Plain English Words Used to Hide Windows Malware
In a currently active malware campaign, hackers are now hiding Windows malware inside lists of plain English words.
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Data Breach Roundup (August 14 - 20, 2026)
The CEVA Logistics breach continues to impact companies, a people search site left their databases exposed, and a couple small updates on the scope of previously-disclosed breaches.
Windows Copilot Hacks Itself to Steal Your Data in a Single Click
CoSnitch is a one-click vulnerability discovered by researchers at Varonis Threat Labs and co-discovered by Copilot itself, that allows an attacker to exfiltrate sensitive data using Copilot's access to your computer.
Android Will Allow You to Lock Any App Behind Your Fingerprint or PIN
Android 17 QPR2 Beta 3 adds a native App Lock feature allowing you to lock any app you want behind your biometrics or phone PIN.
Meta Files Patent for Facial Recognition, Automatic Recording of People
Meta filed for a patent that includes a "memory recall" system that appears to detect people via facial recognition and record them automatically, and show you a highlights real later.
Microsoft Making Passkeys the Default for Microsoft Accounts and Phasing Out SMS Authentication
Microsoft says they'll soon stop sending SMS codes for authentication for personal Microsoft accounts and will transition to "passwordless accounts, passkeys, and verified email."
Data Breach Roundup (August 7 - 13, 2026)
A spike in attacks on shipping and logistics companies is likely to result in a lot of exposed data.
Google Announced the Pixel 11 With Their New Titan M3 "Quantum-Safe" Secure Boot
Google announced its new Pixel 11 series of phones that bring with them a big security boost in the form of the new Titan M3 security chip that supports post-quantum cryptography for secure boot.
Nightmare-Eclipse Releases Yet Another Devastating Windows 0-day Vulnerability
The prolific and controversial security researcher who goes by Nightmare-Eclipse released a ninth 0-day vulnerability that allows an attacker to gain SYSTEM level privileges.
Severe Zoom Vulnerabilities Allow Malicious Meeting Participants to Take Over Your Device
Researchers identified critical vulnerabilities in Zoom that allows a full device takeover with no user interaction, and present on all devices.
California City Declares State of Emergency After Cyberattack
Suisun City's public safety systems - including 911 - were shut down Friday morning.
Signal is Looking at Adding an Option to Sign Up Without a Phone Number
References in Signal's source code point to a new feature to sign up without giving a phone number, potentially requiring a one-time payment.
18-Year-Old Linux Kernel Bug Allows Full System Takeover
Researchers at Tencent Zhuque Lab uncovered an 18-year-old vulnerability in the Linux kernel that can escape containers and gain full root privileges on the host system.
Data Breach Roundup (July 31 - August 6, 2026)
This week featured only two data breaches from the UK and from Switzerland. Both affected federal governments, however.
Spectre is Back: CPU Mitigations Found to Be Ineffective
Researchers found a way to bypass the latest Spectre mitigations and exploit AMD and Intel processors to leak secrets like passwords and encryption keys.
North Korean Hackers Breached Over 1,600 Organizations Worldwide
New research shows the shocking extent of North Korea's state sponsored hacking team.
Data Breach Roundup (July 24 - 30, 2026)
People's AI chats have once more been exposed online, multiple updates to previously reported data breaches, and more.
Apple's Private Relay Leaks Your Real IP Address in Safari
App developer/security researchers at Mysk discovered several leaks in Apple's Private Relay and all other browser proxies that allow websites to see your real IP address.
WhatsApp is Testing Age Verification
The Tech Trace reports that a WhatsApp representative has confirmed the messenger is testing out new age verification on some user accounts to comply with a new law in India.
Multiple Flaws in Google's Synced Passkey Implementation Allow Attackers to Take Over Your Accounts
Unit 42 released new research showing that in Google's synced passkey ecosystem, it's possible for an attacker to take over accounts protected by synced passkeys without user interaction.
Subscribe today!
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.