ICE and CBP’s Face-Recognition App Can’t Actually Verify Who People Are

ICE has used Mobile Fortify to identify immigrants and citizens alike over 100,000 times, by one estimate. It wasn’t built to work like that—and only got approved after DHS abandoned its own privacy rules.

Bulletproof hosting providers renting cheap infrastructure to supply virtual machines to ransomware hackers

Most high-profile ransomware groups were using the same Russian-based infrastructure for years

Critical n8n flaws discovered – here’s how to stay safe

A previously published patch left a gaping hole that crooks will happily exploit.

Startups, listen up: Proton says you’re not “too small” to be hacked

Proton’s latest report shatters the myth that hackers only target big banks, urging European startups to “build in private” before it’s too late.
…

Data breach at govtech giant Conduent balloons, affecting millions more Americans

The ransomware attack at Conduent allowed hackers to steal a “significant number of individuals’ personal information” from the govtech giant’s systems. Conduent handles personal and health data of more than 100 million people across America.

NGINX servers hijacked in global campaign to redirect traffic

Redirected traffic can be abused in multiple ways and victims would never know.

Substack confirms data breach affects users’ email addresses and phone numbers

Substack said that customer data was accessed in October 2025, but wasn’t discovered until early February.

Dangerous new malware exploits WinRAR flaw – here’s what we know

A Chinese state-sponsored actor was seen exploiting a WinRAR bug, soon after the Russians.

ExpressVPN unveils new standalone password manager – ExpressKeys is now available for iOS and Android

ExpressVPN has introduced a dedicated password manager app, ExpressKeys.