Apple Exclaves and the Secure Design of the MacBook Neo’s On-Screen Camera Indicator “What that means in practice is that even a kernel-level exploit would not be able to turn on the camera without the light appearing on screen.”

daringfireball.net/2026/03/appl...

The Wyden Siren Goes Off Again: We’ll Be “Stunned” By What the NSA Is Doing Under Section 702 Senator Ron Wyden says that when a secret interpretation of Section 702 is eventually declassified, the American public “will be stunned” to learn what the NSA has been doing. If you&#8…

www.techdirt.com/2026/03/12/t...

China urges travelers to avoid Seattle airport after 20 scholars were denied entry to the US Chinese government officials are urging travels to avoid entering the U.S. through Seattle. They cite ongoing harassment by U.S. Customs and Border Protection personnel.

apnews.com/article/chin...

ICMYI: As part of a Guardian investigation, Sean Craig & I looked into clandestine neo-nazi "Forest Fights" — hooligan-style brawls on a secretive Lynchburg, VA compound hosted by neopagan hate group Wolves of Vinland, with fighters from the active club network, Patriot Front, and the Hammerskins. 🧵

FORMER MISFITS SINGER-TURNED PROUD BOY TOUR STOP CANCELLED AFTER COMMUNITY... | Left Coast Right Watch Former Misfits vocalist Michael Graves tour stop in Sonora, CA got counterspelled because of public outcry.

leftcoastrightwatch.org/articles/for...

Far-right troll account followed by JD Vance on X unmasked “HowlingMutant,” who jokes about rape and the Holocaust, is Alexander Norden of New York City

NEW: We’ve identified the man who runs the far-right troll account on X “HowlingMutant,” whose jokes about rape and the Holocaust have earned him nearly 200,000 followers, which include Vice President JD Vance. His name is Alexander Norden, from Rockaway Park in New York City.

Every day is like a new cringy embarrassing height…and then there’s tomorrow, tomorrow, and tomorrow again.

Likely to deliver.

Bogus “Antifa” Designations and FBI Warrantless Access to Americans’ Communications How Trump administration's efforts to designate "antifa" as a foreign intelligence threat can abuse national security surveillance powers.

www.justsecurity.org/136232/antif...

Bogus “Antifa” Designations and FBI Warrantless Access to Americans’ Communications How Trump administration's efforts to designate "antifa" as a foreign intelligence threat can abuse national security surveillance powers.

www.justsecurity.org/136232/antif...

Justice Department moves to toss seditious conspiracy convictions of Oath Keepers and Proud Boys The Justice Department has asked a federal appeals court to throw out the seditious conspiracy convictions of Proud Boys and Oath Keepers leaders who were sentenced to prison terms for leading members...

apnews.com/article/prou...

Texas Man Faces Multiple Federal Charges Related To Attack on AI Company and its CEO A Texas man was charged federally today with attempted damage and destruction of property by means of explosives and possession of an unregistered firearm after he threw a Molotov cocktail at a San Fr...

www.justice.gov/opa/pr/texas...

OpenAI CEO Sam Altman addresses Molotov cocktail attack on his home and AI backlash Questions linger about what motivated the attack against OpenAI's Sam Altman. "We should de-escalate the rhetoric and tactics," Altman wrote in a blog post.

www.latimes.com/business/sto...

IRELAND: A man climbed onto the wing of a U.S. military Lockheed C-130 Hercules at Shannon Airport and struck it with an axe, causing “extensive” damage before being arrested, authorities said.

FBI confirms hack of Director Patel's personal email inbox The Handala hackers associated with Iran have breached the personal email account of FBI Director Kash Patel and published photos and documents.

www.bleepingcomputer.com/news/securit...

White nationalist group ordered to pay over $470K for defacing Arthur Ashe mural in Richmond A federal judge ordered a white nationalist group and some of its members to pay hundreds of thousands in punitive damages after defacing a mural of Arthur Ashe in Richmond in 2021.

"A federal judge ordered..[Patriot Front] to pay hundreds of thousands in punitive damages after defacing a mural of Arthur Ashe in Richmond in 2021...Thomas Rousseau — and members William Ring and Jacob Brown are ordered to pay over $470,000 for defacing the mural in Battery Park."

