Google registers in the IAB framework for device identification via IP address and shifts responsibility for user consent to advertisers, prompting criticism from data protection authorities.
Google introduces biometric camera authentication in reCAPTCHA that analyzes hand gestures, but has already been bypassed through AI-generated animations.
VPN technology protects only on the transmission path against man-in-the-middle attacks, not against malware, phishing, or modern tracking—and concentrates trust rather than eliminating it.
Cybercriminals are exploiting stolen travel booking data and WhatsApp for highly personalized phishing attacks that appear deceptively authentic and redirect to fake booking portals.
Google is implementing the use of IP addresses from European users for ad personalization, despite the company itself having previously criticized this method as problematic for device identification.
Three new malware loaders (BabaDeda, Lorem Ipsum, Potemkin) distribute via ClickFix social engineering and compromised WordPress sites to enable data theft, ransomware, and remote control.
Austrian courts have significantly tightened the legal requirements for cookie banners — existing solutions used by many companies no longer meet these standards and risk fines and reputational damage.
152 Chrome extensions claim in the Web Store to collect no data, but actually track IP addresses, ISP data, and clicks while spoofing organic search engine traffic.
Bright Data integrates an SDK into free apps that repurposes smart TVs and smartphones as exit nodes for a global proxy network with 400 million IP addresses without sufficient transparency—even when VPN connections are active.
