All CosmicBytez Labs articles tagged #Privacy, across news, security advisories, how-to guides, and projects.
Brave 1.94 adds free email aliases that forward to your real inbox, letting users hide their address from sites and block cross-site tracking.
Hackers breached Manchester Airports Group, exposing traveler emails, phone numbers, and vehicle data across three UK airports.
Meta will pay up to $18B to settle a multistate lawsuit alleging Facebook and Instagram were designed to drive compulsive use among minors.
The DOJ announced a $400M settlement with TikTok and ByteDance over COPPA violations, marking the largest children's privacy fine in U.S. history.
The Dutch DPA fined Uber €825M for GDPR violations after its algorithm suspended driver accounts without meaningful human review or transparent explanation.
ByteDance's TikTok will pay $400M to the U.S. DOJ to settle 2024 child privacy violations — $300M immediately, $100M deferred, with sweeping new compliance measures.
Separate digital personas and compartmentalization strategies help users defeat data broker profiling and protect their online privacy.
Polish authorities are investigating a breach at healthcare software firm MyDr that may have exposed personal data of up to 19 million patients.
Hackers stole shipping data including names, addresses, emails, and phone numbers from 14,000 Trezor customers via a breach at logistics firm ShipMonk.
Signal launched Automatic Key Verification on August 12, 2026, using key transparency audited by Cloudflare and Trail of Bits to defeat MITM attacks.
Google's Chrome anti-abuse systems blocked more than 7 billion unwanted notifications on Android per day during Q1 2026, using AI-powered detection to automatically revoke notification permissions from abusive websites.
A New Mexico judge ordered Meta to pay $567 million in a kids online safety case, creating a $420 million youth treatment fund for social media harms to minors.
South Korea's Personal Information Protection Commission has levied a KRW 53.979 billion ($39 million) fine against KT Corporation for data protection violations, marking one of the country's largest privacy enforcement actions against a telecom.
Origin Energy confirmed that customer data was exposed in a recent breach, as the company works to assess how many Australians are affected.
LG Electronics USA announced it will suspend Smart TV apps that enroll viewers' televisions into residential proxy networks — a move triggered by research revealing that more than 42% of webOS games and apps were silently turning LG TVs into always-on proxy nodes without user knowledge or consent.
Researchers at Guardio disclosed a now-patched vulnerability chain in the Adobe Acrobat Chrome extension dubbed HermeticReader, which could allow...
Spain's data protection agency AEPD has fined 23andMe approximately $3 million for cybersecurity failures that enabled the 2023 credential-stuffing breach...
As age verification mandates expand globally, on-device facial age estimation is emerging as a privacy-preserving alternative — processing biometric data...
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from 43 attorneys general that it failed to adequately protect customers'...
The WorldLeaks extortion group claims to have stolen 720 GB of data from Centers Laboratory, a healthcare testing and laboratory services provider,...
Google and Microsoft have removed ModHeader — a popular HTTP header editor with 1.6 million installs across Chrome and Edge — after researchers discovered...
Block, Inc. — the company behind Cash App — has agreed to pay $45 million to settle a bipartisan multi-state investigation alleging the fintech firm...
The Court of Justice of the European Union has dismissed Google's final appeal against a €4.1 billion antitrust fine, confirming that the company...
WhatsApp has begun global rollout of optional usernames, allowing over 3 billion users to connect without sharing their phone numbers — closing a major...
Starting August 3, 2026, Google will use IP addresses from UK, EEA, and Switzerland users for ad measurement and personalization — a reversal of its...
Opening a new social media account in the UK will soon require proving you are over 16 with a government ID upload or facial age scan, under a ban on...
A bankruptcy administrator has approved a $47 million settlement fund for roughly 7 million 23andMe customers whose genetic and health data was stolen by...
Kyushu Electric Power Co., Inc. has disclosed a physical security incident exposing private data of more than 10 million customers after a hard drive...
Fraudulent data breach disclosures were submitted to Maine's official breach notification portal and publicly posted before legitimacy could be verified,...
A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices — including always-on smart TVs…
California Attorney General Rob Bonta filed a lawsuit against 23andMe — now Chrome Holding Co. — over its failure to protect millions of customers'...
Deploy Pi-hole v6 as a network-wide DNS sinkhole backed by Unbound as a self-hosted recursive resolver — eliminating ads, trackers, and malware domains...
Microsoft is reversing course on a controversial Edge browser behavior that loaded all saved passwords into process memory in cleartext at startup — a...
The FTC will levy hefty fines and pursue investigations against platforms that fail to remove non-consensual intimate imagery, including AI-generated...
General Motors will pay $12.75 million to settle California allegations that it violated the California Consumer Privacy Act by collecting and selling...
General Motors has agreed to pay over $12 million to settle California privacy violations under the CCPA after sharing detailed driver behavior data —...
California regulators have issued a record $12 million settlement against General Motors for sharing OnStar driving behavior data with insurers without...
The European Commission has formally accused Meta of violating the Digital Services Act by failing to adequately protect children under 13 from accessing...
A high-severity Firefox vulnerability (CVE-2026-6770) exploits the internal ordering of IndexedDB database names to generate a stable 44-bit fingerprint...
Deploy a fully self-hosted, Bitwarden-compatible password manager using Vaultwarden on Docker with Caddy reverse proxy, automatic TLS, WebSocket...
Google removed over 8.3 billion policy-violating ads and suspended 24.9 million accounts in 2025, while simultaneously rolling out sweeping Android 17...
Citizen Lab has documented how an Israeli surveillance company called Cobwebs Technologies built an advertising-based global geolocation platform named...
ShinyHunters exploited compromised Okta SSO credentials to breach the Hims & Hers Zendesk customer support platform, exposing treatment category data for...
A critical unauthenticated information disclosure vulnerability in the Gardyn smart garden platform exposes all registered user account information via a...
Build a self-hosted WireGuard VPN server on Ubuntu for secure remote access — with NAT masquerading, DNS leak protection, QR-code client provisioning, and...
A Dutch court has ordered Elon Musk's xAI to stop generating nonconsensual nude images via Grok or face fines of €100,000 ($115,000) per day for...
The European Parliament voted 311 to reject an extension of CSAM scanning obligations for tech platforms, dealing a major blow to proposals that would...
This week's cybersecurity roundup covers supply chain attacks hitting CI/CD pipelines, long-running IoT botnets finally disrupted, the FBI's warrantless...
A cyberattack on French healthcare software vendor Cegedim Santé exposed 15.8 million patient records from 3,800 doctors, with leaked data including...
OpenAI confirmed that ChatGPT ads remain a U.S.-only pilot for Free and Go plan users, despite a global privacy policy update that alarmed international...
An unprotected MongoDB instance belonging to identity verification firm IDMerit left over 1 billion personal records — including SSNs, passport numbers,...
A 53MB source code leak from identity verification giant Persona reveals how routine age verification selfies feed into a surveillance system linking...
A misconfigured Google Firebase backend in the Chat & Ask AI app exposed 300 million private chatbot conversations from 25 million users, including...
The Netherlands' largest mobile network operator Odido has disclosed a data breach affecting 6.2 million customers, exposing names, addresses, bank...
The IRS faces legal action after improperly disclosing confidential tax information of 1.28 million individuals to DHS for immigration enforcement,...
South Korea's data protection authority has fined three LVMH luxury brands a combined $25 million for data breaches affecting millions of customers, with...
A hacker revealed 6.8 billion email addresses online on February 11, 2026, in one of the largest email database leaks in history, raising concerns about...
Set up a purpose-built OSINT workstation with Trace Labs VM, sock puppet management, browser isolation, VPN routing, and automated investigation workflows...
Substack CEO Chris Best disclosed a data breach on February 5 affecting approximately 700,000 users, after an unauthorized party accessed the platform...
Deploy Pi-hole for network-wide ad blocking and DNS security. Includes setup, configuration, upstream DNS options, and integration with encrypted DNS.
Telegram is investigating claims that a threat actor is selling data from 30 million users. The company denies any breach of its systems while the...
Deploy your own password manager with Vaultwarden (Bitwarden-compatible). Includes secure configuration, SSL setup, and backup procedures.