Notices tagged with security

#Ads and #tracking infiltrated #TVs. Now they're coming for #monitors.

Ads and tracking have turned TVs into #privacy nightmares. Both are so widespread among smart TVs that I’ve written a guide for avoiding them. One recommendation in that guide is to use a computer monitor. But in recent years, monitors have become more capable of pushing ads and tracking users.

Without more straightforward approaches from vendors, such as easily comprehensible privacy policies and avoiding inappropriate ads, monitors are dangerously encroaching into smart-TV-like territory.

#LG monitors’ #McAfee ads

LG lost some trust after a recent report that some of its monitors installed McAfee pop-up ads onto connected computers. Since at least 2024, some of these displays installed an app, LG Monitor App Installer, onto connected computers under the cover of driver updates installed through #WindowsUpdate.
#security #windows #smarttv

https://arstechnica.com/gadgets/2026/08/ads-and-tracking-infiltrated-tvs-now-theyre-coming-for-monitors/

US says Chinese hackers broke into Justice Department, NASA, Federal Reserve, Senate and more

https://www.reuters.com/world/china/china-sponsored-hacking-platforms-seized-by-us-justice-department-says-2026-08-26/

#tech #technology #news #technews #security #privacy #china #usa #hack

Linux fan develops tools to get rid of win11 ads: https://betanews.com/2024/05/06/linux-fan-develops-a-fricking-amazing-tool-to-remove-all-ads-from-windows-11/ #privacy #security

Vor einiger Zeit wurde ich im #anthropic
#cvp angenommen und konnte seit dem ausgiebig damit experimentieren.

Abseits der Marketing-Blogs aller möglichen Unternehmen: Wollt ihr einen Artikel dazu? Was das wirklich freischaltet, was Dual-Use ist und wie mein Setup dafür aussieht? Oder auch eure Fragen direkt als Antwort hier unter dem Toot

#cybersecurity #defense #ai #security #secops

Make sure your Flatpak is up to date due to security issues https://www.gamingonlinux.com/2026/08/make-sure-your-flatpak-is-up-to-date-due-to-security-issues/

#Flatpak #Linux #Security #OpenSource

secureblue is a security-focused Linux OS built on Fedora Atomic, using an immutable (read-only) system to reduce attack surface and prevent tampering.

It ships as bootable container images and includes strong hardening out of the box -- a solid choice for users who want more control and better security.

👉 https://github.com/secureblue/secureblue
More privacy-friendly tools: https://digital-escape-tools-phi.vercel.app/

#Privacy #OpenSource #Linux #Security #FOSS #DigitalFreedom

Ransomware attackiert ungepatchte Sharepoint-Instanzen

Eine schwere Sicherheitslücke in Microsoft SharePoint wird nun von Ransomware ausgenutzt. Ein Patch steht bereit, ungeschützte Systeme auch.

https://www.heise.de/news/Ransomware-attackiert-ungepatchte-Sharepoint-Instanzen-11410721.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IT #Microsoft #Ransomware #Security #SharePoint #Sicherheitslücken #Updates #news

I like #ublockorigin and #security that’s why I use #firefox and not chromium based browsers

Chromium is Google open source way of trying to control the web under the cloud of security they make changes to chromium to benefit Google

curl: Nobody wants to work with Windows

https://www.heise.de/en/news/curl-Nobody-wants-to-work-with-Windows-11409147.html

#windows #Microsoft #curl #programming #Linux #security

Google-Threat-Intelligence-Chefin: Dank KI „mehr Zero-Days als je zuvor“

Bug-Bounty-Programme werden mit Fehlerberichten geflutet, User und Firmen leiden unter KI-Angriffen: Der Security-Bereich ändert sich rasant, sagt Sandra Joyce.

https://www.heise.de/hintergrund/Google-Threat-Intelligence-Chefin-Dank-KI-mehr-Zero-Days-als-je-zuvor-11400371.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Google #GoogleGemini #HardwareHacking #IT #KünstlicheIntelligenz #Security #Exploit #news

Arch Linux AUR hit with another wave of malware https://www.gamingonlinux.com/2026/08/arch-linux-aur-hit-with-another-wave-of-malware/

#Linux #ArchLinux #Security

iX-Workshop: Nach dem Einbruch – Digital Forensics & Incident Response (DFIR)

Lernen Sie, professionelle Incident-Response-Workflows zu implementieren, um im Falle eines Cyberangriffs schnell und effektiv reagieren zu können.

https://www.heise.de/news/iX-Workshop-Nach-dem-Einbruch-Digital-Forensics-Incident-Response-DFIR-11367838.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Cyberangriff #ITForensik #IT #Security #iXWorkshops #Phishing #Ransomware #Trojaner #news

heise+ | Security: Wie Sie KI-Codereviews sinnvoll nutzen

KI ist im Codeaudit angekommen – und macht die Überprüfung der von der KI gefundenen Schwachstellen zur knappsten Ressource im gesamten Sicherheitsprozess.

https://www.heise.de/hintergrund/Security-Wie-Sie-KI-Codereviews-sinnvoll-nutzen-11363719.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IT #Security #KünstlicheIntelligenz #Mozilla #news

Programmierfehler führt zu falschen Abiturschnitten in Baden-Württemberg

Wegen eines Softwarefehlers bei der Zeugnisverwaltung müssen rund 100 Abiturienten in Baden-Württemberg ihre Noten korrigieren lassen.

https://www.heise.de/news/Programmierfehler-fuehrt-zu-falschen-Abiturschnitten-in-Baden-Wuerttemberg-11379968.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Bildung #Digitalisierung #Security #Journal #Software #Studium #news

Google now support account recovery with AI and your face. What could possibly go wrong? Google having my face is not just bad enough but chances are high that selfie video may not work in edge cases or network down etc.

https://blog.google/innovation-and-ai/technology/safety-security/selfie-video-sign-in/

#privacy #security #DoNotwant

🙏 New Blog Post

The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check.

What's exposed:

• Email addresses
• Names
• Country
• Date of birth (they call it "borned_date" lol)
• Account role (it's "PRAYER" for everyone, obviously)

Also found:

• Signup endpoint returns the email verification token in the response body, so you can verify accounts without accessing the inbox
• Their verification emails fail their own domain's authentication requirements

Reported January 3rd. Emailed 9 people. A journalist also contacted them. Zero responses. Still live six months later. Vow of silence I guess.

Full writeup: https://bobdahacker.com/blog/click-to-pray

#InfoSec #BugBounty #ResponsibleDisclosure #IDOR #Security #CyberSecurity #Privacy #DataExposure #ClickToPray #Vatican #APISecurity

Öffnung von WhatsApp: Threema lehnt Anbindung nicht nur wegen Datenschutz ab

Unter EU-Vorgaben musste WhatsApp für Chats mit anderen Messengern geöffnet werden. Nicht nur aus Datenschutzgründen lehnt Threema das weiterhin ab.

https://www.heise.de/news/Oeffnung-von-WhatsApp-Threema-lehnt-Anbindung-nicht-nur-wegen-Datenschutz-ab-11377183.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Datenschutz #DigitalMarketsAct #Mobiles #Netzpolitik #Security #Threema #WhatsApp #news

New, exclusive, by me: LG to Ban Residential Proxy Providers from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV.

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

#smarttv #lg #residentialproxies #spur #security

Building out access gateway kind of day #security #netsec #infosec

#UK #security #privacy #LocalGov

'An urban explorer says he discovered his own confidential records among “room after room” of unsecured personal information in a disused council building.'

https://www.theargus.co.uk/news/26289821.hundreds-sensitive-files-found-closed-wscc-building/