Comcast Adds Motion Detection to Wireless Routers, Shares Data with Third Parties
Comcast has added WiFi-based motion detection to its routers. The feature can share motion data with third parties, including law enforcement.
VPN & PrivacyThreat Intelligence Feed
-
-
Novocure Data Breach Exposes Records of 1,400 Cancer Patients
Novocure disclosed a mid-August cyberattack exposing over 1,400 U.S. patient records and employee contact data. No medical devices were accessed.
Threats -
Cronos Blockchain Restarts After $74 Million Tectonic Exploit
A price-manipulation attack on Tectonic drained $74 million in borrowed assets. Cronos halted and restored the blockchain to a pre-exploit state.
Tools -
Two RCE Flaws Found in Unitree G1 EDU Humanoid Robot
Two root RCE vulnerabilities in the Unitree G1 EDU robot allow network-adjacent and BLE-based code execution. No confirmed fixed firmware version exists.
VPN & Privacy -
Two Alleged TeamPCP Hackers Arrested in Australia
Australian Federal Police arrested two Western Australia men linked to TeamPCP, a cybercrime group behind a sweeping software supply chain attack campaign.
Guides -
Android Car Head Units Hit by Supply-Chain Proxy Botnet Attack
A supply-chain attack on Android car head units uses a legitimate update app to spread malware that builds a proxy botnet or commits ad fraud.
VPN & Privacy
Analysis & Guides
Threats
Hardware Makers Integrate Post-Quantum Cryptography Into Chips
Intel, Nvidia, and IBM are embedding post-quantum cryptography into hardware. Enterprises are urged to act now against harvest-now, decrypt-later attacks.
Guides
ToxicPanda 2.0 and GoldDigger Expand Android Banking Malware Campaigns
ToxicPanda 2.0 adds 167 remote commands and targets 349 financial institutions. GoldDigger expands to South Africa and the U.K. via fake airline and retail apps
VPN & Privacy
Comcast Xfinity Shield Uses WiFi Signals as Home Motion Detectors
Comcast's new Xfinity Shield platform uses existing WiFi signals to detect motion inside homes. Privacy questions remain over data retention and third-party dis
Guides
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges for Self-Managed Users
A critical GitLab flaw rated CVSS 9.4 requires no authentication to exploit. Self-managed users should patch immediately or restrict GraphQL access.
Guides
LLMs and Contextual Integrity: Two Research Papers
Two new papers examine how LLMs fail to control sensitive information flow based on context, and how reasoning and reinforcement learning may help.
Tools
Ransom Busters Affiliate Charges Victims to Delete Stolen Ransomware Data
A ransomware affiliate called Ransom Busters is charging victims $20,000–$60,000 to delete their stolen data, while posing as a helpful third party.
Guides
AmnesiaStealer macOS Malware Hijacks Browser Sessions via Remote Control
AmnesiaStealer is a new macOS infostealer distributed via ClickFix attacks. It clones browser profiles and gives attackers live, interactive control of authenti
Threats
Bruce Schneier Upcoming Speaking Engagements: Fall 2026
Bruce Schneier has several public speaking engagements scheduled for fall 2026, spanning security conferences, festivals, and civic events across North America.
Tools
DecryptAds Reveals Who Is Tracking You Across Websites and Apps
A free service called DecryptAds scrapes public adtech files to show which companies track users across websites and apps, flagging high-risk ad partners.