Supermarkets across Europe are facing another wave of cyberattacks, just weeks after a similar incident, bringing down their internet-enabled refrigerators and risking the safety of food.
Trezor say they've received a report of a hardware implant in one of their devices purchased from CrytpoBilis, the same reseller that sold implanted Ledger wallets previously.
The CEO of Reddit announced that the site will be moving to a "primarily logged-in experience."
Japan was hit with a lot of data breaches this week, but the real headline-maker was DHS.
With the release of iOS 27.2, Apple has introduced the option to submit a selfie for age estimation as an option to comply with age verification laws in certain regions.
systemd, the system and service manager used by many modern Linux operating systems, shipped support for writing programs in Rust.
This week's data breaches featured a lot of big, well known names from fast food and gaming to schools and government agencies.
A vulnerability in the secure messenger Signal allows an attacker to cause a call to not properly hang up when you hang up on your end, allowing audio and possibly video to continue being transmitted.
The PHP Foundation released a patch for two severe remote code execution (RCE) vulnerabilities, along with the recommendation to update immediately.
Researchers at Bitdefender discovered a malicious Android system application shipped by default in thousands of cheaper Android phones in more than 150 countries.
A user on a blog post claims to have been sent a leaked Cellebrite document marked "confidential" explaining their new capabilities, including exfiltrating data from iPhones using a dedicated device from a range of 8 meters.
Users reported a bug in their Meta Ray-Ban smart glasses that was causing them to record their conversations without their permission, even when the setting to record without using the trigger phrase "Hey, Meta."
It was a light week as far as data breaches, but there were still some unfortunate exposures.
CitizenLab confirmed the first publicly confirmed instance of mercenary spyware delivered via online targeted ads, dubbing it "AdFection."
The cryptocurrency wallet maker Ledger has confirmed that some devices sold through the reseller CryptoBilis were implanted with a spy chip that would steal users' seed phrase and drain their wallets.
Hackers at the Pwn2Own Ireland hacking competition were able to chain together zero-day exploits and already known vulnerabilities to exploit the Google Pixel 10, the Samsung Galaxy S26, and OpenAI's Codex.
Google announced in a blog post a new feature to keep local AI isolated from the rest of your device, based around virtual machines and hardware isolation, which they're calling "AI seal."
This week saw a rather surprising hack from UK fashion retailer ASOS, as well as multiple breaches from organizations in Denmark.
This October 8th, nonprofits of every size are asking their communities to make their DAF gifts count today, and we hope Privacy Guides is on your list.
Attackers were able to compromise three top-level domain registries and mint TLS certificates for Google and other large organizations, allowing them to impersonate legitimate domains.
Apple released a blog post on their Developer website announcing that they plan on tightening security around the "Full Disk Access" permission on macOS in light of AI agents misusing it and putting user data at risk.