gh0sti 

@gh0sti
89 Followers
202 Following
2.6K Posts
Tech nerd/Sys Admin/Security Enthusiast. Father to 3 and never sleeping again.
Reddithttps://www.reddit.com/user/gh0sti/
PronounsHe/Him
Mastodonhttps://infosec.exchange/@gh0sti
Githubhttps://github.com/gh0sti

NEW: Security researchers have found another sophisticated hacking campaign against iPhone users.

This one is also by a Russian government group against Ukrainians, and involves both stealing personal data and potentially crypto.

And it raises the question: are iPhone hacks more common that we think?

https://techcrunch.com/2026/03/18/russians-caught-stealing-personal-data-from-ukrainians-with-new-advanced-iphone-hacking-tools/

Russians caught stealing personal data from Ukrainians with new advanced iPhone hacking tools | TechCrunch

A suspected group of Russian government hackers was caught targeting Ukrainians with new iPhone hacking tools designed for espionage and potentially to steal crypto.

TechCrunch

On my flight back to the U.S. this week, I wrote some words about why age verification laws threaten the security and privacy of everyone on the internet. By requiring people to upload their IDs, governments are sleepwalking the world into an inevitable data disaster.

For my newsletter and blog ~ this week in security ~

Read online: https://this.weekinsecurity.com/papers-please-age-verification-laws-threaten-everyones-online-security-and-privacy/

Sign up for my weekly newsletter: https://this.weekinsecurity.com

Papers, please: Age verification laws threaten everyone's online security and privacy

Laws that require adults to upload their driver's licenses or passports to access apps, websites, and VPNs will make the entire web less safe.

~this week in security~

It's absolutely insane to me that in this day and age a company would reject end-to-end encryption so that cops and feds can actively read people's messages. It also puts that same data at risk from hackers. But that's TikTok, under new U.S. ownership.

https://www.bbc.com/news/articles/cly2m5e5ke4o

TikTok says it won't encrypt DMs claiming it puts users at risk

TikTok tells the BBC it won't join rival platforms such as WhatsApp and Messenger in using end-to-end encryption.

If you like my reporting, you might also like my free weekly cyber newsletter ~ this week in security ~ which packs in all the news you can use from the week, plus sections dedicated to good news and a reader-submitted cyber-cat. Goes out on Sundays by email & RSS. Newsletter archive & blog online. 🐈‍⬛

https://this.weekinsecurity.com

~this week in security~

a weekly cybersecurity newsletter by Zack Whittaker, plus articles and more.

~this week in security~

A new edition of ~ this week in security ~ is now out, featuring stories on: Ivanti's private equity cuts cost it security; Copilot summarizing confidential emails; ATM jackpotting hacks on the rise and netting hackers millions; Def Con bans Epstein-linked technologists from its conference; and much more.

Plus, a new two-for-one cyber-cat special, and good news in the happy corner.

Thanks so much for reading!

Read online: https://this.weekinsecurity.com/this-week-in-security-february-22-2026-edition/

Sign up/RSS: https://this.weekinsecurity.com

this week in security — february 22 2026 edition

Ivanti cuts cost security, Copilot AI bug summarized confidential emails, ATM jackpotting hacks on the rise, surveillance firms tapping vehicle data, and more.

~this week in security~

I've been writing ~ this week in security ~ almost every week for 8 years. It's a real joy to write and send out every Sunday, and enormously grateful for the support. The whole newsletter archive is on the site for your perusal, plus a bunch of blog posts (that I'm adding to!) for paying subscribers.

https://this.weekinsecurity.com

~this week in security~

a weekly cybersecurity newsletter by Zack Whittaker, plus articles and more.

~this week in security~

Prosecutors have confirmed for the first time that Peter Williams, the former boss of L3Harris' Trenchant unit (which makes hacking and surveillance tools for the U.S. govermment and its allies), sold the company's exploits to a Russian broker that were capable of accessing "millions of computers and devices" around the world.

Williams, who pleaded guilty, is expected to be sentenced in the next two weeks.

https://techcrunch.com/2026/02/11/doj-says-trenchant-boss-sold-exploits-to-russian-broker-capable-of-accessing-millions-of-computers-and-devices/

DOJ says Trenchant boss sold exploits to Russian broker capable of accessing 'millions of computers and devices' | TechCrunch

The former boss of the L3Harris-owned hacking and surveillance tools maker Trenchant faces nine years in prison for selling several exploits to a Russian broker, which counts the Russian government among its customers.

TechCrunch

For my newsletter and blog, I wrote about how Apple's Lockdown Mode, once billed as an "extreme" security protection for iPhones, iPads, Macs and Watches, has passed a major real-world test by blocking the feds from accessing a journalist's phone.

Free to read; with additional words, advice, and guidance for paying subscribers: https://this.weekinsecurity.com/apple-lockdown-mode-once-an-extreme-security-protection-now-a-necessity-for-americans/

Sign up/RSS for the weekly newsletter: https://this.weekinsecurity.com

Apple's Lockdown Mode: Once an 'extreme' security protection, now a necessity for Americans

An optional "extreme" security feature that Apple has baked-in to modern iPhones, iPads, Macs, and Watches has passed a significant real-world test.

~this week in security~