Security

A new setting allows your 1Password vault to automatically unlock alongside your Mac or PC. It’s part of three new security presets rolling out now to individual and family plans — biz plans coming soon.

The browser is now better at blocking “fingerprinters” that gather information about your system to ID you, even after clearing cookies or using private browsing. Mozilla says the improvements almost halve the number of Firefox users tracked by fingerprinting, preventing websites from obtaining details about hardware specifications, touchscreen support, and dock or taskbar dimensions.

The DOJ is charging two former ransomware negotiators at DigitalMint, along with a former incident response manager at Sygnia, for allegedly hacking and attempting to extort at least five US-based companies using ALPHV/BlackCat ransomware, as reported by the Chicago Sun-Times. The “rogue” trio allegedly got a $1.2 million ransom from one victim. DigitalMint and Sygnia say they are cooperating with the investigation.

But it doesn’t sound too worried about it. Last week the Crimson Collective group claimed to have accessed the company’s servers, but Nintendo told Japan’s Sankei Shimbun that no personal or business information appears to have leaked, with the breach seemingly limited to website servers.

Apple has updated its bug bounty program, doubling the top reward to $2 million, plus bonuses that could take payouts over $5 million, for “exploit chains that can achieve similar goals as sophisticated mercenary spyware attacks.” Apple says that’s “the largest payout offered by any bounty program” it’s aware of.

Discord updated its press release to name the third-party vendor that was compromised:

Japan’s weekend is saved now that shipments of Asahi Super Dry have resumed following a ransomware attack that shutdown Japan’s most popular brewery last week. (Russian-speaking hacking group Qilin claimed responsibility.) There were concerns that the nation’s supply could evaporate in just a few days, but things are slowly returning to normal:

With this update, Gmail users with client-side encryption can send E2EE emails to people using other providers, like Outlook. The recipient will receive a notice about the encrypted message, and can view it using a guest Gmail account.

Despite families of hostages protesting against previously announced plans to broadcast the audio from speakers pointed at Gaza, Israeli Prime Minister Benjamin Netanyahu said his speech was also pushed to cellphones. We haven’t found any reports about how it would’ve worked, or that it was seen as he said:

Conor Brian Fitzpatrick, aka PomPompurin, is linked to crimes including the 2021 breach that sent out fake cybersecurity warning emails from the FBI. After pleading guilty to one count of access device conspiracy, one count of access device solicitation, and one count of possession of child sexual abuse material, he was originally sentenced to 20 years of supervised release.