Search This Blog
Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Load More
Trendy Right Now

Popular Posts

Latest News

Yarbo Robotic Lawnmower Flaw Exposed Thousands of Devices With Shared Passwords

  A single password opened thousands of Yarbo’s robot mowers worldwide, leaving owners in over thirty nations vulnerable without knowing it....

All the recent news you need to know
User Privacy
Africa Cyber Crime data security Digital Fraud User Privacy

Africa’s Digital Boom Makes It a Prime Target for Hackers

 

Africa’s digital boom is reshaping how people bank, work, study, and access public services, but that same progress is creating fresh openings for cybercriminals. As more governments and businesses move services online, attackers are finding more valuable systems to exploit, from mobile payments and health platforms to tax portals and identity databases. 

The speed of digital adoption has often outpaced security investment, leaving weak points that can be difficult to fix later. In practical terms, the more connected Africa becomes, the larger the attack surface becomes for criminals looking for easy gains. One of the biggest risks is that many organizations still rely on limited budgets, outdated infrastructure, and a shortage of trained cybersecurity professionals. 

Reports note that cybercrime losses in Africa now exceed $4 billion a year, while mobile-first threats such as SIM-swap fraud, phishing, and mobile money scams continue to rise. In some markets, cyberattacks are becoming more sophisticated, with criminals using automation and AI to make scams harder to detect. This is especially dangerous in countries where essential digital services are expanding quickly but security systems have not kept pace. 

The problem is not only technical; it is also structural. Africa’s cybersecurity rules remain uneven across countries, making it harder to coordinate responses to cross-border attacks. Criminal groups can move between jurisdictions, exploit weak enforcement, and target victims at scale while leaving limited traces behind. At the same time, critical infrastructure such as power, telecoms, and hospitals is increasingly exposed because it depends on connected systems that are often not built with strong protection in mind. That combination of weak regulation, limited staffing, and rising digital dependence makes the continent an attractive hunting ground for hackers. 

Cybersecurity experts argue that the solution must go beyond software and firewalls. Governments need stronger laws, better information-sharing, and more investment in training so that local teams can respond quickly to attacks. Businesses need to treat security as a core cost of digital growth, not an afterthought. Public awareness is also crucial, because many successful attacks still begin with simple tricks such as fake emails, urgent payment requests, or fraudulent links. If users understand the risks, the most common scams become much harder to carry out. 

Africa’s digital future remains full of promise, but that promise depends on trust. If people cannot safely use online services, digital progress slows and confidence erodes. The continent now faces a clear choice: keep expanding online systems faster than they can be protected, or build security into digital growth from the start. The countries that succeed will be the ones that match innovation with resilience, and speed with discipline.
Read more »
pharmaceutical services
Data Breach financial data exposure Healthcare pharmaceutical services

West Pharmaceutical Services Reports Data Breach and Encrypted Systems

 




West Pharmaceutical Services has confirmed that it suffered a cybersecurity incident that resulted in both data theft and the encryption of parts of its internal network, making it the latest major manufacturing and healthcare-related company to face operational disruption from a cyberattack.

In a filing submitted to the U.S. Securities and Exchange Commission (SEC), the company stated that it identified suspicious activity on May 4, 2026, and later determined on May 7 that an unauthorized actor had exfiltrated certain data and encrypted multiple systems within its environment. The company described the breach as a “material cybersecurity attack,” indicating that the incident was serious enough to potentially affect operations or business continuity.

Following the initial detection of the intrusion, West Pharmaceutical said it immediately activated its incident response procedures. As part of its containment efforts, the company proactively shut down and isolated affected systems across its global infrastructure, restricted access to enterprise resources, informed law enforcement authorities, and brought in external cyber-forensic specialists to assist with the investigation and recovery process.

The investigation into the incident is still ongoing, and the company says it is currently working to determine the full scope and nature of the breach, including exactly what type of information may have been stolen during the attack.

West Pharmaceutical Services is a publicly traded American pharmaceutical manufacturing company and a member of the S&P 500 index. The firm generates more than $3 billion in annual revenue and employs over 10,800 people worldwide. Its business focuses heavily on injectable drug packaging systems, syringe and vial components, containment technologies, and medical drug delivery devices used throughout the healthcare and pharmaceutical sectors.

