Skip to main content

Privacy

See All Stories

Privacy is a growing concern in today’s world. Follow along with all our coverage related to privacy, security, what Apple and other companies are doing to keep your information safe, and what steps you can take to keep your information private.

Passkeys were supposed to be secure and simple; here’s how they fail

Passkeys were supposed to be secure and simple; here's how they fail | Close-up of a finger about to press the Touch ID button on a MacBook

I’ve been arguing that passwords are horrible for the best part of a decade now, and was an enthusiastic early adopter of the far better approach of passkeys.

Passkeys were supposed to achieve the holy grail of an approach which is both more secure than passwords and so easy to use that everyone would adopt them. But a new piece outlines four problems with the technology …

Expand Expanding Close

US Army soldier arrested over data breach extortion of AT&T and Verizon

US Army soldier arrested over data breach extortion of AT&T and Verizon | Photo shows Seal of the Army

A US Army soldier has been arrested on suspicion of extorting money from AT&T and Verizon, following data breaches which saw a massive amount of customer data obtained.

The 20-year-old was arrested near the Army base in Fort Hood, Texas, on suspicion of being the cybercriminal known as Kiberphant0m – and statements by his mother aren’t likely to help …

Expand Expanding Close

Enhanced Visual Search shares your photos with Apple by default, to identify landmarks

Enhanced Visual Search shares your photos with Apple by default | Screengrabs shown

A developer has noted that Apple’s Photos app shares your iPhone photos with Apple by default, for an iOS 18 feature known as Enhanced Visual Search.

This is an expansion of the older Visual Look Up feature, which can recognize objects within your photos, but a privacy note in the Settings app implies that it sends more data to Apple …

Expand Expanding Close

Massive Marriott and Starwood data breaches require 13 fixes, says the FTC

Massive Marriott and Starwood data breaches require 13 fixes | Marriott hotel shown

The Federal Trade Commission (FTC) has responded to a series of massive Marriott and Starwood data breaches, ordering the companies to make no fewer than 13 changes to ensure it can’t happen again.

More than 344 million customers were impacted by three separate security breaches, which revealed personal data that included credit card details and passport information …

Expand Expanding Close

An Apple smart doorbell would be a sure-fire winner – for all of us

An Apple smart doorbell would be a sure-fire winner | Nest doorbell shown

A report over the weekend suggested an Apple smart home doorbell with support for Face ID is in development. It follows an earlier report of an Apple smart home camera next year.

While it could be argued that both are commodity products, and that Apple’s most important contribution is the HomeKit platform rather than the hardware, there seems little doubt about the opportunity here …

Expand Expanding Close

Most popular home internet routers in US may be banned as national security risk

Most popular home internet routers in US may be banned as national security risk | TP-Link wireless router on a red background

The most popular home internet router brand in the US may be banned from sale in the country over fears that it represents a threat to national security.

Three separate US agencies have opened investigations into TP-Link routers, which account for 65% of the US market, in part because badged versions are supplied to customers by more than 300 ISPs …

Expand Expanding Close

DOJ forced Apple to hand over customer call and message data without the required authorization

DOJ did not follow procedure when demanding customer call and message data from Apple | Office of the Inspector General report graphic

An official government report has concluded that the Trump-era Department of Justice (DOJ) did not obtain the required authorizations before demanding customer call and message data from Apple and others.

It also failed to obtain authorization from the Attorney General before imposing a gag order on Apple, preventing it from disclosing the fact that it had been forced to hand over the personal data

Expand Expanding Close

Scan your iPhone for Pegasus spyware using a $1 app

Scan your iPhone for Pegasus spyware using a $1 app (screengrabs shown)

A newly-released app lets you regularly scan your iPhone for Pegasus spyware – which can access almost all the data on a phone – for a one-off cost of just one dollar.

