Summary

  • This week in security and privacy: Wired rounds up the most interesting and important stories from the past week, including:
  • The US government’s Department of Government Efficiency (DOGE) is continuing to make cuts to the federal workforce, whilst facing ongoing lawsuits that allege it is in violation of the Watergate-inspired Privacy Act of 1974;
  • Staff cuts have been made at the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, while access to sensitive data has been gained;
  • The National Institute of Standards and Technology (NIST) is set to make mass layoffs, which will impact its cybersecurity standards and software vulnerability tracking work;
  • Multiple US government departments are considering bans on China-made TP-Link routers, following aggressive Chinese digital espionage campaigns;
  • Users of Google’s ad tech can target categories that shouldn’t be available under the company’s policies, including people with chronic diseases or those in debt, or national security “decision makers”;
  • Google has warned that Russian hackers are tricking Ukrainian soldiers into using a phishing attack that uses fake QR codes to exploit the Signal app; and
  • ByBit has revealed that thieves hacked its Ethereum-based holdings, making off with a record-breaking $1.

By Andy Greenberg, Lily Hay Newman

Original Article