lorenzofb@infosec.exchange (@lorenzofb@infosec.exchange)
Real-time cyber historian of the late capitalist era @TechCrunch, writing about the intersection of hackers, human rights, and spies.
Posts about infosec, surveillance by day. 🍕, ⚽️, 🎸, 🎮 by night.
☎️ Signal: +1 917 257 1382 💻 Keybase/Telegram: @ lorenzofb ✉️ lorenzo@techcrunch.com
Previously: VICE Motherboard, Mashable, WIRED's Danger Room.
Post
-
NEW: A prominent Italian businessman was reportedly targeted with Paragon spyware, widening the surveillance scandal in Italy, according to local news reports.
NEW: A prominent Italian businessman was reportedly targeted with Paragon spyware, widening the surveillance scandal in Italy, according to local news reports.
Italian businessman's phone reportedly targeted with Paragon spyware | TechCrunch
The alleged targeting of prominent Italian businessman Francesco Gaetano Caltagirone now widens the Paragon spyware scandal in Italy to victims beyond journalists and activists.
TechCrunch (techcrunch.com)
-
Here's an updated list of all the technology ICE has in its arsenal to mass deport people.
Here's an updated list of all the technology ICE has in its arsenal to mass deport people.
We've added new sections on cell-site simulators and cellphone location data.
Here's the tech powering ICE's deportation crackdown | TechCrunch
From phone spyware and facial recognition to phone unlocking technology and databases and more, this tech powers Trump's deportation machine.
TechCrunch (techcrunch.com)
-
NEW: The predominantly English-speaking amorphous hacking group known as Scattered Spider/Lapsus$/etc has launched a website to publicize their victims and extort them.
NEW: The predominantly English-speaking amorphous hacking group known as Scattered Spider/Lapsus$/etc has launched a website to publicize their victims and extort them.
This is the first time the group has such a public presence, indicating an escalation in their strategy.
Hacking group claims theft of 1 billion records from Salesforce customer databases | TechCrunch
The hacking group claims to have stolen about a billion records from companies, including FedEx, Qantas, and TransUnion, who store their customer and company data in Salesforce.
TechCrunch (techcrunch.com)
-
NEW: Chinese tech giant Anker offered users of its popular Eufy cameras to upload videos of package and car thefts to train its AI systems in exchange for money.
NEW: Chinese tech giant Anker offered users of its popular Eufy cameras to upload videos of package and car thefts to train its AI systems in exchange for money.
At least a hundred users participated, but the company did not tell us the final numbers of the campaign. Eufy still has a similar initiative that does not offer money but other rewards.
Anker offered to pay Eufy camera owners to share videos for training its AI | TechCrunch
Hundreds of Eufy customers have donated hundreds of thousands of videos to train the company’s AI systems.
TechCrunch (techcrunch.com)
-
NEW: The U.K. government is reportedly once again requesting Apple build a backdoor so government officials can access end-to-end encrypted iCloud backups in the country.
NEW: The U.K. government is reportedly once again requesting Apple build a backdoor so government officials can access end-to-end encrypted iCloud backups in the country.
Last time this happened, Apple disabled iCloud's Advanced Data Protection, the opt-in feature that lets users encypt cloud backups.
UK government tries again to access encrypted Apple customer data: Report | TechCrunch
The U.K. Home Office is seeking access to Apple users’ encrypted iCloud backups for a second time, after an earlier attempt failed earlier this year.
TechCrunch (techcrunch.com)
-
NEW: A cyberattack has forced Japan's beer maker Asahi to suspend operations at its plants in the country since Monday.
NEW: A cyberattack has forced Japan's beer maker Asahi to suspend operations at its plants in the country since Monday.
For now, the company said it's experiencing a "system failure" but did not confirm "leakage of personal information or customer data to external parties."
Japan's beer-making giant Asahi stops production after cyberattack | TechCrunch
A day after one of Japan's biggest brewers, Asahi Group, announced it suspended production due to a cyberattack, the company said it has no timeline for its recovery.
TechCrunch (techcrunch.com)
-
Do I have anyone who follows me and works for PWC in cyber?
Do I have anyone who follows me and works for PWC in cyber?
-
Me planning my next trip to visit family in Meloni's Italy.
Me planning my next trip to visit family in Meloni's Italy.
-
I think the FBI should investigate Microsoft over Outlook, there is no way that the design, UI, and UX don't break several laws.
I think the FBI should investigate Microsoft over Outlook, there is no way that the design, UI, and UX don't break several laws.
-
NEW: The U.K.'s National Crime Agency announced an arrest linked to the ransomware attack against Collins Aerospace, which caused delays and disruptions at several European airports over the weekend.
NEW: The U.K.'s National Crime Agency announced an arrest linked to the ransomware attack against Collins Aerospace, which caused delays and disruptions at several European airports over the weekend.
The unnamed man is out on bail, and the agency said the investigation is “in its early stages and remains ongoing.”
UK arrests man linked to ransomware attack that caused airport disruptions across Europe | TechCrunch
RTX, the parent company of Collins Aerospace, confirmed in a legally required notice that the disruption was ransomware-related.
TechCrunch (techcrunch.com)
-
NEW: Jaguar Land Rover announced today that it will keep its factories shutdown for yet another week, at least until October 1, due to a cyberattack.
