Notices by Matt Burgess (mattburgess@infosec.exchange)

New from me:

ChatGPT, Gemini, DeepSeek, and Grok have all been founding citing Russian sources—including Russian media sanctioned by the EU—in response to queries about the war in Ukraine

https://www.wired.com/story/chatbots-are-pushing-sanctioned-russian-propaganda/

New from @agreenberg and me: For three years, security researchers pointed a satellite at the sky and collected all the traffic they could find— they were shocked to find highly sensitive data unencrypted.

They found: calls and text messages on T-Mobile’s cellular network; military and law enforcement info from the US and Mexico; in-flight Wi-Fi browsing; communications to and from critical infrastructure such as electric utilities and offshore oil and gas platform; and a whole host more

https://www.wired.com/story/satellites-are-leaking-the-worlds-secrets-calls-texts-military-and-corporate-data/

NEW: In a likely first, security researchers have shown how generative AI agents can be hijacked to cause physical consequences.

They tricked Google's Gemini AI into turning off smart home lights, opening windows, and turning on a boiler.

They hid instructions to the AI in a *calendar invitation*

https://www.wired.com/story/google-gemini-calendar-invite-hijack-smart-home/

New from me: Companies in the EU are starting to look for ways to ditch Amazon, Google, and Microsoft cloud services amid fears of rising security risks from the US. But cutting ties won’t be easy

https://www.wired.com/story/trump-us-cloud-services-europe/

#cloud #privacy #data

“Wired is going to stop paywalling articles that are primarily based on public records obtained through the Freedom of Information Act”

https://freedom.press/issues/wired-is-dropping-paywalls-for-foia-based-reporting-others-should-follow/

NEW: Details of people's therapy sessions—including reports, video and audio recordings—have been exposed by a healthcare company.

These included people mentioning sexual abuse and highly sensitive subjects. The exposed database has now been closed down

https://www.wired.com/story/confidant-health-therapy-records-database-exposure/ #cybersecurity #privacy #news #technology

NEW: WhatsApp will soon make it possible to chat with people who use other messaging apps. It's revealed some more details on how that will work.

— Apps will need to sign an agreement with Meta, then connect to its servers.
— Meta wants people to use the Signal Protocol, but also says other encryption protocols can be used if they can meet WhatsApp's standards
— WhatsApp has been testing with Matrix in recent months, although nothing is agreed yet. Swiss app Threema says it won't become interoperable

https://www.wired.com/story/whatsapp-interoperability-messaging/ #tech #whatsapp #dma #infosec #news #technology

NEW: Food prices in Europe have been soaring. Earlier this year, the Austrian government said it would build a price database to let people compare costs at different supermarkets. It said this would take months to make and only include a small number of product categories.

Within 2 hours, @badlogic had built a first prototype, pulling the data from supermarket's websites, and open sourced the project. Now Heisse Preise lists 177,000 products from 10 chains.

The transparency has allowed prices to be compared: and the results appear to show supermarkets are watching each other and adjusting their prices based on others. The competition authority is investigating and already said new laws should make supermarkets publish proper APIs with full item data

https://www.wired.com/story/heisse-preise-food-prices/

#opensource #data #tech #news

I know there is a lot going on at Twitter right now, but here's one more thing. Twitter is ignoring #GDPR requests from people to delete their DMs.

At the moment, when you press delete on a Twitter DM (an individual message or conversation) the DM isn't actually deleted from Twitter's servers, just your inbox view.

So people in Europe have been making requests for Twitter to blitz all their messages. It hasn't properly answered them. And now regulators are looking at it

Full story here: https://www.wired.com/story/delete-twitter-dms-gdpr/

#Twitter #gdpr #infosec #technology #news #wired