La nuova VPN gratuita di Firefox è disponibile anche in Italia e permette di migliorare la privacy online senza installare software aggiuntivi. Scopri come funziona e quali sono i suoi limiti. #Firefox #Mozilla #VPN #Privacy #Browser #OpenSource

https://www.linuxeasy.org/firefox-italia-vpn-gratuita-integrata-browser/?utm_source=mastodon&utm_medium=jetpack_social

Mapping Every #Flock License Plate Reader Near US #WorldCup Stadiums

https://www.wired.com/story/us-world-cup-2026-alpr-camera-stadiums/

#football #soccer #sports #privacy #surveillance #ALPR

📰 South Korea Hits E-Commerce Giant Coupang with Record $409M Fine Over Data Breach

South Korea's privacy regulator has fined e-commerce giant Coupang a record $409 MILLION for a data breach affecting 37.5M people. The cause? Inadequate security safeguards, not a sophisticated hack. 🇰🇷 #DataBreach #Privacy #Fine #Coupang

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/south-korea-fines-coupang-record-409m-for-data-breach/?utm_source=mastodon&utm_med…

#Soccer Fans, You’re Being Watched

https://www.wired.com/story/us-world-cup-2026-alpr-camera-stadiums/

#football #WorldCup #sports #privacy #surveillance

A WIRED investigation found dozens of “nudified” deepfake images and videos on Grok's website, including nonconsensual depictions of celebrities and at least one prominent US politician.

Alt...

Grok Is Still Hosting Sexualized Deepfakes of Famous Women

What password manager do y'all use these days?

I'm in the market for one that plays nice across various devices and can be shared (ie with spouse for family accounts)

#privacy
#passwords

"End-to-end encryption, in which data is encoded so that only users on either “end” of a conversation can decrypt their communications—and not the server that relays that information or any other interloper—has become the standard for modern privacy on the internet. But its very name suggests a kind of simple pipe with two openings. The metaphor, and often the encryption technology that has enabled that model, doesn't fit neatly onto the world of Slack, Discord, Google Docs, and the other multiuser, complex, collaborative software where people now live and work.

So one group of cryptographers has built what they describe as the foundation for a new generation of end-to-end encrypted apps, with a new metaphor: Instead of a mere pipe, they want to create “spaces” where users can hold group conversations, host information on a server, collectively make changes to it, invite in new collaborators or kick them out, all while maintaining the same strong encryption protections that prevent the server or network eavesdroppers from accessing their data.

That cryptographer team, including contributors from Harvard, Microsoft Research, and former developers of the end-to-end encrypted messenger Signal, today release a “preview” of Encrypted Spaces, an early version of a set of open-source code libraries, which is part of an architecture they've designed to allow anyone to easily build a rigorously end-to-end encrypted app that nonetheless enables all of the complex collaboration features that users demand from software today."

https://www.wired.com/story/signal-alums-release-encrypted-spaces-a-new-system-for-building-private-collaboration-apps/

#Signal #Encryption #Privacy #Cryptography #CollaborativeSoftware #EncryptedSpaces

#EU Says Decision Not to Launch #Siri #AI in Europe Is #Apple's Alone

https://www.macrumors.com/2026/06/09/eu-says-decision-not-to-launch-siri-ai-in-europe-is-apples/

#privacy #DMA

WordPress Malware Campaign hides Payloads in Steam Profiles.

Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control [C2] data.

The threat actor’s used invisible Unicode characters to encode a payload that builds a URL to a malicious script. By leveraging Valve's platform, the attacker avoids maintaining a separate C2 infrastructure and evades traditional detection methods.

⁉️Since the campaign was first uncovered in July 2025, GoDaddy security engineers have found malware on approximately 1,980 WordPress websites.⁉️

https://www.godaddy.com/resources/news/malware-targeting-wordpress-abuses-steam-community-profiles

#wordpress #security #privacy #media #infosec #tech #news

Alt...

It is unclear how the attackers breach the websites, but researchers assess that the initial infection vector ranges from stolen admin logins or compromised FTP/SFTP credentials to the exploitation of a vulnerable WordPress theme or plugin, or a supply-chain compromise. 👾The first-stage malware planted on a website uses WordPress page loads to reach specific Steam profiles and extract text from benign-looking comments. According to the researchers, the decoded payload is used to build a hello-mywordl[.]info URL serving JavaScript code that is injected into every frontend WordPress page. Based on the file names [e.g., asahi-jquery-min-bundle and lodash.core.min.js], the retrieved malware is disguised as a legitimate JavaScript library.👾 ⁉️The researchers recommend that security teams prioritize restoring from a known good backup before the infection date. If this is not possible, the manual cleaning process should be thorough because "attackers can reinstall removed code through the backdoor if any component remains active."⁉️

Alt...

