Thursday , June 5 2025
Logo of Apple, Google

US senator's letter
Governments spying on Apple, Google users through push notifications

Some governments have asked Apple and Google for the push notification records of their users in order to track down certain individuals. This information comes from U.S. Senator Ron Wyden. “Push notifications are alerts sent by phone apps to users’ smartphones,” Wyden said.

Senator Ron Wyden wrote a letter to the Department of Justice claiming that foreign officials are requesting data from Google and Apple. This letter exposes another way for governments to monitor smartphones.

CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

IBM has issued a security advisory for vulnerabilities in its QRadar Suite Software and Cloud Pak for Security platforms. These...
Read More
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

ALERT
Thousands of IP addresses compromised nationwide: CIRT warn

As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent...
Read More
ALERT  Thousands of IP addresses compromised nationwide: CIRT warn

New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

In March 2025, the Threatfabric mobile Threat Intelligence team identified Crocodilus, a new Android banking Trojan designed for device takeover....
Read More
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

Qualcomm has issued security patches for three zero-day vulnerabilities in the Adreno GPU driver, affecting many chipsets that are being...
Read More
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

Critical RCE Flaw Patched in Roundcube Webmail

Roundcube Webmail has fixed a critical security flaw that could enable remote code execution after authentication. Disclosed by security researcher...
Read More
Critical RCE Flaw Patched in Roundcube Webmail

Hacker claim Leak of Deloitte Source Code & GitHub Credentials

A hacker known as "303" claim to breach the company's systems and leaked sensitive internal data on a dark web...
Read More
Hacker claim Leak of Deloitte Source Code & GitHub Credentials

CISA Issued Guidance for SIEM and SOAR Implementation

CISA and ACSC issued new guidance this week on how to procure, implement, and maintain SIEM and SOAR platforms. SIEM...
Read More
CISA Issued Guidance for SIEM and SOAR Implementation

Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

The Qualys Threat Research Unit (TRU) found two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities....
Read More
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

Australia enacts mandatory ransomware payment reporting

New ransomware payment reporting rules take effect in Australia yesterday (May 30) for all organisations with an annual turnover of...
Read More
Australia enacts mandatory ransomware payment reporting

Why Govt Demands Foreign CCTV Firms to Submit Source Code?

Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious new security rules that require...
Read More
Why Govt Demands Foreign CCTV Firms to Submit Source Code?

Most apps use push notifications to inform smartphone users about new messages, news, or updates. These notifications can be sounds or visual signals that inform users about new emails or their team’s victory. What users may not know is that these notifications are usually sent through Google and Apple’s servers.

Wyden said that the two companies have special knowledge about the traffic between the apps and their users. This allows them to help the government monitor how users are using specific apps. Wyden asked the Department of Justice to change any policies that prevent public discussions about push notification spying.

In a statement, Apple said that Wyden’s letter gave them the opening they needed to share more details with the public about how governments monitored push notifications.

“In this case, the federal government prohibited us from sharing any information,” the company said in a statement. “Now that this method has become public we are updating our transparency reporting to detail these kinds of requests.”

Google said that it shared Wyden’s “commitment to keeping users informed about these requests.”

The Department of Justice chose not to comment on the push notification surveillance or any potential restrictions on Apple or Google discussing it.

Wyden received a letter mentioning a “tip” as the source of surveillance information. The letter did not provide more details about the tip, but a source familiar with the situation confirmed that both foreign and US government agencies have been requesting metadata from Apple and Google. This data is related to push notifications and is used to connect anonymous messaging app users to specific Apple or Google accounts.

The source didn’t say which foreign governments made the requests, but mentioned that they are democracies that support the United States.

The source said they did not know how long such information had been gathered in that way.

Users often overlook push notifications, but technologists have raised concerns about the challenges in deploying them without sharing data with Google or Apple.

French developer David Libeau is worried about users and developers not being aware of how apps send data through push notifications to big US tech companies. He called this a “privacy nightmare”.

Check Also

CCTV

Why Govt Demands Foreign CCTV Firms to Submit Source Code?

Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious …

Leave a Reply

Your email address will not be published. Required fields are marked *