National Public Data confirms breach that exposed Americans’ social security numbers

A data dump that contains 2.7 billion records of personal information for people living in the US, including their Social Security Numbers, have recently been leaked online. The data dump's contents were linked to National Public Data, a company that scrapes information from non-public sources and sells it for background checks. Now, the company has confirmed that it did have "a data security incident" wherein people's names, emails, addresses, phone numbers, social security numbers and mailing addresses had been stolen. 

National Public Data's wording in its Security Incident report is a bit a vague and convoluted, but it did blame the security breach on a third-party bad actor. It said that the bad actor "was trying to hack into data in late December 2023" and that "potential leaks of certain data" took place in April 2024 and summer 2024, indicating that the hacker had successfully infiltrated its system. In April, a threat actor known as USDoD tried to sell 2.9 billion records of people living in the US, UK and Canada for $3.5 million. It claimed that it stole the information from National Public Data. Since then, the records have been leaked in chunks online with the more recent one being more comprehensive and containing more sensitive information. 

The company said it worked with law enforcement to review potentially affected records and will "try to notify" individuals "if there are further significant developments applicable" to them. It also said that it published the notice so that those who were potentially affected can take action. The company is advising people to monitor their financial accounts for fraudulent transactions, and it's also encouraging them to get free credit reports and to put a fraud alert on their file. 

The National Public Data is already facing a proposed class action lawsuit that was filed in early August by a plaintiff who received a notification from their identity theft protection service that their personal information was posted on the dark web. They argued that the company failed "to properly secure and safeguard the personally identifiable information that it collected and maintained as part of its regular business practices." 

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/national-public-data-confirms-breach-that-exposed-americans-social-security-numbers-100046695.html?src=rss

FBI says Iranian hackers are targeting both presidential campaigns

A phishing campaign that the FBI believes is linked to Iran has been targeting members of the Trump and Harris camps as they seek to be elected as the president of the United States later this year. While the bad actors have reportedly been trying to spear-phish several advisers of the Biden-Harris and Trump campaigns, The Washington Post specifically named senior Trump adviser Susie Wiles as one of the targets. 

In June, federal agents worked with Microsoft and Google when they started investigating the spear phishing emails the presidential candidates' staff had received. Google recently published a report detailing how an Iranian government-backed threat actor called APT42 has been targeting high-profile users in Israel and the US for years. It also confirmed that its threat analysis group continued "to observe unsuccessful attempts from APT42 to compromise the personal accounts of individuals affiliated with President Biden, Vice President Harris and former President Trump, including current and former government officials and individuals associated with the campaigns." The company apparently had to block numerous attempts by the hackers to log into the staff members' email accounts.

The feds said that Roger Stone, an informal advisor to Trump, fell victim to the phishing emails sent by the Iranian hackers who were then able to take control of his account and send messages with phishing links to other people. Authorities reportedly didn't find evidence indicating the hackers had also successfully compromised the account of anybody in the Harris camp. 

Feds blamed Iran and Russia for spreading misinformation related to the 2020 US Presidential Election four years ago. However, the US still doesn't see Iran as a major threat when it comes with cyber attacks — The Post said officials are concerned that other countries like Russia and China have also launched more sophisticated attacks that won't be as easily detected. US authorities had linked Russia to various attempts at meddling with elections in the US for years, and officials even believe that Vladimir Putin directly ordered the launch of a campaign to destabilize the American vote and denigrate Hillary Clinton when she ran for president in 2016.

This article originally appeared on Engadget at https://www.engadget.com/general/fbi-says-iranian-hackers-are-targeting-both-presidential-campaigns-150019590.html?src=rss

Margrethe Vestager, Big Tech’s European nemesis, reportedly steps down later this year

Margrethe Vestager, the European Union's commissioner for competition, won't be back for a third term and will be stepping down this year. According to the Financial Times, the Danish government will be nominating a different candidate as EU commissioner after Vestager's political party didn't do well in the previous election. Vestager is known for being one of Europe's top antitrust authorities and has been been tough on big tech companies during her term. The market abuse cases she has filed over the years inspired the creation of the Digital Markets Act (DMA), which is a regulation meant to ensure that large companies don't abuse their market power. 

