2026-07-26T07:28:54+02:00 https://nostr.ae Lorenzo Franceschi-Bicchierai https://nostr.ae/npub1xvwy4g0lns9cn5s8rjnc6xm2adfjumtl3rgek5wndcpmtshsk9lsq0ksg7 https://media.infosec.exchange/infosec.exchange/accounts/avatars/000/003/334/original/4f8008f96b7af1a8.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/000/003/334/original/4f8008f96b7af1a8.jpg https://nostr.ae/nevent1qqs9gxq5cg2sm8exywtf9arsd7lmfudzryqyps89fle3wkxk4sxvt3gzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7yx7rd5 If you&#39;re bored, this website shows you random exposed webcams all over the world. <a href="https://stumbletv.alec.is/c/38c16f28687f1a55">https://stumbletv.alec.is/c/38c16f28687f1a55</a> 2026-06-11T18:32:42+02:00 https://nostr.ae/nevent1qqs9vtc6vpds9fgvwpaeh7svd84qajh5nprx6cd3j0t608tqa6ruzxqzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7mxgug6 In reply to <a href='/nevent1qqsw335vz7x6eadj84wr4wz7x0lpl7tak8qcc0uru6rx98ppjrrwfagqwzwal'>nevent1q…zwal</a><br/>_________________________<br/><br/>Congrats! Looks like cool merch. 2026-04-10T18:08:52+02:00 https://nostr.ae/nevent1qqs2kat9a2q2e3eauug2fkc5kd4ggedg90g2z8ds3gkgve8nx6t5lsszyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7prhuul NEW: We spoke to a few iPhone security experts about what the discovery of DarkSword means to the long-held assumption that iPhones are very hard to hack.<br/><br/>The answer is nuanced, and not simple. Apple has made significant strides in making iPhones more secure, but DarkSword may change how we think.<br/><br/><a href="http://techcrunch.com/2026/03/26/apple-made-strides-with-ios-26-security-but-leaked-hacking-tools-still-leave-millions-exposed-to-spyware-attacks/">http://techcrunch.com/2026/03/26/apple-made-strides-with-ios-26-security-but-leaked-hacking-tools-still-leave-millions-exposed-to-spyware-attacks/</a> 2026-03-26T18:24:48+01:00 https://nostr.ae/nevent1qqsy27yla0u44qpa3lpzhk36575sjz4qmwpr57m3vswc0emsrgv6v2gzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7melvs5 NEW: A flaw in the website of Hama Film, a photo booth maker with presence in Australia, UAE and the U.S., exposes pictures and videos of its customers. <br/><br/>Security researcher alerted the company last month, no answer. We reached out to the company a few times, no answer. <br/><br/><a href="https://techcrunch.com/2025/12/12/flaw-in-photo-booth-makers-website-exposes-customers-pictures/">https://techcrunch.com/2025/12/12/flaw-in-photo-booth-makers-website-exposes-customers-pictures/</a> 2025-12-12T16:39:19+01:00 https://nostr.ae/nevent1qqsrjxrw4cdtf3mj8pes9pgu0xwxgytyy7pc39j4dc89qudre9sl0tczyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7kgp3ep NEW: Staffers at notorious spyware maker Intellexa had live remote access to their customers&#39; surveillance systems.<br/><br/>This allowed them to see the personal data of targets hacked with Intellexa&#39;s spyware Predator, according to new research based on a leaked training video.<br/><br/>Needless to say, this is bad for several reasons. <br/><br/><a href="http://techcrunch.com/2025/12/04/sanctioned-spyware-maker-intellexa-had-direct-access-to-government-espionage-victims-researchers-say/">http://techcrunch.com/2025/12/04/sanctioned-spyware-maker-intellexa-had-direct-access-to-government-espionage-victims-researchers-say/</a><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/662/668/250/729/964/original/4707dafe13bac2a6.jpeg"> <br/> 2025-12-04T19:17:59+01:00 https://nostr.ae/nevent1qqsfc7ltg3pjnrja8s46e445l5qxlnj63e2hy0k5982rfhnfp4qg2zqzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch76drtwq NEW: Researchers found forensic evidence of Paragon&#39;s spyware on the iPhones of two journalists.<br/><br/>One is Ciro Pellegrino, who works for Fanpage. The other is an unnamed prominent European journalist. They are the first confirmed cases of infection with Paragon&#39;s spyware &#34;Graphite.&#34;<br/><br/>This revelation show that the spyware scandal that, for now, seemed mostly focused on Italy may expand further in Europe.<br/><br/><a href="http://techcrunch.com/2025/06/12/researchers-confirm-two-journalists-were-hacked-with-paragon-spyware/">http://techcrunch.com/2025/06/12/researchers-confirm-two-journalists-were-hacked-with-paragon-spyware/</a> 2025-06-12T14:59:21+02:00 https://nostr.ae/nevent1qqs0f53slcz8zwjrkwn6q83n7tpmq6k0gmpt72ztxynfefgr3axrfjszyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7388fat NEW: CrowdStrike announced that it will lay off around 500 workers as part of &#34;a strategic plan&#34; to &#34;to evolve its operations to yield greater efficiencies.&#34;<br/><br/>The cuts represent 5% of its global workforce.<br/><br/><a href="https://techcrunch.com/2025/05/07/crowdstrike-says-it-will-lay-off-500-workers/">https://techcrunch.com/2025/05/07/crowdstrike-says-it-will-lay-off-500-workers/</a> 2025-05-07T16:27:11+02:00 https://nostr.ae/nevent1qqsfkj7hzd44x5hwhm9vw2g7eha0kek8k5u5wqv4frgyenz8m02ec3qzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch75mzhw0 NEW: Last year, there were 34 recorded zero-days being exploited in real-world attacks, which were attributed to specific groups. <br/><br/>Of those, 23 were attributed to government-backed hackers, including spyware makers, which shows that governments are the main users of zero-days.<br/><br/>And while those got caught, Google&#39;s [@_clem1](<a href="https://bird.makeup/users/_clem1">https://bird.makeup/users/_clem1</a> ) told us that spyware makers “are investing more resources in operational security to prevent their capabilities being exposed and to not end up in the news.” <br/><br/>Full story:<br/><br/><a href="https://techcrunch.com/2025/04/29/government-hackers-are-leading-the-use-of-attributed-zero-days-google-says/">https://techcrunch.com/2025/04/29/government-hackers-are-leading-the-use-of-attributed-zero-days-google-says/</a> 2025-04-29T15:28:21+02:00 https://nostr.ae/nevent1qqsgpve2t7ezszagz20hnwx5tyk6eq5t8gy3xn503arn43a7885hyvszyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7p0fw9f NEW: Citizen Lab found that hackers targeted Uyghurs in exile with Windows spyware disguised as a Uyghur language text editor.<br/><br/>People were alerted by Google of potentially having been targeted by &#34;government-backed attacks.&#34;<br/><br/><a href="https://techcrunch.com/2025/04/28/citizen-lab-say-exiled-uyghur-leaders-targeted-with-windows-spyware/">https://techcrunch.com/2025/04/28/citizen-lab-say-exiled-uyghur-leaders-targeted-with-windows-spyware/</a> 2025-04-28T18:11:24+02:00 https://nostr.ae/nevent1qqsgzde252wymxmk0dluvhsamrr5cz9mlepl3u7fzyrewp9dd9ahjaczyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7sc08hp NEW: In a hearing last week, an NSO Group lawyer said that Mexico, Saudi Arabia, and Uzbekistan were among the governments responsible for a 2019 hacking campaign against WhatsApp users.<br/><br/>This is the first time representatives of the spyware maker admit who its customers are, after years of refusing to do that. <br/><br/><a href="http://techcrunch.com/2025/04/16/nso-lawyer-names-mexico-saudi-arabia-and-uzbekistan-as-spyware-customers-behind-2019-whatsapp-hacks/">http://techcrunch.com/2025/04/16/nso-lawyer-names-mexico-saudi-arabia-and-uzbekistan-as-spyware-customers-behind-2019-whatsapp-hacks/</a> 2025-04-16T17:44:27+02:00 https://nostr.ae/nevent1qqst98mannq9p9j6jkwya9tcdg8j3s9vemmvyt08qndrvv339v9e2kqzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7g92lmg NEW: The notorious image board 4chan has been hacked. <br/><br/>Site has been intermittently down for hours, and hackers have published screenshots of site&#39;s backend, alleged source code, and list of moderators and &#34;janitors.&#34; <br/><br/>One janitor told us they are &#34;confident&#34; data is &#34;all real.