Pete Recommends – Weekly highlights on cyber security issues, February 21, 2026

Subject: DHS Pressures Platforms for Identities of Anti-ICE Users
Source: Newser
https://www.newser.com/story/383740/dhs-pushes-tech-companies-to-identify-ice-trackers.html

The Department of Homeland Security is pressuring tech companies to disclose the identities behind social media accounts that criticize or track Immigration and Customs Enforcement agents, say officials and tech employees familiar with the requests. Over the past several months, Google, Reddit, Discord, and Meta have received hundreds of administrative subpoenas, the New York Times reports. The subpoenas, which do not require a judge’s approval, have asked for names, email addresses, phone numbers, and other details tied to anonymous accounts that either post critical commentary about ICE or share information about agents’ locations. Efforts to resist have begun.

[…]

An earlier suit, from the creator of the ICEBlock warning app, argues that DHS is using its regulatory power to suppress protected speech…


Subject: Dems Want to Ban Surveillance Pricing at Big Grocery Stores
Source: Gizmodo
https://gizmodo.com/dems-want-to-ban-surveillance-pricing-at-big-grocery-stores-2000722182

Sen. Ben Ray Luján, a Democrat from New Mexico, and Sen. Jeff Merkley, a Democrat from Oregon, introduced legislation Thursday that would ban so-called surveillance and surge pricing in grocery stores. Officially known as the Stop Price Gouging in Grocery Stores Act of 2026, the Senate legislation is modeled on a 2025 bill in the House.

The new bill would require stores to disclose their use of facial recognition technology and would ban electronic shelf labels (ESL) in large grocery stores. ESLs are controversial because they allow retailers to change the price of a given item remotely, opening up the possibility that they could be tied to algorithms which raise and lower prices based on conditions in the store or who’s trying to buy something.

Hypothetically, stores can charge different prices at different times of day or rely on different inputs, right down to personalizing the price based on an individual who was looking at a given item, spotted with facial recognition tech. The concern is that factors like race, gender, and income level could be used to determine how much people are charged. A 2025 study found that Instacart was charging customers different prices for the same products, sometimes as much as 23% more. A few weeks after the study received negative press coverage, Instacart announced it was pulling the plug on its AI-powered pricing.

At least six states have seen legislation introduced to stop surge and surveillance pricing, according to the United Food and Commercial Workers International Union (UFCW), which has also developed a 30-second ad to spread the word on the threat.


Subject: A Good Valentine’s Day Gift for These Nice People in the New York Times Would Be to Destroy Their Phones
Source: Gizmodo
https://gizmodo.com/a-good-valentines-day-gift-for-these-nice-people-in-the-new-york-times-would-be-to-destroy-their-phones-2000720913

Retirement aged people are so addicted to their phones, some of them literally can’t talk to each other. There’s a Valentine’s Day tech story by Kashmir Hill in the New York Times today about two retirement age people in need of a gift, and the gift is to have someone throw their phones into the ocean for them. I’m not going to use these people’s names even though the Times does, because I like them and don’t want to be mean to them. They’re a book store owner who speaks English, and his wife, a Mandarin speaker, and they’ve done what people have been doing for millennia, to everyone’s benefit: fallen in love and gotten married across the bounds of their own socio-linguistic groups. Unfortunately, the story says, despite having been married for years, it appears they are too addicted to their phones to learn to speak to one another.As documented in the story, they use the app Microsoft Translator all day every day. Their phones are so critical for everyday communication that they have eight external battery packs on hand to keep them going, the Times’ Hill writes.

Subject: Apple patches zero-day flaw that could let attackers take control of devices
Source: Malwarebytes
https://www.malwarebytes.com/blog/news/2026/02/apple-patches-zero-day-flaw-that-could-let-attackers-take-control-of-devices

Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, and Safari, fixing, in particular, a zero-day flaw that is actively exploited in targeted attacks. Exploiting this zero-day flaw would allow cybercriminals to run any code they want on the affected device, potentially installing spyware or backdoors without the owner noticing. Installing these updates as soon as possible keeps your personal information—and everything else on your Apple devices—safe from such an attack.

