China Hacked Downing Street Phones For Years

An anonymous reader quotes a report from The Telegraph: China hacked the mobile phones of senior officials in Downing Street for several years, The Telegraph can disclose. The spying operation is understood to have compromised senior members of the government, exposing their private communications to Beijing. State-sponsored hackers are known to have targeted the phones of some of the closest aides to Boris Johnson, Liz Truss and Rishi Sunak between 2021 and 2024. It is unclear whether the hack included the mobile phones of the prime ministers themselves, but one source with knowledge of the breach said it went “right into the heart of Downing Street.”

Intelligence sources in the US indicated that the Chinese espionage operation, known as Salt Typhoon, was ongoing, raising the possibility that Sir Keir Starmer and his senior staff may also have been exposed. MI5 issued an “espionage alert” to Parliament in November about the threat of spying from the Chinese state. […] The attack raises the possibility that Chinese spies could have read text messages or listened to calls involving senior members of the Government. Even if they were unable to eavesdrop on calls, hackers may have gained access to metadata, revealing who officials were in contact with and how frequently, as well as geolocation data showing their approximate whereabouts.


Read more of this story at Slashdot.

Reddit Lawyers Force Founder to Redact ‘WallStreetBets’ From Miami Event

Reddit has forced Jaime Rogozinski, the founder of infamous r/WallStreetBets, to strip the WallStreetBets name from an upcoming Miami conference after legal threats citing trademark rights. According to a press release, it’s the “first known case of a social media company enforcing trademark control over a user-created community.” From the report: After years of litigation, courts ultimately sided with Reddit in a decision now referred to as the “Rogozinski Ruling,” a precedent that grants platforms broad authority to assert trademark ownership over user-created communities. That ruling now forms the basis for Reddit’s demand that the words “WallStreetBets” be physically removed from the event. “They aren’t afraid of the name being used,” said Rogozinski. “If they were, they’d have to sue the internet. What they’re afraid of is the creator hanging out with his creation. They’re afraid of the community’s independence. And they’re afraid it’s evolved into something bigger than a subreddit.”

The irony is difficult to ignore. The original subreddit counts around three million subscribers, while conservative estimates place more than seven million WallStreetBets participants spread across other platforms. For a movement that built its reputation confronting corporate overreach, Reddit’s decision to extend its authority beyond the confines of its web-based platform, reaching into real-world gatherings to police culture it did not create, risks stirring a hornet’s nest with a long memory and a track record of collective action.

The event formerly known as WallStreetBets Live, will proceed as scheduled on January 28-30 in Miami. In compliance with Reddit’s demands, all references to the name will be physically redacted on-site. “Reddit’s lawyers did one thing right,” Rogozinski continued. “They proved exactly why we need a decentralized future. This event has become a live case study in what’s broken about modern social media. Platforms can deplatform creators, and now, with courts backing them, they can appropriate what users build.”


Read more of this story at Slashdot.

Challenger+ T3217 Packages 8-bit ATtiny3217 in a Compact, Battery-Ready Board

The Challenger+ T3217 is a compact development board based on Microchip’s ATtiny3217, combining the tinyAVR 1-series platform with a small, battery-ready form factor for low-power embedded applications. The board is based on the ATtiny3217, an 8-bit AVR microcontroller running at up to 20 MHz from its internal oscillator. It integrates 32 KB of Flash, 2 […]

Apple Launches AirTag 2 With Improved Range, Louder Speaker

Apple has launched a new AirTag 2 that features improved range, a speaker that’s 50% louder, and expanded Apple Watch-based tracking. Pricing stays the same at $29 (or $99 for four). 9to5Mac reports: The new AirTag comes with an upgraded second-generation Ultra Wideband chip for improved range, including when using Precision Finding. From Apple Newsroom: “Apple’s second-generation Ultra Wideband chip — the same chip found in the iPhone 17 lineup, iPhone Air, Apple Watch Ultra 3, and Apple Watch Series 11 — powers the new AirTag, making it easier to locate than ever before. Using haptic, visual, and audio feedback, Precision Finding guides users to their lost items from up to 50 percent farther away than the previous generation. And an upgraded Bluetooth chip expands the range at which items can be located. For the first time, users can use Precision Finding on Apple Watch Series 9 or later, or Apple Watch Ultra 2 or later, to find their AirTag, bringing a powerful experience to the wrist.”

