Also, hackers publish RaidForum user data, Google's $180k Chrome bug bounty, and this week's vulnerabilities infosec in brief Japanese automaker Toyota is again apologizing for spilling customer records online due to a misconfigured cloud environment – the same explanation it gave when the same thing happened a couple of weeks …

Also: iSpoof no more, Edmodo fined more than it can pay, UK is #1 (in CC theft), and the week's critical vulns security in brief The fallout from an eight-month-old cyber attack on a county in Long Island, New York has devolved into mud-slinging as leaders try to figure …

File-stealing nasty in my Play store? Preposterous!!1 Google Play has been caught with its cybersecurity pants down yet again after a once-legit Android screen-and-audio recorder app was updated to include malicious code.... [...]

File-stealing nasty in my Play store? Preposterous!!1 Google Play has been caught with its cybersecurity pants down yet again after a once-legit Android screen-and-audio recorder app was updated to include malicious code that listened in on device microphones.... [...]

But don't worry – we know it was deleted. Hmm. How would you know that? Dish Network has admitted that a February cybersecurity incident and associated multi-day outage led to the extraction of data on nearly 300,000 people, while also appearing to indirectly admit it may have paid cybercriminals …

Also, more OEM Android malware, Google's bug reports (mostly) ditch CVEs, and this week's critical vulns in brief Google has settled another location tracking lawsuit, yet again being fined a relative pittance.... [...]

Not the first time Uncle Sam has had the wheels come off its IT systems A US Department of Transportation computer system used to reimburse federal government employees for commuting costs somehow suffered a security breach that exposed the personal info for 237,000 current and former workers.... [...]

Also: 3D printing gun mods = jail time; France fines Clearview AI for ignoring fine; this week's critical vulns, and more in brief Japanese automaker Toyota has admitted yet again to mishandling customer data – this time saying it exposed information on more than two million Japanese customers for the past …

We'll believe our DMs are secure when someone provides proof, thanks Updated Twitter has rolled out some quality of life updates for direct messages on the platform, and CEO Elon Musk reckons the site is to start encrypting DMs, beginning today, without providing proof that's the case.... [...]

We'll believe our DMs are encrypted when someone provides proof, thanks Updated Twitter has rolled out some quality of life updates for direct messages on the platform, and CEO Elon Musk reckons the site is to start encrypting DMs, beginning today, without providing proof that's the case.... [...]

Also, Capita's buckets are leaking, ransomware attackers deliver demands via emergency alert, and this week's critical vulns in brief We'd say you'll never guess which telco admitted to a security breakdown last week, but you totally will: T-Mobile US, and for the second time (so far) this year.... [...]

Deals between Zuckercorp + FTC in 2012 and 2020 are being ignored, so time to get stricter, says commish The US Federal Trade Commission is preparing to take action against Facebook parent company Meta for a third time over claims it failed to protect user privacy, as required under a …

Also: Your Salesforce Community site might be leaking; a new CPU side-channel; and this week's critical vunls in brief You may have heard news this week that Google is finally updating its authenticator app to add Google account synchronization. Before you rush to ensure your two-factor secrets are safe …

OT firms construct handy early-warning info-sharing system RSA Conference A group of some of the largest operational technology companies are using this year's RSA Conference as an opportunity to launch an open source early-threat-warning system designed for OT and industrial control systems (ICS) environments.... [...]

Also, Finland sentences CEO of breach company to prison (kind of), and this week's laundry list of critical vulns In Brief We thought it was probably the case when the news came out, but now it's been confirmed: The X_Trader supply chain attack behind the 3CX compromise last month …

Also, Finland sentences CEO of breach company to prison (kind of), and this week's laundry list of critical vulns In Brief We thought it was probably the case when the news came out, but now it's been confirmed: The X_Trader supply chain attack behind the 3CX compromise last month …

Why? Well, think of the children, of course An international group of law enforcement agencies are urging Meta not to standardize end-to-end encryption on Facebook Messenger and Instagram, which they say will harm their ability to fight child sexual abuse material (CSAM) online.... [...]

Chocolate Factory can afford some staples now, or? Six years after a jury decided otherwise, Google has convinced an appeals court to reverse a $20 million judgment against the web giant after Chrome infringed some patents.... [...]

Also: Tech players spin up white hat protection, this week's critical bugs, and more In brief Google on Friday released an emergency update for Chrome to address a zero-day security flaw.... [...]

Pegasus, pssh, you so 2000-and-late Malware reportedly developed by a little-known Israeli commercial spyware maker has been found on devices of journalists, politicians, and an NGO worker in multiple countries, say researchers.... [...]

Plus: KFC, Pizza Hut owner spills more beans on ransomware hit... latest critical flaws... and more In Brief More than 40 percent of surveyed IT security professionals say they've been told to keep network breaches under wraps despite laws and common decency requiring disclosure.... [...]

How's the saying go? $50m here, $50m there, pretty soon you're talking real money The liquidators picking over the remains of FTX have released their first formal report into Sam Bankman-Fried's imploded empire – and it somehow appears things are worse than feared.... [...]

Great, more company for Stadia, Duo and pals in the graveyard Owners of Dropcam security cameras and Nest Secure systems have been given an unwelcome deadline from Google: their smart home products will be shut off April 8 next year.... [...]

Plus: Substack shanked by bitter Twitter? The chunk of internal source code Twitter released the other week contains a "shadow ban" vulnerability serious enough to earn its own CVE, as it can be exploited to bury someone's account of sight "without recourse."... [...]

ALSO: DJI forgets the 'B' in 'BCC,' and this week's critical known exploits In Brief The principal of a Florida science and technology charter school has resigned after allegedly writing a $100,000 check to an Elon Musk impersonator using school funds.... [...]