Skip to main content

Privacy

See All Stories

Privacy is a growing concern in today’s world. Follow along with all our coverage related to privacy, security, what Apple and other companies are doing to keep your information safe, and what steps you can take to keep your information private.

Multiple security flaws found in DeepSeek iOS app, including sending unencrypted data

Multiple security flaws have been found in the DeepSeek iOS app, which is still one of the most popular downloads in the App Store after topping the charts when it first launched.

The latest findings are far worse than the previous security failure which exposed chat history and other sensitive information in a database requiring no authentication …

Expand Expanding Close

British government secretly ordered Apple to create a worldwide iCloud backdoor

British government secretly ordered Apple to create a worldwide iCloud backdoor | Photo shows partly-open door with a red room beyond it

It’s being reported that the British government secretly ordered Apple to create a security backdoor into all content uploaded by iCloud users anywhere in the world.

Apple is certain to refuse the demand, leading to the possibility of a similar privacy stand-off to the one seen between the iPhone maker and the FBI back in the San Bernardino shooter case

Expand Expanding Close

Mac malware after your passwords and credit cards will get much worse this year

So-called macOS Stealers – malware that seeks to extract personal data like passwords and credit card numbers from your machine – is expected to be significantly more prevalent this year.

A new annual report on the state of malware says that Mac owners could be at almost as much risk as Windows PC users this year …

Expand Expanding Close

Grubhub security breach exposed customer and driver data, says company

Grubhub security breach exposed customer and driver data | A food delivery rider on a scooter

A Grubhub security breach has exposed personal data for both customers and drivers, says the company, after an “incident” involving a third-party contractor.

The company has not revealed the exact scale of the security fail, but has admitted that the personal data includes names, email addresses, phone numbers, and partial credit card numbers …

Expand Expanding Close

Meta says its future AI models could have ‘catastrophic outcomes’

Meta plans to block 'catastrophic' AI models – but admits it may not be able to | Render of robot in wasteland

A Meta policy document describes the company’s fears that it could accidentally develop an AI model which would lead to “catastrophic outcomes.” It describes its plans to prevent the release of such models, but admits that it may not be able to do so.

Among the capabilities the company most fears are an AI system that could break through the security of even the best-protected corporate or government computer network without human assistance …

Expand Expanding Close

DeepSeek privacy under investigation in US and Europe; removed from App Store in Italy

DeepSeek privacy under investigation in US and Europe | App seen on an iPhone

DeepSeek privacy concerns have led to investigations being opened in both the US and Europe, and seen the app removed from the App Store in Italy. It seems likely the same will happen in other countries.

Italian’s privacy regulator questioned whether the app complied with GDPR, a tough privacy law that applies across 30 different countries …

Expand Expanding Close

SLAP and FLOP security flaws affect all current Apple devices, and many older ones

SLAP and FLOP security flaws affect all current Apple devices | M-series chip shown

Security researchers have discovered two flaws present in all current iPhones, iPads, and Macs – as well as many earlier ones. The vulnerabilities, known as SLAP and FLOP, could potentially allow an attacker to see the current contents of your open web tabs.

The flaws were introduced in the A15 and M2 chips, and are also found in subsequent ones, up to and including the latest version of each device …

Expand Expanding Close

Judge limits FBI powers to trawl data from Apple and others; Cloudflare privacy flaw

Judge limits FBI powers to use data from Apple and others | FBI command post shown

A judge has limited FBI powers to trawl through data obtained from tech giants like Apple, Google, and ISPs under FISA (the Foreign Intelligence Surveillance Act).

Separately, a Cloudflare privacy flaw has been identified in one of Apple’s IT service providers, which could have exposed the rough location of millions of web and app users before it was fixed …

Expand Expanding Close

FTC bans General Motors from selling driving data without permission, adding to case for CarPlay 2

FTC bans General Motors from selling driving data without permission | Corvette ZR1 Coupe interior

The Federal Trade Commission has taken action against General Motors and OnStar for selling location and driving data from millions of GM car owners, allegedly without informed consent. This data was collected as frequently as every three seconds.

Both companies have been banned from selling location and driving behavior data for a period of five years, and will need to ensure they disclose any future sharing plans, and obtain proper consent for it …

Expand Expanding Close

Apple was fined $2.1B last year, but could pay it all off in a week

Apple was fined $2.1B last year, but could pay it all off in a week | Close-up of a hand flicking through a stack of $100 bills

Apple was fined a global total of more than $2.1B last year for antitrust violations, but the sum was only the equivalent of just over a week’s worth of free cash flow.

