#CISA urges immediate action on actively exploited #Fortinet flaws

https://www.bleepingcomputer.com/news/security/cisa-warns-feds-to-patch-exploited-fortinet-fortisandbox-flaws-by-sunday/

#cybersecurity

Privacy, surveillance, and the crypto wars #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/privacy-surveillance-and-the-crypto-wars/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

New #ClickLock #macOS #malware traps users into revealing login password

https://www.bleepingcomputer.com/news/security/new-clicklock-macos-malware-traps-users-into-revealing-login-password/

#cybersecurity

Now, even #Russia’s most elite hackers are using #Clickfix to infect devices

https://arstechnica.com/security/2026/07/now-even-russias-most-elite-hackers-are-using-clickfix-to-infect-devices/

#cybersecurity

When government backlogs meet desperate demand, cybercriminals see a premium business opportunity.💰
DTI’s latest research dives into the playbook behind scarcity scams ⬇️
https://dti.domaintools.com/securitysnacks/scarcity-scams
#Cybersecurity #Phishing #IdentityTheft #ThreatIntel #Scams

#CocaCola says #Fairlife #ransomware attack halts US #dairy production

https://www.bleepingcomputer.com/news/security/coca-cola-says-fairlife-ransomware-attack-halts-us-dairy-production/

#cybersecurity

#1Password lets #Claude use your #passwords without seeing them, and that is safer than it sounds

https://nerds.xyz/2026/07/1password-claude-passwords-secure-ai-agent/

#cybersecurity #AIAgent #AgenticAI

Internet subcultures: kin communities #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/internet-subcultures-kin-communities/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

#Claude #Chrome extension flaw lets malicious extensions trigger #AI actions

https://www.bleepingcomputer.com/news/security/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions/

#cybersecurity #Anthropic

#OnePlus will continue software updates, all devices move to #ColorOS with #Android17

https://9to5google.com/2026/07/16/oneplus-software-updates-android-17-coloros/

#Android #cybersecurity

New #OkoBot framework deploys 20 payloads to steal data, #crypto

https://www.bleepingcomputer.com/news/security/new-okobot-framework-deploys-20-payloads-to-steal-data-crypto/

#malware #cybersecurity

#23andMe to pay $18 million in new #genetics #DataBreach settlement

https://www.bleepingcomputer.com/news/security/23andme-to-pay-18-million-in-new-genetics-data-breach-settlement/

#DNA #privacy #cybersecurity

#ScatteredSpider members behind #TfL hack get five years in prison

https://www.bleepingcomputer.com/news/security/scattered-spider-members-behind-transport-for-london-hack-get-five-years-in-prison/

#cybersecurity #UK #London #TransportForLondon

#Windows11 24H2 Home and Pro reach end of support in 90 days

https://www.bleepingcomputer.com/news/microsoft/windows-11-24h2-home-and-pro-reach-end-of-support-in-90-days/

#cybersecurity #Windows #Microsoft

Think cybersecurity is only for fictional movies? These documentaries tell the real stories behind some of the biggest hacks, privacy battles, and cyber incidents 😎👇

Find high-res pdf ebooks with all my cybersecurity related infographics at https://study-notes.org

#cybersecurity #hacking #infosec #informationsecurity #privacy

#CISA orders feds to patch actively exploited #Oracle flaw by Saturday

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-oracle-flaw-by-saturday/

#cybersecurity

✦ 𝗟𝗶𝗳𝗲𝗖𝗼𝗱𝗲™ #016

◈ 𝗖𝗼𝗱𝗲𝗤𝘂𝗼𝘁𝗲

❝ 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗶𝗼𝗻 𝗱𝗼𝗲𝘀 𝗻𝗼𝘁 𝗵𝗶𝗱𝗲 𝘁𝗵𝗲 𝘁𝗿𝘂𝘁𝗵. 𝗜𝘁 𝗱𝗲𝗰𝗶𝗱𝗲𝘀 𝘄𝗵𝗼 𝗶𝘀 𝘁𝗿𝘂𝘀𝘁𝗲𝗱 𝘁𝗼 𝗿𝗲𝗮𝗱 𝗶𝘁. ❞

Privacy is not dishonesty.

Access is not entitlement.

