First, Outlook fails. Now: Houston, Bluetooth won't pair. Artemis II is NASA's most relatable mission yet.

NEW: #WhatsApp shuts down mercenary spyware op, notifies targets. Sends legal warning to Italian spyware shop #SIO. Trick is simple & time tested: govs trick people into installing a malicious version of WhatsApp. Then spy on them. 1/ By @lorenzofb.bsky.social techcrunch.com/2026/04/01/w...

Stop scrolling & watch this. Follow along. Get safer. This especially matters if you're pissing off the powerful. Thanks to @gijn.org for putting this together. www.youtube.com/watch?v=MsPY...

Prolific Russian gov phishing operation now using the DarkSword exploits. Predictable: lots of threat actors have been exploit poor but with great infrastructure for social engineering. When exploits leak from governments they are best positioned to almost immediately start using them 1/

NEW: French sailor reveals position of aircraft carrier with fitness app. His runs track Charles de Gaulle as it steams across the Med. Story by @lemonde.fr 1/ www.lemonde.fr/internationa...

NEW: foreign hacker compromised Epstein files held by #FBI "included combing through certain files pertaining to the Epstein investigation” Source describes it as cybercriminal. Previously all we knew was: there was some sort of breach. 1/ By @raphae.li www.reuters.com/world/us/for...

You used Pokemon Go. You were not the customer. You were the product. By @willdouglasheaven.bsky.social www.technologyreview.com/2026/03/10/1...

6/ In 2022 I warned Congress that commercially-developed exploits would leak. I testified to House Intelligence that the tech would go to adversaries and criminal organizations. That has now happened with #Coruna. And as the commercial offensive industry grows, it will happen again.

BREAKING: powerful iPhone hacking tools used by Chinese criminals originated from US defense giant L3 Harris. Their zero-click exploits went to Russian spies too. Unbelievable harm to our collective security. Scoop: @lorenzofb.bsky.social, here's why it matters 1/ techcrunch.com/2026/03/09/a...

The #FCC is reviewing a proposal for space mirrors to blast sunlight at the earth at night. Sounds awful. Anyone who that been to the far north or tried to sleep under lights knows how disorienting 24h of light is. Everybody gets insomnia. It's also an ecological disaster machinery 1/

We're about to see a new surveillance trap: "Plaid for AI" This will look like slick middleware that seamlessly hooks CRMs to Claude, gmail to GPT-5 etc, etc. UX will be great & founders well-meaning. Then the VCs ask: what else can we do with this sick tokenflow data? 1/

NEW: US just sanctioned a network of exploit brokers trafficking in stolen US hacking tools First-ever use of #PIPA (Protecting American Intellectual Property Act) by Treasury. Here's the wild backstory of how Operation Zero got US-taxpayer funded exploits. 1/

Cellebrite taking a page out of the NSO Group playbook. Denialism is a bad look for a company that tries to frame itself as more ethical than notorious spyware companies. And a good sign that there are deeper issues with the company.

UPDATE: Paragon calls OPSEC fail a tiny price to pay for "female empowerment." Peak cringe. And nonsense. Entire world learned from this pic that their spyware is more invasive than previously known. 1/

Aleksei Navalny was most likely poisoned by a toxin found in a South American frog, five European countries said Saturday, making the most concrete Western accusation yet that Russia’s leading opposition figure was murdered by his government in a prison two years ago. www.nytimes.com/2026/02/14/w...

UPDATE: Ring just cancelled their partnership with #Flock. Should you trust #ring now? No. After all they thought this was a good idea. And their statement doesn't acknowledge the real issue. More on that in a second. But this shows: pressure works on privacy 1/

Epic OPSEC fail by Paragon exposing Graphite spyware capabilities. Annotated pic from what we know. Please help me figure out the other apps in in this pic that the spyware can access: #WhatsApp #Telegram #Signal ? #Line? ? #Snapchat? #TikTok? 1/

🇨🇳In China: agencies budget billions for total surveillance. 🇺🇸In America we buy & install the cameras ourselves.

The showed us cute missing dogs & we consented to turning our doorbell cameras into a mass human tracking system. Mark my words, Ring's Search Party will become the next Flock. Only instead of just being sketchy cameras installed in parking lots, it will be everywhere. That's their play.

A judge in 🇪🇸Barcelona has formally charged two former Civil Guard directors for the first time in connection with the Pegasus #spyware used to spy on the Catalan independence movement. The judge has also summoned former intel. agency CNI director to testify as a suspect. en.ara.cat/politics/two...

A VPN company server was seized. Reminder: your 'privacy' VPN is still a physical server in somebodies jurisdiction. Claim of RAM disk servers as protection is...interesting. I know nothing more about this case, but hotplugs that let authorities grab a server without cutting power are common. 1/

Every AI company in year 1: Bro, we are going to be SO ALIGNED. year 2: YOLO the machine built itself and we can't validate that it's aligned because it knows when we are testing it. Anyways here it is LFG!

Brutal layoffs at the Washington Post today. A lot of reporters of great integrity & talent are suddenly out of a job. This hurts good people & weakens journalism collectively. Wishing them all the best in this tough market.

