#French govt messaging service breached in account hijacking attack

https://www.bleepingcomputer.com/news/security/french-govt-messaging-service-breached-in-account-hijacking-attack/

#cybersecurity #privacy #DataBreach #Tchap #Matrix

Introducing #ProtonDrive #CLI: Use Drive from your terminal

https://proton.me/blog/proton-drive-cli

#Proton #privacy #cybersecurity #cloud

#CISA gives feds 3 days to patch #CheckPoint #VPN bug exploited as zero-day

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-check-point-flaw-exploited-by-ransomware-gangs/

#cybersecurity

#Google patches new #Chrome zero-day flaw exploited in the wild

https://www.bleepingcomputer.com/news/security/google-patches-fifth-chrome-zero-day-bug-exploited-in-attacks-this-year/

#cybersecurity

#NFCShare #Android #malware spreads via fake #banking app updates on #GitHub

https://www.bleepingcomputer.com/news/security/nfcshare-android-malware-spreads-via-fake-banking-app-updates-on-github/

#cybersecurity

#SoFi confirms third-party #DataBreach at #HongKong subsidiary

https://www.bleepingcomputer.com/news/security/sofi-confirms-third-party-data-breach-at-hong-kong-subsidiary/

#privacy #cybersecurity #finance #PersonalFinance #banking

#Signal, #DuckDuckGo among firms weighing #Canada exit over lawful access bill

https://globalnews.ca/news/11886905/lawful-access-bill-c-22-companies-services-canada/

#privacy #cybersecurity #politics

Online harms bill to include #SocialMediaBan for children under 16: Source

https://globalnews.ca/news/11894610/canada-social-media-ban-teens-online-harms-bill/

#Canada #politics #SocialMedia #AgeVerification #privacy #cybersecurity

New #Apple feature automatically changes your compromised #passwords

https://www.bleepingcomputer.com/news/apple/new-apple-feature-automatically-changes-your-compromised-passwords/

#password #cybersecurity #WWDC

New #ShaiHulud attack trojanizes 19 #science-focused #PyPI packages

https://www.bleepingcomputer.com/news/security/new-shai-hulud-attack-trojanizes-19-science-focused-pypi-packages/

#cybersecurity

Hoodik is a lightweight self-hosted cloud storage platform built with privacy in mind.

Files are encrypted directly in your browser before upload, ensuring the server never has access to your unencrypted data.

It also includes secure file sharing, encrypted notes, 2FA, S3 support, and easy Docker deployment.

👉 https://digitalescapetools.com/tools/tool.html?id=hoodik

#OpenSource #SelfHosted #Privacy #Encryption #CloudStorage #FOSS #CyberSecurity

Alt...

Hoodik project page showing the open-source encrypted cloud storage platform, including its logo, version details, Docker support, and a description of browser-based end-to-end encryption.

Alt...

Hoodik web interface displaying a self-hosted file manager with folders, documents, images, videos, upload progress, file metadata, and account management options in a dark-themed dashboard.

Daily Digest | 10 June 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

For the 2nd time in weeks, #Microsoft packages laced with credential stealer

https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-microsoft-packages-laced-with-credential-stealer/

#cybersecurity #GitHub #OpenSource

#Gogs patches critical zero-day enabling remote code execution

https://www.bleepingcomputer.com/news/security/gogs-patches-critical-zero-day-enabling-remote-code-execution/

#cybersecurity

#Microsoft Hacked to Deliver #Malware to #Claude and #Gemini Users

https://www.404media.co/microsoft-hacked-to-deliver-malware-to-claude-and-gemini-users/

#AI #cybersecurity

Indirect #PromptInjection remains a fundamental security challenge for #AI

https://brave.com/blog/indirect-prompt-injection/

#cybersecurity #Mozilla #Cotypist #Tabstack

Critical #UniFi OS bug lets hackers gain root without authentication

https://www.bleepingcomputer.com/news/security/critical-unifi-os-bug-lets-hackers-gain-root-without-authentication/

#cybersecurity #Ubiquiti

#WhatsApp says it caught new #spyware attacks linked to #NSO Group in violation of court order

https://techcrunch.com/2026/06/08/whatsapp-says-it-caught-new-spyware-attacks-linked-to-nso-group-in-violation-of-court-order/

#cybersecurity #Meta #privacy

'/usr/bin/su' and '/bin/su would never be in the memory cache at all ... by default ... except in systems that run entirely in memory.

Perhaps suid binaries should have special sandboxing for forcing them to be read from protected media into sandboxed memory addresses.

