Dashlane has confirmed hackers stole around 20 encrypted password vaults, and the company is being unusually quiet about how it happened. Plus the Pentagon admits US troops were tracked using commercial location data, Europe accelerates its move away from US tech, and hackers hijacked celebrity Instagram accounts by simply asking Meta's AI support chatbot.

🔎 EasyOptOuts is the easy, affordable, and effective way to automatically remove your data from people search sites: https://easyoptouts.com
Thanks to the EasyOptOuts team for sponsoring Surveillance Report!

In this episode:

• Highlight: Dashlane confirms stolen password vaults and the LastPass parallels
• Pentagon confirms US troops tracked via commercial location data
• Europe pulls away from US tech: EU Parliament drops Google, Euro-Office launches with Tuta
• Hackers hijack celebrity Instagram accounts by tricking Meta's AI support chatbot
• Defense Bulletin: breaches at Carnival Cruise, Charter, 23andMe, Ultrahuman, and more. Threats: actively exploited Android zero-day, Red Hat npm packages backdoored, HTTP/2 Bomb DoS, Signal backup phishing, websites spying via SSD activity. FOSS+ Updates: Tor Browser 15.0.15, Mullvad Android audit, Proton Mail's Gmail bridge, Rocky Linux 10.2, openSUSE Tumbleweed, NixOS 26.05

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing:

🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/dashlane-confirms-hackers-stole-password-vaults-pentagon-location-tracking-and-hackers-trick-metas-ai/

⏱️ TIMESTAMPS

• (00:00) - WELCOME TO SURVEILLANCE REPORT

A rare and genuine win against age verification with California following Colorado in exempting Linux and other open source operating systems from its Digital Age Assurance Act, directly because of community pressure. Plus AI cameras on tens of thousands of school buses being quietly repurposed for police access, a bipartisan amendment that could end nationwide automatic license plate reader programs, the open source supply chain under unprecedented attack, and a Trump Mobile data leak.

In this episode:

• Highlight: Age verification laws are coming for everyone except open source
• BusPatrol AI school bus cameras now angling for police access
• Bipartisan amendment to end nationwide police license plate tracking
• Defense Bulletin: data breaches at Trump Mobile, 7-Eleven, Charter, plus a major GitHub/TanStack supply chain compromise
• Threats: open source code poisoned at unprecedented scale, AI agents imperiled by critical vulnerability, Defender zero-days, Apex One zero-day, Linux kernel privilege escalation, Mullvad on exit-IP fingerprinting, Texas AG sues Meta over WhatsApp encryption
• FOSS+ Updates: Tails 7.8, Firefox's new design, Tuta improvements, AltStore on-device sideloading, Vivaldi 8.0, Linux Mint / Rhino Linux / MX Linux / AlmaLinux updates

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing:

⏱️ TIMESTAMPS

• (00:00) - WELCOME TO SURVEILLANCE REPORT

A brutal week for Microsoft with seven vulnerability stories, an actively exploited Exchange zero-day, the MiniPlasma exploit (rooted in a six-year-old Project Zero report Microsoft sat on), and Pwn2Own Berlin zero-days. Plus the Shai-Hulud npm supply chain attack hitting 600+ packages, Signal threatening to pull out of Canada over Bill C-22, Meta rolling out AI-powered age detection, and some quiet changes at Bitwarden that have long-time users uneasy.

🔎 EasyOptOuts is the easy, affordable, and effective way to automatically remove your data from people search sites: https://easyoptouts.com
Thanks to the EasyOptOuts team for sponsoring Surveillance Report!

This episode also covers: data breaches at NYC Health + Hospitals, 7-Eleven, West Pharmaceutical, Grafana Labs, CISA, and more. WordPress plugin exploits, Cemu emulator Linux compromise, NGINX RCE, macOS sandbox escape. And open source news like FSFE vs Apple, Tor Browser 15.0.14, Firefox 151, Discord E2EE for calls, Azure Linux 4.0, Rocky Linux new security repo, and Organic Maps updates!

