Tuesday, March 3, 2026

Texas sues TV manufacturers over Automated Content Recognition (ACR) technology and Wins

 These quotes from Texas Attorney General Ken Paxton:
“When families buy a television, they don’t expect it to spy on them. They don’t expect their viewing habits to be packaged and auctioned to advertisers. Yet Samsung deceptively guides consumers to activate ACR and buries any explanation of what that means in dense legal jargon that few will read or understand"
“Texans must be fully informed about whether their data is collected and be in full control of how it’s used. The changes outlined in this agreement help accomplish both of those aims and are an important step forward in reforming smart TV manufacturers’ data collection practices,”  

The suits were filed against Samsung, Sony, LG, Hisense, and TCL Technology Group. Samsung has reached a settlement.

Automated Content Recognition:
This software can capture screenshots of a user’s television display every 500 milliseconds, monitor viewing activity in real time, and transmit that information back to the company without the user’s knowledge or consent. The companies then sell that consumer information to target ads across platforms for a profit.

Monday, March 2, 2026

Conduent Data Breach - 25 million and counting

 According to Malwarebytes, the Conduent data breach may be the
biggest third-party breach in history.
 You may have never heard of Conduent.
 Estimates of Texas residents affected recently jumped from 4 million to 15.4 million. Current estimated number of Texas residents: 31 million.
 What does Conduent do? Services for a major portion of US public services and corporate back-office work.
 State benefit programs such as Medicaid, SNAP (Supplemental Nutrition Assistance Program), and other government payment disbursements in more than 30 states.
 Mailroom, printing, and payment processing for state benefit offices and healthcare programs, including large health insurers like Blue Cross plans.
 Corporate services for major employers, including at least one large automotive manufacturer; nearly 17,000 Volvo Group employees are confirmed among those whose data was exposed.

 What was stolen: 
Full legal names, postal addresses, and dates of birth
Social Security numbers and other government identifiers
Medical Information, health insurance details, and related claims data

Conduent is a service provider of service providers, so you many not recognize the name. Thus notifications of this breach may not trigger your alerts, notifications, or filings.


Tuesday, February 17, 2026

Vulnerabilities in Password Managers allow Attackers to view and change passwords

A team of security researchers discovered a set of vulnerabilities in four popular cloud-based password managers that would allow attackers to view and change passwords stored in victim's vaults.
Twenty-seven attack scenarios recently published targeting password manager services from Bitwarden, LastPass, Dashlane, and 1Password.
The attacks ranged from integrity violations to the complete compromise of ALL vaults in an organization.
The published paper here.

Wednesday, February 11, 2026

Apple patches everything February 11, 2025

 iOS, iPadOS, macOS, tvOS, watchOS, and visionOS
Addressing 71 vulnerabilities 

Microsoft Patch Tuesday update Feb 10, 2025

Patch for 58 vulnerabilities 
6 actively exploited
3 publicly disclosed

  • 25 Elevation of Privilege vulnerabilities
  • 5 Security Feature Bypass vulnerabilities
  • 12 Remote Code Execution vulnerabilities
  • 6 Information Disclosure vulnerabilities
  • 3 Denial of Service vulnerabilities
  • 7 Spoofing vulnerabilities

Tuesday, January 27, 2026

Critical Out of Band Microsoft updates to Windows, Office, and Outlook January 24, 2026

Updates to Windows to fix an update to windows. Update to Office for a vulnerability from a local account. So clicking or opening an Office file.
I am seeing potential exploits from other Sun City residents. Are you?

Windows KB5078127

Monday, January 26, 2026

License Plate Readers

 Several license plate readers on entries and exits from Sun City.
Due to a vulnerability a database of Flock, the company deploying most of the license plate readers across the United states the data was not redacted.
To see where your license plate was captured and not redacted use Have I Been Flocked.

https://haveibeenflocked.com

Similar to Have I Been Pwoned for email and account information from data breaches
https://haveibeenpwned.com/



Of course you or any other person on the planet can search for any license plate and find locations recorded.