Maybe that would be a tougher nut to crack?

#Linux #Fragnesia #DirtyFrag #CyberSecurity #Exploits

📜 Scrolls volume 32 is out! Go check it out for the latest #indieweb, #fediverse and #infosec / #cybersecurity stuff.

https://shellsharks.com/scrolls/scroll/2026-03-06

Have a great weekend!

"While the [age verification] bill moved through the legislature, the OSI, FSF, Software Freedom Conservancy, and Linux Foundation all sat it out — no testimony, no public analysis, no formal opposition on the record."

California's computer age verification law is poison. The new California age verification law is a version of INGSOC's telescreen watching you. And the usual self-proclaimed software freedom fighters are AWOL as this attack on your freedom is executed.

Don't listen to apologists who claim this isn't a big deal. It is a huge deal. This law is not about protecting children. The California law is a ruse for laying the foundation and precedent for mandatory remote control of all operating systems. They are using children as a shield for their true intentions. It's called a 'subterfuge' or a 'pretext' to hide the real rationale. And in politics subterfuge is very common. These politicians don't care about your children. They care about control and information is control. Compliance with California's new law is highly corrosive to free software and deadly to personal privacy.

With the mandatory age verification API in place, legislators can later add more laws mandating retrieval of even more privacy-invasive information just to install and use any operating system. This is Big Brother's telescreen in your living room. And the Linux community is nearly silent on the matter, instead focused on artificial intelligence investment.

Where were the software freedom organizations when California was mandating installation of #spyware in all free and open source operating systems? Did they oppose it? Or did they support it by silence? The California age verification law is the greatest threat to software freedom in recent history., striking right at the root of software installation for all users. Yet (((crickets))).

Is silence really tacit support?

"While the [age verification] bill moved through the legislature, the OSI, FSF, Software Freedom Conservancy, and Linux Foundation all sat it out — no testimony, no public analysis, no formal opposition on the record."

Where were they when this mandatory spyware infrastructure was being shoved down our throats? Where were the self-proclaimed software freedom fighters? Where were the calls to action? I didn't see any.

Is silence golden ... or is gold buying silence?

Let these organizations know that you oppose California's age verification spyware law and that you expect them to rally in defense of true software freedom--freedom from government oversight of your software systems. Parents--and not the spyware state--should protect their children. The government is neither your parent nor your god nor your savior and the people should send a clear message stating that.

California, stay out of my operating system! And stay the hell away from children!

@eff@mastodon.social
@linuxfoundation@social.lfx.dev
@fsf@hostux.social
@osi@opensource.org
@conservancy@sfconservancy.org

#AgeVerification #Linux #EFF #OSI #LinuxFoundation #FSF #Privacy #Cybersecurity #Surveillance #Spyware #OpenSource #OperatingSystems #FreeSoftware #SoftwareFreedom #Panopticon #BigBrother #Government

CC: @laffer1@bsd.network @leo@twit.social @MichaelRoss@social.linux.pizza @rms@mastodon.xyz @thenewoil@mastodon.thenewoil.org @TechDesk@flipboard.social @remixtures@tldr.nettime.org

Alt...

A crowd of sillouettes of people stands in front of a giant telescreen depicting a single giant eye watching them.

Al Gore Invented the Internet.
Joe Biden invented PGP encryption.
Cypherpunks write code.

Joe Biden gifted humanity with PGP encryption (in a roundabout way). Phil Zimmermann created PGP in response to a anti-privacy bill clause proposed by Senator Joe Biden.

https://www.americanscientist.org/article/cypherpunks-write-code

"In 1990, the FBI launched an over-the-top crackdown on computer hackers, known as Operation Sundevil. This was swiftly followed, in early 1991, by a proposed piece of U.S. Senate legislation that would force electronic communications service providers to hand over people’s personal data. (The key clause, S.266, was pushed by the then chairman of the U.S. Senate Judiciary Committee, Senator Joe Biden.)"

"On learning of Biden’s S.266 clause, Zimmermann feverishly set out to complete the project, almost losing his house in the process. When he finished his software in 1991, he published it all online, free for anyone who wanted to use it. He called it “Pretty Good Privacy,” or PGP for short, and within weeks it had been downloaded and shared by thousands of people around the world. “Before PGP, there was no way for two ordinary people to communicate over long distances without the risk of interception,” said Zimmermann in a later interview. “Not by phone, not by FedEx, not by fax.” It remains the most widely used form of email encryption to this day."

https://www.congress.gov/bill/102nd-congress/senate-bill/266

"SEC. 2201. COOPERATION OF TELECOMMUNICATIONS PROVIDERS WITH LAW ENFORCEMENT. It is the sense of Congress that providers of electronic communications services and manufacturers of electronic communications service equipment shall ensure that communications systems permit the government to obtain the plain text contents of voice, data, and other communications when appropriately authorized by law."