The cyberattack disrupted several parts of the company’s global operations, particularly systems tied to manufacturing, shipping, and other enterprise functions. West Pharmaceutical stated that some of its core systems supporting production and distribution activities have now been restored, while manufacturing operations have partially resumed in certain areas. However, the company acknowledged that the full restoration process has not yet been completed and did not provide a timeline for when all systems are expected to return to normal operation.

At this stage, the company has also not estimated the financial impact the incident may have on its business.

West Pharmaceutical further stated that it has taken measures intended to reduce the risk of the stolen information being distributed or exposed publicly, although it did not disclose what those mitigation steps involve.

In a statement shared after media inquiries, a company spokesperson said the organization initiated both incident response and crisis management procedures immediately after discovering the intrusion. The company added that containment actions included shutting down and isolating affected on-premises infrastructure, limiting access to enterprise systems, and implementing additional technical and organizational security measures.

West Pharmaceutical also confirmed that it engaged Palo Alto Networks’ Unit 42 incident response team to assist with containment, forensic analysis, and system recovery efforts alongside outside legal counsel and other external experts.

As of now, no ransomware group has publicly claimed responsibility for the attack. However, cybersecurity analysts note that incidents involving both data exfiltration and system encryption often resemble modern double-extortion ransomware operations, where attackers not only lock systems but also threaten to leak stolen information to pressure victims into negotiations.

The incident also reflects a broader trend affecting manufacturing and healthcare supply chains, sectors that have increasingly become targets for cybercriminal groups because operational downtime can quickly disrupt production, logistics, and critical services. Security experts continue to warn that attacks against pharmaceutical and healthcare-related manufacturers can have consequences extending beyond financial losses, particularly when production environments and supply chain systems are affected.

Read more »
Technology
Browser security telemetry Client-side digital sovereignty Data governance compliance Edge AI privacy Filesystem auditing Gemini Nano installation On-device LLM Technology

Hidden 4GB AI Model Found Downloading Through Google Chrome


 

In what appeared to be a routine background update within Google Chrome, privacy researchers have raised concerns over a potentially problematic update after reports revealed that the browser may have silently downloaded a nearly 4GB artificial intelligence model onto certain systems without explicit user approval. 

Known as Gemini Nano, this component enables local AI processing directly on laptops and smartphones rather than relying solely on cloud infrastructure. However, cybersecurity observers and digital rights advocates contend that the deployment was inadequately transparent, especially because the installation of an AI package requiring significant storage was not visible to users. 

The disclosure, amplified by a Swedish computer scientist and privacy. Google's incremental deployment of Gemini Nano, a lightweight large language model designed to execute on-device operations such as text optimization and automated scam detection, is revealed by an investigation into the browser's filesystem mechanics.

The background payload is the result of this incremental deployment. Hanff's diagnostic tests are supported by a system-level analysis, which shows that the browser initiates an independent directory named OptGuideOnDeviceModel when a machine running recent Chrome iterations satisfies certain hardware requirements, and that the browser extracts weights.bin, which is a 4- gigabyte binary file. 

Due to the architecture's use of default active optimization flags rather than user-triggered prompts, the local installation does not require explicit confirmation dialogs. This practice has drawn intense scrutiny due to issues related to storage overhead, metered network data consumption, and compliance with regional data governance protocols.

It has been stated by Google that users may mitigate the automated download sequence by deleting the On-device AI program or the Optimization Guide parameters using internal settings (chrome://flags). However, the lack of a standard, upstream opt-in mechanism before writing multigigabyte binaries to a user's persistent storage has fundamentally heightened the debate over digital sovereignty on the client's side. 

A clean Apple Silicon profile has been audited to empirically isolate this persistent behavior beyond individual telemetry reports, using the native macOS kernel-level filesystem auditing daemon, .fseventsd. In the absence of application-layer logging, this low-level mechanism records transactional file operations, which results in a tamper-proof ledger of Chrome's execution pipeline which is unmodified by external application updates. 

