India’s New SIM-Binding Rule Could Cut Off WhatsApp, Telegram, and Signal From Unregistered Devices
A new Indian telecom rule set to take effect January 1, 2027 would require messaging accounts on WhatsApp, Telegram, Signal, and several other platforms to stay continuously tied...
How a ‘123456’ Password Exposed Nearly 9 Million Danes’ National ID Records
A trusted Danish IT vendor reportedly protected administrator access to the national CPR population register with the password "123456," letting an attacker harvest records tied to roughly 8.8...
Ireland Hits Google With a €403 Million Fine Over Years of Location-Data Practices
Ireland's Data Protection Commission has fined Google €403 million after finding that three of its location-related features failed to meet GDPR's requirements on lawfulness, fairness, transparency, and data...
865,000 ‘No-Logs’ VPN Users Exposed After SplitVPN Breach Reveals Hidden Connection Records
A breach at Russian VPN provider SplitVPN, formerly NotVPN, has exposed the records of roughly 865,000 users despite the service's long-standing 'no logs' promise. The leaked database reportedly...
Apple’s Unpatched ‘Hide My Email’ Flaw Has Exposed User Identities for Over a Year
An unpatched vulnerability in Apple's Hide My Email feature can expose users' real email addresses behind their iCloud+ anonymization aliases, researcher Tyler Murphy and 404 Media have confirmed....
Instagram Logic Bug Exposed Unredacted Emails and Phone Numbers for Any Account — Including Mark Zuckerberg’s
A critical logic flaw in Instagram's web-based password reset flow exposed fully unredacted email addresses and phone numbers for any account by username, including high-profile accounts. Meta patched...
Android 16 ‘Tiny UDP Cannon’ Flaw Lets Malicious Apps Bypass VPN and Expose Your Real IP Address
A newly disclosed Android 16 design flaw dubbed 'Tiny UDP Cannon' allows any app with basic permissions to bypass VPN lockdown mode and reveal the device's real IP...
Apple Patches iOS Notification Flaw (CVE-2026-28950) That Let the FBI Read Deleted Signal Messages
Apple has shipped iOS 26.4.2 to fix CVE-2026-28950, a notification-logging flaw that let forensic investigators recover Signal message previews long after the app was uninstalled. Signal has praised...