Applying for a government job shouldn't trigger a nationwide location tracking search. Yet EFF identified multiple law enforcement agencies in Missouri, Texas, Mississippi, and Illinois using Flock ALPR networks to run background checks. www.eff.org/deeplinks/2...

A President ordering the Justice Department to criminally investigate a woman who won a sexual assault lawsuit against him makes Watergate look like an unpaid parking ticket.

look. is everything more expensive now? yes. but you have to look on the bright side too. now every time you open a computer, it doesn't work

In addition, literal stacks of M4000 chemical bombs, used by the Assad regime to drop sarin on civilians in 3 recorded incidents, were found and photographed. Yet more evidence everything we published at Bellingcat based on our open source investigations of chemical attacks was accurate.

Google Cloud found a zero-day in KnowledgeDeliver, an LMS popular in Japan This was being exploited to take over servers and then show a fake security alert and infect site visitors with other malware cloud.google.com/blog/topics/...

Here is a look at all the special security features that Apple, Google, and WhatsApp offer to protect you from spyware all in one place. We looked at what these features do, and how to turn them on. We highly recommend them for anyone who's worried about government spyware.

Microsoft has banned Nightmare Eclipse from GitHub: github.com/Nightmare-Ec... This is the researcher who disclosed several zero-days after Microsoft also deleted his MSRC account They now moved on GitLab: deadeclipse666.blogspot.com

Attackers took over the art-template npm package and used it to deliver a Coruna-like iOS Safari exploit framework. Socket Threat Research breaks down the package takeover, device fingerprinting, and exploit delivery chain: socket.dev/blog/coruna-...

Mohammad Muzahir, aka Red Bull, the scam compound whistleblower and human trafficking victim whose incredible bravery made possible the story below, now has a GoFundMe: www.gofundme.com/f/support-wh... I'm in touch with the creator, who is legit. Grateful to her and to anyone who can donate.

84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...

To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal. More changes are on the way.

My resolution proposing a constitutional amendment to overturn the Supreme Court’s Citizens United decision now has 79 co-sponsors. You can view the full list at: www.congress.gov/bill/119th-c.... I’ll keep fighting to get it across the finish line!

Yo usando Claude Code con Opus 4.7 para mover el margen de un div 2px.

🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/[email protected] package artifact tied to this campaign. This is the third supply chain attack we've reported on today, and we're continuing to monitor the campaign: socket.dev/blog/mini-sh...

The recording of my second Binary Cartography webinar is public: Agentic Malware Analysis: From Task Automation to Deep Analysis Topics: string decryption, API hashing, unpacking & pipeline building Recording: youtu.be/azej1P17w9E Slides & samples: github.com/mrphrazer/bi...

This wild document is the basis for the State Department's decision to cancel the visas and green cards of tech researchers who study the social media platforms and of tech regulators who enforce privacy and transparency laws. Disclosed to us last night in @thecoalition.bsky.social v. Rubio.

fuuuuuuck

i’ve worked in tech more than 20 years. it has never been more ridiculous.

SCOOP: Palantir's 22-point manifesto is alarming even its own employees—but it's just the latest move by leadership that's incensed workers. More on the internal dissent growing inside the company: wired.com/story/palantir-employees-are-starting-to-wonder-if-theyre-the-bad-guys/

When DOGE arrived at the Nuclear Regulatory Commission, the operatives had no real background in nuclear issues. They boxed out experienced hands, forcing resignations and massive exodus of talent. Over 400 people have since left or been forced out. Our full story: https://propub.li/3OBQMwk

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.

Apple’s advisory confirmed that the bugs that allowed this to happen have been fixed in the latest iOS release. You can read more here: support.apple.com/en-us/127002

More ransomware and commodity malware blogs! Screw the reusable APT tooling

The APT researchers yearn to provide shareholder value

🚨 Breaking: Namastex Labs, the team behind Automagik[.]dev, hit with a supply chain attack affecting its npm packages. The malicious versions replicate TeamPCP-style Canister Worm tradecraft, including secret theft, exfiltration, and self-propagation. socket.dev/blog/namaste...

We published technical analysis of the Checkmarx compromise, including how malicious extensions silently fetched a second-stage payload from Checkmarx’s own GitHub repo. Our analysis also shows the malware stole developer credentials and used them for exfiltration and propagation.

