IT news

We Updated Our Privacy Policy. Here's What Changed and Why.

We recently updated our privacy policy for the first time since 2022. Most of the changes are clarifications, reorganizations, and improvements in transparency, particularly around how third-party tools that run parts of our site operate. But one change is substantive enough that we want to address it directly. The Change You Should Know About: Opt-In Email Tracking We want to know how we’re doing with our advocacy: which campaigns get your attention and which do not, which topics you are very i

We Must Not Normalize Digital Surveillance Abuses. EFF’s New Guide Underlines Concrete Steps to Fight Back.

Poor accountability, feeble control mechanisms, and insufficient legal frameworks have led to systematic human rights violations in the Americas, with no consistent remedy or reparation to victims. What's needed is to materialize essential guarantees and measures to combat repeated surveillance abuses in the region. To help build a path for solutions, EFF launches the guide Tackling Arbitrary Digital Surveillance in the Americas, adding to our extensive work leveraging human rights norms to conf

Fuel Tank Breaches Expand Scope of Iran's Cyber Offensive

Security experts have long warned that insecure automatic tank gauge (ATG) systems exposed on the Internet can be tampered with by threat actors.

The Boring Stuff Is Dangerous Now

AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of potentially flawed AI-generated code, forcing defenders to adapt accordingly.

Catholic Day: Merz says “no” to social media ban

What does the Chancellor think about the social media ban for minors? – All rights reserved: IMAGO / Wolfgang Maria Weber, editing: netzpolitik.orgIn front of the camera, the Chancellor is asked at the Catholic Day: “Ban, social media, are you for it?” And Friedrich Merz says: “No.” What does this mean for the debate?

IT threat evolution in Q1 2026. Mobile statistics

This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada.

IT threat evolution in Q1 2026. Non-mobile statistics

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026.

Boulevard of Broken Dreams: 2 Decades of Cyber Fails

From the MGM and Caesars fiasco and MOVEit's patch nightmare to epic business blunders and the jaded reality of living in a post-breach world, Dark Reading looks back at the mistakes, miscalculations, systemic failures, and cringeworthy moments that still have us shaking our heads.

An ICE Firearms Trainer Was Involved in At Least 4 Deadly Shootings

David Norman, a former Phoenix police officer who’s described himself as “a fucking savage,” now runs a company that provided training to Homeland Security’s Special Response Teams.

Project Glasswing: what Mythos showed us

In recent weeks, we pointed Mythos and other security-focused LLMs at live code across critical parts of our infrastructure. We share what we observed, the models’ strengths and weaknesses, and what the work around them needs to look like before any of it can scale.

Pushback documentary: Norwegian court refuses to extradite Tommy Olsen to Greece

Activist Tommy Olsen from the NGO Aegean Boat Report. – All rights reserved: Aegean Boat Report, edited by: netzpolitik.orgTommy Olsen uses social media to make refugees visible and thus prevent their pushbacks. He should therefore be put on trial in Greece. The Norwegian's extradition has now been averted - for now.

Cybercriminal Twins Caught After They Forgot to Turn Off Microsoft Teams Recording

Plus: Instructure’s Canvas ransomware debacle comes to a close, an alleged dark net market kingpin gets arrested, OpenAI workers fall victim to a supply chain attack, and more.

Week 20: The week in which anonymity on the internet began to falter even more

– : Fractal, generated with MandelBrowser by Tomasz ŚmigielskiThe 20th calendar week is coming to an end. We have published 10 new texts with a total of 85,644 characters. Welcome to the weekly review of network politics.

Minister of State Weimer on the Venice Biennale: "German pavilion is a highlight of the Biennale. Solidarity with Israeli artists in Venice"

Minister of State for Culture and Media, Wolfram Weimer, visited the Venice Biennale on Friday and Saturday and was, among other things, in the German, Ukrainian and Israeli pavilions and spoke to artists there. Weimer also visited the Israel Pavilion on Friday afternoon and said afterwards: "It is important that Germany shows solidarity with Israel and Israeli artists at the Biennale. I was very impressed by the K's installation

Welcome to BlackFile: Inside a Vishing Extortion Operation

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has continued to track an expansive extortion campaign by UNC6671, a threat actor operating under the "BlackFile" brand, that targets organizations via sophisticated voice phishing (vishing) and single sign-on (SSO) compromise. By leveraging adversary-in-the-middle (AiTM) techniques to bypass traditional perimeter defenses and multi-factor authentication (MFA), UNC6671 gains

Digital Minister Conference: Wildberger wants to improve data protection for the use of AI in administration

Karsten Wildberger (CDU), Kristina Sinemus (CDU) and Jan Pörksen (SPD) at the fifth Digital Ministers Conference in Hamburg City Hall. – All rights reserved: G. Schwering / Senate Chancellery The fully digitalized state should be here and as quickly as possible. The federal and state governments agreed on this after the Digital Ministers Conference. In order to pick up the pace, the responsible ministers want more so-called artificial intelligence and less data protection.

Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking to compromise data. The post Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files appeared first on Unit 42.

Our billing pipeline was suddenly slow. The culprit was a hidden bottleneck in ClickHouse

When a partitioning change to our petabyte-scale ClickHouse cluster caused critical billing jobs to stall, standard metrics showed no obvious errors. This post explores how we identified severe lock contention in ClickHouse's query planner and built upstream patches to fix it.

Siemens Ruggedcom Rox

View CSAF Summary Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating system's filesystem. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Ruggedcom Rox are affected: RUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 RUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 RUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 RUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 RUGGEDCOM ROX RX1501 vers:intdot/<2

Siemens gWAP

View CSAF Summary Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The vulnerability stems from a specific "Gadget" attack chain that allows prototype pollution in other third-party libraries, potentially allowing an attacker to execute arbitrary code. Siemens has released a new version for gWAP and recommends to update to the latest version. The following versions of Siemens gWAP are affected: gWAP vers:intdot/<3.1.1 CVSS Vendor Equipment Vulnerabilities v3 8

Siemens Simcenter Femap

View CSAF Summary Simcenter Femap is affected by heap based buffer overflow vulnerability in Datakit library that could be triggered when the application reads files in IPT format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version. The following versions of Siemens Simcenter Femap are affected: Simcenter Femap vers:intdot/<2512.0003 CVSS Vendor Equipme

Siemens Ruggedcom Rox

View CSAF Summary Ruggedcom Rox contains an input validation vulnerability in the Scheduler functionality that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Ruggedcom Rox are affected: RUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 RUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 RUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 RUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 RUGGEDCOM ROX RX1501

Siemens Teamcenter

View CSAF Summary Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Teamcenter are affected: Teamcenter V2312 vers:intdot/<2312.0014, vers:intdot/<2312.0009 (CVE-2026-33862, CVE-2026-33893, CVE-2024-4367) Teamcenter V2406 vers:intdot/<2406.0012, vers:intdot/<2406.0006 (CVE-2026-33862, CVE-2026-33893, CVE-2024-4367) Teamcenter V2412 vers:intdot/<2412.000

Siemens Solid Edge

View CSAF Summary Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2026 and recommends to update to the latest version. The following versions of Siemens Solid Edge are affected: Solid Edge vers:intdot/<226.0.5 CVSS Vendor Equipment Vulnerabilities v3 7.8 Siemens Siemens Solid Edge Access of Uninitialized Pointer, Stack-based Buffer Overflow

Kimsuky targets organizations with PebbleDash-based tools

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

Your iPhone Gets Stolen. Then the Hacking Begins

A bustling underground ecosystem is providing criminals with the tools to unlock iPhones—and wage phishing attacks against their contacts to access bank accounts and more.

Satellite Imagery Shows Ongoing Demolitions Across Southern Lebanon

The fragile ceasefire agreed between Israel and Hezbollah last month is holding. But satellite imagery shows that at least 46 of 54 towns and villages within the Israel Defense Forces (IDF) “Yellow Line” in southern Lebanon have been heavily damaged or, in some cases, entirely flattened. Much of the destruction and demolition has taken place […] The post Satellite Imagery Shows Ongoing Demolitions Across Southern Lebanon appeared first on bellingcat.

re:publica 26: Standing up for a better tomorrow

After re:publica 25 is before re:publica 26. - CC-BY-NC 2.0: republica GmbHNext week this year's re:publica will take place, the largest conference for the digital society in Europe. The program offers many exciting topics and formats. Editors and authors from netzpolitik.org will also be on the stage.

Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report

Why AMOS matters: The macOS malware stealing data at scale

Sophos X-Ops looks at the Atomic macOS Stealer and its capabilities Categories: Threat Research Tags: MacOS, AMOS, infostealer