If you're using #Element X on #Android, make sure you're up to date. The #vulnerability was patched in version 25.04.2.

#FOSS #FreeSoftware #LibreSoftware #OpenSource #Security #Privacy #Matrix

@usdAG@infosec.exchange
https://infosec.exchange/@usdAG/114478194638016465

#Bluetooth was a mistake: Millions of Bluetooth headphones can potentially be turned in eavesdropping devices. Best-seller #Sony and #Bose #headphones are affected by at least some of the disclosed flaws among many others. The true dimension of these flaws is yet unknown as the the vulnerable component is very widely in use under different names.

https://www.heise.de/en/news/Zero-day-Bluetooth-gap-turns-millions-of-headphones-into-listening-stations-10460704.html

Disclosure of the vulnerabilities: https://insinuator.net/2025/06/airoha-bluetooth-security-vulnerabilities/

No updates or official statements available yet. ☠️

#Security #Privacy #Audio #Airoha #ZeroDay

I added a banner on my homepage to talk about #ChatControl and how to fight back, similarly to how I did it two years ago for the same reason.

#FightChatControl #StopChatControl #EU #EUpol #Privacy #Security

If you've wondered how Android developer verification affects Accrescent, today we have a new blog post explaining briefly what it is, how it impacts us, and how we're responding.

https://blog.accrescent.app/posts/android-developer-verification/

#accrescent #android #appstore #security #privacy

Avevamo ragione, come sempre, nel comunicare che fino ad Aprile 2026 il chat control sarebbe tornato a massacrarci l'esistenza! A molti di voi potrebbe non interessare ma consegnare i nostri dati a Big Tech, far indebolire la cifratura dei certificati ssl e stravolgere le regole per un controllo di massa anche no!

Agite al link sottostante:

https://fightchatcontrol.eu

#stopchatcontrol #fightchatcontrol #privacy #security #freedom

Commerzbank (one of the largest German banks) just banned GrapheneOS:

https://discuss.grapheneos.org/d/28440-commerzbank-one-of-the-largest-german-banks-bans-grapheneos

There is literally zero reason why banking apps shouldn't work on GrapheneOS, and yet so many European financial institutions prefer to rely on the security assurances of megacorporations controlled by a foreign country.

At least I hope that the current geopolitical madness will contribute to stopping this plague.

#google #android #aosp #grapheneos #lineageos #bigtech #enshittification #security #privacy #digitalsovereignty #usa #eu #europe #politics #germany #commerzbank

...le of recording video.

dmidecode tells me this is a LENOVO Yoga 9 2-in-1 14ILL10 (P/N:83LC)

Command I used for anyone to replicate the finding. (I was on bog standard Kali, but I'm sure you'll figure out your device names if they change under other distros):

vlc v4l2:///dev/video0 -vv --v4l2-width=320 --v4l2-height=240 & vlc v4l2:///dev/video2 -vv --v4l2-width=320 --v4l2-height=240

#Cyber #Security #Infosec #Lenovo #Privacy #Hacking

Motorola announces partnership with Graphene OS to bring us secure phones!

https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/

So the mysterious manufacturer GOS was working with was Motorola, not OnePlus as early speculations suggested. This is good news, Motorola is owned by Lenovo and makes cool phones!

Reminder that Graphene OS is still based on AOSP and therefore, IMHO, eventually doomed to succumb to Google's shenanigans. However, for now and for the foreseeable future, that's the best we can have.

#grapheneos #motorola #android #aosp #linux #pixel #google #enshittification #security #privacy

#Telegram fork #Nekogram has been caught collecting users' phone numbers for OSINT bots with a secret function in the official release binaries.

https://github.com/Nekogram/Nekogram/issues/336

https://github.com/RomashkaTea/nekogram-proof-of-logging

There also was a debug function in #Cherrygram, another fork, immediately removed after the news about Nekogram broke out, although the dev says it was an innocuous unused debug function, but I think it's weird that it sent your phone number to Google Firebase Analytics though.

#Privacy #Security #FOSS

An ex-Azure engineer published six essays arguing Microsoft's cloud has been on life support since 2008, and the cause isn't bad code. It's bad people decisions. Rushed launch, post-launch talent exodus, no testing discipline, no architectural vision. Sound familiar to anyone who's worked in a place that ships first and staffs later?

Now layer 2026 on top. Microsoft cut roughly 15,000 jobs in mid-2025. Coding agents are pumping out 4x more commits in 90 days. GitHub's unofficial uptime has slipped under 90% and the proposed fix is, wait for it, moving more of GitHub onto Azure. The same Azure the engineer says is held together with rushed decisions and wishful thinking.

🧠 The phrase that stuck with me is "knowledge dilution from high attrition." When the senior people who knew why a system was built that way leave, no LLM in the world can recover that context

🤖 More AI-written code does not mean less work. It means more code to review, test, deploy, and run, which means more compute and more humans needed downstream

📉 OpenAI signing an $11.9B compute deal with CoreWeave in March 2025 was the loudest "we don't trust your capacity" signal Microsoft has ever received from its closest partner

🪑 The bet that AI lets you cut headcount keeps colliding with the reality that AI generates work for humans faster than it removes it

Every CIO I talk to is being pitched the same dream: fewer engineers, more agents, lower run rate. The Azure story is what happens when that math doesn't pencil out and the bill comes due in incidents instead of dollars.

https://www.theregister.com/2026/04/04/azure_talent_exodus/

#Azure #AI #Leadership #security #privacy #cloud #infosec #cybersecurity #software #devops

Linux security flaws Dirty Frag and Copy Fail are a good reminder to stay up to date https://www.gamingonlinux.com/2026/05/linux-security-flaws-dirty-frag-and-copy-fail-are-a-good-reminder-to-stay-up-to-date/

#Linux #OpenSource #Security

Researchers found Microsoft Edge loads every saved password into plaintext memory at launch, increasing exposure after session compromise 🔐

Unlike other Chromium browsers, Edge keeps credentials readable in RAM, raising scraping risks on shared and admin-access systems 🛡️

🔗 https://proton.me/business/blog/microsoft-edge-passwords-exposed

#TechNews #Browser #MicrosoftEdge #Microsoft #Edge #Cybersecurity #PasswordManager #Privacy #FOSS #OpenSource #Security #Encryption #Windows #Passwords #DataProtection #Infosec

→ Meta Silently Added Face-Recognition Code for Its #Smart Glasses to Millions of Phones

https://www.wired.com/story/meta-smart-glasses-face-recognition-nametag-connections/

“"The feature is not yet exposed to consumers but seems nearly ready to go," says [Cooper Quintin, a #security researcher and senior public interest technologist with the nonprofit Electronic Frontier Foundation’s Threat Lab]. "Despite the billions of reasons not to, #Meta seems to have created the capacity to turn their customers into a distributed #surveillance machine."”

#Face

https://www.404media.co/fcc-wants-to-kill-burner-phones-by-forcing-telecoms-to-get-all-customers-ids/

The FCC wants to make it impossible to buy "burner" phones, such as pre-paid phones not linked to your identity. They plan to do this by forcing all companies to store a ton of data about ALL phone users, including Copy of ID, and Verified address and a ton more info for both new & existing phone users, regardless of company or phone.

#FCC #Privacy #Security

The Arch Linux AUR had over 400 packages compromised with malware https://www.gamingonlinux.com/2026/06/the-arch-linux-aur-had-over-400-packages-compromised-with-malware/

#Linux #ArchLinux #Security