Krebs on Security

DECEMBER 29, 2024

A surveillance photo of Connor Riley Moucka, a.k.a. In these attacks, the phishers abused at least four different Google services to trick targets into believing they were speaking with a Google representative, and into giving thieves control over their account with a single click.

Scams

Schneier on Security

JULY 24, 2025

Your personal information is scattered across hundreds of locations: social media companies, IoT companies, government agencies, websites you have accounts on, and data brokers you’ve never heard of. Developers no longer need to build and maintain extensive data storage systems, surveillance infrastructure, or analytics pipelines.

Architecture

Malwarebytes

JANUARY 21, 2025

Aside from the contribution towards a surveillance society, the risks of such a tool are obvious. Protect your social media accounts by using Malwarebytes Identity Theft Protection. The companys founder says he has pushed back against requests from people asking to track particular women.

Identity Theft

SecureWorld News

FEBRUARY 17, 2025

Laws such as the EU's Digital Operational Resilience Act (DORA), the SEC's cyber disclosure requirements, and China's Data Security Law illustrate a trend toward stricter accountability for security and risk oversight at the executive and board levels. Where is cybersecurity governance going? Below are key trends shaping the future.

Government

Security Affairs

NOVEMBER 16, 2024

Court filing revealed that NSO Group used WhatsApp exploits after the instant messaging firm sued the surveillance company. NSO Group developed malware that relied on WhatsApp exploits to infect target individuals even after the Meta-owned instant messaging company sued the surveillance firm. from April 29, 2018, to May 10, 2020).

Spyware

Security Affairs

MARCH 21, 2025

Russian intelligence agencies could use these exploits for surveillance and espionage purposes. Strategic Cyber Warfare In geopolitical conflicts, access to Telegram accounts and devices could provide military and intelligence advantages, such as intercepting sensitive communications, and identifying informants.

Government

Zero Day

JUNE 17, 2025

PT kontekbrothers/Getty We've probably all received confirmation codes sent via text message when trying to sign into an account. Those codes are supposed to serve as two-factor authentication to confirm our identity and prevent scammers from accessing our accounts through a password alone.

Authentication

Security Affairs

JUNE 12, 2025

RTSP is popular in professional surveillance for low-latency streaming. “It’s no surprise that the Telecommunications sector accounts for the majority of exposed cameras we found. Researchers analyzed RTSP Server headers to infer vendors but found limited success. To capture screenshots, they tested common RTSP URIs (e.g.,

Hacking

Security Affairs

MARCH 3, 2025

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. reads the advisory.

Hacking

Security Affairs

MARCH 29, 2025

Camera Access: Starts front camera streaming for potential identity theft or surveillance. Crocodilus steals OTP codes from Google Authenticator via Accessibility Logging, enabling account takeovers. Data Theft: Captures Google Authenticator screen content to steal OTP codes.

Banking

Security Affairs

NOVEMBER 18, 2024

government surveillance. The Irish Data Protection Commission found that Instagram’s default settings made children’s accounts visible to the public, exposing personal information like phone numbers and email addresses. After the invalidation of the EU-U.S.

Data privacy

Security Affairs

MARCH 19, 2025

The Meta-owned company linked the hacking campaign to Paragon, an Israeli commercial surveillance vendor acquired by AE Industrial Partners for $900 million in December 2024. This is the latest example of why spyware companies must be held accountable for their unlawful actions.

Spyware

Security Affairs

JULY 4, 2025

As such, these apps are commonly referred to as “stalkerware” (or spouseware) for their propensity to facilitate non-consensual surveillance of spouses and romantic partners, which is illegal. An attacker can use the information in the database to take over any account. Once active, it enables real-time spying.

Spyware

Security Boulevard

MARCH 24, 2025

While MFA is primarily a security feature, its primary privacy benefit is adding another layer of security to prevent unauthorized access to information contained in particular important or sensitive accounts. Surveillance Tech in the News This section covers surveillance technology and methods in the news.

Surveillance

Security Affairs

MARCH 27, 2025

million accounts. At this time, the group also listed the company Oregon Surveillance Network on the leak site. The ransomware group steals victims’ data to pressure them into paying a “generous fee.” ” Arkana claims to have stolen two databases, respectively containing data of 403,000 and 2.2

Hacking

Zero Day

JUNE 22, 2025

Here's how to check if your accounts are at risk and what to do next. You should always use different and strong, complex passwords to secure your accounts (another area a password manager can help), and this is why: once one service is compromised, the same password and user combination could lead to an exposed account elsewhere. 

Passwords

Malwarebytes

APRIL 3, 2025

And from some of the statements its very clear that the disclosed locations belonged to other children because of the names and pictures associated with the accounts. According to our friends at 404 Media , several users reported receiving information that came from another tracker, not their own.

Mobile

Malwarebytes

JULY 21, 2025

Many posted screenshots of their accounts, showing multiple unauthorized device logins, making these claims hard to ignore. We have no reason to believe this is the result of unauthorized access to customer accounts.” Forbes looked into the issue and even the journalist found several logins on his own device.

Hacking

Security Boulevard

MARCH 31, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Proton Drive and Docs now support collaboration with users without Proton accounts Proton Proton users can now collaborate on documents with anyone -- including those without Proton accounts. of its photos app.