Subject: SSA needs better assessment of data-sharing costs as Treasury program saves millions, GAO says
Source: FedScoop
https://fedscoop.com/social-security-administration-death-master-file-treasury-do-not-pay/

While a pilot program giving the Treasury Department access to the Social Security Administration’s death data is projected to save the government millions, SSA still needs to better evaluate the cost of collecting those records from states, a government watchdog warned in a new report.A three-year pilot program with Treasury’s Do Not Pay initiative provides the agency with temporary access to the SSA’s full Death Master File — the compilation of deceased Social Security number holders — to prevent improper payments. States collect death data, and statutes require the SSA to pay them for the records. Federal agencies that also use the data must compensate SSA.A report released Friday by the Government Accountability Office found that SSA did not comply with requirements when setting compensation rates with states for their death records. Instead, SSA paid each state the same amount for each death record and did not receive information from the states on individual collection costs….

Subject: Good Luck Banning Smart Glasses
Source: Gizmodo
https://gizmodo.com/good-luck-banning-smart-glasses-2000723392

Smart glasses bans are reasonable, important, and damn near impossible.If there’s one thing that has people concerned about the growing wave of smart glasses, it’s privacy. Sure, we’ve had cameras at our sides for ages now, but never on our faces in a discreet form factor that makes it hard (sometimes impossible) to recognize when someone is recording. Because of that potential shift, people are reacting accordingly to protect spaces that should remain at least relatively private. By that, I mean they’re restricting smart glasses or just banning them outright.

The latest ban comes courtesy of the cruise liner, Royal Caribbean, which now prohibits the use of any glasses that can record video and take pictures in various parts of its ships. Altogether, the partial ban sounds pretty reasonable, disallowing smart glasses from being used in “casinos, spa service areas, restrooms, locker rooms, medical facilities, security screening locations, youth facilities, during back-of-house tours, in crew areas, or anywhere there is a reasonable expectation of guest and crew privacy.” Basically, just don’t be an a**hole when you use smart glasses, and you’re good.

It’s reasonable, for sure, and also completely unenforceable.

Cruise liners aren’t the only entities trying to ban smart glasses, either. Recently, the College Board banned wearing smart glasses while taking the SATs, which is another no-brainer. Smart glasses, especially those with AI and internet access, would be an adept cheating tool and could be used to get answers to all sorts of stuff quietly and quickly. That ban feels even more hopeless, though, if I’m being honest. As I pointed out recently, smart glasses that could be useful for cheating, like those made by Even Realities, are even harder to spot since they don’t have cameras or speakers and pass for normal glasses.

Explore more on these topics


Subject: Microsoft says bug causes Copilot to summarize confidential emails
Source: BleepingComputer
https://www.bleepingcomputer.com/news/microsoft/microsoft-says-bug-causes-copilot-to-summarize-confidential-emails/

Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.According to a service alert seen by BleepingComputer, this bug (tracked under CW1226324 and first detected on January 21) affects the Copilot “work tab” chat feature, which incorrectly reads and summarizes emails stored in users’ Sent Items and Drafts folders, including messages that carry confidentiality labels explicitly designed to restrict access by automated tools.Copilot Chat (short for Microsoft 365 Copilot Chat) is the company’s AI-powered, content-aware chat that lets users interact with AI agents. ​Microsoft began rolling out Copilot Chat to Word, Excel, PowerPoint, Outlook, and OneNote for paying Microsoft 365 business customers in September 2025…
“A code issue is allowing items in the sent items and draft folders to be picked up by Copilot even though confidential labels are set in place,” Microsoft added….Tagged:


Subject: US cyber responses will be ‘linked to adversary actions’ and involve industry coordination, official says
Source: Nextgov/FCW
https://www.nextgov.com/cybersecurity/2026/02/us-cyber-responses-will-be-linked-adversary-actions-and-involve-industry-coordination-official-says/411525/

Future U.S. government responses in cyberspace will be “linked to adversary actions” and will involve coordination between the private sector and smaller governments, a top White House official said Thursday.

The dynamic, which will be codified in a forthcoming national cyber strategy, is meant to make clear that foreign adversaries’ actions that target U.S. networks have consequences, according to Alexandra Seymour, who serves as the principal deputy assistant national cyber director for policy in the Office of the National Cyber Director.

“To do this, we will need to coordinate closely with state and local governments and the private sector, including critical infrastructure owners and operators, who are often at the front lines of our cyberdefense,” Seymour said at CyberScoop’s CyberTalks event in Washington, D.C.

Seymour’s comments also align with details from reports last year indicating the private sector would have a degree of involvement in offensive cyber matters. It’s not entirely clear how coordination with industry would work. Private sector participation in government-backed offensive cyberattacks is hotly debated because of the potential for escalation and blurred lines between state-sponsored and private activity.

