A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal card data and send it to attackers in real time.
In an incident investigated by the cybersecurity company Group-IB, a fraudster impersonated a bank employee and called the victim under the pretense of a problem with their payment card.
During the call, the threat actor instructed the victim to sideload the SpyNote RAT disguised as a legitimate app and grant it Accessibility Service permissions, giving the attacker remote access to the Android device.
To add credibility, the attacker personalized the malicious app label with the victim’s name.
After gaining remote access to the device through SpyNote, the attacker installed WindRelay without further interaction with the victim and used the banking app to take out a loan in the victim’s name.
Additionally, the victim was instructed to tap their payment card on the phone and enter their PIN. WindRelay turned the phone into a fraudulent contactless reader and relayed the live NFC (near-field communication) exchange, including the card’s transaction-specific authentication data, to the attacker’s device.
This allowed the attacker to use the card data for purchases at a genuine payment terminal.
Group-IB says that the entire activity occurred in a 13-minute phone call, and transactions were approved using the PIN provided by the victim.
The researchers highlight that the combination of SpyNote and WindRelay may indicate a toolkit that provides both access to the victim’s device for banking transactions and a direct cash-out channel.
Also, in contrast to most modern Android malware with live screen sharing and VNC features, this malware mix enabled the attackers to commit fraud solely through social engineering over the phone.
Android NFC malware is a growing problem, as shown by malware families such as NFCShare, NGate, SuperCard X, and RelayNFC.
In a typical attack, the victim installs a malicious app and grants it access to NFC. The attacker then uses social engineering to trick the victim into tapping their payment card against the compromised phone.
The phone uses its NFC interface to communicate with a contactless payment card and capture available data, which it then transmits over the internet to an attacker-controlled device.
Depending on the data obtained and the technique used, the attacker may be able to use it for fraudulent transactions or other financial theft, including ATM cash withdrawals.
The SpyNote RAT and variants such as SpyMax and CypherRAT have been circulating since at least 2021 and recorded an increase in detections in late 2022 and early 2023, following the leak of the malware’s source code.
The malware can steal bank data, Facebook and Google account credentials, Google Authenticator codes, GPS tracking, and SMS texts. It can also activate the device microphone and camera, and generic intercept keystrokes.
Group-IB has identified almost two dozen WindRelay samples submitted to VirusTotal between November 2025 and July 2026 that communicated with four command-and-control IP addresses.
According to the researchers, targeting appears focused on Czechia, Slovakia, and Slovenia, based on the organizations impersonated and the languages used.
Unless they know and trust the publisher, Android users are advised to avoid APK packages outside Google Play, and to be very careful with apps that request NFC access or other dangerous permissions.
When receiving a call from your bank and asked to take urgent action, it is advisable to terminate the call, dial the number listed on the organization’s official website, and ask to connect with the same support agent.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
The Federal Trade Commission recently announced deals with two auto dealers, along with the former general manager of a third, promising not to enforce—or even help enforce—their court-ordered obligations to maintain fair lending programs and not engage in unlawful credit discrimination.
The Northern District of Illinois, which presided over one case, says it was never given the opportunity to evaluate one of the new agreements, and Arizona attorney general Kris Mayes, whose office was a coplaintiff in another of the affected cases, calls the move “outrageous.”
The FTC is doing away with the obligations because the defendants didn’t explicitly instruct its salespeople to treat Black and Latino borrowers differently. Previously, the FTC accused all three of charging people of color more in discretionary markups and add-on fees on average compared to white borrowers. (Disclosure: The author of this article previously worked for the FTC but did not participate in any of the matters mentioned in this article.) In one case, involving a car dealership chain called Passport, the FTC alleged that a financial institution had sent the chain multiple letters notifying it that there were disparities in the markup rates it charged Black borrowers. Attorneys for Passport declined to comment on the agreement.
The FTC and Arizona previously accused Coulter Motor Company and Gregory DePaola, a former general manager at the Phoenix-area auto dealer, of charging Latino customers more in interest and for add-on products, in violation of the federal Equal Credit Opportunity Act, among other charges.
DePaola, who did not respond to a request for comment, signed one of the new agreements. Coulter and an attorney that represented both Coulter and DePaola in the 2024 settlement did not respond to requests for comment.
“The FTC and the Attorney General’s Office partnered on this case to ensure Arizonans can purchase cars without being misled or charged more because of their ethnicity,” says Mayes. “I find it appalling that the FTC would backtrack on the settlement and treat its state partners this way, not to mention essentially greenlight discrimination against Arizonans.”
