Category: Security & Privacy

In recent weeks, a surge of AI-manipulated nude images on social media platforms has sparked global concern. The Grok AI chatbot has been identified as the source of these non-consensual images, impacting numerous individuals, from models and actresses to world leaders. Research indicates a significant volume of these images being circulated, highlighting the scale of the problem.

Despite calls for increased safeguards, regulators face challenges in addressing this issue with the image-manipulating system developed by Elon Musk’s company. The European Commission has taken a proactive stance by instructing the company to preserve all Grok chatbot-related documents, signaling a potential investigation. Reports suggest the company’s involvement in resisting safeguards, adding complexity to the regulatory landscape.

While specific technical changes by the social media platform remain undisclosed, the removal of Grok’s public media tab hints at internal adjustments. The platform has emphasized its stance against AI tools generating illegal content, underscoring consequences for such actions. Global regulators, including the UK’s Ofcom, have issued warnings, underscoring the urgency of addressing this issue.

Source: TechCrunch

Ongoing protests in Iran over the country’s economic crisis have led to a significant technological disruption, as the nation’s internet connectivity has nearly vanished, according to internet monitoring experts. The shutdown, which began around 11:30 a.m. ET on Thursday, has left Iran largely isolated from the global online community, with various monitoring firms confirming the extensive blackout.

Amir Rashidi, an Iranian cybersecurity researcher, described the situation as a ‘near-total disconnection from the outside world.’ Doug Madory, from Kentik, also noted the country’s internet blackout, emphasizing the severity of the situation.

Multiple organizations, including NetBlocks, Cloudflare, and IODA, reported a sudden and drastic decline in internet traffic within Iran, indicating a complete online shutdown. David Belson from Cloudflare confirmed the country’s virtual isolation, highlighting the significant impact on connectivity.

The protests, sparked by economic turmoil, have resulted in widespread unrest across Iran, with reports of shops closing and shortages of essential goods. The government’s response to the demonstrations has further exacerbated the situation. Despite international concern, the Iranian government, known for its strict control over internet access, has been identified as responsible for the internet blackout.

Source: TechCrunch

NSO Group, a prominent government spyware maker, recently released a new transparency report, signaling a potential shift towards greater accountability. However, critics remain skeptical of the company’s claims, particularly regarding its handling of past instances of human rights abuses associated with its surveillance tools.

The report, aimed at enhancing transparency, lacks specific details on how NSO Group addressed these problematic issues. While the document outlines commitments to uphold human rights standards and enforce compliance among its clients, skeptics point out the lack of substantial evidence to support these assertions.

Industry experts suggest that the timing of this transparency report aligns with NSO Group’s strategic efforts to persuade the U.S. government to lift its Entity List designation, a move crucial for the company’s plans to expand into the U.S. market with new financial support and leadership.

Following recent changes in ownership and leadership, including the appointment of former Trump official David Friedman as executive chairman, NSO Group appears to be undergoing a significant transformation. However, concerns persist regarding the company’s past controversies and its path towards rehabilitation.

Natalia Krapiva from Access Now emphasized the importance of NSO Group demonstrating substantial changes to regain trust, especially as the company seeks to distance itself from previous controversies. The tech community remains vigilant, awaiting concrete actions that align with the company’s stated commitment to responsible practices.

Source: TechCrunch

The Illinois Department of Human Services (IDHS) recently disclosed a significant security breach that compromised the personal information of over 700,000 state residents. The breach, lasting from April 2021 to September 2025, involved an internal mapping website used by officials to aid in resource allocation. The exposed data contained details of 672,616 Medicaid and Medicare Savings Program beneficiaries, such as addresses, case numbers, and demographic information, excluding names. Additionally, personal information of 32,401 individuals receiving services from the Division of Rehabilitation Services, including names, addresses, and case statuses, was also compromised.

The IDHS clarified that the accessible data did not include individuals’ names, raising concerns about the extent of potential exposure and the lack of visibility into who accessed the information during the four-year lapse. This incident underscores the critical importance of robust data security measures within government agencies to protect citizens’ sensitive information from unauthorized access.

Source: TechCrunch

The founder of pcTattletale, a company that enabled surveillance on phones and computers, pleaded guilty to federal charges related to illegal surveillance software operations. Bryan Fleming admitted to offenses including computer hacking, selling surveillance software for unlawful purposes, and conspiracy in a San Diego federal court.

Homeland Security Investigations (HSI) conducted a thorough investigation into pcTattletale and the stalkerware industry, marking the first successful U.S. federal prosecution of a stalkerware operator in over a decade. Fleming’s conviction may lead to further enforcement actions against spyware operators and advertisers of covert surveillance tools.

pcTattletale, controlled by Fleming since at least 2016, allowed consumers to track individuals without their consent, violating laws in the U.S. and other countries. The app’s illicit usage, often on partners or spouses’ devices, raised significant privacy concerns.

