Loading story…
Scammers increasingly exploit individuals' digital footprints—comprising both actively shared and passively collected data—to craft highly personalized social engineering attacks. Details such as job titles, locations, and even seemingly innocuous information like pet names can be pieced together from social networks, public databases, and data brokers, enabling attackers to convincingly impersonate or target victims. The aggregation of this data, especially when combined with information from data breaches, significantly raises the risk of identity theft and fraud.
At the same time, privacy practices among major social media and community platforms vary widely, with some services like Pinterest and Quora demonstrating stronger privacy protections, while others such as TikTok and Facebook are rated poorly for user privacy. Frequent changes in platform policies, ownership, and data processing approaches have prompted mass user migrations, highlighting growing concerns about how personal information is collected, processed, and potentially resold. Users are advised to consider these privacy risks when choosing where to share personal information online.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are facing a growing risk from insider threats, as cybercriminals increasingly exploit both the hiring process and employee online behavior to gain unauthorized access to sensitive data. Attackers are now impersonating cybersecurity and IT professionals, using fabricated resumes, deepfake technology, and stolen identities to secure legitimate positions within companies. Once inside, these "fake workers" can access confidential databases and systems, often leveraging remote work vulnerabilities and sophisticated obfuscation techniques such as VPNs and proxy servers to mask their true origins. At the same time, employees' tendency to overshare on professional and social platforms like LinkedIn, GitHub, and X provides threat actors with valuable intelligence. Publicly available information about job roles, internal relationships, technical stacks, and even travel plans can be weaponized for spearphishing, business email compromise, and other targeted attacks. The combination of lax vetting in remote hiring and excessive online disclosure significantly increases the attack surface, making it easier for adversaries to infiltrate organizations and execute sophisticated social engineering campaigns.
Jun 29, 2026
A new study has demonstrated that even after regulatory restrictions on explicit ad targeting, algorithmic profiling remains prevalent on social media platforms such as Facebook. Researchers used a pipeline leveraging large language models (LLMs), specifically Gemini 2.0 Flash, to analyze over 435,000 Facebook ad impressions and found that these models could infer private user attributes—including age, gender, employment, education, and political preference—from ad exposure alone, with accuracy surpassing random guessing and demographic baselines. The study highlights that, despite Meta's removal of direct targeting options for sensitive categories, its ad ranking system still introduces demographic patterns that can be exploited by adversaries with access to visible ads. Simultaneously, privacy advocates have raised concerns about Meta's new policy that personalizes ads and content based on users' interactions with its generative AI features across Facebook, Instagram, WhatsApp, and Messenger. The policy, which does not allow users to opt out, has prompted warnings that it could erode privacy protections, especially regarding sensitive topics discussed in AI chats. Experts question whether Meta's assurances about not using certain sensitive topics for ad targeting are sufficient, given the potential for indirect profiling and the use of proxy signals. The convergence of these developments underscores growing risks to user privacy from AI-driven ad targeting and profiling on major social media platforms.
Jun 29, 2026
Open Source Intelligence (OSINT) techniques have become increasingly effective at uncovering sensitive personal and organizational data that is unintentionally exposed online. Security professionals have demonstrated that even individuals who consider themselves privacy-conscious can have a significant digital footprint, with personal information such as address history, vehicle details, and even recent purchases retrievable through free tools and public records aggregators. Data broker sites like Whitepages, Spokeo, and PeopleFinder collect and display extensive personal information, often requiring manual or paid services for removal. Advanced Google Dorking, a method of using specialized search queries, enables investigators to locate exposed security cameras, medical records, internal network diagrams, employee credentials, and confidential corporate documents, all without breaching systems or writing code. These search techniques exploit misconfigurations and oversights in how organizations publish or secure their data, revealing information that was never intended to be public. The risk is compounded by the prevalence of third-party leaks, where sensitive documents are uploaded to platforms like Scribd, sometimes exposing thousands of records containing personally identifiable information (PII). Responsible disclosure of such vulnerabilities is often met with slow or inadequate responses from affected organizations, leaving data exposed for extended periods. OSINT practitioners also leverage dorking techniques on platforms like Telegram and use tools such as FOFA and Shodan to track the spread of sensitive information and malware. Dark web threat hunting complements these efforts by passively monitoring for credential exposures and data leaks, using aggregator feeds and public mirrors to identify compromised information without engaging in illegal activity. Security experts emphasize the importance of escalating high-impact exposures through proper channels, such as security operations centers or incident response teams, to mitigate risks. The combination of Google Dorking, dark web monitoring, and analysis of third-party leaks forms a comprehensive approach to identifying and managing digital exposures. These methods highlight the critical need for organizations and individuals to regularly audit their digital footprint, implement robust data protection measures, and respond promptly to vulnerability disclosures. The growing sophistication of OSINT tools and techniques underscores the urgency for improved privacy practices and proactive defense against inadvertent data exposure. As attackers and defenders alike adopt these methods, the line between public and private information continues to blur, making digital hygiene and awareness essential components of modern cybersecurity.
Jun 29, 2026