The FTC said in a press release that its past accusations against the defendants were “based on statistical analyses designed to show disparate-impact liability” and that the agency was not going to enforce those types of claims anymore. Disparate-impact discrimination is when a seemingly neutral policy or practice causes disproportionate harm to a protected group, even if that wasn’t the original intent. It stands in contrast to disparate-treatment discrimination, which involves policy intentionally meant to discriminate against a group of people.
“It’s actually a really hard theory where you have to identify a specific policy, prove that it caused a disparity, and then the hardest thing of all is you have to prove that that policy doesn’t serve a legitimate purpose,” says Aaron Rieke, the chief legal engineer at a legal startup called Privlex and a former FTC attorney adviser.
Logan Koepke, a senior project director at Upturn, a nonprofit that researches technology’s impact on civil rights, says that disparate-impact analysis is more important than ever, because AI and other automated decisionmaking systems, which can sometimes take unintended actions, are being used more often to make important decisions like loan eligibility.
Last year, the Trump administration directed the FTC and other agencies to review all past orders and take “appropriate action” in an executive order titled “Restoring Equality of Opportunity and Meritocracy.” The administration has said that disparate-impact liability “undermines our national values.”
The agreements, which were voted on by the commission in early August but went into effect over half a year prior, in November, are highly unusual. Though the FTC typically has to prioritize some enforcement efforts over others due to resource constraints, by signing and voting out the agreements they essentially delete two sections from each of the orders and potentially make it difficult for future administrations to undo that.
The administration has no legitimate justification for this action. It’s all about inflicting as much literal pain as possible on anyone ICE officers happen to encounter.
Immigration and Customs Enforcement officers may soon be outfitted with gloves that can deliver painful electric shocks intended to gain compliance from combative individuals.
ICE plans to spend up to $20 million to purchase thousands of “conductive distraction and de-escalation devices” for officers and agents by March, according to a notice published Monday by the Department of Homeland Security.
It’s a Taser but it’s a glove. It’s something hardly anyone in law enforcement has ever needed. And yet, there’s a $20 million no-bid contract that is going to make (lol) Compliant Technologies that much richer. Compliant Technologies describes the G.L.O.V.E. (Generated Low Output Voltage Emitter) this way [all quotation marks in the original]:
The G.L.O.V.E. quickly transforms into a CD3 (Conductive Distraction and De-escalation Device) when used within the Force Continuum to supplement existing tools for law enforcement, corrections, security, EMS and the military. It is available as an “invisible partner” to enhance the user’s effectiveness when operating within their agencies’ already established tactics, techniques and procedures. This is why we call the G.L.O.V.E. the “Force Multiplier” and how it operates within the Force Continuum as “The New Protocol in Peace Keeping.”
Oh my. “Force multiplier.” “Invisible partner.” “New Protocol in Peace Keeping.” That’s a whole lot of jargon right there. It’s an ambush tactic (a glove with a juiced up joy buzzer inside) that will definitely be a “force multiplier” (if by “force,” you mean “excessive”) in/on the hands of ICE officers.
I mean, they’re really not showing any restraint now, whether they’re raiding flea markets, subjecting migrants to continuous rights violations in ICE detention facilities, or straight up murdering people in the streets.
I’m not kidding. It’s basically Taser, but in glove form. The user’s manual (embedded below in case the company decides to make it disappear) compiled by Compliant Technologies even uses Taser’s jargon for “but the person died of something other than continuous electric shocks:”
AGITATED CHAOTIC EVENT (ACE) PREVIOUSLY KNOWN AS EXCITED DELIRIUM SYNDROME (EXDS) AND SUICIDAL CONSIDERATIONS
Compliant Technologies does not prescribe any protocols for using a CD3 device in a situation involving an ACE or suicidal people. It is the responsibility of the officer to deal with these cases according to their agency’s protocols and procedures.
Yeah, that ought to keep the blood off Compliant’s hands. (But not so much the ICE officers whose electro-gloves may now be covered in the blood of people who’ve had the privilege of being subjected to the “new protocol in peacekeeping.”)
The manual makes it clear there will be plenty of opportunity for “friendly fire:”
It is recommended to have an additional officer on scene to cuff/restrain while the G.L.O.V.E. is being deployed. Always advise other officers of G.L.O.V.E. deployment by saying, “G.L.O.V.E. ON!”
Hmmm. I wonder how many times be-GLOVEd officers’ “GLOVE on!” shouts will be misheard as something about a gun. Shout that phrase loud and fast with as much “rapidly-evolving situation” tension as you can apply. The hard G alone will probably be enough to bring multiple ICE firearms into the firing position. Repeating the phrase for clarity will probably just make ICE officers believe they misheard correctly the first time.
