Society ❯ Digital Privacy

User Awareness

Cyber Threats Security Practices Data Protection Online Safety Phishing Scams Data Security Phishing Data Sharing Phishing Risks Online Security

Twitch Extension Routed 31,000 Users' OAuth Tokens Through Russian Proxy Network

Exposed bearer tokens let anyone act on accounts without a password; users must revoke Twitch sessions to invalidate them.

Microsoft Says Russian-Linked Hackers Are Hijacking Hotel and Airport Wi‑Fi to Steal Logins

SparkKitty Malware Scans Photos to Steal Crypto Seed Phrases

KDDI Says Up to 14.2 Million Email Accounts May Be Exposed in Major Breach

Ultrahuman Confirms March Analytics Breach Exposed Small Share of Users’ Wellness Data

WhatsApp Adds Per-Chat Advanced Chat Privacy to Limit Meta AI in Threads

Crunchyroll Investigates Alleged Breach Linked to Support Vendor

FBI, CISA Tie Russian Intelligence-Linked Hackers to Global Messaging App Account Hijacks

Europe Warns of State-Backed Push to Hijack Signal and WhatsApp Accounts

Netherlands Blames Russian State for Global Phishing That Hijacks Signal and WhatsApp Accounts

Public Google API Keys Found to Unlock Gemini as Google Rolls Out Blocks

Flickr Probes Potential Data Exposure Linked to Third-Party Email Vendor

German Agencies Warn of Suspected State-Linked Signal Phishing Targeting Officials and Journalists

Researchers Find 16 Malicious ‘ChatGPT’ Extensions Stealing Session Tokens

149 Million Stolen Logins Found on Open Server, Then Taken Offline

Firehound Flags 196 iOS Apps Leaking User Data, With AI Chat App Exposing 406 Million Records

Google Rolls Out Gemini-Powered Gmail and Lets Users Change Primary Addresses

Instagram Data for 17 Million Users Circulates on Darknet as Meta Denies Breach and Fixes Reset-Email Bug

Instagram Data Dump Tied to 17.5 Million Accounts as Meta Denies a Breach

ShinyHunters Extorts Pornhub After Mixpanel Breach Exposes 200 Million Premium Records