𝗪𝗵𝗮𝘁'𝘀 𝘆𝗼𝘂𝗿 𝗶𝗻𝘁𝗲𝗿𝗽𝗿𝗲𝘁𝗮𝘁𝗶𝗼𝗻?

────────────

Read beyond the code.

#LifeCode #CodeQuote #TechnologyWisdom #Encryption #Privacy #Trust #CyberSecurity

How ideas gain momentum online #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/influence-and-narrative-amplification-how-ideas-gain-momentum-online/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

I don’t like playing the futurologist, but after seeing AI companies warn EU institutions about the supposed risks of open-weight models, I suspect some are lobbying to regain control over genuine open source and open-weight AI.

Don’t fall into the trap: the greater danger lies in opaque, proprietary models, not open-source ones.

#opensource #ai #cybersecurity

If you're going to bash the competition, at least be honest about it. @simplex

I can't speak to the other points here, but Session does have message padding, though only for attachments up to 10 MB. This is highlighted in section 6.2 of their whitepaper, which is linked on the first page of their website; they also mentioned it in multiple interviews. So they deserve a yellow check mark.

This is achieved by first padding each attachment to fit within a fixed number of constant sizes between 0 and 10 megabytes, then encrypting the attachment with a random symmetric AES key.

It should be a no-brainer to read the whitepaper of the competition before making any claims about them.

I'm happy to be proven wrong.

Whitepaper: https://arxiv.org/pdf/2002.04609
Session website: https://getsession.org/
SimpleX presentation: https://www.youtube.com/watch?v=UhW8AuoRgxg

Also: Checklists Are The Thief Of Joy

#session #sessionmessenger #simplexchat #simplex #dataprotection #privacy #cybersecurity #messenger @session

Alt...

Presentation by a SimpleX employee discussing the differences between SimpleX and Session, Briar, Element, Cwtch, and Signal. The chart lists multiple security factors, and next to them are crosses, yellow check marks, and green check marks.

Daily Digest | 17 July 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Artificial intelligence is transforming the way we work, learn, and communicate—but it also comes with new risks. From AI-powered scams and deepfake videos to phishing attacks and privacy concerns, staying informed is the best defense.
https://nyvoraai.github.io/ai-news/ai-risks-everyday-users.html

💡 Stay informed. Stay protected. Stay ahead with NyvoraAI.

#AI #ArtificialIntelligence #AISafety #CyberSecurity #Privacy #Deepfake #OnlineSafety #TechTips

Alt...

🔒 AI Risks for Everyday Users: Stay Safe in 2026

Quantum hardware: building a quantum computer #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/quantum-hardware-building-a-quantum-computer/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

From the CyberIntel archive: Hacker Leak Reveals Madison Square Garden's Internal Surveillance Database of VIP Celebrities

https://cyberintelnews.com/

#DataBreach #Privacy #RiskManagement #Cybersecurity

How to detect the signals of a fraud #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/how-to-detect-the-signals-of-a-fraud/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

Russian hackers trojanize #WebEx, #Zoom apps to push #Starland #malware

https://www.bleepingcomputer.com/news/security/russian-hackers-trojanize-webex-zoom-apps-to-push-starland-malware/

#cybersecurity

New #Spirals #ransomware encrypts victim network in under 24 hours

https://www.bleepingcomputer.com/news/security/new-spirals-ransomware-encrypts-victim-network-in-under-24-hours/

#cybercrime #cybersecurity

"This technical analysis provides the most detailed view yet into the inner workings of the Pegasus spyware system. This includes confirmation of key technical capabilities such as the infection vectors and methodologies used to infect devices, supported by analysis of internal NSO Group documents, that until now had only been identified via forensic investigations. It also presents new material further validating the accuracy and significance of the dataset underpinning the original Pegasus Project investigation. Finally, this research provides an updated analysis, drawing on previously published Pegasus forensic evidence and newly released materials, to validate the technical methodology used to forensically link Pegasus spyware attacks targeting different victims as originating from the same Pegasus customer.

A key aim of this publication is to document and demystify the functionality and operations of technological systems like Pegasus. We hope that it will inform the wider spyware accountability community on how complex surveillance systems such as Pegasus are used by government customers, and also illustrate the key and ongoing role of spyware vendors in keeping such systems operational. We believe this public understanding is of critical value to technologists, researchers, and policy makers and others with an interest in understanding the targeted surveillance ecosystem and threats posed to human rights by surveillance technologies.

