[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentPrivacy & Surveillance
India Warns WhatsApp Over Username Rollout Citing Security Risks
India's Ministry of Electronics and Information Technology has warned WhatsApp to halt its global rollout of a new usernames feature, citing security risks, and given the Meta-owned platform just three days to respond. The move has sparked concerns over regulatory action and the protection of user data.
Papa Johns Taps Data to Target Hungry Shoppers
By teaming up with Instacart, NBCUniversal, and Carat, Papa Johns successfully reached hungry shoppers at the perfect moment - when their fridges were running low on essentials. This clever approach used data to target consumers when they were most likely to crave a delicious pizza.
WhatsApp Introduces Usernames to Enhance User Privacy
WhatsApp is rolling out a new feature that lets you reserve a unique username, giving you more control over your privacy and allowing you to keep your phone number hidden. This move is all about putting you in the driver's seat, letting you choose how you connect with others on the platform.
Google Unveils Separate Controls for Search History, Personalization
Google is giving you more control over your online experience by separating search history and personalization settings, allowing you to customize your Google Search services and Google Play experience like never before. You'll start seeing these changes in your Google Account over the next few days.
Wearables Expose Athletes to Data Abuse Risks
Imagine a coach scrutinizing an athlete's sleep and heart-rate logs to gauge their off-field behavior - a chilling invasion of privacy that's not as far-fetched as it sounds. As wearables become ubiquitous, athletes face growing risks of data abuse, from compromised privacy to unfair advantages in high-stakes competitions.
MacOS Update Exposes New Artifact for Tracing Digital Intent
The latest macOS update has introduced a game-changing digital trail: the App.MenuItem stream, which meticulously logs every menu selection you make, complete with exact timestamps. This new artifact reveals a detailed narrative of your interactions with the operating system interface.
Surveillance Firm Enhances License Plate Readers to Track Mobile Devices
Imagine a world where surveillance cameras can not only track your car's license plate, but also scan your phone, watch, and other Bluetooth devices - all without your knowledge. A new technology called SignalTrace, proposed by surveillance firm Leonardo, aims to make this unsettling reality a reality.
Signal Warns UK Plan to Scan Devices for Nude Images Threatens Global Surveillance
Signal is sounding the alarm on the UK's plan to scan devices for nude images, warning that it threatens global surveillance and undermines the trust that underpins private communications. The encrypted messaging platform is urging caution, saying the proposed mechanism is not only ineffective in keeping children safe, but also dangerously dystopian.
OpenAI Bolsters ChatGPT Security With New Controls
OpenAI has introduced Lockdown Mode for ChatGPT, a game-changing security control that limits the model's access to the web and external services, giving users and organizations handling sensitive data an added layer of protection. This new feature is now available to personal and self-serve business accounts, following its initial rollout for enterprise plans in February.
OpenAI Bolsters ChatGPT with Lockdown Mode to Curb Data Exfiltration Risks
OpenAI is stepping up ChatGPT's security game with Lockdown Mode, a powerful setting that limits connections to the web and external services to prevent data exfiltration - a game-changer for those handling sensitive information. This advanced feature is now rolling out to eligible accounts, offering stricter protection guarantees.
Brave Launches Paid Browser Stripping Monetization Features
Meet Brave Origin, a paid browser that strips away unnecessary features for a streamlined, private browsing experience. This minimalist edition is perfect for users who want Brave's renowned privacy without the extra integrations.
Proton Fortifies Defenses Against Cybercriminal Exploitation
Proton's end-to-end encryption ensures that even the company itself can't access your message contents or location, creating a fortress of trust and security for its users. This fundamental limit is a deliberate design choice, prioritizing user privacy and protection against cybercriminal exploitation.
Wi-Fi Sensing Technology Reveals Human Presence
Imagine being able to detect the presence of people in a room, simply by observing how radio waves bounce off them - it's a game-changing technology that's now a reality, thanks to innovative WiFi sensing research. By harnessing the power of WiFi signals, scientists can create a kind of invisible map, revealing not just the space, but the people within it.
Discord Deploys End-to-End Encryption on Voice, Video Calls
Big news for Discord users: the platform has just rolled out end-to-end encryption for all voice and video calls by default, giving you an extra layer of security and peace of mind when chatting with friends or colleagues. This major update is powered by the innovative DAVE protocol, designed to keep your conversations private and secure.
Mozilla Warns UK Against Breaking VPNs
Mozilla warns the UK that cracking down on VPNs won't solve the country's age-check conundrum, as these essential security tools are not a teenage loophole, but a vital part of online protection. By breaking VPNs, the UK risks undermining online security for all users.
Zero-Knowledge Proofs Evolve to Bypass Age-Verification Checks
As the digital landscape continues to shift, it's only a matter of time before you'll have to face the music - and the cameras - when it comes to age verification checks. But what's really behind these on-camera checks: protecting kids or creating a way for governments to control access to online platforms?
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Google and Apple Roll Out Cross-Platform RCS Encryption
Big news for messaging security: Apple and Google have just launched a beta rollout of end-to-end encrypted RCS messaging, allowing for more secure conversations between iPhone and Android users worldwide. This update enables encryption by default, marked with a lock icon, and is available to users with supported carriers and devices.
Apple and Google Boost Cross-Platform Messaging with End-to-End Encryption
Say goodbye to the green bubble blues! iPhone and Android users can now send end-to-end encrypted messages to each other, thanks to a game-changing collaboration between Apple and Google.
Apple Deploys End-to-End Encryption for RCS Messaging
Big news for messaging security: Apple just rolled out end-to-end encryption for RCS messaging in its latest iOS 26.5 update, giving users an extra layer of protection when chatting with friends and family across different devices and platforms.
Meta Reverses Instagram Encryption Stance
Meta has backtracked on its plan to introduce end-to-end encryption for Instagram messages, leaving direct messages stored and transmitted in plaintext, giving the company access to user conversations. This move reverses years of promotion for enhanced messaging security.
NHS Moves to Close-Source GitHub Repos Citing AI Security Risks
The NHS is taking steps to boost security by moving its public GitHub repositories to private access by May 11, amid concerns that AI-powered code analysis could be exploited to uncover sensitive information. This temporary measure aims to prevent unintended disclosure of source code and other critical details.
UK Kids Easily Circumvent Online Age Checks
The current online age checks are failing to protect UK kids, with 46% of children admitting they are easy to bypass, leaving them vulnerable to harmful content. Stronger action is needed from government and industry to safeguard young minds online.
Cybersecurity Pros Feel Undervalued as Pay Lags
Cybersecurity pros are feeling underappreciated and overworked, with over 75% not getting a pay rise last year and nearly half feeling undervalued. This disconnect is sparking dissatisfaction, with many considering a career move.
Proton CEO Warns Age Checks Threaten Online Anonymity
Proton CEO Andy Yen warns that mandatory online age checks could spell the end of anonymity, forcing every adult to surrender their ID just to access the internet. He argues that efforts to protect minors will inevitably sweep in adults, creating an ID checkpoint that threatens online freedom.