Security researchers have identified critical vulnerabilities in Tile's tracking system that could enable stalkers to monitor users without detection. The flaws stem from weak encryption and insufficient privacy safeguards.
Tile's Bluetooth tracking devices, used by millions to locate lost items, lack adequate security protections according to analysis published on Adafruit. The vulnerabilities allow potential attackers to track device locations, intercept communications, and potentially identify users with minimal technical barriers.
Key issues include insufficient encryption on location data, lack of device authentication mechanisms, and limited user controls for privacy settings. Researchers noted that Tile's design prioritizes ease of use over security, leaving users exposed to tracking abuse.
The findings gained traction on Hacker News, with 114 points and 37 comments as of reporting. This marks the latest in a series of privacy concerns facing the tracking device market, where competitors like Apple's AirTag have faced similar scrutiny.
Tile did not immediately respond to requests for comment. The company has previously emphasized its privacy features, though critics argue these measures remain insufficient for protecting vulnerable users.
A US court has sentenced Ukrainian national Oleksii Lytvynenko to four years in prison for conspiracy to commit wire fraud linked to Conti ransomware attacks. Lytvynenko participated in the criminal scheme between 2021 and 2022.
A new Android malware strain called Mantax Otax encrypts files, steals data, and harasses victims through spam and contact harassment. The hybrid threat represents a growing trend of multi-functional mobile malware.
GitLab has issued an urgent advisory for users to immediately patch a maximum-severity path traversal vulnerability (CVE-2026-85706). The flaw requires immediate action to prevent potential exploitation.