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing:

🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/a-brutal-week-for-microsoft-security-signal-threatens-to-leave-canada-and-bitwarden-quietly-shifts-policies/

⏱️ TIMESTAMPS

• (00:00) - WELCOME TO SURVEILLANCE REPORT

Linux gets hit with a third major vulnerability in as many weeks, a Palantir-built database of 20 million people, and Android delivers both bad news (a new VPN leak Google has refused to patch) and good news (intrusion logging for high-risk users). Plus encrypted RCS finally arrives in iOS 26.5, Instagram quietly kills its end-to-end encrypted DMs, and the usual roundup of data breaches, threats, and FOSS+ updates in your weekly Surveillance Report.

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing:

🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/three-linux-exploits-palantir-20m-person-database-and-androids-good-bad-week-surveimay-13/

⏱️ TIMESTAMPS
00:00 INTRO TO SURVEILLANCE REPORT
00:34 A THIRD LINUX VULNERABILITY STRIKES!
05:16 PALENTIR KNOWS ALL
07:20 SOME QUICK ANNOUNCEMENTS
10:32 ANDROID: GOOD AND BAD NEWS
15:48 DEFENSE BULLETIN: DATA BREACHES
20:54 DEFENSE BULLETIN: THREATS
27:12 DEFENSE BULLETIN: FOSS+

🎥 VIDEO
Watch on YouTube

This week's Surveillance Report covers the most severe Linux threat in years sending researchers and admins scrambling, Apple patching the bug police were using to extract deleted Signal messages from iPhones, Utah's new law regulating VPNs taking effect, and Microsoft Edge inexplicably storing your passwords in plaintext memory.

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing:

🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/copyfail-explained-utahs-new-vpn-law-and-microsoft-edge-keeping-passwords-in-plaintext/

⏱️ TIMESTAMPS

• (00:00) - INTRO TO SURVEILLANCE REPORT

The government told you to use a VPN, but are you actually making yourself a target for NSA surveillance in the process? This week's highlight story digs into a letter from six US lawmakers pressing intelligence officials to answer whether Americans using commercial VPNs risk losing their legal protections and being treated as foreign nationals under Section 702 of FISA.

Also this week: North Korea's methodical, weeks-long social engineering attack that briefly hijacked the Axios open-source JavaScript library; Android malware called NoVoice that infected 2.3 million devices through the Google Play Store that survives a factory reset; Apple's device-level age verification expanding to the UK, Singapore, and South Korea; and the EU Parliament's dramatic vote to kill Chat Control, plus Patrick Brayer's five-point action plan for genuine child protection that doesn't require mass surveillance. The Defense Bulletin is packed: VeraCrypt's developer locked out by Microsoft, a rare Apple iOS 18 backport patch, Meta losing a child exploitation lawsuit, Apple Maps ads incoming, and more.

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing:

🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/vpns-could-expose-you-to-nsa-spying-north-koreas-open-source-hijack-android-malware-hits-2-3-million-devices-via-google-play-and-the-eu-ending-chat-control/

⏱️ TIMESTAMPS

• (00:00) - WELCOME TO SURVEILLANCE REPORT

This week's Surveillance Report covers two sophisticated zero-click iOS exploit frameworks: Coruna and DarkSword hit hundreds of millions of iPhones in the span of a single week. Google finally revealed their controversial Android sideloading "advanced flow," and it involves a 24-hour wait, developer mode unlock, and a wall of warning screens just to install an APK. Meanwhile, Instagram has quietly killed end-to-end encryption in DMs, Colorado is pushing OS-level age verification that would even drag Linux into compliance, and the EU's chat control battle took a wild turn.

