Everyone has their own threat models, so I don't want to make broad, sweeping recommendations here, but if you use Protonmail to talk to sources, you should read this story. The way Protonmail handled this whole thing is quite bad. No transparency, dismissing the story as being "blown out of proportion."
The Intercept
Proton Mail Suspended Journalist Accounts at Request of Cybersecurity Agency
The journalists were reporting on suspected North Korean hackers. Proton only reinstated their accounts after a public outcry.
NEW: The two Harvard students who doxed random people with Meta Ray-Ban glasses are launching "always-on" AI-powered smart glasses that listen, record, and transcribe, everything happening around them. The glasses don't have an indicator that shows people around them that they are being recorded. [@evacide](
Hachyderm.io
evacide (@evacide@hachyderm.io)
2.36K Posts, 308 Following, 76.4K Followers · Director of Cybersecurity @EFF / Co-founder of @stopstalkerware / These are my opinions, not my ...
 ) is not a fan: "Normalizing the use of an always-on recording device, which in many circumstances would require the user to get the consent of everyone within recording distance, eats away at the expectation of privacy we have for our conversations in all kinds of spaces.”
TechCrunch
Harvard dropouts to launch 'always on' AI smart glasses that listen and record every conversation | TechCrunch
After developing a facial-recognition app for Meta’s Ray-Ban glasses and doxing random people, two former Harvard students are now launching a st...
NEW: Two hackers broke into the computer of a hacker allegedly working for the North Korean spy group known as "Kimsuky." The hackers then leaked a treasure trove of stolen data, exposing a North Korean spy operation against South Korean targets. “Kimsuky, you’re not a hacker. You are driven by financial greed, to enrich your leaders, and to fulfill their political agenda. You steal from others and favour your own. You value yourself above the others: You are morally perverted,” the two wrote in their Phrack magazine article. “You hack for all the wrong reasons.”
TechCrunch
Hackers breach and expose a major North Korean spying operation | TechCrunch
Two hackers broke into the computer of a North Korean government hacker and leaked its contents, offering a rare glimpse inside the secretive natio...
NEW: CloudFlare says it detected Perplexity scraping and crawling websites that explicitly block it from scraping them. Based on customers' complaints and its own experiments, the company says Perplexity is using "stealth" bots and changing its bots "user agent" to circumvent restrictions.
TechCrunch
Perplexity accused of scraping websites that explicitly blocked AI scraping | TechCrunch
Internet giant Cloudflare says it detected Perplexity crawling and scraping websites, even after customers had added technical blocks telling Perpl...
NEW: Security researchers and CISA warn that hackers are exploiting a flaw in the Signal clone TeleMessage, which could lead to them stealing "plaintext usernames, passwords, and other sensitive data." @npub1p0lc...ajg7, the researcher who analyzed it said they were "in disbelief at the simplicity of this exploit."
TechCrunch
Hackers are trying to steal passwords and sensitive data from users of Signal clone | TechCrunch
The bug in the modified messaging app can expose users' “plaintext usernames, passwords, and other sensitive data,” per GreyNoise.
NEW: Over the weekend, Jack Dorsey launched an open-source chat app called Bitchat, which he promised to be “secure” and “private.” He then later added a warning that the app not been tested or reviewed for security issues, asking people not to trust it as "it does not necessarily meet its stated security goals." Security researchers are already finding flaws in it.
TechCrunch
Jack Dorsey says his 'secure' new Bitchat app has not been tested for security | TechCrunch
Dorsey admitted that his new messaging app had not been reviewed or tested for security issues prior to its launch.
NEW: A U.S. government report says a Mexican drug cartel hacker spied on an FBI official to identify, track, and kill informants. The hacker also hacked into Mexico City's camera network to follow the FBI official as they met with “people of interest” for the cartel, according to the report.
TechCrunch
Mexican drug cartel hacker spied on FBI official's phone to track and kill informants, report says | TechCrunch
The watchdog revealed the 2018 incident as part of an audit of the FBI's counter-surveillance efforts.
NEW: The internet has collapsed in Iran on Wednesday, with one web monitoring firm saying the country is “now in the midst of a near-total national internet blackout.” “We can only see that the traffic dropped — the data doesn’t tell us why it dropped,” said David Belson, the head of data insight at internet infrastructure company Cloudflare.
TechCrunch
Internet collapses across Iran, say web-monitoring firms | TechCrunch
It’s unclear what is causing a “near-total” internet blackout in Iran.
NEW: Four months after releasing iOS 18.3.1, Apple has published details about a zero-day that it fixed at the time, but did not publicize. This is the iPhone zero-day used against the two European journalists targeted with Paragon spyware, according to Citizen Lab. It's unclear why Apple did not publish information about this zero-day until today.
TechCrunch
Apple fixes new iPhone zero-day bug used in Paragon spyware hacks | TechCrunch
The iPhone maker quietly updated a February security advisory to publicize a flaw that was used to hack at least two journalists in Europe.
NEW: Researchers found forensic evidence of Paragon's spyware on the iPhones of two journalists. One is Ciro Pellegrino, who works for Fanpage. The other is an unnamed prominent European journalist. They are the first confirmed cases of infection with Paragon's spyware "Graphite." This revelation show that the spyware scandal that, for now, seemed mostly focused on Italy may expand further in Europe.
TechCrunch
Researchers confirm two journalists were hacked with Paragon spyware | TechCrunch
The confirmation of two hacked victims further deepens an ongoing spyware scandal that, for now, appears largely focused on the Italian government.