Brave Browser Claims Alibaba's AliExpress Caught Tracking Users With Hidden Audio Fingerprinting

latestly.com Aug 23, 2026

Brave Browser Claims Alibaba’s AliExpress Caught Tracking Users With Hidden Audio Fingerprinting

Curated by Shubham · TechCapsules · Aug 23, 2026

AI-summarised brief · reviewed before publication

Alibaba-owned AliExpress was discovered running hidden Web Audio API scripts on its homepage that emitted a silent tone to analyze how devices processed the sound, a technique used for browser fingerprinting. The method, part of the site’s anti‑fraud and security tools, created audio processing graphs that connected to the system audio output at zero volume, avoiding detection by mute controls. Brave browser reported the practice after a user noticed interference with Bluetooth headphones and stated its default protections block such tracking. The incident highlights a covert data‑collection method that bypasses traditional cookie‑based tracking.

💡 Why It Matters

· The revelation exposes a subtle, hardware‑based tracking vector that can evade conventional privacy safeguards, underscoring the need for browsers to monitor and restrict low‑level audio APIs.

Capsules Cybersecurity

Read full article on latestly.com

Uber faces fine of nearly $1B over automated driver suspensions

The Dutch Data Protection Authority has imposed an €825 million fine on Uber, marking the second-largest penalty under Europe’s General Data Protection Regulation. The sanction addresses allegations that the ride-hailing giant used automated systems to suspend driver accounts without adequate human oversight or warning. Deputy chair Monique Verdier condemned the practice, stating computers should not make decisions with major consequences. Uber disputes the severity, arguing most suspensions are brief and permanent deactivations involve human review. The company plans to appeal, calling the fine disproportionate. The investigation originated from complaints by drivers, including former driver Brahim Ben Ali, who collaborated with digital rights nonprofit PersonalData.io. This penalty follows previous fines of €290 million and €10 million against Uber by the same regulator. PersonalData.io founder Paul-Olivier Dehaye announced plans for a class-action lawsuit to seek compensation for affected drivers, expanding regulatory pressure on gig economy platforms.

💡 The ruling challenges the legal classification of gig workers by implying that algorithmic management constitutes employment responsibility. It forces platforms to choose between maintaining automated control or accepting employer liabilities.

telesurenglish.net · Aug 23

U.S. Recruits Palantir, Anduril for Free-Speech Program

The U.S. State Department has selected Palantir Technologies and Anduril Industries as private-sector partners for the Technology Excellence for Freedom Program. This initiative aims to promote freedom of expression and digital rights globally. Employees from both firms will undertake temporary assignments at the State Department. Their responsibilities include addressing cybersecurity, emerging technologies, data privacy, online child protection, artificial intelligence, and technology policy governance. The selection has sparked debate among experts. Critics question the suitability of companies known for mass-surveillance and military technologies in a program dedicated to online freedoms. Former officials like Chris Painter and Steve Feldstein have expressed skepticism regarding the partners’ expertise in free speech. Palantir and Anduril face ongoing scrutiny over their surveillance practices and alleged human rights violations, particularly concerning military applications and involvement in conflict zones.

💡 Entrusting surveillance giants with defining digital rights creates a fundamental contradiction in U.S. foreign policy. It suggests that national security interests may now outweigh democratic principles in shaping global internet governance.

elystandard.co.uk · Aug 23

Antivirus software tips from Ely Computer Centre director

Scott Colling, managing director of The Ely Computer Centre, warns that antivirus software alone cannot ensure complete computer security, particularly for unsupported operating systems. He highlights that Microsoft ended support for Windows 10 in October 2025, meaning security updates are no longer provided for most users. Consequently, newly discovered vulnerabilities remain unpatched, exposing these computers to criminal exploitation regardless of antivirus quality. Colling advises users to identify their Windows version by checking if the Start button displays four black squares, indicating Windows 10. Since many older devices cannot meet Windows 11 hardware requirements, he recommends replacing unsupported machines rather than attempting upgrades. Users unsure of their system status or upgrade eligibility are urged to seek professional advice promptly. This guidance aims to help the Ely community mitigate risks associated with aging technology and discontinued software support, ensuring better protection against evolving cyber threats.

