InfoSecSherpa 🏔️

“I can promise you that women working together - linked, informed, and educated - can bring peace and prosperity to this forsaken planet.” - Isabel Allende 🇨🇱

“Define success on your own terms, achieve it by your own rules, and build a life you’re proud to live.”

–Anne Sweeney

Welp. It’s been a good run.

Well, we gotta find something new, friends.

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously. 1/7

The story behind the BBC refusing to air a documentary about Israeli attacks on Gaza hospitals Two veteran journalists produced a documentary that showed evidence of war crimes in Gaza. But the BBC refused to air the film. Why?

Two veteran journalists produced a documentary that showed evidence of war crimes in Gaza. But the BBC refused to air the film.

This week, our friends at @revealnews.org tell you the story of the film that the BBC didn't want you to see.

The mystery of a globetrotting iPhone-hacking toolkit Tools used in a series of hacking campaigns by hackers in Russia, Ukraine, and China may have originated inside U.S. government contractor L3Harris, TechCrunch has learned.

SCOOP: The iPhone mass hacking toolkit used by Russian spies was developed at U.S. military contractor L3Harris, former employees said.

The Coruna toolkit was used against Ukrainians and by Chinese cybercriminals, according to Google. But the toolkit was initially developed for Western governments.

The widely used satellite imagery provider, Planet Labs, has announced there will now be a two week delay on imagery related to the current conflict in Iran to commercial customers.

Why Are Some Democrats Backing MAGA's Anti-LGBTQ+ Censorship? From late-night host cancellations to removing LGBTQ+ history from government sites, politicians in both parties are contributing to the overwriting of the internet — a place where lots of queer and t...

But let's not forget, while this is typical behavior we expect from the Right, Democrats, even ones who claim to be allies to LGTBQ communities like @warren.senate.gov , are green-lighting this! Our Director @evangreer.bsky.social talks about how in @teenvogue.com : www.teenvogue.com/story/some-d...

Banner image for 'INFO SEC & DATA PRIVACY: Weekend News Roundup' set against a blue background with a circuit board pattern. On the left side is the Sherpa Intelligence logo, a stylized blue mountain peak with the text 'SHERPA INTELLIGENCE' below it. The main title text 'INFO SEC & DATA PRIVACY: Weekend News Roundup' is prominent in the center. On the right, there is a cartoon illustration of a smiling cowgirl riding a brown horse and lassoing three calendar pages labeled 'FRIDAY,' 'SATURDAY,' and 'SUNDAY,' which have cheerful faces.

Sherpa Intelligence paid attention to the #InfoSec & #DataPrivacy news from over the weekend so you wouldn't have to!

Read Information Security & Data Privacy Weekend News Roundup: March 6-8, 2026 sherpaintelligence.substack.com/p/informatio...

The Greenville Eight and Library Discrimination, Then and Now: Book Censorship News, March 6, 2026 The Greenville Eight protested library discrimination in 1960. Their fight and others like them are a legacy that continues to play out now.

The Greenville Eight protested library discrimination in 1960. Their fight and others like them are a legacy that continues to play out now.

bookriot.com/the-greenvil...

AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours David and Goliath…but with AI agents Researchers at red-team security startup CodeWall say their AI agent hacked McKinsey's internal AI platform and gained full read and write access to the chatbot in just two hours.…

AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours

'We can get to you whenever we want to': Immigrants say ICE is surveilling them NPR collected dozens of accounts from people who have been caught in the massive surveillance web set up by the Department of Homeland Security.

“When you look at our ever-present surveillance state and the ways in which people are being retaliated against and identified, I think that this is exactly what they (U.S. founding fathers) wouldn't have wanted,” EFF’s Saira Hussain told @NPR.org. www.npr.org/2026/03/08/...

Banner image for 'INFO SEC & DATA PRIVACY: Weekend News Roundup' set against a blue background with a circuit board pattern. On the left side is the Sherpa Intelligence logo, a stylized blue mountain peak with the text 'SHERPA INTELLIGENCE' below it. The main title text 'INFO SEC & DATA PRIVACY: Weekend News Roundup' is prominent in the center. On the right, there is a cartoon illustration of a smiling cowgirl riding a brown horse and lassoing three calendar pages labeled 'FRIDAY,' 'SATURDAY,' and 'SUNDAY,' which have cheerful faces.

