Meridiano
A congressional report estimates over $20.9 billion in consumer losses from identity theft linked to data broker breaches. The inquiry found several major data brokers used "no index" codes and other methods to hide opt-out tools, making it harder for people to protect their data from scammers. While four companies improved access to opt-out options after being contacted, one company, Findem, did not respond and reportedly fails to process most privacy requests. The main topics covered are data broker practices, consumer privacy risks, identity theft losses, and congressional investigation findings.
Articles
Showing articles 376 - 390 of 2575 total (matching filters).
-
infosec 5 -
infosec 5Threat actors are distributing a remote access trojan (RAT) through trojanized gaming utilities, using stealthy techniques like living-off-the-land binaries and configuring Microsoft Defender exclusions to evade detection. Separately, a new multi-functional RAT malware family called Steaelite has been disclosed, which combines data theft, ransomware, and extensive remote control capabilities into a single web panel. The article also notes the discovery of two additional RAT families, DesckVB RAT and KazakRAT, with the latter suspected to be used in state-affiliated espionage campaigns. The main topics covered are cyber threats involving RATs, their infection methods, evasion techniques, and defensive recommendations.
-
.jpg)
tech 4The article describes the author's experience receiving frequent, brief calls from two young children, Amos and Clara, after they received a Tin Can phone for Hanukkah. The Tin Can is a Wi-Fi-connected "dumb phone" with no screen, designed to allow kids to make calls without accessing the internet or social media, with parents controlling an approved contact list and call schedules.
Its co-founder, Chet Kittleson, views it as a utility that lets children be part of the communication world in a focused, voice-based way, reviving the social benefits of a traditional landline for a young demographic. The product has sold over 100,000 units, appealing to parents seeking a screen-free communication tool for kids aged roughly 5 to 13.
The main topics covered are the Tin Can phone's features and parental controls, its market success and intended purpose, and the philosophy behind its creation as an alternative to smart devices for children.
-
tech 3Huxe is a new, free AI-powered app that creates personalized daily audio briefings by summarizing information from a user's connected email and calendar accounts. It also generates deeper "DeepCast" audio reports and live news stations on topics chosen by the user.
The app's functionality is similar to Google's NotebookLM, as it uses conversational AI voices to present information in a podcast-style format. Users must trust Huxe with their data, and while the company states it won't use personally identifiable information to train its AI, some data may be shared with third-party partners.
The main topics covered are the Huxe app's features and functionality, its data privacy and security considerations, and the user setup and experience process.
-
brasil 5Resumo objetivo:
A greve dos trabalhadores terceirizados da educação em Belo Horizonte vai além da demanda por reajuste salarial, sendo uma manifestação contra condições de trabalho exploratórias e a desvalorização imposta pela gestão municipal. Os relatos destacam salários aviltantes (como R$ 1.100 para faxineiros), jornadas exaustivas que prejudicam a vida familiar e a insegurança gerada pela instabilidade contratual. A situação é contextualizada como resultado de políticas neoliberais que aprofundam a desigualdade, tratando os trabalhadores como "descartáveis".Principais tópicos abordados:
1. Exploração e precarização do trabalho terceirizado (salários baixos, jornadas extensas, desvalorização).
2. Crítica à gestão pública municipal (responsabilização do prefeito e secretária pela política de arrocho).
3. Impactos sociais da terceirização (sofrimento físico e emocional, abandono da vida familiar, insegurança laboral).
4. Denúncia da desigualdade social no capitalismo, com foco na transferência de riqueza para os mais ricos.
5. União da classe trabalhadora como necessidade para enfrentar a exploração. -
infosec 6The North Korean threat actor ScarCruft is using a new campaign called Ruby Jumper, deploying multiple malware families to breach systems and air-gapped networks. The attack chain begins with a malicious LNK file and uses a backdoor named RESTLEAF, which uniquely leverages Zoho WorkDrive for command-and-control communications. Key implants include THUMBSBD and VIRUSTASK, which use removable media to relay commands and data, and FOOTWINE, which provides extensive surveillance capabilities like keylogging and audio/video capture. The main topics covered are a cyber espionage campaign, the specific malware tools and their functions, and the techniques used for infection and command control.
-
tech 6The Trump administration is accused of using retaliatory federal investigations to intimidate and silence critical media outlets and nonprofits. A primary example is the FTC's investigation into Media Matters for America, following the group's critical reporting on X (Twitter), which a district court deemed a First Amendment violation.
This strategy is mirrored by other agencies, including the Justice Department's use of the FACE Act to prosecute journalists reporting on protests and its controversial search of a Washington Post reporter's home and devices.
The main topics covered are retaliatory government investigations against media, First Amendment violations, and legal actions against journalists and nonprofit watchdogs.