As a result of the resulting data stream, it became evident that even when users manually purge the payload, which is mapped to mode 600 on macOS, the Local State configuration file retains the target installation. This automated download loop is initiated once the client intercepts a new synchronization packet from Google's central variations server confirming profile eligibility as soon as the client intercepts it. 

The forced re-allocation of macOS resources on Mac OS is consistent with deletion-resistance patterns that have been extensively documented across Windows environments, thus confirming the silent overhead as a design constant across various desktop operating systems and not an isolated platform problem. 

In Chrome 147, functional opacity is further compounded by the decoupling of user interface design from backend routing. Although the prominently displayed AI Mode pill indicates localized execution, diagnostic telemetry indicates that the interface is a channel for Google's cloud-based Search Generative Experience, transmitting user queries to Google servers directly. 

While the silently provisioned Gemini Nano remains isolated to context-menu features that are rarely invoked by most of the user base, the asymmetric distribution has been confirmed by Snopes audits, which confirmed the existence of weights.bin files across a limited set of Windows and macOS configurations, despite Google’s phased rollout of an opt-out toggle in early 2026 that remains unavailable to a large percentage of global users. 

Besides the immediate infrastructural challenges, this deployment paradigm is being scrutinized more and more by regulatory authorities and environmentalists. According to Hanff's legal analysis, writing substantial binary payloads to client hardware without explicit, upstream consent directly violates both the GDPR transparency requirements and the EU ePrivacy Directive data storage mandates. Those arguments echo recent compliance challenges reported by Malwarebytes regarding Anthropic's unprompted integration of Claude Desktop components across numerous Chrome environments.

It is further estimated that this 4-gigabyte deployment will yield 6,000 to 60,000 tonnes of CO2 equivalents when projected across Chrome's estimated one billion devices. It has been reported by crypto.news that the provisioning of local AI environments unconsentedly raises complex data sovereignty issues and fundamentally alters the endpoint security baseline for consumers worldwide as part of a broader 2026 surge in automated threat vectors highlighted by CertiK.

Finally, this architectural shift in client-side applications highlights a rising tension between the automatic delivery of products and the autonomy of user data. In spite of the increasing importance of silent pre-provisioning to smooth the onboarding process for local LLM engines, executing background allocations of this magnitude fundamentally alters the relationship between browser software and host hardware as they are executed. 

Regulatory bodies are starting to evaluate ambient deployment strategies against strict transparency frameworks, such as the GDPR, which will result in an inevitable point of inflection for the industry. Localized artificial intelligence requires a profound structural reevaluation in order to achieve a balance between compute-intensive computation and established principles of consent, resource management, and digital sovereignty. This will involve shifting away from default-active background injections toward transparent, user-validated infrastructure.
Read more »
Vehicle Surveillance
Connected cars Cyber Security Data collection Smart Car Privacy Vehicle Surveillance

Your Car Is Spying on You—and It’s About to Get Worse

 

Cars used to be simple machines that carried people from one place to another. Today, they are rolling computers packed with sensors, microphones, cameras, GPS receivers, and internet connections. That shift has turned the modern vehicle into a powerful data collector, often recording far more than location or mileage. For many drivers, the unsettling part is not just that cars gather information, but that the process is now built into the way many features work. 

The data collected can be surprisingly intimate. Depending on the brand and model, cars may track where you go, how fast you drive, when you brake, what entertainment you use, and even physical or behavioral cues such as voice commands, seat settings, facial expressions, or body weight estimates. Some systems can also log passengers and nearby devices, creating a broad picture of who is in the car and how they behave. What makes this especially worrying is that drivers often do not see the full extent of what is being gathered. 

The bigger issue is what happens after the data is collected. Privacy policies can allow manufacturers, service providers, insurers, advertisers, and other third parties to access or share the information. In practice, opting out may be difficult or impossible because many connected features depend on data collection to function. That means consumers may face a trade-off between convenience and privacy, often without realizing how much personal information they are giving away. 