Encrypted email company Proton put together its latest Tech Fines Tracker, in which Google was the most heavily-fined company, with Apple in second place …

Expand Expanding Close

Washington State suing T-Mobile over data breach impacting 79 million people

Washington State suing T-Mobile over data breach impacting 79 million people | T-Mobile ad in Times Square

Washington State is suing T-Mobile over a 2021 security breach which exposed the personal data of some 79 million people, including 2M Washington residents. Data exposed included social security numbers, phone numbers, physical addresses, unique IMEI numbers, and driver’s license information.

The carrier is accused of failing to follow industry-standard cybersecurity processes, which allowed the breach to go unnoticed for four months …

Expand Expanding Close

Apple will pay $95 million to settle Siri privacy lawsuit, and you might get a cut [Update]

If you used Siri between 2014 and 2024, you may have a claim against Apple | Abstract image with Siri icon

Update January 6, 2025: In a new statement to 9to5Mac, Apple says:

Siri has been engineered to protect user privacy from the beginning. Siri data has never been used to build marketing profiles and it has never been sold to anyone for any purpose. Apple settled this case to avoid additional litigation so we can move forward from concerns about third-party grading that we already addressed in 2019. We use Siri data to improve Siri, and we are constantly developing technologies to make Siri even more private.

Find more details in our new story on the subject.


Over five years ago, Apple was hit with a lawsuit over ‘unlawful and intentional recording’ of Siri interactions. Now finally, the case is coming to an end, with Apple agreeing to pay $95 million in a settlement.

Expand Expanding Close

PSA: Look out for hyper-personalized phishing attacks, powered by AI

Hyper-personalized phishing attacks, powered by AI | Man typing on MacBook

Phishing attacks are about to get a whole lot more convincing. A new report warns that scammers are now using AI to scrape information about you from your online profiles in order to send hyper-personalized emails which target your login credentials.

By finding out everything from your employer to your interests, scammers can send emails which have a far greater chance of appearing to be genuine …

Expand Expanding Close

Passkeys were supposed to be secure and simple; here’s how they fail

Passkeys were supposed to be secure and simple; here's how they fail | Close-up of a finger about to press the Touch ID button on a MacBook

I’ve been arguing that passwords are horrible for the best part of a decade now, and was an enthusiastic early adopter of the far better approach of passkeys.

Passkeys were supposed to achieve the holy grail of an approach which is both more secure than passwords and so easy to use that everyone would adopt them. But a new piece outlines four problems with the technology …

Expand Expanding Close

US Army soldier arrested over data breach extortion of AT&T and Verizon

US Army soldier arrested over data breach extortion of AT&T and Verizon | Photo shows Seal of the Army

A US Army soldier has been arrested on suspicion of extorting money from AT&T and Verizon, following data breaches which saw a massive amount of customer data obtained.

The 20-year-old was arrested near the Army base in Fort Hood, Texas, on suspicion of being the cybercriminal known as Kiberphant0m – and statements by his mother aren’t likely to help …

Expand Expanding Close

Enhanced Visual Search shares your photos with Apple by default, to identify landmarks

Enhanced Visual Search shares your photos with Apple by default | Screengrabs shown

A developer has noted that Apple’s Photos app shares your iPhone photos with Apple by default, for an iOS 18 feature known as Enhanced Visual Search.

This is an expansion of the older Visual Look Up feature, which can recognize objects within your photos, but a privacy note in the Settings app implies that it sends more data to Apple …

Expand Expanding Close

Massive Marriott and Starwood data breaches require 13 fixes, says the FTC

Massive Marriott and Starwood data breaches require 13 fixes | Marriott hotel shown

The Federal Trade Commission (FTC) has responded to a series of massive Marriott and Starwood data breaches, ordering the companies to make no fewer than 13 changes to ensure it can’t happen again.

More than 344 million customers were impacted by three separate security breaches, which revealed personal data that included credit card details and passport information …

Expand Expanding Close

An Apple smart doorbell would be a sure-fire winner – for all of us

An Apple smart doorbell would be a sure-fire winner | Nest doorbell shown

A report over the weekend suggested an Apple smart home doorbell with support for Face ID is in development. It follows an earlier report of an Apple smart home camera next year.

While it could be argued that both are commodity products, and that Apple’s most important contribution is the HomeKit platform rather than the hardware, there seems little doubt about the opportunity here …

Expand Expanding Close

Most popular home internet routers in US may be banned as national security risk

Most popular home internet routers in US may be banned as national security risk | TP-Link wireless router on a red background

The most popular home internet router brand in the US may be banned from sale in the country over fears that it represents a threat to national security.

Three separate US agencies have opened investigations into TP-Link routers, which account for 65% of the US market, in part because badged versions are supplied to customers by more than 300 ISPs …

Expand Expanding Close