-
tech 4A US trade panel ruled that Insta360 infringed a GoPro design patent related to camera appearance, but only on certain legacy models. The import ban resulting from this ruling does not affect Insta360's current product offerings in the United States.
The investigation centered on six GoPro patents, with the company only prevailing on the single design patent. Insta360 was found not to have infringed the other five utility patents related to camera software features.
Consequently, Insta360 can continue to import and sell its existing product lineup in the US without restriction, which the company hailed as a complete victory.
The main topics covered are a patent infringement ruling, its limited impact on only legacy products, and the continued market access for the defendant's current lineup.
-
infosec 3Anthropic has introduced Claude Code Security, an AI tool that scans code for vulnerabilities and suggests fixes, but it requires human oversight and is not a complete security solution. The tool's announcement caused significant but temporary stock declines for several cybersecurity companies, though market reactions are seen as premature. While the underlying AI technology shows promise in finding and patching complex, previously unknown bugs, experts caution it is too early to label the tool a market disruptor. The main topics covered are the launch and capabilities of Claude Code Security, its immediate impact on financial markets, and an analysis of its potential and current limitations.
-
tech 5Major Chinese chip designers Cambricon, Moore Threads, and MetaX posted dramatic revenue and profit growth for 2025, driven by surging domestic demand for semiconductors. Cambricon reported its first full-year profit since its 2020 listing, with revenue soaring 450%, while Moore Threads' revenue jumped 243%.
This growth is attributed to China's push for technological self-sufficiency and rising demand for AI computing resources. Cambricon, positioned as a domestic alternative to U.S. firms like Nvidia, credited its competitive products for increasing its market share.
The main topics covered are the financial performance of specific Chinese semiconductor companies, the drivers of growth in domestic demand, and China's broader technology self-sufficiency initiative.
-
infosec 5A malicious Go module impersonates the legitimate "golang.org/x/crypto" library to steal passwords and deploy malware. It captures secrets entered via terminal prompts and executes a script that establishes persistent SSH access and retrieves additional payloads. One payload is the Rekoobe Linux backdoor, used by groups like APT31, which can execute commands, steal files, and create reverse shells. The main topics are a software supply chain attack using namespace confusion, the functionality of the malicious module and Rekoobe backdoor, and defensive warnings about similar future campaigns.
-
tech 5A previously obscure analyst, Alap Shah, co-authored a report predicting a severe AI-induced economic crisis in 2028, triggering an 800-point drop in the Dow Jones. The reaction highlighted the financial market's acute anxiety about AI's uncertain economic impact, where even speculative reports or minor announcements can cause significant volatility.
The report's bleak predictions were heavily criticized for being flimsy and lacking evidence, with critics noting AI's minimal current economic impact and historical resilience to technological change. A key disputed argument was that AI agents will eliminate middlemen by empowering consumers to directly find the best deals, with companies like DoorDash cited as potential casualties.
The main topics covered are the market's reaction to AI speculation, criticism of a doom-laden AI economic report, and the debated future where AI agents disrupt traditional business models.
-
tech 5A group of Democratic lawmakers is demanding the Department of Homeland Security (DHS) provide its official definition of "domestic terrorist," following the agency's use of the label for U.S. citizens killed by its officers. Their letter accuses DHS of using this label without evidence to justify expansive surveillance on critics, protesters, and others.
The lawmakers cite a pattern of civil liberties violations, including DHS's purchase of location data, use of facial recognition on legal observers, and deployment of tools like Palantir's ELITE system for ICE. They argue these actions represent a dangerous shift toward an authoritarian surveillance state that punishes dissent.
The letter includes a series of demands for transparency regarding the legal authorities, policies, and technical infrastructure behind DHS's surveillance and designation practices. It concludes by condemning these actions as unconstitutional and promising accountability.
Main topics: DHS's definition and use of "domestic terrorist" label; expansion of surveillance technologies and data collection; allegations of civil liberties violations and authoritarian overreach; legislative demands for transparency and accountability.
-
infosec 3Cybersecurity experts argue that current data breach disclosures are insufficient and call for greater transparency. They advocate for detailed, structured sharing of breach causes to enable industry-wide learning and risk reduction, similar to practices in aviation and medicine. A key barrier to this transparency is the legal and liability-focused culture within organizations, which prioritizes minimizing exposure over sharing lessons. The experts will present their case for this cultural shift at an upcoming security conference.
-
tech 5Amazon has changed its wishlist policy to allow gifters to select items from third-party sellers, which may expose a recipient's delivery address to the gifter. Amazon's notice to users disclaims responsibility for how third-party sellers handle this address data.
The policy change was first highlighted by sex workers, who often rely on wishlists as a crucial alternative payment method due to widespread discrimination from traditional payment processors. While many use it supplementarily, these lists are vital for those debanked from mainstream financial services.
The main topics covered are Amazon's policy change and its privacy implications, and the specific impact on sex workers' livelihoods.