#Biden #JoeBiden #PGP #Cypherpunks #Cypherpunk #PhilZimmermann #Privacy #Cybersecurity #Cryptography #GPG #Email #Senate #Law #Government #Panopticon #Hackers #Hacking #Security #Encryption

"New research shows that behaviors that occur at the very lowest levels of the network stack make encryption—in any form, not just those that have been broken in the past—incapable of providing client isolation, an encryption-enabled protection promised by all router makers, that is intended to block direct communication between two or more connected clients.

The isolation can effectively be nullified through AirSnitch, the name the researchers gave to a series of attacks that capitalize on the newly discovered weaknesses. Various forms of AirSnitch work across a broad range of routers, including those from Netgear, D-Link, Ubiquiti, Cisco, and those running DD-WRT and OpenWrt.

AirSnitch “breaks worldwide Wi-Fi encryption, and it might have the potential to enable advanced cyberattacks,” Xin’an Zhou, the lead author of the research paper, said in an interview. “Advanced attacks can build on our primitives to [perform] cookie stealing, DNS and cache poisoning. Our research physically wiretaps the wire altogether so these sophisticated attacks will work. It’s really a threat to worldwide network security.” Zhou presented his research on Wednesday at the 2026 Network and Distributed System Security Symposium.

Paper co-author Mathy Vanhoef, said a few hours after this post went live that the attack may be better described as a Wi-Fi encryption “bypass,” “in the sense that we can bypass client isolation. We don’t break Wi-Fi authentication or encryption. Crypto is often bypassed instead of broken. And we bypass it ;)” People who don’t rely on client or network isolation, he added, are safe."

https://arstechnica.com/security/2026/02/new-airsnitch-attack-breaks-wi-fi-encryption-in-homes-offices-and-enterprises/

#CyberSecurity #Wifi #Encryption #AirSnitch

Delta Chat is a messaging platform that works over email.

Setup is similar to a email client.
Messaging is decentralized and interoperable.

Supports end-to-end encryption via PGP.
PGP encryption keys are created automatically.

Default desktop client is based on Electron.
Electron is based on the Google Chromium web browser.

Website: https://delta.chat
Mastodon: @delta

#DeltaChat #Messaging #Privacy #InfoSec #E2EE #OpenPGP #PGP #OpenSource #FOSS #CyberSecurity #Encryption #FreeSoftware

Alt...

Delta Chat logo.

X's documentation explicitly states:

"Direct messages are not protected against hacking or unauthorised access."

If messages aren't protected against hacking, they're not encrypted properly.

This is encryption theatre, not encryption.

Words matter in security.

#Encryption #Cybersecurity #Twitter #Privacy

From threat modeling to encrypted collaboration apps, we’ve collected experts’ tips and tools for safely and effectively building a group—even while being targeted and tracked by the powerful.

Alt...

How to Organize Safely in the Age of Surveillance

Cryptomator is a client-side encryption tool for cloud storage services.

Data protected via AES-256 encryption.
Individual and business features.
Managed and self-hosted options.

ENCRYPTED

File content.
File/Folder name.

NOT ENCRYPTED

File/Folder access/creation/modification timestamp.
Number of files/folders in a folder/vault.
File size.

Website: https://cryptomator.org
Mastodon: @cryptomator

#Cryptomator #Encryption #InfoSec #Privacy #CyberSecurity #FreeSoftware #FOSS #FLOSS #OpenSource

Alt...

Cryptomator logo.

I wish people would stop giving credit to "prominent cybersecurity/cryptography experts" just because they released some "cypherpunk" book or software of unproven impact 30 years ago and have since then retreated into golden tenure, writing technically empty but catchy preprints with provocative titles. These "Ludd grandpas" (you know at least a couple of names of who I'm referring to) are, unfortunately, still worshipped by a large number of semireligious followers, who contribute to the spread of their moldy ignorance.

Thinking deeper, maybe mine is a typical case of rejection for the image in the mirror: I hope I will never become like that in the future.

The world does not stop at your rants. Keep moving and stay open-minded, or become obsolete.

#cybersecurity #security #infosec #cryptography #crypto #academia #rant #luddism