This is why the debate around connected cars is no longer just about safety or convenience. It is also about consent, transparency, and accountability. Drivers may assume their vehicle is a private space, but modern software can turn it into a monitoring platform. As automakers add more digital services, remote controls, and subscription features, the amount of data generated by each trip is likely to grow even further. 

The lesson is simple: buying a car now involves more than checking the engine, fuel economy, or price. It also means understanding the privacy cost of connected technology. Drivers should review data settings, read privacy terms carefully, and think about which features are worth the information they reveal. In the era of smart vehicles, the road ahead is not only about mobility; it is also about who gets to see your life along the way.
Read more »
WhatsApp Security
AI Data Privacy cybersecurity news Encrypted AI Chat End To End Encryption Meta AI Privacy Secure Messaging Trusted Execution Environment WhatsApp Security

Meta’s New Encrypted AI Chat Strategy Faces Trust Challenges


 

A significant structural change in consumer chatbot privacy has taken place over the past two years since Meta launched Incognito Chat with Meta AI on 13 May 2026. As a result of this announcement, the architecture Christakis has been referring to as Sealed Mode in Part 1 of his study on consumer chatbot confidentiality has become a mass-market product and no longer remains a research aspiration. 

The Meta AI app allows WhatsApp users to communicate with the provider in a mode that does not allow Meta to read the conversation, in a similar fashion to the way Meta cannot read two user WhatsApp messages. 

The protection is architectural rather than contractual: Meta has renounced access to content through its hardware design in a Trusted Execution Environment where the chat is processed. Furthermore, the announcement comes as legal and regulatory scrutiny grows on how artificial intelligence providers retain conversational data and respond to law enforcement demands. 

In spite of Google's statement that temporary Gemini chats may be retained for up to 72 hours, OpenAI and Anthropic maintain substantially longer retention periods for temporary and incognito interactions, with ChatGPT sessions and Claude sessions reportedly remaining available for at least 30 days. It has become increasingly necessary to maintain these retention practices since chatbot logs have been used as evidence in numerous high-profile legal cases, including investigations relating to the mass shootings at Tumbler Ridge and Florida State University, as well as a court order requiring indefinite storage of certain ChatGPT conversations in The New York Times litigation. 

Additionally, Google is facing litigation regarding allegations that Gemini encouraged a series of “missions” preceding the death of a 36-year-old man. Meta is positioning Incognito Chat to distinguish itself from conventional cloud AI architectures against this backdrop. Using Meta AI, the company has extended the company's existing Private Processing framework originally deployed within WhatsApp for AI-driven summarization and writing tools directly into conversations with users. This eliminates the previous model of prompts leaving WhatsApp's encrypted channel and reaching Meta's server infrastructure during processing, eliminating the problem. 

Using Incognito Chat, Meta claims that conversations are processed within a Trusted Execution Environment where neither Meta nor WhatsApp has access to plaintext conversation history, while all contextual memory is removed once a session is completed. A web search initiated by Meta AI is also detached from user identity metadata and can be disabled completely by the user at launch. At launch, Meta will provide text-only interactions, with an upcoming "Side Chat" feature that will enable users to privately assist within an active WhatsApp conversation without interrupting the encryption thread. 

Through the new model, Meta AI users will be able to initiate Incognito Chat sessions where they will be able to conduct temporary encrypted interactions. These interactions will be processed in an isolated, secure computing environment whose operations are even inaccessible to Meta AI's internal systems, according to Meta AI. 

By design, Meta says these sessions are ephemeral, with conversations neither being stored nor retained by default following their conclusion. The feature is positioned in a way similar to transient secure messaging rather than conventional cloud-based AI assistance. In the near future, this capability will be available both through WhatsApp and Meta AI's standalone application, along with another privacy-focused feature internally referred to as Sidechat. 

With Sidechat, users will be able to use Meta AI discreetly within an active WhatsApp conversation to summarize exchanges, answer contextual questions, and provide assistance with ongoing conversations without interrupting or exposing the primary encrypted chat thread by invoking Meta AI discreetly within an active conversation. Meta officially stopped supporting end-to-end encrypted direct messages on Instagram less than one week before the rollout, which has increased industry scrutiny.

