pico picu

A classified Customs directive published by Netzpolitik shows German agencies link a police computer to a suspect's messenger account using the apps' own multi-device feature. The BGH ruled in January that seizing chat history this way is unlawful; the directive, dated a month later.

An intruder spent four months inside a Thomson Reuters cloud environment holding case-management data for appellate courts in 13 US states, the Virgin Islands and Ontario. The exposed files included sealed records, and several courts say they didn't know the copies existed.

A Russian national extradited from Cyprus faces trial over a 2016–17 campaign that used 225 fake accounts on a Santa Clara freelance platform to send Excel macros dropping the TeamViewer-abusing TVRAT. The unsealed indictment gives numbers the press release rounded away.

A dark-web service called Nexus sold infrared and ultraviolet scans of 153 million North American driver's licences, traced by Krebs to identity-verification vendor IDScan.net. The vendor's own documentation shows its cloud retained every scan indefinitely by default.

The malicious release carried valid SLSA provenance and passed every integrity check, because the honest build pipeline compiled source that was already poisoned. It also ran when a developer merely opened the folder.