Apple, Google, Meta and other big players in the industry have had to implement changes to how they conduct business after the DMA came into force. Google, for instance, said it will start displaying price comparison results in Search from external aggregators when looking up services, such as flights or hotels. It will be easier for Android users to change search engines, as well. Apple said it will let companies set up their own app stores for iOS, but it conjured its own stringent rules that developers will have to follow

The EU, under Vestager, started investigating Apple, Alphabet and Meta in March to look into their efforts to comply with the DMA. In an interview with CNBC afterward, Vestager said that Apple has "very serious" issues when it comes to non-compliance. Vestager also ruled way back in 2016 that Irish tax authorities had given Apple a "sweetheart deal" for over a decade and had ordered the company to pay Ireland €14.3 billion ($15.72 billion) in taxes. EU's General Court overturned her order in 2020, but the commission had appealed that decision. 

The European Commission also fined Google €4.3 billion ($5 billion) for antitrust violations surrounding Android and $2.8 billion for favoring its own comparison shopping services over others in Search under her leadership. More recently, the EU slapped Apple with a €1.8 billion ($1.95 billion) fine for suppressing music streaming services on the App Store that rival its own. 

European Commission president Ursula von der Leyen will start interviewing new candidates next week, the Times said. Vestager's replacement is expected to replace her this autumn. 

This article originally appeared on Engadget at https://www.engadget.com/big-tech/margrethe-vestager-big-techs-european-nemesis-reportedly-steps-down-later-this-year-140024124.html?src=rss

US Homeland Security will reportedly collect face scans of migrant kids

Update, August 15, 5:50PM ET: The US Department of Homeland Security has issued a statement disputing some of MIT Technology Review's reporting. We've updated our post below with its statement and more details. 


The US Department of Homeland Security (DHS), which is looking to improve its facial recognition algorithms, is reportedly planning to use the facial data of migrant children entering the country for training. According to MIT Technology Review, the agency intends to collect and analyze facial captures of kids younger than 14. John Boyd, the assistant director of Homeland Security's Office of Biometric Identity Management who's involved in the development of biometric services for the government, told the publication that the collection will include children "down to the infant."

Programs that collect biometric information and even DNA samples from migrants entering the country typically only apply to people between 14 and 79 years old. Boyd said Homeland Security's plan was likely made possible by some of its sub-offices' decision to remove age restrictions for the collection of biometric data. Since the information is also supposed to be used for research purposes and not for the agency's actual operations, Homeland's restrictions for biometric collection also don't apply to the program. 

Boyd told MIT Technology Review that the agency hasn't started collecting biometric information under the program yet, at least to the best of his knowledge, but that he can confirm that his office is funding it. He added that his office takes privacy seriously and that it doesn't share data with commercial industries. Data collected by the program could help improve facial recognition technologies' understanding of how faces change as humans age. The program could ultimately help authorities find missing children even after years have passed. 

However, critics and expects have raised concerns about collecting data from migrants, a lot of whom are entering the country in hopes of a better life and may feel like they have no choice but to agree to getting their facial and fingerprint information taken. It's even more concerning in this case, because children can't give their informed consent.

Homeland Security is disputing some of MIT Technology Review's reporting, though, and a spokesperson told Engadget that the publication got its information from a presentation meant to understand emerging technologies and their theoretical applications. "The DHS does not collect facial images from minors under 14, and has no current plans to do so for either operational or research purposes," the spokesperson said. 

This article originally appeared on Engadget at https://www.engadget.com/general/us-homeland-security-will-reportedly-collect-face-scans-of-migrant-kids-133042516.html?src=rss

SAG-AFTRA deal will let advertisers replicate actors’ voices with AI

SAG-AFTRA has announced a new agreement that would allow actors to earn from AI copies of their voice with their informed consent. The union representing thousands of performers has struck a deal with Narrativ, which is an online platform where performers can license digital voice replicas for use in audio ads. Brands who want to use a performer's voice will have to identify the products or services they're promoting, and performers will be able to review offers before accepting or declining them. 

Performers will also be able to set their own prices, with SAG-AFTRA's minimum rates being the lowest. And if they don't want to work with Narrativ anymore, the platform is required to delete their digital voice replica and any recordings they made for its creation. When the union went on strike last year, one of the biggest issues it wanted to address was the use of artificial intelligence to create actors' likeness without their permission (and without pay) even after they die. They were also concerned about the technology's potential to replace performers altogether. 

When the union ended its strike in November 2023, it said it was able to secure a deal that would protect its members from the "threat of AI." Under the terms of agreement it negotiated, performers have to provide explicit consent before replicas of them can be created. They also have to provide their consent for every additional project where their replica is used. In January, SAG-AFTRA entered an agreement with Replica Studios so performers can license their voice to game studios. However, it failed to reach a deal with several major video game publishers, prompting the union to call for another strike in July so it could protect it members' likenesses and voices from being recreated with AI without their permission. 

