PrivacySignal
Breach

Cellebrite said it cut off Russia, but Russia used its tools anyway

TechCrunch — Privacy · · International · Data Breaches

Security researchers found evidence that Russian authorities used a Cellebrite phone-unlocking device to access a political opponent's iPhone, despite Cellebrite's stated policy of cutting off sales to Russia following its invasion of Ukraine. The findings suggest the tools reached Russian law enforcement through channels the company either did not control or did not stop.

Why this matters: Cellebrite sells powerful tools that can crack into locked phones. When it announced it was cutting off Russia, that was supposed to mean something. It apparently did not. Whether the device was resold, stockpiled, or routed through a third party, the result is the same: a tool marketed to democracies ended up targeting a political dissident in an authoritarian state. This is the core problem with selling surveillance technology. Once it leaves your hands, you do not control it. Cellebrite now needs to explain not just what its policy says, but how it actually enforces one.

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
CyberScoop · · US Federal

Vanderbilt University reels following ransomware attack claimed by BYOD group

Some services began returning online Tuesday following a ransomware incident detected on Monday across Vanderbilt systems and applications. The post Vanderbilt University reels following ransomware attack claimed by BYOD group appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
BleepingComputer · · International

Binance warns of iOS flaw that could leak crypto wallet secrets

Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
BleepingComputer · · International

Ransomware recovery is now a client retention metric

Recovering from ransomware doesn't guarantee an MSP will retain its clients, especially when delays, poor communication, and unexpected costs undermine trust. Kaseya examines how disconnected recovery tools create these problems and how integrated workflows can improve response times, transparency, and client retention. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

Ransomware Attack Puts Vanderbilt University on Lockdown

Eli Motycka reports: A broad announcement to shut down university devices and disconnect from university Wi-Fi went out on Monday morning as malicious software began spreading through computers, files and digital infrastructure. The incident follows similar hacks at universities across the country. “We are currently responding to an active cybersecurity incident that may impact university...

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →