RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Fedora 44 has released, and with it comes a new offering: sealed bootable container images, which “include all the components needed to create a fully verified boot chain.”
OpenAI has introduced new security protections for ChatGPT accounts called Advanced Account Security, to protect users against account takeover.
A new exploit called copy.fail has emerged that can root just about any Linux distribution shipped since 2017 using just an unprivileged user account.
A security company, two medtech companies, a video streaming service, and an older attack we missed last week compromise this week's data breach headlines.
Firefox has bundled adblock-rust, Brave’s memory-safe content blocker, into Firefox in version 149, although disabled by default.
A popular app-infrastructure provider, an important French government agency, a watchmaker, and a cosmetics giant make up this week's confirmed data breaches.
The fingerprinting company fingerprint.com discovered a vulnerability affecting “all Firefox-based browsers” that would allow a “stable process-lifetime identifier” during a browsing session, including after pressing the “New Identity“ button in Tor browser.
Apple has released iOS 26.4.2, which fixes the notification bug that allowed the FBI to extract Signal messages from a defendant’s iPhone.
Regardless of your feelings on AI (and Mozilla), it seems Mozilla has at least found one good use for it.
According to WIRED, Madison Square Garden’s incredibly invasive facial recognition system has been used to ban critics of the stadium and even track a trans woman around who did nothing wrong.
The bill would be the first of it's kind but is not without controversy.
Is this a sustainable, fair business model or paywalling what should be the free version?
Hacker One says that the rise of AI bug reports is overwhelming projects, meaning the bug bounty system needs to be rethought.
This week saw yet another breach from Booking.com, education giant McGraw-Hill, freelancing job board Fiverr, and many more.
Reuters reports that the Indian government has decided it won’t go through with a proposal to require operating systems to preinstall the biometric ID app Aadhaar.
A security researcher on Hacker News claims that sensitive documents like tax forms shared between Fiverr users in private messages ended up publicly indexed by search engines like Google.
Mastodon announced they were awarded a €614k service agreement by the Sovereign Tech Fund to fund the development of new features and improvements, including end-to-end encrypted private messages.
Google announced on their security blog that Device Bound Session Credentials (DBSC), a protection against session theft, are shipping for Windows users on Chrome 146.
The Coalition of Alberta Public Libraries issued a letter raising privacy concerns over Bill 28, or the Municipal Affairs and Housing Statues Amendment Act, in Alberta, which requires age restrictions on library materials.
It was a slow week, though we did still see a high-profile breach of a startup that provides training data for AI which likely continue to be talked about for a while.
The FTC has determined that OkCupid and their owner Match Group don’t have to pay a fine after settling a case in which they shared 3 million user photos and location information to a facial recognition firm.