A mobile security firm created the app, which allows you to scan your iPhone or Android phone and send the results to them for analysis – and they’ve so far detected seven phones infected by the spyware …

Expand Expanding Close

Zoom offers a further $18M for lying to users about video encryption

Zoom offers a further $18M for lying to users about video encryption | Company campus pictured

Popular video conferencing platform Zoom agreed to pay $85M in compensation back in 2021 after it was revealed that the company lied to users about the type of encryption it offered. It has now offered to pay an $18M fine to the Securities & Exchange Commission (SEC) in order to settle an investigation into the same security and privacy issue.

Zoom disclosed the offer in a regulatory filing …

Expand Expanding Close

Yes, the 10 worst passwords still include ‘password’ and ‘secret’

Some six years after virtual private network company NordVPN started searching data breaches for the most-used passwords, things are every bit as bad as when the company started.

Each year, the company searches the dark web for passwords stolen by malware or exposed in security breaches to determine the most commonly-used passwords, and this year’s crop is as depressing as ever …

Expand Expanding Close

The reported Apple smart home camera will combine ultimate privacy with Apple Intelligence

An Apple smart home camera will combine privacy with Apple Intelligence (Xiaomi camera shown on desk with flowers in vase)

Earlier this week Ming-Chi Kuo suggested that we’ll see an Apple smart home camera in 2026, with the company confident it will prove to be a popular accessory, selling in the tens of millions per year.

Given Apple’s habit of minimizing the number of products it makes, if the report is accurate the company must feel there’s good reason to enter a crowded product category, and I think an Apple camera will likely differentiate itself in two ways: privacy, and Apple Intelligence

Expand Expanding Close

More than 100 million Americans had their health data exposed in a UnitedHealth hack

Patients and doctors were victims of a massive UnitedHealth hack | Doctor using smartphone

A UnitedHealth hack exposed the personal information and health data of more than 100M Americans – the first time the company has put a specific number on the security breach.

A ransomware attack was made on Change Healthcare back in February, but it was only yesterday that the company revealed its “unprecedented magnitude” …

Expand Expanding Close

iPhone Mirroring is currently a privacy and legal risk on work Macs

iPhone Mirroring currently a privacy and legal risk on work Macs | Screengrabs of feature in use

One of the new features of iOS 18 and macOS Sequoia is iPhone Mirroring – but using this with a personal iPhone on a work Mac currently creates a privacy risk for employees, and a legal risk for businesses.

The problem, as cybersecurity company Sevco discovered, is that apps on the iPhone get treated as Mac apps, and that means their presence is included in corporate IT audits …

Expand Expanding Close

Security Bite: The concerning popularity of third-rate VPN apps in Russia

app store

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.


I’m in the midst of traveling to Ukraine this week for OFTWv2.0, and I can’t help but think about the comments on last week’s edition of Security Bite defending the VPN apps that still exist on the App Store in Russia. While almost every app from legitimate providers in the country has been removed, Russian users can still find a surplus of VPN options claiming to offer secure encryption and private browsing. The only question being–really?

Expand Expanding Close

T-Mobile data breaches: Company pays fine and promises to do better

T-Mobile data breaches see company fined | NASA photo of the Earth

A succession of T-Mobile data breaches saw millions of customers have their personal data exposed. The company has now been fined $15.75M, and has agreed to spend the same amount again on upgrading its security.

The Federal Communications Commission (FCC) says that the combination of fine and promised security enhancements represents a model for future handling of such incidents …

Expand Expanding Close

Security Bite: Apple pulls dozens of VPN apps from App Store in Russia

Russia Apple App Store VPN apps

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.


Since Russia’s full-scale assault on Ukraine, Apple has significantly scaled back its operations in the country. It has since suspended all product sales and limited certain services, such as Apple Pay. Despite this, Apple continues to operate a full-fledged App Store in Russia. However, it’s now facing worthy criticism for complying with Russian government requests to remove VPN apps to adhere to local regulations–censorship.

Expand Expanding Close