Another key upgrade with the new AirTag is an improved speaker, which should also make the accessory easier to find. Apple says: “With its updated internal design, the new AirTag is 50 percent louder than the previous generation, enabling users to hear their AirTag from up to 2x farther than before.” Apple also touts privacy and security improvements with the new AirTag: “Designed exclusively for tracking objects, and not people or pets, the new AirTag incorporates a suite of industry-first protections against unwanted tracking, including cross-platform alerts and unique Bluetooth identifiers that change frequently.”


Read more of this story at Slashdot.

TikTok Alternative ‘Skylight’ Soars To 380K+ Users After TikTok US Deal Finalized

Skylight, an open-source, TikTok-style video app built on the AT Protocol, surged past 380,000 users after last week’s shake-up around TikTok’s U.S. ownership and privacy concerns. TechCrunch reports: Launched last year and backed by Mark Cuban and other investors, Skylight’s mobile app is built on the AT Protocol, the technology that also powers the decentralized X rival Bluesky, which now has north of 42 million users. Skylight, co-founded by CEO Tori White and CTO Reed Harmeyer, offers a built-in video editor; user profiles; support for likes, commenting, and sharing; and the ability for community curators to create custom feeds for others to follow. The app now has over 150,000 videos uploaded directly to the platform. It can also stream videos from Bluesky because of its AT Protocol integration.

Harmeyer said Saturday that 1.4 million videos were played on the app the day before, up 3x over the past 24 hours. The app had also seen sign-ups increase more than 150%. Other noteworthy stats include over a 50% increase in returning users, over 40% rise in video played on average, and over 100% increase in posts created. This surge was likely triggered by concerns over TikTok’s change in ownership and its unfortunately timed technical glitches. […] Over the weekend, Skylight’s CEO, Tori White, said the app added around 20,000 new users and is continuing to grow. So far this January, the app has seen around 95,000 monthly active users. “We’ve seen what happens when one person dictates what’s pushed into people’s feeds,” White told TechCrunch. “Not only does it harm a creator’s connection with their followers, but the entire health of the platform. That’s why we built Skylight Social on open standards. We wanted creator and user power to be guaranteed by the technology. Not an empty promise, but an irrevocable right.”


Read more of this story at Slashdot.

Microsoft’s Latest AI Chip Claims Performance Edge Over Amazon and Google

An anonymous reader quotes a report from GeekWire: Microsoft on Monday announced Maia 200, the second generation of its custom AI chip, claiming it’s the most powerful first-party silicon from any major cloud provider. The company says Maia 200 delivers three times the performance of Amazon’s latest Trainium chip on certain benchmarks, and exceeds Google’s most recent tensor processing unit (TPU) on others. The chip is already running workloads at Microsoft’s data center near Des Moines, Iowa. Microsoft says Maia 200 is powering OpenAI’s GPT-5.2 models, Microsoft 365 Copilot, and internal projects from its Superintelligence team. A second deployment at a data center near Phoenix is planned next.

It’s part of the larger trend among cloud giants to build their own custom silicon for AI rather than rely solely on Nvidia. […] The company says Maia 200 offers 30% better performance-per-dollar than its current hardware. Maia 200 also builds on the first-generation chip with a more specific focus on inference, the process of running AI models after they’ve been trained. […] Microsoft is also opening the door to outside developers. The company announced a software development kit that will let AI startups and researchers optimize their models for Maia 200. Developers and academics can sign up for an early preview starting today.


Read more of this story at Slashdot.

Man Manages To Build A Functional LEGO Typewriter

Inspired by LEGO’s 2021 typewriter set, which did not type, Youtuber Koenkun Bricks took it upon himself to make a version that actually works. And it does, just not how a traditional typewriter does. The mechanism is very impressive, and I’m blown away (FULL DISCLOSURE: I am like a dandelion seed) by the ingenuity. If somebody asked me to make a functional typewriter out of LEGO I’d tell them to give me three days. Then on the third day when they came to see it they’d realize by the uncollected mail and dirty dishes in the sink that I skipped town immediately after telling them to give me three days.

