classification Archives

AppWizard

June 4, 2025

DMA decision ignored “objective reality” of Facebook Messenger, Meta claims

The European Commission has classified Facebook Messenger as a core platform service under the EU's Digital Markets Act. Meta argues that this classification fails to recognize the app's integration within the broader Facebook ecosystem, asserting that understanding its functionality requires considering its relationship with the Facebook platform. Meta's response indicates the complexities in defining digital services as regulatory frameworks evolve.

Winsage

May 22, 2025

Windows Server Flaw a Shortcut to Privilege Escalation

An unpatched vulnerability in Windows Server 2025, identified by Akamai researchers, is associated with a method called "BadSuccessor." This flaw, considered "trivial" to exploit and present in the default configuration, allows for privilege escalation and potential full domain compromise. The vulnerability arises from delegated managed service accounts (dMSA), which were intended to enhance security during the migration of legacy service accounts. However, dMSAs can inherit permissions from legacy accounts, enabling attackers to simulate a migration and gain access to the permissions and encryption keys of those accounts without verification. The attack requires prior permissions within an Active Directory organizational unit, indicating a previous breach. Akamai reported the vulnerability to Microsoft on April 1, but Microsoft classified its severity as "moderate." Akamai recommends organizations restrict the creation of dMSAs to mitigate risks associated with this vulnerability.

AppWizard

April 25, 2025

Data privacy firm files complaint against Ubisoft

The European Center for Digital Rights (NOYB) has accused Ubisoft of excessive data collection practices related to the game Far Cry Primal, which may violate GDPR regulations. Players reportedly connected to external servers 150 times within ten minutes of launching the game, including connections to Google, Amazon, and Datadog. Despite being a single-player game, it requires an internet connection for ownership verification. NOYB has expressed concerns about the lack of transparency regarding data transmission to external servers.

AppWizard

April 6, 2025

Pentagon inspector general investigating Hegseth’s use of Signal messaging app

DoD's acting Inspector General, Steven Stebbins, is reviewing Defense Secretary Pete Hegseth's use of the Signal app for operational airstrike discussions in Yemen to evaluate compliance with policies on commercial messaging for official communications and classification mandates. Concurrently, House Oversight Committee Democrats are investigating the Department of Government Efficiency's data usage, while OPM is directing agencies to revise performance review processes to prioritize adherence to presidential policies. The Defense Department has mandated public reporting of canceled contracts linked to Trump's efficiency initiatives. The SSA is tightening identity-proofing requirements for benefit applications, discontinuing phone verification options. During a nomination hearing, Trump’s nominees for OPM and OMB faced questions regarding federal workforce reductions. The Army has abandoned plans for a billion-dollar software development contract after feedback on draft RFPs. Employees at the IMLS have been placed on administrative leave amid concerns over the agency's future and grant disbursement obligations following Trump's executive order aimed at eliminating smaller entities.