This article originally appeared on Engadget at https://www.engadget.com/ai/sag-aftra-deal-will-let-advertisers-replicate-actors-voices-with-ai-130019844.html?src=rss

Apple finally allows Spotify to display pricing in the EU

Spotify can now show its users in the European Union how much its plans cost within its iOS app after their trial period ends. The company has revealed that it's opting into Apple's "entitlement" for music streaming services in an update to an old blog post. This "entitlement" was created after the European Commission slapped Apple with a €1.8 billion ($1.95 billion) fine back in March for restricting alternative music streaming apps on the App Store. The commission's decision followed an investigation that was opened when Spotify filed a complaint against the tech company, accusing it of suppressing its service in favor of iTunes and Apple Music.

Apple initially rejected the update that Spotify submitted in April this year to add "basic pricing and website information" on its app in Europe. Now that Apple has approved changes, users will be able to see pricing information, as well as promotional offers, within the Spotify app for iPhones. They'll also see a note saying that they can go to the Spotify website to subscribe to any of the service's plans. However, the service chose not to provide users with an in-app link that would give them access to external payment options. As The Verge notes, it's because Apple recently tweaked its App Store rules in the EU, stating that it will still take a cut of developers' sales even if customers pay via third-party providers. 

"Unfortunately, Spotify and all music streaming services in the EU are still not able to freely give consumers a simple opportunity to click a link to purchase in app because of the illegal and predatory taxes Apple continues to demand, despite the Commission’s ruling," Spotify wrote in its post. It added that "if the European Commission properly enforces its decision, iPhone consumers could see even more wins, like lower cost payment options and better product experiences in the app."

This article originally appeared on Engadget at https://www.engadget.com/entertainment/music/apple-finally-allows-spotify-to-display-pricing-in-the-eu-123010178.html?src=rss

Proton VPN’s browser extension is now free for all users

You can now get and use Proton VPN's browser extension even if you're not a paying user. The extension used to only be accessible if you're on one of the service's paid plans, but now you can install it as long as you're on a Firefox- or a Chromium-based browser. Proton VPN was our top choice for VPNs last year, because it was fast and doesn't collect data that passes through its network. 

Its apps for Windows, Mac, iOS, Android and Linux have always been free to use, but the unpaid service does come with limitations. The service's paid plans are faster, has over 100 countries to choose from and lets you connect up to 10 devices at once. Meanwhile, the free version struggled to stay connected at times when we tested it out. Still, it does its job and now it comes with access to the service's browser extension, which lets you keep your Proton VPN connection within your browser only. 

Yes, the extension will let you use your standard internet connection outside of your browser. If you're using an app that doesn't work properly when you're on a device-wide VPN, but you want to protect your connection or circumvent region-based website blocks, the extension can solve your problem. Proton unfortunately has no plans to release a Safari browser for now, but we'll let you know if that changes. You can get the Chrome and Firefox extensions from Proton VPN's official website.

The company has also recently launched a new plan called Proton Duo, if you're considering paying for its products. It was specifically designed for two users who'll then get to share 1 TB of storage space (with additional 15 GB of bonus storage every year), as well as full access to Proton Mail, Drive, Calendar, Pass and VPN. 

This article originally appeared on Engadget at https://www.engadget.com/computing/proton-vpns-browser-extension-is-now-free-for-all-users-100049528.html?src=rss

Opera’s AI-focused web browser One is now on iOS

Opera One, the browser with a focus on generative AI features that Opera launched for desktop last year, is now available for iOS devices. It retains its desktop counterpart's cleaner look, but it comes with a full screen interface and features specifically designed for mobile use. The company said it experienced a 63 percent growth in new users across the European Union after the Digital Markets Act was implemented, and now it has "embraced the opportunities presented by the new regulatory landscape."

Users will be able to move their search bar to the bottom of the screen if that will make it easier to type in queries on the go, especially if they're only using one hand. They can also activate the search bar simply by swiping down in the same way they'd swipe down to look for apps on their phone, as well. In addition, the browser's updated search function can make it faster to look up information: As soon as they start typing, a set of predictive chips will show up right above their keyboard with several possible options, including complete URLs for websites they may want to visit. The colors of the browser's top bar and bottom search bar change to blend in with the website the user is visiting, and both bars disappear when the user starts browsing.