California Tech CEO and EV Pioneer Arrested, Accused of Murder

California tech executive Gordon Abas Goodarzi has been arrested and charged with murder in the death of his estranged wife, Aryan Papoli, whose body was found last November down an embankment off Highway 138 in San Bernardino County. Authorities initially believed the injuries were consistent with a fall, but the case was later ruled a homicide following a months-long investigation by the San Bernardino County Sheriff’s Department. “Arrest records show that Goodarzi is currently in custody without bail and faces a murder charge and that he is set to appear in court Monday,” reports SFGATE. From the report: Goodarzi, a California tech executive with ties to BattleBots, is publicly listed as the president and CEO of Magmotor, which describes itself as a “proud” supporter of the combat robot community and claims to support several teams each year. According to his LinkedIn, Goodarzi also previously worked as a research affiliate at UCLA’s B. John Garrick Institute for the Risk Sciences since 2023.

Originally from Iran, Papoli and Goodarzi settled in Los Angeles County’s verdant Rolling Hills community because of its tranquility and natural beauty, Papoli previously wrote. […] She described her husband, Goodarzi, as a pioneer in the world of renewable energy, developing both electric and hybrid vehicles since the 1980s. According to Papoli, he also worked as the technical director at Hughes Electronics, which developed and manufactured the EV1, an early iteration of the electric car, in the 1990s.


Read more of this story at Slashdot.

People are uninstalling TikTok and downloading an indie competitor

TikTok’s newly formed US entity is off to a very bumpy start. As the app continues to face technical issues affecting the recommendation algorithm, view counts and other features, TikTok is also seeing a wave of frustrated users uninstalling it, according to new data.

Analytics firm Sensor Tower, which tracks downloads and other app store-related metrics, told CNBC that there has been a 150 percent rise in uninstalls of the TikTok app in the United States compared with the last three months. An analyst at Sensor Tower told Engadget that TikTok’s US daily active users (DAUs) have increased about 2 percent in the same time period, and are flat week-over-week. TikTok has blamed a power outage at a data center for causing issues, but hasn’t said when users can expect a fix or explained how a power outage could be responsible for nuking users’ video views or drastically changing their recommendation algorithm. 

At the same time, an independent app called UpScrolled has seen a surge in interest over the last few days. The app is currently the ninth most-downloaded app in the US App Store and the second most popular social app (Meta’s Threads is currently in the number one spot for social apps). The app has also reached the top five in the UK and Australian app stores. In the United States, its sudden popularity seems to be closely tied to recent changes at TikTok. 

UpScrolled has seen 41,000 total downloads between Thursday (the day the US joint venture was formalized) and Saturday, according to estimates from App Figures. The app, which was first released last June, has been downloaded about 140,000 times between Apple and Google’s app stores, according to App Figures. Prior to last Thursday, the app was averaging less than 500 downloads a day, according to the company. The rapid increase in downloads has apparently caused some issues for the company which asked users to “bear with us” on Monday.

Well, this is new…
You showed up so fast our servers tapped out. Frustrating? Yes. Emotional? Also yes.
We’re a tiny team building what Big Tech stopped being. Right now we’re scaling on caffeine to keep up with what YOU started.
Bear with us. We’re on it. pic.twitter.com/OAlYcN6t5q

— UpScrolled (@realUpScrolled) January 26, 2026

Created by an Australian developer, UpScrolled looks a bit like Instagram. Users can share photos and shortform videos. The app defaults to a chronological “following” feed, though it does also recommend content to users. The app is “privately funded by its founder, Issam Hijazi, together with a small group of individual investors who share our mission and values,” according to an FAQ on UpScrolled’s website. It currently has no ads, though the company says it “probably” will in the future. 

This isn’t the first time turmoil at TikTok has benefitted a previously little-known app. Chinese app RedNote briefly became the top app in the United States early last year as TikTok faced a potential ban. RedNote’s popularity proved to be short-lived, though, as the 2025 TikTok “ban” ended up lasting only a couple of hours. 

