Data Breach Roundup (Sep 25 - Oct 1, 2026)
The US government has once again been breached, as well as a Japanese car-sharing app and a vibe-coding app platform.
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Leaked Video Shows That Police Can Bypass iPhones' Automatic Reboot Feature
According to 404 Media, a company that makes devices to hack phones claims they can bypass iOS's automatic reboot feature and allow police to more easily access data on iPhones.
German Police Are Using Linked Devices to Read Messages from Messaging Apps Without Cracking the Encryption
A document by Netzpolitik reveals that German police are sneakily abusing the linked devices feature in messengers to access the messages of suspects using encrypted messengers like Signal without needing to crack the encryption.
Highly Sensitive Data of 3 Million People in the Pentagon's System Accessed by "Unauthorized Users"
The Pentagon sent out letters to affected individuals explaining that their Defense Manpower Data Center (DMDC) was accessed by "unauthorized users," exposing the highly sensitive personal data of millions of military personnel.
New Attack Can Track You Across Operating Systems Without Elevated Privileges
Researchers at the Graz University of Technology Austria demonstrated a new attack that can track you via file change events "on all systems," allowing for various data leaks.
Meta Promises to Upgrade Ray Ban Smart Glasses with "Private Processing"
Meta announced in a blog post that its notorious smart glasses will soon use its Private Processing to protect your data as it's being processed in the cloud.
New Technique Discovered for Breaking RSA Faster Than Ever Before
Researchers have demonstrated a way to break RSA encryption faster than before, allowing them to break (admittedly already deprecated) 1024-bit RSA in just five months on classical computers in an academic CPU cluster.
Critical Tor Vulnerabilities Patched Across All Tor Components From the "LLM Report Firehose"
Tor has released updates for "all components" of Tor that include severe vulnerabilities and bugs from the "LLM report firehose" and recommends "upgrading as soon as possible."
Data Breach Roundup (Sep 18 - 24, 2026)
This week's big story is a breach of the FBI exposing all employees and applicants.
Discord Rolls Out Revised Age Verification, Promises Privacy Improvements Vs Previous Implementation
Discord is rolling out a revised version of their age verification system, promising privacy improvements over the previous implementation.
FBI Hacked, Sensitive Info on "Almost All FBI Agents" Stolen
The notorious hacker group ShinyHunters claims they breached the FBI's systems on Monday night, accessing the personal data of "almost all FBI agents/employees."
Meta's Muse AI Assistant Vulnerable to Hijacking Via Undocumented Setting
macOS security researcher Patrick Wardle discovered a flaw in Meta's new Muse AI assistant that an attacker can use to turn it into "the ultimate backdoor."
Data Breach Roundup (Sep 11 - 17, 2026)
Revolut made headlines this week, but they weren't the only organization breached (as usual).
UK Rolls Out Passkeys for Millions of Citizens
The UK is rolling out passkeys across GOV.UK One Login to provide more than 23 million people with a more secure way to log in.
Signal Enables Phone Number-less Registration in Beta
Signal has officially announced signups without phone numbers on their community forum for the Android 8.28 beta version of the app.
X's Encrypted Messenger, X Chat, Disappears From the App Store and the Google Play Store
X Chat, X's dedicated end-to-end encrypted messaging app, has disappeared from both Apple's App Store and the Google Play Store.
Cops Search Flock Database for Reasons Such as "LMAO," "LOL," and Random Keyboard Mashing
An investigation by the EFF found that cops treat mass surveillance as a joke, typing reasons for searches such as "LMAO," "LOL," and other non sequiturs or keyboard mashing in leu of an actual reason.
Revolut Gives Away Customer Passports, Selfies, and Transaction Histories to a Fake Government Request
Revolut disclosed customers' passports, selfies, and full transaction histories to a fake government employee over email.
Data Breach Roundup (Sep 4 - 10, 2026)
Two Trezor breaches, more healtcare companies, and more identification documents. This week was a mess.
Microsoft Shatters Another Record, Patching 973 Vulnerabilities in September
Microsoft patched a record 973 vulnerabilities this September, beating their other records from earlier this year.
Subscribe today!
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.