Filed:


Subject: Chinese telecom hackers likely holding stolen data ‘in perpetuity’ for later attempts, FBI official says
Source: Nextgov/FCW
https://www.nextgov.com/cybersecurity/2026/02/chinese-telecom-hackers-likely-holding-stolen-data-perpetuity-later-attempts-fbi-official-says/411528/

A Chinese state-backed hacking group that was discovered in telecom operators and other communications systems is likely holding onto pilfered data “in perpetuity” for future theft and cyber exploitation, a top FBI official said Thursday.

Salt Typhoon, as the group is widely known, accessed dozens of telecom providers around the world in a multi-year espionage campaign that was first publicly disclosed in 2024. In the U.S., the hackers targeted communications of top political officials by accessing the government’s “lawful intercept” systems that facilitate court-ordered wiretapping requests.

The breach has been widely deemed one of the worst telecom espionage intrusions in U.S. history. It remains unconfirmed whether the cyberspies have been fully purged from American networks.

“I think it’s important to say we do not know exactly what the [People’s Republic of China] intends to do with a lot of this information,” said FBI deputy assistant director for cyber intelligence Michael Machtinger at CyberScoop’s CyberTalks event. “But we have no doubt that it could be used for surveillance and certainly future exploitation.”

The notion of holding onto exfiltrated data for future hacks is not novel, and is a common talking point among cyber officials and industry executives who note that such data can be a long-term value-add for foreign adversaries who want to build exploits and hacking tools for later operations. Stolen personal data can also be used for fraud attempts.

…Filed:


Subject: The US Is Working on a Site to Help Europeans Bypass Content Bans on Hate Speech: Report
Source: Gizmodo
https://gizmodo.com/the-us-is-working-on-a-site-to-help-europeans-bypass-content-bans-on-hate-speech-report-2000724058

The U.S. State Department is reportedly working on an online portal that would allow people in Europe and other regions to access content banned by their governments. The move comes at a time when conservative figures like Elon Musk and J.D. Vance have railed against European attempts to clamp down on hate speech, terrorist propaganda, and revenge porn.Reuters reported Wednesday, citing unnamed sources, that the initiative is intended to fight censorship and could include a virtual private network (VPN) feature.

Paris prosecutors’ cybercrime unit, working alongside Europol and French national police, raided X’s offices in the country earlier this month.

Filed: https://gizmodo.com/tech/tech-policy


Subject: As AI leaps forward, concern rises that innovation is leaving safety behind
Source: CSMonitor.com
https://www.csmonitor.com/USA/2026/0220/anthropic-pentagon-artificial-intelligence-safety

Why We Wrote This

Artificial intelligence is developing so rapidly that some industry insiders fear safety concerns aren’t getting enough attention. That’s sparking conversation about how to balance innovation, competition, and safeguards.

“A lot of the people who’ve been involved in the field of AI have been thinking about safety in various forms for a long time,” says Miranda Bogen, the founding director of the Center for Democracy and Technology’s AI Governance Lab. “But now those conversations are happening on a much more visible stage.”

This month, researchers resigned from two major U.S. AI companies, citing inadequacies in the companies’ safeguards around things like consumer data collection. In an essay Feb. 9 titled “Something Big is Happening,” investor Matt Shumer warned that AI will not only soon threaten Americans’ jobs en masse, but that it could also start to behave in ways its creators “can’t predict or control.” The essay went viral on social media.

“We constantly face pressures to set aside what matters most,” wrote Mrinank Sharma, an AI safety researcher, in a publicly-posted resignation letter from Anthropic last week. He did not refer to a specific event that led him to resign, but warned that, “our wisdom must grow in equal measure to our capacity to affect the world, lest we face the consequences.”

Katherine Elkins, an AI safety investigator for the National Institute of Standards and Technology, says she hopes she’s wrong about some of the risks she sees, like an AI chatbot potentially using someone’s data to manipulate them. But until she’s sure, she wants safety to remain an urgent priority


Subject: I Verified My LinkedIn Identity. Here’s What I Actually Handed Over.
Source: THE LOCAL STACK via Brian Krebs
https://newsie.social/deck/@[email protected]/116103192901927021

If you’re on LinkedIn and are thinking about verifying your account with them, maybe read this first. It walks through LinkedIn’s privacy disclosure to identify 17 companies that may receive and process the data you submit, including name, passport photo, selfie, facial geometry, NFC data chip, national ID #, DoB, email, phone number, address, IP address, device type, MAC address, language, geolocation etc. Unsurprisingly, it seems the biggest recipients are US-based AI companies. https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/
Posted in: AI, Cybercrime, Cybersecurity, E-Government, Privacy, Social Media, Technology Trends