Greetings, Digital Defenders! 🛡️

Privacy is having a moment today. Signal is taking a stand against Microsoft Recall, ICS honeypots are multiplying, and Marks & Spencer is reeling from a $403 million cyberattack.

Also, be honest: How many smartwatch security tips are you actually following? Scroll down to weigh in.

Here’s what you need to know:

Zero-Day Download

Signal Shuts Down Microsoft Recall to Keep Your Chats Private

Signal has rolled out a privacy update to its Windows app that blocks Microsoft's AI-powered Recall feature from taking screenshots of user conversations.

Source: signal.org.

The new "screen security" setting, enabled by default, uses a DRM flag to prevent Recall, criticized by experts as a major privacy risk, from logging Signal chats.

Despite Microsoft’s recent safeguards, Signal developers say Recall still puts private messages at risk, forcing Signal to protect users.

Privacy-conscious users can manually disable Microsoft Recall by unchecking it in their Windows settings.

Quarter of ICS Devices Found Online Are Likely Honeypots, Study Finds

Researchers from NTNU Gjøvik and TU Delft discovered that a growing share of internet-exposed industrial control systems (ICS) are actually honeypots.

Upon scanning for 17 common ICS protocols, the researchers identified around 150,000 devices in 175 countries. Their year-long study found that honeypots made up 15% of detected ICS, highlighting the expanding use of decoy systems to lure and study attackers.

Both users and security researchers should be cautious not to make false assumptions about real-world threats.

M&S Cyberattack to Cost £300M, Online Disruption Expected Through July

Marks & Spencer (M&S) expects a £300 million ($400 million) hit to its 2025–2026 operating profit following a major cyberattack that disrupted operations across its 500 stores and 60,000-strong workforce. M&S noted that insurance, cost management, and trading adjustments may offset the financial impact.

The company cited losses in food sales, increased waste, and manual logistics costs. Online shopping is suspended until at least July. 

Shoppers should monitor their M&S accounts for unusual activity and consider alternative retailers, as disruptions may persist beyond the projected timeline.

Share this newsletter!

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

FTC Orders GoDaddy to Strengthen Security After Years of Breaches

The FTC has finalized an order requiring GoDaddy to overhaul its security practices following a string of data breaches dating back to 2018. The agency accused the web hosting giant of failing to detect vulnerabilities and misleading 5 million customers about its security posture.

Source: newsweek.com.

Under the order, GoDaddy must implement a comprehensive security program, secure APIs with HTTPS, and establish a system for managing software and firmware updates.

GoDaddy users should ensure that their personal websites are running with the proper security protocols like HTTPS/TLS.

Russia Mandates Tracking App for Foreigners in Moscow, Citing Crime Control

Russia has passed a new law requiring all foreign nationals in the Moscow region—except diplomats and Belarusian citizens—to install a government tracking app on their smartphones. The app collects fingerprints, facial photos, residence details, and real-time location data.

Authorities say the move aims to curb migrant-related crime, with noncompliance resulting in deportation and inclusion in a monitoring registry.

Visitors to Russia should be aware of these requirements and weigh the privacy implications before traveling.

New Report Reveals Identity Security Still Hangs on Humans, Not Automation

Despite appearing secure, identity systems in most organizations still rely heavily on manual processes, according to Cerby’s 2025 Identity Automation Gap report.

Based on input from over 500 IT and security leaders, the study found fewer than 4% have fully automated key workflows like MFA enrollment, credential updates, and access revocation.

Organizations should prioritize automating identity workflows to reduce risk and close security gaps.

Security Tip of the Day

That Watch on Your Wrist Could Be Spying on You

Should you worry about smartwatch security? While smartwatches offer seamless integration with your digital life, they also come with a growing list of security and privacy concerns.

Source: independent.co.uk.

These wearable gadgets collect troves of sensitive data, including your location, movement, biometric information, and even payment details. If they're not well protected, they can become a goldmine for hackers.

Here are some tips for keeping your smartwatch safe from hackers:

With no universal safety standards yet for wrist-bound devices, most consumers don’t realize how vulnerable their smartwatches are. Until the industry enforces real security rules, your best defense is staying informed and following these crucial tips.

Security Question of the Day

How many of these smartwatch safety tips are you currently following?

Results from Yesterday's Security Question of the Day

How prepared are you if your laptop goes missing today?

Meet Our Writers:

Leon Yen

Leon Yen is a cybersecurity expert and seasoned tech journalist with over a decade of experience, including founding a cyber risk startup and leading industry-focused research and reporting.

Liz Ticong

Liz Ticong is a tech writer specializing in AI and software tools, known for turning complex topics into clear, actionable insights through hands-on testing and analysis.

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.