech #Cybersecurity #DigitalRights #Government #Infosec #DataProtection #Security #CivilLiberties #Police #Trump

Florida police records allege an officer used DMV data and a license plate reader to track a woman he met before stopping her in traffic. 🚔
Investigators say he knew the database access was unauthorized, highlighting surveillance abuse risks and the need for stronger oversight. 🔒

🔗 https://www.404media.co/footage-shows-cop-stalking-woman-he-met-on-a-tv-set-after-surveilling-her-with-a-license-plate-reader/

#TechNews #Surveillance #Privacy #LicensePlateReaders #LawEnforcement #Law #Cybersecurity #DigitalRights #DataProtection #Infosec #Technology #CivilLiberties #Government #Florida #USA #US

Daily Digest | 15 July 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Apple’s App Store reportedly logs every tap and keystroke for personalized recommendations, with researchers claiming the data is tied to user accounts and sent unencrypted. 🔐
The reported collection cannot be disabled and raises transparency and user-control concerns for privacy, as Apple expands on-device activity tracking. ⚠️

🔗 https://www.osnews.com/story/145322/apple-adds-keylogger-to-ios-app-store-for-targeted-advertising-tied-to-your-account-and-unencrypted/

#TechNews #Apple #AppStore #Privacy #iPhone #iOS #Advertising #Ad #Cybersecurity #DataProtection #DigitalRights #Infosec #Technology #Security

Apple’s Hide My Email reportedly exposed users’ real email addresses through an unfixed flaw disclosed over a year ago, weakening a core privacy feature. 🔒
Researchers say Apple was notified in 2025, yet the exploit remains, highlighting transparency and user-control concerns for privacy tools. ⚠️

🔗 https://mashable.com/tech/apple-hide-my-email-major-vulnerability-leaks-email-addresses

#TechNews #Apple #iPhone #iOS #Mac #HideMyEmail #Email #Mail #Privacy #Cybersecurity #iCloud #EmailSecurity #DataProtection #Infosec #DigitalRights #Technology #Security

EUVD: Europe’s alternative to CVE #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/euvd-europes-alternative-to-cve/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

New York enacts one-year data center ban on projects larger than 50 megawatts — first US state to impleme…

New York is the first to pass a statewide data center moratorium, which pauses all projects greater than 50 MW for one year. The governor's office said that it will create a GEIS to hold developments to "consistent stan…

https://www.tomshardware.com/tech-industry/data-centers/new-york-enacts-one-year-data-center-ban-on-projects-larger-than-50-megawatts-first-us-state-to-implement-moratorium-will-also-pursue-repealing-tax-exemptions

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]