🧡 SUPPORT TECHLORE

Become a Techlorian and keep this show growing: https://techlore.tech/support

🔗 SOURCES & LINKS

View all sources here: https://techlore.tech/coruna-and-darksword-ios-exploits-explained-what-iphone-users-need-to-do-right-now/

⏱️ TIMESTAMPS

00:00 INTRO TO SURVEILLANCE REPORT

01:30 HIGHLIGHT STORY: IOS EXPLOITS

08:02 GOOGLE SIDELOADING ADVANCED FLOW

19:26 INSTAGRAM REMOVING E2EE

22:26 OS AGE VERIFICATION

28:44 EU CHAT CONTROL

31:00 DEFENSE BULLETIN

📰 ABOUT SURVEILLANCE REPORT

Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore, delivering deep analysis to help you reclaim control and defend your rights.

Hosted on Acast. See acast.com/privacy for more information.

Password managers CAN see your vault (new research reveals attack vectors), Google threatens the open Android ecosystem, Apple rolls out age verification globally, 147 million installs of Android mental health apps with security flaws, Samsung's innovative privacy display, and a massive week of breaches and updates.

NO SR NEXT WEEK - Back in two weeks!

🧡 SUPPORT TECHLORE

Become a Techlorian and keep this show growing: https://techlore.tech/support

🔗 SOURCES & LINKS

View all sources here: https://techlore.tech/password-manager-vaults-arent-private-google-threatens-open-android-apples-global-age-verification-sr257

⏱️ TIMESTAMPS

00:00 INTRO

00:55 PASSWORD MANAGER VAULT SECURITY

12:51 ANDROID DEVELOPER VERIFICATION

16:36 APPLE AGE VERIFICATION

21:06 ANDROID MENTAL HEALTH APPS

25:17 DEFENSE BULLETIN

📰 ABOUT SURVEILLANCE REPORT

Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore, delivering deep analysis to help you reclaim control and defend your rights.

Hosted on Acast. See acast.com/privacy for more information.

No operating system is safe, and this week, Mac users got hit from three directions at once. We cover the attacks, Discord's messy age verification expansion, hidden hotel cameras in China, and everything else threatening your digital rights.

🧡 SUPPORT TECHLORE

Become a Techlorian and keep this show growing: https://techlore.tech/support

🔗 SOURCES & LINKS

View all sources here: https://techlore.tech/mac-hit-by-3-simultaneous-attacks-discords-age-verification-fails-googles-deleted-footage-returns-sr256/

⏱️ TIMESTAMPS

00:00 INTRO

01:00 MACOS ATTACKS

13:12 DISCORD AGE VERIFICATION

23:34 MORE AGE VERIFICATION

26:08 GOOGLE NEST FOOTAGE MYSTERY

30:56 DEFENSE BULLETIN

📰 ABOUT SURVEILLANCE REPORT

Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore, delivering deep analysis to help you reclaim control and defend your rights.

Hosted on Acast. See acast.com/privacy for more information.

The FBI couldn't crack a journalist's iPhone because of one security feature, and we'll break down exactly how Lockdown Mode stopped them. Meanwhile, Austria, Spain, and Greece all announced age verification mandates in the same week, Chat Control 1.0 just got an extension, and Microsoft is finally backing away from Recall as AI fatigue reaches a breaking point.

🧡 SUPPORT TECHLORE

Become a Techlorian and keep this show growing: https://techlore.tech/support

🔗 SOURCES & LINKS

View all sources here: https://techlore.tech/fbi-admits-defeat-iphone-security-actually-works-and-a-new-ios-cellular-security-feature/

⏱️ TIMESTAMPS

00:00 INTRO

00:40 HIGHLIGHT STORY: APPLE LOCKDOWN MODE

08:05 AGE VERIFICATION EXPANDING TO 3 COUNTRIES

12:38 CHAT CONTROL 1.0 EXTENSION

17:54 MICROSOFT ADMITS THEIR AI IS BAD

22:56 THE DEFENSE BULLETIN

📰 ABOUT SURVEILLANCE REPORT

Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore, delivering deep analysis to help you reclaim control and defend your rights.

Hosted on Acast. See acast.com/privacy for more information.