Data Breach Roundup (Jan 16 – Jan 22, 2026)
You have to admire the audacity of someone who posts on Instagram as "ihackthegovernment"
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Pwn2Own Automotive Shows How Insecure Our Vehicles Are
The first day of the Pwn2Own Automotive hacking competition has kicked off in Tokyo, Japan, with “a record 73 entries” showing that our vehicles are juicier targets than ever.
Mandiant Releases Rainbow Tables for Outdated Windows NTLMv1
Mandiant, a cybersecurity firm and subsidiary of Google, has released a rainbow table for the outdated Windows NTLMv1 authentication protocol, allowing attackers to crack administrator passwords in under 12 hours using consumer hardware that costs less than $600.
ChatGPT Announces Ads Coming for Free and Go Users
OpenAI has announced it’ll be incorporating ads into ChatGPT for Free and Go users.
Data Breach Roundup (Jan 9 – Jan 15, 2026)
A data breach forum having a breach, an investment platform sweeping theirs under the rug, major shipping company ignoring disclosures, and more.
Bluetooth Exploit Leaves Hundreds of Millions of Accessories Vulnerable to Full Takeover
Researchers have discovered a vulnerability in Google Fast Pair, dubbed WhisperPair, that leaves affected accessories open to being fully controlled by an attacker.
Windscribe launches privacy alliance with Addy.io, Notesnook, Kagi, and Ente
By offering discounts to current users, Windscribe wants you to invest your money into specialists, not bundled ecosystems.
Trail of Bits Exposes Vulnerabilities in Agentic Browsers, Compares to Cross-Site Scripting
Security research and consulting firm Trail of Bits analyzed agentic AI in browsers and found vulnerabilites that resemble cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.
Another private equity firm acquires Threema
Funded by private equity firm AFINUM Management since 2020, Threema has agreed to a secondary buyout from Comitis Capital.
Encrypted RCS Spotted in iOS 26.3 Beta
Mention of the long-awaited RCS end-to-end encryption (E2EE) support in the iOS 26.3 beta was spotted by Tiion-X83 on X via a carrier bundle setting that would let carriers enable E2EE for RCS messaging.
Instagram Password Reset Emails Sent Out to Users Unprompted
Instagram users were sent password reset emails recently that they didn’t request, but Instagram says there was no breach of their system.
Data Breach Roundup (Jan 2 – Jan 8, 2026)
From cryptocurrency to healthcare, 2026 seems set to bring us more of the same breaches.
Logitech macOS Software Fails, Leaving Mice and Keyboards Malfunctioning
Logitech’s G HUB and Logi Options+ software stopped working, leaving users who relied on it for managing their mice and keyboards high and dry.
Texas Man Rescues Daughter Using Phone's Location Feature
Illustrating the importance of threat models
Telegram Adds Passkey Support, Still Requires Phone Number
Telegram has added support for passkeys, a secure and convenient sign-in method, replacing SMS verification codes.
Multiple Vulnerabilities Found in GnuPG
Gnu Privacy Guard, a popular implementation of the OpenPGP standard, was found to have multiple vulnerabilities including modifying the plaintext shown to the user and modifying files on the user’s system.
Connectivity Standard Alliance Launches Aliro Standard for Smart Locks
The Connectivity Standards Alliance has launched their new standard for secure, interoperable smart locks called Aliro.
Data Breach Roundup (Dec 26, 2025 – Jan 1, 2026)
WIRED, crypto, and 2026's first candidate for "cascading data breach"
AI Data Centers May Start Using Radio Instead of Copper
AI data centers are running up against the physical limits of copper for transmitting data, so radio is being considered as a replacement.
Data Breach Roundup (Dec 19 – Dec 25, 2025)
The Aflac breach affected 22.6 million customers. And this was a slow week.
Cloudflare Explains Plan for Resilience After Multiple Outages
Following multiple outages, Cloudflare outlines their plan to improve resilience of their network, titled “Code Orange: Fail Small.”