The US Department of Defense has implemented a policy to disable advertising trackers on military personnel's mobile devices. The measure aims to prevent location data and personal information from being collected and sold by third-party companies.
The military's IT teams are systematically removing or disabling ad tracking software from phones issued to active-duty service members and other personnel. This includes blocking identifiers used by advertising networks to build profiles on individual users.
Defense officials cited national security concerns, noting that detailed location data tied to military personnel could expose installation locations, movement patterns, and deployment information to adversaries. Ad trackers can pinpoint users' whereabouts with precision.
The initiative extends beyond military-issued devices, with guidance recommending service members disable trackers on personal phones as well. The move affects major platforms including Google, Facebook, and other data brokers.
This represents an escalation in military cybersecurity practices, shifting focus from external threats to the data collection practices of commercial tech companies. The policy aligns with broader US government concerns about personal data exposure among federal employees and contractors.
Mullvad is discontinuing its public encrypted DNS servers and redirecting resources to sponsor Quad9, an alternative privacy-focused DNS provider. The move consolidates the privacy DNS landscape.
Identity verification company IDScan faces multiple lawsuits after hackers allegedly accessed and attempted to sell driver's license data for over 153 million individuals.
Attackers are actively exploiting a critical authentication bypass vulnerability in Citrix NetScaler, according to Previdian. CVE-2026-19490 allows threat actors to circumvent security controls on the widely-deployed application delivery platform.
A researcher known as Nightmare Eclipse has disclosed a CrowdStrike Falcon zero-day exploit called FalconFlank that enables privilege escalation on fully patched Windows systems. The vulnerability affects the widely-deployed endpoint protection software.