State-sponsored spyware campaign targeting Signal and WhatsApp, CISA warns
The Cybersecurity and Infrastructure Agency (CISA) issued an alert on Monday warning of a state-sponsored spyware campaign targeting Signal and WhatsApp
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Malaysia Considers Social Media Ban for Minors
Malaysia might join the ranks of countries banning social media for minors. The country's communication minister has reportedly said to be considering systems that could restrict children under 16 from sites like Facebook and X.
Signal Rolls Out Secure Backups for iOS in Beta
Signal has rolled out secure end-to-end encrypted backups for iOS users, after Android users already got the features months earlier.
Proton Launches Beta Access for Proton Pass CLI
Proton has launched the beta for their command line interface for Proton Pass, Proton’s password manager software.
Harvard University Discloses Second Data Breach
Harvard University disclosed a data breach over the weekend impacting its Alumni Affairs and Development systems.
Iberia Airlines discloses customer data breach
Iberia, Spain's largest airline and part of the International Airlines Group (IAG), has begun notifying customers of a data breach resulting from a third-party vendor.
KeePassXC Awarded ANSSI Security Visa
KeePassXC 2.7.11 has been released with a host of new bug fixes and improvements, plus a First-level Security Certification from ANSSI.
“Trivially Exploitable” Vulnerabilities Left Cloud Environments Vulnerable for Over 8 Years
Researchers at Oligo have found several “trivially exploitable” vulnerabilities in the widely-used Fluent Bit logging software that left users vulnerable for over 8 years.
Forensic Software Company Gives Personalized Password Cracking Tips
Elcomsoft, seller of forensic tools for law enforcement to extract data from user devices like phones and computers, has released a blog post on using information collected about individuals to make password cracking more efficient.
Tor Project Announces Relay Encryption Scheme Improvements
Today, Tor Project announced that Tor's relay encryption algorithms would be replaced by a new encryption design called "Counter Galois Onion."
Major Banks Reeling After Data Customer Data Leaked in Cyber Attack Against SitusAMC
According to TechCrunch, SitusAMC, a company that provides technology for major banks like JPMorgan, Citigroup, Morgan Stanley, and even state governments, has had a major breach of customer data including “accounting records and legal agreements.”
MAGIC Grants Releases Monero Light-Wallet App for Android
MAGIC Grants announced today the release of their new, open-source Skylight Wallet app for Android, which will also be "available soon" for iOS and Desktop.
CSA Announces Matter 1.5, Adding Secure Camera Support and New Devices
Matter 1.5 has released, bringing with it lots of new supported device types. Among the new additions are support for cameras, soil sensors, and what they call “closures.”
GrapheneOS Releases QPR1 Update
GrapheneOS users have received the long-awaited Android 16 QPR1 update to GrapheneOS.
The Electronic Frontier Alliance is No More, Says EFF [Updated]
![The Electronic Frontier Alliance is No More, Says EFF [Updated]](/content/images/size/w720/2025/11/efa-starburst-banner-1.png)
The Electronic Frontier Alliance has officially ended. In a brief statement on efa.eff.org, the Electronic Frontier Foundation stated that the EFA "concluded on November 20, 2025."
iOS Developers Claim 1Password isn’t Removing Deleted Profile Pictures
The iOS developer and security researcher duo mysk claim that after deleting their 1Password account, their profile picture was still being stored and remained publicly accessible via a URL.
Cybersecurity Company Loses Encryption Key for Internal Election
The Internal Association of Cryptologic Research (IACR) was forced to cancel their annual leadership election after one of the officials permanently lost their encryption key, rendering the results permanently encrypted.
California Court Ends Smart Meter Dragnet Surveillance Program
According to the EFF, the Sacramento County Superior Court has determined that a surveillance program run by the Sacramento Municipal Utility District (SMUD) and the police is illegal.
Pornhub Urges Big Tech Companies to Adopt Device-Based Age Verification
According to Wired, Pornhub's parent company has sent letters to Apple, Google, and Microsoft urging them to device-based age verification.
Thunderbird Pro Enters Closed Testing Phase
A new announcement from Thunderbird Pro sees the services entering an “initial closed test run” with a “core group of community contributors.”
Twitch Added to Age Restricted Social Media in Australia
Australia’s eSafety Commissioner has added Twitch to its growing list of age-restricted social media sites.