WhatsApp notifies hundreds of users who installed a fake app made by government spyware maker | TechCrunch The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.

techcrunch.com/2026/04/01/w...

Apple says no one using Lockdown Mode has been hacked with spyware | TechCrunch The tech giant's claim that it has not seen any successful spyware attacks targeting Apple devices with Lockdown Mode enabled comes amid a leak of hacking tools targeting users running devices with ol...

techcrunch.com/2026/03/27/a...

Growing Up as the Child of Radical Revolutionaries Most kids play hide-and-seek. Zayd Ayers Dohrn, whose parents became fugitives after founding the Weather Underground, learned how to lose a tail.

He was born in hiding and spent his formative years on the run because of his parents’ involvement with a radical revolutionary group. www.newyorker.com/culture/the-...

redteam.vip/ram-rfid-att...

This is pretty cool if you’re building attack vector checklists/experiments for testing RFID…as we do.

FBI links Signal phishing attacks to Russian intelligence services The FBI has issued a public service announcement warning that Russian intelligence-linked threat actors are actively targeting users of encrypted messaging apps such as Signal and WhatsApp in phishing...

www.bleepingcomputer.com/news/securit...

FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops FancyBear’s OPSEC failure gives Ctrl-Alt-Intel rare visibility inside Russian espionage operations

ctrlaltintel.com/threat%20res...

Top counterterrorism official Kent resigns over Trump's Iran war, says Iran posed no imminent threat President Donald Trump is pushing back against claims by the director of the National Counterterrorism Center about the motivations for the Iran war.

Top counterterrorism official Kent resigns over Trump's Iran war, says Iran posed no imminent threat
apnews.com/article/trum...

Online talks: “Countercultural Fascism” and “Nazi-Satanism,” April 9 and 16, 2026 “Countercultural Fascism” and “A Short History of Nazi-Satanism”online presentations and discussionApril 9 and 16, 20261 pm EST / 10 am PST sliding scale $10–$100 (covers bo…

so i'd like to announce that i have two online talks coming up: “Countercultural Fascism” and “A Short History of Nazi-Satanism”

April 9 and 16, 2026 at 1 pm EST / 10 am PST
sliding scale $10–$100 (covers both)
 but NOTAFLOF

to register: www.spencersunshine.com/presentations

Please share!

Step 1: Digital Security — The Narrow Path Tools, guides, and organizations for individual digital security — curated for readers of Step 1.

And this is one hell of a links page for digital security resources.

readnarrowpath.com/resources/ex...

This is really great. Well written. Accessible. Begins from threat modeling and classifying risk categories. Yes. Yes. Yes. Creative Commons and a nice design to boot.

👍🏼👍🏼👍🏼

Meta and TikTok let harmful content rise after evidence outrage drove engagement - whistleblowers Companies allowed more harmful content on user’s feeds, knowing their algorithms ran on outrage, BBC hears.

www.bbc.com/news/article...

FBI warns of phishing attacks impersonating US city, county officials The Federal Bureau of Investigation (FBI) warns that criminals are impersonating U.S. officials in phishing attacks targeting businesses and individuals who request city and county planning and zoning...

www.bleepingcomputer.com/news/securit...

Iran-linked hackers claim responsibility for attack on US medical device maker Stryker An Iranian-linked hacking group on Wednesday claimed ‌responsibility for a destructive cyberattack on U.S.-based medical device and services provider Stryker, according to messages posted to the group...

Iran-linked hackers claim responsibility for attack on US medical device maker Stryker - www.reuters.com/technology/s...

Cybersecurity Advisory. Phishing via messaging apps Signal and WhatsApp | AIVD Russian state hackers are engaged in a large-scale global cyber campaign to gain access to Signal and WhatsApp accounts belonging to dignitaries, military personnel and civil servants. The Dutch intel...

english.aivd.nl/documents/20...

Russia-backed hackers breach Signal, WhatsApp accounts of officials, journalists, Netherlands warns Russian-backed hackers have launched ​a global cyber campaign to gain access to Signal and WhatsApp accounts used ‌by officials, military personnel and journalists, two intelligence agencies in the Ne...

Russia-backed hackers breach Signal, WhatsApp accounts of officials, journalists, Netherlands warns - www.reuters.com/world/europe...