The FTC has settled with Cox, MindSift, and 1010 Digital Works over allegations they falsely claimed they could use smartphone microphones to spy on users for ad targeting purposes.
The companies faced regulatory action for making deceptive marketing claims about surveillance capabilities that don't actually exist. The $930K settlement resolves charges that they misrepresented their technical abilities to advertisers and users.
The case highlights ongoing concerns about how tech companies market data collection and ad targeting practices. While smartphone mic surveillance has been a persistent privacy concern among consumers, there's no evidence these firms actually possessed such technology—they simply claimed they did.
The settlement requires the companies to cease making false claims about their surveillance or data collection capabilities. It also mandates they substantiate any future claims about their technological capabilities with adequate evidence.
The FTC regularly takes action against companies making unsubstantiated advertising claims. This case underscores the agency's focus on protecting consumers from misleading statements about data practices and privacy-invasive technologies, even when the actual capability doesn't exist.
Two Nigerian men have been extradited to the U.S. and charged in connection with sextortion schemes that led to the deaths of two minors in Mississippi and North Carolina.
Threat actors are exploiting a vulnerability chain in Microsoft SharePoint to execute arbitrary code on unpatched servers. Defused has confirmed attackers are leveraging proof-of-concept exploits in the wild.
Hackers have claimed to steal millions of patient records from McKesson, the major U.S. healthcare distributor. The company acknowledged the breach and warned of potential service disruptions.
Artificial intelligence is becoming adept at finding and patching software vulnerabilities, potentially undermining governments' ability to deploy spyware and hacking tools. The development could spark renewed pressure for backdoors in encrypted devices.