Sign in

The New Oil

@thenewoil.org
600 followers 0 following 1.4K posts

Practical #privacy and simple #cybersecurity for everyone. Articles posted =/= endorsement/agreement. This account no longer monitored. Please contact us […] 🌉 bridged from ⁂ mastodon.thenewoil.org/@thenewoil, follow @ap.brid.gy to interact

PostsRepliesMedia
The New Oil @thenewoil.org · 9m
#Trump Doxxes Tom #Cotton’s Cell Phone www.washingtonsun.com/congress/trum… #politics #privacy #DST
washingtonsun.com
Trump Doxxes Tom Cotton’s Cell Phone
It’s all part of a unique push for permanent daylight saving time.
000
The New Oil @thenewoil.org · 39m
#ShinyHunters hacker reportedly detained in #Jordan, aiding #FBI www.bleepingcomputer.com/news/secur… #cybercrime #ransomware
bleepingcomputer.com
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group.
000
The New Oil @thenewoil.org · 1h
Jack Dorsey’s #Bitchat disappears from app stores in #India after government order techcrunch.com/2026/10/03/jack-dors… #privacy #cybersecurity #censorship
techcrunch.com
000
The New Oil @thenewoil.org · 1h
Danish #university #DTU breach exposes data of up to 200,000 people www.bleepingcomputer.com/news/secur… #privacy #cybersecurity #education #Denmark
bleepingcomputer.com
Danish university DTU breach exposes data of up to 200,000 people
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. [...]
000
The New Oil @thenewoil.org · 2h
Can You Protect Your Data While Still #Banking Safely? ghost.thenewoil.org/can-you-protect… #blog #privacy #finance #PersonalFinance #crypto
ghost.thenewoil.org
Can You Protect Your Data While Still Banking Safely?
How can you take advantage of the benefits of the traditional banking system while reclaiming some privacy and security?
001
The New Oil @thenewoil.org · 2h
#Muse Creates Detailed Profiles of All Your Friends and Family www.wired.com/story/muse-creates-de… #AI #Meta #privacy
wired.com
Muse Creates Detailed Profiles of All Your Friends and Family
Millions have downloaded Meta’s AI agent Muse. But getting it to do your bidding comes with privacy costs.
000
The New Oil @thenewoil.org · 3h
#NewMexico wants #Meta to pay up to $40 billion in penalties after data #privacy trial www.reuters.com/world/us/new-mexico… #CambridgeAnalytica #Facebook #politics
011
The New Oil @thenewoil.org · 3h
#AgeVerification in #Canada being debated - #BillC34 discuss.privacyguides.net/t/age-ver… #privacy #cybersecurity #C34
discuss.privacyguides.net
Age Verification in Canada being debated as well - Bill C-34
000
The New Oil @thenewoil.org · 4h
#Sanders introduces bill to ban the federal government from using #Flock techcrunch.com/2026/10/02/sanders-i… #privacy #surveillance #ALPR #police
techcrunch.com
000
The New Oil @thenewoil.org · 4h
#addy(dot)io has partnered with #Obscura addy.io/blog/addy-io-has-partnered-… #VPN #email #EmailAlias #privacy
addy.io
addy.io has partnered with Obscura | addy.io
We're excited to share that addy.io has partnered with Obscura, the first VPN that can't log your activity and outsmarts internet censorship.
001
The New Oil @thenewoil.org · 5h
Federal Judge Rules a #Flock Search Was ‘Indiscriminate Mass #Surveillance’ and Unconstitutional www.404media.co/federal-judge-rules… #privacy #police #ALPR
404media.co
Federal Judge Rules a Flock Search Was ‘Indiscriminate Mass Surveillance’ and Unconstitutional
Flock’s nationwide network is quickly “approaching dragnet-type law enforcement practice” and the cop should have got a warrant, the judge wrote.
