UnLocoPoco

The UK government has launched a consultation proposing that platforms such as YouTube, TikTok, and other social media services make news from public service media including the BBC, ITV, Channel 4, and potentially other trusted publishers, more prominent in feeds and search results. The proposal is part of a wider Media Green Paper aimed at tackling misinformation and reforming public service media. Supporters argue it could improve access to reliable news, while critics question whether governments should influence how recommendation algorithms rank content and what qualifies as a "trusted" source.

CVE-2026-43456 is a local privilege escalation vulnerability in the Linux kernel caused by a flaw in the bonding driver that can lead to use-after-free conditions during interface teardown and state transitions. Under the right conditions, a local attacker can leverage the race to obtain root privileges.

cross-posted from: https://lemmy.world/post/48973727

The U.S. Department of Homeland Security has confirmed that attackers breached the Homeland Security Information Network (HSIN) along with a connected SharePoint environment. HSIN is an unclassified but sensitive platform used by federal, state, local, tribal, territorial, and private-sector partners to share threat intelligence and coordinate incident response.

The U.S. Department of Homeland Security has confirmed that attackers breached the Homeland Security Information Network (HSIN) along with a connected SharePoint environment. HSIN is an unclassified but sensitive platform used by federal, state, local, tribal, territorial, and private-sector partners to share threat intelligence and coordinate incident response.

cross-posted from: https://lemmy.world/post/48892852

End of an era!

As consumer preferences and the broader entertainment industry continue to shift away from physical discs to digital, physical game disc production for all new games releasing on PlayStation consoles will be discontinued starting January 2028. Following this date, new games will be available on PlayStation Store and at retailers in digital formats only. This transition has no impact on games that already released, or will be releasing, prior to January 2028 in disc format.

This is a natural direction for Sony Interactive Entertainment to adapt to consumer trends as the general preference for digital media significantly outpaces physical discs. This transition will enable us to align more closely with how most of our community prefers to access and play games today.

We’ll continue to prioritize our resources to drive innovation in how players can access games and provide choices as to where players prefer to purchase new games, whether that’s at retailers or PlayStation Store. We remain committed to delivering a world-class gaming experience to our fans and we thank you for your continued support.

A newly disclosed privacy vulnerability in Apple's Hide My Email feature can reportedly allow an attacker to uncover the real email address behind a generated alias. According to the researcher who found the bug, it was responsibly disclosed to Apple more than a year ago but remains unpatched, and independent testing has verified the issue.

Discord has quietly begun testing Incode as a new age verification provider, replacing its previous vendor for some users. The company says face scans are processed on-device where possible, IDs and selfies are deleted after age confirmation, and Discord only receives an age result, not your identity. But the move still raises important privacy questions around biometric verification, third-party trust, and the growing trend of mandatory age checks online, especially after the massive Persona breach linked to Discord user data back in 2025

cross-posted from: https://lemmy.world/post/48700080

Monday, June 29 could become a defining day for online privacy in Europe.

The EU's final trilogue on Chat Control 2.0 could decide the future of one of the bloc's most controversial surveillance proposals. Critics warn it could pave the way for mandatory message scanning, encryption backdoors, and unprecedented access to private communications and potentially affecting apps like WhatsApp, Signal, and Telegram.

The decision won't just impact Europe. It could shape the future of encrypted messaging and digital privacy worldwide.

Monday, June 29 could become a defining day for online privacy in Europe.

The EU's final trilogue on Chat Control 2.0 could decide the future of one of the bloc's most controversial surveillance proposals. Critics warn it could pave the way for mandatory message scanning, encryption backdoors, and unprecedented access to private communications and potentially affecting apps like WhatsApp, Signal, and Telegram.

The decision won't just impact Europe. It could shape the future of encrypted messaging and digital privacy worldwide.

cross-posted from: https://lemmy.world/post/48269853

Telegram faced major connectivity disruptions after researchers reported that Reliance Communications’ AS18101 allegedly announced Telegram’s 91.108.56.0/22 IP prefix, a route normally originated by Telegram’s AS62041. The announcement reportedly spread through FLAG Telecom and reached international peers, causing Telegram traffic in India and parts of the UAE, Europe, and Asia to be misrouted or dropped.

The incident came around the same time as India’s temporary Telegram restriction linked to NEET exam security, but the network-layer impact went far beyond a domestic block. Researchers say the route should have been flagged as RPKI-invalid and filtered, raising fresh concerns about weak BGP security enforcement, poor route filtering, and how a single unauthorized routing announcement can disrupt a major platform across borders.

PSN briefly allowed users to claim single-letter Online IDs like A, B, X, and Z, even though Sony’s public username rules require 3–16 characters. It looks less like a planned feature and more like a validation failure somewhere in PSN’s identity stack, showing why client-side checks are never enough and why all platforms need consistent server-side validation across APIs, account services, and databases.