| Newsletter | https://this.weekinsecurity.com |
| TechCrunch | https://techcrunch.com/author/zack-whittaker |
Your doctor or therapist might be using AI recording to transcribe your patient notes. Two privacy experts have nine good reasons why you should decline and opt-out.
Some words by me: https://this.weekinsecurity.com/why-your-doctors-ai-recorder-can-be-bad-for-your-health-and-privacy/
New, by me: App and website hosting giant Vercel says some of its customers had data stolen *prior* to its recent hack, suggesting that the company's security incident is far broader than first known.
Vercel also said it's identified additional customers who had data compromised.
NEW: At least two surveillance vendors are believed to be abusing access to at least three telecommunication companies in an effort to tap people's location data on behalf of their government customers.
The phone companies include one in Israel, one in the U.K., and one in Jersey (Channel Island).
I'll save you a click, but toy maker giant Hasbro is *still* down after a cyberattack on March 28. The company said in an 8-K filing today that the "unauthorized access has been contained and the Company is making progress in fully restoring its systems and operations."
https://www.sec.gov/ix?doc=/Archives/edgar/data/46080/000004608026000016/has-20260423.htm
NEW: Apple fixed the bug that law enforcement agencies, like the FBI, were taking advantage of to extract chat messages that had been deleted or disappeared automatically.
Until now the iPhone stored deleted or disappered messages in a database, allowing authorities to access them with forensic tools.
New: Cosmetics giant Rituals has confirmed a data breach involving its customer membership database. Won't say how many customers had personal information stolen (names, addresses, phone numbers, and more) but its website says it has 41M+ total customers.
Breach affects EU, UK and US customers.
U.K. intelligence says at least 100 countries now have access to government spyware, up from around 80 countries in 2023. The rise shows that spyware continues to proliferate and that the bar to obtaining spyware is lower.
The U.K.'s cybersecurity chief warned that U.K. businesses and critical infrastructure are underestimating the threat from spyware attacks and other cyberthreats, with more governments having access to the powerful surveillance technology than ever.
Lorenzo Franceschi-Bicchierai
Fesshole 🧻
TechCrunch