Data Breach Roundup (Feb 27 – Mar 5, 2026)
A lighter than normal week, but still we saw LexisNexis, a global paint maker, and more get hit, plus an update to the UH Cancer Center's breach.
Privacy & Security News
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
Coruna Malware Targeting iOS Spotted by Google Threat Intelligence
Google Threat Intelligence Group has identified a “powerful exploit kit” targeting iPhones running iOS 13.0 to 17.2.1 used by a surveillance company and crypto-stealing sites.
New JVG Quantum Decryption Algorithm Could Pose Risk to Classical Encryption
A new quantum decryption algorithm called JVG could significantly reduce the amount of resources needed to decrypt classical RSA encryption that we’ve been relying on for decades.
TikTok Won’t Add E2EE for User Safety
TikTok told the BBC that it will not be rolling out end-to-end encrypted DMs, citing user safety as a concern.
Meta Smart Glasses Sending Sensitive Recordings to Workers to Annotate
According to a report by SVD, Meta’s Ray-Ban AI Smart Glasses have been sending sensitive recordings of people, including “bank details, sex and naked people,” to outsourced companies to review and annotate.
“ClawJacked” Vulnerability Allows Malicious Websites to Take Control of OpenClaw
Oasis Security discovered a vulnerability in the popular OpenClaw agentic AI software that allows websites to silently bruteforce access to a locally running instance and take it over.
Spyware Maker Sentenced to Prison
The founder, Tal Dilian, and three other executives of Intellexa, a collective of spyware makers responsible for what was dubbed “Greek Watergate” have been sentenced to eight years in prison.
Samsung Forced to Halt Data Collection in TVs in Texas Without “Express Consent”
Attorney General of Texas Ken Paxton secured an agreement with Samsung that “will ensure Samsung no longer collects Automated Content Recognition (“ACR”) data without consumers being fully informed and consenting prior to any information being collected.”
Threat Intelligence “Provenance” Could be the Solution to a Fractured Global Cybersecurity Landscape
Geopolitical tensions threaten cybersecurity research and sharing between countries, but research from Georgia Tech demonstrates a possible system of auditable provenance data to validate how threat intelligence was produced instead of trusting who produced it.
Android 17 Beta Introduces the Contact Picker and the Local Network Permission
Android 17 Beta 2 released, bringing with it the rumored Contacts Picker for selecting individual contacts and the Local Network Access permission for preventing apps from seeing other devices on your local network.
Burger King is Rolling Out AI in Employees’ Headsets to Track Their Friendliness
Burger King is testing out a new AI called Patty in 500 restaurants that will listen for keywords like “welcome,” “please” and “thank you” and in employees’ headsets and report to managers.
Data Breach Roundup (Feb 20 – Feb 26, 2026)
PayPal, the French bank registry, the Mexican tax authority, and more big names were hit this week.
Samsung Launches New “Privacy Display” to Protect Your Screen
Samsung recently made the new Galaxy S26 Ultra available for pre-order, which features a huge privacy improvement never seen before on a phone: a builtin, toggleable privacy screen that functions on a per-pixel level.
Notepad++’s New Update System is “Robust and Effectively Unexploitable”
Notepad++ has released a blog post describing the security enhancements they’ve made since the state-sponsored hack earlier this month, highlighting their new “double lock” update mechanism.
Firefox 148 Releases with Promised AI Killswitch Feature
Firefox version 148 has released, bringing with it the AI killswitch feature that was promised, allowing users to disable all AI features from a single switch.
Google Expands Quick Share’s AirDrop Support to Pixel 9 Series
Google is expanding support for Quick Share and AirDrop compatibility between Pixel 10 phones and iPhones to include Pixel 9 phones as well.
ChatGPT Adds Lockdown Mode for Protection Against Prompt Injection Attacks
ChatGPT has added Lockdown Mode, "an optional, advanced security setting designed for a small set of highly security-conscious users—such as executives or security teams at prominent organizations—who require increased protection against advanced threats."
Data Breach Roundup (Feb 13 – Feb 19, 2026)
A sex toy maker, a fintech giant, a pharmacy, a luxury brand, and more.
Apple Introduces End-to-End Encrypted RCS Messaging in the iOS 26.4 Beta
The long-awaited cross-platform end-to-end encrypted RCS messaging between Android and iOS users has finally begun its testing phase in the recently released beta for iOS 26.4.
Google's "Project Toscana" Will Upgrade Face Unlock
According to Android Authority, Google's secret Project Toscana is upgrading the face unlock on future Pixels and even Chromebooks.
Subscribe today!
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.