Urgent.News

What's breaking now, across thousands of outlets.

Tech

Your boss’s monitoring app didn’t just watch you — it shared your data to Facebook and a Russian search engine

Researchers logged 121 instances of nine bossware platforms sending worker data to outside companies, including Meta.

Your boss’s monitoring app didn’t just watch you — it shared your data to Facebook and a Russian search engine

Recent advancements in artificial intelligence and data science have allowed employers to create extensive data sets, or "dossiers," on their workers. These data sets can be used to punish employees or attempt to predict their behavior. According to a nonprofit helping workers organize, many employers have shared employee names, emails, and other personal data with hundreds of outside data brokers and technology companies without clearly disclosing the practice.

Vanderbilt University, Northeastern University, and UC Berkeley conducted an investigation, finding that nine popular monitoring platforms shared identifying worker data with external companies, including Facebook, Google, Microsoft, and the ad-tech firm AppLovin. Additionally, these platforms sent workers' online activity, IP addresses, device information, and browsing data to 145 third-party domains, including Yandex, a Russian search engine.

Data privacy experts and workers warn of the risks associated with employer surveillance, emphasizing the importance of workers teaming up to advocate for themselves. Unionization efforts have been attempted, but some employers track, rank, and score employees in ways that are not transparent to workers. Awareness of surveillance tools is growing, and some workers are questioning what personal information is being collected and how it's being used.

Written by urgent.news from Fortune's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at fortune.com →

More in Tech

One pull to wipe them all

Q Developer is a free extension that lets a coding agent read a project, propose changes, and run commands on The post One pull to wipe them all appeared first on The New Stack .

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking

TL;DR what: Google Threat Intelligence Group detailed three suspected Russian espionage clusters, UNC6293, UNC7005, and UNC5976, that phish authentication flows rather than passwords, using OAuth…

  • Three Russian espionage clusters targeting authentication flows, not just passwords
  • UNC6293, UNC7005, and UNC5976 clusters active since March 2026
  • Clusters manipulate OAuth consent, application-specific passwords, and WhatsApp device linking

Building a Streaming Pipeline: From a System Design Perspective

Say you're on vacation and you've just recorded a fairly large video of yourself skydiving for the first time, naturally, you'd want to send it to a friend or family member on the other side of the…

  • Video files undergo complex journey from recording to playback
  • System should enable easy upload, progress tracking, resume, and playback
  • Resumable uploads improve user experience and reduce server load

More from Sunday 23 August →