NEW: Oracle is apparently dealing with two separate breaches — one affecting Oracle Cloud, and one Oracle Health — but the company refuses to say what's actually going on. Both public and employees are confused at this point, as there is little transparency. Here's a recap of what's happening.

TechCrunch

Oracle under fire for its handling of separate security incidents | TechCrunch

Oracle has denied at least one breach, despite evidence to the contrary, as it begins notifying healthcare customers of a separate patient data bre...

NEW: Valve removed a video game from Steam after users reported that its free demo was actually an infostealer malware. Very similar thing happened last month with another video game laced with malware.

TechCrunch

Valve removes video game listing suspected of being malware | TechCrunch

Valve removed a video game called Sniper: Phantom's Resolution from Steam after users reported that its free demo contained malware.

The official website of zero-day broker Zerodium has been updated in December of last year. There are no price lists nor any information anymore, just an email and a PGP public key. 🤔 If you know what's happening there...let me know.

ZERODIUM - The Premium Exploit Acquisition Platform

ZERODIUM is the leading exploit acquisition platform for premium zero-days and advanced cybersecurity research. Our platform allows security resear...

NEW: Citizen Lab researchers mapped out the infrastructure of spyware maker Paragon Solutions, and say they were able to identify servers likely used by customers in several countries: Australia, Canada, Cyprus, Denmark, Israel, and Singapore. Paragon’s executive chairman John Fleming said Citizen Lab shared in advance "very limited amount of information, some of which appears to be inaccurate." He declined to say what was inaccurate exactly.

TechCrunch

Researchers name six countries as likely customers of Paragon's spyware | TechCrunch

The Citizen Lab said it believes several governments may be customers of spyware maker Paragon Solutions.

I wish I was surprised by this. Morgan Marquis-Boire, a well known hacker who has faced multiple credible accusations of sexual violence, was secretly running a crypto security company. https://www.washingtonpost.com/technology/2025/03/14/cryptocurrency-unciphered-morgan-marquis-boire/

NEW: Lockdown Mode has become a must-use for dissidents, activists, and journalists. But Lockdown Mode's notifications are extremely baffling, and nobody understands what they are trying to say, or what is Lockdown Mode actually doing. Apple refused to provide any explanations. For the love of god, Apple, please fix this mess.

TechCrunch

Apple’s Lockdown Mode is good for security — but its notifications are baffling | TechCrunch

Lockdown Mode is an "extreme protection" feature that's good for at-risk users, but its notifications are increasingly confusing.

I am starting to think these Lockdown Mode notifications are even dumber and confusing than I thought. I get them all the time while I chat with someone, for example, after their first message. Apparently, they don't do anything because the conversation keeps going. (This happens with people who are in my contact list btw) But then, the other day I saw one one of these warnings, which named a person I wasn't messaging with at the time. Should I assume this means they were messaging me and Lockdown Mode prevented them? Does anyone know what these notifications actually mean? Or what they are supposed to tell a Lockdown Mode user?

NEW: Google fixed three zero-day vulnerabilities in Android that were used by authorities to unlock phones with Cellebrite forensic tools. The fixes come after Amnesty alerted Google, following the analysis of a Serbian student protester's phone.

TechCrunch

Researchers uncover unknown Android flaws used to hack into a student's phone | TechCrunch

Amnesty International said that Google fixed previously unknown flaws in Android that allowed authorities to unlock phones using forensic tools. On

NEW: Hacked crypto exchange Bybit is offering $140 million in bounties to anyone who can help locate and freeze the stolen ethereum. Bybit also disclosed preliminary results of investigations, which reveal hackers breached a developer’s device at a wallet platform Safe Wallet.

TechCrunch

Hacked crypto exchange Bybit offers $140M bounty to trace stolen funds | TechCrunch

Bybit has already paid more than $4 million to bounty hunters who helped trace and freeze some of the stolen funds.

Updates on Paragon scandal in Italy via Guardian: -Journalist union filed criminal complaint due to Meloni's government not answering Qs. <li>President of 🇮🇹 parliament invoked rule to not respond Qs claiming all unclassified info has been made public.</li> -Italy's foreign intelligence agency AISE, confirmed it is a customer of Paragon in Parliament, and that the the contract is suspended. Still lots of unanswered questions.

the Guardian

Journalists launch legal action against Italian government over spyware claims

Union submits criminal complaint to prosecutors as ministers refuse to answer questions about alleged hacks