Objection, a Thiel-backed startup, aims to use AI to judge journalism, letting users pay to challenge stories. Critics warn it could chill whistleblowers and reshape how media accountability works.

“If you criticise Palantir’s platform one more time, you are going to lose your job.” Solidarity to all NHS workers opposing this toxic corporation. Shame on those bullying them. But they won’t stop us. We’re going to ditch Palantir. www.ft.com/content/ff70...

This is a great interview about how we ended up with the internet being hell, and how that results in today's politics, including the role journalists have played. Watch, subscribe here: www.youtube.com/watch?v=gp_n...

OpenAI says to update Mac apps including ChatGPT and Codex as security precaution

when disassembling a complex device, at some point you reach the Swift threshold. this thing is never, ever, ever, going back together.

Absolutely remarkable statement from Pope Leo today. One for the history books www.theguardian.com/world/2026/a...

Good morning! I highly recommend anyone who thinks they might possibly interested to apply for my job at IGN. It is a fantastic (UNION!!!!!) job working with the absolute best people. I have loved it with all my heart. You will too. www.ziffdavis.com/careers/jobs...

We’re on strike today! Support our fight for a fair contract by NOT visiting the @propublica.org website or engaging with ProPublica stories today. Tell ProPublica’s management you won’t cross the picket line: actionnetwork.org/petitions/te...

Just wanted to remind folks, especially the GOP and the FDD, that Barack Obama’s 2015 nuclear deal didn’t give Iran control of the Strait of Hormuz or allow it to keep 60% enriched uranium. It sent $1.7 billion to Iran versus the tens of billions Iran will now make from tolls. 🤷🏽‍♂️

"History will judge-" let me stop you right fucking there, history doesn't do fucking shit, I'm a historian, let's be clear here: elected officials need to do their fucking jobs, right now, before it happens, or future historians will judge THEM. Everyone knows and knew who Trump was.

Just in time for Trump's scheduled war crimes, Bellingcat has updated our tool for identifying damaged buildings and structures in satellite imagery, ideally for investigating atrocities in Iran. Full details here: www.bellingcat.com/resources/20...

Just as a reminder:

Around 2 hours ago (01:22EST) it appears ILSpy WordPress domain was compromised to deliver malware. Someone caught it on video. ILSpy WordPress domain (as of this writing) is currently returning 502. Attempting to download ILSpy, instead of directing to GitHub, redirected to a domain

BREAKING: Apple removed an app for preserving TikToks, Instagram reels, news reports, and videos documenting abuses by ICE 🔗 www.404media.co/apple-banned...

New: Apple banned an app that simply archived videos of ICE abuses. Rather than other apps that record ICE official's real-time location, Eyes Up is to "preserve evidence until it can be used in court." Videos from TikTok etc. Every submission manually reviewed www.404media.co/apple-banned...

New from 404 Media: Apple just removed ICEBlock, the app for reporting sightings of ICE, from its App Store after DOJ pressure. ICEBlock's developer tells me "we are determined to fight this." "Capitulating to an authoritarian regime is never the right move." www.404media.co/iceblock-own...

ICEBlock Owner After Apple Removes App: ‘We Are Determined to Fight This’ 🔗 www.404media.co/iceblock-own...

🚨🚨🚨 Google released a report on "Brickstorm" this morning — a next-level, suspected China-linked campaign targeting U.S. firms. Ultra-stealthy, 400+ day dwell times, focus on stealing IP, finding zero-days, and focused on long-term cyberespionage. cyberscoop.com/chinese-cybe...

Holy shit

if you’re canceling your Disney and worried about what your kids will watch…might i suggest supporting your local PBS station, which gets you streaming access to all their content via PBS passport

New: 404 Media is suing ICE. We have filed a lawsuit demanding ICE release its $2 million contract with Paragon, a company that makes powerful spyware to break into phones and read encrypted messages. This is expensive for a small outlet but this info is important www.404media.co/were-suing-i...

Excited to speak at FTSCon next month!

#FTSCon Speaker Spotlight: Joseph Edwards (@eflags.bsky.social) is presenting “The Forensics of Zoom's Remote Control” in the HUNTER track. See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...