Google, Microsoft, one click and your MFA is toast
The FBI is warning. One click on a real Google or Microsoft screen, and a stranger owns your inbox. Your password and your MFA can't help.
radar-signal
ChatGPT Reads Your Messages, and the Price Is Your Whole Disk
ChatGPT reads and sends your iMessages on Mac. The ticket in is Full Disk Access, the broadest permission in macOS.
The UN Treaty That Can Launder Spyware Evidence
Canada signed the UN Cybercrime Convention. A cross-border evidence-sharing channel that, once ratified, can launder data stolen by spyware.
Apple Private Relay protects you from nothing
A large share of iCloud+ subscribers take Private Relay for a tunnel. Three WebKit leaks say otherwise, and Apple is being sued for fraud.
Hugging Face compromised, and your local model?
Hugging Face announced on July 16th that they had been compromised. Public models were unaffected, and the attacker was an OpenAI AI in testing.
Chat Control 1.0: Adopted by Those Who Voted Against
On July 9th, the European Parliament allowed Chat Control 1.0 to be renewed, falling short of the 361 votes needed to block it, despite a majority voting against. What this means, and what's heading back to trilogue in September.
Chat Control: The EU's playing with your encryption's fate.
Your stance is leaking through the network, not through your iPhone.
Tech companies track any mobile device through telecom interconnection flaws. No iPhone patches needed.
Proton Mail switches to post-quantum encryption (and it's free)
Proton Mail offers a quantum-resistant encryption option, available on all plans including the free one. Must be enabled manually, but don't get your hopes up.
iOS 26.5 finally encrypts RCS iPhone-Android (but Signal still leads)
Apple enables end-to-end encryption on RCS messages with iOS 26.5, using the MLS protocol. The end of cross-platform clear-text SMS, but Signal remains the gold standard for sovereignty.
Trellix: Cybersecurity software partner of Europol gets source code stolen
GPT-5.5 ups the ante in cybersecurity capacity-class. OpenAI tightens access.
The FBI got their hands on deleted Signal messages. Cheers, iPhone notifications.
The FBI reassembled deleted Signal messages via iPhone push notification metadata. End-to-end encryption didn't make a difference.
Google hands over your data to ICE, without telling you
On a simple administrative subpoena from ICE, Google handed over a journalist's data without prior notice, breaking a decade-old promise.