To date, almost every user of this device is someone working in a correctional facility where this probably makes a bit more sense. I’m not saying there’s any reason for these gloves to exist at all, but when you’re trying to subdue someone while surrounded by convicted criminals, any help is probably appreciated.
As for any comments from ICE about officers receiving appropriate training before being given a pair of stun gloves, the agency can go fuck itself. It’s been on a hiring spree since Trump took office. To maintain the number of officers needed to make the administration’s bigots happy, ICE has gutted its training program and lowered its hiring standards.
And even if officers are receiving the full load of training, it’s hardly specific to the roving-gang-of-masked-thugs work most officers are doing now. Prior to everyone calling for ICE’s abolishment, ICE spent most of its time seizing things, rather than people — something one would expect from a customs enforcement agency. For years, immigration problems were largely handled by the agencies that dealt with the largest number of immigrants: CBP and the Border Patrol.
Adding this to the arsenal just means more people are going to be seriously injured or killed. It will do absolutely nothing to make ICE better, more efficient, or capable of meeting sky-high arrest quotas. The misanthropes running this government are apparently just googling up whatever new means of pain/torture they can get their hands on/in. We can only hope a lot of officers will forget they still have their gloves engaged when doing things like adjusting their masks or scratching their balls.
Filed Under: cruelty, dhs, excessive force, ice, mass deportation, police violence, trump administration
Companies: compliant technologies
Apple’s latest proposal in the Epic trial suggests it should be able to charge between 5% and 15% on external purchases. However, Epic will appeal any value above 0%.
The ongoing lawsuit between Apple and Epic has left Apple unable to charge commissions on external purchases since its injunction violation in April 2025. Thursday’s proposal could let Apple begin charging something again soon, that is if the District Court finds it within its expectations.
Apple was ordered to provide a plan for external commission rates on Tuesday, and in spite of multiple appeals, has finally done so. The filing was made on the minute at 5 p.m. EST when the deadline was set.
The proposed rates are Apple’s most modest yet and a sharp fall from its original proposal that maxed out at 27% in commissions. The filing suggests that the District Court has mischaracterized the costs of doing business with the App Store and the value Apple provides, but shared its proposed rates anyway.
Here is what Apple offered:
Apple stated that it believes these rates will be highly competitive versus using in-app purchases. It is also enough that Apple will have some mild profit margin as well.
Apple also filed an Administration Motion for Referral to Settlement Conference. It suggests that a settlement conference would help both parties reach resolution and narrow or resolve remaining issues.
Apple’s filing is in, and Apple admitted that under the Ninth Circuit’s definition of “necessary costs” they would charge 0% for purchases made via linkouts to the web.
Apple proposed linkout fees of 15% for standard apps and 5% for Small Business Program apps. Epic believes
— Epic Games Newsroom (@EpicNewsroom) August 13, 2026
Epic seems to believe it owes nothing and should be able to benefit from distributing apps on the App Store without paying Apple a dime of compensation. It plans to file an oppositional statement.
The data and AI company’s valuation has jumped from $134bn to $190bn in just six months.
San Francisco’s Databricks has closed a $5bn strategic funding round led by Coatue at a $190bn valuation. The company said the fresh funds will drive continued innovation across Lakebase, its database warehousing product, Genie, its “AI coworker” and its Unity AI Gateway for multi-AI governance and cost controls.
Blackstone and MGX joined Coatue in this round, and new investors included Sixth Street Growth, BOND, Clearlake Capital, Point72, Premji Invest, and TPG, joining existing investors like Andreessen Horowitz, Dragoneer, Fidelity Management & Research Company and Thrive Capital.
“Enterprises don’t just want AI that talks,” said Ali Ghodsi, co-founder and CEO of Databricks. “They want agents working across their business that remember context, deliver accurate answers, and execute work without blowing through their budgets.
“That requires real-time operational data with Lakebase, context from across the business with Genie, and multi-AI cost controls with Unity AI Gateway. The tremendous investor demand for this round shows that our AI strategy is winning the market and building what every business needs to maximise their impact with agents.”
“Databricks has spent a decade being early to where AI was headed,” said Thomas Laffont, co-founder of Coatue. “Now it’s the infrastructure the industry builds and scales AI on. What stands out most is the pace: they’ve compressed R&D timelines that used to take years into months, more like a research lab than a typical software company.
“We’ve been investors since 2019, and results like that are why we’re proud to lead this round today and keep building with them,” he added.
Databricks says the financial momentum has been strong with an 80pc increase year-on-year in its growth, surpassing a $7bn revenue run-rate. The funding round comes just six months after a previous raise of $5bn in February that valued the company at $134bn.