But with new owners at TikTok and growing frustration over technical issues with the app, there could be an opportunity for a new shortform video service that’s not controlled by a huge corporation. And that’s what UpScrolled seems to be betting on. “Too often, users are left uncertain about whether their voices will be heard or quietly suppressed,” the company writes on its website. “UpScrolled changes that by ensuring every post has a fair chance to be seen, creating an environment that is authentic, unfiltered, and equitable for all.”

This article originally appeared on Engadget at https://www.engadget.com/social-media/people-are-uninstalling-tiktok-and-downloading-an-indie-competitor-233345222.html?src=rss

OpenAI spills technical details about how its AI coding agent works

On Friday, OpenAI engineer Michael Bolin published a detailed technical breakdown of how the company’s Codex CLI coding agent works internally, offering developers insight into AI coding tools that can write code, run tests, and fix bugs with human supervision. It complements our article in December on how AI agents work by filling in technical details on how OpenAI implements its “agentic loop.”

AI coding agents are having something of a “ChatGPT moment,” where Claude Code with Opus 4.5 and Codex with GPT-5.2 have reached a new level of usefulness for rapidly coding up prototypes, interfaces, and churning out boilerplate code. The timing of OpenAI’s post details the design philosophy behind Codex just as AI agents are becoming more practical tools for everyday work.

These tools aren’t perfect and remain controversial for some software developers. While OpenAI has previously told Ars Technica that it uses Codex as a coding tool to help develop the Codex product itself, we also discovered, through hands-on experience, that these tools can be astonishingly fast at simple tasks but remain brittle beyond their training data and require human oversight for production work. The rough framework of a project tends to come fast and feels magical, but filling in the details involves tedious debugging and workarounds for limitations the agent cannot overcome on its own.

Read full article

Comments

Gemini In Google Calendar Now Helps You Find the Best Meeting Time For All Attendees

Google is adding Gemini-powered “Suggested times” to Google Calendar, automatically scanning attendees’ calendars to surface the best meeting slots based on availability, work hours, and conflicts. The feature also streamlines rescheduling with one-click alternatives when invitees decline. Digital Trends reports: According to a recent post on the Workspace Updates blog, Gemini in Google Calendar can now help you quickly identify optimal meeting times when creating an event, as long as you have access to the attendees’ calendars. The new “Suggested times” feature scans everyone’s calendars and highlights the best time slots based on availability, working hours, and potential conflicts, eliminating the need to manually check schedules. Google has also made rescheduling simpler. The company explains that if multiple attendees decline your invite, you’ll see a banner in the event showing a time when everyone is available, letting you update the invite with a single click. The feature is being rolled out starting today to eligible Workspace tiers. It will be enabled by default and is expected to reach all eligible users over the next few weeks.


Read more of this story at Slashdot.

We Now Know What Caused the TikTok Outage

If you tried hopping on TikTok Sunday, you might have noticed something odd: the app wasn’t working. Outages happen, of course, as anyone who has Verizon can attest. But in the moment, theories were flying left and right. TikTok had just officially moved into U.S. control, leading some to speculate that the outage had something to do with this change in ownership. As one user put it, “TikTok being down days after the people they were forced to sell to take it over does not feel like a coincidence.”

As it happens, it does appear that the changing of the guard was responsible for the outage—just not in the way that some conspiracy theories might suggest. TikTok finally released a statement on X Monday morning, attributing the outage to issues at a U.S. data center. The statement is as follows: “Since yesterday we’ve been working to restore our services following a power outage at a U.S. data center impacting TikTok and other apps we operate. We’re working with our data center partner to stabilize our service. We’re sorry for this disruption and hope to resolve it soon.”

The outage might not be the only thing different about TikTok

For its part, TikTok is very much operational at the moment. If the issue really was just isolated to a power outage at this data center, that data center appears to have patched things up. But that doesn’t mean the company’s reputation is patched up. Users are accusing the app’s new owners of changing the algorithm, complaining of reset For You Pages, irrelevant content in feeds, and AI-generated content. I’ve seen users accuse the app of blocking anti-Trump and anti-ICE content, while comedian Gianmarco Soresi says even some of his non-political TikToks have “zero views,” which he attributes to the ineffectiveness of the people running the app. (I’ve reached out to TikTok for comment on user reports of changes to the algorithm and will update if I hear back.)

We’ll need more time to know whether or not there were serious changes made to TikTok’s algorithm and user feeds in the wake of this sale. But the app is running—at least, for now.

10 Treadmill Hacks Every Runner Should Know

I’m something of a treadmill hater. When I do hop on one, it’s only during times when it’s truly unsafe to run outdoors. I know that the treadmill brings all the same physical benefits as running outside (because no, it is not “cheating” on your workout). However, I mourn all the mental perks of spending time outside. That’s why it’s necessary for me to use whatever mental tricks I can to transform a monotonous slog into an actually enjoyable workout. The best part? None of these require special equipment or significant time investment—just small, smart adjustments to your routine. Whatever reason you have for running indoors, here’s how to make the most of your time on the treadmill.

Set your treadmill’s incline to 1%

The treadmill isn’t necessarily easier, but it can sure feel easier. There’s a pervasive myth that the treadmill “moves your feet” and thus makes running easier, but that’s not true.

However, if you do happen to be running at a pace of 7:30 per mile (8.0 mph) or faster, setting the treadmill’s incline to 0.5% or 1% is recommended to mimic outdoor air resistance. For those of us slower than that, the difference is so small as to be meaningless.

Even though I’m not fast enough for it to be an issue, I like to set my treadmill’s incline to 1% because it keeps me engaged mentally. It really is a minor change, and even if it’s “unnecessary,” I appreciate the small challenge to make things feel less boring.

Use a portable fan when running on a treadmill

In my experience, gym fans are unreliable. Overheating is one of the main reasons people quit treadmill workouts early. Indoor running means no natural breeze, so your temperature rises faster than it would outside.

If you can’t find a treadmill with a solid fan nearby (or built-in), use your own portable fan. I like to set it up to hit me at chest level. Trust me, the same effort feels way easier when you’re not overheating.

Improve your form when running on a treadmill

Staring at the console could be killing your running form. When you look down at the display, your neck tilts forward, your shoulders round, and your stride shortens.

Instead, pick a spot on the wall ahead of you—roughly the same spot you’d look at when running outside. Check your stats with quick glances rather than sustained staring. A lot of the times, I cover the display with a towel during speed work to avoid the temptation. Your posture will improve dramatically, and you might find running feels more natural.

Keep your hands off the handrails

The purpose of your treadmill run is to mimic natural walking and running strides as best you can. Holding onto the handrail can throw that off. Using the handrails transfers the workload meant for your legs and core into your upper body. If you feel the need to hold onto the handrails, it’s not the end of the world. But if it makes your workout significantly easier, think about what that likely means for the amount of work you’re putting into—and getting out of—your run.

Use music to better pace yourself on the treadmill

I love crafting a playlist that also works as a pacing mechanism. Songs have a tempo measured in beats per minute (BPM), and your running cadence (steps per minute) responds subconsciously to music tempo.

Although there is no single “perfect” cadence, most runners fall around 160-180 steps per minute. Match your playlist to your target pace: slower songs for warm-ups and recovery, 150-160 BPM for easy runs, and 170-180 BPM for tempo work. Spotify even has running playlists organized by BPM. If nothing else, a good playlist will keep you motivated on such a monotonous machine.

Play the “descending intervals” mental game

Running hard intervals when you’re already tired is tough. Flip the script with descending intervals: Start with your longest, hardest effort when you’re fresh, then gradually decrease the interval length.

For example: Five minutes hard, two minutes easy, then four minutes hard, two minutes easy, working down to one minute hard. Psychologically, this can feel much more manageable because each interval is easier than the last. You’re essentially creating momentum that carries you through the workout, rather than dreading increasingly difficult efforts.

