A Department of Energy (DOGE) employee Jordan Wick has been publicly sharing sensitive work-related code on GitHub, including a Twitter DM downloader and geospatial data analysis tools for undersea cables and critical minerals.
Waterfox is a privacy-focused web browser offering built-in tracking protection, container tabs, and private browsing features by default. The browser prioritizes user privacy by not collecting telemetry data while providing easy migration from other browsers and maintaining high performance standards.
A widespread scam operation on GitHub involves thousands of repositories distributing malware disguised as game mods and cracked software. The malware, known as Redox stealer, collects sensitive data including passwords, crypto wallets, and gaming accounts from victims' computers, then sends it to Discord servers for exploitation.
IBM has completed its $6.4 billion acquisition of HashiCorp, integrating advanced cloud infrastructure automation and security capabilities into its portfolio. The merger aims to help enterprises manage hybrid cloud environments more efficiently, with HashiCorp's Terraform and Vault products now available through IBM's automation software lineup. The acquisition strengthens IBM's position in multiple growth areas including Red Hat, watsonx, and IT automation.
Find My offline finding enables AirTags to be located through a network of Apple devices when separated from their paired device. The system uses public/private key encryption for secure location reporting, with nearby Apple devices acting as anonymous finders to relay encrypted location data through Apple Cloud.
Cloudflare's 1.1.1.1 DNS resolver processes 1.9 trillion queries daily across 250 locations worldwide, with new analytics features launched on Cloudflare Radar's DNS page. The service provides insights into DNS traffic patterns, protocol usage, and security metrics while maintaining user privacy through anonymized query logs.
Modern Tesla vehicles are equipped with extensive surveillance capabilities, including multiple cameras and sensors that collect significant amounts of data about the car's surroundings and occupants. While Tesla claims to protect user privacy through data anonymization and limited collection practices, investigations have revealed concerning privacy breaches and employee misuse of customer data. Privacy experts express skepticism about Tesla's data protection measures and policy transparency.
Memory safety vulnerabilities have been a persistent security challenge costing billions, prompting a call for industry-wide standardization and secure-by-design practices. Recent advancements in memory-safe languages like Rust and hardware technologies offer promising solutions for widespread adoption. Google advocates for establishing a common framework to assess memory safety assurances and drive industry-wide adoption of secure practices.
A class action lawsuit has been filed against Automattic over blocking WP Engine's access to WordPress.org services, affecting hundreds of thousands of customers. The lawsuit alleges deliberate sabotage and unfair competition, seeking damages and an injunction to prevent Automattic from interfering with competitors. The case highlights concerns about WordPress.org's governance and Automattic's control over critical WordPress infrastructure.
Privacy policy notification explaining data collection, processing, and user consent mechanisms for Sweden Herald's website. Details vendor partnerships, personalization features, and user rights regarding data processing across advertising and content delivery.