UK Secret Order requires Apple to provide access to user’s encrypted data
As Elon Musk His so-called government efficiency division A rampage through US federal agencies, Wired reported extensively this week Doge member, Activitiesand Digital Access Part of the most sensitive and important software systems in the US government. One Doge technician, 19-year-old high school graduate, Edward Coristine, has set up at least five different companies over the past four years, including Tesla.Sexy LLC, and has hired convicted hackers, and has easily done it. I was working at. Experts Ask if Coristine, who went online under the name “Big Ball” passes the background check It is usually required for access to a sensitive US government system.
Meanwhile, Doge is clear Dismantling USAID Coupled with the US State Department’s funding freeze Confusing dramatic efforts to help people escape forced labor camps in Southeast Asia run by criminal fraudsters.
Other than US government news, wired devices were implemented. Investigating over 300 cyberattacks on US K-12 schools over the past five years It was then found that victim schools may withhold important information from affected students and parents about the scale and scope of violations. In the slightly good news, data from cryptocurrency tracing company chain dialysis shows it Ransomware payments fell sharply in the second half of 2024. However, experts fear that short graces may be short-lived and that defenders may not be easy to maintain.
And there’s more. Each week we compile security and privacy news that we didn’t cover ourselves in depth. Click on the heading to read the complete story. And stay safe there.
The Washington Post reported on Friday that Apple had received a secret order from the UK Home Affairs Secretary. It requires companies to provide a way to access user data that is protected by ICloud’s advanced data protection. Function, it Debuted at the end of 2022,It is designed with end-to-end encryption, so only the user himself, not Apple, can access the data. As a result, to comply with UK demand, Apple will have to break the functionality by building a backdoor. Rather than installing a backdoor, sources told the post that Apple is likely to withdraw its support for advanced data protection for iCloud in the UK. “Even so, that concession will not meet the UK’s demand for backdoor access to services in other countries, including the US,” Post said.
The order was issued under the UK’s broad Investigation Powers Act of 2016. UK law enforcement has supported the background of encryption for years, let alone police officers from the US and other countries. The lawmaker attempted At various times when backdoors are mandatory. The Home Office posted in a statement that “we have not commented on operational issues, including confirming or denying the existence of such notices.” An Apple spokesperson declined to comment on the post.
Israeli Prime Minister Benjamin Netanyahu gave President Donald Trump a golden pager when the two met in Washington on Tuesday. This gift refers to the September attack in Lebanon against extremist group Hezbollah, a pocket (and a transceiver) trapped in a booby. It exploded in a coordinated explosion Around the country. operation I was killed at least 42 peopleincluding some civilians, at least injured. 4,000 civiliansAccording to Lebanese officials. The attack is widely attributed to Israel, but the state has not confirmed or denied its involvement. Playing cards at the meeting Apparently I gave Netanyahu a signed photo of the two. He is “a great leader!”
Hewlett Packard Enterprise has notified dozens of users that their personal information was stolen during a 2023 violation. The company is attributed to hackers supported by Russian states in the attack. The stolen data included Social Security Number, driver’s license information and credit card number. The incident began in May 2023 as a system invasion into HPE’s mailboxes and Microsoft SharePoint systems. HPE The incident was revealed January 2024.
Edtech giant Powerschool says that at least 16,000 UK students have had their data stolen. Major data breaches in December that It may have been affected 62 million students and 9.5 million teachers, most of whom are from the US and Canada. The attacker used his compromised credentials to infiltrate the company’s customer support portal and access user data.
Powerschool spokesman Beth Keebler confirmed with TechCrunch in a statement that students from four UK schools have affected a total of “approximately 16,000 students.” It is not clear whether this is the total number of victims in the UK. Compromised data includes the student’s date of birth, contact information, some medical data, and “other relevant information.”