آرشیو ۹۰ روزه
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.
Police agencies across the U.S. have deployed Automated License Plate Readers (ALPRs) to capture images of passing vehicles along with time, date, and GPS coordinates. While the technology itself isn’t new (ALPRs have existed in various forms for more than 50 years, and in the U.S. since 1998), the surveillance landscape has shifted dramatically. Rapid advances in artificial intelligence and national data sharing hav…
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.
A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany’s Alternative für Deutschland (AfD) confirmed on October 19 that its hosting provider was hacked in September and that mailboxes were copied. By the time the confirmation reached Bild, a website called hexane.cc […]
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
یک مدل هوش مصنوعی شرکت آنتروپیک موفق شد معمای ۲۵ ساله‌ی منشا اعداد استفاده‌شده در استانداردهای رمزنگاری آژانس امنیت ملی آمریکا را حل کند.
اوپن‌ای‌آی فاش کرد مدل‌های آزمایشی این مجموعه برای دور زدن محدودیت‌ها، دو وب‌سایت را هک کرده و از یک کیف پول، رمزارز برداشته‌اند.
اسناد دادگاه آمریکا نحوه ارسال آی‌پی و شماره‌ی کاربران به پلیس را آشکار کرد و ایمیل محرمانه تلگرام برای این همکاری‌ها نیز در پرونده لو رفت.
گزارش اتحادیه‌ی فایدو نشان می‌دهد ۵ میلیارد کلید عبور فعال شده و سه‌چهارم کاربران دست‌کم یک پس‌کی برای حساب‌های خود ساخته‌اند.
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.
Brave has added end-to-end encryption and hardware-backed confidential computing to its Leo browser assistant, protecting conversations with the GLM 5.3 Flash model from access by the companies handling them. Announced yesterday, the update uses Oblivious HTTP (OHTTP) to encrypt prompts before they leave the browser, with decryption restricted to verified trusted execution environments (TEEs) operated … The post Brav…
یک نسخه‌ی جعلی از مرورگر کروم با بیش از ۱۰۰ هزار دانلود و تبلیغات پولی در صدر نتایج فروشگاه گوگل پلی شناسایی شد.
گزارش‌ها از احضار OpenAI و آنتروپیک در آمریکا به‌دلیل نگرانی‌ها درباره ایمنی مدل‌ها، حوادث امنیتی و ادعاهای حریم خصوصی حکایت دارند. The post OpenAI و آنتروپیک زیر ذره‌بین کمیسیون تجارت آمریکا قرار گرفتند appeared first on دیجیاتو.
Eight US states and a mother of two accuse the ChatGPT maker of putting children’s safety and privacy at risk.
مایکروسافت در همکاری با آژانس ملی پلیس ژاپن موفق به انهدام یک شبکه بزرگ کلاهبرداری سایبری با ارسال بیش از یک میلیارد پیام فیشینگ شد.
That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The Citizen Lab. One top actor in the space, Discover-Tech, runs the Contro…
Barry Steinhardt, a lifelong privacy champion and an early leader in the battle for digital civil liberties who served as EFF’s president in 1998-99, died last week at age 73. A Connecticut native, Steinhardt led the Vermont and Pennsylvania affiliates of the American Civil Liberties Union before becoming associate director of the national ACLU. There, he helped spearhead the fight to overturn much of the Communicati…
No one should have to choose between speaking freely and protecting their immigration status. Yet that’s precisely the choice the Trump administration’s mass surveillance of online speech forces on noncitizens living in the U.S. Last fall, we sued on behalf of three major labor unions to stop this surveillance program. And just this month, we won our first major ruling: A federal district court denied the government’…
Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
Citizen Lab has uncovered targeted advertising campaigns that infected devices at Al Jazeera with Candiru spyware without requiring users to click anything. The researchers call the technique “AdFection” and describe their findings as the first public technical confirmation of mercenary spyware delivered through targeted ads. The investigation identifies Israeli advertising company Discover-Tech as the intermediary ……
Session says it has implemented the core cryptography for its Protocol v2 upgrade, moving the decentralized messenger closer to perfect forward secrecy, post-quantum encryption, and stronger controls over linked devices. Session said it has published the protocol specification and implemented encryption for one-to-one messages and verified device linking in libsession, the shared cryptographic library used … The post…
Reports generated from the scanning of EU users’ private communications are analyzed using Palantir’s Foundry software at the National Center for Missing & Exploited Children (NCMEC), according to an investigation by Swedish newspaper Dagens ETC. The findings raise questions about transparency and safeguards around sensitive data transferred to the United States, although NCMEC says Palantir … The post Flagged EU cha…
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed.
Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation links Discover-Tech to Candiru, an Israeli spyware vendor that the US government placed on its Entity List in 2021. Candiru has since used the name Integrity Labs. Citizen Lab also identified links involving other surveillance […]
Infostealer intelligence has become one of the important tool in cybersecurity as malware has become one of the most efficient tools in a cybercriminal's kit. A single infected laptop can leak saved passwords, browser cookies, autofill data, and enough machine details for an attacker to impersonate the user outright. Stolen session cookies are especially damaging because they let intruders skip multi-factor authentic…
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software <=5.18 (CVE-2026-107777) CVSS Vendor Equipment v3 6.5 Thermo Fisher Torrent Suite Software 1 Vulnerability Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following versions of J4Care dcm4che are affected: dcm4chee-arc-light 5.35.1 (CVE-2026-97851, CVE-2026-107621, CVE-2026-105273, CVE-2026-101021, CVE-2026-1…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664) EseeCloud Firmware <=4.9.86.0 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664) CVSS Vendor Equipment v3 9.8 Guangzhou Juan IoT Techn…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0| =1.0.0|<=1.1.4 (CVE-2026-62927, CVE-2026-58080, CVE-2026-61387) CVSS Vendor Equipment
View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Alt…
Removing location data may not keep your home private. An AI tool used by law enforcement can match indoor photos to property listings.
