Privacy

TechCrunch reports that Vietnamese mobile spyware app TheTruthSpy, which has rebranded to PhoneParental, is impacted by a critical security flaw, which could be exploited to facilitate user account hijacking and the subsequent theft of victims' information.

The UK backed off after privacy advocates sounded the alarm bell about vulnerabilities caused by allowing backdoors into encryption.

CyberScoop reports that the Federal Communications Commission's combined $92 million penalty imposed on T-Mobile and Sprint over customer geolocation data sale to third parties has been unanimously decided to be proper by the U.S.

This spyware allows cybercriminals to remotely access infected systems, enabling them to steal sensitive information such as passwords and credit card details.

The court found that the use of spyware for investigations into less severe crimes posed a significant intrusion into privacy. 

Experts say attacks on retailers continue via social engineering with focus on data exfiltration.

A report from Insikt Group has uncovered fresh infrastructure linked to spyware maker Candiru, indicating ongoing spyware operations tied to DevilsTongue malware, reports The Record, a news site by cybersecurity firm Recorded Future.

Chanel U.S. customer data stolen in Salesforce-linked breach tied to social-engineering attacks.