A second major security breach in the Tea dating app exposed highly sensitive user messages discussing personal topics like abortions and cheating, along with phone numbers and real identities, raising significant privacy concerns and potential risks for users.
A federal judge in New York approved the Treasury Department's DOGE team to access sensitive financial data, ruling that the department had met requirements for employee screening and training.
Mobile data broker Kochava has failed to prevent the Federal Trade Commission (FTC) from exposing its alleged unfair use and sale of sensitive data without consent. The FTC claims that Kochava's database contains a vast amount of identifying information about consumers, including their movements and personal details. Kochava's products allow advertisers to target individuals based on specific characteristics and attributes, invading consumers' privacy and causing substantial harm. The FTC alleges that Kochava could implement privacy safeguards but actively promotes its data as a means to evade consumers' privacy choices.
Former President Donald Trump denies reports that he shared sensitive information with Australian billionaire Anthony Pratt, after secret recordings of Pratt discussing his close access to Trump were released. The recordings include accounts of Trump discussing phone calls with the leaders of Iraq and Ukraine in 2019. Trump responded by calling the reports "fake news" and attacking the New York Times. Pratt has been listed as a potential witness in the Trump classified documents trial and has been interviewed by the FBI about Trump's alleged mishandling of classified documents after leaving office.
A U.S. Navy service member, Petty Officer Wenheng Zhao, pleaded guilty to conspiring with a Chinese intelligence officer and receiving bribes in exchange for transmitting sensitive U.S. military information. Zhao, who held a security clearance and worked at Naval Base Ventura County, admitted to collecting and transmitting non-public information regarding U.S. Navy operational security, military trainings, and critical infrastructure. He used encrypted communication methods and destroyed evidence to conceal his actions. Zhao faces a maximum penalty of 20 years in prison. The FBI and Naval Criminal Investigative Service conducted the investigation.
Special Counsel Jack Smith has requested a protective order to prevent former President Donald Trump from disclosing evidence and materials shared with him and his legal team by the DOJ to the public. The order would require that materials provided to Trump’s team remain “in the custody and control of Defense Counsel,” and that the former president’s attorneys must securely store the materials. The request is similar to a protective order sought by Manhattan District Attorney Alvin Bragg in his own criminal case against Trump. Smith is also conducting a separate probe into Trump’s efforts to overturn the results of the 2020 election.
A new Mac malware called Atomic macOS Stealer (AMOS) has been found on Telegram, which is designed to steal sensitive information like usernames and passwords. AMOS can access keychain passwords, system information, files from the desktop and documents folder, and the password of the Mac. It can infiltrate browser apps like Chrome and Firefox, extracting autofill information, passwords, cookies, wallets, and credit card information. Cryptowallets like Electrum, Binance, and Atomic are specific targets. The malware and accompanying services to make it easier to use against victims can be purchased on Telegram for $1,000 per month.
Google has listed seven pieces of information that it would never ask for in an email, including usernames and passwords, social security numbers, bank account numbers, PINs, credit card numbers, mother's maiden name, and birthday. If you receive an email asking for any of this information, it's likely a scam. If you've already handed over any of this information, you may already be a victim of a bank-raid attack and should check for fraudulent transactions and suspicious activity on your accounts.