💡 The end of Windows 10 support leaves millions of devices vulnerable to unpatched exploits that antivirus software cannot prevent. Users must act now to replace incompatible hardware before becoming easy targets for cybercriminals.

appleinsider.com · Aug 23

Crime blotter: Bail revoked in Hingham Apple Store crash case

A weekly roundup of Apple-related criminal incidents highlights diverse legal and security issues. In Massachusetts, bail was revoked for Bradley Rein, charged with second-degree murder after his vehicle crashed into a Hingham Apple Store in November 2022, killing one person. Federal agents seized an iPhone and MacBook from former Congressman Eric Swalwell during a civil rights investigation into sexual assault allegations. Meanwhile, pickpockets at San Francisco’s Outside Lands festival stole iPhones that were tracked via Find My to Los Angeles, though jurisdictional issues hampered police response. In Pennsylvania, a suspect used a stolen credit card to purchase two MacBook Pros. In Kentucky, a man was arrested for violating a protective order by using an AirTag to stalk an ex-girlfriend and shooting at her car with a paintball gun. Additionally, an iPad’s tracking signal led to a burglary suspect’s arrest in Oregon, where police recovered stolen electronics, firearms, and personal documents. These cases underscore the intersection of technology, crime, and law enforcement challenges.

💡 The Swalwell seizure demonstrates how federal investigations increasingly target personal devices for evidence, while the AirTag stalking case reveals the dark side of consumer tracking technology. These incidents force a reckoning with how digital footprints are weaponized in both high-profile political scandals and everyday domestic abuse.

abacusnews.com · Aug 23

Blockchain Infrastructure Vulnerabilities: NIST View

The National Institute of Standards and Technology (NIST) released its draft “BloSS@M” report (NIST IR 8500A) on May 19, 2026, framing blockchain security as an infrastructure problem rather than isolated smart‑contract bugs. The document outlines five risk domains—asset provenance, vulnerability management, identity custody, software assurance, and operational governance—and proposes using an immutable ledger to record hardware and software lifecycles, integrate automated feeds from the National Vulnerability Database, and preserve audit trails. While the ledger can store asset histories, NIST warns it cannot verify the accuracy of initial entries, requiring robust enrollment controls and procedures for correcting metadata. The draft stresses that accurate asset identification is essential for real‑time vulnerability mapping, especially given the diverse components of blockchain ecosystems such as nodes, wallets, APIs, and consensus clients.

💡 Accurate, tamper‑evident asset records could become the linchpin that lets regulated firms safely adopt blockchain for payments and custody, turning a technical weakness into a manageable operational risk.

ign.com · Aug 23

GTA 6 Leaker Releases More Gameplay Videos Despite Rockstar Owner Take-Two’s Microsoft…

The entity known as ‘CyberLeek’ released two additional Grand Theft Auto 6 gameplay videos on August 22, defying legal pressure from publisher Take-Two Interactive. The new clips feature supercar driving, armed robbery, and strip club scenes, with one cutscene appearing to mock the publisher. These are the seventh and eighth leaks this week, all promoting a ‘CyberLeek’ memecoin in what analysts view as a crypto scheme. In response, Take-Two served DMCA subpoenas to Microsoft and Discord, seeking user identification records. The US District Court for the Southern District of New York granted the Microsoft subpoena on August 21. Xbox CTO Scott Van Vliet confirmed cooperation with Take-Two to protect intellectual property. Discord stated it complies with valid subpoenas. Despite internal frustration, Rockstar does not know the leak source. Netflix will proceed with its exclusive extended look on August 27. GTA 6 remains scheduled for release on PlayStation 5 and Xbox Series X|S on November 19, 2026.

💡 The leaker’s deliberate mockery and continued uploads despite active federal subpoenas suggest a coordinated effort to maximize crypto token value over mere notoriety. This escalates the incident from a standard copyright breach to a complex financial fraud operation targeting the gaming community.