Security

Salesloft says Drift customer data thefts linked to March GitHub account hack

Salesloft said a breach of its GitHub account in March allowed hackers to steal authentication tokens that were later used in a mass-hack targeting several of its big tech customers.  Citing an investigation by Google’s incident response unit Mandiant, Salesloft said on its data breach page that the as-yet-unnamed hackers accessed Salesloft’s GitHub account and […]

Salesloft says Drift customer data thefts linked to March GitHub account hack Read More »

The growing debate over age verification laws

Technologists and policymakers are reckoning with a generation-defining problem on the internet: while it can be a revolutionary force for unprecedented education and connection across the globe, it can also pose dangers to children when they have completely unfettered access. There is no simple way, however, to monitor children’s internet access without surveilling adults, paving

The growing debate over age verification laws Read More »

The growing debate over expanding age verification laws

Technologists and policymakers are reckoning with a generation-defining problem on the internet: while it can be a revolutionary force for unprecedented education and connection across the globe, it can also pose dangers to children when they have completely unfettered access. There is no simple way, however, to monitor children’s internet access without surveilling adults, paving

The growing debate over expanding age verification laws Read More »

Venezuela’s president thinks American spies can’t hack Huawei phones

During a press conference on Monday, Venezuela’s president, Nicolás Maduro, showed off a Huawei smartphone that China’s President Xi Jinping gifted him, calling it “the best phone in the world,” and making a bold claim. “The Americans can’t hack it, neither their spy planes, nor their satellites,” Maduro said.  The phone looked like a Mate

Venezuela’s president thinks American spies can’t hack Huawei phones Read More »

ICE reactivates contract with spyware maker Paragon

U.S. Immigration and Customs Enforcement (ICE) signed a contract last year with Israeli spyware maker Paragon worth $2 million.  Shortly after, the Biden administration put the contract under review, issuing a “stop work order,” to determine whether the contract complied with an executive order on commercial spyware, which restricts U.S. government agencies from using spyware

ICE reactivates contract with spyware maker Paragon Read More »

WhatsApp fixes ‘zero-click’ bug used to hack Apple users with spyware

WhatsApp said on Friday that it fixed a security bug in its iOS and Mac apps that was being used to stealthily hack into the Apple devices of “specific targeted users.” The Meta-owned messaging app giant said in its security advisory that it fixed the vulnerability, known officially as CVE-2025-55177, which was used alongside a

WhatsApp fixes ‘zero-click’ bug used to hack Apple users with spyware Read More »

TransUnion says hackers stole 4.4 million customers’ personal information

Credit reporting giant TransUnion has disclosed a data breach affecting more than 4.4 million customers’ personal information. In a filing with Maine’s attorney general’s office on Thursday, TransUnion attributed the July 28 breach to unauthorized access of a third-party application storing customers’ personal data for its U.S. consumer support operations. TransUnion claimed “no credit information

TransUnion says hackers stole 4.4 million customers’ personal information Read More »

FBI says China’s Salt Typhoon hacked at least 200 US companies

A Chinese-backed hacking campaign that previously hacked into nine U.S. telecommunication and internet providers is now confirmed to have hacked at least 200 American companies, according to the FBI’s top cyber chief. FBI Assistant Director Brett Leatherman told The Washington Post that the hackers, dubbed Salt Typhoon, also broke into companies in 80 countries, revealing

FBI says China’s Salt Typhoon hacked at least 200 US companies Read More »

US sanctions fraud network used by North Korean ‘remote IT workers’ to seek jobs and steal money

The U.S. Treasury has sanctioned an international fraud network used by North Korea to infiltrate U.S. companies with hackers posing as legitimate job seekers, agency officials announced Wednesday. The sanctions are the latest action taken by the U.S. Treasury in recent months aimed at combating North Korean government workers from seeking employment at American companies

US sanctions fraud network used by North Korean ‘remote IT workers’ to seek jobs and steal money Read More »

A new security flaw in TheTruthSpy phone spyware is putting victims at risk

A stalkerware maker with a history of multiple data leaks and breaches now has a critical security vulnerability that allows anyone to take over any user account and steal their victim’s sensitive personal data, TechCrunch has confirmed. Independent security researcher Swarang Wade found the vulnerability, which allows anyone to reset the password of any user of

A new security flaw in TheTruthSpy phone spyware is putting victims at risk Read More »