The contents of this technical research draw heavily on a large pool of confidential NSO Group training material, presentations and internal technical documentation which were disclosed as part of a long-running civil case taken by WhatsApp and Meta against NSO Group in U.S. court. This new material provides an unprecedented insight into the evolution of NSO Group’s spyware."

https://securitylab.amnesty.org/latest/2026/07/inside-pegasus-the-evolution-of-the-worlds-most-notorious-spyware/

#CyberSecurity #Spyware #NSOGroup #Pegasus #Surveillance #Privacy

"Health data is increasingly an important part of law enforcement or government investigations. Wearable data has been critical in a number of cases, where information about heart rate and steps was used to determine the whereabouts of individuals. And the surveillance company Penlink calls fitness trackers and wearables an “overlooked source” for law enforcement since they tend to show movement patterns and changes in heart rates. Law enforcement can try to get access to this data through subpoenas or warrants.

There are many potential privacy issues with these sorts of devices, including whether the companies who make them share or sell information to third-parties. But here we are choosing to focus on two facets we’re concerned with around health data itself: 1) whether the company shares information with law enforcement and governments and 2) if they offer end-to-end encryption, which means the company itself can’t access that health data to begin with."

https://www.eff.org/deeplinks/2026/07/most-smart-watches-rings-and-bands-lack-basic-transparency-reports-and-key-privacy

#SmartObjects #SmartWatches #SmartRings #IoT #Surveillance #Privacy #CyberSecurity #Encryption

#California Steps Back From Dangerous Expansion of its Age-Gating Law

https://www.eff.org/deeplinks/2026/07/california-steps-back-dangerous-expansion-its-age-gating-law

#privacy #AgeVerification #cybersecurity #politics

#Zoom warns of critical account takeover vulnerability

https://www.bleepingcomputer.com/news/security/zoom-warns-of-critical-account-takeover-vulnerability/

#cybersecurity

Corporate red flags: the invisible risks of partnerships #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/corporate-red-flags-the-invisible-risks-of-partnerships/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

#Google #Gemini CLI abused as a hacking agent, #malware #botnet operator

https://www.bleepingcomputer.com/news/security/google-gemini-cli-abused-as-a-hacking-agent-malware-botnet-operator/

#cybersecurity #AI

#AsyncAPI #npm packages infected with credential-stealing #malware

https://www.bleepingcomputer.com/news/security/-asyncapi-npm-packages-infected-with-credential-stealing-malware/

#cybersecurity

#Windows 0-day drops the same day #Microsoft releases record number of patches

https://arstechnica.com/security/2026/07/windows-0-day-drops-the-same-day-microsoft-releases-record-number-of-patches/

#cybersecurity #HiveLegacy

#Briar is in maintenance mode

https://briarproject.org/news/2026-maintenance-mode/

#privacy #cybersecurity #messaging #FOSS

Hack Reveals #Suno #AI Music Generator Scraped #YouTube, #Deezer, and #Genius

https://www.404media.co/hack-reveals-suno-ai-music-generator-scraped-youtube-deezer-and-genius/

#cybersecurity #art

#CISA warns admins to patch actively exploited #SharePoint flaws

https://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-patch-actively-exploited-sharepoint-flaws/

#cybersecurity

🇮🇹 Siamo felici di annunciare l'inizio di un nuovo progetto con un obiettivo ambizioso: contribuire alla sovranità digitale italiana ed europea.

Stiamo sviluppando un cloud completamente progettato in Italia, con un'infrastruttura distribuita su nodi in tutta Europa.

Un approccio diverso, costruito mettendo al centro sicurezza, privacy e controllo dei dati, per offrire un'alternativa tecnologica europea.

Scopri come funziona!

#Cloud #Privacy #CyberSecurity #Italia #Europa #SovranitàDigitale

US charges alleged operators of Russian #bulletproof hosting service

https://www.bleepingcomputer.com/news/security/us-charges-alleged-russian-bulletproof-hosting-service-operators/

#cybercrime #cybersecurity #MediaLand #MLCloud