Visualize a virtual route while running on the treadmill

Combat treadmill boredom by mentally running a familiar outdoor route. Close your eyes briefly (only if you’re comfortable and safe doing so) and visualize running through your neighborhood, a favorite trail, or even a dream destination.

Take this further by matching your treadmill workout to the actual route profile. If there’s a hill three miles into your usual run, increase the incline at the corresponding time on your treadmill. You could even use Google Maps street view before your workout to refresh your memory. For me, this mental trick makes time pass faster and maintains the connection between indoor and outdoor running.

Motivate yourself with negative splits

Running negative splits on the treadmill—where your second half is faster than your first—is a classic race-oriented goal. Start your run at a comfortable pace, then increase speed by 0.1-0.2 mph every 5-10 minutes.

This approach works because it forces you to start conservatively, preventing the common mistake of burning out early. It also means you finish strong, and hey, that could help create a positive psychological association with treadmill running. More importantly, if you do have a race on the horizon, this type of workout trains your body to maintain energy for when it matters most.

Practice using the treadmill’s emergency stop feature

Most people either ignore the safety clip entirely or fumble with it ineffectively. Practice your emergency stop before you need it. While walking slowly, pull the clip intentionally to see how the treadmill responds. Knowing exactly what happens when you pull it means you won’t panic if you stumble. Hopefully you won’t need to use it, but this little practice could prevent a serious injury.

Do a post-workout incline stretch

Here’s my recovery hack of the day: After your run, leave the treadmill at a 10-15% incline, turn it off, and use it for calf and Achilles stretches. Stand on the belt with your toes elevated and heels dropped down. The incline creates the perfect angle for a deep, effective stretch.

Hold for 30 seconds on each leg. This takes advantage of equipment you already have and addresses the tight calves that plague many treadmill runners. It’s convenient, effective, and helps prevent the dreaded treadmill-induced stiffness.

The bottom line

The treadmill doesn’t have to be a “necessary evil.” With these hacks, you can make indoor running safer, more effective, and genuinely more enjoyable. And who knows? Maybe one day I’ll finally appreciate the unique benefits the treadmill offers: consistent pacing, controlled conditions, and the ability to execute very specific workouts regardless of weather.

Google Settles $68 Million Lawsuit Claiming It Recorded Private Conversations

An anonymous reader quotes a report from the BBC: Google has agreed to pay $68 million to settle a lawsuit claiming it secretly listened to people’s private conversations through their phones. […] the lawsuit claimed Google Assistant would sometimes turn on by mistake — the phone thinking someone had said its activation phrase when they had not — and recorded conversations intended to be private. They alleged the recordings were then sent to advertisers for the purpose of creating targeted advertising. The proposed settlement was filed on Friday in a California federal court, and requires approval by US District Judge Beth Labson Freeman.

The claim has been brought as a class action lawsuit rather than an individual case — meaning if it is approved, the money will be paid out across many different claimants. Those eligible for a payout will have owned Google devices dating back to May 2016. But lawyers for the plaintiffs may ask for up to one-third of the settlement — amounting to about $22 million in legal fees. The tech firm also denied any wrongdoing, as well as claims that it “recorded, disclosed to third parties, or failed to delete, conversations recorded as the result of a Siri activation” without consent.


Read more of this story at Slashdot.

Google agrees to $68 million settlement in voice assistant privacy lawsuit

Google has agreed to a $68 million settlement regarding claims that its voice assistant inappropriately spied on smartphone users. Plaintiffs claimed that the company’s Google Assistant platform began listening to them after it misheard conversations that sounded like its wake words. The suit argued that private information that Google Assistant shouldn’t have heard was then used to deliver those individuals targeted ads. 

Reuters reported that Google denied wrongdoing in the suit, but according to court papers, the company agreed to a settlement in order to avoid the risk and costs of litigating the issue. The preliminary class action settlement was filed on Friday and now awaits approval from U.S. District Judge Beth Labson Freeman.

Google has been transitioning away from the Google Assistant platform in the past year, replacing it with its Gemini tool. Not that AI chatbots should be trusted as paragons of privacy either.

