Privacy

The Russian internet watchdog, Roskomnadzor, has reportedly excluded WhatsApp domains from the National Domain Name System, making the service accessible primarily through VPNs.

The House's version of the Kids Online Safety Act was criticized by a bipartisan group of 40 state attorneys general for having inadequate protections ensuring minors' safety online, reports The Record, a news site by cybersecurity firm Recorded Future.

A researcher known as "Q Continuum" detailed how these extensions, often disguised as harmless tools, request access to sensitive browsing history without clear justification.

Discord has been criticized over its decision to introduce AI-based age verification for viewing adult content that requires the submission of video selfies and government IDs following an October third-party breach that compromised 70,000 Discord users' government IDs, reports Ars Technica.

The new Aadhaar app allows users to share limited personal information, such as age verification, with various services including hotels, workplaces, and payment platforms.

The breaches occurred due to misconfigured Firebase instances within the apps, which lacked proper authentication and access controls, leaving databases exposed, Cybernews researchers found.

The compromised data includes transaction records for various tracking and monitoring apps, such as Geofinder, uMobix, Peekviewer, and Xnspy, all supplied by a Ukrainian company identified as Struktura, which also operates under the name Ersten Group.

CyberScoop reports that the Department of Homeland Security's alleged abuse of facial recognition tools and other biometric technologies has prompted the DHS Office of the Inspector General to launch an audit into the privacy practices of the agency, with the probe confirmed to initially focus on the department's Immigration and Customs Enforcement and the Office of Biometric Identity Management sub-components.