Data Breach Roundup (July 17 - 23, 2026)
After last week's lack of news, the breaches are back with a vengeance.
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
macOS Vulnerability Allows Attackers to Replace Any App With Malicious Code
Researchers Talal Haj Bakry and Tommy Mysk discovered a vulnerability in macOS that allows an attacker to replace already installed apps with malicious versions that look indistinguishable from the real app.
Gemini is Allowing Attackers to Bypass the Android Lock Screen
The Register received multiple reports of people being able to access features such as sending SMS or WhatsApp messages from the lock screen when Gemini is enabled.
Apple Finally Fixes Hide My Email Vulnerability After a Year
404 Media says Apple has fixed a vulnerability in HideMyEmail that would allow anyone to find your real email address after knowing about the issue for over a year.
Malware Stored in SVG Images Used to Hack Developers' Machines
According to Cyber Security News, North Korean hackers are targeting developers with fake job interviews containing malicious code stored in SVG images.
LG Monitors Caught Installing Adware and App With Access to "All System Resources" Without Asking
Gamers Nexus tested an LG monitor and found it automatically installs an LG app on a Windows system without asking permission, which has access to "All System Resources" and includes McAfee ads.
California Age Checking Law Walks Back Some of Planned Expansion
California AB 1856 has had its planned expansion of age checking to browsers and websites removed, leaving just closed-source operating systems on the hook for age checking.
Secure Boot Easily Bypassable Using Decade-Old Vulnerabilities
Researchers at ESET discovered that secure boot on Linux and Windows could be bypassed using decade-old UEFI shim bootloaders still signed by Microsoft.
The Next Version of Meta's AI Glasses Will Activate the Camera Without the Camera Indicator Light
The next model of Meta's smart AI glasses will reportedly activate the onboard camera for AI features without notifying anyone via the camera indicator LED.
OpenAI's AI Atlas Browser Discontinued After Less Than a Year
OpenAI's James Sun announced that their agentic AI browser, Atlas, launched just last October, will be discontinued.
Apple Patches App Privacy Issue, Many More Left Unaddressed for Now
Apple fixed an app fingerprinting issue in iOS 27 Developer Beta 3, an early preview of the next major version of iOS, making it a bit harder for apps to fingerprint you.
15-Year-Old Linux Kernel Vulnerability Allows Full System Takeover
Researchers at Nebula Security discovered a privilege escalation bug in the Linux kernel that's been lying dormant for over 15 years that affects every Linux distribution before version 7.1.
Google and FBI Shut Down Malicious Residential Proxy Network Installed in Millions of Smart Devices
Google, Lumen, and the FBI have worked in lockstep to disrupt the massive malicious residential proxy network NetNut, also known as Popa, that has its claws in millions of devices.
New Phishing Technique Steals Account Tokens Through Legitimate Microsoft Login Page
Attackers are exploiting a new phishing technique to get access to your account from a legitimate Microsoft login page, according to Kaspersky.
Data Breach Roundup (June 26 - July 2, 2026)
ShinyHunters continue to run amock in the latest cascading data breach.
First Documented Ransomware Attack Ran Exclusively by Agentic AI Discovered
The Sysdig Threat Research Team has discovered what they believe to be the first ever ransomware attack carried out fully end-to-end by agentic AI.
Brave Adds Containers to Separate Your Browsing
Brave has released a new containers feature to allow you to isolate your browsing between different identities.
Google Wants to Scan Your Hand for its reCAPTCHA
Google's reCAPTCHA service will start asking for camera permission to scan your hand in different positions to determine if you're human.
Subscribe today!
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.