The data and AI company founded in 2013 today works with over 20,000 organisations and 70pc of the Fortune 500, including big names like Adidas, AT&T, Bayer, Block, Mastercard and Unilever.
Headquartered in San Francisco, Databricks has over 30 offices globally. It employs over 500 staff across the UK and Ireland as part of its EMEA operations, headquartered in London.
Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.
Joshua Kushner’s Thrive Capital has sent its first formal letter to investors, and the standout figure captures the AI era in miniature.
One of its funds has swelled to about $3.7bn in value, driven overwhelmingly by early bets on OpenAI and SpaceX. The letter, reported by Bloomberg, reads as a victory lap and a quiet hedge at the same time.
That Thrive is writing to its backers at all is notable in itself. Kushner has built one of the most secretive and sought-after firms in venture capital, so a formal letter, complete with hard marks and a candid line on concentration, is a departure that doubles as a statement of confidence.
It also lands at a moment when the whole industry is arguing about whether AI valuations reflect real value or collective hope, which makes a firm this exposed to a single name showing its workings all the more striking.
Thrive’s OpenAI position is practically a chronicle of the boom. The firm first backed the company in 2022 at a $29bn valuation, led a tender the following year at $86bn, and has since committed around a billion dollars more across rounds that valued OpenAI at $150bn and then $285bn.
With the company now lining up a trillion-dollar listing, those early entries have multiplied many times over, at least on paper.
That $3.7bn mark also owes a great deal to Thrive’s stake in Elon Musk’s SpaceX, another private giant whose valuation has climbed relentlessly.
Between them, two holdings now account for the bulk of the fund’s gains, a concentration most portfolio managers would flinch at and Thrive is presenting as vindication.
There is a large asterisk, though. Almost none of that value has actually been banked. The gains are unrealised marks, dependent on OpenAI’s and SpaceX’s private valuations continuing to rise, and a growing share of Thrive’s paper returns now rests on OpenAI alone.
On paper, the firm is having a spectacular decade, but in cash, far less has been settled, and paper fortunes have a habit of shrinking the moment the market that created them turns.
Which is what makes the other disclosure in the letter so telling. Thrive is selling part of its OpenAI stake, taking some chips off the table even as it insists the story is only beginning.
Trimming a winner is textbook risk management, yet it also quietly concedes the oldest truth in venture capital, which is that a mark is not money until someone else pays for it.
Thrive has grown into a heavyweight on the strength of these wagers. The firm now manages roughly $25bn and this year closed a record $10bn fund, its largest yet and reportedly oversubscribed, a sign that limited partners are content to keep feeding a strategy built on a handful of enormous private positions.
Kushner has also spun up a separate vehicle, Thrive Holdings, to buy up traditional services firms and rewire them with AI.
The letter arrives at a jittery moment for that whole model. As doubts grow about whether AI revenues can ever justify the valuations, and about whether much of the sector is a bubble waiting to deflate, funds whose fortunes hinge on a single soaring private mark start to look exposed rather than clever.
Thrive’s numbers dazzle precisely because OpenAI’s have never stopped climbing.
For now, it stands as one of the great venture bets of the age. Kushner backed OpenAI when it was still a curiosity and rode it to the centre of the economy.
What the letter cannot answer is what happens to a fund like this on the day OpenAI’s private valuation finally stops rising, because a return that exists only as a mark can evaporate almost as fast as it appeared.
Google has launched the Pixel 11 series in India, expanding its latest smartphone lineup with the Pixel 11, Pixel 11 Pro, Pixel 11 Pro XL, and Pixel 11 Pro Fold. The new phones bring Google’s latest Tensor G6 processor, upgraded cameras, longer battery life, and a range of new AI features powered by Gemini Nano. Alongside the Pixel 11 lineup, Google has also introduced the Pixel Watch 5 and updated Pixel Buds Pro 2 in India. The Pixel 11 series starts at ₹89,999, while the Pixel 11 Pro Fold starts at ₹1,86,999.
Google has given the standard Pixel 11 a refreshed design and improved camera system. Its redesigned camera bar is more than 40 percent thinner than the previous model. The phone comes with a satin-finish frame and four color options. These include Frost, Hibiscus, Pistachio, and Obsidian. The Pixel 11 uses the Tensor G6 processor with 12GB of RAM. Users can choose between 256GB and 512GB storage.
Google says the phone offers more than 30 hours of battery life. Its upgraded 48MP main camera also captures 56 percent more light and supports up to 30x Super Res Zoom and Instant Night Sight.