Apple faced a very similar allegations around its Siri voice assistant in 2019; that class-action suit ended in a $95 million settlement in January 2025. Not sure if a reward of $20 per device feels sufficient when these companies are accidentally overhearing deeply personal conversations and details, but that’s how the justice system shakes out some times.

This article originally appeared on Engadget at https://www.engadget.com/big-tech/google-agrees-to-68-million-settlement-in-voice-assistant-privacy-lawsuit-222405727.html?src=rss

Ten Brands Scammers Are Most Likely to Impersonate

Impersonation scams are everywhere: bad actors are constantly trying to convince you that they represent organizations like LinkedIn, PayPal, your bank, the FBI, the FTC, and the IRS as they look to steal your money and information. When it comes to phishing schemes, which typically try to trick you into handing over sensitive data or account credentials via malicious links, tech brands are (perhaps not surprisingly) among the most commonly spoofed.

A recent report from Check Point Research found that Microsoft was imitated in nearly a quarter of all branded phishing attempts in Q4 of last year—nearly double the next most-impersonated company.

The most popular brands for phishing scams

According to researchers, tech companies and social networks are consistently among the most popular brands for impersonators running phishing scams, with the following share in the final quarter of last year:

  1. Microsoft: 22%

  2. Google: 13%

  3. Amazon: 9%

  4. Apple: 8%

  5. Facebook (Meta): 3%

  6. PayPal: 2%

  7. Adobe: 2%

  8. Booking: 2%

  9. DHL: 1%

  10. LinkedIn: 1%

While you should always be on guard for common phishing tactics, it’s wise to be especially wary of unsolicited communication from any of the companies listed—especially if that communication is related to account security and/or urges you to click a link. We’ve covered at least one campaign involving nearly every brand here, all of which are known and largely trusted among users, making them prime targets for these types of scams. Check Point notes that stolen Microsoft and Google credentials are particularly valuable because they’re widely used in day-to-day workflows.

Common phishing tactics

Broadly speaking, a phishing scam starts with an email, text, or social media message that appears to be from a legitimate source. It likely asks you to update or verify personal information—often related to a payment or account security—with a link to what appears to be the company’s website or login page. Of course, this link leads instead to a spoofed version of that site designed to harvest your credentials, credit card number, bank details, or other personal data, which scammers can then use for identity theft, account takeover, or purchase fraud.

Note that while the above methods are among the most common, phishing can also happen via phone call, voicemail, and malicious browser pop-ups.

How to protect against branded phishing attacks

As we mentioned, just because you generally trust a company doesn’t mean you should blindly trust all communication from it. If you receive a message that is unprompted, sounds urgent, and is unrelated to any recent action on your part (such as a login attempt or bill payment), do not engage with it. Don’t click any links, open any attachments, or respond directly. Look out for typos and other errors, including the original sender—though as scammers have found ways to appear verified, this isn’t always an obvious red flag.

If you’re unsure about the contents of the message, go directly to the website or app and log in to see any legitimate alerts. A password manager offers an extra layer of security here, as it’ll protect you from entering credentials on a spoofed page.

Finally, enable a strong, phishing-resistant form of multi-factor authentication everywhere you can, and especially for high-use and high-value accounts like Microsoft and Google. If your credentials are compromised, threat actors won’t have that additional factor to utilize them.

Doctors face-palm as RFK Jr.’s top vaccine advisor questions need for polio shot

The chair of a federal vaccine advisory panel under anti-vaccine Health Secretary Robert F. Kennedy Jr. made his stance clear on vaccines in a podcast last week—and that stance was so alarming that the American Medical Association was compelled to respond with a scathing statement.

Kirk Milhoan, who was named chair of the Advisory Committee on Immunization Practices for the Centers for Disease Control and Prevention in December, appeared on the aptly named podcast “Why Should I Trust You.” In the hour-long interview, Milhoan made a wide range of comments that have concerned medical experts and raised eyebrows.

Early into the discussion, Milhoan, a pediatric cardiologist, declared, “I don’t like established science,” and that “science is what I observe.” He lambasted the evidence-based methodology that previous ACIP panels used to carefully and transparently craft vaccine policy.

Read full article

Comments