// Field Knowledge & Guides

Digital Security Guides & Tutorials

Practical guides for journalists and frontline activists on hardening phones, securing accounts, and countering hacking and inspection attempts.

Security Alerts ⏱️ 3 min read

Microsoft Patches 5 Zero-Days and 118 Vulnerabilities

Microsoft announced today the release of the October 2024 updates, addressing 118 critical security vulnerabilities. Among these, five are zero-day vulnerabilities, with two currently being actively exploited, and three are classified as critical, all related to remote code execution. It’s important to note that this count does not include three vulnerabilities in Microsoft Edge, which […]

Security Alerts ⏱️ 1 min read

Apple Issues Critical Updates for iOS and iPadOS

Apple has rolled out important updates for iOS and iPadOS to fix two significant security vulnerabilities, including one that could potentially expose users’ passwords through the VoiceOver feature. The flaw, identified as CVE-2024-44204, stems from a logic issue in the Passwords app and affects a wide range of iPhone and iPad models. According to Apple’s […]

Security Alerts ⏱️ 2 min read

Linux CUPS Vulnerabilities Pose Remote Code Execution Risk

Recent security flaws in the Common Unix Printing System (CUPS) for Linux systems have been identified, potentially allowing attackers to execute malicious code remotely under specific conditions. Discovered by security researcher Simone Margaritelli, these vulnerabilities affect multiple components of the CUPS system, including libcupsfilters, libppd, and cups-filters. While these vulnerabilities (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177) could […]

Security Alerts ⏱️ 3 min read

Mozilla Faces Privacy Complaint Over Firefox Tracking

Mozilla is in hot water following a privacy complaint filed by the European digital rights group NOYB (None Of Your Business). The group alleges that Mozilla has been tracking Firefox users without their consent through a new feature. This feature, called “Privacy-Preserving Attribution” (PPA), was developed in collaboration with Meta (previously Facebook) and rolled out […]

News ⏱️ 2 min read

Kaspersky Replaces Its Antivirus with UltraAV Without Notice

On Thursday, Kaspersky, the Russian cybersecurity firm, unexpectedly removed its antivirus software from U.S. customers’ computers and replaced it with UltraAV, a product by Pango Group. This sudden move follows Kaspersky’s decision to shut down its U.S. operations after the company was added to the U.S. Entity List in June, marking it as a national […]

Security Alerts ⏱️ 2 min read

Android Malware ‘Necro’ Infects Millions Through Google Play

This stealthy malware disguised itself within popular apps, including game mods and modified versions of well-known applications like Spotify, WhatsApp, and Minecraft. Once installed, Necro wreaked havoc on infected devices by: Displaying unwanted ads: Necro used hidden web pages to bombard users with intrusive advertisements. Downloading malicious scripts: Harmful scripts were downloaded and executed on […]

News ⏱️ 2 min read

Sandvine Announces Exit from Egypt and 55 Other “Non-Democratic” Countries

Sandvine, a company known for its internet surveillance technology used by authoritarian regimes, has announced plans to exit Egypt along with 55 other “non-democratic” countries as part of a major shift in its business strategy. Founded in Canada, Sandvine stated its intention to reposition itself as a “technology solution leader for democracies.” In line with […]

Security Alerts ⏱️ 2 min read

Disney Moves Away from Slack After Major Data Breach

The Walt Disney Company is reportedly moving away from using Slack after a significant data breach in July exposed over 1 terabyte (TB) of sensitive messages and files shared on its internal communication channels. According to a report from CNBC, Disney has already started switching to new company-wide collaboration tools and informed employees via email […]

Security Alerts ⏱️ 3 min read

Tor Responds to Reports on User Identity Disclosure

Amid investigations suggesting collaboration between law enforcement agencies, including those in Germany, to use timing analysis techniques to uncover the identities of Tor network users, the Tor Project seeks to address concerns about the security of its network. The Tor team, in a report published on their blog, confirmed that their network is equipped with […]