The Pixel 11 Pro and Pixel 11 Pro XL bring several premium upgrades to Google’s latest smartphone lineup. Both models feature a refined design with an edgeless camera bar and Super Actua displays. The displays can reach up to 3,600 nits of peak brightness. They also use a new coating that Google says offers twice the scratch resistance of the previous generation.
The two phones come with a 50MP main camera and a new 48MP telephoto camera. They support up to 120x Pro Zoom and Portrait Mode at 5x zoom. Both models provide more than 30 hours of battery life. Their wired charging can reach 75 percent in about 30 minutes. They also offer faster wireless charging than before. Buyers can choose Canyon, Fog, Olive, or all-matte Obsidian finishes.
The Pixel 11 Pro Fold is designed to offer a large-screen experience in a slimmer foldable body. Google has reduced its thickness by nearly 1mm and its weight by almost 10 percent. The company also claims three times better durability than the previous model. The device comes with the Tensor G6 chip and 16GB of RAM.
The foldable features brighter Super Actua displays on both sides of the device. It offers more than 24 hours of battery life and can charge to around 50 percent in 30 minutes. It also supports 25W Qi2.2 wireless charging. For photography, the device offers up to 30x Super Res Zoom. Its large screen supports features such as Split Screen, Drag and Drop, and Instant View. The phone will come in an Olive finish with 512GB storage.
Google has also expanded its wearable lineup with the Pixel Watch 5. The smartwatch comes in 41mm and 45mm sizes. The 41mm model starts at Rs 42,900, while the 45mm model starts at Rs 45,900. It uses the Snapdragon W5 Gen 2 Wearable Platform. Google claims that the new watch is 20 percent faster than its predecessor. It also supports offline Gemini assistance and new health features through Google Health Guardian.
Health tracking is another major focus of the Pixel Watch 5. It offers improved sleep tracking and recovery information through Google Health Guardian. Users can also view trends in blood pressure and insulin resistance. The watch includes improved GPS tracking and new Smart Wake alarms. Google has also updated the Pixel Buds Pro 2 with better adaptive Active Noise Cancellation. The earbuds now support Gemini Voice Control, Live Translate, and Sleep Sync. A new Olive color option will also be available.
The new Pixel 11 lineup starts at ₹89,999 for the standard Pixel 11. The Pixel 11 Pro and Pixel 11 Pro XL carry starting prices of ₹1,19,999 and ₹1,34,999. Meanwhile, the Pixel 11 Pro Fold starts at ₹1,86,999. Customers can pre-order the phones through the Google Store before their August 20 sale. Google has also promised seven years of software and security updates for the entire Pixel 11 family.
Google is offering several payment and support benefits with the Pixel 11 series in India. Buyers can get cashback and up to 24-month no-cost EMI through HDFC Bank and ICICI Bank. Zero-down-payment financing is also available through Bajaj Finance and IDFC FIRST Bank. The Pixel Upgrade Program offers an assured buyback value of up to 62.5 percent after nine months. Selected Pro models also include six months of Google AI Pro.
Following dozens of reported cases of police abuse, including the arrest of three Georgia deputies on Monday and the investigation of a Massachusetts officer, Flock Safety announced new policies for the use of its AI surveillance cameras on Thursday.
Flock Safety cameras can track license plates, car features and, on the right models, humans as well. They can also listen for disturbances such as gunshots. These camera networks have drawn scrutiny over their potential to enable casual surveillance of communities, as well as documented abuses, including police using the systems to monitor former partners or inventing pretexts for searches that result in information being shared with agencies such as ICE, as I detail in my full guide here. That’s led to protests, Flock contract cancellations and in some cases, cities blocking cameras by wrapping them in trash bags because Flock won’t take them down.
This is Flock’s largest response to these issues that I’ve seen to date, with a series of changes governing how police can use its surveillance systems. Most of these changes won’t be required until the end of the year, and some won’t affect existing contracts. Flock has also created exceptions to the new rules, leaving police and sheriff’s departments responsible for enforcing them while giving them mechanisms to continue using the cameras as they see fit.
According to a statement from the American Civil Liberties Union, Flock operates more than 120,000 automatic license plate readers in at least 6,000 cities.
“Flock has attempted this before, and the security measure failed because police were easily able to circumvent the system’s requirement that they input the purpose of their search,” the ACLU says. It encourages Flock to use an independent evaluator to oversee its regulations.
Representatives from Flock Safety didn’t immediately respond to a request for comment.
Every new Flock rule announced seems to come with a caveat. One of the biggest changes is a reduction in the length of time Flock retains camera data — and, consequently, how long that data can be used for searches — from 30 days to seven. But Flock also says that “Existing customers will keep their current, democratically approved retention periods,” meaning most users won’t see the change for some time.
