NEW: The two Harvard students who doxed random people with Meta Ray-Ban glasses are launching "always-on" AI-powered smart glasses that listen, record, and transcribe, everything happening around them. The glasses don't have an indicator that shows people around them that they are being recorded. [@evacide]( ) is not a fan: "Normalizing the use of an always-on recording device, which in many circumstances would require the user to get the consent of everyone within recording distance, eats away at the expectation of privacy we have for our conversations in all kinds of spaces.”
NEW: Two hackers broke into the computer of a hacker allegedly working for the North Korean spy group known as "Kimsuky." The hackers then leaked a treasure trove of stolen data, exposing a North Korean spy operation against South Korean targets. “Kimsuky, you’re not a hacker. You are driven by financial greed, to enrich your leaders, and to fulfill their political agenda. You steal from others and favour your own. You value yourself above the others: You are morally perverted,” the two wrote in their Phrack magazine article. “You hack for all the wrong reasons.”
NEW: CloudFlare says it detected Perplexity scraping and crawling websites that explicitly block it from scraping them. Based on customers' complaints and its own experiments, the company says Perplexity is using "stealth" bots and changing its bots "user agent" to circumvent restrictions.
NEW: Security researchers and CISA warn that hackers are exploiting a flaw in the Signal clone TeleMessage, which could lead to them stealing "plaintext usernames, passwords, and other sensitive data." @npub1p0lc...ajg7, the researcher who analyzed it said they were "in disbelief at the simplicity of this exploit."
NEW: Over the weekend, Jack Dorsey launched an open-source chat app called Bitchat, which he promised to be “secure” and “private.” He then later added a warning that the app not been tested or reviewed for security issues, asking people not to trust it as "it does not necessarily meet its stated security goals." Security researchers are already finding flaws in it.
NEW: A U.S. government report says a Mexican drug cartel hacker spied on an FBI official to identify, track, and kill informants. The hacker also hacked into Mexico City's camera network to follow the FBI official as they met with “people of interest” for the cartel, according to the report.
NEW: The internet has collapsed in Iran on Wednesday, with one web monitoring firm saying the country is “now in the midst of a near-total national internet blackout.” “We can only see that the traffic dropped — the data doesn’t tell us why it dropped,” said David Belson, the head of data insight at internet infrastructure company Cloudflare.
NEW: Four months after releasing iOS 18.3.1, Apple has published details about a zero-day that it fixed at the time, but did not publicize. This is the iPhone zero-day used against the two European journalists targeted with Paragon spyware, according to Citizen Lab. It's unclear why Apple did not publish information about this zero-day until today.
NEW: Researchers found forensic evidence of Paragon's spyware on the iPhones of two journalists. One is Ciro Pellegrino, who works for Fanpage. The other is an unnamed prominent European journalist. They are the first confirmed cases of infection with Paragon's spyware "Graphite." This revelation show that the spyware scandal that, for now, seemed mostly focused on Italy may expand further in Europe.