Two More Major Linux Vulnerabilities Discovered in the Same Class as Copy Fail
Two new Linux local privilege escalation vulnerabilities were discovered in the same vulnerability class as Copy Fail, affecting most Linux distributions.
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Chrome for Android Now Supports Approximate Location
Google announced that “you can now choose to share your approximate location with websites, instead of sharing precise location” on Chrome for Android.
Proton Mail Launches Post Quantum Encryption
Proton Mail now offers post-quantum encryption to protect against future threats from quantum computers.
FTC to Ban Data Broker From Selling Location Data
Under the proposed settlement, Kochava would be required to implement a slew of oversights and allow consumers to have more control over their data.
Disneyland California Rolls Out Facial Recognition
The company surprisingly emphasizes reduced fraud instead of visitor safety.
Apple Confirms RCS E2EE Will Ship with iOS 26.5
9to5mac spotted in the release notes of iOS 26.5 RC confirmation that the long-awaited RCS end-to-end encryption feature will ship with iOS 26.5.
Fedora Sealed Bootable Container Images, Possibly Opening the Door to a “Fully Verified Boot Chain”
Fedora 44 has released, and with it comes a new offering: sealed bootable container images, which “include all the components needed to create a fully verified boot chain.”
OpenAI Introduces Advanced Account Security
OpenAI has introduced new security protections for ChatGPT accounts called Advanced Account Security, to protect users against account takeover.
Every Linux Distribution Shipped Since 2017 Vulnerable to New Copy.Fail Exploit
A new exploit called copy.fail has emerged that can root just about any Linux distribution shipped since 2017 using just an unprivileged user account.
Data Breach Roundup (Apr 24 - 30 2026)
A security company, two medtech companies, a video streaming service, and an older attack we missed last week compromise this week's data breach headlines.
Firefox Quietly Adds Brave’s Rust-Based Adblocker
Firefox has bundled adblock-rust, Brave’s memory-safe content blocker, into Firefox in version 149, although disabled by default.
Data Breach Roundup (Apr 17 - 23, 2026)
A popular app-infrastructure provider, an important French government agency, a watchmaker, and a cosmetics giant make up this week's confirmed data breaches.
Fingerprint.com Discovers Vulnerability That Can Link Your Tor Browsing Together
The fingerprinting company fingerprint.com discovered a vulnerability affecting “all Firefox-based browsers” that would allow a “stable process-lifetime identifier” during a browsing session, including after pressing the “New Identity“ button in Tor browser.
Apple Releases Patch for the Signal Notification Issue That Allowed Recovery of Deleted Messages
Apple has released iOS 26.4.2, which fixes the notification bug that allowed the FBI to extract Signal messages from a defendant’s iPhone.
Mozilla Used Mythos to Fix 271 Firefox Bugs
Regardless of your feelings on AI (and Mozilla), it seems Mozilla has at least found one good use for it.
Madison Square Garden Facial Recognition Surveillance Used to Ban and Track People Around
According to WIRED, Madison Square Garden’s incredibly invasive facial recognition system has been used to ban critics of the stadium and even track a trans woman around who did nothing wrong.
Maryland Set To Ban Surveillance Pricing
The bill would be the first of it's kind but is not without controversy.
Brave Launches Paid, Bloat-Free "Brave Origin"
Is this a sustainable, fair business model or paywalling what should be the free version?
HackerOne Pauses Internet Bug Bounty
Hacker One says that the rise of AI bug reports is overwhelming projects, meaning the bug bounty system needs to be rethought.
Data Breach Roundup (Apr 10-16, 2026)
This week saw yet another breach from Booking.com, education giant McGraw-Hill, freelancing job board Fiverr, and many more.
India Drops Proposal to Require Biometric ID App After Strong Opposition
Reuters reports that the Indian government has decided it won’t go through with a proposal to require operating systems to preinstall the biometric ID app Aadhaar.