&#34;<br/><br/><a href="https://techcrunch.com/2025/04/15/notorious-image-board-4chan-hacked-and-internal-data-leaked/">https://techcrunch.com/2025/04/15/notorious-image-board-4chan-hacked-and-internal-data-leaked/</a> 2025-04-15T18:58:22+02:00 https://nostr.ae/nevent1qqsgnzqu76jwyw77rc9cn8v8nfj3nuu9s3p3n2xxr89uzm7hsls3d2szyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7eqy2jp The official website of zero-day broker Zerodium has been updated in December of last year. There are no price lists nor any information anymore, just an email and a PGP public key. <br/><br/>🤔 <br/><br/>If you know what&#39;s happening there...let me know. <br/><br/><a href="https://zerodium.com">https://zerodium.com</a><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/196/787/821/687/783/original/998ca51a715ec5e5.png"> <br/> 2025-03-20T22:05:01+01:00 https://nostr.ae/nevent1qqsyaj37vrs3w7v7u93c4yr84z98mgfep8vjlqyvphpt4rctj4u832gzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7ee280u NEW: Citizen Lab researchers mapped out the infrastructure of spyware maker Paragon Solutions, and say they were able to identify servers likely used by customers in several countries: Australia, Canada, Cyprus, Denmark, Israel, and Singapore.<br/><br/>Paragon’s executive chairman John Fleming said Citizen Lab shared in advance &#34;very limited amount of information, some of which appears to be inaccurate.&#34; <br/><br/>He declined to say what was inaccurate exactly.<br/><br/><a href="https://techcrunch.com/2025/03/19/researchers-name-several-countries-as-potential-paragon-spyware-customers/">https://techcrunch.com/2025/03/19/researchers-name-several-countries-as-potential-paragon-spyware-customers/</a> 2025-03-19T13:59:29+01:00 https://nostr.ae/nevent1qqsfd39rle728hqu4zgc2cde528shtp4xy33hdsdqf4r7qm4zz6g7nszyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7rvl0uj I wish I was surprised by this. <br/><br/>Morgan Marquis-Boire, a well known hacker who has faced multiple credible accusations of sexual violence, was secretly running a crypto security company.<br/><br/><a href="https://www.washingtonpost.com/technology/2025/03/14/cryptocurrency-unciphered-morgan-marquis-boire/">https://www.washingtonpost.com/technology/2025/03/14/cryptocurrency-unciphered-morgan-marquis-boire/</a> 2025-03-14T16:20:19+01:00 https://nostr.ae/nevent1qqswpsku5dmwjqjlmyhr6pp407r2359lmxel7pfk9zkp70ks5g0qecqzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7cq6uwz I am starting to think these Lockdown Mode notifications are even dumber and confusing than I thought. <br/><br/>I get them all the time while I chat with someone, for example, after their first message. Apparently, they don&#39;t do anything because the conversation keeps going. (This happens with people who are in my contact list btw)<br/><br/>But then, the other day I saw one one of these warnings, which named a person I wasn&#39;t messaging with at the time.<br/><br/>Should I assume this means they were messaging me and Lockdown Mode prevented them? <br/><br/>Does anyone know what these notifications actually mean? Or what they are supposed to tell a Lockdown Mode user?<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/144/369/277/731/407/original/02f61f93e9f965f1.jpeg"> <br/> 2025-03-11T15:54:14+01:00 https://nostr.ae/nevent1qqstla2vx0umdu6dl2tdxqks0rpkamwz64l8dz26ft07gmyu65kln6czyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch74z5m3n NEW: Google fixed three zero-day vulnerabilities in Android that were used by authorities to unlock phones with Cellebrite forensic tools.<br/><br/>The fixes come after Amnesty alerted Google, following the analysis of a Serbian student protester&#39;s phone.<br/><br/><a href="https://techcrunch.com/2025/02/28/researchers-uncover-unknown-android-flaws-used-to-hack-into-a-students-phone/">https://techcrunch.com/2025/02/28/researchers-uncover-unknown-android-flaws-used-to-hack-into-a-students-phone/</a> 2025-02-28T20:41:36+01:00 https://nostr.ae/nevent1qqsxu4cvctfa0k6xk8p5jr5chm5x3sknf0a4p4rkp9vu7wv4f88f6hczyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7p5pplv NEW: Apple released a fix for a zero-day bug for iOS and iPadOS that “may have been exploited in an extremely sophisticated attack against specific targeted individuals.”<br/><br/>AFAIK this is the first time Apple uses &#34;extremely sophisticated attack&#34; in an official release. At this point, we don&#39;t know who abused the flaw, nor against whom. <br/><br/><a href="https://techcrunch.com/2025/02/10/apple-fixes-iphone-and-ipad-bug-used-in-an-extremely-sophisticated-attack/">https://techcrunch.com/2025/02/10/apple-fixes-iphone-and-ipad-bug-used-in-an-extremely-sophisticated-attack/</a> 2025-02-10T20:32:47+01:00 https://nostr.ae/nevent1qqsyayc9k7ya6tjrhsqsfy3z7lanl3yyts6efr2kdqxc8d6zqkw85pszyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch72dr8n3 In reply to <a href='/nevent1qqsv2fk9zjw88xm299c94x7dn8thfrwmxkjyecmdzlv9et88zujp5ccwt872h'>nevent1q…872h</a><br/>_________________________<br/><br/>Italian journalist Francesco Cancellato said he was one of the targets of the hacking campaign, after he received the notification from WhatsApp.<br/><br/>&#34;It is also our interest to know, if it is possible to do so, who ordered this espionage activity,” he said.<br/><br/><a href="https://x.com/fcancellato/status/1885424788237082900">https://x.com/fcancellato/status/1885424788237082900</a> 2025-01-31T21:54:20+01:00 https://nostr.ae/nevent1qqsv2fk9zjw88xm299c94x7dn8thfrwmxkjyecmdzlv9et88zujp5cczyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch72xn8jy In reply to <a href='/nevent1qqs8lxp038ht2zjmkw6dp7k6khv3e76g2wxhyh909u48dyd3n4v03ec779qj9'>nevent1q…9qj9</a><br/>_________________________<br/><br/>We updated the story to include new details from WhatsApp: the targets were in more than two dozen countries, including Europe.<br/><br/><a href="https://techcrunch.com/2025/01/31/whatsapp-says-it-disrupted-a-hacking-campaign-targeting-journalists-with-spyware/">https://techcrunch.com/2025/01/31/whatsapp-says-it-disrupted-a-hacking-campaign-targeting-journalists-with-spyware/</a> 2025-01-31T21:44:21+01:00 https://nostr.ae/nevent1qqsyu5k9retd40z5tqftjfer9xjmzmgmtskldul3vc2yej96qz0nncczyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch78lrecz NEW: The U.S. government has announced charges against five alleged hackers who targeted several companies stealing millions of dollars in crypto, and corporate data.<br/><br/>DOJ says the hackers are part of the infamous Scattered Spider cybercrime group, who &#34;perpetrated a sophisticated scheme to steal intellectual property and proprietary information worth tens of millions of dollars and steal personal information belonging to hundreds of thousands of individuals.”<br/><br/><a href="https://techcrunch.com/2024/11/20/us-charges-five-accused-of-multi-year-hacking-spree-targeting-tech-and-crypto-giants/">https://techcrunch.com/2024/11/20/us-charges-five-accused-of-multi-year-hacking-spree-targeting-tech-and-crypto-giants/</a> 2024-11-20T20:36:22+01:00 https://nostr.ae/nevent1qqst8uua2ng46u35mst428j65ffp4ndwpv942rdkup8u2ujgmy6y82czyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7sz8j49 NEW: Cybersecurity giant Fortinet confirms data breach affecting “less than 0.3%” of customers. Based on company&#39;s latest earnings, that should be around 1,500 customers.<br/><br/><a href="https://techcrunch.com/2024/09/13/fortinet-confirms-customer-data-breach/">https://techcrunch.com/2024/09/13/fortinet-confirms-customer-data-breach/</a> 2024-09-13T16:38:38+02:00 https://nostr.ae/nevent1qqswcj6k6qn4cayxy325457p59zj2dshl94d5usuc998kvht307rz7qzyqe3cj4pl7wqhzwjquw20rgmdt44xtnd07ydrx636dhq8dwz7zch7qzy35z NEW: A hacker and artist found a way to trick ChatGPT into telling him detailed step by step instructions on how to make a fertilizer bomb.<br/><br/>The trick was to tell the chatbot to play a game and then getting it to create an elaborate sci-fi fantasy world. The artist, who goes by Amadon, called it “social engineering hack to completely break all the guardrails around ChatGPT’s output.”<br/><br/><a href="https://techcrunch.com/2024/09/12/hacker-tricks-chatgpt-into-giving-out-detailed-instructions-for-making-homemade-bombs/">https://techcrunch.com/2024/09/12/hacker-tricks-chatgpt-into-giving-out-detailed-instructions-for-making-homemade-bombs/</a> 2024-09-12T16:18:38+02:00