Meta ordered to pay $942 million over harm to children

A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that the company misled consumers about the safety of its platforms. Reportedly, the decision combines a $375 million civil-penalty verdict from March with a newly...

Wrongful Arrest Exposes Failures in One of the Oldest Police Face-Recognition Tools in the US

The ACLU is suing two Florida police departments over the arrest of a Fort Myers man in a child-abduction case, saying officers treated a flawed face-recognition match as a near-certain ID...

The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests

The right-wing think tank is actively pushing “civil terrorism”—increasing penalties for minor crimes committed while people engage in constitutionally protected free speech...

Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody

New research from the Citizen Lab has found signs that Kenyan authorities used a commercial forensic extraction tool manufactured by Israeli company Cellebrite to break into a prominent dissident's phone, making it the latest case of abuse of the technology targeting civil society. The...

What to Do if ICE Invades Your Neighborhood

With federal agents storming the streets of American communities, there’s no single right way to approach this dangerous moment. But there are steps you can take to stay safe—and have an impact...

​​Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications​

CISA is aware of multiple cyber threat actors actively leveraging commercial spyware to target users of mobile messaging applications apps.1 These cyber actors use sophisticated targeting and social engineering techniques to deliver spyware and gain unauthorized access to a victim’s messaging app...

Malicious code in civil_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad603ea1e6bc5d232c82710b7558a1299213193fe7d6a9502104e307679ee705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74825

Malicious code in civilleechcopper-62 npm...

Malicious code in civil_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9da076f5532fe69db829f65a824513b012640d8c12129b8237d439daf6e8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82501

Malicious code in civildeer0xrequest npm...

EUVD-2025-64992

Malicious code in civiltarantulaz3n npm...

EUVD-2025-55449

Malicious code in civil-apricot-marmot npm...

EUVD-2025-55445

Malicious code in civil-moccasin-bandicoot npm...

Malicious code in civil-copper-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c59dd53462a2382ad124ef711312f510ee99617dc31f1afac4504567fef079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55448

Malicious code in civil-apricot-possum npm...

EUVD-2025-55446

Malicious code in civil-cyan-porcupine npm...

EUVD-2025-55447

Malicious code in civil-copper-earwig npm...

MAL-2025-67202 Malicious code in civil-copper-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c59dd53462a2382ad124ef711312f510ee99617dc31f1afac4504567fef079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4652a58f2e9bbf7fdd18bb1bcd9cdfbc5f544cc85880451345043c9e6fefb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67203 Malicious code in civil-cyan-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721e66fa084d481db79f36b0c017f4fb8a58c530c184dfb88e96518636b67199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...