wiredmikey shares a report from SecurityWeek: Meta-owned communications app WhatsApp says it recently detected and disrupted a spear-phishing attempt linked to spyware company NSO Group. The attack is allegedly in defiance of a court order that bars the spyware maker from targeting WhatsApp. WhatsApp filed a lawsuit against NSO in 2019, after it came to light that a zero-day vulnerability had been exploited to deliver spyware to users. [...] NSO has been seeking to overturn the order blocking it from targeting WhatsApp users, arguing that the company will "suffer irreparable harm." According to WhatsApp, the spyware maker has violated the permanent injunction. The messaging app reported on Monday that it had recently learned of a social engineering attack that attempted to trick users into clicking on malicious links. WhatsApp has only shared a few domains as an indicator of compromise (IoC), but says it was able to link the attack to NSO, pointing to similarities to previously reported one-click phishing campaigns tied to the spyware company. WhatsApp says it also caught the attackers creating test accounts and groups. Those accounts and groups have been disabled, but further action is also being taken. WhatsApp says it is asking a federal court to hold NSO in contempt for allegedly violating a permanent injunction barring it from targeting WhatsApp and its users. The company also said it is making a "significant contribution" to the Spyware Accountability Initiative, a fund aimed at exposing and stopping spyware abuse.

Read more of this story at Slashdot.

People are disabling the "recording light" on Meta's Ray-Ban smartglasses — "by my count, thousands of people," says tech journalist Joanna Stern in a new video report: STERN: "They're hiring people on Facebook Marketplace to drill out the light for as much as $100. According to our reporting, folks are offering this service in at least 30 states — despite Meta's attempts to stop it... In most states, we found multiple listings. In the New York and New Jersey area alone there were 23 listings." Stern watched a man in New Jersey disable and then conceal the light with a drill and dental probe in a New Jersey garage (a skill he learned watching YouTube and TikTok videos). He said the same day he'd already been contacted by eight more interested customers, and Stern also found at least 10 other people willing to do the same thing, just in New Jersey. "But what we found is they're all over the country." Meta sold 7 million smartglasses in 2025, but a Meta spokesperson insisted to the videomaker that a "majority" of their smartglasses owners aren't blocking the recording light. And furthermore, they added "We aggressively target anyone advertising tampering tools, have removed thousands of violating ads and Marketplace listings for these services, and pursue legal action when appropriate." (The reporter acknowledges "many" of the Marketplace ads disappeared after they brought them to Meta's attention — and Meta also said they were working with other retailers and sellers to take down listings for smartglasses-tampering parts.) The reporter also heard from one journalist who said they'd used it so they could record the activities of federal immigration agents without being targeted. "Others told me they just don't want people asking questions when they're recording." (There's video of one young man saying "It's already difficult enough to film in public. I don't want to have a blinking light on my face.") Tampering with smartglasses isn't illegal — though it is against Meta's Terms of Service, and could void your warranty. But a lawyer in the report says recording others without consent may be illegal, depending on a wide range of "jurisdictional nuances" like whether you live in an all-party consent state or a one-party consent state. "This seems to be our new reality," the report concludes: "more cameras, more microphones everywhere, and less certainty about who and what is recording." (Tech blogger John Gruber offered this assessment. "Using a Meta platform to find people to hack a Meta device so you can surreptitiously record strangers. So perfectly Meta.") Stern's report points out that "People are trying to fight back. Apps have popped up that use Bluetooth to scan for nearby camera glasses." (In the video one app-maker wonders why Meta isn't offering the same service themselves. "There are technical solutions to these problems.") Ironically, when I watched the report on YouTube, it was preceded by... an ad for Meta's Ray-Ban AI smartglasses.

Read more of this story at Slashdot.