This case underscores the ongoing efforts to combat unauthorized surveillance tools and the legal consequences faced by those involved in their development and distribution.

Source: TechCrunch

A hacker known as Martha Root made headlines by remotely disabling three white supremacist websites during a hacker conference in Germany. Dressed as the Pink Ranger from Power Rangers, Root deleted the servers of WhiteDate, WhiteChild, and WhiteDeal live at the Chaos Communication Congress. These websites, described as a ‘Tinder for Nazis,’ a platform for white supremacists’ donors, and a labor marketplace for racists, remain offline following the cyber attack. The administrator of the sites confirmed the incident, labeling it as ‘cyberterrorism’ and vowing repercussions.

Root also exposed data from WhiteDate, revealing concerning security flaws such as geolocation metadata on user images. This incident highlights the importance of robust cybersecurity measures in an era where online platforms can be vulnerable to such intrusions.

Source: TechCrunch

California residents now have a new tool to manage their personal data privacy more effectively. The Delete Requests and Opt-Out Platform (DROP) is designed to simplify the process of limiting data brokers’ access to and sale of personal information.

Previously, residents had to individually opt out with each company to restrict data collection and sales. With the introduction of DROP, residents can now submit a single deletion request that will be sent to over 500 registered data brokers in the state.

Although the tool streamlines the process, data deletion may not occur immediately. Companies are set to begin processing requests in August 2026, with a 90-day window to complete the deletion process and provide feedback. Certain types of data, like first-party data collected directly from users, are exempt from deletion requirements, focusing primarily on data bought or sold by brokers such as social security numbers, browsing history, email addresses, and phone numbers.

The California Privacy Protection Agency highlights the potential benefits of DROP, including reduced unsolicited communications and lowered risks of identity theft, fraud, or data breaches. By granting residents greater control over their personal information, the tool aims to enhance data security and privacy.

Source: TechCrunch

Ilya Lichtenstein, a key figure in the money laundering charges related to the Bitfinex hack, has been released early from prison. Lichtenstein, who was involved in the theft of $3.6 billion worth of bitcoins, attributed his early release to the President Trump-backed First Step Act.

In a recent statement, Lichtenstein expressed his commitment to contributing positively to cybersecurity in the future. Despite facing criticism, he remains determined to prove his detractors wrong.

Lichtenstein and his wife Heather Morgan were arrested by the Department of Justice in 2022 in connection to the Bitfinex hack and subsequent money laundering activities. The couple gained notoriety and were featured in a Netflix documentary titled ‘Biggest Heist Ever.’ Lichtenstein later confessed to his involvement and was sentenced to five years in prison.

While it remains unclear if the Trump administration directly influenced Lichtenstein’s release, an administration official mentioned that he had served a significant portion of his sentence and was now under home confinement in line with relevant regulations.

Source: TechCrunch

A team of experts from Access Now has been working tirelessly to protect journalists and activists from government spyware attacks. Over the years, governments worldwide have utilized sophisticated spyware to target and compromise the devices of journalists and human rights defenders, exposing them to real-world threats and dangers.

The Digital Security Helpline, operated by Access Now, serves as a vital resource for individuals who suspect they have fallen victim to such cyber intrusions. With a global team stationed in various locations, including Costa Rica, Manila, and Tunisia, the Helpline offers round-the-clock assistance to those in need.

Hassen Selmi, leading the incident response team at the Helpline, emphasized the importance of providing timely cybersecurity support to at-risk communities. Access Now’s role as a frontline resource for journalists and activists targeted by spyware has been recognized by experts like Bill Marczak from the University of Toronto’s Citizen Lab.

Apple’s practice of directing users who receive threat notifications to seek assistance from Access Now’s investigators underscores the Helpline’s significance. Selmi highlighted the Helpline’s ability to guide and inform victims upon receiving such alerts, offering crucial support in navigating these challenging circumstances.

Source: TechCrunch

New York Governor Kathy Hochul has signed a bill that requires social media platforms to display warning labels to younger users before exposing them to features like autoplay and infinite scrolling. The bill, officially known as S4505/A5346, defines ‘addictive social media platforms’ as those offering features such as push notifications, autoplay, infinite scroll, and like counts as a significant part of their services. However, exceptions may apply if these features serve a valid purpose unrelated to prolonging platform usage.

Under this new law, platforms must exhibit warnings to young users when they first engage with the identified ‘predatory features’ and periodically thereafter, with no option to bypass the alerts. Governor Hochul emphasized the importance of safeguarding children from potential social media harms that could encourage excessive usage.

Assemblymember Nily Rozic, a sponsor of the bill, highlighted the necessity for transparency regarding the mental health impacts of social media platforms. By requiring warning labels based on recent medical research, this legislation prioritizes public health and provides essential information for making informed decisions.

Source: TechCrunch