VPN

Security Boulevard

FEBRUARY 17, 2025

The more accounts you have, the bigger your attack surface and potential exposure to data breaches. Tips for finding old accounts. Surveillance Tech in the News This section covers surveillance technology and methods in the news. Malware campaigns covered generally target/affect the end user.

Surveillance

Security Boulevard

NOVEMBER 24, 2024

In Episode 356, Tom and Kevin discuss the increasing role of deepfake technology in bypassing biometric checks, accounting for 24 percent of fraud attempts. The show covers identity fraud issues and explores the controversial practices of data brokers selling location data, including tracking US military personnel.

Media

SecureWorld News

JULY 2, 2025

Critics may argue this misses major commercial threats from AI used in surveillance, retail profiling, or hiring tools.) In a LinkedIn post days before the governor signed the bill, Violet Sullivan, AVP, Cyber Solutions Team Leader, at Crum & Forster, broke down what the bill does. Only the AG can enforce.

Government

Penetration Testing

JUNE 17, 2025

Search Our Websites Penetration Testing Tools The Daily Information Technology Daily CyberSecurity About SecurityOnline.info Advertise with us Announcement Contact Contributor Register Login About SecurityOnline.info Advertise on SecurityOnline.info Contact When you purchase through links on our site, we may earn an affiliate commission.

Firmware

Security Affairs

JANUARY 19, 2025

CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems Russia-linked APT Star Blizzard targets WhatsApp accounts Prominent US law firm Wolf Haldenstein disclosed a data breach Clop Ransomware exploits Cleo File Transfer flaw: dozens (..)

Spyware

Security Affairs

DECEMBER 7, 2024

It can also read calendar entries, list installed applications, answer phone calls, retrieve account details, and record videos using the devices camera. These extended capabilities suggest that the malware aims for comprehensive surveillance of the target device. ” continues the report.

Spyware

Security Affairs

JUNE 27, 2025

APT42 focuses on highly targeted spear-phishing and social engineering techniques, its operations broadly fall into three categories, credential harvesting, surveillance operations, and malware deployment. “The threat actors directed victims who engaged with them to fake Gmail login pages or Google Meet invitations.

Phishing

Krebs on Security

NOVEMBER 5, 2024

At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). “The rest is just ransom.” CRACKDOWN ON HARM GROUPS?

Cybercrime

Jane Frankland

JANUARY 12, 2025

These challenges include bias and discrimination embedded in algorithms, privacy violations due to enhanced surveillance capabilities, and the difficulty of assigning accountability for decisions made by AI systems. Ethics The ethical challenges posed by advancing AI technologies will demand urgent attention in 2025.

Cybersecurity

SecureList

NOVEMBER 28, 2024

The second, an article published in 2024 by the Google Threat Analysis Group, described the business model of various companies that provide commercial surveillance solutions. The first, published in 2021 by Motherboard and Citizen Lab, shared the first evidence and indicators related to the software.

Malware

Security Affairs

FEBRUARY 9, 2025

Here’s how data awareness can help HTTP Client Tools Exploitation for Account Takeover Attacks Dangerous hacker responsible for more than 40 cyberattacks on strategic organizations arrested Whos Behind the Seized Forums Cracked & Nulled?

Spyware

eSecurity Planet

JUNE 25, 2025

It uses blockchain-level cryptography and decentralized peer-to-peer connections to power secure video calls and messaging: with no accounts, no servers, and no stored data. It requires no phone number, email, or account setup. Briar Briar is built for when traditional networks fail, or surveillance is everywhere.

Encryption

Security Boulevard

APRIL 22, 2025

Your time-management strategy should also account for the maintenance of your own body: plan your meals in advance, step away from the screen while eating, and stay well hydrated. On a final note, its important to acknowledge that OffSec exams involve a high degree of monitoring.

Penetration Testing

NetSpi Executives

JULY 7, 2025

Effective dark web monitoring requires specialized tools and continuous surveillance capabilities that can identify mentions of their company, employees, customers, or proprietary information across various dark web platforms.

Social Engineering

Security Affairs

FEBRUARY 22, 2025

The British governments undisclosed order, issued last month, requires blanket capability to view fully encrypted material, not merely assistance in cracking a specific account, and has no known precedent in major democracies. reads the article published by The Washington Post.

Encryption

eSecurity Planet

JUNE 25, 2025

It uses blockchain-level cryptography and decentralized peer-to-peer connections to power secure video calls and messaging: with no accounts, no servers, and no stored data. It requires no phone number, email, or account setup. Briar Briar is built for when traditional networks fail, or surveillance is everywhere.

Encryption

Zero Day

JUNE 20, 2025

Here's how to check if your accounts are at risk and what to do next. You should always use different and strong, complex passwords to secure your accounts (another area a password manager can help), and this is why: once one service is compromised, the same password and user combination could lead to an exposed account elsewhere. 

Passwords

Krebs on Security

NOVEMBER 26, 2024

At the end of 2023, malicious hackers discovered that many companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with nothing more than a username and password (no multi-factor authentication required). A surveillance photo of Connor Riley Moucka, a.k.a. “I’ll wait. .

DDOS