There’s also a new evidence mode that ignores the new retention period, allowing police to hold data indefinitely while pursuing active investigations of their choice.
Flock is also adding a feature called “offense filtering,” which can limit the specific Flock camera information that outside agencies have access to. This doesn’t change much because police departments can set their own limits when sharing data. As previously reported, police departments have already violated state laws by sharing information with ICE, the FBI and other agencies.
Another change makes Flock’s new audit assistance feature mandatory by 2027. Audit assistance flags suspicious camera use, such as repeatedly searching for the same license plate. It’s unclear how the system could differentiate between tracking a stolen car for a period of time and stalking someone. When it flags suspicious behavior, the audit assistance tool locks the user out of the system and requires an administrator review.
Another change requires users to enter a case code for every law enforcement search, in addition to the existing option to provide a reason for the search. There is an exception for emergency searches, which can still be conducted without that information but are flagged for administrator review.
So who will conduct these reviews? I asked Flock, but have not yet received a response. Based on the company’s documentation, the administrator appears to be the person designated under the agency’s contract with Flock — potentially a sheriff or police chief, including officials in positions where Flock cameras have previously been misused. That raises questions about whether the new safeguards provide meaningful independent oversight or simply place accountability back with the same agencies responsible for using the systems.
Changes like these place greater responsibility on departments to police their own use of the technology, while potentially limiting Flock Safety’s responsibility for how its surveillance systems are used. At the same time, Flock has built in several exceptions that allow departments to bypass the new requirements, with the conditions for those exceptions appearing to depend largely on individual agency policies rather than clear, uniform standards.
These rules apply only to law enforcement. Cities, neighborhoods and businesses that contract with Flock don’t need to follow the new regulations. Recent research has also found error rates ranging from 30% to 70% in Flock camera systems, raising broader questions about the reliability of this increasingly widespread surveillance technology.
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme.
Brightly is a Software-as-a-Service (SaaS) company formerly known as SchoolDude, which was acquired by Siemens in August 2022. Brightly employs over 700 people and provides asset management and maintenance software to more than 12,000 clients worldwide.
27-year-old North Carolina man Cameron Curry (also known as “Loot”) was found guilty in March of orchestrating an “extensive cyber extortion scheme” targeting his employer.
According to court documents, Curry stole sensitive documents after gaining access to the company’s payroll information and corporate data, which he later used to extort Brightly after learning that his six-month contract wouldn’t be extended.
One day after his contract ended on December 10, he emailed dozens of Brightly employees using the Loot alias and the lootsoftware@outlook.com email address between December 11, 2023, and January 24, 2024, threatening to leak the stolen information unless he was paid a $2.5 million ransom in cryptocurrency.
“We will commence the process of disseminating salary information starting January 1, 2024 in phases to all employees and will report you to the SEC after for not reporting the breach,” Curry said in one of the extortion messages.
“If you wish to reclaim your data, we recommend doing so promptly at 2.5 million USD in order to save your company and stocks, as each subsequent month will incur a $100,000 USD increase. Discrepancies in your books are currently over 16 million USD, posing a potential risk for retention issues, a hostile work environment, resentment, and more.”
He also attached screenshots of employees’ personally identifiable information (PII), including their names, dates of birth, home addresses, and compensation information, and threatened to report Brightly to the U.S. Securities and Exchange Commission (SEC) for failing to disclose the breach.
Following Curry’s many extortion emails, Brightly paid $7,540 in Bitcoin, transferring the funds to a cryptocurrency wallet controlled by Curry.
After the company reported the incident to law enforcement, the FBI searched Curry’s residence on January 24 and seized various electronic devices containing evidence that linked him to the extortion scheme.
“We are aware of the U.S. Department of Justice’s (DOJ) convictions of Cameron Curry for extortion,” Brightly told BleepingComputer in March.
“We have fully cooperated with the FBI and DOJ in this matter and appreciate their investigative efforts. Given that these proceedings are pending, we defer all questions to law enforcement authorities.”
In May 2023, Brightly also disclosed a data breach (unrelated to this case) after attackers stole credentials and personal data (including names, email addresses, account passwords, phone numbers) of nearly 3 million customers and users from the database of its SchoolDude online platform.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
YouTube SEO strategies help your videos rank higher in search results and recommendation feeds by matching your content with viewer search terms and keeping people watching longer.