NEW: Jaguar Land Rover announced today that it will keep its factories shutdown for yet another week, at least until October 1, due to a cyberattack.
The company has still not committed to a date to resume operations.
Jaguar Land Rover to pause production until next week – at least | TechCrunch
After yet another extension, the shutdown caused by a cyberattack will last at least four weeks.
TechCrunch (techcrunch.com)
-
NEW: European airports are still facing disruptions for the fourth day in a row after the ransomware attack against check-in systems provider Collins Aerospace.
NEW: European airports are still facing disruptions for the fourth day in a row after the ransomware attack against check-in systems provider Collins Aerospace.
According to FlightRadar24, airports in Berlin, Brussels, Dublin, and London are seeing the vast majority of flights delayed as of this writing, with delays ranging between 26 minutes and an hour as of 4 p.m. CEST.
European airports still dealing with disruptions days after ransomware attack | TechCrunch
Four major European airports in Berlin, Brussels, Dublin, and London continue to have flight delays due to a cyberattack on Collins Aerospace, a provider of check-in systems.
TechCrunch (techcrunch.com)
-
NEW: EU cybersecurity agency ENISA says the airport disruptions across Europe this weekend were caused by a ransomware attack.
NEW: EU cybersecurity agency ENISA says the airport disruptions across Europe this weekend were caused by a ransomware attack.
The attack targeted Collins Aerospace and its check-in system called Muse.
EU cyber agency confirms ransomware attack causing airport disruptions | TechCrunch
A cyberattack targeting Collins Aerospace, a provider of airport check-in systems, sparked delays and disrupted flights across Europe over the weekend.
TechCrunch (techcrunch.com)
-
NEW: Jaguar Land Rover says it will pause production for another week due to a cyberattack, which will make it more than three weeks in total since it disclosed the hack.
NEW: Jaguar Land Rover says it will pause production for another week due to a cyberattack, which will make it more than three weeks in total since it disclosed the hack.
British media estimate the company is losing millions of pounds every week because of the shutdown. And suppliers are worried about going into bankruptcy.
Jaguar Land Rover to pause production for third week due to cyberattack | TechCrunch
The company owned by Tata Motors is estimated to be losing millions of pounds a week due to the shutdown.
TechCrunch (techcrunch.com)
-
The look and feel of iOS 26 reminds of that time I installed a ""macOS"" theme on my Ubuntu Jaunty Jackalope.
The look and feel of iOS 26 reminds of that time I installed a ""macOS"" theme on my Ubuntu Jaunty Jackalope.
-
I recapped all the tech that ICE is using to power its ruthless deportation operations.
I recapped all the tech that ICE is using to power its ruthless deportation operations.
Hat tip to everyone who's been doing great reporting on these companies and tools.
Here's the tech powering ICE's deportation crackdown | TechCrunch
From phone spyware and facial recognition to phone unlocking technology and databases and more, this tech powers Trump's deportation machine.
TechCrunch (techcrunch.com)
-
Everyone has their own threat models, so I don't want to make broad, sweeping recommendations here, but if you use Protonmail to talk to sources, you should read this story.
Everyone has their own threat models, so I don't want to make broad, sweeping recommendations here, but if you use Protonmail to talk to sources, you should read this story.
The way Protonmail handled this whole thing is quite bad. No transparency, dismissing the story as being "blown out of proportion."
-
NEW: The Israeli government has ordered the seizure of 187 crypto wallets it said belong to Iran's Islamic Revolutionary Guard Corps, or IRGC.
NEW: The Israeli government has ordered the seizure of 187 crypto wallets it said belong to Iran's Islamic Revolutionary Guard Corps, or IRGC.
Crypto analysis firm Elliptic said the wallets currently hold $1.5 million, but over time have received $1.5 billion.
Israel announces seizure of $1.5M from crypto wallets tied to Iran | TechCrunch
The Israeli government ordered the seizure of 187 wallets it said belong to the IRGC, which have over time received $1.5 billion in crypto, according to a blockchain analysis firm.
TechCrunch (techcrunch.com)
-
NEW: Apple launched a new security feature specifically to fight against spyware and zero-day exploit makers.
NEW: Apple launched a new security feature specifically to fight against spyware and zero-day exploit makers.
We spoke to a researcher who sells zero-days to the U.S. government, who thinks this will make their life much harder and raise the cost of developing and selling hacking tolls for iPhones.
“It’s not hack proof. But it’s the closest thing we have to hack proof. None of this will ever be 100% perfect. But it raises the stakes the most,” the researcher said.
Other cybersecurity experts agreed that this is a big deal, and can have a significant impact in making the new iPhones the most secure devices on the planet.
Apple's latest iPhone security feature just made life more difficult for spyware makers | TechCrunch
Apple launched a new security feature for iPhone 17 and iPhone Air designed to reduce the effect of memory corruption bugs, and in turn make spyware and zero-days more difficult to hack into iPhones.
TechCrunch (techcrunch.com)
-
The French government said Apple notified victims of a new spyware attack.
The French government said Apple notified victims of a new spyware attack.
If you received one of these notifications, and want to share your story, feel free to reach out.
France says Apple notified victims of new spyware attacks | TechCrunch
The French government says Apple sent out threat notifications to customers alerting them to spyware attacks earlier in September.
TechCrunch (techcrunch.com)