Cell-site simulators, which mimic cell towers, were used to locate a student protestor (and could collect info from anyone standing nearby).
Read the full story: wired.com/story/feds-got-war…
Journalist Brian Krebs found a dark web site selling millions of US and Canadian drivers' license scans and confirmed their authenticity with nine people. The site vanished after his report, and the source of the data hasn't been established.
Full story: reut.rs/3VoCsdJ
A former AT&T retail worker got 16 months in federal prison for SIM swap attacks. Accomplices impersonated victims in person, he moved their numbers, and the group used the intercepted 2FA codes to reach victims' bank accounts, intending losses of $600K.
Read the full story: bit.ly/4ydTuc5
An investigation looked inside data broker Acxiom's files on consumers. It found predictions in 3,000+ categories, from BMI percentile to mammogram likelihood, and 100+ named buyers, including GEICO, JPMorgan, GM, and T-Mobile.
🔗 Read the full story: bit.ly/4hAqp5x
Cape's Ruddy Wang joined the Easy Prey Podcast to talk mobile privacy and tracking: what metadata your phone leaks, how IMSI/IMEI identifiers work, how signaling attacks happen, MNOs vs. MVNOs, and practical steps to protect yourself.
Full episode: youtube.com/watch?v=hlJKHIA3…
If you already have an account with Cape, you can now port-in a phone number to replace your current primary number into your existing account, without losing your referrals or any other settings.
See how here:
cape.co/port-in
Cell-site simulators are seeing new adoption among US police. DC Metro PD, NYPD, and Texas State Police have all signed contracts with Israeli firm Cognyte in the past year. EFF has tracked 80+ departments using this tech nationwide.
Read the full story: bit.ly/4qXam4Y
Comcast's new Wi-Fi Motion feature turns newer Xfinity routers into home motion sensors. Enabling it means Comcast can share the data it generates with third parties, without notifying you, for law enforcement requests, subpoenas, or legal disputes.
Full story: bit.ly/46wcXcy
Cape CEO @JohnDoyleCape tells Cyberscoop why we joined the top tech infrastructure providers in calling out the risk of legacy systems: “It was already failing us in telecom–critical infrastructure that’s been breached time and again with serious consequences for both our military and regular people.”
🔗 Read the full article: cyberscoop.com/ai-cyber-defe…
Cape joins OpenAI and other tech infrastructure providers in calling for greater defense against AI attacks: nytimes.com/2026/08/27/techn…
Telecom is perhaps the critical infrastructure that is most mired in legacy systems. Status quo security has exposed us to unacceptable risk before, and is digital suicide in the age of AI. Without collective action toward innovative cyber defense, the consequences will only get worse.
Over the last year, we donated the 1st month of each Cape subscription by GrapheneOS users to GrapheneOS to help fund their independent development. To date, we've donated $89,790.19.
Over the next year, we're donating $100,000 to GrapheneOS.
Read more: bit.ly/4xU1nU7
A Washington judge ruled T-Mobile violated the state's data breach notification law 722,000+ times, tied to its 2021 breach. The violation isn't the breach itself: the text notifications sent to affected customers didn't meet the state's legal requirements.
Full story: bit.ly/4hB7DLP
A security researcher walks through a real SIM swap attempt against their own account: the swap happened days before the follow-up call ever came, disguised as a routine customer service check-in. Only a passcode stood between the attacker and full takeover.
🔗 Full story: bit.ly/4wBMncD
T-Mobile is expanding its T-Life customer profiles, pulling in device, network, app, and location data, some of it collected automatically at the account level even if you never open the app. Opting out means hunting through several separate settings.
Read the full story: tek.io/4pp21Gk
An Israeli surveillance firm is selling $1M+ "spy vans" to US police departments. Built into ordinary-looking SUVs, they force every phone in range to connect to a fake tower and hand over location + device data.
Read more: cybernews.com/privacy/us-pol…
We had @trailofbits independently audit our Disappearing Call Logs feature, where our internal systems delete CDRs after 24hrs instead of the months-to-years telecoms usually keep them.
Here are their findings:
✅ CDRs deleted within our retention policy
✅ Only per-subscriber data kept: daily usage totals, deleted within 60 days
Read the full attestation: cape.co/blog/disappearing-ca…
#Cape CEO @JohnDoyleCape sat down with @foundersexplain to break down all the ways your phone is tracking you, and what you can actually do about it.
NEW EPISODE: Cape founder John Doyle explains why your phone is way less secure than you think.
Watch the whole thing here: youtube.com/watch?v=frS2cVSD…
Cape retweeted
Commercial cellular is an integrated part of modern warfare, and Cape is building features to make it mission ready, rather than try to put the toothpaste back in the tube by banning cell phones.
I wrote a bit about this for DefenseScoop: defensescoop.com/2026/07/30/…