Sherpa Intelligence paid attention to the #InfoSec & #DataPrivacy news from over the weekend so you wouldn't have to!

Read Information Security & Data Privacy Weekend News Roundup: March 6-8, 2026 sherpaintelligence.substack.com/p/informatio...

Enterprise Account Takeover Solutions: How to Operationalize Protection After Go-Live

This guide from Memcyco explains how to operationalize modern enterprise-grade account takeover (#ATO) after go-live, based on frontline enterprise deployment insights. So, that's pretty interesting. Go on, it's just a 4-minute read. cybersec.memcyco.com/s/enterprise...

Ring doorbells: Won't you see my neighbor? (Lock and Code S07E05) This week on the Lock and Code podcast, we speak with Matthew Guariglia about Ring smart doorbells and the surveillance network they create.

For @malwarebytes.com, I did a full interview about what the hell is happening with Amazon Ring, how did we get here, and what we can do about it.

Iran is the first out-loud cyberwar the US has fought Kettle: Cyber is no longer the hush-hush thing it used to be, as team Trump invades Iran with hackers taking the lead

Welcome back to the Kettle, The Register's weekly podcast, hosted anew by @bvig.bsky.social. This week, he's joined by @tobiasmann.bsky.social and @jessicalyons.bsky.social to discuss the role of tech in the war in Iran:
www.theregister.com/2026/03/09/k...

It’s so frustrating because I pointed this out in 2015 www.wired.com/2015/10/mr-r...

It is true that Proton is located in Switzerland and responded to a legal request from the Swiss authorities. But it is also true that most people do not know what an MLAT is and there is a widespread misunderstanding that using Proton will protect your account from US govt requests.

ICEBREAKER cargo.site

IceBreaker is a free online resource that maps the activity of ICE within NYC. It provides key info such as time, date, the # of agents on sight and the number of people detained.
nycicebreaker.cargo.site

I've been expecting to see this shift for a while and it is interesting to see it actually starting to happen.

Best Practices Least Privilege Manifesto by Graham Neray Last updated: February 26, 2026 Published: February 24, 2026

Read about best practices for automated least privilege in Graham Neray's "Least Privilege Manifesto." OSO | February 26, 2026 api.cyfluencer.com/s/the-least-...

Halifax Water investigating privacy breach, shuts down online portal Halifax Water says it is investigating an unauthorized access to information in its customer connect online portal.

"Halifax Water advises customers if they receive a call from someone claiming to be the utility, and are unsure of their legitimacy, to hang up and call them back using the number on their official website (902-420-9287)." @vmcntosh.bsky.social
www.ctvnews.ca/atlantic/nov...

Document Foundation urges EU to ditch Excel lock-in for cybersecurity law consultation LibreOffice steward says Commish undermines its own standards by asking for feedback via Excel spreadsheet The Document Foundation has taken a swipe at the European Commission over its consultation on guidance for the EU's Cyber Resilience Act – because the feedback template is only available as a Microsoft Excel spreadsheet.…

FYI: Document Foundation urges EU to ditch Excel lock-in for cybersecurity law consultation

Well, called this one wrong.

Although don’t think this is any state sponsor type attack, likely lone wolf sympathizers.

Jan. 6 plaque honoring police officers is now displayed at the Capitol after a 3-year delay Visitors to the U.S. Capitol will now have a visible marker of the siege there on Jan. 6, 2021, and a reminder of the officers who fought and were injured that day. Steps from the Capitol’s West Fron...

Put up in the middle of the night, without ceremony.

Geoconfirmed Iran.

We mapped over 100 locations in the last 48 hours.

Visit our map: each pin includes the related footage and its verified geolocation when you click on it.

geoconfirmed.org/iran

For the BlueSky community, tag us in GeoLocations, they will be added to the map.

This should be a bright, blinking light catching everyone’s attention.

I guess it would help if I included the link! (The workshop is tomorrow.) www.elizabethspiers.com/workshops/

Admiring Our Heroes for International Women’s Day: Five Women In Tech In honor of International Women’s Day, we asked five women at EFF about women in digital rights, freedom of expression, technology, and tech activism who have inspired us. Anna Politkovskaya Jillian

EFF’s Director of Public Interest Technology, Babette Ngene was inspired to work in tech and human rights by Ebele Okobi. www.eff.org/deeplinks/2...