⚡ Privacy vs. Convenience: Who’s Really in Control?

There’s a spectrum between privacy and convenience—and most of us are somewhere in the middle without realizing the cost. Sure, convenience makes life easier, but it often means decisions are being made *about your data* without your knowledge or consent. I break down what this tradeoff really looks like and why reclaiming your agency starts with understanding where you sit on this spectrum.

📺 This clip is from our webinar What’s Your Privacy Score?— watch the full webinar here.

—
🫶 @takebackourtech
🎥 VIDEOS| 📩 NEWSLETTER | XMPP | SUBSTACK

Guide to Backup and Restore Linux Systems with Timeshift
https://itsfoss.com/backup-restore-linux-timeshift/

https://freefilesync.org/

Timeshift is great for repair of a broken Operating System, or to roll back from a wonky Update. However, its a bit klunky when trying to include your Personal Data in the timeshift backup, and if not done properly, can actually result in the loss of personal data produced since your last timeshift backup. Even Timeshifts Help Files tell you this, and do NOT include your personal Data in the backup by default.

FreeFileSync is a Utility that can be rapidly configured and will backup your personal Data Files and Folders to an External Hard Drive, or a Flash Drive. It has a compare function, and both Manual and Automatic modes. For Automatic mode, the External Drive must be left plugged into the Computer all the time. Once an initial backup is completed with FreeFileSync, the Compare function will look at a Folder and Files structure on your machine, and only sync new and changed files, greatly reducing the time to create a good backup.

Pro Tip: In the event of a complete hard drive crash, where the Operating System cannot be restored, if you have backed up your Timeshift backups to an external, you can replace the Hard Drive, load a basic operating System, and FreeFileSync, insert your external drive, then run Timeshift, pointing it to the External as your backup file source, and restore to your new Hard Drive. Afterwards, run FreeFileSync, using your external as a source, and your Data Folders on your new Hard Drive as a target, to restore your personal files. Easy peasy!

Give it a try! Its saved me a couple of times.

Bluetooth gap turns headphones into listening stations
CVE-2025-20700: Missing Authentication for GATT Services
CVE-2025-20701: Missing Authentication for Bluetooth BR/EDR
CVE-2025-20702: Critical Capabilities of a Custom Protocol
https://insinuator.net/2025/06/airoha-bluetooth-security-vulnerabilities/

The Ullu app (Web, Android, iOS) parental PIN protection can be bypassed via brute force techniques (CVE-2025-45083) https://pastebin.com/mFM1a3CP

A new Rust-based GPU driver appears.

https://news.itsfoss.com/tyr-gpu-driver/

Cloudflare has upgraded its video calling solution with E2EE.

https://news.itsfoss.com/cloudflare-orange-me2eets/

Fedora has chosen to continue supporting 32-bit!

https://news.itsfoss.com/fedora-32-bit-support-stays/

digiKam's latest upgrades look neat. 😲

https://news.itsfoss.com/digikam-8-7-release/

🚨 Microsoft is killing password support in its Authenticator app by August 2025.

Autofill dies in July.
Saved logins? Only accessible in Edge—if it’s your default autofill.

Don’t export in time? You lose them.

What to know + what to do ↓ https://thehackernews.com/2025/07/microsoft-removes-password-management.html

🚨 North Korea infiltrated 100+ U.S. companies using fake remote workers—stealing data, crypto & defense tech.

They even used AI to forge voices, documents & LinkedIn profiles.

The worst part? Some were praised as top talent.

Full story → https://thehackernews.com/2025/07/us-arrests-key-facilitator-in-north.html

🚨 A new Chrome zero-day is already being exploited in the wild.

Discovered by Google TAG on June 25, CVE-2025-6554 lets attackers run malicious code via a crafted web page.

It targets Chrome’s V8 engine—again.

Update now → https://thehackernews.com/2025/07/google-patches-critical-zero-day-flaw.html

🚨 Compliance ≠ Trust.

Join Vanta and Matt Johansen, Founder & Security Researcher at Vulnerable U, on July 23 to unpack the new Trust Maturity Report and explore what real security trust looks like—at every stage of growth.

Don’t miss the session: Security, AI, and Trust: Reviewing Vanta’s Trust Maturity Report → https://thn.news/trust-ai-security-webinar

🚨 85% of work now happens in the browser—yet most orgs still can’t see what’s pasted into ChatGPT.

A new guide exposes how GenAI, BYOD, and rogue extensions turned the browser into the #1 blind spot in enterprise security.

Get the fix → https://thehackernews.com/2025/07/a-new-maturity-model-for-browser.html

🚨 Verified? Think again.

Malicious extensions can pose as trusted in VS Code, IntelliJ, Visual Studio & #Cursor—bypassing checks and running OS commands.

The “verified” badge isn’t protection. Even Microsoft’s filters missed it.

Full details → https://thehackernews.com/2025/07/new-flaw-in-ides-like-visual-studio.html

🚨 Russia-linked hackers are now blurring the line between cybercrime and espionage.

TA829 & UNK_GreenSec are using identical tactics—fake job lures, IPFS malware, REM Proxies—to drop ransomware and spy tools.

Read details → https://thehackernews.com/2025/07/ta829-and-unkgreensec-share-tactics-and.html

🚨 Critical RCE flaw hits Anthropic’s AI dev tool.

Just visiting a malicious site could let hackers run code on your machine.

It targets localhost—using a 19-year-old browser bug.

MCP Inspector < v0.14.1 is at risk.

Patch now → https://thehackernews.com/2025/07/critical-vulnerability-in-anthropics.html

🚨 Hackers are now using AI tools like Vercel's v0 to spin up fake login pages—just from text prompts.

They’re cloning trusted brands, hosting on legit platforms, and bypassing old phishing methods.

The AI phishing era is here.

Read details here → https://thehackernews.com/2025/07/vercels-v0-ai-tool-weaponized-by.html

🚨 U.S. sanctions Russian hosting firm Aeza Group for fueling ransomware, data theft & drug trade.

Its CEO ran dark web drug markets. Its servers powered RomCom, RedLine, and Doppelganger ops.

This wasn't just hosting—it was cybercrime infrastructure.

READ → https://thehackernews.com/2025/07/us-sanctions-russian-bulletproof.html