In 2025, I found 3 popular apps leaking sensitive user data thanks to simple security bugs. In this *very* deep-dive for subscribers, this is how I use network analysis tools (like Burp) to understand how apps and websites work & share your data — and how you can, too!

I explain how to get started with Burp and similar browser tools, we'll explore API basics, how to understand network requests, and how to get started. I'll also include examples for you to follow along.

https://this.weekinsecurity.com/a-beginners-guide-burp-suite-analyzing-network-traffic-of-apps-and-websites/

Meta is facing a new lawsuit over its AI smart glasses, after a news investigation found subcontractors are reviewing footage from customers' glasses, which "included sensitive content, like nudity, people having sex, and using the toilet."

https://techcrunch.com/2026/03/05/meta-sued-over-ai-smartglasses-privacy-concerns-after-workers-reviewed-nudity-sex-and-other-footage/

U.S. and EU police say they've taken down LeakBase, “one of the world’s largest online forums for cybercriminals” for sharing stolen passwords and hacking tools.

The site now displays a seizure notice.

https://techcrunch.com/2026/03/04/u-s-and-eu-police-shut-down-leakbase-a-site-accused-of-sharing-stolen-passwords-and-hacking-tools/

It's absolutely insane to me that in this day and age a company would reject end-to-end encryption so that cops and feds can actively read people's messages. It also puts that same data at risk from hackers. But that's TikTok, under new U.S. ownership.

https://www.bbc.com/news/articles/cly2m5e5ke4o

Seems like the whole world is melting down so I'm gonna break my longstanding rule of not posting my feet to the internet to post this snap of my incredibly handsome loaf cat.

If you like my reporting, you might also like my free weekly cyber newsletter ~ this week in security ~ which packs in all the news you can use from the week, plus sections dedicated to good news and a reader-submitted cyber-cat. Goes out on Sundays by email & RSS. Newsletter archive & blog online. 🐈‍⬛

https://this.weekinsecurity.com

New, by me at TechCrunch: After a year of cuts, layoffs, and furloughs under the Trump administration, U.S. cybersecurity agency CISA has now replaced its acting director Madhu Gottumukkala, whose tumultuous year-long tenure was dogged by security headaches and accusations of bumbling the job.

https://techcrunch.com/2026/02/27/cisa-replaces-acting-director-gottumukkala-after-a-bumbling-year-on-the-job/

Some independent/local news outlets I read and recommend. Share yours!

https://www.zetter-zeroday.com
https://citationneeded.news
https://www.lawdork.com
https://krebsonsecurity.com
https://404media.co
https://techdirt.com
https://www.metacurity.com
https://www.thehandbasket.co
https://www.garbageday.email
https://indicator.media
https://www.wheresyoured.at
https://www.courtwatch.news
https://realhackhistory.org
https://www.londoncentric.media
https://privacyguides.org
https://databreaches.net

In 2020, the FBI came to my house to try to ask me questions about a story I'd written. I declined.

I wrote about the back-story of what happened that day and after, my outstanding questions, and why press freedoms have taken a major step back under Trump's second term.

More: https://this.weekinsecurity.com/fbi-agents-visited-my-home-about-an-article-i-wrote-and-now-i-cannot-go-to-mexico/

Trump is "weighing a possible executive order or other action that would require banks to collect citizenship information from customers." This order could task banks, reportedly alarmed, with checking IDs of "both new and pre-existing customers who want to maintain a bank account in the U.S."

WTF. https://www.wsj.com/politics/policy/trump-administration-considers-action-requiring-banks-to-collect-citizenship-info-8e26f6d2

NEW: Fintech giant Marquis, which had a ransomware attack last year exposing a huge number of consumer banking customers, is now suing its firewall provider SonicWall, claiming hackers stole its firewall backup file from SonicWall's cloud that ultimately allowed hackers to breach Marquis' network.

More: https://techcrunch.com/2026/02/24/marquis-sonicwall-lawsuit-ransomware-firewall-breach/