Logitech macOS Software Fails, Leaving Mice and Keyboards Malfunctioning
Logitech’s G HUB and Logi Options+ software stopped working, leaving users who relied on it for managing their mice and keyboards high and dry.
Fria Reyes
Fria is a privacy advocate and synthwave enthusiast who has been volunteering with Privacy Guides since 2023. They are an unapologetic tech optimist, and believes with the right technology we can solve any problem.
Telegram Adds Passkey Support, Still Requires Phone Number
Telegram has added support for passkeys, a secure and convenient sign-in method, replacing SMS verification codes.
Multiple Vulnerabilities Found in GnuPG
Gnu Privacy Guard, a popular implementation of the OpenPGP standard, was found to have multiple vulnerabilities including modifying the plaintext shown to the user and modifying files on the user’s system.
Connectivity Standard Alliance Launches Aliro Standard for Smart Locks
The Connectivity Standards Alliance has launched their new standard for secure, interoperable smart locks called Aliro.
AI Data Centers May Start Using Radio Instead of Copper
AI data centers are running up against the physical limits of copper for transmitting data, so radio is being considered as a replacement.
Cloudflare Explains Plan for Resilience After Multiple Outages
Following multiple outages, Cloudflare outlines their plan to improve resilience of their network, titled “Code Orange: Fail Small.”
The Linux Foundation Announces Formation of the Agentic AI Foundation
The Linux Foundation announced the newly formed Agentic AI Foundation to standardize and support an open, collaborative ecosystem for agentic AI.
Neobank Bunq Shares Customers’ Investments to Their Contacts Without Permission
Bunq, a Dutch neobank that’s been growing in popularity in recent years, has started sharing users’ investments with others on their contacts list, according to RTL.
The FIDO Alliance Announces Standardized Digital Wallets
The FIDO alliance, in charge of authentication standards such as the FIDO2 standard widely used in hardware keys, has announced a new digital credentials initiative aimed at standardizing and streamlining the adoption of “verifiable digital credentials and identity wallets.”
India Considers Enforcing A-GPS on Mobile Devices
India’s government is considering a proposal to force smartphone manufacturers to enable GPS tracking at all times.
Android Authority: “Aluminium” will be code name for merger of Android and ChromeOS
According to Android Authority, the operating system that’s meant to merge Android and ChromeOS into one, unified OS is called “Aluminium OS.”
IVPN announces V2Ray obfuscation on Android
IVPN recently announced that they now support V2Ray obfuscation on their Android client, meaning they now support it on all platforms where they offer a client.
GSMA Report Warns of “Fragmented Cybersecurity Regulation”
In a new study by the GSMA, they criticize the state of cybersecurity regulation “including fragmented policies and regulatory frameworks, limited institutional capacity to support mobile operators, rigid or prescriptive rules, and a lack of effective platforms for threat intelligence sharing.”
GrapheneOS Now Has Experimental Support for Pixel 10 Series
GrapheneOS announced that they now have experimental support for the Pixel 10, Pixel 10 Pro, Pixel 10 Pro XL and Pixel 10 Pro Fold.
Trail of Bits Adds Constant Time Support to LLVM, Bolstering Encryption Security
Today, Trail of Bits announced they’ve added constant-time coding support for LLVM, “providing developers with compiler-level guarantees that their cryptographic implementations remain secure against branching-related timing attacks.”
Signal Rolls Out Secure Backups for iOS in Beta
Signal has rolled out secure end-to-end encrypted backups for iOS users, after Android users already got the features months earlier.
Proton Launches Beta Access for Proton Pass CLI
Proton has launched the beta for their command line interface for Proton Pass, Proton’s password manager software.
“Trivially Exploitable” Vulnerabilities Left Cloud Environments Vulnerable for Over 8 Years
Researchers at Oligo have found several “trivially exploitable” vulnerabilities in the widely-used Fluent Bit logging software that left users vulnerable for over 8 years.
Forensic Software Company Gives Personalized Password Cracking Tips
Elcomsoft, seller of forensic tools for law enforcement to extract data from user devices like phones and computers, has released a blog post on using information collected about individuals to make password cracking more efficient.
Major Banks Reeling After Data Customer Data Leaked in Cyber Attack Against SitusAMC
According to TechCrunch, SitusAMC, a company that provides technology for major banks like JPMorgan, Citigroup, Morgan Stanley, and even state governments, has had a major breach of customer data including “accounting records and legal agreements.”
SHA1-HULUD Malware Infects Developers, Posts Secrets to Their Public GitHub Repos
According to researchers at Wiz, a supply chain attack on npm packages is exfiltrating developers’ credentials and posting them to public GitHub repositories.