Data Breach Roundup (Nov 6 - 12, 2026)
This week had a whopping 10 breaches (and 2 updates to previous breaches).
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
GrapheneOS Announces Pixel 11 Support Can Be Completed Now
GrapheneOS announced on their Bluesky that Android 17 QPR2 is releasing with MTE support for Pixel 11 phones, and they've confirmed it works with GrapheneOS.
Claude Code Leaks Secrets and Passwords in Public GitHub Repositories
Researchers at Apiiro found that Claude Code had leaked 2,539 secrets in 1,994 public GitHub repositories including database passwords, cloud keys, API tokens, SSH root logins.
ChatGPT Lockdown Mode Bypass Could Leak Your Chat History Without Your Knowledge
Security researchers at Check Point Research discovered a vulnerability in ChatGPT that allows an attacker to bypass the heightened security of Lockdown Mode and leak your entire chat history with zero user interaction.
Microsoft Paint Vulnerability Could Allow Attackers to Take Over Your Computer
A high-severity vulnerability in Microsoft Paint could allow an attacker to run malicious code on your machine over a network.
Data Breach Roundup (Oct 30 - Nov 5, 2026)
This week's breaches include Applebee's, Chainalysis, Harvard, and more.
Lockdown Mode Bypassed in New iPhone Exploit
Security researchers at Calif posted on X that they were able to exploit an iPhone 18 Pro despite Lockdown Mode, a setting that's designed to make your device more resistant to exploits.
European Supermarkets Face Another Wave of Refrigerator Cyberattacks
Supermarkets across Europe are facing another wave of cyberattacks, just weeks after a similar incident, bringing down their internet-enabled refrigerators and risking the safety of food.
Trezor Receives Report About an Implant in One of Their Wallets
Trezor say they've received a report of a hardware implant in one of their devices purchased from CrytpoBilis, the same reseller that sold implanted Ledger wallets previously.
Reddit Announces Migration to a "Primarily Logged-In Experience"
The CEO of Reddit announced that the site will be moving to a "primarily logged-in experience."
Data Breach Roundup (Oct 23 - Oct 29, 2026)
Japan was hit with a lot of data breaches this week, but the real headline-maker was DHS.
Apple Introduces Selfie Age Verification in iOS 27.2
With the release of iOS 27.2, Apple has introduced the option to submit a selfie for age estimation as an option to comply with age verification laws in certain regions.
systemd Adds Rust Program Support
systemd, the system and service manager used by many modern Linux operating systems, shipped support for writing programs in Rust.
Data Breach Roundup (Oct 16 - 22, 2026)
This week's data breaches featured a lot of big, well known names from fast food and gaming to schools and government agencies.
Signal Vulnerability Allows Audio and Possibly Video to Continue After Hanging Up
A vulnerability in the secure messenger Signal allows an attacker to cause a call to not properly hang up when you hang up on your end, allowing audio and possibly video to continue being transmitted.
Websites Down Due to Critical Remote Code Execution PHP Security Vulnerabilities
The PHP Foundation released a patch for two severe remote code execution (RCE) vulnerabilities, along with the recommendation to update immediately.
Thousand of Android Phones Shipped With Malware
Researchers at Bitdefender discovered a malicious Android system application shipped by default in thousands of cheaper Android phones in more than 150 countries.
Leaked Document Suggests Cellebrite Can Wirelessly Exploit iPhones
A user on a blog post claims to have been sent a leaked Cellebrite document marked "confidential" explaining their new capabilities, including exfiltrating data from iPhones using a dedicated device from a range of 8 meters.
Meta Fixes Bug In Smart Glasses Causing Them to Record Conversations Without User Consent
Users reported a bug in their Meta Ray-Ban smart glasses that was causing them to record their conversations without their permission, even when the setting to record without using the trigger phrase "Hey, Meta."
Data Breach Roundup (Oct 9 - 15, 2026)
It was a light week as far as data breaches, but there were still some unfortunate exposures.
Subscribe today!
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.