Apple has announced that end-to-end encryption for RCS messaging between iPhone and Android devices will be included in iOS 26.5. The feature has been in testing since the beta of iOS 26.4 and is currently available in the release candidate of iOS 26.5. This release candidate is the version Apple plans to release publicly, assuming…
Zoom has announced a partnership with Tools for Humanity to bring World ID Deep Face into Zoom Meetings. The goal is to enable real-time verification that participants are human rather than AI-generated. The integration is mainly targeted at enterprises and regulated industries such as financial services, healthcare, and executive communications. During the process, no personal…
Hackers accessed a secondary API on the CPUID website between April 9 at 15:00 UTC and April 10 at around 10:00 UTC. During this time, the site served malicious download links instead of legitimate installers for several popular hardware monitoring utilities. CPUID has confirmed the breach and says the compromised API has been fixed. They…
A phishing campaign is targeting residents across multiple US states with fake traffic violation notices delivered by text message, using embedded QR codes to direct victims to sites that steal personal and financial information. The campaign has been reported in New York, California, North Carolina, Illinois, Virginia, Texas, Connecticut, and New Jersey. The texts include…
Google has taken down the Chrome extension “Save Image as Type” after security researchers uncovered it had been hijacked and altered to redirect user traffic for affiliate commission fraud. The extension had over a million users when it was removed. The compromise was carried out by a group called Karma, which reportedly acquired the extension…
We have seen our fair share of malicious Chrome extensions in the past 17 or so years since Google released the initial version of its browser. From fake VPN extensions and outright malicious extensions to sophisticated session replay malware. This time, more than 260,000 Chrome users unknowingly installed a browser extension labeled as a helpful AI assistant. According to researchers…
Microsoft has patched a high-severity security vulnerability in Windows 11 Notepad that allowed specially crafted Markdown links to launch local or remote programs – without triggering standard Windows security warnings. The flaw tracked as CVE-2026-20841 was fixed as part of the February 2026 Patch Tuesday updates, which we release monthly. While exploitation required a user to open…
Betterment, a financial app, sent a sketchy-looking notification on Friday asking users to send $10,000 to Bitcoin and Ethereum crypto wallets and promising to “triple your crypto,” according to a thread on Reddit. The Betterment account says in an X thread that this was an “unauthorized message” that was sent via a “third-party system.” Here’s…
China has enacted a major revision of its Cybersecurity Law, effective January 1, 2026. The amendments mark the most significant shift since the law’s original introduction in 2017 and materially change how companies must handle cyber incidents, regulatory reporting, and compliance exposure. The updated framework places speed and accountability at the center of enforcement. Incident…
Two former employees at cybersecurity firms – one of whom was a ransomware negotiator – have pleaded guilty to carrying out a series of ransomware attacks in 2023. The Department of Justice announced the guilty pleas on Tuesday, saying 40-year-old Ryan Goldberg and 36-year-old Kevin Martin extorted $1.2 million in Bitcoin from a medical device…