I trust you, but your AI agent is a snitch: Why we need a new social contract. We’re chatting on Signal, enjoying encryption, right? But your DIY productivity agent is piping the whole thing back to Anthropic. Friend, you just created a permanent subpoena-able record of my private thoughts...1/

In past 24h: ❌ 1-click exploit dropped for #OpenClaw: Simply visiting a URL allowed attacker to steal everything: keys & files + take control of the device. Patched. ❌#MoltBook had a vulnerability exposing all users emails, real names etc. Patched. 1/ Takeaway: all gas, no brakes.

I believe NSO Group has one goal: Bring Pegasus spyware to America. They're trying to create the perception that they are a reformed company. But they just got caught trying to hijack diplomatic efforts to whitewash Pegasus spyware 1/

Someone spun up a social network for AI agents. Almost immediately some began strategizing how to establish covert communications channels to hide from humans. In many cases the agents are on machines that have access to personal data. "Privacy breach" won't begin to capture what is coming. 1/

Huge news out of the UK 🇬🇧 www.reuters.com/world/uk/sau...

Spyware found on Belarusian journalist's phone shortly after interrogation by security services. Reporters w/o Borders: Spyware likely installed while the journalist was detained. The same infection method recently used in Kenya + Serbia. H/t @jsrailton.bsky.social therecord.media/spyware-bela...

Belarusian KGB put spyware on phones of detained journalist. Growing list of cases where authoritarian regimes use detention to implant spyware on phones: 🦠Belarus 🦠Kenya 🦠Serbia And likely plenty more. Important investigation & reminder that dictators don't always need zero-days.

1/ Yesterday’s Q2-Q3 Adversarial Threat Report by Meta was interesting in many ways. For us @citizenlab.ca, it was a blast from the past. For the first time, Meta’s investigators attributed what in 2019 we had named Endless Mayfly - a relentless, sophisticated influence op targeting Iran’s enemies.

In 2019, we @citizenlab.ca published an investigation into a disinfo / influence operation we called "Endless Mayfly", and which we attributed at the time to an "Iran-aligned entity" citizenlab.ca/2019/05/burn... Now, Meta's latest adversarial threat report showing we were spot on 👇

Hotel toilet privacy is disappearing. Glass doors. Or no door. Or a big window into the room. Or frosted glass so that the light spills out. Who is asking for this?

Massive global issue with Cloudflare. App not working? Can't login? Probably why. SO much of the internet depends on Cloudflare to stay online. But what happens when Cloudflare itself goes down? Well, you're watching it.

CRUSHING BLOW TO NSO: 🇺🇸Court permanently bans Pegasus spyware-maker from targeting WhatsApp 🚫Must destroy tools exploiting WhatsApp 🚫Stop future development of WA targeting Foreign gov customers exempt from data deletion but... 🚫NSO is barred from helping them hack WA. 1/

What used to be bugs and informants is now #spyware. Bringing together victims of #Stasi surveillance and #spyware to discuss: How can we protect #freedom in the digital age? 🗓️ November 12, 18:30 #BerlinFreedomWeek Register here 👇 www.berlin-freedom-week.com/en/event/sta...

A firm that sells extraordinarily powerful phone hacking technology that has been demonstrably connected to widespread harms worldwide, including gruesome murder, and was properly sanctioned and held liable because of it ....is now in the hands of these people. That's Bad News, everyone.

Bringing NSO Group out of the cold would signal to the rest of the spyware industry that even the most notorious mercenary spyware company.. ...with a history of harming the US. ...and a mountain of abuses.. Can get a free pass. It would defang US efforts to curb proliferation & bad behavior.

UPDATE: NSO just hired former Trump ambassador to Israel. They're trying to push Pegasus spyware to 🇺🇸America. Your rights and freedoms are in danger. NSO Group is no friend to the US & has spent years undermining our security & values 1/

YIKES: NSO floats Pegasus spyware used in hypothetical "time of domestic crisis" in 🇺🇸America. I believe they won't stop lobbying until they get Pegasus into USA. To hack Americans. 1/

NEW: Paragon spyware hit a key Italian campaign manager / political strategist. Super concerning case & a reminder that Italy has a growing pile of unexplained infections with Paragon's Graphite spyware.

Outages are impromptu seminars on where the internet actually lives. On the syllabus: your favorite app's resilience & trust model. Good thread from @signal.org's CEO.

I'm getting a lot of LLM-generated inbound. Someone pushed a button forcing me to spend more time reading the message than they spent creating it. Please, give me your authenticity, typos & bad grammar.

POV: you can't sleep because Amazon is down. Design thinking that inserts brittle dependence into our lives. While extracting fees for life. Don't be these guys.

Today's Amazon outage should be a wakeup call. We've put too many internet eggs into a single basket.

Your favorite thing is down because DynamoDB at Amazon's AWS US-EAST-1 Regionwoke up with Main Character Syndrome. This is the default /legacy backbone for a ton of things. Including Amazon's own stuff. Massive outages. Here's what's going on & what we know 1/

NEW: 🇰🇵DPRK has begun hiding malware on blockchain. Result, decentralized, immutable malware. Nearly impossible to remove. Report cloud.google.com/blog/topics/...

EW: 🇰🇵DPRK has begun hiding malware on blockchain. Result, decentralized, immutable malware. Nearly impossible to remove. cloud.google.com/blog/topics/...

NOW: US court permanently bans Pegasus spyware maker from hacking WhatsApp. NSO Group can't help their customers hack WhatsApp etc. ether. Must delete exploits & R&D. Bad news for NSO. Huge competitive disadvantage for the notorious company. Big additional win for WhatsApp 1 /