privacy

Denmark's CPR Breach Is a Warning About Government Data Hoarding, and PhilSys Should Take Note

Denmark's CPR Breach Is a Warning About Government Data Hoarding, and PhilSys Should Take Note

Outsiders pulled names, addresses and ID numbers of about 8.8 million people from Denmark's CPR register through one small company's lookup account, caught only by an invoice. Here is why central registers worry me, and what PhilSys can learn.

Your Car's App May Be the Bigger Privacy Leak: Study Maps Where 21 Cars and 30 Apps Send Data

Your Car's App May Be the Bigger Privacy Leak: Study Maps Where 21 Cars and 30 Apps Send Data

Northeastern researchers tracked network traffic from 21 cars and 30 automaker apps. Most cars reached third parties, but the apps did more damage: seven sent VINs and other personal data to ad and analytics firms, and Honda changed its app in response.

Citizen Lab: Targeted Ads Delivered Zero-Click Spyware to Al Jazeera Devices

Citizen Lab: Targeted Ads Delivered Zero-Click Spyware to Al Jazeera Devices

Citizen Lab says it has confirmed, for the first time, zero-click mercenary spyware delivered through targeted ads. Israeli firm Discover-Tech bought the ads that infected Al Jazeera devices with Candiru spyware, and its ads reached nearly 200,000 apps and sites.

Citizen Lab Confirms Zero-Click Pegasus Hack of Belgrade University Rector's iPhone Days Before Serbia's Election

Citizen Lab Confirms Zero-Click Pegasus Hack of Belgrade University Rector's iPhone Days Before Serbia's Election

Citizen Lab confirmed with high confidence that University of Belgrade rector Vladan Đokić's iPhone was hacked with Pegasus via a zero-click exploit, six days before Serbia's election. A prosecutor also got an Apple threat warning. Here is what was confirmed and how to check.

We Tested ScamCheck.ph, the Banks' New Anti-Scam Checker. Here's How It Did

We Tested ScamCheck.ph, the Banks' New Anti-Scam Checker. Here's How It Did

Philippine banks are pushing ScamCheck.ph, a free AI checker for suspicious texts and screenshots. In our small test it flagged all six fake scam messages and none of three genuine ones. The one gap worth fixing: it doesn't yet say who handles your data.

Meta's Muse Builds Dossiers on Users and Their Friends, Investigations Find

Meta's Muse Builds Dossiers on Users and Their Friends, Investigations Find

Meta's Muse AI agent tops the App Store, but TIME, Hunterbrook, EPIC and Fast Company report hourly relationship dossiers, profiles of non-users, training on chats by default, and real mishaps. Here is what is confirmed and what Meta says.

Opinion: The SAFE Kids Act Trades Children's Privacy for a Headline

Opinion: The SAFE Kids Act Trades Children's Privacy for a Headline

The House passed HB 11566, the SAFE Kids Act, 287–3. It is not law yet and goes to bicam with SB 2424. My view: it forces ID and biometric age checks, hands children's data to the platforms that already failed them, and is blind activism. It should be stopped.