We brought together the most important news of the week from the world of cyber security.

JusTalk user data has been leaked to the network. The implementation team claimed that all correspondence is protected by end-to-end encryption.

According to TechCrunch, researchers uncovered data from unencrypted private messages from users of video calling and messaging app JusTalk. At the same time, the JusTalk team claims that all user correspondence is protected by end-to-end encryption.

The leaked data includes the sender’s and recipient’s phone numbers, along with the date and time millions of messages were sent. They also included recordings of calls made using the app.

Tor is banned again in Russia

Saratov’s Leninsky District Court partially fulfilled the prosecution’s claim and declared that the application itself was banned, as well as the information contained in the Tor Browser. This was reported by RosKomSvoboda, whose lawyers are handling the case.

Lawyer Ekaterina Abashina said the court agreed with Roskomnadzor, who insisted that “knowledge, practice and technology throughout the process are one and the same, so all these can be recognized as prohibited by a court order.”

Learn more about what Tor is in our flashcards.

Report: NFT projects lost $22M since May due to Discord hackers

Since May 2022, TRM Labs analysts have recorded more than 150 compromises of NFT project Discord servers.

The NFT community has suffered over 150 compromises targeting NFT projects’ Discord servers since May 2022. A sampling… (1/2) pic.twitter.com/cEdPaV5mQI

— TRM Labs (@trmlabs) 25 July 2022

In June, the number of NFT minting-related phishing attacks distributed through compromised Discord accounts increased by 55% from the previous month.

As explained by TRM Labs, hackers, after gaining control over administrator accounts, send links to ostensibly giveaways or “private” NFTs for people to navigate to malicious sites.

TRM Labs has linked dozens of similar cases. Analysts believe most of the hacks are related to the same hacker who attacked the Bored Ape Yacht Club Discord servers in June.

Kazakhstan expands authorities’ powers to control social networks and instant messengers

Kazakhstan signed amendments that give the Ministry of Information and Social Development (MIOR) the ability to restrict the activity of foreign online platforms or messengers.

In addition, the agency may request data on the number of daily users from such services and keep a record of “representatives of foreign online platforms and instant messaging services”.

Smart home camera manufacturers from Amazon and Google have confirmed the possibility of transferring data to authorities without permission.

Amazon-owned video-enabled smart doorbell developer Ring has confirmed that video footage was handed over to police without user consent 11 times in 2022. Among these were cases where the police did not have access to this data, CNet said.

Nest, a video intercom company owned by Google, says in its terms of use that in an emergency, it can also share information with law enforcement without the user’s consent:

“If we believe we can prevent someone from dying or causing serious physical harm, we may notify a government agency – for example, bomb threat, school attack, kidnapping, suicide prevention or missing persons.”

At the same time, Nest noted that they have never resorted to this practice.

Smart home camera manufacturers, including Arlo, Eufy and Wyze, and Apple, which processes such video footage, said they do not provide such data to authorities without a warrant or court order.

Also on ForkLog:

What to read on the weekend?

SonicWall analysts estimate that ransomware attacks have dropped by 23%. We talk about what these threats are and the implications of their spread for the crypto industry:

Read ForkLog bitcoin news in our Telegram – cryptocurrency news, courses and analysis.