// Field Knowledge & Guides

Digital Security Guides & Tutorials

Practical guides for journalists and frontline activists on hardening phones, securing accounts, and countering hacking and inspection attempts.

Security Alerts ⏱️ 3 min read

LastPass Breach: How a Three-Year-Old Vulnerability Led to Compromised Passwords and Customers’ Information

LastPass, the password management service, was recently hit by a massive breach that compromised partially encrypted password vault data and customer information. Last week, the company revealed that the attack was the result of one of its engineers failing to update Plex on their home computer, leaving a nearly three-year-old vulnerability unpatched and open to […]

News ⏱️ 2 min read

New Gmail Encryption Feature Prioritizes Privacy for Corporate Users

Google has launched client-side encryption (CSE) for Gmail, providing additional security measures to email communication. The CSE feature encrypts data sent in emails, including attachments, before it reaches Google’s servers. This ensures that confidential data is unreadable and encrypted, which boosts organizations’ confidence that third parties, including Google and foreign governments, cannot access their sensitive […]

Security Alerts ⏱️ 2 min read

Shein Android App Puts User Privacy at Risk

Attention Android users! If you have the Shein app installed on your device, you may want to update it to the latest version. Microsoft 365 Defender Research Team discovered a bug in version 7.9.2 of the app, released on December 16, 2021, which periodically captured and transmitted clipboard contents to a remote server. This could […]

News ⏱️ 1 min read

Samsung introduces a new feature to protect its phones from zero-click attacks

Samsung announced the Message Guard feature to protect users of its smartphones from malware and spyware from the quality of “zero attacks.” Zero attacks are threats that take advantage of security vulnerabilities to attack and penetrate digital devices without user interaction, i.e. there is no need for the victim to press a link to complete […]

Security Alerts ⏱️ 1 min read

Twitter restricts 2-Factor Authentication via SMS to “Blue” subscribers

Starting March 20, Twitter announced that it will limit 2-Factor Authentication via mobile text messages to “Blue” subscribers, a “$8 per month” paid service. According to the official Twitter account, non-subscribers can use 2-Factor Authentication via Authentication apps such as Aegis Authenticator apps on Android phones, and Raivo OTP app on IOS phones, or through […]

Security Alerts ⏱️ 1 min read

Warning against fake “Vodafone” app

A number of users on Facebook’s technology groups have complained about the lack of access to their remittances through Vodafone Cash, a Vodafone Egypt service. The complainants shared screenshots of the app they used to make the transfers to turn out to be a fake app on Google’s Android phone app store, which transfers the […]

Security Alerts ⏱️ 2 min read

It’s time to replace Lastpass. Here’s why

The Lastpass password management app revealed new information about the August 2022 hack, and the company said that pirates had access to its customers’ information and data from it “Their password vaults”, basic customer account data and related metadata including company names, end-user names, invoice addresses, email addresses, phone numbers and IP addresses through which […]

Security Alerts ⏱️ 1 min read

Security Update for Samsung Galaxy App Store

Samsung has released an update to the Galaxy App Store carrying version number 4.5.49.8. On devices running Android 12 and above. The update fixed two medium-risk security flaws. The two flaws allow the hacker to install malicious apps on the victim’s device and direct the victims to fraud webpages. Update Steps: 1- Open Samsung Store […]

Security Alerts ⏱️ 1 min read

Windows.. Update fixes 98 security vulnerabilities

Microsoft released an update to the Windows operating system, which included a patch of 98 security vulnerabilities, 11 of which were classified as high risk. One of them is exploited. vulnerabilities also included a security flaw in the Chromium-based Edge browser, the open-source version of Google Chrome browser. A patch will be issued later. Update: […]

News ⏱️ 1 min read

WhatsApp Supports “Proxy” Connection to Skip Blocking

WhatsApp rolls out the “Proxy” connectivity function to users, which is how the app can be used if it is blocked within a country. WhatsApp does not offer Proxy servers itself, leaving the server preparation function to volunteers and institutions around the world. What WhatsApp has provided is connect via Proxy within its application. connect […]