[ImageSource: GoDaddy] Malicious Steam comment 👾However, the text includes hidden Unicode characters that conceal malicious payloads sometimes disguised as ASCII art. GoDaddy researchers note in a report that the threat actor uses six invisible Unicode characters for the encoded payload:👾 • Zero-width non-joiner [U+200C] • Zero-width joiner [U+200D] • Function application [U+2061] • Invisible times [U+2062] • Invisible separator [U+2063] • Invisible plus [U+2064] The decoder ignores any visible character and maps the invisible ones to a corresponding number; then it converts them to binary representation and reconstructs bytes from the binary stream. ⁉️“This encoding allows binary data to be embedded within normal-looking text. The visible characters serve as camouflage while the invisible characters carry the actual payload,” GoDaddy says.⁉️

Alt...

[ImageSource: GoDaddy] 👾The final stage of the attack is implementing a backdoor that responds to specially crafted POST requests that include a specific authentication cookie. If the "tEcaKKXEsb cookie is present, the backdoor accepts base64-encoded PHP code via POST parameter," the researchers explain.👾 GoDaddy describes several evasion mechanisms employed by the malware, including obfuscated strings using octal and hex escapes, randomized function names, fake disabled logging code and the use of standard WordPress APIs, allowing it to blend with normal activity. ⁉️Site owners can defend by checking for references to Steam Community URLs, suspicious external JavaScript injections, outbound connections from WordPress servers to Steam, and unexpected scripts loading from domains such as hello-mywordl[.]info.⁉️ ⚠️Other indicators include invisible Unicode characters, suspicious _transient_caption_ cache entries, disabled SSL verification in cURL requests and POST requests containing the malware's authentication cookies or the new_code parameter.⚠️

You could always just drop Google and get on with it.

Computerworld: How to opt out of Google’s new AI training default https://www.computerworld.com/article/4183788/google-ai-training-opt-out.html #Google #privacy #LLM #Gemini

#OpenClaw #AI agent found falling for #phishing attacks, spills user data

https://www.bleepingcomputer.com/news/security/openclaw-ai-agent-found-falling-for-phishing-attacks-spills-user-data/

#cybersecurity #privacy

Stockton approved Flock drones. Here’s what the system is — and why it has drawn scrutiny elsewhere

For outside experts, the problem is not just one camera or one drone. It is the network.

the central question is not only what the drones can see, but what happens to the data collected by the system already in place.

#Stockton #California #flocksafety #surveillance #privacy #police #drone #drones #UAV

https://stocktonia.org/news/local-government/2026/06/08/stockton-flock-drones-what-to-know/

#tech #technology #BigTech #data #security #privacy #safety #InfoSec #IT #surveillance #computing #digital #online #internet #web #cloud #meme

Alt...

Meme, showing a continuous circle of data breach messages from corporations… Ahaha you're not gonna believe this but we had a bit of a data breach. Your data is probably for sale online now. That means someone could easily impersonate you. Going forward we're gonna need more of your data to make sure its you.

Youtube seems to be currently implementing the announced change to how shared links work. I know it's possible to clean up a url before sharing it, but since there's also an option... might as well disable it. And yes it's opt out.

#Youtube #Privacy

Alt...

Screenshot of Youtube's Privacy options (as seen on a smartphone). The one important here is the last one, "Channel visibility for shared links : Show your channel name, handle, and profile picture to people who open links you share outside Youtube", a simple toggle.

#ServiceNow discloses security incident exposing customer data

https://www.bleepingcomputer.com/news/security/servicenow-discloses-security-incident-exposing-customer-data/

#cybersecurity #privacy #DataBreach

DIE Antwort auf so einen Kettenbrief findet ihr in dem Artikel ⬇️

KI-Kettenbrief ist fake - aber es gibt trotzdem ein #WhatsApp-Problem | heise online https://www.heise.de/news/WhatsApp-Kettenbrief-ist-fake-und-trotzdem-besteht-Grund-zur-Sorge-11326096.html #Datenschutz #privacy #surveillance #Überwachung #MetaData #Metadaten #ArtificialIntelligence #AI #MetaAI #DSGVO #GDPR

Building a messenger that knows nothing about you. No phone number. No email. No metadata — not even when you talk or who you talk to.

Open source (GPL-3.0/AGPL-3.0), E2EE (X3DH + Double Ratchet, keys never leave your device), built by one person, in public.

This account documents the journey.

#privacy #infosec #opensource #e2ee #introduction

How and Why to Fight Back Against #SocialMedia Bans

https://www.eff.org/deeplinks/2026/06/how-and-why-fight-back-against-social-media-bans

#privacy #AgeVerification #SocialMediaBan