| https://www.reddit.com/user/gh0sti/ | |
| Pronouns | He/Him |
| Mastodon | https://infosec.exchange/@gh0sti |
| Github | https://github.com/gh0sti |
SCOOP: Apple says it's not aware of anyone using Lockdown Mode getting hacked with spyware, on all kinds of devices.
There have already been a couple of documented cases of Lockdown Mode stopping spyware attacks. And there's been one case where an advanced hacking toolkit was designed to bail out if it detected Lockdown Mode on the target device.
If you're worried about spyware, you should use turn this security feature on.
The tech giant's claim that it has not seen any successful spyware attacks targeting Apple devices with Lockdown Mode enabled comes amid a leak of hacking tools targeting users running devices with older software.
Ivory v2.5 is now available in the App Store!
What's new:
- Audio Playback (including support for posting audio files)
- Configure 4 Swipe Gestures for Posts
- Support for Viewing Rich Text Posts
- Various bug fixes.
Download the update here:
https://apps.apple.com/us/app/ivory-for-mastodon-by-tapbots/id6444602274
Loved this blog by @hatr and Jan Strozyk reflecting 10 years on from the Panama Papers, and how nerds in the newsroom who knew (or learned!) how to script, scrape, and build tools helped to transform modern journalism. Nowadays, handling and parsing data is an indispensable skill.
https://buttondown.com/readwrite/archive/edition-12-on-the-panama-papers-ten-years-later/
NEW: Security researchers have found another sophisticated hacking campaign against iPhone users.
This one is also by a Russian government group against Ukrainians, and involves both stealing personal data and potentially crypto.
And it raises the question: are iPhone hacks more common that we think?
On my flight back to the U.S. this week, I wrote some words about why age verification laws threaten the security and privacy of everyone on the internet. By requiring people to upload their IDs, governments are sleepwalking the world into an inevitable data disaster.
For my newsletter and blog ~ this week in security ~
Read online: https://this.weekinsecurity.com/papers-please-age-verification-laws-threaten-everyones-online-security-and-privacy/
Sign up for my weekly newsletter: https://this.weekinsecurity.com
It's absolutely insane to me that in this day and age a company would reject end-to-end encryption so that cops and feds can actively read people's messages. It also puts that same data at risk from hackers. But that's TikTok, under new U.S. ownership.
If you like my reporting, you might also like my free weekly cyber newsletter ~ this week in security ~ which packs in all the news you can use from the week, plus sections dedicated to good news and a reader-submitted cyber-cat. Goes out on Sundays by email & RSS. Newsletter archive & blog online. 🐈⬛
A new edition of ~ this week in security ~ is now out, featuring stories on: Ivanti's private equity cuts cost it security; Copilot summarizing confidential emails; ATM jackpotting hacks on the rise and netting hackers millions; Def Con bans Epstein-linked technologists from its conference; and much more.
Plus, a new two-for-one cyber-cat special, and good news in the happy corner.
Thanks so much for reading!
Read online: https://this.weekinsecurity.com/this-week-in-security-february-22-2026-edition/
Sign up/RSS: https://this.weekinsecurity.com
I've been writing ~ this week in security ~ almost every week for 8 years. It's a real joy to write and send out every Sunday, and enormously grateful for the support. The whole newsletter archive is on the site for your perusal, plus a bunch of blog posts (that I'm adding to!) for paying subscribers.
Zack Whittaker
Lorenzo Franceschi-Bicchierai
Ivory by Tapbots 