Getting views on YouTube requires more than publishing good content. You also need to help search systems understand what your video offers. YouTube processes millions of search queries every day. When you organize your metadata and improve viewer watch time, YouTube shows your content to more people. Creators who want to expand their reach often look for ways to get more YouTube views while building long-term search visibility.
If you want fast results, focus on viewer click rates and watch time first. Metadata helps YouTube index your topic, but viewer behavior determines if your video keeps ranking.
| Strategy Area | Primary Goal | Best For |
|---|---|---|
| Keywords & Titles | Match search intent | New videos and search traffic |
| Thumbnails & CTR | Increase click rates | All channels seeking views |
| Captions & Chapters | Improve indexing and retention | Longer tutorial content |
| Playlists & End Screens | Extend session watch time | Building channel authority |
Before optimizing individual videos, set up these basic tools and account settings:
Keyword research reveals the exact phrases viewers type into the search bar. Start by typing your main topic into the YouTube search bar to see autocomplete suggestions. These suggestions show real queries from active users. Choose phrases with steady search demand and manageable competition. Focusing on long-tail keywords helps smaller channels rank faster before competing for broader terms.
Who it is best for: Creators launching new channels or covering technical tutorial topics.
Limitations: Keywords help YouTube index your video, but they cannot force viewers to stay if the content is unhelpful.
Your title tells search algorithms and human viewers what your video contains. Place your primary keyword near the beginning of the title. Keep the overall length under 60 characters so text does not get cut off on mobile screens. Avoid misleading titles that promise things you do not deliver. Accurate titles build viewer trust and reduce early drop-offs.
Who it is best for: Every creator publishing search-focused content.
Limitations: Keyword-heavy titles can sound robotic if you do not balance keywords with natural language.
Your description gives search engines extra context about your video topic. Write a clear summary in the first two lines, as these lines appear in search previews. Include secondary keywords naturally throughout the text. Add structured timestamps following official video chapter formatting. Starting your list with 00:00 enables automatic chapter markers on the video timeline.
Who it is best for: Educational creators, product reviewers, and lengthy tutorials.
Limitations: Descriptions have a 5,000-character limit, and stuffed keywords can trigger spam penalties.
Thumbnails act as visual billboards for your content. Create custom graphics that feature bold text, high-contrast colors, and clear focal points. Review the custom thumbnail policy guidelines to keep your account in good standing. High click-through rates tell YouTube that viewers find your packaging appealing. If you want to refine your visuals, study basic thumbnail design principles to improve click rates.
Who it is best for: All creators competing in crowded search results and home feeds.
Limitations: A high click rate will not sustain video rankings if viewers leave within five seconds.
Captions make your content accessible to hard-of-hearing viewers and non-native speakers. YouTube reads subtitle text to index your video content accurately. Use YouTube subtitle and caption tools to upload an SRT file or correct automatic captions. Accurate transcripts ensure the system does not misinterpret spoken technical terms or brand names.
Who it is best for: Educational channels, global audiences, and spoken-word videos.
Limitations: Automatic captions often contain errors in technical jargon, requiring manual review.
Tags provide additional context when viewers search for misspelled terms or related phrases. Enter your main target phrase as the first tag, followed by broad category terms. Add two or three relevant hashtags to your video description. Avoid adding dozens of irrelevant tags, as excessive tagging dilutes topic clarity and violates platform policies.
Who it is best for: Niche topics with common misspellings or alternative names.
Limitations: Tags play a minor role compared to titles, thumbnails, and audience retention.
Watch time measures the total minutes viewers spend watching your content. The official YouTube recommendation system documentation confirms that watch time and viewer satisfaction drive recommendations. Hook viewers in the first ten seconds by making a clear promise. Use jump cuts and graphic overlays to maintain pacing. Analyzing audience retention drop-off analytics helps you spot where viewers lose interest so you can edit future videos better.
Who it is best for: Channels trying to gain traction in recommendation feeds.
Limitations: Retention patterns vary by video length; shorter videos need higher percentage completion than long streams.
External links from reputable blogs, social posts, and websites send discovery signals to search engines. Embed your videos in relevant blog posts to drive external traffic. When outside sites link to your video, you gain steady views beyond YouTube search. Creators building authority often use backlinks to support their channel’s subscribers and overall video reach.
Who it is best for: Businesses, bloggers, and creators with external web properties.
Limitations: Low-quality spam links on sketchy sites can hurt traffic quality and lower retention metrics.
Playlists group related videos together and play them sequentially. When a viewer watches multiple videos in a playlist, your total session watch time increases. Give playlists descriptive titles that contain relevant search terms. You can also feature top playlists on your channel homepage to guide new visitors toward your best work as you build a profitable channel over time.
