Former Signal developers have released Encrypted Spaces, an open-source system designed to enable private collaboration applications with enterprise-grade features while protecting user data from surveillance.
Encrypted Spaces provides a technical foundation for building messaging and productivity tools comparable to Slack, Discord, and Google Docs—but with end-to-end encryption built in.
The project addresses a gap in the current app ecosystem. Most feature-rich collaboration platforms operate on centralized servers, creating privacy vulnerabilities. Encrypted Spaces offers developers infrastructure to create complex applications without exposing user communications or data.
As an open-source initiative, the system allows independent developers and organizations to build their own encrypted collaboration tools. The framework handles encryption protocols and secure data handling, reducing barriers to creating privacy-focused alternatives to mainstream platforms.
The release reflects growing demand for workplace tools that don't depend on centralized corporate servers for security. Organizations increasingly seek applications that prevent service providers—and potential bad actors—from accessing sensitive communications and shared documents.
Developers can access Encrypted Spaces to prototype new applications or integrate the technology into existing projects.
WordPress disclosed an unauthenticated path traversal vulnerability that could lead to conditional remote code execution. The issue affects WordPress core and has been documented in an official security advisory.
Security researchers have demonstrated an attack allowing hackers with privileged access to register fake MFA providers and harvest user passwords during login. The vulnerability exploits the authentication process itself.
GrapheneOS, a privacy-focused Android fork, is on track to ship preinstalled on commercial devices within three years. The project has gained significant momentum in developer circles.
A Chinese-speaking threat actor has exploited vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to compromise 996 devices and steal over 18,500 database records from government systems.