This is a really interesting look at what the internet shutdown in Iran actually means to regular people, and how they are adapting to this new reality.
https://digimpactlab.substack.com/p/iran-digital-pulse-day-72
L
lorenzofb@infosec.exchange
@lorenzofb@infosec.exchange
Posts
-
This is a really interesting look at what the internet shutdown in Iran actually means to regular people, and how they are adapting to this new reality. -
NEW: Last week, ed tech giant Instructure confirmed a data breach of some student data.NEW: Last week, ed tech giant Instructure confirmed a data breach of some student data.
Cybercrime gang ShinyHunters claimed responsibility and shared with us a sample of the allegedly stolen data from two U.S. schools. It contained students’ names, their personal email addresses, and messages.
-
NEW: Hackers have taken down the infrastructure of the Linux-based operating system Ubuntu, and some of its websites.NEW: Hackers have taken down the infrastructure of the Linux-based operating system Ubuntu, and some of its websites.
We verified that updates fail, and developers said the outage is affecting some APIs too.
A group of hacktivists claimed responsibility, saying they used a DDoS-for-hire service.
https://techcrunch.com/2026/05/01/ubuntu-services-hit-by-outages-after-ddos-attack/
-
I spoke with @josephcox for a 404 Media podcast about the zero-day industry, the incredible case of the L3Harris executive who leaked hacking tools to a Russian broker, and what happened to those hacking tools afterward.I spoke with @josephcox for a 404 Media podcast about the zero-day industry, the incredible case of the L3Harris executive who leaked hacking tools to a Russian broker, and what happened to those hacking tools afterward.
Check it out here or on whatever podcast app you use.
-
NEW: Researchers have have exposed yet another spyware maker that makes fake Android apps for its government customers.If you're counting at home, this is a list of spyware makers from Italy, which have come out since the 2015 breach of Hacking Team, which at the time was the main player in the country.
- CY4GATE
- eSurv
- GR Sistemi
- Movia
- Negg
- Raxir
- RCS Lab
- SIO
And now IPS.
-
NEW: Researchers have have exposed yet another spyware maker that makes fake Android apps for its government customers.NEW: Researchers have have exposed yet another spyware maker that makes fake Android apps for its government customers. The apps were pushed with help of telecom providers.
And it's yet another Italian company: IPS. Until now, IPS was only known to make traditional wiretapping surveillance systems.
The researchers tied the spyware to IPS thanks to an IP address used in its infrastructure that was registered to “IPS Intelligence Public Security.”
-
NEW: Apple fixed the bug that law enforcement agencies, like the FBI, were taking advantage of to extract chat messages that had been deleted or disappeared automatically.NEW: Apple fixed the bug that law enforcement agencies, like the FBI, were taking advantage of to extract chat messages that had been deleted or disappeared automatically.
Until now the iPhone stored deleted or disappered messages in a database, allowing authorities to access them with forensic tools.
-
NEW: Angelo Martino, a former ransomware negotiator, pleaded guilty to helping a ransomware gang get more money — of which he took a cut — from their victims.NEW: Angelo Martino, a former ransomware negotiator, pleaded guilty to helping a ransomware gang get more money — of which he took a cut — from their victims.
He was secretly playing both sides in several ransomware negotiations, and he also deployed ransomware himself with co-conspirators.
https://techcrunch.com/2026/04/21/ransomware-negotiator-pleads-guilty-to-helping-ransomware-gang/
-
NEW: Cops send emails and letters to hackers: please stop hackin'.NEW: Cops send emails and letters to hackers: please stop hackin'.
-
NEW: Google sent ICE the personal financial data of a student and journalist who attented a pro-Palestinian protest in 2024.NEW: Google sent ICE the personal financial data of a student and journalist who attented a pro-Palestinian protest in 2024.
The agency had sent Google an admininistrative subpoena, a request that companies are not mandated to respond to.