Who it is best for: Multi-part tutorials, series, and channels with large content libraries.
Limitations: Overloaded playlists with unrelated videos frustrate viewers and reduce total watch time.
End screens and info cards prompt viewers to watch additional content before they leave. Add an end screen in the last 20 seconds of your video to link to a relevant follow-up video. Point viewers toward content that answers their next logical question. Keeping viewers on the platform increases your overall channel session time, which search systems reward.
Who it is best for: Creators with at least five published videos on related topics.
Limitations: Placing cards too early in a video can cause viewers to abandon the current video prematurely.
Publishing on a predictable schedule helps viewers know when to expect new uploads. Early engagement during the first 24 hours signals viewer interest to discovery algorithms. Reply to viewer comments promptly and pin a compelling question at the top of the comment section. Consistently creating engaging content establishes long-term channel authority.
Who it is best for: Creators building an active community and loyal subscriber base.
Limitations: High upload frequency without quality control leads to viewer burnout and lower retention.
You do not need to implement all 11 strategies at once. Follow this prioritized roadmap based on your channel stage:
Verify your optimization success in YouTube Studio using these specific metrics:
If your optimized video is not getting traffic, check these common failure points:
YouTube SEO cannot solve core video quality issues. If your audio is hard to hear or your content lacks practical value, metadata alone will not save your rankings. Additionally, YouTube search accounts for roughly 30% to 35% of total platform traffic. The remaining traffic comes from Home feed recommendations and Suggested videos, which rely more on overall retention and viewer satisfaction than keyword matching.
Initial indexing happens within hours of publishing. However, search rankings usually stabilize after 2 to 4 weeks as YouTube gathers viewer click and retention data.
Yes. Changing a weak thumbnail or vague title on an old video can immediately improve its click-through rate, prompting YouTube to test it with new audiences.
Hashtags help categorize content and make videos discoverable through clickable hashtag feeds, but they have a minimal impact on main YouTube search rankings compared to titles and retention.
Tags play a minor role today. YouTube primarily uses tags to resolve common misspellings or alternative search terms related to your topic.
alternative_right shares a report from ScienceDaily: Researchers have found a clever new way to map a part of Earth’s upper atmosphere that is notoriously difficult to observe. Using orbital data from roughly 1,200 Starlink satellites, they reconstructed changes in atmospheric density about 500 kilometers above Earth. […] The resulting density patterns also showed strong consistency with observations from the European Space Agency’s SWARM satellites, which measure changes in atmospheric density along their orbital paths.
The work expands on an earlier study by the same team. In that research, scientists estimated how thermospheric density changed over time and altitude using general orbital information called Two-Line Element, or TLE, data from Starlink satellites. The new analysis adds another dimension by examining how density varies horizontally across latitude and longitude, revealing more of the thermosphere’s geographic structure.
The findings could have practical benefits as the number of objects orbiting Earth continues to grow. More accurate information about atmospheric density can improve predictions of satellite motion, helping reduce the chance of collisions between satellites and between satellites and space debris. The technique could also eventually support near-real-time measurements of atmospheric density around satellites. Such monitoring could improve space weather forecasting and contribute to safer, more dependable satellite operations in the future.
Read more of this story at Slashdot.
Weekend Open Thread: Mattifying Sunscreen
Frugal Friday’s Workwear Report: Cap-Sleeve Pointelle Crewneck Sweater
Can Astrology Help Find Gold and Silver Trends? A Financial Astrology Guide
Rinn Pharma & Biopharma to join NordicPharmaTrain network
How to Start a Cleaning Business: A Step-by-Step Guide
Datadog: Best Of Breed For Multiple Reasons
BDC Weekly Review: Private BDC Q2 Numbers Are Strong
Communication cards help banking customers access services or report scams
Oil Price Today (August 11): Crude oil rises to $88 after Trump’s compensation demand dents Hormuz opening. Here’s why
Weekly News Update, 8.6.26 – Corporette.com
Irina Shayk Wows in REVOLVE Los Angeles’ Summer Styles
Amazon Sundays: Closet Care Before Fall
Be quiet, Miriam! – spiked
Mutual Fund Manager Scoops Up Beaten-Down Stocks
Ben-Gvir’s crocodile project halted but abuses at Ketziot Prison continue
Warren Hudson’s Dad Releases Audio Of Threats
SharkNinja Keeps Eating
10 R-Rated Drama Movies That Can Be Called Masterpieces
5 Things You Must Know About Jorge Messi, the Father and Longtime Agent Who Shaped Lionel Messi’s Career
Welsh independence campaign group YesCymru sets 2032 referendum target
You must be logged in to post a comment Login