002
The New Oil @thenewoil.org · 5h
#Congress Has Another Site-Blocking Bill, And This One Targets VPNs www.eff.org/deeplinks/2026/10/congr… #VPN #privacy #censorship
000
The New Oil @thenewoil.org · 04/10/2026
#ICE Has Been Dumping Protester Photos Into a #Palantir Database www.wired.com/story/ice-has-been-du… #privacy #politics #immigration #protesting #activism
wired.com
ICE Has Been Dumping Protester Photos Into a Palantir Database
DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a Palantir-built database, newly unsealed court filings say.
000
The New Oil @thenewoil.org · 04/10/2026
#Apple says it’s tightening #macOS ‘Full Disk Access’ controls due to new risks from #AI agents techcrunch.com/2026/10/02/apple-say… #cybersecurity #Mac
techcrunch.com
001
The New Oil @thenewoil.org · 04/10/2026
#Frontline #Education breach exposes school district employee data www.bleepingcomputer.com/news/secur… #privacy #cybersecurity #DataBreach
bleepingcomputer.com
Frontline Education breach exposes school district employee data
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.
000
The New Oil @thenewoil.org · 04/10/2026
#Warlock #ransomware breach #SharePoint in #water, telecom operator attacks www.bleepingcomputer.com/news/secur… #cybersecurity #utilities #infrastructure
bleepingcomputer.com
Warlock ransomware breach SharePoint in water, telecom operator attacks
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access.
020
The New Oil @thenewoil.org · 04/10/2026
‘Absolute s–t’: #EU’s #Microsoft #Teams alternative draws bad reviews from officials www.politico.eu/article/eu-microsof… #Matrix #Element #ElementPro #FOSS
000
The New Oil @thenewoil.org · 04/10/2026
Victory! Court Rejects Government Effort to Dismiss #SocialMedia #Surveillance Lawsuit www.eff.org/press/releases/victory-… #privacy #politics
012
The New Oil @thenewoil.org · 04/10/2026
#GitLab warns of critical RCE vulnerability in #AIGateway service www.bleepingcomputer.com/news/secur… #AI #cybersecurity #FOSS
bleepingcomputer.com
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.
000
The New Oil @thenewoil.org · 03/10/2026
#Meta’s #Muse #AI agent sent a total stranger to a user’s home proton.me/blog/meta-muse-ai-home-ad… #privacy #marketplace
proton.me
Meta's Muse AI shared a user's home address with a stranger | Proton
Meta's Muse AI agent shared a Facebook Marketplace seller's home address with a buyer without asking. Here's what happened.
000
The New Oil @thenewoil.org · 03/10/2026
#US sanctions #TrenDeAragua gang members in #ATM hacks crackdown www.bleepingcomputer.com/news/secur… #banking #cybersecurity #finance
bleepingcomputer.com
US sanctions Tren de Aragua gang members in ATM hacks crackdown
The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States.
001
The New Oil @thenewoil.org · 03/10/2026
#Medical records giant #Epic pauses product development to fix security bugs that risk patients’ data techcrunch.com/2026/10/02/medical-r… #cybersecurity #AI #healthcare
techcrunch.com
000
The New Oil @thenewoil.org · 03/10/2026
#QuéPutería: Care on #Dating Apps is a Collective Matter, Too privacyinternational.org/long-read/… #cybersecurity #privacy #DHRP
privacyinternational.org
Qué Putería: Care on Dating Apps is a Collective Matter, Too
Around an olla comunitaria (community pot: an outdoor community kitchen, usually run by women using donated food and set up as a care space to feed people during crises and protest) in one of central Mede
000
The New Oil @thenewoil.org · 03/10/2026
Building a Rights-Respecting Digital Future in #Pakistan privacyinternational.org/long-read/… #privacy #cybersecurity
privacyinternational.org
Building a Rights-Respecting Digital Future in Pakistan
Putting People and Privacy at the Centre of Digital Transformation A digital service can look efficient on a screen while feeling confusing, unsafe or inaccessible to the person who depends on it.
