Plus: ICE accidentally doxes asylum seekers, Google fails to uphold a post-Roe promise, and LastPass suffers the second breach this year.
hacking
Android Phone Makers’ Encryption Keys Stolen and Used in Malware
.jpg)
Device manufacturers use “platform certificates” to verify an app’s authenticity, making them particularly dangerous in the wrong hands.
Google Moves to Block Invasive Spanish Spyware Framework
The Heliconia hacking tool exploited vulnerabilities in Chrome, Windows Defender, and Firefox, according to company security researchers.
Drop What You’re Doing and Update iOS, Android, and Windows
Plus: Major patches dropped this month for Chrome, Firefox, VMware, Cisco, Citrix, and SAP.
Apple Tracks You More Than You Think
Plus: WikiLeaks’ website is falling apart, tax websites are sending your data to Facebook, and cops take down a big phone-number-spoofing operation.
A Leak Details Apple’s Secret Dirt on Corellium, a Trusted Security Startup
A 500-page document reviewed by WIRED shows that Corellium engaged with several controversial companies, including spyware maker NSO Group.
A Destabilizing Hack-and-Leak Operation Hits Moldova
Plus: Google’s location snooping ends in a $391 million settlement, Russian code sneaks into US government apps, and the World Cup apps set off alarms.
Here’s How Bad a Twitter Mega-Breach Would Be
Elon Musk laid off half the staff, and mass resignations seem likely. If nobody’s there to protect the fort, what’s the worst that could happen?
The Hunt for the FTX Thieves Has Begun
Mysterious crooks took hundreds of millions of dollars from FTX just as it collapsed. Crypto-tracing blockchain analysis may provide an answer.
Elon Musk Introduces Twitter Mayhem Mode
Plus: US midterms survive disinformation efforts, the government names the alleged Lockbit ransomware attacker, and the Powerball drawing hits a security snag.