And since Opera One has a focus on generative AI features, it comes with the company's Aria built-in browser assistant. Aria now has voice input, so users can speak queries out loud. Plus, users will be able to ask Aria to generate images using Google’s Imagen2 image generation model. Finally, since Opera puts a focus on security, the One iOS browser comes with a built-in ad blocker and free VPN.

This article originally appeared on Engadget at https://www.engadget.com/apps/operas-ai-focused-web-browser-one-is-now-on-ios-130013697.html?src=rss

Scientists find evidence of liquid water deep underneath the Martian surface

Water exists on Mars, according to a team of geophysicists, and not just as ice on its poles or as vapor in its atmosphere. The scientists have found evidence of liquid water deep in its outer crust, based on their analysis of data provided by NASA's Mars Insight Lander. Specifically, they analyzed four years' worth of ground motions recorded by the lander's seismometer. By looking at seismic velocities, or how fast seismic waves travel on the planet, they were able to determine the materials that the waves moved through. What they found was that Mars' mid-crust has fractured igneous rocks saturated with liquid water. 

One of the scientists involved in the study, Prof Michael Manga from the University of California, Berkeley, told the BBC that they implemented the same techniques used "to prospect for water on Earth, or to look for oil and gas." He said his group's findings can answer the question of where all the water on Mars had gone, because features on the planet's surface showed that it had lakes and rivers around three billion years ago. While there's a theory that most of that water was lost to space, scientists have challenged that idea in recent years. One study by Caltech and NASA JPL published in 2021 found data that most of that water is still trapped in the planet's crust. 

The scientists involved in this newer study, published in PNAS, were only able to analyze seismic velocity data taken from underneath the lander. However, they believe that similar underground water reservoirs exist all over the planet, and they estimate that there's enough liquid water under the surface to form a layer across Mars that's half a mile deep. Manga told the the BBC that "much of our water is underground and there's no reason for that not to be the case on Mars too."

While the team's findings could be taken as good news for space agencies and private companies looking to visit and even form human colonies on the planet, it won't be easy reaching Mars' water reservoirs. They're located around 7 to 12.5 miles below the surface, which won't be easy to reach even on our planet. "Drilling a hole 10km (6 miles) deep on Mars — even for [Elon] Musk — would be difficult," Manga said, adding that "without liquid water, you don't have life."

This article originally appeared on Engadget at https://www.engadget.com/science/space/scientists-find-evidence-of-liquid-water-deep-underneath-the-martian-surface-120054729.html?src=rss

X appears to be suppressing Trump-related searches

If you want to find a specific tweet by Donald Trump, you may have to go through his timeline and look for it yourself. According to Mediaite, X has switched off the ability to search for Trump's tweets. As the publication explains, you can do a search for specific posts by typing "from:[username without the @ symbol]" followed by the term or phrase you're looking for. 

So if you want to see the former president's tweet wherein he said that the COVID cases and deaths are "far exaggerated in the United States" due to the CDC's "ridiculous method of determination," you could do a search for "from:realDonaldTrump COVID." That's supposed to bring up all his tweets with the term "COVID," except... it doesn't. What does show up is a selection of his tweets that don't even appear in chronological order. We were able to replicate the results Mediaite has reported, as you can see below.

A screenshot of Donald Trump's tweets.
Twitter

The former president's Twitter account was suspended in 2021 after the company determined that some of his tweets violated its policies. His was kicked out of the website after the January 6 attack on the United States Capitol. Trump sued Twitter in an attempt to get his account back, but it wasn't until Elon Musk took over that he was reinstated. His first and only post since then was his mug shot, which was taken when he was booked on charges that he conspired to overturn the results of 2020 Presidential election. 

As Mediaite notes, it's not quite clear why this happening. Other accounts that had been suspended in the past and then reinstated, such as Alex Jones', remain searchable. The accounts of other high-profile political personalities, such as Kamala Harris, remain searchable, as well. A software engineer that the publication talked to claimed that it was a deliberate move on X's part, seeing as the issue doesn't seem to affect other previously suspended users. We reached out to X for a statement and will update this post if we hear back. It's worth noting, however, that there's a free resource called "Trump Twitter Archive" that contains a searchable database of Trump's tweets, and it still works perfectly. 

This article originally appeared on Engadget at https://www.engadget.com/social-media/x-appears-to-be-suppressing-trump-related-searches-140026507.html?src=rss