Data Breach Roundup (July 24 - 30, 2026)
People's AI chats have once more been exposed online, multiple updates to previously reported data breaches, and more.
Latest in News Briefs
Apple's Private Relay Leaks Your Real IP Address in Safari
App developer/security researchers at Mysk discovered several leaks in Apple's Private Relay and all other browser proxies that allow websites to see your real IP address.
WhatsApp is Testing Age Verification
The Tech Trace reports that a WhatsApp representative has confirmed the messenger is testing out new age verification on some user accounts to comply with a new law in India.
Multiple Flaws in Google's Synced Passkey Implementation Allow Attackers to Take Over Your Accounts
Unit 42 released new research showing that in Google's synced passkey ecosystem, it's possible for an attacker to take over accounts protected by synced passkeys without user interaction.
Nearly 1,400 Bitcoin Hacked from Coldcard Wallets
A flaw in Coinkite's Coldcard hardware wallet firmware cost victims millions of dollars, all of whom believed they were investing in state of the art security
CISA Releases Guidance Urging Water Treatment Facilities to Disconnect Equipment From the Internet
CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks.
New "Dynamic Patching" in Chrome Would Allow Updates Without Restarting
In a blog post, Google announced it is working on a system in Chrome to apply updates without needing to restart the browser in order to keep up with a mountain of patches.
Pokémon Stores Implementing Facial Recognition to Combat Scalpers
The Pokémon Company announced that they've implemented mandatory facial recognition in Japanese Pokémon stores to combat card scalpers.
Over 100 Vulnerabilities Found in IRS Contractor Handling Americans' Tax Information
The Treasury Inspector General for Tax Administration (TIGTA) found over 100 vulnerabilities in a third-party contractor the IRS was using to digitize tax documents.
Surveillance Cameras Can Now Be Retrofitted to Track Your Wireless Device Fingerprint
Flock-style license plate reader vendor Leonardo announced a new system called SignalTrace that can fingerprint your wireless devices while you drive by and track you around without needing to see your license plate.
Data Breach Roundup (July 17 - 23, 2026)
After last week's lack of news, the breaches are back with a vengeance.
macOS Vulnerability Allows Attackers to Replace Any App With Malicious Code
Researchers Talal Haj Bakry and Tommy Mysk discovered a vulnerability in macOS that allows an attacker to replace already installed apps with malicious versions that look indistinguishable from the real app.
Gemini is Allowing Attackers to Bypass the Android Lock Screen
The Register received multiple reports of people being able to access features such as sending SMS or WhatsApp messages from the lock screen when Gemini is enabled.
Apple Finally Fixes Hide My Email Vulnerability After a Year
404 Media says Apple has fixed a vulnerability in HideMyEmail that would allow anyone to find your real email address after knowing about the issue for over a year.
Malware Stored in SVG Images Used to Hack Developers' Machines
According to Cyber Security News, North Korean hackers are targeting developers with fake job interviews containing malicious code stored in SVG images.
LG Monitors Caught Installing Adware and App With Access to "All System Resources" Without Asking
Gamers Nexus tested an LG monitor and found it automatically installs an LG app on a Windows system without asking permission, which has access to "All System Resources" and includes McAfee ads.
California Age Checking Law Walks Back Some of Planned Expansion
California AB 1856 has had its planned expansion of age checking to browsers and websites removed, leaving just closed-source operating systems on the hook for age checking.
Secure Boot Easily Bypassable Using Decade-Old Vulnerabilities
Researchers at ESET discovered that secure boot on Linux and Windows could be bypassed using decade-old UEFI shim bootloaders still signed by Microsoft.
The Next Version of Meta's AI Glasses Will Activate the Camera Without the Camera Indicator Light
The next model of Meta's smart AI glasses will reportedly activate the onboard camera for AI features without notifying anyone via the camera indicator LED.
OpenAI's AI Atlas Browser Discontinued After Less Than a Year
OpenAI's James Sun announced that their agentic AI browser, Atlas, launched just last October, will be discontinued.