001
The New Oil @thenewoil.org · 03/10/2026
#Dell asks admins to patch max severity #CSM flaws as soon as possible www.bleepingcomputer.com/news/secur… #cybersecurity #Kubernetes
bleepingcomputer.com
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments.
000
The New Oil @thenewoil.org · 03/10/2026
A Flaw in #ChatGPT’s #Mac App Could Have Let Hackers Grab Sensitive Data www.wired.com/story/a-flaw-in-chatg… #AI #privacy #cybersecurity
wired.com
A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.
001
The New Oil @thenewoil.org · 03/10/2026
#Microsoft’s #X account hacked in #crypto pump-and-dump scheme www.bleepingcomputer.com/news/secur… #Twitter #cybersecurity
bleepingcomputer.com
Microsoft’s X account hacked in crypto pump-and-dump scheme
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token.
000
The New Oil @thenewoil.org · 03/10/2026
#OpenAI alerts more than 100 groups about rogue #AI agent activity www.reuters.com/legal/litigation/op… #cybersecurity
010
The New Oil @thenewoil.org · 03/10/2026
#CalyxOS 8.0.0.0 - #Android17 rollout begins, with more devices to follow calyxos.org/news/2026/10/01/android… #Calyx #FOSS #Android #DeGoogle #privacy
calyxos.org
CalyxOS 8.0.0.0 - Android 17 rollout begins, with more devices to follow
CalyxOS 8.0.0.0 - Android 17 rollout begins, with more devices to follow
001
The New Oil @thenewoil.org · 03/10/2026
Russian-Owned Snooping Software Used By #US #SecretService yro.slashdot.org/story/26/10/01/212… #UK #Russia #privacy #OxygenForensics #police
yro.slashdot.org
Russian-Owned Snooping Software Used By US Secret Service - Slashdot
Bruce66423 shares a report from The Telegraph: British police forces, including specialist units within the Metropolitan Police, have used Oxygen Forensics software to break into the phones of suspects during live investigations, public documents show. The Virginia-based company behind the software ...
000
The New Oil @thenewoil.org · 03/10/2026
#EFF: "We Demand More Information on How #Marin Cops Illegally Shared #Flock #ALPR Data" www.eff.org/deeplinks/2026/10/we-de… #privacy #surveillance #police #California
000
The New Oil @thenewoil.org · 03/10/2026
#Fortinet warns of critical #FortiMail flaw exploited in zero-day attacks www.bleepingcomputer.com/news/secur… #cybersecurity
bleepingcomputer.com
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]
001
The New Oil @thenewoil.org · 03/10/2026
Autonomous #AI agents tried to hack #US, Canadian government websites www.bleepingcomputer.com/news/secur… #Canada #cybersecurity
bleepingcomputer.com
Autonomous AI agents tried to hack US, Canadian government websites
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics. [...]
010
The New Oil @thenewoil.org · 03/10/2026
Court Agrees with #EFF: #Utah’s #VPN Law Demands a Technical Impossibility www.eff.org/deeplinks/2026/10/court… #privacy
eff.org
Court Agrees with EFF: Utah’s VPN Law Demands a Technical Impossibility
In a win for digital rights, a federal judge has issued a preliminary injunction blocking Utah’s SB 73, the state’s draconian anti-VPN age verification law. The decision comes as EFF submitted our comments to the Utah Department of Commerce, detailing how forcing platforms to detect and block privacy-preserving tools undermines user privacy and security worldwide while demanding the impossible.
000
The New Oil @thenewoil.org · 03/10/2026
Happy Opt Out October! Let’s Find Real Alternatives to the Tech Giants www.eff.org/deeplinks/2026/10/happy… #privacy #guide
010
The New Oil @thenewoil.org · 03/10/2026
#Microsoft says threat actors are ahead in the early #AI race www.bleepingcomputer.com/news/secur… #cybersecurity #cybercrime
bleepingcomputer.com
Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while security teams struggle to keep pace. [...]