According to Instagram's support documentation, encrypted direct message functionality will cease on 8 May, and users are advised to export any media or conversations they wish to keep. Users seeking encrypted communication were immediately redirected to WhatsApp, which was explicitly referred to as Meta's sole remaining end-to-end encrypted messaging platform. 

Following the Instagram encryption rollback, a spokesperson from the company indicated that limited adoption prompted the rollback, stating that only a small percentage of users enabled encrypted direct messages, but stressed that WhatsApp's infrastructure could still be used by those who needed encrypted communication.

Meta’s Incognito Chat initiative ultimately represents more than a new privacy feature it signals a broader shift in how major AI platforms are attempting to redesign trust at the infrastructure level rather than through policy language alone. By combining encrypted messaging pathways with Trusted Execution Environment-based processing, Meta is testing whether consumer AI systems can operate with reduced provider visibility while still delivering real-time contextual assistance at scale. 

Yet the rollout also exposes the growing contradiction at the center of the AI industry: as chatbot interactions become increasingly personal, legal demands for data retention, safety monitoring, and platform accountability continue to expand in parallel. Whether Meta’s architecture can withstand both regulatory pressure and public skepticism may determine how future AI communication systems balance usability, privacy, and operational transparency.
Read more »
Malware attacks
AI Chatbot ChatGPT. OpenAI Cyber Attacks Digital Supply Chain Risk Hacker attack Malicious Software Malware attacks

OpenAI Confirms Employee Devices Hit in TanStack Supply Chain Malware Attack

 

A recent software supply-chain breach impacted several companies after hackers targeted widely used open-source tools. Among those affected was OpenAI, where compromised employee devices provided limited access to internal systems. At the center of the attack stood TanStack, a framework heavily relied upon for building websites and integrated across countless technology environments worldwide. Its broad adoption allowed the threat to spread far beyond a single platform. 

OpenAI stated that no customer information, production systems, intellectual property, or software releases were compromised. However, attackers did access a limited number of internal code repositories linked to employees whose systems had previously been infected. The company described the exposure as narrow in scope. 

The incident surfaced after TanStack disclosed that hackers had uploaded 84 malicious software updates within a six-minute period. Security researchers reportedly identified the suspicious activity within roughly twenty minutes, helping reduce broader impact. The compromised packages were designed to steal credentials from infected devices and quietly spread across connected systems. 

Although the breach exposed only a small amount of authentication material, OpenAI responded by rotating cryptographic certificates tied to the affected repositories. Some users running OpenAI applications on Apple devices may need updated installations following the security changes. OpenAI also stated that investigations found no evidence of altered production software or persistent threats within its operational infrastructure. Core systems reportedly remained secure throughout the incident. 

The identity of the attackers remains unknown. Researchers say open-source ecosystems are increasingly becoming targets because of how deeply they are embedded across modern technology stacks. Instead of attacking organizations directly, hackers compromise trusted software components and distribute malicious code through official update channels. 

One successful breach can therefore impact numerous downstream users simultaneously. Security analysts have linked similar tactics to multiple cyber threat groups over the past year. In March, North Korean-linked hackers reportedly compromised Axios to distribute malware capable of affecting large numbers of developers. More recently, suspected Chinese threat actors targeted Windows users through altered installers connected to DAEMON Tools. 

Supply-chain compromises have become particularly dangerous because developers routinely trust updates delivered through official repositories and package managers. Once malicious code enters legitimate distribution systems, organizations may unknowingly install infected software while assuming it is safe. Cybersecurity professionals warn that attacks targeting open-source infrastructure will likely continue increasing as businesses depend more heavily on shared frameworks, collaborative development tools, cloud services, and AI-powered systems. 

The same openness that accelerates innovation also creates opportunities for attackers to exploit weak points at scale. The latest incident highlights how even highly advanced technology companies remain vulnerable when trusted third-party tools are compromised. Security experts are now urging stronger oversight across software supply chains, including stricter dependency validation, improved monitoring, and deeper review of external code before deployment into production environments.
Read more »
Subscribe to: Posts (Atom)

Featured