This media is not supported in your browser
VIEW IN TELEGRAM
‼️ A Chrome extension called Volume Booster, with roughly 2 million weekly users, activated a commerce-tracking SDK across its entire base without ever prompting for consent.
The trick: a broad all-sites permission was granted in an earlier version and left unused, then a later update switched on the Give Freely affiliate SDK without requesting any new permission, so Chrome shipped it silently.
The SDK registers a persistent device ID, geolocates users by IP, and sends telemetry continuously, while the store's privacy declaration still claims no data collection beyond core functionality.
A broad permission granted early and activated later via a prompt-free update is a detectable supply-chain signal.
https://malext.io/reports/QuietBoost/
The trick: a broad all-sites permission was granted in an earlier version and left unused, then a later update switched on the Give Freely affiliate SDK without requesting any new permission, so Chrome shipped it silently.
The SDK registers a persistent device ID, geolocates users by IP, and sends telemetry continuously, while the store's privacy declaration still claims no data collection beyond core functionality.
A broad permission granted early and activated later via a prompt-free update is a detectable supply-chain signal.
https://malext.io/reports/QuietBoost/
❤4
This media is not supported in your browser
VIEW IN TELEGRAM
‼️🚨 BREAKING: CONFIDENTIAL DOCUMENTS OF APPLE AND TESLA HAVE BEEN LEAKED.
Tata Electronics, which builds about a third of Apple's iPhones in India, has confirmed a cyberattack after the extortion group World Leaks posted what it claims are confidential Apple and Tesla files — more than 204,000 documents totalling 630+ GB.
We reviewed the leak. The files carry Apple's confidential and proprietary footers and Tesla trade-secret markings, and include iPhone circuit board inspection specs, factory data, and employee passport scans. There are tons of e-mails as well, plus files belonging to other Tata Electronics customers.
Tata says operations are unaffected and has received a ransom demand.
Tata Electronics, which builds about a third of Apple's iPhones in India, has confirmed a cyberattack after the extortion group World Leaks posted what it claims are confidential Apple and Tesla files — more than 204,000 documents totalling 630+ GB.
We reviewed the leak. The files carry Apple's confidential and proprietary footers and Tesla trade-secret markings, and include iPhone circuit board inspection specs, factory data, and employee passport scans. There are tons of e-mails as well, plus files belonging to other Tata Electronics customers.
Tata says operations are unaffected and has received a ransom demand.
❤4🍾1
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
‼️🚨BREAKING: Meta has stopped its controversial employee-tracking program for training AI after an internal exposure left all the collected data accessible across the company, including keystrokes, screen contents, full AI prompts, transcripts, private conversations, and performance records, collected from US employees' laptops since April.
An internal notice put the scope at 45,000 internal tables. CTO Andrew Bosworth blamed misconfigured access control lists. Meta says it has no indication the data was improperly accessed.
Months earlier, Bosworth had told worried staff the program was "tightly controlled." More than 1,600 employees had already signed a petition warning of exactly this kind of security and regulatory risk.
An internal notice put the scope at 45,000 internal tables. CTO Andrew Bosworth blamed misconfigured access control lists. Meta says it has no indication the data was improperly accessed.
Months earlier, Bosworth had told worried staff the program was "tightly controlled." More than 1,600 employees had already signed a petition warning of exactly this kind of security and regulatory risk.
❤1🍾1
❗️If the new munowatch app isn't working for u just use the previous app I will restore it backend ryt now ❗️
This media is not supported in your browser
VIEW IN TELEGRAM