001
The New Oil @thenewoil.org · 02/10/2026
#Florida cops say they don’t know who owns 11 unpermitted #Flock cameras arstechnica.com/tech-policy/2026/10… #police #privacy #surveillance #ALPR
arstechnica.com
000
The New Oil @thenewoil.org · 02/10/2026
#California governor vetoes bill banning use of ‘pervert glasses’ to secretly record people techcrunch.com/2026/10/01/californi… #privacy #Meta #IoT #SmartGlasses
techcrunch.com
114
The New Oil @thenewoil.org · 02/10/2026
#Police dismantle #KillSec #ransomware gang allegedly led by 16-year-old www.bleepingcomputer.com/news/secur… #cybersecurity #cybercrime
bleepingcomputer.com
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and servers, led to three arrests, and identified a 16-year-old as the group's alleged administrator. [...]
001
The New Oil @thenewoil.org · 02/10/2026
#Kiteworks patches max severity code injection vulnerability www.bleepingcomputer.com/news/secur… #cybersecurity
bleepingcomputer.com
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...]
000
The New Oil @thenewoil.org · 02/10/2026
Cops Can Bypass #iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims www.404media.co/cops-can-bypass-iph… #police #GrayKey #cybersecurity #privacy #Magent
404media.co
Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
Magent Forensics, the owner of the GrayKey phone unlocking tool, says it can bypass an iPhone rebooting feature that was locking cops out.
002
The New Oil @thenewoil.org · 02/10/2026
The Secrets of a US #Spyware King www.wired.com/story/the-secrets-of-… #Paragon #privacy #cybersecurity
wired.com
The Secrets of the US Spyware King
In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad actors from abusing its powerful espionage tool.
000
The New Oil @thenewoil.org · 02/10/2026
#Metamask discloses security incident affecting its infrastructure www.bleepingcomputer.com/news/secur… #cybersecurity #cryptocurrency #crypto
bleepingcomputer.com
Metamask discloses security incident affecting its infrastructure
On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of its infrastructure.
000
The New Oil @thenewoil.org · 02/10/2026
Returning from vacation? The government can search your #phone without a warrant. arstechnica.com/tech-policy/2026/09… #privacy #police
arstechnica.com
Returning from vacation? The government can search your phone without a warrant
Comments
000
The New Oil @thenewoil.org · 02/10/2026
Russian state hackers use new #RedFlick technique to push #malware www.bleepingcomputer.com/news/secur… #cybersecurity #Russia
bleepingcomputer.com
Russian state hackers use new RedFlick technique to push malware
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor.
000
The New Oil @thenewoil.org · 02/10/2026
#DIVD says #Zammad zero-days enabled AI-driven network breach www.bleepingcomputer.com/news/secur… #AI #cybersecurity
bleepingcomputer.com
DIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]
010
The New Oil @thenewoil.org · 02/10/2026
Over 543,000 valid credentials exposed in public #GitHub repositories www.bleepingcomputer.com/news/secur… #cybersecurity #DataBreach
bleepingcomputer.com
Over 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data.
000
The New Oil @thenewoil.org · 02/10/2026
#Meta disputes claim that #Muse read a user’s private messages without permission techcrunch.com/2026/09/30/meta-disp… #AI #privacy
techcrunch.com
001
The New Oil @thenewoil.org · 02/10/2026
#CISA warns of critical pre-auth RCE flaw in #MikroTik #RouterOS www.bleepingcomputer.com/news/secur… #cybersecurity
bleepingcomputer.com
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition.
000
The New Oil @thenewoil.org · 02/10/2026
#USPS To Put Cameras in Trucks That Scan Roads for ‘Community Safety’ www.404media.co/usps-to-put-cameras… #privacy #surveillance
404media.co
USPS To Put Cameras in Trucks That Scan Roads for ‘Community Safety’
USPS says the cameras, put on USPS truck dashboards, will scan roads, signs, and more.
001